为什么CloudFormation堆栈更改包包括删除操作以删除SAM管道？

Question

我已经创建了一个AWS SAM Hello World应用程序，并且已经使用了SAM Pipeline Init -bootstrap命令来创建用于部署的管道。我对应用程序进行了少量修改，包括添加DynamoDB并更改Lambda功能和名称，但这不应该引起此问题。

我在“ Codebuild构建日志”中看到以下内容，

CloudFormation stack changeset

-------------------------------------------------------------------------------------------------

Operation                LogicalResourceId        ResourceType             Replacement            

-------------------------------------------------------------------------------------------------

+ Add                    GatesDynamoDBTable       AWS::DynamoDB::Table     N/A                    

+ Add                    ServerlessRestApiDeplo   AWS::ApiGateway::Deplo   N/A                    
                         ymentd56c46fb52          yment                                           

+ Add                    ServerlessRestApiProdS   AWS::ApiGateway::Stage   N/A                    
                         tage                                                                     

+ Add                    ServerlessRestApi        AWS::ApiGateway::RestA   N/A                    
                                                  pi                                              

+ Add                    getGatesLambdaFunction   AWS::Lambda::Permissio   N/A                    
                         HelloWorldPermissionPr   n                                              
                         od                                                                       

+ Add                    getGatesLambdaFunction   AWS::IAM::Role           N/A                    
                         Role                                                                     

+ Add                    getGatesLambdaFunction   AWS::Lambda::Function    N/A                    

- Delete                 CodeBuildProjectBuildA   AWS::CodeBuild::Projec   N/A                    
                         ndPackage                t                                               

- Delete                 CodeBuildProjectDeploy   AWS::CodeBuild::Projec   N/A                    
                                                  t                                              

- Delete                 CodeBuildServiceRole     AWS::IAM::Role           N/A                    


- Delete                 CodePipelineExecutionR   AWS::IAM::Role           N/A                    
                         ole                                                                      

- Delete                 CodeStarConnection       AWS::CodeStarConnectio   N/A                    
                                                  ns::Connection                                  

- Delete                 PipelineArtifactsBucke   AWS::S3::BucketPolicy    N/A                    
                         tPolicy                                                                  

- Delete                 PipelineArtifactsBucke   AWS::S3::Bucket          N/A                    
                         t                                                                        

- Delete                 PipelineArtifactsLoggi   AWS::S3::BucketPolicy    N/A                    
                         ngBucketPolicy                                                           

- Delete                 PipelineArtifactsLoggi   AWS::S3::Bucket          N/A                    
                         ngBucket                                                                 

- Delete                 PipelineStackCloudForm   AWS::IAM::Role           N/A                    
                         ationExecutionRole                                                       

- Delete                 Pipeline                 AWS::CodePipeline::Pip   N/A                    
                                                  eline                                           

-------------------------------------------------------------------------------------------------

我的项目文件夹中有2个YAML文件。

template.yaml：

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Hello-World app

# More info about Globals: https://github.com/awslabs/serverless-application-model/blob/master/docs/globals.rst
Globals:
  Function:
    Timeout: 3

Resources:
  getGatesLambdaFunction:
    Type: AWS::Serverless::Function # More info about Function Resource: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction
    Properties:
      FunctionName: !Sub ${AWS::StackName}-getGatesLambdaFunction
      CodeUri: lambda_code/
      Handler: app.lambda_handler
      Runtime: python3.9
      Architectures:
        - x86_64
      Events:
        HelloWorld:
          Type: Api # More info about API Event Source: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#api
          Properties:
            Path: /hello
            Method: get
      Policies:
      # Give the Lambda service access to poll your DynamoDB Stream
      - AmazonDynamoDBFullAccess
  GatesDynamoDBTable:
    Type: AWS::DynamoDB::Table
    Properties: 
      TableName: !Sub ${AWS::StackName}-Gates
      AttributeDefinitions: 
        - AttributeName: gateId
          AttributeType: S
      KeySchema: 
        - AttributeName: gateId
          KeyType: HASH
      ProvisionedThroughput: 
        ReadCapacityUnits: 5
        WriteCapacityUnits: 5

Outputs:
  # ServerlessRestApi is an implicit API created out of Events key under Serverless::Function
  # Find out more about other implicit resources you can reference within SAM
  # https://github.com/awslabs/serverless-application-model/blob/master/docs/internals/generated_resources.rst#api
  HelloWorldApi:
    Description: "API Gateway endpoint URL for Prod stage for Hello World function"
    Value: !Sub "https://${ServerlessRestApi}.execute-api.${AWS::Region}.amazonaws.com/Prod/hello/"
  getGatesLambdaFunction:
    Description: "Hello World Lambda Function ARN"
    Value: !GetAtt getGatesLambdaFunction.Arn
  getGatesLambdaFunctionIamRole:
    Description: "Implicit IAM Role created for Hello World function"
    Value: !GetAtt getGatesLambdaFunctionRole.Arn

和codepipeline.yaml，该是由sam Pipeline Init -bootstrap命令生成的。

我的问题是 - 为什么这些删除操作删除管道部署阶段中包含的管道？

template.yaml也不是codepipeline.yaml包含这些类型的操作，我不明白为什么管道在执行实际应用程序的部署时会尝试删除自身。这可能是一个问题，因为有一个堆栈包含管道和应用程序？因此，在部署应用程序时，它会注意到它部署的模板中未包含的所有其他这些内容（管道），因此认为应该删除它们？但是，如果是这样，SAM管道默认值严重错误配置...

Answer 1

我也花了很多时间来弄清楚如何解决这个问题。

您在管道引导期间通知的堆栈名称必须与“sam deploy”命令使用的堆栈名称不同。

例如：

在管道引导期间

What is the sam application stack name for stage 1? [sam-app]: <<stage1-sam-application-name-stack>>

What is the sam application stack name for stage 2? [sam-app]: <<stage2-sam-application-name-stack>>

管道引导完成之后

sam deploy 命令

sam deploy -t codepipeline.yaml --stack-name <<deploy-sam-application-name-stack>> --capabilities=CAPABILITY_IAM

请记住，您可以在“samconfig.toml”中指定堆栈名称

希望这会有所帮助