AWS::OpsWorksCM::Server EngineAttribute - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::OpsWorksCM::Server EngineAttribute

The EngineAttribute property type specifies administrator credentials for an Amazon OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server. EngineAttribute is a property of the AWS::OpsWorksCM::Server resource type.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Name" : String, "Value" : String }


Name: String Value: String



The name of the engine attribute.

Attribute name for Chef Automate servers:


Attribute names for Puppet Enterprise servers:




Required: No

Type: String

Pattern: (?s).*

Maximum: 10000

Update requires: No interruption


The value of the engine attribute.

Attribute value for Chef Automate servers:

  • CHEF_AUTOMATE_PIVOTAL_KEY: A base64-encoded RSA public key. The corresponding private key is required to access the Chef API. You can generate this key by running the following OpenSSL command on Linux-based computers.

    openssl genrsa -out pivotal_key_file_name.pem 2048

    On Windows-based computers, you can use the PuTTYgen utility to generate a base64-encoded RSA private key. For more information, see PuTTYgen - Key Generator for PuTTY on Windows on

Attribute values for Puppet Enterprise servers:

  • PUPPET_ADMIN_PASSWORD: An administrator password that you can use to sign in to the Puppet Enterprise console webpage after the server is online. The password must use between 8 and 32 ASCII characters.

  • PUPPET_R10K_REMOTE: The r10k remote is the URL of your control repository (for example, ssh:// Specifying an r10k remote opens TCP port 8170.

  • PUPPET_R10K_PRIVATE_KEY: If you are using a private Git repository, add PUPPET_R10K_PRIVATE_KEY to specify a PEM-encoded private SSH key.

Required: No

Type: String

Pattern: (?s).*

Maximum: 10000

Update requires: No interruption

See also