boozallen / devsecops-example-helloworld Goto Github PK

Hello,

I am kind of a noob to cloudformation, learning and trying out the example as I progress. So, apologies in advance, if this is something too obvious.
I was able to get as far in the installation as creating the stack with network/hello-world using the listed policy. However, the step of updating the stack with security/hello-world(https://github.com/boozallen/devsecops-example-helloworld/blob/master/cloud-formation/security/helloworld/main.yml) fails with the error
An error occurred (InsufficientCapabilitiesException) when calling the UpdateStack operation: Requires capabilities : [CAPABILITY_NAMED_IAM]

I attempted adding the --capabilities CAPABILITY_IAM to my CLI as below, but that didn't help.
aws cloudformation update-stack --stack-name myteststack --template-url https://s3.amazonaws.com/sushanttest/cloud-formation/security/helloworld/main.yml --parameters ParameterKey=Environment,ParameterValue=dev ParameterKey=VPCCIDRBlock,ParameterValue=172.27.10.0/24 ParameterKey=PrivilegedCIDR1,ParameterValue=172.27.0.10 ParameterKey=ProvisioningBucket,ParameterValue=resourcesdevsecops --capabilities CAPABILITY_IAM

Is there a specific IAM role that I need to create separately? It should be part of the stack, right?

Thanks in advance

Hi,

I can't get pass the last step of creating the jenkins app. I keep getting this error that the configuration failed. I verify that I was able to access the S3 bucket install scripts, but now I do not know which part of the configuration is failing. Any help would be greatly appreciated.

I was able to Run the cloud-formation stack in helloworld/app using the listed policy with the Environment and SecurityContext value as dev. The change set shows status as completed. But no ec2 instance is created. Don't see any error. I tried both using CLI and GUI with same result. Attached is the image of my changeset.

Looks I am missing something obvious. But can't pinpoint it as yet.

Thanks in advance