Deploying secrets to AWS

At this point, you are ready to deploy your changes to your CloudFormation stack, which you can do using the aws cloudformation deploy command we have used throughout the past few chapters:

> aws cloudformation deploy --template-file stack.yml \
    --stack-name todobackend --parameter-overrides $(cat dev.cfg) \
    --capabilities CAPABILITY_NAMED_IAM

Waiting for changeset to be created..
Waiting for stack create/update to complete
Successfully created/updated stack - todobackend

Deploying CloudFormation stack changes

The deployment will affect a number of resources as follows:

• The resources supporting the custom resource will first be created, along with changes to the ECS task definitions being applied.
• The custom resource called Secrets will be created, which once created will expose the key/value pairs of the todobackend/credentials secret to other CloudFormation resources.
• The ApplicationDatabase resource will be updated, with the MasterPassword property updated...