Question

A platform team manages a foundational networking layer (VPCs, transit gateway attachments, route tables) that is deployed to 40 accounts using AWS CloudFormation with the AWS CDK to synthesize the templates. The team wants a repeatable way to author the templates once, run unit-style assertions against the synthesized output before deployment, and package the constructs so that application teams in other repositories can consume the exact same networking primitives as versioned building blocks. Which approach best meets these goals?

Accepted Answer

Publish the networking constructs as a versioned CDK construct library to a package registry (e.g., CodeArtifact), and use the CDK assertions module in the CI pipeline to validate synthesized templates before deploying.

Answer

Write raw CloudFormation JSON templates, store them in S3, and have each application team copy the templates into their own stacks, validating with cfn-lint before deployment.

Answer

Use CloudFormation StackSets with a single monolithic template and rely on drift detection to confirm the networking resources match the intended configuration after deployment.

Answer

Export all networking resource attributes via CloudFormation Outputs and have application teams use Fn::ImportValue to reference them directly across accounts.