CloudFormation: How to use AWS::AccountId in Mappings?

Question

I have a mapping that looks like this:

Mappings:
  AccountToParams:
    aws-1234567890:
      sshSecurityGroup: sg-abcedf12

And I'd like to retrieve my variables by AccountId, but this doesn't get past the "validation" step

SecurityGroups:
    - !FindInMap [AccountToParams, !Sub "aws-${AWS::AccountId}", sshSecurityGroup]

Error is

16/08/2017, 16:36:18 - Template contains errors.: Template error: 
every Fn::FindInMap object requires three parameters, 
the map name, map key and the attribute for return value

The goal is to have some configuration driven by the account (hence environment) this is run under. And I can't seem to use the accountId as the key in the mapping, otherwise AWS isn't happy because it doesn't contain alphanumeric chars

user_16970326 · Answer

This works

Mappings: 

  AccountToParams:
    "123456789012":
      sshSecurityGroup: sg-abcdef12
  
Resources: 
 
      SecurityGroups: !FindInMap 
            - AccountToParams
            - !Ref 'AWS::AccountId'
            - sshSecurityGroup

CloudFormation: How to use AWS::AccountId in Mappings?

2 Answers