极光PostgreSQL的CloudFormation模板

Question

我正在尝试使用CloudFormation在亚马逊网络服务中启动一个Aurora PostgreSQL实例。我想将安全组作为参数传递给DBCluster资源中的VpcSecurityGroupIds。这是我目前掌握的-

{
"AWSTemplateFormatVersion": "2010-09-09",
"Description": "Aurora PostgreSQL",
"Parameters": {
      "DBSecurityGroupIds": {
            "Description": "Security groups for PostgreSQL",
            "Type": "String"
    },
.....
"Resources": {
    "DBCluster": {
        "Type": "AWS::RDS::DBCluster",
        "Properties": {
            "VpcSecurityGroupIds": [
                { "Ref" : "DBSecurityGroupIds" } 
            ]
        }
    },
.....
    "RDSinstance": {
        "Type": "AWS::RDS::DBInstance",
        "Properties": {
    },
    "RDSinstance2": {
        "Type": "AWS::RDS::DBInstance",
        "Properties": {
    }
.....
}

如何在运行此模板时指定安全组列表？我想让它看起来像这样(我之前是这样硬编码的)

"VpcSecurityGroupIds": [
                "sg-xxxxxx",
                "sg-xxxxxx"
            ]

我确实尝试了Fn:Join，但一直收到无效的安全组错误。

提前谢谢。

Answer 1

想明白了-

"VpcSecurityGroupIds": 
                { "Fn::Split" :[ "," , {"Ref" : "DBSecurityGroupIds" } ] 
                }

成功了！