Comment on page
There are two options to specify to which account Takomo should deploy stacks defined in a deployment target's config sets.
- Provide a complete IAM role ARN in the
- Provide the target account's id in the
accountIdproperty and the name of the IAM role in the
The first option takes precedence over the second one.
Let's specify target accounts for our deployment targets.
- name: infra
- name: dev-environment
- name: sandbox
- name: prod-environment
The infra deployment target uses the
deploymentRoleproperty to set the IAM role Takomo should use to deploy its configurations. The value for the
deploymentRoleproperty is complete IAM role ARN which also includes the target account id.
The rest of the deployment targets belong under the all/application deployment group in the deployment groups hierarchy. Therefore, they inherit the
deploymentRoleNameproperty defined by the all/application deployment group. Each target then specifies the
accountIdproperty, which Takomo combines with the
deploymentRoleNameproperty to form the complete ARN for the deployment role.