Cloudformation when to use getatt, ref, vs ${}

Question

I'm trying to figure out the differences between GetAtt vs Ref vs ${}.

From what I understand you use GetAtt to refer to objects within the same template only and Ref can be used to refer to anything? Plus when would I use ${}?

Answer 1

Ref can be used for two things:

1. To return the value of a parameter that you passed in via the parameters section of the template.
2. When you ref the logical ID of another resource in your template, Ref returns what you could could consider as a default attribute for that type of resource. So using ref for an EC2 instance will return the instance ID, Ref'ing an s3 bucket resource, it will return the bucket name. You can look at the bottom of each cloudformation resources page in the AWS docs to see what this value will be (See Return Values section: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)

GetAtt is essentially the same as the 2nd function of Ref above, it also returns an attribute of the resource that you created within your resource, but while ref returns only a default attribute, GetAtt allows you to choose from different attributes to return.

Example, GetAtt for an EC2 instance gives you the option to return the AvailabilityZone, PrivateDnsName, PublicDNSName, etc of an instance - whereas Ref will only return the InstanceID. The different attributes you can return are different per resource type. You can also look at the bottom of each cloudformation resources page in the AWS docs to see what attributes you can all return (See Return Values section: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)

${} is another way to reference parameters passed in through the parameters section of the template.

All of this is in the AWS documentation though.