This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::ResilienceHub::App
Creates an Amazon Resilience Hub application. An Amazon Resilience Hub application is a collection of Amazon resources structured to prevent and recover Amazon application disruptions. To describe a Amazon Resilience Hub application, you provide an application name, resources from one or more Amazon CloudFormation stacks, Amazon Resource Groups, Terraform state files, AppRegistry applications, and an appropriate resiliency policy. In addition, you can also add resources that are located on Amazon Elastic Kubernetes Service (Amazon EKS) clusters as optional resources. For more information about the number of resources supported per application, see Service quotas.
After you create an Amazon Resilience Hub application, you publish it so that you can run a resiliency assessment on it. You can then use recommendations from the assessment to improve resiliency by running another assessment, comparing results, and then iterating the process until you achieve your goals for recovery time objective (RTO) and recovery point objective (RPO).
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::ResilienceHub::App", "Properties" : { "AppAssessmentSchedule" :String, "AppTemplateBody" :String, "Description" :String, "EventSubscriptions" :[ EventSubscription, ... ], "Name" :String, "PermissionModel" :PermissionModel, "ResiliencyPolicyArn" :String, "ResourceMappings" :[ ResourceMapping, ... ], "Tags" :{} }Key:Value, ...}
YAML
Type: AWS::ResilienceHub::App Properties: AppAssessmentSchedule:StringAppTemplateBody:StringDescription:StringEventSubscriptions:- EventSubscriptionName:StringPermissionModel:PermissionModelResiliencyPolicyArn:StringResourceMappings:- ResourceMappingTags:Key:Value
Properties
AppAssessmentSchedule-
Assessment execution schedule with 'Daily' or 'Disabled' values.
Required: No
Type: String
Allowed values:
Disabled | DailyUpdate requires: No interruption
AppTemplateBody-
A JSON string that provides information about your application structure. To learn more about the
appTemplateBodytemplate, see the sample template in Sample appTemplateBody template.The
appTemplateBodyJSON string has the following structure:-
resourcesThe list of logical resources that needs to be included in the Amazon Resilience Hub application.
Type: Array
Note
Don't add the resources that you want to exclude.
Each
resourcesarray item includes the following fields:-
logicalResourceIdThe logical identifier of the resource.
Type: Object
Each
logicalResourceIdobject includes the following fields:-
identifierIdentifier of the resource.
Type: String
-
logicalStackNameName of the Amazon CloudFormation stack this resource belongs to.
Type: String
-
resourceGroupNameName of the resource group this resource belongs to.
Type: String
-
terraformSourceNameName of the Terraform S3 state file this resource belongs to.
Type: String
-
eksSourceNameName of the Amazon Elastic Kubernetes Service cluster and namespace this resource belongs to.
Note
This parameter accepts values in "eks-cluster/namespace" format.
Type: String
-
-
typeThe type of resource.
Type: string
-
nameName of the resource.
Type: String
-
additionalInfoAdditional configuration parameters for an Amazon Resilience Hub application. If you want to implement
additionalInfothrough the Amazon Resilience Hub console rather than using an API call, see Configure the application configuration parameters.Note
Currently, this parameter accepts a key-value mapping (in a string format) of only one failover region and one associated account.
Key:
"failover-regions"Value:
"[{"region":"<REGION>", "accounts":[{"id":"<ACCOUNT_ID>"}]}]"
-
-
appComponentsThe list of Application Components (AppComponent) that this resource belongs to. If an AppComponent is not part of the Amazon Resilience Hub application, it will be added.
Type: Array
Each
appComponentsarray item includes the following fields:-
nameName of the AppComponent.
Type: String
-
typeThe type of AppComponent. For more information about the types of AppComponent, see Grouping resources in an AppComponent.
Type: String
-
resourceNamesThe list of included resources that are assigned to the AppComponent.
Type: Array of strings
-
additionalInfoAdditional configuration parameters for an Amazon Resilience Hub application. If you want to implement
additionalInfothrough the Amazon Resilience Hub console rather than using an API call, see Configure the application configuration parameters.Note
Currently, this parameter accepts a key-value mapping (in a string format) of only one failover region and one associated account.
Key:
"failover-regions"Value:
"[{"region":"<REGION>", "accounts":[{"id":"<ACCOUNT_ID>"}]}]"
-
-
excludedResourcesThe list of logical resource identifiers to be excluded from the application.
Type: Array
Note
Don't add the resources that you want to include.
Each
excludedResourcesarray item includes the following fields:-
logicalResourceIdsThe logical identifier of the resource.
Type: Object
Note
You can configure only one of the following fields:
-
logicalStackName -
resourceGroupName -
terraformSourceName -
eksSourceName
Each
logicalResourceIdsobject includes the following fields:-
identifierThe identifier of the resource.
Type: String
-
logicalStackNameName of the Amazon CloudFormation stack this resource belongs to.
Type: String
-
resourceGroupNameName of the resource group this resource belongs to.
Type: String
-
terraformSourceNameName of the Terraform S3 state file this resource belongs to.
Type: String
-
eksSourceNameName of the Amazon Elastic Kubernetes Service cluster and namespace this resource belongs to.
Note
This parameter accepts values in "eks-cluster/namespace" format.
Type: String
-
-
-
versionThe Amazon Resilience Hub application version.
-
additionalInfoAdditional configuration parameters for an Amazon Resilience Hub application. If you want to implement
additionalInfothrough the Amazon Resilience Hub console rather than using an API call, see Configure the application configuration parameters.Note
Currently, this parameter accepts a key-value mapping (in a string format) of only one failover region and one associated account.
Key:
"failover-regions"Value:
"[{"region":"<REGION>", "accounts":[{"id":"<ACCOUNT_ID>"}]}]"
Required: Yes
Type: String
Pattern:
^[\w\s:,-\.'\/{}\[\]:"]+$Minimum:
0Maximum:
409600Update requires: No interruption
-
Description-
Optional description for an application.
Required: No
Type: String
Minimum:
0Maximum:
500Update requires: No interruption
EventSubscriptions-
The list of events you would like to subscribe and get notification for. Currently, Amazon Resilience Hub supports notifications only for Drift detected and Scheduled assessment failure events.
Required: No
Type: Array of EventSubscription
Update requires: No interruption
Name-
Name for the application.
Required: Yes
Type: String
Pattern:
^[A-Za-z0-9][A-Za-z0-9_\-]{1,59}$Update requires: Replacement
PermissionModel-
Defines the roles and credentials that Amazon Resilience Hub would use while creating the application, importing its resources, and running an assessment.
Required: No
Type: PermissionModel
Update requires: No interruption
ResiliencyPolicyArn-
The Amazon Resource Name (ARN) of the resiliency policy.
Required: No
Type: String
Pattern:
^arn:(aws|aws-cn|aws-iso|aws-iso-[a-z]{1}|aws-us-gov):[A-Za-z0-9][A-Za-z0-9_/.-]{0,62}:([a-z]{2}-((iso[a-z]{0,1}-)|(gov-)){0,1}[a-z]+-[0-9]):[0-9]{12}:[A-Za-z0-9][A-Za-z0-9:_/+=,@.-]{0,1023}$Update requires: No interruption
ResourceMappings-
An array of
ResourceMappingobjects.Required: Yes
Type: Array of ResourceMapping
Update requires: No interruption
-
Tags assigned to the resource. A tag is a label that you assign to an Amazon resource. Each tag consists of a key/value pair.
Required: No
Type: Object of String
Pattern:
.{1,128}Maximum:
256Update requires: No interruption
Return values
Ref
The returned Amazon Resource Name (ARN) for the applcation.
Fn::GetAtt
The Amazon Resource Name (ARN) for the applcation.
AppArn-
The Amazon Resource Name (ARN) of the applcation.
DriftStatus-
Indicates if compliance drifts (deviations) were detected while running an assessment for your application.
Examples
The following examples show how to create an application in Amazon Resilience Hub.
Creating an application
YAML
AWSTemplateFormatVersion: 2010-09-09 Resources: Type: AWS::ResilienceHub::App Properties: Name: test Description: ResilienceHub TestApp Tags: TagKey1: someValue AppTemplateBody: '{"resources":[{"logicalResourceId":{"identifier":"LAMBDA","logicalStackName":null,"resourceGroupName":null},"type":"AWS::lambda::Function","name":"lambda"}],"appComponents":[{"id":"compute","name":"compute","type":"AWS::ResilienceHub::ComputeAppComponent","resourceNames":["lambda"]},{"id":"appcommon","name":"appcommon","type":"AWS::ResilienceHub::AppCommonAppComponent","resourceNames":null}],"excludedResources":{"logicalResourceIds":[]},"version":2.0}' ResourceMappings: - ResourceName: lambda MappingType: Resource PhysicalResourceId: Type: Arn Identifier: arn:aws:lambda:us-west-2:123456789012:function:functionName
JSON
{ "AWSTemplateFormatVersion": "2010-09-09T00:00:00.000Z", "Resources": { "Type": "AWS::ResilienceHub::App", "Properties": { "Name": "test", "Description": "ResilienceHub TestApp", "Tags": { "TagKey1": "someValue" }, "AppTemplateBody": "{\"resources\":[{\"logicalResourceId\":{\"identifier\":\"LAMBDA\",\"logicalStackName\":null,\"resourceGroupName\":null},\"type\":\"AWS::lambda::Function\",\"name\":\"lambda\"}],\"appComponents\":[{\"id\":\"compute\",\"name\":\"compute\",\"type\":\"AWS::ResilienceHub::ComputeAppComponent\",\"resourceNames\":[\"lambda\"]},{\"id\":\"appcommon\",\"name\":\"appcommon\",\"type\":\"AWS::ResilienceHub::AppCommonAppComponent\",\"resourceNames\":null}],\"excludedResources\":{\"logicalResourceIds\":[]},\"version\":2.0}", "ResourceMappings": [ { "ResourceName": "lambda", "MappingType": "Resource", "PhysicalResourceId": { "Type": "Arn", "Identifier": "arn:aws:lambda:us-west-2:123456789012:function:functionName" } } ] } } }