aws-cloudformation | Ansible Role for deploying AWS CloudFormation Infrastructure | AWS library

I have a docker-compose project with two containers running NGINX and gunicorn with my django files. I also have a database outside of docker in AWS RDS. My question is similiar to this one. But, that question is related to a database that is within docker-compose. Mine is outside.

So, if I were to open a bash terminal for my container and run py manage.py makemigrations the problem would be that the migration files in the django project, for example: /my-django-project/my-app/migrations/001-xxx.py would get out of sync with the database that stores which migrations has been applied. This will happen since my containers can shutdown and open a new container at any time. And the migration files would not be saved.

My ideas are to either:

• Use a volume inside docker compose, but since the migrations folder are spread out over all django apps that could be hard to achieve.

• Handle migrations outside of docker, that would require some kind of "master" project where migration files would be stored. This does not seem like a good idea since then the whole project would be dependent on some locals file existing.

I'm looking for suggestions on a good practice how I can handle migrations.

EDIT:

Here is docker-compose.yml, I'm runing this locally with docker-compose up and in production to AWS ECS with docker compose up. I left out some aws-cloudformation config which should not matter I think.

docker-compose.yml

I want to create an AWS IAMS account that has various permissions with CloudFormation.

I understand there are policies that would let a user change his password and let him get his account to use MFA here

How could I enforce the user to use MFA at first log in time when he needs to change the default password?

This is what I have:

The flow I have so far is:

1. User account is created
2. When user tries to log in for the first time is asked to change the default password.
3. User is logged in the AWS console.

Expected behavior:

1. User account is created
2. When user tries to log in for the first time is asked to change the default password and set MFA using Authenticator app.
3. User is logged in the AWS console and has permissions.

A potential flow is shown here. Is there another way?

Update:

This blog explains the flow Again, is there a better way? Like an automatic pop up that would enforce the user straight away?

Update2:

I might have not been explicit enough. What we have so far it is an ok customer experience. This flow would be fluid

1. User tries to log in

2. Console asks for password change

3. Colsole asks for scanning the code and introducing the codes

4. User logs in with new password and the code from authenticator 5.User is not able to deactivate MFA

I want to Qyery AWS Stack Resource Aws Cl so I can get the PhysicalResourceId.

To describe the stacks and query it is resented in this post.

describe the stacks

If I want to describe my stack resource I use this command

AWS Lambda now supports container images as a packaging format. Ref

Does cloudformation support using Container image for deploying AWS Lambda?

Something similar to packaging and deployment support via S3 Ref

I'm trying to create an AWS S3 Bucket with cloud formation.

S3 bucket name needs to be lowercase but I want to use a paramenter to compound that name. This parameter comes uppercase.

I founded a way.

I read this.

• https://github.com/awslabs/aws-cloudformation-templates/tree/master/aws/services/CloudFormation/MacrosExamples/StringFunctions

This is my code:

I have deployed https://github.com/aws-samples/amazon-elasticsearch-service-with-cognito to my stack, and am trying to add a master group as per https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/fgac.html#fgac-walkthrough-iam

So I have added to the following https://github.com/aws-samples/amazon-elasticsearch-service-with-cognito/blob/master/lib/search-stack.ts#L50

I have been refactoring what has become a rather large stack because it is brushing up against size limits for CloudFormation scripts on AWS. In doing so I have had to resolve some dependencies (typically using Outputs) but I've run into a situation that I have never run into before...

How do I use a resource created in one nested stack (A) in another nested stack (B) when using DependsOn?

This question is a duplicate question but the answer does not fit because it doesn't actually resolve the issue I have, it takes a different approach based on that particular user's needs.

Here is the resource in nested stack A:

AWS documentation claims that if I have a registered domain in another DNS registar that then I have to updated the name servers on the registered domain so presumably I thought that if I created a hosted zone by specifying a domain registered on R53 that the name servers will be updated automatically. This is the part of my CloudFormation:

I need to add a DeletionPolicy to my functions created with the serverless framework. Override AWS CloudFormation Resource suggests that I should be able to do something like the following, but it doesn't work: