Tear down targets

Tear down infrastructure configured with bootstrap config sets to the specified deployment groups and targets.

Usage

tkm targets tear-down [group-path...] \
  [--target <target>]... \
  [--exclude-target <target>]... \
  [--label <label>]... \
  [--exclude-label <label>]... \
  [--concurrent-targets <count>] \
  [--config-set <config-set>] \
  [--command-path <command-path>]

Positional arguments

• group-path

  • Provide one or more deployment group paths to tear down only the targets that belong to the deployment groups located under the given deployment group paths in the deployment groups hierarchy.

  • Optional.

Options

In addition to the common options, this command has the following options.

• --label <label>

  • Choose deployment targets by label. You can use this option multiple times to specify more labels.

  • Optional

• --exclude-label <label>

  • Exclude deployment targets by label. You can use this option multiple times to specify more labels.

  • Optional

• --target <target>

  • Deployment targets to tear down. You can use this option multiple times to specify more targets. You can use % character as a wildcard at the beginning and/or end of the target name to more than one target.

  • Optional

• --exclude-target <target>

  • Exclude deployment targets. You can use this option multiple times to specify more targets. You can use % character as a wildcard at the beginning and/or end of the target name to more than one target.

  • Optional

• --concurrent-targets <number>

  • Number of deployment targets to deploy concurrently. Defaults to 1. If you choose to review changes to each target, this is set to 1.

  • Optional

• --config-set <config-set>

  • Tear down only this config set.

  • Optional

• --command-path <command-path>

  • Tear down only stacks under this command path.

  • To use this option, also the --config-set option must be given.

IAM permissions

These are the minimum IAM permissions required to run this command.

# Minimum permissions. Additional permissions are needed to actually 
# modify resources defined in the CloudFormation templates.
Statement: 
  - Sid: CloudFormation
    Effect: Allow
    Action:
      - cloudformation:CancelUpdateStack
      - cloudformation:DescribeStackEvents
      - cloudformation:CreateStack
      - cloudformation:GetTemplate
      - cloudformation:DeleteStack
      - cloudformation:UpdateStack
      - cloudformation:CreateChangeSet
      - cloudformation:DescribeChangeSet
      - cloudformation:DeleteChangeSet
      - cloudformation:ValidateTemplate
      - cloudformation:DescribeStacks
      - cloudformation:GetTemplateSummary
      - cloudformation:UpdateTerminationProtection
    Resource: "*"
  
  # S3 permissions needed only if a template bucket is used.
  # Specify resource to restrict access to specific buckets.  
  - Sid: S3
    Effect: Allow
    Action:
      - s3:PutObject
    Resource: "*"
  
  # IAM permissions needed only if command roles are used  
  # Specify resource to restrict access to specific roles.  
  - Sid: IAM
    Effect: Allow
    Action:
      - sts:AssumeRole
    Resource: "*"

Examples

Tear down all deployment targets

tkm targets bootstrap

Tear down only targets that belong to a deployment group MyGroup or to any other deployment group under it

tkm targets tear-down MyGroup

Tear down only the deployment target named my-target

tkm targets tear-down --target my-target

Tear down all deployment targets whose name ends with -test

tkm targets tear-down --target %-test

Tear down all targets that have label test or dev

tkm targets tear-down --label test --label dev