codepipeline-cfn.yaml

# aws cloudformation create-stack --stack-name codepipeline-cfn-us-east-1-demo --template-body file://codepipeline-cfn.yaml

AWSTemplateFormatVersion: '2010-09-09'

Description: >
  This template creates a CodePipeline CloudFormation deployment.

Parameters:
  DeploymentId:
    Type: String
    Description: A unique deployment identifier.
    Default: demo

  Service:
    Type: String
    Description: Name of the service or product that is associated with this stack.
    Default: cfn-pipelines

  Owner:
    Type: String
    Description: Email address of the person that created the stack.

  # TemplateFileName:
  #   Type: String
  #   Description: CloudFormation Template File Name
  #   Default: web-server.yml

  # TemplateConfigFileName:
  #   Type: String
  #   Description: CloudFormation Template Config File Name
  #   Default: config/vpc-19-config-us-east-1-cis.json

  GitHubAccount:
    Type: String
    Description: GitHub Account
    Default: jason4151

  GitHubRepository:
    Type: String
    Description: GitHub Repository
    Default: cfn

  GitHubBranch:
    Type: String
    Description: GitHub Branch
    Default: master

Resources:
### S3 ###
  CfnS3Bucket:
    Type: AWS::S3::Bucket
    DeletionPolicy: Delete
    Properties:
    #  BucketName: !Join ['', [ demo, -, !Ref 'Service', -, !Ref 'AWS::Region']]

### CodePipeline ###
  WebServerCfnCodePipeline:
    Type: AWS::CodePipeline::Pipeline
    Properties:
      Name: !Sub web-server-cfn-${DeploymentId}
      RoleArn: !Sub "arn:aws:iam::${AWS::AccountId}:role/ServiceRoleForCFN"
      Stages:
      - Name: Source
        Actions:
        - InputArtifacts: []
          Name: Source
          ActionTypeId:
            Category: Source
            Owner: ThirdParty
            Version: '1'
            Provider: GitHub
          OutputArtifacts:
          - Name: SourceArtifact
          Configuration:
            Owner: !Ref 'GitHubAccount'
            Repo: !Ref 'GitHubRepository'
            Branch: !Ref 'GitHubBranch'
            OAuthToken: !Join ['', ['{{resolve:secretsmanager:', GitHubApiKey, ':SecretString:GitHubApiKey}}' ]]  
          RunOrder: 1
      - Name: Deploy
        Actions:
        - Name: Artifact
          ActionTypeId:
            Category: Deploy
            Owner: AWS
            Version: '1'
            Provider: CloudFormation
          InputArtifacts:
          - Name: SourceArtifact
          Configuration:
            ActionMode: CREATE_UPDATE
            Capabilities: CAPABILITY_NAMED_IAM
            RoleArn: !Sub "arn:aws:iam::${AWS::AccountId}:role/ServiceRoleForCFN"
            StackName: !Ref 'AWS::StackName'
            TemplatePath: !Sub "SourceArtifact::${TemplateFileName}"
            TemplateConfiguration: !Sub "SourceArtifact::${TemplateConfigFileName}"
          RunOrder: 2
      ArtifactStore:
        Type: S3
        Location: !Ref 'CfnS3Bucket'