Aws/cfn Operations

Mutating CloudFormation recovery operations, kept apart from the read-only @webframp/aws/cfn-diagnostics. Resumes a stack stuck in UPDATE_ROLLBACK_FAILED with ContinueUpdateRollback, refuses any other stack status, optionally skips resources that cannot be rolled back, and waits for the rollback to settle.

Authentication

Uses the default AWS credential chain. Set the optional profile global argument to resolve credentials from a named AWS shared-config profile (SSO token cache / fromIni). This extension WRITES: use a profile that may update the stack. CloudFormation performs the rollback with the caller's credentials unless the stack has a service role.

Required IAM Permissions

• cloudformation:DescribeStacks
• cloudformation:ContinueUpdateRollback
• plus whatever the rollback itself needs on the stack's resources

Usage

swamp model create @webframp/aws/cfn-operations cfn-ops \
  --global-arg region=us-east-1 --global-arg profile=prod-account/Administrator

swamp model method run cfn-ops continue_update_rollback \
  --input stackName=my-app

# Skip a resource the rollback cannot restore
swamp model method run cfn-ops continue_update_rollback \
  --input stackName=my-app --input 'resourcesToSkip=["Db"]'

Methods

• continue_update_rollback - Resume an UPDATE_ROLLBACK_FAILED stack and wait (default 300s) for it to settle. The result records succeeded; a rollback that fails again is recorded with its status reason, not raised as an error.

2026.10.14.1

Added: The manifest now declares license: Apache-2.0 (SPDX). The registry quality rubric scores a declared license separately from the bundled LICENSE.md.

Upgrade note: Metadata only. No code, schema, or behavioral changes.

2026.10.13.1

Added: Initial release. continue_update_rollback resumes a stack in UPDATE_ROLLBACK_FAILED, with optional resourcesToSkip, and waits for the rollback to settle.