AWS pseudo parameters

What makes these parameters special? Well, the fact that they are obtained from AWS itself.

The current list of these parameters is as follows:

• AWS::AccountId
• AWS::NotificationARNs
• AWS::NoValue
• AWS::Region
• AWS::StackId
• AWS::StackName
• AWS::URLSuffix
• AWS::Partition

We’re not going to cover all of them, only the most widely used ones.

AWS::AccountId

One of the use cases where we need to use AccountId is when we are using an IAM principal.

If you are familiar with IAM, then you know that we can set the AWS account ID as a principal element. If you need to refresh your memory regarding IAM, you can read a great blog series at https://medium.com/@thomas.storm/aws-iam-deep-dive-chapter-1-essentials-a9cfb1931a01.

At the same time, it is a security risk to expose an AWS account ID in public; for production environments, we should stick to using AWS pseudo parameters when we specify this kind of data.

An...