Step 6: Tear down and clean up your Stackset

Once you've finished enumerating the resources in your company's AWS account, best practices dictate that you should decommission the resources, users, and roles that you've created. We can quickly clean up the resources by deleting the CloudFormation stacks and StackSets.

• Delete the individual stacks.
• Delete the stacks within the StackSet. (You cannot delete the StackSet if it is managing stacks.)
• Delete the StackSet.

1. Select the Master Account Role creation stack.
   
2. Click the Delete button.
   
3. Confirm with the Delete button.
   
4. Follow the same steps for the Red Canary Resource Discovery User stack.
   
5. Confirm with the delete button.
   
6. Click into the StackSets.
   
7. Select the Resource Discovery Roles StackSet.
   
8. Click the Actions dropdown.
   
9. Select Delete stacks from StackSet.
   
10. Enter the Organizational Unit id for your root account.
    
    
    • This can be found in the organization's service.
      
11. Select the region where the StackSet deployed.
    
12. Click Next.
    
13. On the Review page click Submit.
    
14. Once the operation has succeeded click on StackSets.
    
15. Select the Resource Discovery Role StackSet.
    
16. Click the Actions dropdown and select Delete StackSet.
    
17. Confirm the Delete action.
    

The stacks for the Resource Discovery User and the Resource Discovery Role on the master account are deleted. Additionally, the Resource Discovery Roles within each sub account, as well as the StackSet that managed them, have been removed.