atmos aws cloudformation diff
Create (or reuse) a CloudFormation changeset for the component and render the
predicted changes, without executing it. diff authenticates and calls the
CloudFormation API — it previews what apply would actually do to the live
stack, unlike render, which never
leaves the local template.
Usage
atmos aws cloudformation diff <component> --stack <stack> [options]
atmos aws cloudformation diff vpc -s plat-ue2-dev
Diff all or affected components in dependency order:
atmos aws cloudformation diff --all -s plat-ue2-dev
atmos aws cloudformation diff --affected --base origin/main
Diff components filtered by tags or labels (composes with --all/--affected to narrow the selected set further):
atmos aws cloudformation diff --all --tags production,tier-1
atmos aws cloudformation diff --affected --labels cost-center=platform
Flags
--stack,-s(required for a single component)- Atmos stack. Required when operating on a single component; optional (and used only to narrow the selected set) with
--all/--affected. --all(optional)- Diff all
aws/cloudformationcomponents in dependency order. --affected(optional)- Diff affected
aws/cloudformationcomponents and their dependencies. --include-dependents(optional)- With
--affected, include dependentaws/cloudformationcomponents. --base(optional)- Git base ref or SHA to compare against for affected detection:
--base origin/main. Used with--affected. --tags(optional)- Filter by tags (comma-separated, matches any):
--tags=production,tier-1. Composes with--all/--affectedto narrow the selected set further; cannot be combined with a single component argument. --labels(optional)- Filter by labels (comma-separated
key=valueorkey:valuepairs, matches all):--labels=cost-center=platform,compliance=sox. Composes with--all/--affected/--tags; cannot be combined with a single component argument.
note
atmos aws cloudformation plan is an alias for diff.
Both fire the before.aws/cloudformation.diff/after.aws/cloudformation.diff hook events.
