NestedStack

class aws_cdk.NestedStack(scope, id, *, description=None, notification_arns=None, parameters=None, removal_policy=None, timeout=None)

Bases: Stack

A CloudFormation nested stack.

When you apply template changes to update a top-level stack, CloudFormation updates the top-level stack and initiates an update to its nested stacks. CloudFormation updates the resources of modified nested stacks, but does not update the resources of unmodified nested stacks.

Furthermore, this stack will not be treated as an independent deployment artifact (won’t be listed in “cdk list” or deployable through “cdk deploy”), but rather only synthesized as a template and uploaded as an asset to S3.

Cross references of resource attributes between the parent stack and the nested stack will automatically be translated to stack parameters and outputs.

ExampleMetadata:: infused

Example:

import aws_cdk as cdk
from aws_cdk.custom_resources import CustomResourceConfig
import aws_cdk.aws_s3_deployment as s3deploy


app = cdk.App()
stack = cdk.Stack(app, "Stack")
CustomResourceConfig.of(app).add_log_retention_lifetime(logs.RetentionDays.TEN_YEARS)

nested_stack_a = cdk.NestedStack(stack, "NestedStackA")
website_bucket_a = s3.Bucket(nested_stack_a, "WebsiteBucketA")
s3deploy.BucketDeployment(nested_stack_a, "s3deployA",
    sources=[s3deploy.Source.json_data("file.json", {"a": "b"})],
    destination_bucket=website_bucket_a,
    log_retention=logs.RetentionDays.ONE_DAY
)

nested_stack_b = cdk.NestedStack(stack, "NestedStackB")
website_bucket_b = s3.Bucket(nested_stack_b, "WebsiteBucketB")
s3deploy.BucketDeployment(nested_stack_b, "s3deployB",
    sources=[s3deploy.Source.json_data("file.json", {"a": "b"})],
    destination_bucket=website_bucket_b,
    log_retention=logs.RetentionDays.ONE_DAY
)

Parameters:

scope (Construct)
id (str)
description (Optional[str]) – A description of the stack. Default: - No description.
notification_arns (Optional[Sequence[str]]) – The Simple Notification Service (SNS) topics to publish stack related events. Default: - notifications are not sent for this stack.
parameters (Optional[Mapping[str, str]]) – The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter. The nested stack construct will automatically synthesize parameters in order to bind references from the parent stack(s) into the nested stack. Default: - no user-defined parameters are passed to the nested stack
removal_policy (Optional[RemovalPolicy]) – Policy to apply when the nested stack is removed. The default is Destroy, because all Removal Policies of resources inside the Nested Stack should already have been set correctly. You normally should not need to set this value. Default: RemovalPolicy.DESTROY
timeout (Optional[Duration]) – The length of time that CloudFormation waits for the nested stack to reach the CREATE_COMPLETE state. When CloudFormation detects that the nested stack has reached the CREATE_COMPLETE state, it marks the nested stack resource as CREATE_COMPLETE in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches CREATE_COMPLETE, CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack. Default: - no timeout

Methods

add_dependency(target, reason=None)

Add a dependency between this stack and another stack.

This can be used to define dependencies between any two stacks within an app, and also supports nested stacks.

Parameters:

target (Stack)
reason (Optional[str])

Return type:

None

add_metadata(key, value)

Adds an arbitrary key-value pair, with information you want to record about the stack.

These get translated to the Metadata section of the generated template.

Parameters:

key (str)
value (Any)

See:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html

Return type:

None

add_stack_tag(tag_name, tag_value)

Configure a stack tag.

At deploy time, CloudFormation will automatically apply all stack tags to all resources in the stack.

Parameters:

tag_name (str)
tag_value (str)

Return type:

None

add_transform(transform)

Add a Transform to this stack. A Transform is a macro that AWS CloudFormation uses to process your template.

Duplicate values are removed when stack is synthesized.

Parameters:: transform (str) – The transform to add.
See:: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-section-structure.html
Return type:: None

Example:

# stack: Stack

stack.add_transform("AWS::Serverless-2016-10-31")

export_string_list_value(exported_value, *, description=None, name=None)

Create a CloudFormation Export for a string list value.

Returns a string list representing the corresponding Fn.importValue() expression for this Export. The export expression is automatically wrapped with an Fn::Join and the import value with an Fn::Split, since CloudFormation can only export strings. You can control the name for the export by passing the name option.

If you don’t supply a value for name, the value you’re exporting must be a Resource attribute (for example: bucket.bucketName) and it will be given the same name as the automatic cross-stack reference that would be created if you used the attribute in another Stack.

One of the uses for this method is to remove the relationship between two Stacks established by automatic cross-stack references. It will temporarily ensure that the CloudFormation Export still exists while you remove the reference from the consuming stack. After that, you can remove the resource and the manual export.

See exportValue for an example of this process.

Parameters:

exported_value (Any)
description (Optional[str]) – The description of the outputs. Default: - No description
name (Optional[str]) – The name of the export to create. Default: - A name is automatically chosen

Return type:

List[str]

export_value(exported_value, *, description=None, name=None)

Create a CloudFormation Export for a string value.

Returns a string representing the corresponding Fn.importValue() expression for this Export. You can control the name for the export by passing the name option.

If you don’t supply a value for name, the value you’re exporting must be a Resource attribute (for example: bucket.bucketName) and it will be given the same name as the automatic cross-stack reference that would be created if you used the attribute in another Stack.

One of the uses for this method is to remove the relationship between two Stacks established by automatic cross-stack references. It will temporarily ensure that the CloudFormation Export still exists while you remove the reference from the consuming stack. After that, you can remove the resource and the manual export.

Here is how the process works. Let’s say there are two stacks, producerStack and consumerStack, and producerStack has a bucket called bucket, which is referenced by consumerStack (perhaps because an AWS Lambda Function writes into it, or something like that).

It is not safe to remove producerStack.bucket because as the bucket is being deleted, consumerStack might still be using it.

Instead, the process takes two deployments:

Deployment 1: break the relationship:

Make sure consumerStack no longer references bucket.bucketName (maybe the consumer stack now uses its own bucket, or it writes to an AWS DynamoDB table, or maybe you just remove the Lambda Function altogether).
In the ProducerStack class, call this.exportValue(this.bucket.bucketName). This will make sure the CloudFormation Export continues to exist while the relationship between the two stacks is being broken.
Deploy (this will effectively only change the consumerStack, but it’s safe to deploy both).

Deployment 2: remove the bucket resource:

You are now free to remove the bucket resource from producerStack.
Don’t forget to remove the exportValue() call as well.
Deploy again (this time only the producerStack will be changed – the bucket will be deleted).

Parameters:

exported_value (Any)
description (Optional[str]) – The description of the outputs. Default: - No description
name (Optional[str]) – The name of the export to create. Default: - A name is automatically chosen

Return type:

str

format_arn(*, resource, service, account=None, arn_format=None, partition=None, region=None, resource_name=None)

Creates an ARN from components.

If partition, region or account are not specified, the stack’s partition, region and account will be used.

If any component is the empty string, an empty string will be inserted into the generated ARN at the location that component corresponds to.

The ARN will be formatted as follows:

arn:{partition}:{service}:{region}:{account}:{resource}{sep}{resource-name}

The required ARN pieces that are omitted will be taken from the stack that the ‘scope’ is attached to. If all ARN pieces are supplied, the supplied scope can be ‘undefined’.

Parameters:

resource (str) – Resource type (e.g. “table”, “autoScalingGroup”, “certificate”). For some resource types, e.g. S3 buckets, this field defines the bucket name.
service (str) – The service namespace that identifies the AWS product (for example, ‘s3’, ‘iam’, ‘codepipeline’).
account (Optional[str]) – The ID of the AWS account that owns the resource, without the hyphens. For example, 123456789012. Note that the ARNs for some resources don’t require an account number, so this component might be omitted. Default: The account the stack is deployed to.
arn_format (Optional[ArnFormat]) – The specific ARN format to use for this ARN value. Default: - uses value of sep as the separator for formatting, ArnFormat.SLASH_RESOURCE_NAME if that property was also not provided
partition (Optional[str]) – The partition that the resource is in. For standard AWS regions, the partition is aws. If you have resources in other partitions, the partition is aws-partitionname. For example, the partition for resources in the China (Beijing) region is aws-cn. Default: The AWS partition the stack is deployed to.
region (Optional[str]) – The region the resource resides in. Note that the ARNs for some resources do not require a region, so this component might be omitted. Default: The region the stack is deployed to.
resource_name (Optional[str]) – Resource name or path within the resource (i.e. S3 bucket object key) or a wildcard such as "*". This is service-dependent.

Return type:

str

get_logical_id(element)

Allocates a stack-unique CloudFormation-compatible logical identity for a specific resource.

This method is called when a CfnElement is created and used to render the initial logical identity of resources. Logical ID renames are applied at this stage.

This method uses the protected method allocateLogicalId to render the logical ID for an element. To modify the naming scheme, extend the Stack class and override this method.

Parameters:: element (CfnElement) – The CloudFormation element for which a logical identity is needed.
Return type:: str

regional_fact(fact_name, default_value=None)

Look up a fact value for the given fact for the region of this stack.

Will return a definite value only if the region of the current stack is resolved. If not, a lookup map will be added to the stack and the lookup will be done at CDK deployment time.

What regions will be included in the lookup map is controlled by the @aws-cdk/core:target-partitions context value: it must be set to a list of partitions, and only regions from the given partitions will be included. If no such context key is set, all regions will be included.

This function is intended to be used by construct library authors. Application builders can rely on the abstractions offered by construct libraries and do not have to worry about regional facts.

If defaultValue is not given, it is an error if the fact is unknown for the given region.

Parameters:

fact_name (str)
default_value (Optional[str])

Return type:

str

remove_stack_tag(tag_name)

Remove a stack tag.

At deploy time, CloudFormation will automatically apply all stack tags to all resources in the stack.

Parameters:: tag_name (str)
Return type:: None

rename_logical_id(old_id, new_id)

Rename a generated logical identities.

To modify the naming scheme strategy, extend the Stack class and override the allocateLogicalId method.

Parameters:

old_id (str)
new_id (str)

Return type:

None

report_missing_context_key(*, key, props, provider)

Indicate that a context key was expected.

Contains instructions which will be emitted into the cloud assembly on how the key should be supplied.

Parameters:

key (str) – The missing context key.
props (Union[AmiContextQuery, Dict[str, Any], AvailabilityZonesContextQuery, HostedZoneContextQuery, SSMParameterContextQuery, VpcContextQuery, EndpointServiceAvailabilityZonesContextQuery, LoadBalancerContextQuery, LoadBalancerListenerContextQuery, SecurityGroupContextQuery, KeyContextQuery, CcApiContextQuery, PluginContextQuery]) – A set of provider-specific options.
provider (ContextProvider) – The provider from which we expect this context key to be obtained.

Return type:

None

resolve(obj)

Resolve a tokenized value in the context of the current stack.

Parameters:: obj (Any)
Return type:: Any

set_parameter(name, value)

Assign a value to one of the nested stack parameters.

Parameters:

name (str) – The parameter name (ID).
value (str) – The value to assign.

Return type:

None

split_arn(arn, arn_format)

Splits the provided ARN into its components.

Works both if ‘arn’ is a string like ‘arn:aws:s3:::bucket’, and a Token representing a dynamic CloudFormation expression (in which case the returned components will also be dynamic CloudFormation expressions, encoded as Tokens).

Parameters:

arn (str) – the ARN to split into its components.
arn_format (ArnFormat) – the expected format of ‘arn’ - depends on what format the service ‘arn’ represents uses.

Return type:

ArnComponents

to_json_string(obj, space=None)

Convert an object, potentially containing tokens, to a JSON string.

Parameters:

obj (Any)
space (Union[int, float, None])

Return type:

str

to_string()

Returns a string representation of this construct.

Return type:: str

to_yaml_string(obj)

Convert an object, potentially containing tokens, to a YAML string.

Parameters:: obj (Any)
Return type:: str

Attributes

account

The AWS account into which this stack will be deployed.

This value is resolved according to the following rules:

The value provided to env.account when the stack is defined. This can either be a concrete account (e.g. 585695031111) or the Aws.ACCOUNT_ID token.
Aws.ACCOUNT_ID, which represents the CloudFormation intrinsic reference { "Ref": "AWS::AccountId" } encoded as a string token.

Preferably, you should use the return value as an opaque string and not attempt to parse it to implement your logic. If you do, you must first check that it is a concrete value an not an unresolved token. If this value is an unresolved token (Token.isUnresolved(stack.account) returns true), this implies that the user wishes that this stack will synthesize into an account-agnostic template. In this case, your code should either fail (throw an error, emit a synth error using Annotations.of(construct).addError()) or implement some other account-agnostic behavior.

artifact_id: The ID of the cloud assembly artifact for this stack.

availability_zones

Returns the list of AZs that are available in the AWS environment (account/region) associated with this stack.

If the stack is environment-agnostic (either account and/or region are tokens), this property will return an array with 2 tokens that will resolve at deploy-time to the first two availability zones returned from CloudFormation’s Fn::GetAZs intrinsic function.

If they are not available in the context, returns a set of dummy values and reports them as missing, and let the CLI resolve them by calling EC2 DescribeAvailabilityZones on the target environment.

To specify a different strategy for selecting availability zones override this method.

bundling_required: Indicates whether the stack requires bundling or not.

dependencies: Return the stacks this stack depends on.

environment

The environment coordinates in which this stack is deployed.

In the form aws://account/region. Use stack.account and stack.region to obtain the specific values, no need to parse.

You can use this value to determine if two stacks are targeting the same environment.

If either stack.account or stack.region are not concrete values (e.g. Aws.ACCOUNT_ID or Aws.REGION) the special strings unknown-account and/or unknown-region will be used respectively to indicate this stack is region/account-agnostic.

nested: Indicates if this is a nested stack, in which case parentStack will include a reference to it’s parent.

nested_stack_parent: If this is a nested stack, returns it’s parent stack.

nested_stack_resource

If this is a nested stack, this represents its AWS::CloudFormation::Stack resource.

undefined for top-level (non-nested) stacks.

node: The tree node.

notification_arns: Returns the list of notification Amazon Resource Names (ARNs) for the current stack.

partition: The partition in which this stack is defined.

region

The AWS region into which this stack will be deployed (e.g. us-west-2).

This value is resolved according to the following rules:

The value provided to env.region when the stack is defined. This can either be a concrete region (e.g. us-west-2) or the Aws.REGION token.
Aws.REGION, which is represents the CloudFormation intrinsic reference { "Ref": "AWS::Region" } encoded as a string token.

Preferably, you should use the return value as an opaque string and not attempt to parse it to implement your logic. If you do, you must first check that it is a concrete value an not an unresolved token. If this value is an unresolved token (Token.isUnresolved(stack.region) returns true), this implies that the user wishes that this stack will synthesize into a region-agnostic template. In this case, your code should either fail (throw an error, emit a synth error using Annotations.of(construct).addError()) or implement some other region-agnostic behavior.

stack_id

An attribute that represents the ID of the stack.

This is a context aware attribute:

If this is referenced from the parent stack, it will return { "Ref": "LogicalIdOfNestedStackResource" }.
If this is referenced from the context of the nested stack, it will return { "Ref": "AWS::StackId" }

Example value: arn:aws:cloudformation:us-east-2:123456789012:stack/mystack-mynestedstack-sggfrhxhum7w/f449b250-b969-11e0-a185-5081d0136786

Attribute:: true

stack_name

An attribute that represents the name of the nested stack.

This is a context aware attribute:

If this is referenced from the parent stack, it will return a token that parses the name from the stack ID.
If this is referenced from the context of the nested stack, it will return { "Ref": "AWS::StackName" }

Example value: mystack-mynestedstack-sggfrhxhum7w

Attribute:: true

synthesizer: Synthesis method for this stack.

tags: Tags to be applied to the stack.

template_file

The name of the CloudFormation template file emitted to the output directory during synthesis.

Example value: MyStack.template.json

template_options: Options for CloudFormation template (like version, transform, description).

termination_protection: Whether termination protection is enabled for this stack.

url_suffix: The Amazon domain suffix for the region in which this stack is defined.

Static Methods

classmethod is_construct(x)

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

Parameters:: x (Any) – Any object.
Return type:: bool
Returns:: true if x is an object created from a class which extends Construct.

classmethod is_nested_stack(x)

Checks if x is an object of type NestedStack.

Parameters:: x (Any)
Return type:: bool

classmethod is_stack(x)

Return whether the given object is a Stack.

We do attribute detection since we can’t reliably use ‘instanceof’.

Parameters:: x (Any)
Return type:: bool

classmethod of(construct)

Looks up the first stack scope in which construct is defined.

Fails if there is no stack up the tree.

Parameters:: construct (IConstruct) – The construct to start the search from.
Return type:: Stack