Cloudformation rollback on failure. But to my surprise it ended up in UPDATE_COMPLETE .