Configuring Serverless Framework for multiple stages
If you find the approach in this article interesting, check out Code Genie. Starting a new software project? Code Genie is a Full Stack App Generator that generates source code based on your project’s data model. Including:
- A React Next.js Web App hosted on Amplify Hosting
- Serverless Express REST API running on API Gateway and Lambda
- Cognito User Pools for Identity/Authentication
- DynamoDB Database
- Cloud Development Kit (CDK) for Infrastructure as Code (IAC)
- Continuous Integration/Delivery (CI/CD) with GitHub Actions
- And more!
AWS CloudFormation lets you define “variables” in your templates by specifying Parameters along with a Default
value. However, they’re limited to static values. That is, you can’t provide dynamic values based on stage values or other inputs
You can use dynamic values stored in other AWS services within your CloudFormation template, but that’s a little different.
One of my favorite Serverless Framework features is its custom
section. Not only does it let you specify static values and values based on inputs, but it also enables you to compose variables and even create maps so that we can have different values based on stage/environment.
Here’s a simplified serverless.yaml showing how I configure and use environment-specific values:
provider:
profile: ${self:custom.stages.${self:provider.stage}.profile}
custom:
stages:
dev:
profile: halfstack_software_dev
domainEnabled: false
staging:
profile: halfstack_software_staging
domainEnabled: true
domain: staging.halfstack.software
prod:
profile: halfstack_software_prod
domainEnabled: true
domain: halfstack.software
domainName: ${self:custom.stages.${self:provider.stage}.domain}
domainEnabled: ${self:custom.stages.${self:provider.stage}.domainEnabled}
resources:
Conditions:
UseDomainName:
!Equals
- ${self:custom.domainEnabled}
- true
To access a stage-specific value, I use ${self:custom.stages.${self:provider.stage}.domainName}
— quite wordy. To make this more accessible throughout the template, I often duplicate the value into a second variable so that I can access it via ${self:custom.domainName}
. Annoying, but manageable.
You can see the example above also includes a profile
config for each stage. These all have an accompanying profile entry in ~/.aws/credentials
that lets me easily deploy to different AWS accounts based on stage. Keep in mind that for any production system that’s receiving traffic, it’s dangerous to have production profiles on your local development machines lest you accidentally deploy to production (plus, I hear it’s a security risk? 🤷♂️).
# ~/.aws/credentials
[halfstack_software_dev]
aws_access_key_id = ABC123DEF456GHI789JK
aws_secret_access_key = aB1Cd2aB1Cd2aB1Cd2aB1Cd2+73f8+nWFQ
One alternative for stage-specific values is the serverless-dotenv-plugin package. This plugin even allows you to create files like .env.development
and .env.production
and it automatically uses the appropriate file when running NODE_ENV=production sls deploy
. 👍
My personal preference is to store my non-secret values in serverless.yaml and resort to .env
for secrets only (even better, Use AWS Secrets Manager 🔒). This approach makes it easier for developers to set up the project on their machine (they don’t need to create a .env
file), and grants you version control over these values since it’s checked into your source code repository.
Have any other tips for multi-stage deployments? Comment below or @ me on Twitter.