Skip to main content
In this lesson we’ll walk through updating an existing AWS CloudFormation StackSet. The goal is to modify the StackSet template to add a tag to the S3 bucket resource and then apply that updated template across all stack instances managed by the StackSet. We will:
  • Add a Tag to the S3 bucket resource in the StackSet template.
  • Upload the updated template to the StackSet.
  • Confirm and submit the update so it is deployed to each stack instance.
Here is the template change we will apply (adds a Status: Active tag to the bucket):
Resources:
  MyBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub 'stackset-bucket-${AWS::Region}-${AWS::AccountId}'
      Tags:
        - Key: Status
          Value: "Active"
When you update a StackSet template you re-submit the template and confirm the target accounts/regions and deployment options. The update is then pushed to each stack instance based on the StackSet’s concurrency and failure tolerance settings.
Quick checklist before you begin:
TaskWhy it matters
Verify template syntaxPrevents failed updates due to template errors
Confirm target accounts/regionsStackSet will only update the selected instances
Review deployment options (concurrency/failure tolerance)Controls how changes are rolled out and retried
Ensure you have necessary permissionsRequired for SELF_MANAGED or service-managed operations
Step-by-step
  1. Open the StackSet you want to update, select it, and choose Actions → Edit StackSet details. Keep the existing configuration unless you need to change it. Choose the option to replace the current template by uploading your updated template file.
A screenshot of the AWS CloudFormation StackSets console showing a selected StackSet named "DemoStackSet" (permission model SELF_MANAGED). The Actions dropdown is open with "Edit StackSet details" highlighted.
  1. Select “Upload a template file” then choose the updated template file (the file that contains the new tag). Click Next to continue.
A screenshot of the AWS CloudFormation StackSets "Manage StackSet" page showing the Template source options with "Upload a template file" selected and a highlighted "Choose file" button. The page footer shows "Cancel" and an orange "Next" button, with the browser window and taskbar visible.
  1. On the next page confirm the target accounts and regions. For an existing StackSet these are usually pre-selected; keep them unless you intentionally want to change the scope. Review and set deployment options (maximum concurrent accounts, failure tolerance, region concurrency) as required, then submit the update.
A screenshot of the AWS CloudFormation StackSets console showing the "DemoStackSet: Manage StackSet" page with regions listed (eu-west-1, us-east-1) and deployment options (maximum concurrent accounts 1, failure tolerance 0, region concurrency SEQUENTIAL). The orange Submit button in the bottom right is highlighted.
  1. The StackSet update operation will start. The StackSet status will show the operation in progress. Monitor the operation until it completes successfully — the console will show success for the StackSet and each stack instance when finished.
  2. Verify the change was applied to your resources. For this example, open the S3 console in each target region/account that contains a stack instance, view the bucket properties, and confirm the new tag Status: Active is present.
Screenshot of the Amazon S3 console showing the Tags panel for a bucket. It lists four tags, including Status: Active, aws:cloudformation:logical-id (MyBucket), and a cloudformation stack-id ARN.
If you inspect other stack instances (different regions or accounts) you should see the same tag there — confirming the StackSet update was applied across instances.
StackSet updates can modify resources across multiple accounts and regions. Ensure you have valid backups or change control in place, and that you have the necessary permissions to update all target accounts/regions. A failed update may trigger rollbacks depending on your deployment settings.
Summary
  • Modify the CloudFormation template (add or change resources/tags).
  • Upload the updated template to the existing StackSet.
  • Confirm accounts/regions and deployment options, then submit.
  • Monitor the update and verify resource changes in each target region/account.
Links and references

Watch Video