I wrote a CloudFormation template which creates a vpc, subnets, routes, asg's and instances.

I want CloudFormation to handle the association of the newly created vpc with an existing Route53 hosted zone but I can't find how to do it in CloudFormation.

Using the aws cli, this can be achieved by running (in the user_data script):

aws route53 associate-vpc-with-hosted-zone --hosted-zone-id AAZZZ123AA --vpc VPCRegion=us-west-2,VPCId=$vpcid

But I want CloudFormation to manage these associations so when the stack is deleted then the vpc association will be deleted as well.

I couldn't find online how it can be achieved with CloudFormation, so does anybody know if it can be done?


I couldn't find how to associate a VPC to a Route53 hosted zone, so I've added to the user_data script the following code:

aws route53 get-hosted-zone --id XXXAAA12345 | grep -q $vpcid
if [[ ! $? -eq 0 ]]; then
  aws route53 associate-vpc-with-hosted-zone --hosted-zone-id XXXAAA12345 --vpc VPCRegion=us-west-2,VPCId=$vpcid
  echo "VPC $vpcid is already associated to hosted zone company-private"

vpcid variable is inherited from the CloudFormation template:

{ "Fn::Join": [ "=", [ "vpcid", { "Ref": "VPC" } ] ] },

Then, I realized that when a VPC is deleted, it's association to the Route53 hosted zone remains.

In order to make sure that old associations are removed, I've added the following code to the user_data script:

for vpc in $(aws route53 get-hosted-zone --id XXXAAA12345 | grep vpc | awk '{print $2}' | tr -d '\"|,'); do
for i in ${!vpc_array[@]}; do
  if [[ ! ${vpc_array[$i]} = $vpcid && ! ${vpc_array[$i]} = $defaultvpc ]] ; then
    echo "VPC ${vpc_array[$i]} doesnt exist anymore - removing association to Route53 hosted zone"
    aws route53 disassociate-vpc-from-hosted-zone --hosted-zone-id XXXAAA12345 --vpc VPCRegion=us-west-2,VPCId=${vpc_array[$i]}
  • Here's an excellent write up about extending Cloudformation with custom resources, using Lambda, using exactly what you (and currently me) are trying to accomplish: rightbrainnetworks.com/blog/…
    – wkhatch
    Apr 25 '18 at 19:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.