Skip to content

Commit 3419cf3

Browse files
committed
docs(deploy): note CloudFormation teardown for CodeBuild deployments
The CodeBuild deploy path needs no local tooling, so 'cdk destroy' isn't readily available. Document 'aws cloudformation delete-stack --stack-name <stack_name_base>' as the teardown for that path in DEPLOYMENT.md (Option B + Cleanup) and scripts/README.md.
1 parent 99ed2d4 commit 3419cf3

2 files changed

Lines changed: 8 additions & 2 deletions

File tree

docs/DEPLOYMENT.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -302,7 +302,13 @@ cd infra-cdk
302302
cdk destroy --force
303303
```
304304

305-
If you deployed via CodeBuild (Option B), its build resources are already removed on success (or on the next successful run) — only the deployed FAST stack above needs tearing down.
305+
If you deployed via CodeBuild (Option B), its build resources are already removed on success (or on the next successful run) — only the deployed FAST stack above needs tearing down. If you don't have CDK installed locally (the CodeBuild path doesn't require it), delete the stack directly:
306+
307+
```bash
308+
aws cloudformation delete-stack --stack-name <stack_name_base>
309+
```
310+
311+
Like `cdk destroy`, this removes the FAST stack but not the CDK bootstrap or asset buckets.
306312

307313
**Warning**: `cdk destroy` will delete all data including S3 buckets created during deployment and ECR images.
308314

scripts/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ python scripts/deploy-with-codebuild.py
6363

6464
Packages your git-tracked source and runs the full deployment in the cloud via a CodeBuild project, streaming logs to your terminal. On a **successful** build, all created resources (S3 source bucket, CodeBuild project, IAM role, permission boundary) are removed. On a **failed** build, they are retained for debugging and reused on the next run.
6565

66-
Only git-tracked or staged files are deployed — stage or commit first, as untracked files are skipped with a warning. This does not remove your deployed FAST stack; for that, run `cd infra-cdk && cdk destroy`.
66+
Only git-tracked or staged files are deployed — stage or commit first, as untracked files are skipped with a warning. This does not remove your deployed FAST stack; to tear that down, run `cd infra-cdk && cdk destroy`, or `aws cloudformation delete-stack --stack-name <stack_name_base>` if you don't have CDK installed locally.
6767

6868
The IAM role has `AdministratorAccess` constrained by a permission boundary that denies dangerous actions (`iam:CreateUser`, `iam:CreateAccessKey`, `organizations:*`, etc.) to prevent privilege escalation.
6969

0 commit comments

Comments
 (0)