Hello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ-assets-docker.template.json b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ-assets-docker.template.json
new file mode 100644
index 0000000000000..1f1fffdf5581f
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ-assets-docker.template.json
@@ -0,0 +1,79 @@
+{
+ "Resources": {
+ "MyUserDC45028B": {
+ "Type": "AWS::IAM::User"
+ },
+ "MyUserDefaultPolicy7B897426": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "MyUserDefaultPolicy7B897426",
+ "Users": [
+ {
+ "Ref": "MyUserDC45028B"
+ }
+ ]
+ }
+ }
+ },
+ "Outputs": {
+ "ImageUri": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..d8588aafe50f8
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecr-assets/test/integ.assets-docker": {
+ "stacks": [
+ "integ-assets-docker"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..da54ddfe4c530
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/manifest.json
@@ -0,0 +1,53 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "integ-assets-docker": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "integ-assets-docker.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/integ-assets-docker": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "id": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "packaging": "container-image",
+ "path": "asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "sourceHash": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ }
+ }
+ ],
+ "/integ-assets-docker/MyUser/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyUserDC45028B"
+ }
+ ],
+ "/integ-assets-docker/MyUser/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyUserDefaultPolicy7B897426"
+ }
+ ],
+ "/integ-assets-docker/ImageUri": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ImageUri"
+ }
+ ]
+ },
+ "displayName": "integ-assets-docker"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..4764014f0323b
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/assets-docker.integ.snapshot/tree.json
@@ -0,0 +1,180 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "integ-assets-docker": {
+ "id": "integ-assets-docker",
+ "path": "integ-assets-docker",
+ "children": {
+ "DockerImage": {
+ "id": "DockerImage",
+ "path": "integ-assets-docker/DockerImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "integ-assets-docker/DockerImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "integ-assets-docker/DockerImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "DockerImage2": {
+ "id": "DockerImage2",
+ "path": "integ-assets-docker/DockerImage2",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "integ-assets-docker/DockerImage2/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "integ-assets-docker/DockerImage2/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "MyUser": {
+ "id": "MyUser",
+ "path": "integ-assets-docker/MyUser",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "integ-assets-docker/MyUser/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::User",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnUser",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "integ-assets-docker/MyUser/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "integ-assets-docker/MyUser/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "MyUserDefaultPolicy7B897426",
+ "users": [
+ {
+ "Ref": "MyUserDC45028B"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.User",
+ "version": "0.0.0"
+ }
+ },
+ "ImageUri": {
+ "id": "ImageUri",
+ "path": "integ-assets-docker/ImageUri",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile b/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile
+++ b/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile.Custom b/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile.Custom
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile.Custom
+++ b/packages/@aws-cdk/aws-ecr-assets/test/demo-image-custom-docker-file/Dockerfile.Custom
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/demo-image/Dockerfile b/packages/@aws-cdk/aws-ecr-assets/test/demo-image/Dockerfile
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/demo-image/Dockerfile
+++ b/packages/@aws-cdk/aws-ecr-assets/test/demo-image/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/dockerignore-image/Dockerfile b/packages/@aws-cdk/aws-ecr-assets/test/dockerignore-image/Dockerfile
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/dockerignore-image/Dockerfile
+++ b/packages/@aws-cdk/aws-ecr-assets/test/dockerignore-image/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/image-asset.test.ts b/packages/@aws-cdk/aws-ecr-assets/test/image-asset.test.ts
index 7640557032510..19e5b764407ef 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/image-asset.test.ts
+++ b/packages/@aws-cdk/aws-ecr-assets/test/image-asset.test.ts
@@ -10,7 +10,7 @@ import { DockerImageAsset, NetworkMode } from '../lib';
/* eslint-disable quote-props */
-const DEMO_IMAGE_ASSET_HASH = '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48';
+const DEMO_IMAGE_ASSET_HASH = '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14';
const flags = { [cxapi.DOCKER_IGNORE_SUPPORT]: true };
@@ -29,11 +29,11 @@ describe('image asset', () => {
expect(artifact.assets).toEqual([
{
repositoryName: 'aws-cdk/assets',
- imageTag: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
- id: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
+ imageTag: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
+ id: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
packaging: 'container-image',
- path: 'asset.8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
- sourceHash: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
+ path: 'asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
+ sourceHash: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
},
]);
@@ -89,29 +89,24 @@ describe('image asset', () => {
expect(artifact.template).toEqual({});
expect(artifact.assets).toEqual([
{
- 'buildArgs': {
- 'a': 'b',
- },
- repositoryName: 'aws-cdk/assets',
- imageTag: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
- id: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
+ buildArgs: { 'a': 'b' },
+ id: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
+ imageTag: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
packaging: 'container-image',
- path: 'asset.8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
- sourceHash: '8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
+ path: 'asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
+ repositoryName: 'aws-cdk/assets',
+ sourceHash: '0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
},
{
- 'buildArgs': {
- 'a': 'b',
- },
- 'id': 'd4bbfde4749763cef9707486f81ce1e95d25cedaf4cc34cfcdab7232ec1948ff',
- 'imageTag': 'd4bbfde4749763cef9707486f81ce1e95d25cedaf4cc34cfcdab7232ec1948ff',
- 'packaging': 'container-image',
- 'path': 'asset.d4bbfde4749763cef9707486f81ce1e95d25cedaf4cc34cfcdab7232ec1948ff',
- 'repositoryName': 'aws-cdk/assets',
- 'sourceHash': 'd4bbfde4749763cef9707486f81ce1e95d25cedaf4cc34cfcdab7232ec1948ff',
+ buildArgs: { 'a': 'b' },
+ id: '7f3aa0a36ecd282884e11463b3fde119d25d1ed424f934300f0c7b9cf6f63947',
+ imageTag: '7f3aa0a36ecd282884e11463b3fde119d25d1ed424f934300f0c7b9cf6f63947',
+ packaging: 'container-image',
+ path: 'asset.7f3aa0a36ecd282884e11463b3fde119d25d1ed424f934300f0c7b9cf6f63947',
+ repositoryName: 'aws-cdk/assets',
+ sourceHash: '7f3aa0a36ecd282884e11463b3fde119d25d1ed424f934300f0c7b9cf6f63947',
},
]);
-
});
testFutureBehavior('with target', flags, App, (app) => {
@@ -263,8 +258,8 @@ describe('image asset', () => {
const session = app.synth();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBeDefined();
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBe(true);
});
@@ -293,16 +288,16 @@ describe('image asset', () => {
const session = app.synth();
// Only the files exempted above should be included.
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'one'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'some_dep'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'some_dep', 'file'))).toBeDefined();
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'one'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'some_dep'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'node_modules', 'some_dep', 'file'))).toBe(true);
});
testFutureBehavior('docker directory is staged without files specified in exclude option', flags, App, (app) => {
@@ -355,12 +350,12 @@ describe('image asset', () => {
const asset5 = new DockerImageAsset(stack, 'Asset5', { directory, file: 'Dockerfile.Custom', target: 'NonDefaultTarget' });
const asset6 = new DockerImageAsset(stack, 'Asset6', { directory, extraHash: 'random-extra' });
- expect(asset1.assetHash).toEqual('365b5d951fc5f725f78093a07e3e1cc7819b4cbe582ca71a4c344752c23bf409');
- expect(asset2.assetHash).toEqual('9560a36f786f317c5e1abb986b58269b2453ed1cab16c36fd9b76646c837078c');
- expect(asset3.assetHash).toEqual('4f4e16f5b0cfab21be4298a04b20f62f63cd91a649ef4620d6d3c948d29f3cb4');
- expect(asset4.assetHash).toEqual('72b961f96e358b8dad935719cfc2704c3d14a46434871825ac81e3b94caa4853');
- expect(asset5.assetHash).toEqual('c23d34b3a1dac5a80c42e8fa6c88a0ac697eb709a6f36ebdb6e36ee8c75edc75');
- expect(asset6.assetHash).toEqual('7e950a9b08c58d371c1658e04d377c0ec59d89a47fc245a86a50525b36a8949b');
+ expect(asset1.assetHash).toEqual('13248c55633f3b198a628bb2ea4663cb5226f8b2801051bd0c725950266fd590');
+ expect(asset2.assetHash).toEqual('36bf205fb9adc5e45ba1c8d534158a0aed96d190eff433af1d90f3b94f96e751');
+ expect(asset3.assetHash).toEqual('4c85bd70e73117b7129c2defbe6dc40a8a3872329f4ddca18d75afa671b38276');
+ expect(asset4.assetHash).toEqual('8a91219a7bb0f58b3282dd84acbf4c03c49c765be54ffb7b125be6a50b6c5645');
+ expect(asset5.assetHash).toEqual('c02bfba13b2e7e1ff5c778a76e10296b9e8d17f7f8252d097f4170ae04ce0eb4');
+ expect(asset6.assetHash).toEqual('3528d6838647a5e9011b0f35aec514d03ad11af05a94653cdcf4dacdbb070a06');
});
@@ -371,8 +366,8 @@ describe('image asset', () => {
const asset1 = new DockerImageAsset(stack, 'Asset1', { directory });
const asset2 = new DockerImageAsset(stack, 'Asset2', { directory, repositoryName: 'foo' });
- expect(asset1.assetHash).toEqual('b5d181eb114c889020f9d59961ac4ad5d65f49c571c0aafd5ce2be9464bc2d13');
- expect(asset2.assetHash).toEqual('0b48fa3f7f75365962e6e18f52608ec4e4451f8ecc0b58abdb063c5381569471');
+ expect(asset1.assetHash).toEqual('91cd042be26211c28488a6994327fc579e75e355d9d3bf7043fa6a0bc8ad4265');
+ expect(asset2.assetHash).toEqual('6a6cab989dda908fa3d132d58f402f714d79858f3c89473f2b050096954e6827');
});
});
@@ -386,12 +381,12 @@ function testDockerDirectoryIsStagedWithoutFilesSpecifiedInDockerignore(app: App
const session = app.synth();
// .dockerignore itself should be included in output to be processed during docker build
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBeDefined();
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBe(true);
}
function testDockerDirectoryIsStagedWithoutFilesSpecifiedInExcludeOption(app: App, ignoreMode?: IgnoreMode) {
@@ -404,12 +399,12 @@ function testDockerDirectoryIsStagedWithoutFilesSpecifiedInExcludeOption(app: Ap
const session = app.synth();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBeDefined();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBeDefined();
- expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBeDefined();
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, '.dockerignore'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'Dockerfile'))).toBe(true);
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'index.py'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'foobar.txt'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory'))).toBe(true);
+ expect(!fs.existsSync(path.join(session.directory, `asset.${image.assetHash}`, 'subdirectory', 'baz.txt'))).toBe(true);
}
testFutureBehavior('nested assemblies share assets: legacy synth edition', flags, App, (app) => {
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/integ.assets-docker.expected.json b/packages/@aws-cdk/aws-ecr-assets/test/integ.assets-docker.expected.json
index 3f6dd7b36d92e..854d6fab2364f 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/integ.assets-docker.expected.json
+++ b/packages/@aws-cdk/aws-ecr-assets/test/integ.assets-docker.expected.json
@@ -70,7 +70,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48"
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
]
]
}
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/integ.nested-stacks-docker.expected.json b/packages/@aws-cdk/aws-ecr-assets/test/integ.nested-stacks-docker.expected.json
index 8860ef52935b1..793deb5240d59 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/integ.nested-stacks-docker.expected.json
+++ b/packages/@aws-cdk/aws-ecr-assets/test/integ.nested-stacks-docker.expected.json
@@ -17,7 +17,7 @@
},
"/",
{
- "Ref": "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39S3Bucket74894234"
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5"
},
"/",
{
@@ -27,7 +27,7 @@
"Fn::Split": [
"||",
{
- "Ref": "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39S3VersionKeyD1E9C856"
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
}
]
}
@@ -40,7 +40,7 @@
"Fn::Split": [
"||",
{
- "Ref": "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39S3VersionKeyD1E9C856"
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
}
]
}
@@ -55,17 +55,17 @@
}
},
"Parameters": {
- "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39S3Bucket74894234": {
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5": {
"Type": "String",
- "Description": "S3 bucket for asset \"1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39\""
+ "Description": "S3 bucket for asset \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
},
- "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39S3VersionKeyD1E9C856": {
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF": {
"Type": "String",
- "Description": "S3 key for asset version \"1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39\""
+ "Description": "S3 key for asset version \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
},
- "AssetParameters1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39ArtifactHash4D458F5E": {
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297ArtifactHashA3886DE7": {
"Type": "String",
- "Description": "Artifact hash for asset \"1107443cdc71fce9cccfb7fb4c7c73078878ffb8d631c739c41d45ae40616f39\""
+ "Description": "Artifact hash for asset \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
}
}
}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile
new file mode 100644
index 0000000000000..235b30e9661ed
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile
@@ -0,0 +1,5 @@
+FROM public.ecr.aws/lambda/python:3.6
+EXPOSE 8000
+WORKDIR /src
+ADD . /src
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py
new file mode 100644
index 0000000000000..2ccedfce3ab76
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+import sys
+import textwrap
+import http.server
+import socketserver
+
+PORT = 8000
+
+
+class Handler(http.server.SimpleHTTPRequestHandler):
+ def do_GET(self):
+ self.send_response(200)
+ self.send_header('Content-Type', 'text/html')
+ self.end_headers()
+ self.wfile.write(textwrap.dedent('''\
+
+ Hello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..e6b1c2055094c
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecr-assets/test/integ.nested-stacks-docker": {
+ "stacks": [
+ "nested-stacks-docker"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..04e5982077af6
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/manifest.json
@@ -0,0 +1,89 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "nested-stacks-docker": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "nested-stacks-docker.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/nested-stacks-docker": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "id": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "packaging": "container-image",
+ "path": "asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "sourceHash": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "nestedstacksdockernestedstackwithimage2999F8C8.nested.template.json",
+ "id": "bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297",
+ "packaging": "file",
+ "sourceHash": "bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297",
+ "s3BucketParameter": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5",
+ "s3KeyParameter": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF",
+ "artifactHashParameter": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297ArtifactHashA3886DE7"
+ }
+ }
+ ],
+ "/nested-stacks-docker/nested-stack-with-image/User/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "User00B015A1"
+ }
+ ],
+ "/nested-stacks-docker/nested-stack-with-image/User/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "UserDefaultPolicy1F97781E"
+ }
+ ],
+ "/nested-stacks-docker/nested-stack-with-image/output": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "output"
+ }
+ ],
+ "/nested-stacks-docker/nested-stack-with-image.NestedStack/nested-stack-with-image.NestedStackResource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "nestedstackwithimageNestedStacknestedstackwithimageNestedStackResourceDF784FD5"
+ }
+ ],
+ "/nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5"
+ }
+ ],
+ "/nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
+ }
+ ],
+ "/nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297ArtifactHashA3886DE7"
+ }
+ ]
+ },
+ "displayName": "nested-stacks-docker"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nested-stacks-docker.template.json b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nested-stacks-docker.template.json
new file mode 100644
index 0000000000000..ac5333ad8e848
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nested-stacks-docker.template.json
@@ -0,0 +1,71 @@
+{
+ "Resources": {
+ "nestedstackwithimageNestedStacknestedstackwithimageNestedStackResourceDF784FD5": {
+ "Type": "AWS::CloudFormation::Stack",
+ "Properties": {
+ "TemplateURL": {
+ "Fn::Join": [
+ "",
+ [
+ "https://s3.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5"
+ },
+ "/",
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ }
+ },
+ "Parameters": {
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
+ },
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
+ },
+ "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297ArtifactHashA3886DE7": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297\""
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nestedstacksdockernestedstackwithimage2999F8C8.nested.template.json b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nestedstacksdockernestedstackwithimage2999F8C8.nested.template.json
new file mode 100644
index 0000000000000..25caf4334ee29
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/nestedstacksdockernestedstackwithimage2999F8C8.nested.template.json
@@ -0,0 +1,79 @@
+{
+ "Resources": {
+ "User00B015A1": {
+ "Type": "AWS::IAM::User"
+ },
+ "UserDefaultPolicy1F97781E": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "UserDefaultPolicy1F97781E",
+ "Users": [
+ {
+ "Ref": "User00B015A1"
+ }
+ ]
+ }
+ }
+ },
+ "Outputs": {
+ "output": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..8d0fd2f36ea5d
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr-assets/test/nested-stacks-docker.integ.snapshot/tree.json
@@ -0,0 +1,277 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "nested-stacks-docker": {
+ "id": "nested-stacks-docker",
+ "path": "nested-stacks-docker",
+ "children": {
+ "nested-stack-with-image": {
+ "id": "nested-stack-with-image",
+ "path": "nested-stacks-docker/nested-stack-with-image",
+ "children": {
+ "my-image": {
+ "id": "my-image",
+ "path": "nested-stacks-docker/nested-stack-with-image/my-image",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "nested-stacks-docker/nested-stack-with-image/my-image/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "nested-stacks-docker/nested-stack-with-image/my-image/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "User": {
+ "id": "User",
+ "path": "nested-stacks-docker/nested-stack-with-image/User",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "nested-stacks-docker/nested-stack-with-image/User/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::User",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnUser",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "nested-stacks-docker/nested-stack-with-image/User/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "nested-stacks-docker/nested-stack-with-image/User/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "UserDefaultPolicy1F97781E",
+ "users": [
+ {
+ "Ref": "User00B015A1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.User",
+ "version": "0.0.0"
+ }
+ },
+ "output": {
+ "id": "output",
+ "path": "nested-stacks-docker/nested-stack-with-image/output",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.NestedStack",
+ "version": "0.0.0"
+ }
+ },
+ "nested-stack-with-image.NestedStack": {
+ "id": "nested-stack-with-image.NestedStack",
+ "path": "nested-stacks-docker/nested-stack-with-image.NestedStack",
+ "children": {
+ "nested-stack-with-image.NestedStackResource": {
+ "id": "nested-stack-with-image.NestedStackResource",
+ "path": "nested-stacks-docker/nested-stack-with-image.NestedStack/nested-stack-with-image.NestedStackResource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudFormation::Stack",
+ "aws:cdk:cloudformation:props": {
+ "templateUrl": {
+ "Fn::Join": [
+ "",
+ [
+ "https://s3.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3BucketAF5C36E5"
+ },
+ "/",
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297S3VersionKeyEB2E48FF"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnStack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "AssetParameters": {
+ "id": "AssetParameters",
+ "path": "nested-stacks-docker/AssetParameters",
+ "children": {
+ "bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297": {
+ "id": "bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297",
+ "path": "nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "nested-stacks-docker/AssetParameters/bd34d9d2b847afabcea4ef507c1bdaabe8abdbb75c41b3db3609d371f8626297/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr-assets/test/tarball-asset.test.ts b/packages/@aws-cdk/aws-ecr-assets/test/tarball-asset.test.ts
index dec618738fc5a..dc0b7849bfd3d 100644
--- a/packages/@aws-cdk/aws-ecr-assets/test/tarball-asset.test.ts
+++ b/packages/@aws-cdk/aws-ecr-assets/test/tarball-asset.test.ts
@@ -123,7 +123,7 @@ describe('image asset', () => {
const session = app.synth();
- expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}.tar`))).toBeDefined();
+ expect(fs.existsSync(path.join(session.directory, `asset.${image.assetHash}.tar`))).toBe(true);
});
test('fails if the file does not exist', () => {
diff --git a/packages/@aws-cdk/aws-ecr/.gitignore b/packages/@aws-cdk/aws-ecr/.gitignore
index 266c0684c6844..8d6faadcf071f 100644
--- a/packages/@aws-cdk/aws-ecr/.gitignore
+++ b/packages/@aws-cdk/aws-ecr/.gitignore
@@ -17,3 +17,8 @@ nyc.config.js
!jest.config.js
junit.xml
+
+!**/*.integ.snapshot/**/asset.*/*.js
+!**/*.integ.snapshot/**/asset.*/*.d.ts
+
+!**/*.integ.snapshot/**/asset.*/**
diff --git a/packages/@aws-cdk/aws-ecr/.npmignore b/packages/@aws-cdk/aws-ecr/.npmignore
index 036fc97c4bf8d..408abb1c00460 100644
--- a/packages/@aws-cdk/aws-ecr/.npmignore
+++ b/packages/@aws-cdk/aws-ecr/.npmignore
@@ -26,4 +26,6 @@ jest.config.js
junit.xml
test/
-!*.lit.ts
\ No newline at end of file
+!*.lit.ts
+**/*.integ.snapshot
+**/*.integ.snapshot
diff --git a/packages/@aws-cdk/aws-ecr/lib/repository.ts b/packages/@aws-cdk/aws-ecr/lib/repository.ts
index f73c8990dd95f..e020b4bef71b6 100644
--- a/packages/@aws-cdk/aws-ecr/lib/repository.ts
+++ b/packages/@aws-cdk/aws-ecr/lib/repository.ts
@@ -42,7 +42,7 @@ export interface IRepository extends IResource {
repositoryUriForTag(tag?: string): string;
/**
- * Returns the URI of the repository for a certain tag. Can be used in `docker push/pull`.
+ * Returns the URI of the repository for a certain digest. Can be used in `docker push/pull`.
*
* ACCOUNT.dkr.ecr.REGION.amazonaws.com/REPOSITORY[@DIGEST]
*
@@ -50,6 +50,16 @@ export interface IRepository extends IResource {
*/
repositoryUriForDigest(digest?: string): string;
+ /**
+ * Returns the URI of the repository for a certain tag or digest, inferring based on the syntax of the tag. Can be used in `docker push/pull`.
+ *
+ * ACCOUNT.dkr.ecr.REGION.amazonaws.com/REPOSITORY[:TAG]
+ * ACCOUNT.dkr.ecr.REGION.amazonaws.com/REPOSITORY[@DIGEST]
+ *
+ * @param tagOrDigest Image tag or digest to use (tools usually default to the image with the "latest" tag if omitted)
+ */
+ repositoryUriForTagOrDigest(tagOrDigest?: string): string;
+
/**
* Add a policy statement to the repository's resource policy
*/
@@ -162,6 +172,22 @@ export abstract class RepositoryBase extends Resource implements IRepository {
return this.repositoryUriWithSuffix(digestSuffix);
}
+ /**
+ * Returns the URL of the repository. Can be used in `docker push/pull`.
+ *
+ * ACCOUNT.dkr.ecr.REGION.amazonaws.com/REPOSITORY[:TAG]
+ * ACCOUNT.dkr.ecr.REGION.amazonaws.com/REPOSITORY[@DIGEST]
+ *
+ * @param tagOrDigest Optional image tag or digest (digests must start with `sha256:`)
+ */
+ public repositoryUriForTagOrDigest(tagOrDigest?: string): string {
+ if (tagOrDigest?.startsWith('sha256:')) {
+ return this.repositoryUriForDigest(tagOrDigest);
+ } else {
+ return this.repositoryUriForTag(tagOrDigest);
+ }
+ }
+
/**
* Returns the repository URI, with an appended suffix, if provided.
* @param suffix An image tag or an image digest.
@@ -508,7 +534,7 @@ export class Repository extends RepositoryBase {
// It says "Text", but they actually mean "Object".
repositoryPolicyText: Lazy.any({ produce: () => this.policyDocument }),
lifecyclePolicy: Lazy.any({ produce: () => this.renderLifecyclePolicy() }),
- imageScanningConfiguration: props.imageScanOnPush ? { scanOnPush: true } : { scanOnPush: false },
+ imageScanningConfiguration: props.imageScanOnPush !== undefined ? { scanOnPush: props.imageScanOnPush } : undefined,
imageTagMutability: props.imageTagMutability || undefined,
encryptionConfiguration: this.parseEncryption(props),
});
diff --git a/packages/@aws-cdk/aws-ecr/package.json b/packages/@aws-cdk/aws-ecr/package.json
index ae13302f8642e..9c458232da0c3 100644
--- a/packages/@aws-cdk/aws-ecr/package.json
+++ b/packages/@aws-cdk/aws-ecr/package.json
@@ -47,7 +47,7 @@
"watch": "cdk-watch",
"lint": "cdk-lint",
"test": "cdk-test",
- "integ": "cdk-integ",
+ "integ": "integ-runner",
"pkglint": "pkglint -f",
"package": "cdk-package",
"awslint": "cdk-awslint",
@@ -85,7 +85,7 @@
"devDependencies": {
"@aws-cdk/assertions": "0.0.0",
"@aws-cdk/cdk-build-tools": "0.0.0",
- "@aws-cdk/cdk-integ-tools": "0.0.0",
+ "@aws-cdk/integ-runner": "0.0.0",
"@aws-cdk/cfn2ts": "0.0.0",
"@aws-cdk/pkglint": "0.0.0",
"@types/jest": "^27.4.1"
diff --git a/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/aws-ecr-integ-stack.template.json b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/aws-ecr-integ-stack.template.json
new file mode 100644
index 0000000000000..d48af466448ba
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/aws-ecr-integ-stack.template.json
@@ -0,0 +1,66 @@
+{
+ "Resources": {
+ "Repo02AC86CF": {
+ "Type": "AWS::ECR::Repository",
+ "Properties": {
+ "LifecyclePolicy": {
+ "LifecyclePolicyText": "{\"rules\":[{\"rulePriority\":1,\"selection\":{\"tagStatus\":\"any\",\"countType\":\"imageCountMoreThan\",\"countNumber\":5},\"action\":{\"type\":\"expire\"}}]}"
+ }
+ },
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ }
+ },
+ "Outputs": {
+ "RepositoryURI": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 4,
+ {
+ "Fn::Split": [
+ ":",
+ {
+ "Fn::GetAtt": [
+ "Repo02AC86CF",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ]
+ },
+ ".dkr.ecr.",
+ {
+ "Fn::Select": [
+ 3,
+ {
+ "Fn::Split": [
+ ":",
+ {
+ "Fn::GetAtt": [
+ "Repo02AC86CF",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ]
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/",
+ {
+ "Ref": "Repo02AC86CF"
+ }
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..ed4283f1375bb
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecr/test/integ.basic": {
+ "stacks": [
+ "aws-ecr-integ-stack"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..274685423d349
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/manifest.json
@@ -0,0 +1,34 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecr-integ-stack": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecr-integ-stack.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecr-integ-stack/Repo/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Repo02AC86CF"
+ }
+ ],
+ "/aws-ecr-integ-stack/RepositoryURI": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "RepositoryURI"
+ }
+ ]
+ },
+ "displayName": "aws-ecr-integ-stack"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..46ff66b02f043
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/basic.integ.snapshot/tree.json
@@ -0,0 +1,65 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecr-integ-stack": {
+ "id": "aws-ecr-integ-stack",
+ "path": "aws-ecr-integ-stack",
+ "children": {
+ "Repo": {
+ "id": "Repo",
+ "path": "aws-ecr-integ-stack/Repo",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecr-integ-stack/Repo/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECR::Repository",
+ "aws:cdk:cloudformation:props": {
+ "lifecyclePolicy": {
+ "lifecyclePolicyText": "{\"rules\":[{\"rulePriority\":1,\"selection\":{\"tagStatus\":\"any\",\"countType\":\"imageCountMoreThan\",\"countNumber\":5},\"action\":{\"type\":\"expire\"}}]}"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.CfnRepository",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.Repository",
+ "version": "0.0.0"
+ }
+ },
+ "RepositoryURI": {
+ "id": "RepositoryURI",
+ "path": "aws-ecr-integ-stack/RepositoryURI",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/aws-ecr-integ-stack.template.json b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/aws-ecr-integ-stack.template.json
new file mode 100644
index 0000000000000..629bb1ffcaea0
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/aws-ecr-integ-stack.template.json
@@ -0,0 +1,90 @@
+{
+ "Resources": {
+ "Repo02AC86CF": {
+ "Type": "AWS::ECR::Repository",
+ "Properties": {
+ "ImageScanningConfiguration": {
+ "ScanOnPush": true
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "RepoImageScanComplete7BC71935": {
+ "Type": "AWS::Events::Rule",
+ "Properties": {
+ "EventPattern": {
+ "source": [
+ "aws.ecr"
+ ],
+ "detail-type": [
+ "ECR Image Scan"
+ ],
+ "detail": {
+ "repository-name": [
+ {
+ "Ref": "Repo02AC86CF"
+ }
+ ],
+ "scan-status": [
+ "COMPLETE"
+ ]
+ }
+ },
+ "State": "ENABLED"
+ }
+ }
+ },
+ "Outputs": {
+ "RepositoryURI": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 4,
+ {
+ "Fn::Split": [
+ ":",
+ {
+ "Fn::GetAtt": [
+ "Repo02AC86CF",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ]
+ },
+ ".dkr.ecr.",
+ {
+ "Fn::Select": [
+ 3,
+ {
+ "Fn::Split": [
+ ":",
+ {
+ "Fn::GetAtt": [
+ "Repo02AC86CF",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ]
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/",
+ {
+ "Ref": "Repo02AC86CF"
+ }
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..763ee22793f71
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecr/test/integ.imagescan": {
+ "stacks": [
+ "aws-ecr-integ-stack"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..eeed5fcea2a6b
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/manifest.json
@@ -0,0 +1,40 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecr-integ-stack": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecr-integ-stack.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecr-integ-stack/Repo/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Repo02AC86CF"
+ }
+ ],
+ "/aws-ecr-integ-stack/Repo/ImageScanComplete/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "RepoImageScanComplete7BC71935"
+ }
+ ],
+ "/aws-ecr-integ-stack/RepositoryURI": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "RepositoryURI"
+ }
+ ]
+ },
+ "displayName": "aws-ecr-integ-stack"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..ff30375adfccc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecr/test/imagescan.integ.snapshot/tree.json
@@ -0,0 +1,107 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecr-integ-stack": {
+ "id": "aws-ecr-integ-stack",
+ "path": "aws-ecr-integ-stack",
+ "children": {
+ "Repo": {
+ "id": "Repo",
+ "path": "aws-ecr-integ-stack/Repo",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecr-integ-stack/Repo/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECR::Repository",
+ "aws:cdk:cloudformation:props": {
+ "imageScanningConfiguration": {
+ "scanOnPush": true
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.CfnRepository",
+ "version": "0.0.0"
+ }
+ },
+ "ImageScanComplete": {
+ "id": "ImageScanComplete",
+ "path": "aws-ecr-integ-stack/Repo/ImageScanComplete",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecr-integ-stack/Repo/ImageScanComplete/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Events::Rule",
+ "aws:cdk:cloudformation:props": {
+ "eventPattern": {
+ "source": [
+ "aws.ecr"
+ ],
+ "detail-type": [
+ "ECR Image Scan"
+ ],
+ "detail": {
+ "repository-name": [
+ {
+ "Ref": "Repo02AC86CF"
+ }
+ ],
+ "scan-status": [
+ "COMPLETE"
+ ]
+ }
+ },
+ "state": "ENABLED"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-events.CfnRule",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-events.Rule",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.Repository",
+ "version": "0.0.0"
+ }
+ },
+ "RepositoryURI": {
+ "id": "RepositoryURI",
+ "path": "aws-ecr-integ-stack/RepositoryURI",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecr/test/repository.test.ts b/packages/@aws-cdk/aws-ecr/test/repository.test.ts
index 108be6e06d065..712b3d35553cf 100644
--- a/packages/@aws-cdk/aws-ecr/test/repository.test.ts
+++ b/packages/@aws-cdk/aws-ecr/test/repository.test.ts
@@ -20,11 +20,6 @@ describe('repository', () => {
Resources: {
Repo02AC86CF: {
Type: 'AWS::ECR::Repository',
- Properties: {
- ImageScanningConfiguration: {
- ScanOnPush: false,
- },
- },
DeletionPolicy: 'Retain',
UpdateReplacePolicy: 'Retain',
},
@@ -34,13 +29,20 @@ describe('repository', () => {
test('repository creation with imageScanOnPush', () => {
// GIVEN
- const stack = new cdk.Stack();
+ const noScanStack = new cdk.Stack();
+ const scanStack = new cdk.Stack();
// WHEN
- new ecr.Repository(stack, 'Repo', { imageScanOnPush: true });
+ new ecr.Repository(noScanStack, 'NoScanRepo', { imageScanOnPush: false });
+ new ecr.Repository(scanStack, 'ScanRepo', { imageScanOnPush: true });
// THEN
- Template.fromStack(stack).hasResourceProperties('AWS::ECR::Repository', {
+ Template.fromStack(noScanStack).hasResourceProperties('AWS::ECR::Repository', {
+ ImageScanningConfiguration: {
+ ScanOnPush: false,
+ },
+ });
+ Template.fromStack(scanStack).hasResourceProperties('AWS::ECR::Repository', {
ImageScanningConfiguration: {
ScanOnPush: true,
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/.gitignore b/packages/@aws-cdk/aws-ecs-patterns/.gitignore
index 17a41566f0002..691432920bfe5 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/.gitignore
+++ b/packages/@aws-cdk/aws-ecs-patterns/.gitignore
@@ -16,4 +16,8 @@ nyc.config.js
!.eslintrc.js
junit.xml
-!jest.config.js
\ No newline at end of file
+!jest.config.js
+!**/*.integ.snapshot/**/asset.*/*.js
+!**/*.integ.snapshot/**/asset.*/*.d.ts
+
+!**/*.integ.snapshot/**/asset.*/**
diff --git a/packages/@aws-cdk/aws-ecs-patterns/.npmignore b/packages/@aws-cdk/aws-ecs-patterns/.npmignore
index e8acf10a468a1..53c924b8b19d1 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/.npmignore
+++ b/packages/@aws-cdk/aws-ecs-patterns/.npmignore
@@ -25,4 +25,6 @@ tsconfig.json
junit.xml
test/
!*.lit.ts
-jest.config.js
\ No newline at end of file
+jest.config.js
+**/*.integ.snapshot
+**/*.integ.snapshot
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts
index b4c41ed5aa990..755683a62787e 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts
@@ -413,7 +413,7 @@ export abstract class ApplicationLoadBalancedServiceBase extends CoreConstruct {
}
this.cluster = props.cluster || this.getDefaultCluster(this, props.vpc);
- if (props.desiredCount !== undefined && props.desiredCount < 1) {
+ if (props.desiredCount !== undefined && !cdk.Token.isUnresolved(props.desiredCount) && props.desiredCount < 1) {
throw new Error('You must specify a desiredCount greater than 0');
}
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-load-balanced-ecs-service.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-load-balanced-ecs-service.ts
index 6d1809a68d18b..25a38144d6e3e 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-load-balanced-ecs-service.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-load-balanced-ecs-service.ts
@@ -1,4 +1,4 @@
-import { Ec2Service, Ec2TaskDefinition } from '@aws-cdk/aws-ecs';
+import { Ec2Service, Ec2TaskDefinition, PlacementConstraint, PlacementStrategy } from '@aws-cdk/aws-ecs';
import * as cxapi from '@aws-cdk/cx-api';
import { Construct } from 'constructs';
import { ApplicationLoadBalancedServiceBase, ApplicationLoadBalancedServiceBaseProps } from '../base/application-load-balanced-service-base';
@@ -63,6 +63,22 @@ export interface ApplicationLoadBalancedEc2ServiceProps extends ApplicationLoadB
* @default - No memory reserved.
*/
readonly memoryReservationMiB?: number;
+
+ /**
+ * The placement constraints to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html).
+ *
+ * @default - No constraints.
+ */
+ readonly placementConstraints?: PlacementConstraint[];
+
+ /**
+ * The placement strategies to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html).
+ *
+ * @default - No strategies.
+ */
+ readonly placementStrategies?: PlacementStrategy[];
}
/**
@@ -135,6 +151,8 @@ export class ApplicationLoadBalancedEc2Service extends ApplicationLoadBalancedSe
cloudMapOptions: props.cloudMapOptions,
deploymentController: props.deploymentController,
circuitBreaker: props.circuitBreaker,
+ placementConstraints: props.placementConstraints,
+ placementStrategies: props.placementStrategies,
});
this.addServiceAsTarget(this.service);
}
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-multiple-target-groups-ecs-service.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-multiple-target-groups-ecs-service.ts
index f77e7e4dccdc3..6934ba66eac63 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-multiple-target-groups-ecs-service.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/application-multiple-target-groups-ecs-service.ts
@@ -1,4 +1,4 @@
-import { Ec2Service, Ec2TaskDefinition } from '@aws-cdk/aws-ecs';
+import { Ec2Service, Ec2TaskDefinition, PlacementConstraint, PlacementStrategy } from '@aws-cdk/aws-ecs';
import { ApplicationTargetGroup } from '@aws-cdk/aws-elasticloadbalancingv2';
import * as cxapi from '@aws-cdk/cx-api';
import { Construct } from 'constructs';
@@ -58,6 +58,22 @@ export interface ApplicationMultipleTargetGroupsEc2ServiceProps extends Applicat
* @default - No memory reserved.
*/
readonly memoryReservationMiB?: number;
+
+ /**
+ * The placement constraints to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html).
+ *
+ * @default - No constraints.
+ */
+ readonly placementConstraints?: PlacementConstraint[];
+
+ /**
+ * The placement strategies to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html).
+ *
+ * @default - No strategies.
+ */
+ readonly placementStrategies?: PlacementStrategy[];
}
/**
@@ -150,6 +166,8 @@ export class ApplicationMultipleTargetGroupsEc2Service extends ApplicationMultip
propagateTags: props.propagateTags,
enableECSManagedTags: props.enableECSManagedTags,
cloudMapOptions: props.cloudMapOptions,
+ placementConstraints: props.placementConstraints,
+ placementStrategies: props.placementStrategies,
});
}
}
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-load-balanced-ecs-service.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-load-balanced-ecs-service.ts
index b8862dfbed338..6b3798704f4e4 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-load-balanced-ecs-service.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-load-balanced-ecs-service.ts
@@ -1,4 +1,4 @@
-import { Ec2Service, Ec2TaskDefinition } from '@aws-cdk/aws-ecs';
+import { Ec2Service, Ec2TaskDefinition, PlacementConstraint, PlacementStrategy } from '@aws-cdk/aws-ecs';
import * as cxapi from '@aws-cdk/cx-api';
import { Construct } from 'constructs';
import { NetworkLoadBalancedServiceBase, NetworkLoadBalancedServiceBaseProps } from '../base/network-load-balanced-service-base';
@@ -61,6 +61,22 @@ export interface NetworkLoadBalancedEc2ServiceProps extends NetworkLoadBalancedS
* @default - No memory reserved.
*/
readonly memoryReservationMiB?: number;
+
+ /**
+ * The placement constraints to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html).
+ *
+ * @default - No constraints.
+ */
+ readonly placementConstraints?: PlacementConstraint[];
+
+ /**
+ * The placement strategies to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html).
+ *
+ * @default - No strategies.
+ */
+ readonly placementStrategies?: PlacementStrategy[];
}
/**
@@ -133,6 +149,8 @@ export class NetworkLoadBalancedEc2Service extends NetworkLoadBalancedServiceBas
cloudMapOptions: props.cloudMapOptions,
deploymentController: props.deploymentController,
circuitBreaker: props.circuitBreaker,
+ placementConstraints: props.placementConstraints,
+ placementStrategies: props.placementStrategies,
});
this.addServiceAsTarget(this.service);
}
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-multiple-target-groups-ecs-service.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-multiple-target-groups-ecs-service.ts
index 12d5b25ce67fd..5e4b5a40c0a37 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-multiple-target-groups-ecs-service.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/network-multiple-target-groups-ecs-service.ts
@@ -1,4 +1,4 @@
-import { Ec2Service, Ec2TaskDefinition } from '@aws-cdk/aws-ecs';
+import { Ec2Service, Ec2TaskDefinition, PlacementConstraint, PlacementStrategy } from '@aws-cdk/aws-ecs';
import { NetworkTargetGroup } from '@aws-cdk/aws-elasticloadbalancingv2';
import * as cxapi from '@aws-cdk/cx-api';
import { Construct } from 'constructs';
@@ -57,6 +57,22 @@ export interface NetworkMultipleTargetGroupsEc2ServiceProps extends NetworkMulti
* @default - No memory reserved.
*/
readonly memoryReservationMiB?: number;
+
+ /**
+ * The placement constraints to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html).
+ *
+ * @default - No constraints.
+ */
+ readonly placementConstraints?: PlacementConstraint[];
+
+ /**
+ * The placement strategies to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html).
+ *
+ * @default - No strategies.
+ */
+ readonly placementStrategies?: PlacementStrategy[];
}
/**
@@ -150,6 +166,8 @@ export class NetworkMultipleTargetGroupsEc2Service extends NetworkMultipleTarget
propagateTags: props.propagateTags,
enableECSManagedTags: props.enableECSManagedTags,
cloudMapOptions: props.cloudMapOptions,
+ placementConstraints: props.placementConstraints,
+ placementStrategies: props.placementStrategies,
});
}
}
diff --git a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/queue-processing-ecs-service.ts b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/queue-processing-ecs-service.ts
index 0d9f612abfb76..0cd4ae3e77d2a 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/queue-processing-ecs-service.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/lib/ecs/queue-processing-ecs-service.ts
@@ -1,4 +1,4 @@
-import { Ec2Service, Ec2TaskDefinition } from '@aws-cdk/aws-ecs';
+import { Ec2Service, Ec2TaskDefinition, PlacementConstraint, PlacementStrategy } from '@aws-cdk/aws-ecs';
import * as cxapi from '@aws-cdk/cx-api';
import { Construct } from 'constructs';
import { QueueProcessingServiceBase, QueueProcessingServiceBaseProps } from '../base/queue-processing-service-base';
@@ -67,6 +67,22 @@ export interface QueueProcessingEc2ServiceProps extends QueueProcessingServiceBa
* @default - QueueProcessingContainer
*/
readonly containerName?: string;
+
+ /**
+ * The placement constraints to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html).
+ *
+ * @default - No constraints.
+ */
+ readonly placementConstraints?: PlacementConstraint[];
+
+ /**
+ * The placement strategies to use for tasks in the service. For more information, see
+ * [Amazon ECS Task Placement Strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html).
+ *
+ * @default - No strategies.
+ */
+ readonly placementStrategies?: PlacementStrategy[];
}
/**
@@ -124,6 +140,8 @@ export class QueueProcessingEc2Service extends QueueProcessingServiceBase {
deploymentController: props.deploymentController,
circuitBreaker: props.circuitBreaker,
capacityProviderStrategies: props.capacityProviderStrategies,
+ placementConstraints: props.placementConstraints,
+ placementStrategies: props.placementStrategies,
});
this.configureAutoscalingForService(this.service);
diff --git a/packages/@aws-cdk/aws-ecs-patterns/package.json b/packages/@aws-cdk/aws-ecs-patterns/package.json
index 72d98e55f86d1..a7fe6f96f89a8 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/package.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/package.json
@@ -47,7 +47,7 @@
"watch": "cdk-watch",
"lint": "cdk-lint",
"test": "cdk-test",
- "integ": "cdk-integ",
+ "integ": "integ-runner",
"pkglint": "pkglint -f",
"package": "cdk-package",
"awslint": "cdk-awslint",
@@ -74,7 +74,7 @@
"devDependencies": {
"@aws-cdk/assertions": "0.0.0",
"@aws-cdk/cdk-build-tools": "0.0.0",
- "@aws-cdk/cdk-integ-tools": "0.0.0",
+ "@aws-cdk/integ-runner": "0.0.0",
"@aws-cdk/cfn2ts": "0.0.0",
"@aws-cdk/pkglint": "0.0.0",
"@types/jest": "^27.4.1",
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/demo-image/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/demo-image/Dockerfile
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/demo-image/Dockerfile
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/demo-image/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/ec2/l3s-v2.test.ts b/packages/@aws-cdk/aws-ecs-patterns/test/ec2/l3s-v2.test.ts
index 322e503a44aaf..9e7ffb5d4057c 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/ec2/l3s-v2.test.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/ec2/l3s-v2.test.ts
@@ -11,6 +11,8 @@ import {
Ec2TaskDefinition,
PropagatedTagSource,
Protocol,
+ PlacementStrategy,
+ PlacementConstraint,
} from '@aws-cdk/aws-ecs';
import { ApplicationProtocol, SslPolicy } from '@aws-cdk/aws-elasticloadbalancingv2';
import { CompositePrincipal, Role, ServicePrincipal } from '@aws-cdk/aws-iam';
@@ -163,6 +165,8 @@ describe('When Application Load Balancer', () => {
protocol: Protocol.TCP,
},
],
+ placementStrategies: [PlacementStrategy.spreadAcrossInstances(), PlacementStrategy.packedByCpu(), PlacementStrategy.randomly()],
+ placementConstraints: [PlacementConstraint.memberOf('attribute:ecs.instance-type =~ m5a.*')],
});
// THEN
@@ -189,6 +193,8 @@ describe('When Application Load Balancer', () => {
],
PropagateTags: 'SERVICE',
ServiceName: 'myService',
+ PlacementConstraints: [{ Type: 'memberOf', Expression: 'attribute:ecs.instance-type =~ m5a.*' }],
+ PlacementStrategies: [{ Field: 'instanceId', Type: 'spread' }, { Field: 'cpu', Type: 'binpack' }, { Type: 'random' }],
});
Template.fromStack(stack).hasResourceProperties('AWS::ECS::TaskDefinition', {
@@ -1042,6 +1048,8 @@ describe('When Network Load Balancer', () => {
listener: 'listener2',
},
],
+ placementStrategies: [PlacementStrategy.spreadAcrossInstances(), PlacementStrategy.packedByCpu(), PlacementStrategy.randomly()],
+ placementConstraints: [PlacementConstraint.memberOf('attribute:ecs.instance-type =~ m5a.*')],
});
// THEN
@@ -1069,6 +1077,8 @@ describe('When Network Load Balancer', () => {
PropagateTags: 'SERVICE',
SchedulingStrategy: 'REPLICA',
ServiceName: 'myService',
+ PlacementConstraints: [{ Type: 'memberOf', Expression: 'attribute:ecs.instance-type =~ m5a.*' }],
+ PlacementStrategies: [{ Field: 'instanceId', Type: 'spread' }, { Field: 'cpu', Type: 'binpack' }, { Type: 'random' }],
});
Template.fromStack(stack).hasResourceProperties('AWS::ECS::TaskDefinition', {
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/ec2/multiple-application-load-balanced-ecs-service.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/ec2/multiple-application-load-balanced-ecs-service.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..15c1dcda260e4
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/ec2/multiple-application-load-balanced-ecs-service.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,1221 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ClusterEB0386A7": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "ClusterDefaultAutoScalingGroupInstanceSecurityGroup1D15236A": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup/InstanceSecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ClusterDefaultAutoScalingGroupInstanceSecurityGroupfromawsecsintegmyServiceLBSecurityGroupFA544FE5327686553555411E4C": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 32768,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupInstanceSecurityGroup1D15236A",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "ToPort": 65535
+ }
+ },
+ "ClusterDefaultAutoScalingGroupInstanceRole9A14B384": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": {
+ "Fn::Join": [
+ "",
+ [
+ "ec2.",
+ {
+ "Ref": "AWS::URLSuffix"
+ }
+ ]
+ ]
+ }
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy06157A81": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecs:DeregisterContainerInstance",
+ "ecs:RegisterContainerInstance",
+ "ecs:Submit*"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ClusterEB0386A7",
+ "Arn"
+ ]
+ }
+ },
+ {
+ "Action": [
+ "ecs:Poll",
+ "ecs:StartTelemetrySession"
+ ],
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "ClusterEB0386A7",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "ecr:GetAuthorizationToken",
+ "ecs:DiscoverPollEndpoint",
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy06157A81",
+ "Roles": [
+ {
+ "Ref": "ClusterDefaultAutoScalingGroupInstanceRole9A14B384"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupInstanceProfile2BB4FE55": {
+ "Type": "AWS::IAM::InstanceProfile",
+ "Properties": {
+ "Roles": [
+ {
+ "Ref": "ClusterDefaultAutoScalingGroupInstanceRole9A14B384"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupLaunchConfig81EA5466": {
+ "Type": "AWS::AutoScaling::LaunchConfiguration",
+ "Properties": {
+ "ImageId": {
+ "Ref": "SsmParameterValueawsserviceecsoptimizedamiamazonlinux2recommendedimageidC96584B6F00A464EAD1953AFF4B05118Parameter"
+ },
+ "InstanceType": "t2.micro",
+ "IamInstanceProfile": {
+ "Ref": "ClusterDefaultAutoScalingGroupInstanceProfile2BB4FE55"
+ },
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupInstanceSecurityGroup1D15236A",
+ "GroupId"
+ ]
+ }
+ ],
+ "UserData": {
+ "Fn::Base64": {
+ "Fn::Join": [
+ "",
+ [
+ "#!/bin/bash\necho ECS_CLUSTER=",
+ {
+ "Ref": "ClusterEB0386A7"
+ },
+ " >> /etc/ecs/ecs.config\nsudo iptables --insert FORWARD 1 --in-interface docker+ --destination 169.254.169.254/32 --jump DROP\nsudo service iptables save\necho ECS_AWSVPC_BLOCK_IMDS=true >> /etc/ecs/ecs.config"
+ ]
+ ]
+ }
+ }
+ },
+ "DependsOn": [
+ "ClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy06157A81",
+ "ClusterDefaultAutoScalingGroupInstanceRole9A14B384"
+ ]
+ },
+ "ClusterDefaultAutoScalingGroupASG0F98E147": {
+ "Type": "AWS::AutoScaling::AutoScalingGroup",
+ "Properties": {
+ "MaxSize": "1",
+ "MinSize": "1",
+ "LaunchConfigurationName": {
+ "Ref": "ClusterDefaultAutoScalingGroupLaunchConfig81EA5466"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "PropagateAtLaunch": true,
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "VPCZoneIdentifier": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ },
+ "UpdatePolicy": {
+ "AutoScalingReplacingUpdate": {
+ "WillReplace": true
+ },
+ "AutoScalingScheduledAction": {
+ "IgnoreUnmodifiedGroupSizeProperties": true
+ }
+ }
+ },
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole2AC250B1": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicy221F6E5E": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ec2:DescribeHosts",
+ "ec2:DescribeInstanceAttribute",
+ "ec2:DescribeInstanceStatus",
+ "ec2:DescribeInstances"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": "autoscaling:CompleteLifecycleAction",
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":autoscaling:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":autoScalingGroup:*:autoScalingGroupName/",
+ {
+ "Ref": "ClusterDefaultAutoScalingGroupASG0F98E147"
+ }
+ ]
+ ]
+ }
+ },
+ {
+ "Action": [
+ "ecs:DescribeContainerInstances",
+ "ecs:DescribeTasks",
+ "ecs:ListTasks",
+ "ecs:UpdateContainerInstancesState"
+ ],
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "ClusterEB0386A7",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "ecs:ListContainerInstances",
+ "ecs:SubmitContainerStateChange",
+ "ecs:SubmitTaskStateChange"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ClusterEB0386A7",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicy221F6E5E",
+ "Roles": [
+ {
+ "Ref": "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole2AC250B1"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionFE918865": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "ZipFile": "import boto3, json, os, time\n\necs = boto3.client('ecs')\nautoscaling = boto3.client('autoscaling')\n\n\ndef lambda_handler(event, context):\n print(json.dumps(event))\n cluster = os.environ['CLUSTER']\n snsTopicArn = event['Records'][0]['Sns']['TopicArn']\n lifecycle_event = json.loads(event['Records'][0]['Sns']['Message'])\n instance_id = lifecycle_event.get('EC2InstanceId')\n if not instance_id:\n print('Got event without EC2InstanceId: %s', json.dumps(event))\n return\n\n instance_arn = container_instance_arn(cluster, instance_id)\n print('Instance %s has container instance ARN %s' % (lifecycle_event['EC2InstanceId'], instance_arn))\n\n if not instance_arn:\n return\n\n task_arns = container_instance_task_arns(cluster, instance_arn)\n \n if task_arns:\n print('Instance ARN %s has task ARNs %s' % (instance_arn, ', '.join(task_arns)))\n\n while has_tasks(cluster, instance_arn, task_arns):\n time.sleep(10)\n\n try:\n print('Terminating instance %s' % instance_id)\n autoscaling.complete_lifecycle_action(\n LifecycleActionResult='CONTINUE',\n **pick(lifecycle_event, 'LifecycleHookName', 'LifecycleActionToken', 'AutoScalingGroupName'))\n except Exception as e:\n # Lifecycle action may have already completed.\n print(str(e))\n\n\ndef container_instance_arn(cluster, instance_id):\n \"\"\"Turn an instance ID into a container instance ARN.\"\"\"\n arns = ecs.list_container_instances(cluster=cluster, filter='ec2InstanceId==' + instance_id)['containerInstanceArns']\n if not arns:\n return None\n return arns[0]\n\ndef container_instance_task_arns(cluster, instance_arn):\n \"\"\"Fetch tasks for a container instance ARN.\"\"\"\n arns = ecs.list_tasks(cluster=cluster, containerInstance=instance_arn)['taskArns']\n return arns\n\ndef has_tasks(cluster, instance_arn, task_arns):\n \"\"\"Return True if the instance is running tasks for the given cluster.\"\"\"\n instances = ecs.describe_container_instances(cluster=cluster, containerInstances=[instance_arn])['containerInstances']\n if not instances:\n return False\n instance = instances[0]\n\n if instance['status'] == 'ACTIVE':\n # Start draining, then try again later\n set_container_instance_to_draining(cluster, instance_arn)\n return True\n\n task_count = None\n\n if task_arns:\n # Fetch details for tasks running on the container instance\n tasks = ecs.describe_tasks(cluster=cluster, tasks=task_arns)['tasks']\n if tasks:\n # Consider any non-stopped tasks as running\n task_count = sum(task['lastStatus'] != 'STOPPED' for task in tasks) + instance['pendingTasksCount']\n \n if not task_count:\n # Fallback to instance task counts if detailed task information is unavailable\n task_count = instance['runningTasksCount'] + instance['pendingTasksCount']\n \n print('Instance %s has %s tasks' % (instance_arn, task_count))\n\n return task_count > 0\n\ndef set_container_instance_to_draining(cluster, instance_arn):\n ecs.update_container_instances_state(\n cluster=cluster,\n containerInstances=[instance_arn], status='DRAINING')\n\n\ndef pick(dct, *keys):\n \"\"\"Pick a subset of a dict.\"\"\"\n return {k: v for k, v in dct.items() if k in keys}\n"
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole2AC250B1",
+ "Arn"
+ ]
+ },
+ "Environment": {
+ "Variables": {
+ "CLUSTER": {
+ "Ref": "ClusterEB0386A7"
+ }
+ }
+ },
+ "Handler": "index.lambda_handler",
+ "Runtime": "python3.6",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "Timeout": 310
+ },
+ "DependsOn": [
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicy221F6E5E",
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole2AC250B1"
+ ]
+ },
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeawsecsintegClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic2FBAAF9B4FDC19F0": {
+ "Type": "AWS::Lambda::Permission",
+ "Properties": {
+ "Action": "lambda:InvokeFunction",
+ "FunctionName": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionFE918865",
+ "Arn"
+ ]
+ },
+ "Principal": "sns.amazonaws.com",
+ "SourceArn": {
+ "Ref": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicFE5437FB"
+ }
+ }
+ },
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic3B6438EC": {
+ "Type": "AWS::SNS::Subscription",
+ "Properties": {
+ "Protocol": "lambda",
+ "TopicArn": {
+ "Ref": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicFE5437FB"
+ },
+ "Endpoint": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupDrainECSHookFunctionFE918865",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicFE5437FB": {
+ "Type": "AWS::SNS::Topic",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRole70201663": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "autoscaling.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Cluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicyFFFD6EA5": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Effect": "Allow",
+ "Resource": {
+ "Ref": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicFE5437FB"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicyFFFD6EA5",
+ "Roles": [
+ {
+ "Ref": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRole70201663"
+ }
+ ]
+ }
+ },
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHook4A9A4325": {
+ "Type": "AWS::AutoScaling::LifecycleHook",
+ "Properties": {
+ "AutoScalingGroupName": {
+ "Ref": "ClusterDefaultAutoScalingGroupASG0F98E147"
+ },
+ "LifecycleTransition": "autoscaling:EC2_INSTANCE_TERMINATING",
+ "DefaultResult": "CONTINUE",
+ "HeartbeatTimeout": 300,
+ "NotificationTargetARN": {
+ "Ref": "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicFE5437FB"
+ },
+ "RoleARN": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRole70201663",
+ "Arn"
+ ]
+ }
+ },
+ "DependsOn": [
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicyFFFD6EA5",
+ "ClusterDefaultAutoScalingGroupLifecycleHookDrainHookRole70201663"
+ ]
+ },
+ "myServiceLB168895E1": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "myServiceLBSecurityGroupFE0ED608": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegmyServiceLB1F7A535D",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceLBSecurityGrouptoawsecsintegClusterDefaultAutoScalingGroupInstanceSecurityGroupED6E64823276865535D7AE55C8": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ClusterDefaultAutoScalingGroupInstanceSecurityGroup1D15236A",
+ "GroupId"
+ ]
+ },
+ "FromPort": 32768,
+ "ToPort": 65535
+ }
+ },
+ "myServiceLBPublicListenerC78AE8A0": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSTargetGroupweb80GroupCA306BD0"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "myServiceLB168895E1"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "myServiceLBPublicListenerECSTargetGroupweb80GroupCA306BD0": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "instance",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceLBPublicListenerECSTargetGroupweb90Group6388E5B5": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "instance",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceLBPublicListenerECSTargetGroupweb90Rule0CAA997D": {
+ "Type": "AWS::ElasticLoadBalancingV2::ListenerRule",
+ "Properties": {
+ "Actions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSTargetGroupweb90Group6388E5B5"
+ },
+ "Type": "forward"
+ }
+ ],
+ "Conditions": [
+ {
+ "Field": "path-pattern",
+ "PathPatternConfig": {
+ "Values": [
+ "a/b/c"
+ ]
+ }
+ }
+ ],
+ "ListenerArn": {
+ "Ref": "myServiceLBPublicListenerC78AE8A0"
+ },
+ "Priority": 10
+ }
+ },
+ "myServiceTaskDefTaskRole1C1DE6CC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDef7FB8322A": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "myServiceTaskDefwebLogGroupA1767F2C"
+ },
+ "awslogs-stream-prefix": "myService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Memory": 256,
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "HostPort": 0,
+ "Protocol": "tcp"
+ },
+ {
+ "ContainerPort": 90,
+ "HostPort": 0,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefExecutionRole618CD311",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegmyServiceTaskDefA3A33D18",
+ "NetworkMode": "bridge",
+ "RequiresCompatibilities": [
+ "EC2"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefTaskRole1C1DE6CC",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "myServiceTaskDefwebLogGroupA1767F2C": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "myServiceTaskDefExecutionRole618CD311": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefwebLogGroupA1767F2C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571",
+ "Roles": [
+ {
+ "Ref": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ]
+ }
+ },
+ "myServiceB0B6FAA0": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "EC2",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSTargetGroupweb80GroupCA306BD0"
+ }
+ },
+ {
+ "ContainerName": "web",
+ "ContainerPort": 90,
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSTargetGroupweb90Group6388E5B5"
+ }
+ }
+ ],
+ "SchedulingStrategy": "REPLICA",
+ "TaskDefinition": {
+ "Ref": "myServiceTaskDef7FB8322A"
+ }
+ },
+ "DependsOn": [
+ "myServiceLBPublicListenerECSTargetGroupweb80GroupCA306BD0",
+ "myServiceLBPublicListenerECSTargetGroupweb90Group6388E5B5",
+ "myServiceLBPublicListenerECSTargetGroupweb90Rule0CAA997D",
+ "myServiceLBPublicListenerC78AE8A0"
+ ]
+ }
+ },
+ "Parameters": {
+ "SsmParameterValueawsserviceecsoptimizedamiamazonlinux2recommendedimageidC96584B6F00A464EAD1953AFF4B05118Parameter": {
+ "Type": "AWS::SSM::Parameter::ValueHello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile
new file mode 100644
index 0000000000000..235b30e9661ed
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile
@@ -0,0 +1,5 @@
+FROM public.ecr.aws/lambda/python:3.6
+EXPOSE 8000
+WORKDIR /src
+ADD . /src
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py
new file mode 100644
index 0000000000000..2ccedfce3ab76
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+import sys
+import textwrap
+import http.server
+import socketserver
+
+PORT = 8000
+
+
+class Handler(http.server.SimpleHTTPRequestHandler):
+ def do_GET(self):
+ self.send_response(200)
+ self.send_header('Content-Type', 'text/html')
+ self.end_headers()
+ self.wfile.write(textwrap.dedent('''\
+
+ Hello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..de87bd6cb46f4
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,788 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ClusterEB0386A7": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "FargateServiceLBB353E155": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "FargateServiceLBSecurityGroup5F444C78": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegFargateServiceLB5FE4725D",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateServiceLBSecurityGrouptoawsecsintegFargateServiceSecurityGroup8930AEB880001FF8BADE": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ },
+ "FromPort": 8000,
+ "ToPort": 8000
+ }
+ },
+ "FargateServiceLBPublicListener4B4929CA": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "FargateServiceLBPublicListenerECSGroupBE57E081"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "FargateServiceLBB353E155"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "FargateServiceLBPublicListenerECSGroupBE57E081": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateServiceTaskDefTaskRole8CDCF85E": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateServiceTaskDef940E3A80": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "FargateServiceTaskDefwebLogGroup71FAF541"
+ },
+ "awslogs-stream-prefix": "FargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 8000,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefExecutionRole9194820E",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegFargateServiceTaskDefE1C73F14",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefTaskRole8CDCF85E",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "FargateServiceTaskDefwebLogGroup71FAF541": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "FargateServiceTaskDefExecutionRole9194820E": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateServiceTaskDefExecutionRoleDefaultPolicy827E7CA2": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefwebLogGroup71FAF541",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "FargateServiceTaskDefExecutionRoleDefaultPolicy827E7CA2",
+ "Roles": [
+ {
+ "Ref": "FargateServiceTaskDefExecutionRole9194820E"
+ }
+ ]
+ }
+ },
+ "FargateServiceECC8084D": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 8000,
+ "TargetGroupArn": {
+ "Ref": "FargateServiceLBPublicListenerECSGroupBE57E081"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "FargateServiceTaskDef940E3A80"
+ }
+ },
+ "DependsOn": [
+ "FargateServiceLBPublicListenerECSGroupBE57E081",
+ "FargateServiceLBPublicListener4B4929CA"
+ ]
+ },
+ "FargateServiceSecurityGroup262B61DD": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/FargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateServiceSecurityGroupfromawsecsintegFargateServiceLBSecurityGroup129467A18000AD32AE25": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 8000,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ },
+ "ToPort": 8000
+ }
+ }
+ },
+ "Outputs": {
+ "FargateServiceLoadBalancerDNS9433D5F6": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateServiceLBB353E155",
+ "DNSName"
+ ]
+ }
+ },
+ "FargateServiceServiceURL47701F45": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "FargateServiceLBB353E155",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "LoadBalancerDNS": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateServiceLBB353E155",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..7b00b642ff7ae
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.asset-image": {
+ "stacks": [
+ "aws-ecs-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..c6d97a1756687
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/manifest.json
@@ -0,0 +1,275 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "id": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "packaging": "container-image",
+ "path": "asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "sourceHash": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ }
+ }
+ ],
+ "/aws-ecs-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ/Cluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ClusterEB0386A7"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLBB353E155"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLBSecurityGroup5F444C78"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LB/SecurityGroup/to awsecsintegFargateServiceSecurityGroup8930AEB8:8000": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLBSecurityGrouptoawsecsintegFargateServiceSecurityGroup8930AEB880001FF8BADE"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLBPublicListener4B4929CA"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLBPublicListenerECSGroupBE57E081"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceLoadBalancerDNS9433D5F6"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceServiceURL47701F45"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceTaskDefTaskRole8CDCF85E"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceTaskDef940E3A80"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceTaskDefwebLogGroup71FAF541"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceTaskDefExecutionRole9194820E"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceTaskDefExecutionRoleDefaultPolicy827E7CA2"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceECC8084D"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceSecurityGroup262B61DD"
+ }
+ ],
+ "/aws-ecs-integ/FargateService/Service/SecurityGroup/from awsecsintegFargateServiceLBSecurityGroup129467A1:8000": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateServiceSecurityGroupfromawsecsintegFargateServiceLBSecurityGroup129467A18000AD32AE25"
+ }
+ ],
+ "/aws-ecs-integ/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "LoadBalancerDNS"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..6b4eeeae3dafc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/asset-image.integ.snapshot/tree.json
@@ -0,0 +1,1335 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ": {
+ "id": "aws-ecs-integ",
+ "path": "aws-ecs-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "Cluster": {
+ "id": "Cluster",
+ "path": "aws-ecs-integ/Cluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Cluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "FargateService": {
+ "id": "FargateService",
+ "path": "aws-ecs-integ/FargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ/FargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/FargateService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegFargateServiceLB5FE4725D",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegFargateServiceSecurityGroup8930AEB8:8000": {
+ "id": "to awsecsintegFargateServiceSecurityGroup8930AEB8:8000",
+ "path": "aws-ecs-integ/FargateService/LB/SecurityGroup/to awsecsintegFargateServiceSecurityGroup8930AEB8:8000",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ },
+ "fromPort": 8000,
+ "toPort": 8000
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ/FargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "FargateServiceLBPublicListenerECSGroupBE57E081"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "FargateServiceLBB353E155"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ/FargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/FargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ/FargateService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/FargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/FargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ },
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 8000,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "FargateServiceTaskDefwebLogGroup71FAF541"
+ },
+ "awslogs-stream-prefix": "FargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefExecutionRole9194820E",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegFargateServiceTaskDefE1C73F14",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefTaskRole8CDCF85E",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/FargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/FargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateServiceTaskDefwebLogGroup71FAF541",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "FargateServiceTaskDefExecutionRoleDefaultPolicy827E7CA2",
+ "roles": [
+ {
+ "Ref": "FargateServiceTaskDefExecutionRole9194820E"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "FargateServiceLBPublicListenerECSGroupBE57E081"
+ },
+ "containerName": "web",
+ "containerPort": 8000
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "FargateServiceTaskDef940E3A80"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/FargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/FargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegFargateServiceLBSecurityGroup129467A1:8000": {
+ "id": "from awsecsintegFargateServiceLBSecurityGroup129467A1:8000",
+ "path": "aws-ecs-integ/FargateService/Service/SecurityGroup/from awsecsintegFargateServiceLBSecurityGroup129467A1:8000",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 8000,
+ "groupId": {
+ "Fn::GetAtt": [
+ "FargateServiceSecurityGroup262B61DD",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateServiceLBSecurityGroup5F444C78",
+ "GroupId"
+ ]
+ },
+ "toPort": 8000
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..972b0642021bd
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,736 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ClusterEB0386A7": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "myServiceLB168895E1": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "myServiceLBSecurityGroupFE0ED608": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegmyServiceLB1F7A535D",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceLBSecurityGrouptoawsecsintegmyServiceSecurityGroup8DAB521180B6703B07": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ },
+ "FromPort": 80,
+ "ToPort": 80
+ }
+ },
+ "myServiceLBPublicListenerC78AE8A0": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSGroup17E9BBC1"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "myServiceLB168895E1"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "myServiceLBPublicListenerECSGroup17E9BBC1": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceTaskDefTaskRole1C1DE6CC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDef7FB8322A": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "myServiceTaskDefwebLogGroupA1767F2C"
+ },
+ "awslogs-stream-prefix": "myService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefExecutionRole618CD311",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegmyServiceTaskDefA3A33D18",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefTaskRole1C1DE6CC",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "myServiceTaskDefwebLogGroupA1767F2C": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "myServiceTaskDefExecutionRole618CD311": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefwebLogGroupA1767F2C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571",
+ "Roles": [
+ {
+ "Ref": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ]
+ }
+ },
+ "myServiceB0B6FAA0": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "DeploymentCircuitBreaker": {
+ "Enable": true,
+ "Rollback": true
+ },
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "DeploymentController": {
+ "Type": "ECS"
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSGroup17E9BBC1"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "myServiceTaskDef7FB8322A"
+ }
+ },
+ "DependsOn": [
+ "myServiceLBPublicListenerECSGroup17E9BBC1",
+ "myServiceLBPublicListenerC78AE8A0"
+ ]
+ },
+ "myServiceSecurityGroupC3B9D4E0": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceSecurityGroupfromawsecsintegmyServiceLBSecurityGroupFA544FE5800A81885C": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 80,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "ToPort": 80
+ }
+ }
+ },
+ "Outputs": {
+ "myServiceLoadBalancerDNS3A083E9F": {
+ "Value": {
+ "Fn::GetAtt": [
+ "myServiceLB168895E1",
+ "DNSName"
+ ]
+ }
+ },
+ "myServiceServiceURL1258C56B": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "myServiceLB168895E1",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..f4cb1551924a1
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.circuit-breaker-load-balanced-fargate-service": {
+ "stacks": [
+ "aws-ecs-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..51632c3b34b54
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/manifest.json
@@ -0,0 +1,256 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ/Cluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ClusterEB0386A7"
+ }
+ ],
+ "/aws-ecs-integ/myService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLB168895E1"
+ }
+ ],
+ "/aws-ecs-integ/myService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLBSecurityGroupFE0ED608"
+ }
+ ],
+ "/aws-ecs-integ/myService/LB/SecurityGroup/to awsecsintegmyServiceSecurityGroup8DAB5211:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLBSecurityGrouptoawsecsintegmyServiceSecurityGroup8DAB521180B6703B07"
+ }
+ ],
+ "/aws-ecs-integ/myService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLBPublicListenerC78AE8A0"
+ }
+ ],
+ "/aws-ecs-integ/myService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLBPublicListenerECSGroup17E9BBC1"
+ }
+ ],
+ "/aws-ecs-integ/myService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLoadBalancerDNS3A083E9F"
+ }
+ ],
+ "/aws-ecs-integ/myService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceServiceURL1258C56B"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefTaskRole1C1DE6CC"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDef7FB8322A"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefwebLogGroupA1767F2C"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571"
+ }
+ ],
+ "/aws-ecs-integ/myService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceB0B6FAA0"
+ }
+ ],
+ "/aws-ecs-integ/myService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceSecurityGroupC3B9D4E0"
+ }
+ ],
+ "/aws-ecs-integ/myService/Service/SecurityGroup/from awsecsintegmyServiceLBSecurityGroupFA544FE5:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceSecurityGroupfromawsecsintegmyServiceLBSecurityGroupFA544FE5800A81885C"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..8c86b7b2a9dcc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-load-balanced-fargate-service.integ.snapshot/tree.json
@@ -0,0 +1,1257 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ": {
+ "id": "aws-ecs-integ",
+ "path": "aws-ecs-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "Cluster": {
+ "id": "Cluster",
+ "path": "aws-ecs-integ/Cluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Cluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "myService": {
+ "id": "myService",
+ "path": "aws-ecs-integ/myService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ/myService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/myService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegmyServiceLB1F7A535D",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegmyServiceSecurityGroup8DAB5211:80": {
+ "id": "to awsecsintegmyServiceSecurityGroup8DAB5211:80",
+ "path": "aws-ecs-integ/myService/LB/SecurityGroup/to awsecsintegmyServiceSecurityGroup8DAB5211:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ },
+ "fromPort": 80,
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ/myService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSGroup17E9BBC1"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "myServiceLB168895E1"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ/myService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/myService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ/myService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/myService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/myService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "myServiceTaskDefwebLogGroupA1767F2C"
+ },
+ "awslogs-stream-prefix": "myService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefExecutionRole618CD311",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegmyServiceTaskDefA3A33D18",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefTaskRole1C1DE6CC",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/myService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/myService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefwebLogGroupA1767F2C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571",
+ "roles": [
+ {
+ "Ref": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/myService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/myService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50,
+ "deploymentCircuitBreaker": {
+ "enable": true,
+ "rollback": true
+ }
+ },
+ "deploymentController": {
+ "type": "ECS"
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "myServiceLBPublicListenerECSGroup17E9BBC1"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "myServiceTaskDef7FB8322A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegmyServiceLBSecurityGroupFA544FE5:80": {
+ "id": "from awsecsintegmyServiceLBSecurityGroupFA544FE5:80",
+ "path": "aws-ecs-integ/myService/Service/SecurityGroup/from awsecsintegmyServiceLBSecurityGroupFA544FE5:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 80,
+ "groupId": {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "myServiceLBSecurityGroupFE0ED608",
+ "GroupId"
+ ]
+ },
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json
new file mode 100644
index 0000000000000..64ce41f985ed3
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json
@@ -0,0 +1,876 @@
+{
+ "Resources": {
+ "VPCB9E5F0B4": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1SubnetB4246D30": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableFEE4B781": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableAssociation0B0896DC": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "VPCPublicSubnet1DefaultRoute91CEF279": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet1EIP6AD938E8": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1NATGatewayE0556630": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2Subnet74179F39": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTable6F1A15F1": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTableAssociation5A808732": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "VPCPublicSubnet2DefaultRouteB7481BBA": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet2EIP4947BC00": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2NATGateway3C070193": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1Subnet8BCA10E0": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableBE8A6027": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableAssociation347902D1": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "VPCPrivateSubnet1DefaultRouteAE1D6490": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "VPCPrivateSubnet2SubnetCFCDAA7A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTable0A19E10E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTableAssociation0C73D413": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "VPCPrivateSubnet2DefaultRouteF4F5CFD2": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "VPCIGWB7E252D3": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "VPCVPCGW99B986DC": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "InternetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "MessageRetentionPeriod": 1209600
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "QueueProcessingServiceEcsProcessingQueue552F0B37": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "RedrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19",
+ "Roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ]
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDef4982F68B": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Environment": [
+ {
+ "Name": "QUEUE_NAME",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "Essential": true,
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ },
+ "awslogs-stream-prefix": "QueueProcessingService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "QueueProcessingContainer"
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985",
+ "Arn"
+ ]
+ },
+ "Family": "awsecspatternsqueueQueueProcessingServiceQueueProcessingTaskDef2D9F8C2B",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D",
+ "Roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ]
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "DeploymentConfiguration": {
+ "DeploymentCircuitBreaker": {
+ "Enable": true,
+ "Rollback": true
+ },
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "DeploymentController": {
+ "Type": "ECS"
+ },
+ "EnableECSManagedTags": false,
+ "LaunchType": "FARGATE",
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ },
+ {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444": {
+ "Type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "Properties": {
+ "MaxCapacity": 2,
+ "MinCapacity": 1,
+ "ResourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "RoleARN": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "ScalableDimension": "ecs:service:DesiredCount",
+ "ServiceNamespace": "ecs"
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling330150E9": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling374CE648",
+ "PolicyType": "TargetTrackingScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "TargetTrackingScalingPolicyConfiguration": {
+ "PredefinedMetricSpecification": {
+ "PredefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "TargetValue": 50
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy74582401",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalUpperBound": 0,
+ "ScalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm20C30A06": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "LessThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "AlarmDescription": "Lower threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 0
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy23C5F983",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalLowerBound": 0,
+ "MetricIntervalUpperBound": 400,
+ "ScalingAdjustment": 1
+ },
+ {
+ "MetricIntervalLowerBound": 400,
+ "ScalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm2660BEDF": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "AlarmDescription": "Upper threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 100
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3": {
+ "Type": "AWS::ECS::Cluster"
+ }
+ },
+ "Outputs": {
+ "QueueProcessingServiceSQSDeadLetterQueueE9058015": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "QueueName"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSDeadLetterQueueArnF7C6D3A8": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSQueue1AD9CD9C": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSQueueArn8C4AE4AE": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..e3d03903d61be
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.circuit-breaker-queue-processing-fargate-service": {
+ "stacks": [
+ "aws-ecs-patterns-queue"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..6e9a250e05165
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/manifest.json
@@ -0,0 +1,299 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-patterns-queue": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-patterns-queue.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-patterns-queue": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "id": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "packaging": "container-image",
+ "path": "asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "sourceHash": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ }
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCB9E5F0B4"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableFEE4B781"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableAssociation0B0896DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1DefaultRoute91CEF279"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1EIP6AD938E8"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTable6F1A15F1"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTableAssociation5A808732"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2DefaultRouteB7481BBA"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2EIP4947BC00"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableBE8A6027"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableAssociation347902D1"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1DefaultRouteAE1D6490"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTable0A19E10E"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTableAssociation0C73D413"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2DefaultRouteF4F5CFD2"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIGWB7E252D3"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCVPCGW99B986DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceEcsProcessingQueue552F0B37"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSDeadLetterQueueE9058015"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSDeadLetterQueueArnF7C6D3A8"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSQueue1AD9CD9C"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSQueueArn8C4AE4AE"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateService0340DB9F"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling330150E9"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm20C30A06"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm2660BEDF"
+ }
+ ],
+ "/aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-patterns-queue"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..0260adc61cbf7
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/circuit-breaker-queue-processing-fargate-service.integ.snapshot/tree.json
@@ -0,0 +1,1537 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-patterns-queue": {
+ "id": "aws-ecs-patterns-queue",
+ "path": "aws-ecs-patterns-queue",
+ "children": {
+ "VPC": {
+ "id": "VPC",
+ "path": "aws-ecs-patterns-queue/VPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/VPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-patterns-queue/VPC/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-patterns-queue/VPC/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "internetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingService": {
+ "id": "QueueProcessingService",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService",
+ "children": {
+ "EcsProcessingDeadLetterQueue": {
+ "id": "EcsProcessingDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "messageRetentionPeriod": 1209600
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "EcsProcessingQueue": {
+ "id": "EcsProcessingQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "redrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueue": {
+ "id": "SQSDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueueArn": {
+ "id": "SQSDeadLetterQueueArn",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueue": {
+ "id": "SQSQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueueArn": {
+ "id": "SQSQueueArn",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingTaskDef": {
+ "id": "QueueProcessingTaskDef",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19",
+ "roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "name": "QueueProcessingContainer",
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ },
+ "awslogs-stream-prefix": "QueueProcessingService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "environment": [
+ {
+ "name": "QUEUE_NAME",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ]
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985",
+ "Arn"
+ ]
+ },
+ "family": "awsecspatternsqueueQueueProcessingServiceQueueProcessingTaskDef2D9F8C2B",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingContainer": {
+ "id": "QueueProcessingContainer",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D",
+ "roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingFargateService": {
+ "id": "QueueProcessingFargateService",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50,
+ "deploymentCircuitBreaker": {
+ "enable": true,
+ "rollback": true
+ }
+ },
+ "deploymentController": {
+ "type": "ECS"
+ },
+ "enableEcsManagedTags": false,
+ "launchType": "FARGATE",
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ },
+ {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "ScalingRole": {
+ "id": "ScalingRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/ScalingRole",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "TaskCount": {
+ "id": "TaskCount",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount",
+ "children": {
+ "Target": {
+ "id": "Target",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "aws:cdk:cloudformation:props": {
+ "maxCapacity": 2,
+ "minCapacity": 1,
+ "resourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "roleArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "scalableDimension": "ecs:service:DesiredCount",
+ "serviceNamespace": "ecs"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalableTarget",
+ "version": "0.0.0"
+ }
+ },
+ "CpuScaling": {
+ "id": "CpuScaling",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling374CE648",
+ "policyType": "TargetTrackingScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "targetTrackingScalingPolicyConfiguration": {
+ "predefinedMetricSpecification": {
+ "predefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "targetValue": 50
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.TargetTrackingScalingPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "QueueMessagesVisibleScaling": {
+ "id": "QueueMessagesVisibleScaling",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling",
+ "children": {
+ "LowerPolicy": {
+ "id": "LowerPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy74582401",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalUpperBound": 0,
+ "scalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "LowerAlarm": {
+ "id": "LowerAlarm",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "LessThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "alarmDescription": "Lower threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 0
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ },
+ "UpperPolicy": {
+ "id": "UpperPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy23C5F983",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalLowerBound": 0,
+ "metricIntervalUpperBound": 400,
+ "scalingAdjustment": 1
+ },
+ {
+ "metricIntervalLowerBound": 400,
+ "scalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "UpperAlarm": {
+ "id": "UpperAlarm",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "GreaterThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "alarmDescription": "Upper threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 100
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.ScalableTarget",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ScalableTaskCount",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.QueueProcessingFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC": {
+ "id": "EcsDefaultClusterMnL3mNNYNVPC",
+ "path": "aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..b8aca663dd829
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,732 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "FargateCluster7CCD5F93": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "ExecutionRole605A040B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": [
+ "ecs-tasks.amazonaws.com",
+ "ecs.amazonaws.com"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ExecutionRoleDefaultPolicyA5B92313": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "L3TaskDefwebLogGroupC6E4A38A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ExecutionRoleDefaultPolicyA5B92313",
+ "Roles": [
+ {
+ "Ref": "ExecutionRole605A040B"
+ }
+ ]
+ }
+ },
+ "L3LB212FC0E0": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "L3LBSecurityGroupEDE61198": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegL3LB6453BA0A",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "L3LBSecurityGrouptoawsecsintegL3ServiceSecurityGroup7B96C87F8094933E0A": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ },
+ "FromPort": 80,
+ "ToPort": 80
+ }
+ },
+ "L3LBPublicListener156FFC0F": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "L3LBPublicListenerECSGroup648EEA11"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "L3LB212FC0E0"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "L3LBPublicListenerECSGroup648EEA11": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "L3TaskDefTaskRole21C75D10": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "L3TaskDef48D8ACB8": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "L3TaskDefwebLogGroupC6E4A38A"
+ },
+ "awslogs-stream-prefix": "L3",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "ExecutionRole605A040B",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegL3TaskDefAA25240E",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "L3TaskDefTaskRole21C75D10",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "L3TaskDefwebLogGroupC6E4A38A": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "L3Service616D5A93": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "L3LBPublicListenerECSGroup648EEA11"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "L3TaskDef48D8ACB8"
+ }
+ },
+ "DependsOn": [
+ "L3LBPublicListenerECSGroup648EEA11",
+ "L3LBPublicListener156FFC0F"
+ ]
+ },
+ "L3ServiceSecurityGroup677B0897": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/L3/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "L3ServiceSecurityGroupfromawsecsintegL3LBSecurityGroupA70DA46C80DBDFBCD6": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 80,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ },
+ "ToPort": 80
+ }
+ }
+ },
+ "Outputs": {
+ "L3LoadBalancerDNSC6CB4A70": {
+ "Value": {
+ "Fn::GetAtt": [
+ "L3LB212FC0E0",
+ "DNSName"
+ ]
+ }
+ },
+ "L3ServiceURL0F065F2D": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "L3LB212FC0E0",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..1d9659c53a63a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.executionrole": {
+ "stacks": [
+ "aws-ecs-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..e9702ca8d12b3
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/manifest.json
@@ -0,0 +1,256 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ/FargateCluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateCluster7CCD5F93"
+ }
+ ],
+ "/aws-ecs-integ/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ExecutionRole605A040B"
+ }
+ ],
+ "/aws-ecs-integ/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ExecutionRoleDefaultPolicyA5B92313"
+ }
+ ],
+ "/aws-ecs-integ/L3/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LB212FC0E0"
+ }
+ ],
+ "/aws-ecs-integ/L3/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LBSecurityGroupEDE61198"
+ }
+ ],
+ "/aws-ecs-integ/L3/LB/SecurityGroup/to awsecsintegL3ServiceSecurityGroup7B96C87F:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LBSecurityGrouptoawsecsintegL3ServiceSecurityGroup7B96C87F8094933E0A"
+ }
+ ],
+ "/aws-ecs-integ/L3/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LBPublicListener156FFC0F"
+ }
+ ],
+ "/aws-ecs-integ/L3/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LBPublicListenerECSGroup648EEA11"
+ }
+ ],
+ "/aws-ecs-integ/L3/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3LoadBalancerDNSC6CB4A70"
+ }
+ ],
+ "/aws-ecs-integ/L3/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3ServiceURL0F065F2D"
+ }
+ ],
+ "/aws-ecs-integ/L3/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3TaskDefTaskRole21C75D10"
+ }
+ ],
+ "/aws-ecs-integ/L3/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3TaskDef48D8ACB8"
+ }
+ ],
+ "/aws-ecs-integ/L3/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3TaskDefwebLogGroupC6E4A38A"
+ }
+ ],
+ "/aws-ecs-integ/L3/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3Service616D5A93"
+ }
+ ],
+ "/aws-ecs-integ/L3/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3ServiceSecurityGroup677B0897"
+ }
+ ],
+ "/aws-ecs-integ/L3/Service/SecurityGroup/from awsecsintegL3LBSecurityGroupA70DA46C:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "L3ServiceSecurityGroupfromawsecsintegL3LBSecurityGroupA70DA46C80DBDFBCD6"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..5150714b11036
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/executionrole.integ.snapshot/tree.json
@@ -0,0 +1,1253 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ": {
+ "id": "aws-ecs-integ",
+ "path": "aws-ecs-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "FargateCluster": {
+ "id": "FargateCluster",
+ "path": "aws-ecs-integ/FargateCluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateCluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": [
+ "ecs-tasks.amazonaws.com",
+ "ecs.amazonaws.com"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "L3TaskDefwebLogGroupC6E4A38A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ExecutionRoleDefaultPolicyA5B92313",
+ "roles": [
+ {
+ "Ref": "ExecutionRole605A040B"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "L3": {
+ "id": "L3",
+ "path": "aws-ecs-integ/L3",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ/L3/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/L3/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegL3LB6453BA0A",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegL3ServiceSecurityGroup7B96C87F:80": {
+ "id": "to awsecsintegL3ServiceSecurityGroup7B96C87F:80",
+ "path": "aws-ecs-integ/L3/LB/SecurityGroup/to awsecsintegL3ServiceSecurityGroup7B96C87F:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ },
+ "fromPort": 80,
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ/L3/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "L3LBPublicListenerECSGroup648EEA11"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "L3LB212FC0E0"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ/L3/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/L3/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ/L3/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/L3/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/L3/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "L3TaskDefwebLogGroupC6E4A38A"
+ },
+ "awslogs-stream-prefix": "L3",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "ExecutionRole605A040B",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegL3TaskDefAA25240E",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "L3TaskDefTaskRole21C75D10",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/L3/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/L3/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/L3/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/L3/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "L3LBPublicListenerECSGroup648EEA11"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "L3TaskDef48D8ACB8"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/L3/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/L3/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/L3/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegL3LBSecurityGroupA70DA46C:80": {
+ "id": "from awsecsintegL3LBSecurityGroupA70DA46C:80",
+ "path": "aws-ecs-integ/L3/Service/SecurityGroup/from awsecsintegL3LBSecurityGroupA70DA46C:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 80,
+ "groupId": {
+ "Fn::GetAtt": [
+ "L3ServiceSecurityGroup677B0897",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "L3LBSecurityGroupEDE61198",
+ "GroupId"
+ ]
+ },
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.asset-image.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.asset-image.expected.json
index 01c7cb601a90c..23fcba8794ced 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.asset-image.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.asset-image.expected.json
@@ -503,7 +503,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48"
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.circuit-breaker-queue-processing-fargate-service.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.circuit-breaker-queue-processing-fargate-service.expected.json
index 8e44e25a0c5ac..bd451b2c94895 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.circuit-breaker-queue-processing-fargate-service.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.circuit-breaker-queue-processing-fargate-service.expected.json
@@ -460,7 +460,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:d6b024485c22795b5f5379edcd5cd6485f5bec6eb80bd072b20526f8eb2e0c64"
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-isolated.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-isolated.expected.json
index 07eefdc4a2629..b351c625b9a04 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-isolated.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-isolated.expected.json
@@ -769,7 +769,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:d6b024485c22795b5f5379edcd5cd6485f5bec6eb80bd072b20526f8eb2e0c64"
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.expected.json
index 66c9a16e4a4e4..be5262a5f25ce 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.expected.json
@@ -609,8 +609,8 @@
"CMD-SHELL",
"curl -f http://localhost/ || exit 1"
],
- "Interval": 720,
- "Retries": 34,
+ "Interval": 6,
+ "Retries": 10,
"Timeout": 5
},
"Image": {
@@ -628,7 +628,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:d6b024485c22795b5f5379edcd5cd6485f5bec6eb80bd072b20526f8eb2e0c64"
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.ts b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.ts
index 4877a7d211747..bc3c9b621309e 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public.ts
@@ -16,8 +16,8 @@ new QueueProcessingFargateService(stack, 'PublicQueueService', {
assignPublicIp: true,
healthCheck: {
command: ['CMD-SHELL', 'curl -f http://localhost/ || exit 1'],
- interval: Duration.minutes(12),
- retries: 34,
+ interval: Duration.seconds(6),
+ retries: 10,
},
});
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service.expected.json
index 1eab7f10bddc6..9746768edf9fe 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service.expected.json
@@ -460,7 +460,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:d6b024485c22795b5f5379edcd5cd6485f5bec6eb80bd072b20526f8eb2e0c64"
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.scheduled-fargate-task.lit.expected.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.scheduled-fargate-task.lit.expected.json
index 5110af7cc54eb..f0540fcb9044b 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.scheduled-fargate-task.lit.expected.json
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/integ.scheduled-fargate-task.lit.expected.json
@@ -293,7 +293,7 @@
{
"Ref": "AWS::URLSuffix"
},
- "/aws-cdk/assets:8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48"
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
]
]
},
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/aws-ecs-integ-l3-autocreate.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/aws-ecs-integ-l3-autocreate.template.json
new file mode 100644
index 0000000000000..1f9ca9150aa38
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/aws-ecs-integ-l3-autocreate.template.json
@@ -0,0 +1,976 @@
+{
+ "Resources": {
+ "ALBFargateServiceLB64A0074E": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1DefaultRouteFF4E2178",
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2DefaultRouteB1375520"
+ ]
+ },
+ "ALBFargateServiceLBSecurityGroup5DC3060E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegl3autocreateALBFargateServiceLB31EA4AB6",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "ALBFargateServiceLBSecurityGrouptoawsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B580770A6C60": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "FromPort": 80,
+ "ToPort": 80
+ }
+ },
+ "ALBFargateServiceLBPublicListener3489002A": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefTaskRole11408723": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefF69F17D6": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegl3autocreateALBFargateServiceTaskDefDA905826",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "Roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "ALBFargateService90FDCE10": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYN926A5246"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ },
+ "DependsOn": [
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C",
+ "ALBFargateServiceLBPublicListener3489002A"
+ ]
+ },
+ "ALBFargateServiceSecurityGroup82F7A67E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "ALBFargateServiceSecurityGroupfromawsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF802E7B8344": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 80,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ToPort": 80
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYN926A5246": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "EcsDefaultClusterMnL3mNNYNVpc7788A521": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableAssociation8B583A17": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC"
+ },
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1DefaultRouteFF4E2178": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ },
+ "DependsOn": [
+ "EcsDefaultClusterMnL3mNNYNVpcVPCGW2447264E"
+ ]
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1EIP8704DB2F": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1NATGateway5E3732C1": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1EIP8704DB2F",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTableAssociation43E5803C": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5"
+ },
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2DefaultRouteB1375520": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ },
+ "DependsOn": [
+ "EcsDefaultClusterMnL3mNNYNVpcVPCGW2447264E"
+ ]
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2EIPF0764873": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2NATGateway4C855E00": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2EIPF0764873",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTableAssociation34B92275": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36"
+ },
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1DefaultRouteA5ADF694": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1NATGateway5E3732C1"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableAssociation111C622F": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591"
+ },
+ "SubnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2DefaultRoute20CE2D89": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2NATGateway4C855E00"
+ }
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc"
+ }
+ ]
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpcVPCGW2447264E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "InternetGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ }
+ },
+ "NLBFargateServiceLB659EC17C": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1DefaultRouteFF4E2178",
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2DefaultRouteB1375520"
+ ]
+ },
+ "NLBFargateServiceLBPublicListenerB0DCA73C": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "Port": 80,
+ "Protocol": "TCP"
+ }
+ },
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefTaskRole6C88F40B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefB836FA89": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegl3autocreateNLBFargateServiceTaskDef7AC6C114",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "Roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "NLBFargateServiceB92AC095": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYN926A5246"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ },
+ "DependsOn": [
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2",
+ "NLBFargateServiceLBPublicListenerB0DCA73C"
+ ]
+ },
+ "NLBFargateServiceSecurityGroup9D81388B": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ }
+ },
+ "Outputs": {
+ "ALBFargateServiceLoadBalancerDNSAFB2EDDB": {
+ "Value": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ },
+ "ALBFargateServiceServiceURL4A19CF25": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "NLBFargateServiceLoadBalancerDNSC2B2922F": {
+ "Value": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceLB659EC17C",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..eef65959b02dc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.l3-autocreate": {
+ "stacks": [
+ "aws-ecs-integ-l3-autocreate"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..f74edda741c14
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/manifest.json
@@ -0,0 +1,322 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ-l3-autocreate": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ-l3-autocreate.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLB64A0074E"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGroup5DC3060E"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LB/SecurityGroup/to awsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B5:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGrouptoawsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B580770A6C60"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListener3489002A"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLoadBalancerDNSAFB2EDDB"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceServiceURL4A19CF25"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefTaskRole11408723"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateService90FDCE10"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroup82F7A67E"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup/from awsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroupfromawsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF802E7B8344"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYN926A5246"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableAssociation8B583A17"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1DefaultRouteFF4E2178"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1EIP8704DB2F"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1NATGateway5E3732C1"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTableAssociation43E5803C"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2DefaultRouteB1375520"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2EIPF0764873"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2NATGateway4C855E00"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTableAssociation34B92275"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1DefaultRouteA5ADF694"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableAssociation111C622F"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2DefaultRoute20CE2D89"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpcVPCGW2447264E"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLB659EC17C"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerB0DCA73C"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLoadBalancerDNSC2B2922F"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefTaskRole6C88F40B"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefB836FA89"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceB92AC095"
+ }
+ ],
+ "/aws-ecs-integ-l3-autocreate/NLBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceSecurityGroup9D81388B"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ-l3-autocreate"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..80c48217c1937
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-autocreate.integ.snapshot/tree.json
@@ -0,0 +1,1688 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ-l3-autocreate": {
+ "id": "aws-ecs-integ-l3-autocreate",
+ "path": "aws-ecs-integ-l3-autocreate",
+ "children": {
+ "ALBFargateService": {
+ "id": "ALBFargateService",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegl3autocreateALBFargateServiceLB31EA4AB6",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B5:80": {
+ "id": "to awsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B5:80",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/SecurityGroup/to awsecsintegl3autocreateALBFargateServiceSecurityGroup6F9400B5:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "fromPort": 80,
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegl3autocreateALBFargateServiceTaskDefDA905826",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYN926A5246"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF:80": {
+ "id": "from awsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF:80",
+ "path": "aws-ecs-integ-l3-autocreate/ALBFargateService/Service/SecurityGroup/from awsecsintegl3autocreateALBFargateServiceLBSecurityGroupD565E0BF:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 80,
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYN": {
+ "id": "EcsDefaultClusterMnL3mNNYN",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ },
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC"
+ },
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1RouteTableA1FD6ACC"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1EIP8704DB2F",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5"
+ },
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2RouteTable263DEAA5"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2EIPF0764873",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36"
+ },
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1RouteTable4F1D2E36"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1NATGateway5E3732C1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591"
+ },
+ "subnetId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2RouteTableDCE46591"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2NATGateway4C855E00"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ-l3-autocreate/EcsDefaultClusterMnL3mNNYN/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ },
+ "internetGatewayId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcIGW9C2C2B8F"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "NLBFargateService": {
+ "id": "NLBFargateService",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet1Subnet3C273B99"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPublicSubnet2Subnet95FF715A"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "port": 80,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegl3autocreateNLBFargateServiceTaskDef7AC6C114",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYN926A5246"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet1Subnet075EFF4C"
+ },
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpcPrivateSubnet2SubnetE4CEDF73"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-l3-autocreate/NLBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc7788A521"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.NetworkLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/aws-ecs-integ-l3-vpconly.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/aws-ecs-integ-l3-vpconly.template.json
new file mode 100644
index 0000000000000..ba315a320a5fc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/aws-ecs-integ-l3-vpconly.template.json
@@ -0,0 +1,976 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-l3-vpconly/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ALBFargateServiceLB64A0074E": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "ALBFargateServiceLBSecurityGroup5DC3060E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegl3vpconlyALBFargateServiceLBE08492C1",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceLBSecurityGrouptoawsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A42180D1AB9DBC": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "FromPort": 80,
+ "ToPort": 80
+ }
+ },
+ "ALBFargateServiceLBPublicListener3489002A": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefTaskRole11408723": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefF69F17D6": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegl3vpconlyALBFargateServiceTaskDef846555AE",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "Roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "ALBFargateService90FDCE10": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc18E0451A"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ },
+ "DependsOn": [
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C",
+ "ALBFargateServiceLBPublicListener3489002A"
+ ]
+ },
+ "ALBFargateServiceSecurityGroup82F7A67E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceSecurityGroupfromawsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD8073FB670D": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 80,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ToPort": 80
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpc18E0451A": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "NLBFargateServiceLB659EC17C": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "NLBFargateServiceLBPublicListenerB0DCA73C": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "Port": 80,
+ "Protocol": "TCP"
+ }
+ },
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefTaskRole6C88F40B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefB836FA89": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegl3vpconlyNLBFargateServiceTaskDef1E6E41A6",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "Roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "NLBFargateServiceB92AC095": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc18E0451A"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ },
+ "DependsOn": [
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2",
+ "NLBFargateServiceLBPublicListenerB0DCA73C"
+ ]
+ },
+ "NLBFargateServiceSecurityGroup9D81388B": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ }
+ },
+ "Outputs": {
+ "ALBFargateServiceLoadBalancerDNSAFB2EDDB": {
+ "Value": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ },
+ "ALBFargateServiceServiceURL4A19CF25": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "NLBFargateServiceLoadBalancerDNSC2B2922F": {
+ "Value": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceLB659EC17C",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..245368ce6c169
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.l3-vpconly": {
+ "stacks": [
+ "aws-ecs-integ-l3-vpconly"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..7661d89890d93
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/manifest.json
@@ -0,0 +1,322 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ-l3-vpconly": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ-l3-vpconly.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ-l3-vpconly/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLB64A0074E"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGroup5DC3060E"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LB/SecurityGroup/to awsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A421:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGrouptoawsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A42180D1AB9DBC"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListener3489002A"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLoadBalancerDNSAFB2EDDB"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceServiceURL4A19CF25"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefTaskRole11408723"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateService90FDCE10"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroup82F7A67E"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup/from awsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroupfromawsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD8073FB670D"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/EcsDefaultClusterMnL3mNNYNVpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVpc18E0451A"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLB659EC17C"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerB0DCA73C"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLoadBalancerDNSC2B2922F"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefTaskRole6C88F40B"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefB836FA89"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceB92AC095"
+ }
+ ],
+ "/aws-ecs-integ-l3-vpconly/NLBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceSecurityGroup9D81388B"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ-l3-vpconly"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..d60ee873d698d
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3-vpconly.integ.snapshot/tree.json
@@ -0,0 +1,1688 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ-l3-vpconly": {
+ "id": "aws-ecs-integ-l3-vpconly",
+ "path": "aws-ecs-integ-l3-vpconly",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-l3-vpconly/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ-l3-vpconly/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "ALBFargateService": {
+ "id": "ALBFargateService",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegl3vpconlyALBFargateServiceLBE08492C1",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A421:80": {
+ "id": "to awsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A421:80",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/SecurityGroup/to awsecsintegl3vpconlyALBFargateServiceSecurityGroup3700A421:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "fromPort": 80,
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegl3vpconlyALBFargateServiceTaskDef846555AE",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc18E0451A"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD:80": {
+ "id": "from awsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD:80",
+ "path": "aws-ecs-integ-l3-vpconly/ALBFargateService/Service/SecurityGroup/from awsecsintegl3vpconlyALBFargateServiceLBSecurityGroup96E9BBBD:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 80,
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVpc": {
+ "id": "EcsDefaultClusterMnL3mNNYNVpc",
+ "path": "aws-ecs-integ-l3-vpconly/EcsDefaultClusterMnL3mNNYNVpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/EcsDefaultClusterMnL3mNNYNVpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "NLBFargateService": {
+ "id": "NLBFargateService",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "port": 80,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegl3vpconlyNLBFargateServiceTaskDef1E6E41A6",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVpc18E0451A"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-l3-vpconly/NLBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.NetworkLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/aws-ecs-integ-lb-fargate.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/aws-ecs-integ-lb-fargate.template.json
new file mode 100644
index 0000000000000..5d9f94b76397a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/aws-ecs-integ-lb-fargate.template.json
@@ -0,0 +1,976 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ-lb-fargate/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "FargateCluster7CCD5F93": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "ALBFargateServiceLB64A0074E": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "ALBFargateServiceLBSecurityGroup5DC3060E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsinteglbfargateALBFargateServiceLBF93E98F2",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 80",
+ "FromPort": 80,
+ "IpProtocol": "tcp",
+ "ToPort": 80
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceLBSecurityGrouptoawsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB80C5CFCE6C": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "FromPort": 80,
+ "ToPort": 80
+ }
+ },
+ "ALBFargateServiceLBPublicListener3489002A": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "Port": 80,
+ "Protocol": "HTTP"
+ }
+ },
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefTaskRole11408723": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefF69F17D6": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsinteglbfargateALBFargateServiceTaskDef26FE75C0",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "Roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "ALBFargateService90FDCE10": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ },
+ "DependsOn": [
+ "ALBFargateServiceLBPublicListenerECSGroup6871FB8C",
+ "ALBFargateServiceLBPublicListener3489002A"
+ ]
+ },
+ "ALBFargateServiceSecurityGroup82F7A67E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "ALBFargateServiceSecurityGroupfromawsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D2880462ECC11": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 80,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ToPort": 80
+ }
+ },
+ "NLBFargateServiceLB659EC17C": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "NLBFargateServiceLBPublicListenerB0DCA73C": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "Port": 80,
+ "Protocol": "TCP"
+ }
+ },
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefTaskRole6C88F40B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefB836FA89": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "512",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsinteglbfargateNLBFargateServiceTaskDef1265FF34",
+ "Memory": "1024",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "Roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "NLBFargateServiceB92AC095": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ },
+ "DependsOn": [
+ "NLBFargateServiceLBPublicListenerECSGroupC469CAA2",
+ "NLBFargateServiceLBPublicListenerB0DCA73C"
+ ]
+ },
+ "NLBFargateServiceSecurityGroup9D81388B": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ-lb-fargate/NLBFargateService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ }
+ },
+ "Outputs": {
+ "ALBFargateServiceLoadBalancerDNSAFB2EDDB": {
+ "Value": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ },
+ "ALBFargateServiceServiceURL4A19CF25": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLB64A0074E",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "NLBFargateServiceLoadBalancerDNSC2B2922F": {
+ "Value": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceLB659EC17C",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..70cdb7117a70a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.l3": {
+ "stacks": [
+ "aws-ecs-integ-lb-fargate"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..c602c776fa209
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/manifest.json
@@ -0,0 +1,322 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ-lb-fargate": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ-lb-fargate.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ-lb-fargate/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/FargateCluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateCluster7CCD5F93"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLB64A0074E"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGroup5DC3060E"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LB/SecurityGroup/to awsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBSecurityGrouptoawsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB80C5CFCE6C"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListener3489002A"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceLoadBalancerDNSAFB2EDDB"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceServiceURL4A19CF25"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefTaskRole11408723"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateService90FDCE10"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroup82F7A67E"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup/from awsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D28:80": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ALBFargateServiceSecurityGroupfromawsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D2880462ECC11"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLB659EC17C"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerB0DCA73C"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceLoadBalancerDNSC2B2922F"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefTaskRole6C88F40B"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefB836FA89"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceB92AC095"
+ }
+ ],
+ "/aws-ecs-integ-lb-fargate/NLBFargateService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NLBFargateServiceSecurityGroup9D81388B"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ-lb-fargate"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..088d9e1f07a15
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/l3.integ.snapshot/tree.json
@@ -0,0 +1,1688 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ-lb-fargate": {
+ "id": "aws-ecs-integ-lb-fargate",
+ "path": "aws-ecs-integ-lb-fargate",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ-lb-fargate/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ-lb-fargate/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ-lb-fargate/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "FargateCluster": {
+ "id": "FargateCluster",
+ "path": "aws-ecs-integ-lb-fargate/FargateCluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/FargateCluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "ALBFargateService": {
+ "id": "ALBFargateService",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsinteglbfargateALBFargateServiceLBF93E98F2",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 80,
+ "toPort": 80,
+ "description": "Allow from anyone on port 80"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB:80": {
+ "id": "to awsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB:80",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/SecurityGroup/to awsecsinteglbfargateALBFargateServiceSecurityGroup0D9B5AEB:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "fromPort": 80,
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "ALBFargateServiceLB64A0074E"
+ },
+ "port": 80,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "ALBFargateServiceTaskDefwebLogGroup7073A41D"
+ },
+ "awslogs-stream-prefix": "ALBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefExecutionRole9E885E7B",
+ "Arn"
+ ]
+ },
+ "family": "awsecsinteglbfargateALBFargateServiceTaskDef26FE75C0",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefTaskRole11408723",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceTaskDefwebLogGroup7073A41D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ALBFargateServiceTaskDefExecutionRoleDefaultPolicy574B9EAD",
+ "roles": [
+ {
+ "Ref": "ALBFargateServiceTaskDefExecutionRole9E885E7B"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "ALBFargateServiceLBPublicListenerECSGroup6871FB8C"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "ALBFargateServiceTaskDefF69F17D6"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D28:80": {
+ "id": "from awsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D28:80",
+ "path": "aws-ecs-integ-lb-fargate/ALBFargateService/Service/SecurityGroup/from awsecsinteglbfargateALBFargateServiceLBSecurityGroupCD911D28:80",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 80,
+ "groupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceSecurityGroup82F7A67E",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "ALBFargateServiceLBSecurityGroup5DC3060E",
+ "GroupId"
+ ]
+ },
+ "toPort": 80
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "NLBFargateService": {
+ "id": "NLBFargateService",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "NLBFargateServiceLB659EC17C"
+ },
+ "port": 80,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "NLBFargateServiceTaskDefwebLogGroupC4A42FE2"
+ },
+ "awslogs-stream-prefix": "NLBFargateService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "512",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefExecutionRoleF6D642D5",
+ "Arn"
+ ]
+ },
+ "family": "awsecsinteglbfargateNLBFargateServiceTaskDef1265FF34",
+ "memory": "1024",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefTaskRole6C88F40B",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "NLBFargateServiceTaskDefwebLogGroupC4A42FE2",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "NLBFargateServiceTaskDefExecutionRoleDefaultPolicy90080805",
+ "roles": [
+ {
+ "Ref": "NLBFargateServiceTaskDefExecutionRoleF6D642D5"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "FargateCluster7CCD5F93"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "NLBFargateServiceLBPublicListenerECSGroupC469CAA2"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "NLBFargateServiceSecurityGroup9D81388B",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "NLBFargateServiceTaskDefB836FA89"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ-lb-fargate/NLBFargateService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ-lb-fargate/NLBFargateService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.NetworkLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/load-balanced-fargate-service.test.ts b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/load-balanced-fargate-service.test.ts
index 70763a1bc2277..a00b676894c83 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/load-balanced-fargate-service.test.ts
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/load-balanced-fargate-service.test.ts
@@ -1047,3 +1047,29 @@ test('test Network load balanced service with docker labels defined', () => {
],
});
});
+
+test('Passing in token for desiredCount will not throw error', () => {
+ // GIVEN
+ const stack = new cdk.Stack();
+ const vpc = new ec2.Vpc(stack, 'VPC');
+ const cluster = new ecs.Cluster(stack, 'Cluster', { vpc });
+ const param = new cdk.CfnParameter(stack, 'prammm', {
+ type: 'Number',
+ default: 1,
+ });
+
+ // WHEN
+ const service = new ecsPatterns.ApplicationLoadBalancedFargateService(stack, 'Service', {
+ cluster,
+ taskImageOptions: {
+ image: ecs.ContainerImage.fromRegistry('/aws/aws-example-app'),
+ dockerLabels: { label1: 'labelValue1', label2: 'labelValue2' },
+ },
+ desiredCount: param.valueAsNumber,
+ });
+
+ // THEN
+ expect(() => {
+ service.internalDesiredCount;
+ }).toBeTruthy;
+});
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..2a503a6b25d24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,714 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ClusterEB0386A7": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "myServicelb1FA8CBE12": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "myServicelb1listener15ED0E805": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "myServicelb1FA8CBE12"
+ },
+ "Port": 80,
+ "Protocol": "TCP"
+ }
+ },
+ "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServicelb2C84C7BCB": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "myServicelb2listener2AA6970EB": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "myServicelb2listener2ECSTargetGroupweb90Group6841F924"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "myServicelb2C84C7BCB"
+ },
+ "Port": 80,
+ "Protocol": "TCP"
+ }
+ },
+ "myServicelb2listener2ECSTargetGroupweb90Group6841F924": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 90,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "myServiceTaskDefTaskRole1C1DE6CC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDef7FB8322A": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "myServiceTaskDefwebLogGroupA1767F2C"
+ },
+ "awslogs-stream-prefix": "myService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 80,
+ "Protocol": "tcp"
+ },
+ {
+ "ContainerPort": 90,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefExecutionRole618CD311",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegmyServiceTaskDefA3A33D18",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefTaskRole1C1DE6CC",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "myServiceTaskDefwebLogGroupA1767F2C": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "myServiceTaskDefExecutionRole618CD311": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefwebLogGroupA1767F2C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571",
+ "Roles": [
+ {
+ "Ref": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ]
+ }
+ },
+ "myServiceB0B6FAA0": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 80,
+ "TargetGroupArn": {
+ "Ref": "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A"
+ }
+ },
+ {
+ "ContainerName": "web",
+ "ContainerPort": 90,
+ "TargetGroupArn": {
+ "Ref": "myServicelb2listener2ECSTargetGroupweb90Group6841F924"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "myServiceTaskDef7FB8322A"
+ }
+ },
+ "DependsOn": [
+ "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A",
+ "myServicelb1listener15ED0E805",
+ "myServicelb2listener2ECSTargetGroupweb90Group6841F924",
+ "myServicelb2listener2AA6970EB"
+ ]
+ },
+ "myServiceSecurityGroupC3B9D4E0": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ }
+ },
+ "Outputs": {
+ "myServiceLoadBalancerDNSlb1341EE21A": {
+ "Value": {
+ "Fn::GetAtt": [
+ "myServicelb1FA8CBE12",
+ "DNSName"
+ ]
+ }
+ },
+ "myServiceLoadBalancerDNSlb2DDCE46C8": {
+ "Value": {
+ "Fn::GetAtt": [
+ "myServicelb2C84C7BCB",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..3ad673dec97ba
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.multiple-network-load-balanced-fargate-service": {
+ "stacks": [
+ "aws-ecs-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..b16e5c31ee027
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/manifest.json
@@ -0,0 +1,256 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ/Cluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ClusterEB0386A7"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb1/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb1FA8CBE12"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb1/listener1/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb1listener15ED0E805"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb1/listener1/ECSTargetGroupweb80Group/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A"
+ }
+ ],
+ "/aws-ecs-integ/myService/LoadBalancerDNSlb1": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLoadBalancerDNSlb1341EE21A"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb2/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb2C84C7BCB"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb2/listener2/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb2listener2AA6970EB"
+ }
+ ],
+ "/aws-ecs-integ/myService/lb2/listener2/ECSTargetGroupweb90Group/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServicelb2listener2ECSTargetGroupweb90Group6841F924"
+ }
+ ],
+ "/aws-ecs-integ/myService/LoadBalancerDNSlb2": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceLoadBalancerDNSlb2DDCE46C8"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefTaskRole1C1DE6CC"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDef7FB8322A"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefwebLogGroupA1767F2C"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ],
+ "/aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571"
+ }
+ ],
+ "/aws-ecs-integ/myService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceB0B6FAA0"
+ }
+ ],
+ "/aws-ecs-integ/myService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "myServiceSecurityGroupC3B9D4E0"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..fd5e02d16b4b9
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/multiple-network-load-balanced-fargate-service.integ.snapshot/tree.json
@@ -0,0 +1,1257 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ": {
+ "id": "aws-ecs-integ",
+ "path": "aws-ecs-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "Cluster": {
+ "id": "Cluster",
+ "path": "aws-ecs-integ/Cluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Cluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "myService": {
+ "id": "myService",
+ "path": "aws-ecs-integ/myService",
+ "children": {
+ "lb1": {
+ "id": "lb1",
+ "path": "aws-ecs-integ/myService/lb1",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb1/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "listener1": {
+ "id": "listener1",
+ "path": "aws-ecs-integ/myService/lb1/listener1",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb1/listener1/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "myServicelb1FA8CBE12"
+ },
+ "port": 80,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSTargetGroupweb80Group": {
+ "id": "ECSTargetGroupweb80Group",
+ "path": "aws-ecs-integ/myService/lb1/listener1/ECSTargetGroupweb80Group",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb1/listener1/ECSTargetGroupweb80Group/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNSlb1": {
+ "id": "LoadBalancerDNSlb1",
+ "path": "aws-ecs-integ/myService/LoadBalancerDNSlb1",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "lb2": {
+ "id": "lb2",
+ "path": "aws-ecs-integ/myService/lb2",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb2/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "listener2": {
+ "id": "listener2",
+ "path": "aws-ecs-integ/myService/lb2/listener2",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb2/listener2/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "myServicelb2listener2ECSTargetGroupweb90Group6841F924"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "myServicelb2C84C7BCB"
+ },
+ "port": 80,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSTargetGroupweb90Group": {
+ "id": "ECSTargetGroupweb90Group",
+ "path": "aws-ecs-integ/myService/lb2/listener2/ECSTargetGroupweb90Group",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/lb2/listener2/ECSTargetGroupweb90Group/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 90,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNSlb2": {
+ "id": "LoadBalancerDNSlb2",
+ "path": "aws-ecs-integ/myService/LoadBalancerDNSlb2",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/myService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/myService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "amazon/amazon-ecs-sample",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 80,
+ "protocol": "tcp"
+ },
+ {
+ "containerPort": 90,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "myServiceTaskDefwebLogGroupA1767F2C"
+ },
+ "awslogs-stream-prefix": "myService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefExecutionRole618CD311",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegmyServiceTaskDefA3A33D18",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefTaskRole1C1DE6CC",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/myService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/myService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "myServiceTaskDefwebLogGroupA1767F2C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "myServiceTaskDefExecutionRoleDefaultPolicyBDAEC571",
+ "roles": [
+ {
+ "Ref": "myServiceTaskDefExecutionRole618CD311"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/myService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/myService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "myServicelb1listener1ECSTargetGroupweb80GroupC3F9339A"
+ },
+ "containerName": "web",
+ "containerPort": 80
+ },
+ {
+ "targetGroupArn": {
+ "Ref": "myServicelb2listener2ECSTargetGroupweb90Group6841F924"
+ },
+ "containerName": "web",
+ "containerPort": 90
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "myServiceSecurityGroupC3B9D4E0",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "myServiceTaskDef7FB8322A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/myService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/myService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.NetworkMultipleTargetGroupsFargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/aws-ecs-patterns-queue-isolated.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/aws-ecs-patterns-queue-isolated.template.json
new file mode 100644
index 0000000000000..930d342cdb091
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/aws-ecs-patterns-queue-isolated.template.json
@@ -0,0 +1,1232 @@
+{
+ "Resources": {
+ "VPCB9E5F0B4": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1SubnetB4246D30": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/24",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableFEE4B781": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableAssociation0B0896DC": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "VPCPublicSubnet1DefaultRoute91CEF279": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet2Subnet74179F39": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.1.0/24",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTable6F1A15F1": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTableAssociation5A808732": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "VPCPublicSubnet2DefaultRouteB7481BBA": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCIsolatedSubnet1SubnetEBD00FC6": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.2.0/24",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Isolated"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Isolated"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCIsolatedSubnet1RouteTableEB156210": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCIsolatedSubnet1RouteTableAssociationA2D18F7C": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCIsolatedSubnet1RouteTableEB156210"
+ },
+ "SubnetId": {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ }
+ }
+ },
+ "VPCIsolatedSubnet2Subnet4B1C8CAA": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.3.0/24",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Isolated"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Isolated"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCIsolatedSubnet2RouteTable9B4F78DC": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCIsolatedSubnet2RouteTable9B4F78DC"
+ },
+ "SubnetId": {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ }
+ },
+ "VPCIGWB7E252D3": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ]
+ }
+ },
+ "VPCVPCGW99B986DC": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "InternetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "VPCS3Endpoint18C9C7CA": {
+ "Type": "AWS::EC2::VPCEndpoint",
+ "Properties": {
+ "ServiceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".s3"
+ ]
+ ]
+ },
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "RouteTableIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1RouteTableEB156210"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2RouteTable9B4F78DC"
+ }
+ ],
+ "VpcEndpointType": "Gateway"
+ }
+ },
+ "VPCSqsEndpointSecurityGroupAE06A78D": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ },
+ "FromPort": 443,
+ "IpProtocol": "tcp",
+ "ToPort": 443
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "VPCSqsEndpoint9A40D77F": {
+ "Type": "AWS::EC2::VPCEndpoint",
+ "Properties": {
+ "ServiceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".sqs"
+ ]
+ ]
+ },
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "PrivateDnsEnabled": true,
+ "SecurityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCSqsEndpointSecurityGroupAE06A78D",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "VpcEndpointType": "Interface"
+ }
+ },
+ "VPCEcrEndpointSecurityGroup50ED8BA4": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ },
+ "FromPort": 443,
+ "IpProtocol": "tcp",
+ "ToPort": 443
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "VPCEcrEndpointB4F98F37": {
+ "Type": "AWS::EC2::VPCEndpoint",
+ "Properties": {
+ "ServiceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".ecr.api"
+ ]
+ ]
+ },
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "PrivateDnsEnabled": true,
+ "SecurityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "VpcEndpointType": "Interface"
+ }
+ },
+ "VPCEcrImageEndpointSecurityGroup83621638": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ },
+ "FromPort": 443,
+ "IpProtocol": "tcp",
+ "ToPort": 443
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "VPCEcrImageEndpointD55381DC": {
+ "Type": "AWS::EC2::VPCEndpoint",
+ "Properties": {
+ "ServiceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".ecr.dkr"
+ ]
+ ]
+ },
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "PrivateDnsEnabled": true,
+ "SecurityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "VpcEndpointType": "Interface"
+ }
+ },
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ },
+ "FromPort": 443,
+ "IpProtocol": "tcp",
+ "ToPort": 443
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "VPCCloudWatchLogsEndpointE175AF65": {
+ "Type": "AWS::EC2::VPCEndpoint",
+ "Properties": {
+ "ServiceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".logs"
+ ]
+ ]
+ },
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "PrivateDnsEnabled": true,
+ "SecurityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "VpcEndpointType": "Interface"
+ }
+ },
+ "MyCustomSGDE27C661": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-isolated/MyCustomSG",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "MessageRetentionPeriod": 1209600
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "RedrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicyD52E156B": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicyD52E156B",
+ "Roles": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511"
+ }
+ ]
+ }
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDef0F0CE105": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Environment": [
+ {
+ "Name": "QUEUE_NAME",
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "Essential": true,
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6"
+ },
+ "awslogs-stream-prefix": "IsolatedQueueService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "QueueProcessingContainer"
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77",
+ "Arn"
+ ]
+ },
+ "Family": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingTaskDef27DBAF49",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "IsolatedQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicy5667D265": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicy5667D265",
+ "Roles": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77"
+ }
+ ]
+ }
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceE868AEE1": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "LaunchType": "FARGATE",
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "MyCustomSGDE27C661",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDef0F0CE105"
+ }
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D": {
+ "Type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "Properties": {
+ "MaxCapacity": 2,
+ "MinCapacity": 1,
+ "ResourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingFargateServiceE868AEE1",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "RoleARN": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "ScalableDimension": "ecs:service:DesiredCount",
+ "ServiceNamespace": "ecs"
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling2B518D9D": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling8B2FB6C4",
+ "PolicyType": "TargetTrackingScaling",
+ "ScalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "TargetTrackingScalingPolicyConfiguration": {
+ "PredefinedMetricSpecification": {
+ "PredefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "TargetValue": 50
+ }
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy960D4BA1": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy5EFC8D1B",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalUpperBound": 0,
+ "ScalingAdjustment": -1
+ }
+ ]
+ }
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm88D1A0F9": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "LessThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy960D4BA1"
+ }
+ ],
+ "AlarmDescription": "Lower threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 0
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyFAB35025": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy51E582BF",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalLowerBound": 0,
+ "MetricIntervalUpperBound": 400,
+ "ScalingAdjustment": 1
+ },
+ {
+ "MetricIntervalLowerBound": 400,
+ "ScalingAdjustment": 5
+ }
+ ]
+ }
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm351987F5": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyFAB35025"
+ }
+ ],
+ "AlarmDescription": "Upper threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 100
+ },
+ "DependsOn": [
+ "VPCCloudWatchLogsEndpointE175AF65",
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "VPCEcrEndpointB4F98F37",
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "VPCEcrImageEndpointD55381DC",
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "VPCSqsEndpoint9A40D77F",
+ "VPCSqsEndpointSecurityGroupAE06A78D"
+ ]
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3": {
+ "Type": "AWS::ECS::Cluster"
+ }
+ },
+ "Outputs": {
+ "IsolatedQueueServiceSQSDeadLetterQueue43D346B9": {
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D",
+ "QueueName"
+ ]
+ }
+ },
+ "IsolatedQueueServiceSQSDeadLetterQueueArnCE7C60F2": {
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D",
+ "Arn"
+ ]
+ }
+ },
+ "IsolatedQueueServiceSQSQueueA65E2641": {
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ },
+ "IsolatedQueueServiceSQSQueueArn571FDB86": {
+ "Value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "Arn"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..7f28bca910bb4
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-isolated": {
+ "stacks": [
+ "aws-ecs-patterns-queue-isolated"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..ded8289ca5e60
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/manifest.json
@@ -0,0 +1,317 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-patterns-queue-isolated": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-patterns-queue-isolated.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-patterns-queue-isolated": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "id": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "packaging": "container-image",
+ "path": "asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "sourceHash": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ }
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCB9E5F0B4"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableFEE4B781"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableAssociation0B0896DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1DefaultRoute91CEF279"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTable6F1A15F1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTableAssociation5A808732"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2DefaultRouteB7481BBA"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet1RouteTableEB156210"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet1RouteTableAssociationA2D18F7C"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet2RouteTable9B4F78DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIsolatedSubnet2RouteTableAssociation7BF8E0EB"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIGWB7E252D3"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCVPCGW99B986DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/S3Endpoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCS3Endpoint18C9C7CA"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCSqsEndpointSecurityGroupAE06A78D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCSqsEndpoint9A40D77F"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCEcrEndpointSecurityGroup50ED8BA4"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCEcrEndpointB4F98F37"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCEcrImageEndpointSecurityGroup83621638"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCEcrImageEndpointD55381DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCCloudWatchLogsEndpointSecurityGroup967DBC94"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCCloudWatchLogsEndpointE175AF65"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/MyCustomSG/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyCustomSGDE27C661"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingDeadLetterQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceEcsProcessingQueueCCE172F1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSDeadLetterQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceSQSDeadLetterQueue43D346B9"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSDeadLetterQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceSQSDeadLetterQueueArnCE7C60F2"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceSQSQueueA65E2641"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceSQSQueueArn571FDB86"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicyD52E156B"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDef0F0CE105"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicy5667D265"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceE868AEE1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling2B518D9D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy960D4BA1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm88D1A0F9"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyFAB35025"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm351987F5"
+ }
+ ],
+ "/aws-ecs-patterns-queue-isolated/EcsDefaultClusterMnL3mNNYNVPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-patterns-queue-isolated"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..d863751a8e4dc
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-isolated.integ.snapshot/tree.json
@@ -0,0 +1,1937 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-patterns-queue-isolated": {
+ "id": "aws-ecs-patterns-queue-isolated",
+ "path": "aws-ecs-patterns-queue-isolated",
+ "children": {
+ "VPC": {
+ "id": "VPC",
+ "path": "aws-ecs-patterns-queue-isolated/VPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/24",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.1.0/24",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IsolatedSubnet1": {
+ "id": "IsolatedSubnet1",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.2.0/24",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Isolated"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Isolated"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCIsolatedSubnet1RouteTableEB156210"
+ },
+ "subnetId": {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IsolatedSubnet2": {
+ "id": "IsolatedSubnet2",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.3.0/24",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Isolated"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Isolated"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IsolatedSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCIsolatedSubnet2RouteTable9B4F78DC"
+ },
+ "subnetId": {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "internetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ },
+ "S3Endpoint": {
+ "id": "S3Endpoint",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/S3Endpoint",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/S3Endpoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCEndpoint",
+ "aws:cdk:cloudformation:props": {
+ "serviceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".s3"
+ ]
+ ]
+ },
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "routeTableIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1RouteTableEB156210"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2RouteTable9B4F78DC"
+ }
+ ],
+ "vpcEndpointType": "Gateway"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.GatewayVpcEndpoint",
+ "version": "0.0.0"
+ }
+ },
+ "SqsEndpoint": {
+ "id": "SqsEndpoint",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint",
+ "children": {
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "securityGroupIngress": [
+ {
+ "cidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "fromPort": 443,
+ "toPort": 443,
+ "description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ }
+ }
+ ],
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/SqsEndpoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCEndpoint",
+ "aws:cdk:cloudformation:props": {
+ "serviceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".sqs"
+ ]
+ ]
+ },
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "privateDnsEnabled": true,
+ "securityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCSqsEndpointSecurityGroupAE06A78D",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "vpcEndpointType": "Interface"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.InterfaceVpcEndpoint",
+ "version": "0.0.0"
+ }
+ },
+ "EcrEndpoint": {
+ "id": "EcrEndpoint",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint",
+ "children": {
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "securityGroupIngress": [
+ {
+ "cidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "fromPort": 443,
+ "toPort": 443,
+ "description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ }
+ }
+ ],
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrEndpoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCEndpoint",
+ "aws:cdk:cloudformation:props": {
+ "serviceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".ecr.api"
+ ]
+ ]
+ },
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "privateDnsEnabled": true,
+ "securityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCEcrEndpointSecurityGroup50ED8BA4",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "vpcEndpointType": "Interface"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.InterfaceVpcEndpoint",
+ "version": "0.0.0"
+ }
+ },
+ "EcrImageEndpoint": {
+ "id": "EcrImageEndpoint",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint",
+ "children": {
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "securityGroupIngress": [
+ {
+ "cidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "fromPort": 443,
+ "toPort": 443,
+ "description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ }
+ }
+ ],
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/EcrImageEndpoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCEndpoint",
+ "aws:cdk:cloudformation:props": {
+ "serviceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".ecr.dkr"
+ ]
+ ]
+ },
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "privateDnsEnabled": true,
+ "securityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCEcrImageEndpointSecurityGroup83621638",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "vpcEndpointType": "Interface"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.InterfaceVpcEndpoint",
+ "version": "0.0.0"
+ }
+ },
+ "CloudWatchLogsEndpoint": {
+ "id": "CloudWatchLogsEndpoint",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint",
+ "children": {
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "securityGroupIngress": [
+ {
+ "cidrIp": {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "fromPort": 443,
+ "toPort": 443,
+ "description": {
+ "Fn::Join": [
+ "",
+ [
+ "from ",
+ {
+ "Fn::GetAtt": [
+ "VPCB9E5F0B4",
+ "CidrBlock"
+ ]
+ },
+ ":443"
+ ]
+ ]
+ }
+ }
+ ],
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-isolated/VPC"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/VPC/CloudWatchLogsEndpoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCEndpoint",
+ "aws:cdk:cloudformation:props": {
+ "serviceName": {
+ "Fn::Join": [
+ "",
+ [
+ "com.amazonaws.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".logs"
+ ]
+ ]
+ },
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "privateDnsEnabled": true,
+ "securityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "VPCCloudWatchLogsEndpointSecurityGroup967DBC94",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetIds": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "vpcEndpointType": "Interface"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.InterfaceVpcEndpoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "MyCustomSG": {
+ "id": "MyCustomSG",
+ "path": "aws-ecs-patterns-queue-isolated/MyCustomSG",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/MyCustomSG/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-isolated/MyCustomSG",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "IsolatedQueueService": {
+ "id": "IsolatedQueueService",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService",
+ "children": {
+ "EcsProcessingDeadLetterQueue": {
+ "id": "EcsProcessingDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingDeadLetterQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingDeadLetterQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "messageRetentionPeriod": 1209600
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "EcsProcessingQueue": {
+ "id": "EcsProcessingQueue",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/EcsProcessingQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "redrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingDeadLetterQueue7CC1D07D",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueue": {
+ "id": "SQSDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSDeadLetterQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueueArn": {
+ "id": "SQSDeadLetterQueueArn",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSDeadLetterQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueue": {
+ "id": "SQSQueue",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueueArn": {
+ "id": "SQSQueueArn",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/SQSQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingTaskDef": {
+ "id": "QueueProcessingTaskDef",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicyD52E156B",
+ "roles": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "name": "QueueProcessingContainer",
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6"
+ },
+ "awslogs-stream-prefix": "IsolatedQueueService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "environment": [
+ {
+ "name": "QUEUE_NAME",
+ "value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ]
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77",
+ "Arn"
+ ]
+ },
+ "family": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingTaskDef27DBAF49",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefTaskRoleCFCB7511",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingContainer": {
+ "id": "QueueProcessingContainer",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupAEB959E6",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicy5667D265",
+ "roles": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDefExecutionRole1D7ACC77"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingFargateService": {
+ "id": "QueueProcessingFargateService",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "launchType": "FARGATE",
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VPCIsolatedSubnet1SubnetEBD00FC6"
+ },
+ {
+ "Ref": "VPCIsolatedSubnet2Subnet4B1C8CAA"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "MyCustomSGDE27C661",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "IsolatedQueueServiceQueueProcessingTaskDef0F0CE105"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "ScalingRole": {
+ "id": "ScalingRole",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/ScalingRole",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "TaskCount": {
+ "id": "TaskCount",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount",
+ "children": {
+ "Target": {
+ "id": "Target",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "aws:cdk:cloudformation:props": {
+ "maxCapacity": 2,
+ "minCapacity": 1,
+ "resourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceQueueProcessingFargateServiceE868AEE1",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "roleArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "scalableDimension": "ecs:service:DesiredCount",
+ "serviceNamespace": "ecs"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalableTarget",
+ "version": "0.0.0"
+ }
+ },
+ "CpuScaling": {
+ "id": "CpuScaling",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling8B2FB6C4",
+ "policyType": "TargetTrackingScaling",
+ "scalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "targetTrackingScalingPolicyConfiguration": {
+ "predefinedMetricSpecification": {
+ "predefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "targetValue": 50
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.TargetTrackingScalingPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "QueueMessagesVisibleScaling": {
+ "id": "QueueMessagesVisibleScaling",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling",
+ "children": {
+ "LowerPolicy": {
+ "id": "LowerPolicy",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy5EFC8D1B",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalUpperBound": 0,
+ "scalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "LowerAlarm": {
+ "id": "LowerAlarm",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "LessThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy960D4BA1"
+ }
+ ],
+ "alarmDescription": "Lower threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 0
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ },
+ "UpperPolicy": {
+ "id": "UpperPolicy",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueisolatedIsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy51E582BF",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetB06FD17D"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalLowerBound": 0,
+ "metricIntervalUpperBound": 400,
+ "scalingAdjustment": 1
+ },
+ {
+ "metricIntervalLowerBound": 400,
+ "scalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "UpperAlarm": {
+ "id": "UpperAlarm",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/IsolatedQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "GreaterThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "IsolatedQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyFAB35025"
+ }
+ ],
+ "alarmDescription": "Upper threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "IsolatedQueueServiceEcsProcessingQueueCCE172F1",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 100
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.ScalableTarget",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ScalableTaskCount",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.QueueProcessingFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC": {
+ "id": "EcsDefaultClusterMnL3mNNYNVPC",
+ "path": "aws-ecs-patterns-queue-isolated/EcsDefaultClusterMnL3mNNYNVPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-isolated/EcsDefaultClusterMnL3mNNYNVPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/aws-ecs-patterns-queue-public.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/aws-ecs-patterns-queue-public.template.json
new file mode 100644
index 0000000000000..1bff926aba21a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/aws-ecs-patterns-queue-public.template.json
@@ -0,0 +1,878 @@
+{
+ "Resources": {
+ "VPCB9E5F0B4": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1SubnetB4246D30": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableFEE4B781": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableAssociation0B0896DC": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "VPCPublicSubnet1DefaultRoute91CEF279": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet1EIP6AD938E8": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1NATGatewayE0556630": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2Subnet74179F39": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTable6F1A15F1": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTableAssociation5A808732": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "VPCPublicSubnet2DefaultRouteB7481BBA": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet2EIP4947BC00": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2NATGateway3C070193": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1Subnet8BCA10E0": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableBE8A6027": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableAssociation347902D1": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "VPCPrivateSubnet1DefaultRouteAE1D6490": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "VPCPrivateSubnet2SubnetCFCDAA7A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTable0A19E10E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTableAssociation0C73D413": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "VPCPrivateSubnet2DefaultRouteF4F5CFD2": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "VPCIGWB7E252D3": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue-public/VPC"
+ }
+ ]
+ }
+ },
+ "VPCVPCGW99B986DC": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "InternetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "MessageRetentionPeriod": 1209600
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "PublicQueueServiceEcsProcessingQueue84CD309D": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "RedrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicy5417957C": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "PublicQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicy5417957C",
+ "Roles": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F"
+ }
+ ]
+ }
+ },
+ "PublicQueueServiceQueueProcessingTaskDef858327F6": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Environment": [
+ {
+ "Name": "QUEUE_NAME",
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "Essential": true,
+ "HealthCheck": {
+ "Command": [
+ "CMD-SHELL",
+ "curl -f http://localhost/ || exit 1"
+ ],
+ "Interval": 6,
+ "Retries": 10,
+ "Timeout": 5
+ },
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64"
+ },
+ "awslogs-stream-prefix": "PublicQueueService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "QueueProcessingContainer"
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA",
+ "Arn"
+ ]
+ },
+ "Family": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingTaskDefB3738118",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyD7FF680F": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyD7FF680F",
+ "Roles": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA"
+ }
+ ]
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateService7DE3D65B": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "LaunchType": "FARGATE",
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "ENABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingFargateServiceSecurityGroupFC07A65A",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDef858327F6"
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceSecurityGroupFC07A65A": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118": {
+ "Type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "Properties": {
+ "MaxCapacity": 2,
+ "MinCapacity": 1,
+ "ResourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingFargateService7DE3D65B",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "RoleARN": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "ScalableDimension": "ecs:service:DesiredCount",
+ "ServiceNamespace": "ecs"
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling559C41BF": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScalingF36D44B7",
+ "PolicyType": "TargetTrackingScaling",
+ "ScalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "TargetTrackingScalingPolicyConfiguration": {
+ "PredefinedMetricSpecification": {
+ "PredefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "TargetValue": 50
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicyB2B27FF9": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy2DB1A503",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalUpperBound": 0,
+ "ScalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm5782C233": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "LessThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicyB2B27FF9"
+ }
+ ],
+ "AlarmDescription": "Lower threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 0
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyDCB40C8A": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy89C3D196",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalLowerBound": 0,
+ "MetricIntervalUpperBound": 400,
+ "ScalingAdjustment": 1
+ },
+ {
+ "MetricIntervalLowerBound": 400,
+ "ScalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm5D67333D": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyDCB40C8A"
+ }
+ ],
+ "AlarmDescription": "Upper threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 100
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3": {
+ "Type": "AWS::ECS::Cluster"
+ }
+ },
+ "Outputs": {
+ "PublicQueueServiceSQSDeadLetterQueueBCE86DBC": {
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277",
+ "QueueName"
+ ]
+ }
+ },
+ "PublicQueueServiceSQSDeadLetterQueueArn6E134EA4": {
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277",
+ "Arn"
+ ]
+ }
+ },
+ "PublicQueueServiceSQSQueue4D3FBD5C": {
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ },
+ "PublicQueueServiceSQSQueueArn38014FDC": {
+ "Value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "Arn"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..6545913efd93a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service-public": {
+ "stacks": [
+ "aws-ecs-patterns-queue-public"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..673fc03a8647a
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/manifest.json
@@ -0,0 +1,299 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-patterns-queue-public": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-patterns-queue-public.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-patterns-queue-public": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "id": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "packaging": "container-image",
+ "path": "asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "sourceHash": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ }
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCB9E5F0B4"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableFEE4B781"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableAssociation0B0896DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1DefaultRoute91CEF279"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1EIP6AD938E8"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTable6F1A15F1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTableAssociation5A808732"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2DefaultRouteB7481BBA"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2EIP4947BC00"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableBE8A6027"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableAssociation347902D1"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1DefaultRouteAE1D6490"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTable0A19E10E"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTableAssociation0C73D413"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2DefaultRouteF4F5CFD2"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIGWB7E252D3"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/VPC/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCVPCGW99B986DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingDeadLetterQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceEcsProcessingQueue84CD309D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/SQSDeadLetterQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceSQSDeadLetterQueueBCE86DBC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/SQSDeadLetterQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceSQSDeadLetterQueueArn6E134EA4"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/SQSQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceSQSQueue4D3FBD5C"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/SQSQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceSQSQueueArn38014FDC"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicy5417957C"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDef858327F6"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyD7FF680F"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateService7DE3D65B"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceSecurityGroupFC07A65A"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling559C41BF"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicyB2B27FF9"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm5782C233"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyDCB40C8A"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm5D67333D"
+ }
+ ],
+ "/aws-ecs-patterns-queue-public/EcsDefaultClusterMnL3mNNYNVPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-patterns-queue-public"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..9b5eec98c6ccd
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service-public.integ.snapshot/tree.json
@@ -0,0 +1,1539 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-patterns-queue-public": {
+ "id": "aws-ecs-patterns-queue-public",
+ "path": "aws-ecs-patterns-queue-public",
+ "children": {
+ "VPC": {
+ "id": "VPC",
+ "path": "aws-ecs-patterns-queue-public/VPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/VPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue-public/VPC/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-patterns-queue-public/VPC/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue-public/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-patterns-queue-public/VPC/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "internetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "PublicQueueService": {
+ "id": "PublicQueueService",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService",
+ "children": {
+ "EcsProcessingDeadLetterQueue": {
+ "id": "EcsProcessingDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingDeadLetterQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingDeadLetterQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "messageRetentionPeriod": 1209600
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "EcsProcessingQueue": {
+ "id": "EcsProcessingQueue",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/EcsProcessingQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "redrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingDeadLetterQueueBC492277",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueue": {
+ "id": "SQSDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/SQSDeadLetterQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueueArn": {
+ "id": "SQSDeadLetterQueueArn",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/SQSDeadLetterQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueue": {
+ "id": "SQSQueue",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/SQSQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueueArn": {
+ "id": "SQSQueueArn",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/SQSQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingTaskDef": {
+ "id": "QueueProcessingTaskDef",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "PublicQueueServiceQueueProcessingTaskDefTaskRoleDefaultPolicy5417957C",
+ "roles": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "name": "QueueProcessingContainer",
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64"
+ },
+ "awslogs-stream-prefix": "PublicQueueService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "environment": [
+ {
+ "name": "QUEUE_NAME",
+ "value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "healthCheck": {
+ "command": [
+ "CMD-SHELL",
+ "curl -f http://localhost/ || exit 1"
+ ],
+ "interval": 6,
+ "retries": 10,
+ "timeout": 5
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA",
+ "Arn"
+ ]
+ },
+ "family": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingTaskDefB3738118",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefTaskRole172D980F",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingContainer": {
+ "id": "QueueProcessingContainer",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCFF67B64",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyD7FF680F",
+ "roles": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDefExecutionRoleE22721BA"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingFargateService": {
+ "id": "QueueProcessingFargateService",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "launchType": "FARGATE",
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "ENABLED",
+ "subnets": [
+ {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingFargateServiceSecurityGroupFC07A65A",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "PublicQueueServiceQueueProcessingTaskDef858327F6"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "ScalingRole": {
+ "id": "ScalingRole",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/ScalingRole",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "TaskCount": {
+ "id": "TaskCount",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount",
+ "children": {
+ "Target": {
+ "id": "Target",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "aws:cdk:cloudformation:props": {
+ "maxCapacity": 2,
+ "minCapacity": 1,
+ "resourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "PublicQueueServiceQueueProcessingFargateService7DE3D65B",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "roleArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "scalableDimension": "ecs:service:DesiredCount",
+ "serviceNamespace": "ecs"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalableTarget",
+ "version": "0.0.0"
+ }
+ },
+ "CpuScaling": {
+ "id": "CpuScaling",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetCpuScalingF36D44B7",
+ "policyType": "TargetTrackingScaling",
+ "scalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "targetTrackingScalingPolicyConfiguration": {
+ "predefinedMetricSpecification": {
+ "predefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "targetValue": 50
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.TargetTrackingScalingPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "QueueMessagesVisibleScaling": {
+ "id": "QueueMessagesVisibleScaling",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling",
+ "children": {
+ "LowerPolicy": {
+ "id": "LowerPolicy",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy2DB1A503",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalUpperBound": 0,
+ "scalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "LowerAlarm": {
+ "id": "LowerAlarm",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "LessThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicyB2B27FF9"
+ }
+ ],
+ "alarmDescription": "Lower threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 0
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ },
+ "UpperPolicy": {
+ "id": "UpperPolicy",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueuepublicPublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy89C3D196",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetE040C118"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalLowerBound": 0,
+ "metricIntervalUpperBound": 400,
+ "scalingAdjustment": 1
+ },
+ {
+ "metricIntervalLowerBound": 400,
+ "scalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "UpperAlarm": {
+ "id": "UpperAlarm",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/PublicQueueService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "GreaterThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "PublicQueueServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicyDCB40C8A"
+ }
+ ],
+ "alarmDescription": "Upper threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "PublicQueueServiceEcsProcessingQueue84CD309D",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 100
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.ScalableTarget",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ScalableTaskCount",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.QueueProcessingFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC": {
+ "id": "EcsDefaultClusterMnL3mNNYNVPC",
+ "path": "aws-ecs-patterns-queue-public/EcsDefaultClusterMnL3mNNYNVPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue-public/EcsDefaultClusterMnL3mNNYNVPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
new file mode 100644
index 0000000000000..919fabfc3f637
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/Dockerfile
@@ -0,0 +1,10 @@
+FROM public.ecr.aws/lambda/python:3.6
+
+RUN pip3 install boto3
+
+ENV QUEUE_NAME $QUEUE_NAME
+
+WORKDIR /src
+ADD . /src
+
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
new file mode 100644
index 0000000000000..8b53f5149cb24
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/asset.df8476644bbc9943ba146e5aba5b9ae7ab8804a49ff767c357606ffee5c4d9e4/index.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+import os
+import boto3
+
+QUEUE_NAME = os.environ.get('QUEUE_NAME')
+print('QUEUE_NAME ' + QUEUE_NAME)
+
+if __name__ == '__main__':
+ client = boto3.client('sqs')
+ queue_url = client.get_queue_url(QueueName=QUEUE_NAME)['QueueUrl']
+ print('queue_url ' + queue_url)
+ while True:
+ response = client.receive_message(
+ QueueUrl=queue_url,
+ WaitTimeSeconds=10,
+ )
+ if response and 'Messages' in response:
+ for msg in response['Messages']:
+ print(msg['Body'])
+ entries = [{'Id': x['MessageId'], 'ReceiptHandle': x['ReceiptHandle']} for x in response['Messages']]
+ client.delete_message_batch(QueueUrl=queue_url, Entries=entries)
+
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json
new file mode 100644
index 0000000000000..4a91c2fabee6f
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/aws-ecs-patterns-queue.template.json
@@ -0,0 +1,869 @@
+{
+ "Resources": {
+ "VPCB9E5F0B4": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1SubnetB4246D30": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableFEE4B781": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1RouteTableAssociation0B0896DC": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "VPCPublicSubnet1DefaultRoute91CEF279": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet1EIP6AD938E8": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet1NATGatewayE0556630": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2Subnet74179F39": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTable6F1A15F1": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2RouteTableAssociation5A808732": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "VPCPublicSubnet2DefaultRouteB7481BBA": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ },
+ "DependsOn": [
+ "VPCVPCGW99B986DC"
+ ]
+ },
+ "VPCPublicSubnet2EIP4947BC00": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPublicSubnet2NATGateway3C070193": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1Subnet8BCA10E0": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableBE8A6027": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet1RouteTableAssociation347902D1": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "VPCPrivateSubnet1DefaultRouteAE1D6490": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "VPCPrivateSubnet2SubnetCFCDAA7A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTable0A19E10E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VPCPrivateSubnet2RouteTableAssociation0C73D413": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "SubnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "VPCPrivateSubnet2DefaultRouteF4F5CFD2": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "VPCIGWB7E252D3": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "VPCVPCGW99B986DC": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "InternetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "MessageRetentionPeriod": 1209600
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "QueueProcessingServiceEcsProcessingQueue552F0B37": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "RedrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19",
+ "Roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ]
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDef4982F68B": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Environment": [
+ {
+ "Name": "QUEUE_NAME",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "Essential": true,
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ },
+ "awslogs-stream-prefix": "QueueProcessingService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "QueueProcessingContainer"
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985",
+ "Arn"
+ ]
+ },
+ "Family": "awsecspatternsqueueQueueProcessingServiceQueueProcessingTaskDef2D9F8C2B",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D",
+ "Roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ]
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "LaunchType": "FARGATE",
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ },
+ {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444": {
+ "Type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "Properties": {
+ "MaxCapacity": 2,
+ "MinCapacity": 0,
+ "ResourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "RoleARN": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "ScalableDimension": "ecs:service:DesiredCount",
+ "ServiceNamespace": "ecs"
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling330150E9": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling374CE648",
+ "PolicyType": "TargetTrackingScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "TargetTrackingScalingPolicyConfiguration": {
+ "PredefinedMetricSpecification": {
+ "PredefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "TargetValue": 50
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy74582401",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalUpperBound": 0,
+ "ScalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm20C30A06": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "LessThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "AlarmDescription": "Lower threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 0
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A": {
+ "Type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "Properties": {
+ "PolicyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy23C5F983",
+ "PolicyType": "StepScaling",
+ "ScalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "StepScalingPolicyConfiguration": {
+ "AdjustmentType": "ChangeInCapacity",
+ "MetricAggregationType": "Maximum",
+ "StepAdjustments": [
+ {
+ "MetricIntervalLowerBound": 0,
+ "MetricIntervalUpperBound": 400,
+ "ScalingAdjustment": 1
+ },
+ {
+ "MetricIntervalLowerBound": 400,
+ "ScalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm2660BEDF": {
+ "Type": "AWS::CloudWatch::Alarm",
+ "Properties": {
+ "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+ "EvaluationPeriods": 1,
+ "AlarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "AlarmDescription": "Upper threshold scaling alarm",
+ "Dimensions": [
+ {
+ "Name": "QueueName",
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "MetricName": "ApproximateNumberOfMessagesVisible",
+ "Namespace": "AWS/SQS",
+ "Period": 300,
+ "Statistic": "Maximum",
+ "Threshold": 100
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3": {
+ "Type": "AWS::ECS::Cluster"
+ }
+ },
+ "Outputs": {
+ "QueueProcessingServiceSQSDeadLetterQueueE9058015": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "QueueName"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSDeadLetterQueueArnF7C6D3A8": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSQueue1AD9CD9C": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ },
+ "QueueProcessingServiceSQSQueueArn8C4AE4AE": {
+ "Value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..475372bc0696f
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.queue-processing-fargate-service": {
+ "stacks": [
+ "aws-ecs-patterns-queue"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..6e9a250e05165
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/manifest.json
@@ -0,0 +1,299 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-patterns-queue": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-patterns-queue.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-patterns-queue": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "id": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "packaging": "container-image",
+ "path": "asset.95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417",
+ "sourceHash": "95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ }
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCB9E5F0B4"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableFEE4B781"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1RouteTableAssociation0B0896DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1DefaultRoute91CEF279"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1EIP6AD938E8"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2Subnet74179F39"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTable6F1A15F1"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2RouteTableAssociation5A808732"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2DefaultRouteB7481BBA"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2EIP4947BC00"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableBE8A6027"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1RouteTableAssociation347902D1"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet1DefaultRouteAE1D6490"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTable0A19E10E"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2RouteTableAssociation0C73D413"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCPrivateSubnet2DefaultRouteF4F5CFD2"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCIGWB7E252D3"
+ }
+ ],
+ "/aws-ecs-patterns-queue/VPC/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VPCVPCGW99B986DC"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceEcsProcessingQueue552F0B37"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSDeadLetterQueueE9058015"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSDeadLetterQueueArnF7C6D3A8"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSQueue": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSQueue1AD9CD9C"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/SQSQueueArn": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceSQSQueueArn8C4AE4AE"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateService0340DB9F"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling330150E9"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerAlarm20C30A06"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "/aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperAlarm2660BEDF"
+ }
+ ],
+ "/aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-patterns-queue"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..71135371e8900
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/queue-processing-fargate-service.integ.snapshot/tree.json
@@ -0,0 +1,1530 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-patterns-queue": {
+ "id": "aws-ecs-patterns-queue",
+ "path": "aws-ecs-patterns-queue",
+ "children": {
+ "VPC": {
+ "id": "VPC",
+ "path": "aws-ecs-patterns-queue/VPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/VPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet1RouteTableFEE4B781"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet1SubnetB4246D30"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet1EIP6AD938E8",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPublicSubnet2RouteTable6F1A15F1"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-patterns-queue/VPC/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VPCPublicSubnet2Subnet74179F39"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VPCPublicSubnet2EIP4947BC00",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet1RouteTableBE8A6027"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet1NATGatewayE0556630"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "subnetId": {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-patterns-queue/VPC/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VPCPrivateSubnet2RouteTable0A19E10E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VPCPublicSubnet2NATGateway3C070193"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-patterns-queue/VPC/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-patterns-queue/VPC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-patterns-queue/VPC/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ },
+ "internetGatewayId": {
+ "Ref": "VPCIGWB7E252D3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingService": {
+ "id": "QueueProcessingService",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService",
+ "children": {
+ "EcsProcessingDeadLetterQueue": {
+ "id": "EcsProcessingDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingDeadLetterQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "messageRetentionPeriod": 1209600
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "EcsProcessingQueue": {
+ "id": "EcsProcessingQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/EcsProcessingQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "redrivePolicy": {
+ "deadLetterTargetArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingDeadLetterQueueD47A7C6B",
+ "Arn"
+ ]
+ },
+ "maxReceiveCount": 3
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueue": {
+ "id": "SQSDeadLetterQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSDeadLetterQueueArn": {
+ "id": "SQSDeadLetterQueueArn",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSDeadLetterQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueue": {
+ "id": "SQSQueue",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSQueue",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "SQSQueueArn": {
+ "id": "SQSQueueArn",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/SQSQueueArn",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingTaskDef": {
+ "id": "QueueProcessingTaskDef",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/TaskRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:ChangeMessageVisibility",
+ "sqs:DeleteMessage",
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:ReceiveMessage"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "QueueProcessingServiceQueueProcessingTaskDefTaskRoleDefaultPolicyAE808B19",
+ "roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:95cefedd43575452a70cdeeeceb0f1c5728fd58c9ff8e81e760c3dac33c46417"
+ ]
+ ]
+ },
+ "name": "QueueProcessingContainer",
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A"
+ },
+ "awslogs-stream-prefix": "QueueProcessingService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "environment": [
+ {
+ "name": "QUEUE_NAME",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ]
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985",
+ "Arn"
+ ]
+ },
+ "family": "awsecspatternsqueueQueueProcessingServiceQueueProcessingTaskDef2D9F8C2B",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefTaskRole782B79A6",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingContainer": {
+ "id": "QueueProcessingContainer",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/QueueProcessingContainer/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingTaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupCC92448A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "QueueProcessingServiceQueueProcessingTaskDefExecutionRoleDefaultPolicyA83D332D",
+ "roles": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDefExecutionRole37838985"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "QueueProcessingFargateService": {
+ "id": "QueueProcessingFargateService",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "launchType": "FARGATE",
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VPCPrivateSubnet1Subnet8BCA10E0"
+ },
+ {
+ "Ref": "VPCPrivateSubnet2SubnetCFCDAA7A"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateServiceSecurityGroup8FDF413D",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "QueueProcessingServiceQueueProcessingTaskDef4982F68B"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "VPCB9E5F0B4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "ScalingRole": {
+ "id": "ScalingRole",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/ScalingRole",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "TaskCount": {
+ "id": "TaskCount",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount",
+ "children": {
+ "Target": {
+ "id": "Target",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalableTarget",
+ "aws:cdk:cloudformation:props": {
+ "maxCapacity": 2,
+ "minCapacity": 0,
+ "resourceId": {
+ "Fn::Join": [
+ "",
+ [
+ "service/",
+ {
+ "Ref": "EcsDefaultClusterMnL3mNNYNVPC9C1EC7A3"
+ },
+ "/",
+ {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceQueueProcessingFargateService0340DB9F",
+ "Name"
+ ]
+ }
+ ]
+ ]
+ },
+ "roleArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
+ ]
+ ]
+ },
+ "scalableDimension": "ecs:service:DesiredCount",
+ "serviceNamespace": "ecs"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalableTarget",
+ "version": "0.0.0"
+ }
+ },
+ "CpuScaling": {
+ "id": "CpuScaling",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/CpuScaling/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetCpuScaling374CE648",
+ "policyType": "TargetTrackingScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "targetTrackingScalingPolicyConfiguration": {
+ "predefinedMetricSpecification": {
+ "predefinedMetricType": "ECSServiceAverageCPUUtilization"
+ },
+ "targetValue": 50
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.TargetTrackingScalingPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "QueueMessagesVisibleScaling": {
+ "id": "QueueMessagesVisibleScaling",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling",
+ "children": {
+ "LowerPolicy": {
+ "id": "LowerPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy74582401",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalUpperBound": 0,
+ "scalingAdjustment": -1
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "LowerAlarm": {
+ "id": "LowerAlarm",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/LowerAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "LessThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingLowerPolicy332E2644"
+ }
+ ],
+ "alarmDescription": "Lower threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 0
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ },
+ "UpperPolicy": {
+ "id": "UpperPolicy",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ApplicationAutoScaling::ScalingPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyName": "awsecspatternsqueueQueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy23C5F983",
+ "policyType": "StepScaling",
+ "scalingTargetId": {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetA9D54444"
+ },
+ "stepScalingPolicyConfiguration": {
+ "adjustmentType": "ChangeInCapacity",
+ "metricAggregationType": "Maximum",
+ "stepAdjustments": [
+ {
+ "metricIntervalLowerBound": 0,
+ "metricIntervalUpperBound": 400,
+ "scalingAdjustment": 1
+ },
+ {
+ "metricIntervalLowerBound": 400,
+ "scalingAdjustment": 5
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.CfnScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingAction",
+ "version": "0.0.0"
+ }
+ },
+ "UpperAlarm": {
+ "id": "UpperAlarm",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/QueueProcessingService/QueueProcessingFargateService/TaskCount/Target/QueueMessagesVisibleScaling/UpperAlarm/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudWatch::Alarm",
+ "aws:cdk:cloudformation:props": {
+ "comparisonOperator": "GreaterThanOrEqualToThreshold",
+ "evaluationPeriods": 1,
+ "alarmActions": [
+ {
+ "Ref": "QueueProcessingServiceQueueProcessingFargateServiceTaskCountTargetQueueMessagesVisibleScalingUpperPolicy84DD739A"
+ }
+ ],
+ "alarmDescription": "Upper threshold scaling alarm",
+ "dimensions": [
+ {
+ "name": "QueueName",
+ "value": {
+ "Fn::GetAtt": [
+ "QueueProcessingServiceEcsProcessingQueue552F0B37",
+ "QueueName"
+ ]
+ }
+ }
+ ],
+ "metricName": "ApproximateNumberOfMessagesVisible",
+ "namespace": "AWS/SQS",
+ "period": 300,
+ "statistic": "Maximum",
+ "threshold": 100
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.CfnAlarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudwatch.Alarm",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.StepScalingPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-applicationautoscaling.ScalableTarget",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ScalableTaskCount",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.QueueProcessingFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "EcsDefaultClusterMnL3mNNYNVPC": {
+ "id": "EcsDefaultClusterMnL3mNNYNVPC",
+ "path": "aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-patterns-queue/EcsDefaultClusterMnL3mNNYNVPC/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile
new file mode 100644
index 0000000000000..235b30e9661ed
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/Dockerfile
@@ -0,0 +1,5 @@
+FROM public.ecr.aws/lambda/python:3.6
+EXPOSE 8000
+WORKDIR /src
+ADD . /src
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py
new file mode 100644
index 0000000000000..2ccedfce3ab76
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14/index.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+import sys
+import textwrap
+import http.server
+import socketserver
+
+PORT = 8000
+
+
+class Handler(http.server.SimpleHTTPRequestHandler):
+ def do_GET(self):
+ self.send_response(200)
+ self.send_header('Content-Type', 'text/html')
+ self.end_headers()
+ self.wfile.write(textwrap.dedent('''\
+
+ Hello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile
new file mode 100644
index 0000000000000..235b30e9661ed
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/Dockerfile
@@ -0,0 +1,5 @@
+FROM public.ecr.aws/lambda/python:3.6
+EXPOSE 8000
+WORKDIR /src
+ADD . /src
+CMD python3 index.py
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py
new file mode 100644
index 0000000000000..2ccedfce3ab76
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/asset.aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c/index.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+import sys
+import textwrap
+import http.server
+import socketserver
+
+PORT = 8000
+
+
+class Handler(http.server.SimpleHTTPRequestHandler):
+ def do_GET(self):
+ self.send_response(200)
+ self.send_header('Content-Type', 'text/html')
+ self.end_headers()
+ self.wfile.write(textwrap.dedent('''\
+
+ Hello from the integ test container
+This container got built and started as part of the integ test.
+
+
+ ''').encode('utf-8'))
+
+
+def main():
+ httpd = http.server.HTTPServer(("", PORT), Handler)
+ print("serving at port", PORT)
+ httpd.serve_forever()
+
+
+if __name__ == '__main__':
+ main()
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/aws-fargate-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/aws-fargate-integ.template.json
new file mode 100644
index 0000000000000..669810a5d8785
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/aws-fargate-integ.template.json
@@ -0,0 +1,519 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/17",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/17",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-fargate-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "FargateCluster7CCD5F93": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "ScheduledFargateTaskScheduledEventRule2B79E34F": {
+ "Type": "AWS::Events::Rule",
+ "Properties": {
+ "ScheduleExpression": "rate(2 minutes)",
+ "State": "ENABLED",
+ "Targets": [
+ {
+ "Arn": {
+ "Fn::GetAtt": [
+ "FargateCluster7CCD5F93",
+ "Arn"
+ ]
+ },
+ "EcsParameters": {
+ "LaunchType": "FARGATE",
+ "NetworkConfiguration": {
+ "AwsVpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefSecurityGroupE075BC19",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ]
+ }
+ },
+ "TaskCount": 2,
+ "TaskDefinitionArn": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDef521FA675"
+ }
+ },
+ "Id": "Target0",
+ "Input": "{}",
+ "RoleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522",
+ "Arn"
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDef521FA675": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Environment": [
+ {
+ "Name": "TRIGGER",
+ "Value": "CloudWatch Events"
+ }
+ ],
+ "Essential": true,
+ "Image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ },
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C"
+ },
+ "awslogs-stream-prefix": "ScheduledFargateTask",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "ScheduledContainer"
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5",
+ "Arn"
+ ]
+ },
+ "Family": "awsfargateintegScheduledFargateTaskScheduledTaskDefB0AD4F70",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleDefaultPolicy3E3AEE49": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ScheduledFargateTaskScheduledTaskDefExecutionRoleDefaultPolicy3E3AEE49",
+ "Roles": [
+ {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5"
+ }
+ ]
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "events.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefEventsRoleDefaultPolicy4903ED72": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "ecs:RunTask",
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "FargateCluster7CCD5F93",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDef521FA675"
+ }
+ },
+ {
+ "Action": "iam:PassRole",
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "ScheduledFargateTaskScheduledTaskDefEventsRoleDefaultPolicy4903ED72",
+ "Roles": [
+ {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522"
+ }
+ ]
+ }
+ },
+ "ScheduledFargateTaskScheduledTaskDefSecurityGroupE075BC19": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..c4b7764c701d9
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.scheduled-fargate-task.lit": {
+ "stacks": [
+ "aws-fargate-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..95b3c724b16d6
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/manifest.json
@@ -0,0 +1,173 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-fargate-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-fargate-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-fargate-integ": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "repositoryName": "aws-cdk/assets",
+ "imageTag": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "id": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "packaging": "container-image",
+ "path": "asset.0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14",
+ "sourceHash": "0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ }
+ }
+ ],
+ "/aws-fargate-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-fargate-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-fargate-integ/FargateCluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateCluster7CCD5F93"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledEventRule/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledEventRule2B79E34F"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDef521FA675"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefExecutionRoleDefaultPolicy3E3AEE49"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefEventsRoleDefaultPolicy4903ED72"
+ }
+ ],
+ "/aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ScheduledFargateTaskScheduledTaskDefSecurityGroupE075BC19"
+ }
+ ]
+ },
+ "displayName": "aws-fargate-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..4eb61d570d444
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/scheduled-fargate-task.lit.integ.snapshot/tree.json
@@ -0,0 +1,919 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-fargate-integ": {
+ "id": "aws-fargate-integ",
+ "path": "aws-fargate-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-fargate-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/17",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-fargate-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/17",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-fargate-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-fargate-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-fargate-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-fargate-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "FargateCluster": {
+ "id": "FargateCluster",
+ "path": "aws-fargate-integ/FargateCluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/FargateCluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "ScheduledFargateTask": {
+ "id": "ScheduledFargateTask",
+ "path": "aws-fargate-integ/ScheduledFargateTask",
+ "children": {
+ "ScheduledEventRule": {
+ "id": "ScheduledEventRule",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledEventRule",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledEventRule/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Events::Rule",
+ "aws:cdk:cloudformation:props": {
+ "scheduleExpression": "rate(2 minutes)",
+ "state": "ENABLED",
+ "targets": [
+ {
+ "id": "Target0",
+ "arn": {
+ "Fn::GetAtt": [
+ "FargateCluster7CCD5F93",
+ "Arn"
+ ]
+ },
+ "roleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522",
+ "Arn"
+ ]
+ },
+ "ecsParameters": {
+ "taskCount": 2,
+ "taskDefinitionArn": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDef521FA675"
+ },
+ "launchType": "FARGATE",
+ "networkConfiguration": {
+ "awsVpcConfiguration": {
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "assignPublicIp": "DISABLED",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefSecurityGroupE075BC19",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ }
+ },
+ "input": "{}"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-events.CfnRule",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-events.Rule",
+ "version": "0.0.0"
+ }
+ },
+ "ScheduledTaskDef": {
+ "id": "ScheduledTaskDef",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ".dkr.ecr.",
+ {
+ "Ref": "AWS::Region"
+ },
+ ".",
+ {
+ "Ref": "AWS::URLSuffix"
+ },
+ "/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14"
+ ]
+ ]
+ },
+ "name": "ScheduledContainer",
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C"
+ },
+ "awslogs-stream-prefix": "ScheduledFargateTask",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "environment": [
+ {
+ "name": "TRIGGER",
+ "value": "CloudWatch Events"
+ }
+ ]
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5",
+ "Arn"
+ ]
+ },
+ "family": "awsfargateintegScheduledFargateTaskScheduledTaskDefB0AD4F70",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ScheduledContainer": {
+ "id": "ScheduledContainer",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer",
+ "children": {
+ "AssetImage": {
+ "id": "AssetImage",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/AssetImage",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/AssetImage/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Repository": {
+ "id": "Repository",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/AssetImage/Repository",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr.RepositoryBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecr-assets.DockerImageAsset",
+ "version": "0.0.0"
+ }
+ },
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ScheduledContainer/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecr:BatchCheckLayerAvailability",
+ "ecr:BatchGetImage",
+ "ecr:GetDownloadUrlForLayer"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":ecr:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":repository/aws-cdk/assets"
+ ]
+ ]
+ }
+ },
+ {
+ "Action": "ecr:GetAuthorizationToken",
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefScheduledContainerLogGroup4134B16C",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ScheduledFargateTaskScheduledTaskDefExecutionRoleDefaultPolicy3E3AEE49",
+ "roles": [
+ {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "EventsRole": {
+ "id": "EventsRole",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "events.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/EventsRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "ecs:RunTask",
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "FargateCluster7CCD5F93",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": {
+ "Ref": "ScheduledFargateTaskScheduledTaskDef521FA675"
+ }
+ },
+ {
+ "Action": "iam:PassRole",
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefExecutionRoleD37356D5",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "ScheduledFargateTaskScheduledTaskDefTaskRoleD0FF16AD",
+ "Arn"
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "ScheduledFargateTaskScheduledTaskDefEventsRoleDefaultPolicy4903ED72",
+ "roles": [
+ {
+ "Ref": "ScheduledFargateTaskScheduledTaskDefEventsRole6CE19522"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-fargate-integ/ScheduledFargateTask/ScheduledTaskDef/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ScheduledFargateTask",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..5db1b050539e0
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,992 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "ClusterEB0386A7": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "FargateNlbServiceLBC7004B25": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "network"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "FargateNlbServiceLBPublicListener91199F13": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "FargateNlbServiceLBPublicListenerECSGroup7501571D"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "FargateNlbServiceLBC7004B25"
+ },
+ "Port": 2015,
+ "Protocol": "TCP"
+ }
+ },
+ "FargateNlbServiceLBPublicListenerECSGroup7501571D": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 2015,
+ "Protocol": "TCP",
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateNlbServiceTaskDefTaskRoleD95D755C": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateNlbServiceTaskDef03021E9A": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "abiosoft/caddy",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "FargateNlbServiceTaskDefwebLogGroup3547138D"
+ },
+ "awslogs-stream-prefix": "FargateNlbService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 2015,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefExecutionRole5E165F68",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegFargateNlbServiceTaskDef168F9D76",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefTaskRoleD95D755C",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "FargateNlbServiceTaskDefwebLogGroup3547138D": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "FargateNlbServiceTaskDefExecutionRole5E165F68": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateNlbServiceTaskDefExecutionRoleDefaultPolicyC8326D5A": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefwebLogGroup3547138D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "FargateNlbServiceTaskDefExecutionRoleDefaultPolicyC8326D5A",
+ "Roles": [
+ {
+ "Ref": "FargateNlbServiceTaskDefExecutionRole5E165F68"
+ }
+ ]
+ }
+ },
+ "FargateNlbService65A9DBF8": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 2015,
+ "TargetGroupArn": {
+ "Ref": "FargateNlbServiceLBPublicListenerECSGroup7501571D"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateNlbServiceSecurityGroup4718761F",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "FargateNlbServiceTaskDef03021E9A"
+ }
+ },
+ "DependsOn": [
+ "FargateNlbServiceLBPublicListenerECSGroup7501571D",
+ "FargateNlbServiceLBPublicListener91199F13"
+ ]
+ },
+ "FargateNlbServiceSecurityGroup4718761F": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/FargateNlbService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateAlbServiceLBA7128551": {
+ "Type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "Properties": {
+ "LoadBalancerAttributes": [
+ {
+ "Key": "deletion_protection.enabled",
+ "Value": "false"
+ }
+ ],
+ "Scheme": "internet-facing",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "Type": "application"
+ },
+ "DependsOn": [
+ "VpcPublicSubnet1DefaultRoute3DA9E72A",
+ "VpcPublicSubnet2DefaultRoute97F91067"
+ ]
+ },
+ "FargateAlbServiceLBSecurityGroupE10F3DF3": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatically created Security Group for ELB awsecsintegFargateAlbServiceLBA9E1FE68",
+ "SecurityGroupIngress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow from anyone on port 2015",
+ "FromPort": 2015,
+ "IpProtocol": "tcp",
+ "ToPort": 2015
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateAlbServiceLBSecurityGrouptoawsecsintegFargateAlbServiceSecurityGroup0B11760820157EB4F873": {
+ "Type": "AWS::EC2::SecurityGroupEgress",
+ "Properties": {
+ "GroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ },
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "DestinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ },
+ "FromPort": 2015,
+ "ToPort": 2015
+ }
+ },
+ "FargateAlbServiceLBPublicListener9C1349BE": {
+ "Type": "AWS::ElasticLoadBalancingV2::Listener",
+ "Properties": {
+ "DefaultActions": [
+ {
+ "TargetGroupArn": {
+ "Ref": "FargateAlbServiceLBPublicListenerECSGroupB3826700"
+ },
+ "Type": "forward"
+ }
+ ],
+ "LoadBalancerArn": {
+ "Ref": "FargateAlbServiceLBA7128551"
+ },
+ "Port": 2015,
+ "Protocol": "HTTP"
+ }
+ },
+ "FargateAlbServiceLBPublicListenerECSGroupB3826700": {
+ "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "Properties": {
+ "Port": 80,
+ "Protocol": "HTTP",
+ "TargetGroupAttributes": [
+ {
+ "Key": "stickiness.enabled",
+ "Value": "false"
+ }
+ ],
+ "TargetType": "ip",
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateAlbServiceTaskDefTaskRoleC9259C01": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateAlbServiceTaskDef291471C0": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "abiosoft/caddy",
+ "LogConfiguration": {
+ "LogDriver": "awslogs",
+ "Options": {
+ "awslogs-group": {
+ "Ref": "FargateAlbServiceTaskDefwebLogGroup0BC14B46"
+ },
+ "awslogs-stream-prefix": "FargateAlbService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ },
+ "Name": "web",
+ "PortMappings": [
+ {
+ "ContainerPort": 2015,
+ "Protocol": "tcp"
+ }
+ ]
+ }
+ ],
+ "Cpu": "256",
+ "ExecutionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefExecutionRole5FC6F0D2",
+ "Arn"
+ ]
+ },
+ "Family": "awsecsintegFargateAlbServiceTaskDef1C0274E3",
+ "Memory": "512",
+ "NetworkMode": "awsvpc",
+ "RequiresCompatibilities": [
+ "FARGATE"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefTaskRoleC9259C01",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "FargateAlbServiceTaskDefwebLogGroup0BC14B46": {
+ "Type": "AWS::Logs::LogGroup",
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "FargateAlbServiceTaskDefExecutionRole5FC6F0D2": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "FargateAlbServiceTaskDefExecutionRoleDefaultPolicyD03CA136": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefwebLogGroup0BC14B46",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "FargateAlbServiceTaskDefExecutionRoleDefaultPolicyD03CA136",
+ "Roles": [
+ {
+ "Ref": "FargateAlbServiceTaskDefExecutionRole5FC6F0D2"
+ }
+ ]
+ }
+ },
+ "FargateAlbServiceB466E994": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "HealthCheckGracePeriodSeconds": 60,
+ "LaunchType": "FARGATE",
+ "LoadBalancers": [
+ {
+ "ContainerName": "web",
+ "ContainerPort": 2015,
+ "TargetGroupArn": {
+ "Ref": "FargateAlbServiceLBPublicListenerECSGroupB3826700"
+ }
+ }
+ ],
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "TaskDefinition": {
+ "Ref": "FargateAlbServiceTaskDef291471C0"
+ }
+ },
+ "DependsOn": [
+ "FargateAlbServiceLBPublicListenerECSGroupB3826700",
+ "FargateAlbServiceLBPublicListener9C1349BE"
+ ]
+ },
+ "FargateAlbServiceSecurityGroupF5AFFC6E": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/FargateAlbService/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "FargateAlbServiceSecurityGroupfromawsecsintegFargateAlbServiceLBSecurityGroup2B85C6B72015203217AE": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "Load balancer to target",
+ "FromPort": 2015,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ },
+ "ToPort": 2015
+ }
+ }
+ },
+ "Outputs": {
+ "FargateNlbServiceLoadBalancerDNS20395DB7": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceLBC7004B25",
+ "DNSName"
+ ]
+ }
+ },
+ "FargateAlbServiceLoadBalancerDNSA91678BC": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBA7128551",
+ "DNSName"
+ ]
+ }
+ },
+ "FargateAlbServiceServiceURL101F25CC": {
+ "Value": {
+ "Fn::Join": [
+ "",
+ [
+ "http://",
+ {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBA7128551",
+ "DNSName"
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "AlbDnsName": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBA7128551",
+ "DNSName"
+ ]
+ }
+ },
+ "NlbDnsName": {
+ "Value": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceLBC7004B25",
+ "DNSName"
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/integ.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..bc6452328487c
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-ecs-patterns/test/fargate/integ.special-listener": {
+ "stacks": [
+ "aws-ecs-integ"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..8b11582ec9d51
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/manifest.json
@@ -0,0 +1,334 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "aws-ecs-integ": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "aws-ecs-integ.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/aws-ecs-integ/Vpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Vpc8378EB38"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTable6C95E38E"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1RouteTableAssociation97140677"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1DefaultRoute3DA9E72A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1EIPD7E02669"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTable94F7E489"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2RouteTableAssociationDD5762D8"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2DefaultRoute97F91067"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2EIP3C605A87"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableB2C5B500"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1RouteTableAssociation70C59FA6"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet1DefaultRouteBE02A9ED"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableA678073B"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2RouteTableAssociationA89CAD56"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcPrivateSubnet2DefaultRoute060D2087"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcIGWD7BA715C"
+ }
+ ],
+ "/aws-ecs-integ/Vpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "VpcVPCGWBF912B6E"
+ }
+ ],
+ "/aws-ecs-integ/Cluster/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ClusterEB0386A7"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceLBC7004B25"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceLBPublicListener91199F13"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceLBPublicListenerECSGroup7501571D"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceLoadBalancerDNS20395DB7"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceTaskDefTaskRoleD95D755C"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceTaskDef03021E9A"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceTaskDefwebLogGroup3547138D"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceTaskDefExecutionRole5E165F68"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceTaskDefExecutionRoleDefaultPolicyC8326D5A"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbService65A9DBF8"
+ }
+ ],
+ "/aws-ecs-integ/FargateNlbService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateNlbServiceSecurityGroup4718761F"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LB/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLBA7128551"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LB/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLBSecurityGroupE10F3DF3"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LB/SecurityGroup/to awsecsintegFargateAlbServiceSecurityGroup0B117608:2015": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLBSecurityGrouptoawsecsintegFargateAlbServiceSecurityGroup0B11760820157EB4F873"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LB/PublicListener/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLBPublicListener9C1349BE"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LB/PublicListener/ECSGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLBPublicListenerECSGroupB3826700"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/LoadBalancerDNS": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceLoadBalancerDNSA91678BC"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/ServiceURL": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceServiceURL101F25CC"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/TaskDef/TaskRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceTaskDefTaskRoleC9259C01"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/TaskDef/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceTaskDef291471C0"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/TaskDef/web/LogGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceTaskDefwebLogGroup0BC14B46"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceTaskDefExecutionRole5FC6F0D2"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceTaskDefExecutionRoleDefaultPolicyD03CA136"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/Service/Service": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceB466E994"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/Service/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceSecurityGroupF5AFFC6E"
+ }
+ ],
+ "/aws-ecs-integ/FargateAlbService/Service/SecurityGroup/from awsecsintegFargateAlbServiceLBSecurityGroup2B85C6B7:2015": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "FargateAlbServiceSecurityGroupfromawsecsintegFargateAlbServiceLBSecurityGroup2B85C6B72015203217AE"
+ }
+ ],
+ "/aws-ecs-integ/AlbDnsName": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AlbDnsName"
+ }
+ ],
+ "/aws-ecs-integ/NlbDnsName": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "NlbDnsName"
+ }
+ ]
+ },
+ "displayName": "aws-ecs-integ"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/tree.json b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..d492ecae56728
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/fargate/special-listener.integ.snapshot/tree.json
@@ -0,0 +1,1704 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "aws-ecs-integ": {
+ "id": "aws-ecs-integ",
+ "path": "aws-ecs-integ",
+ "children": {
+ "Vpc": {
+ "id": "Vpc",
+ "path": "aws-ecs-integ/Vpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Vpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "aws-ecs-integ/Vpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "subnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "aws-ecs-integ/Vpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "aws-ecs-integ/Vpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "aws-ecs-integ/Vpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "internetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "Cluster": {
+ "id": "Cluster",
+ "path": "aws-ecs-integ/Cluster",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/Cluster/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Cluster",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnCluster",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.Cluster",
+ "version": "0.0.0"
+ }
+ },
+ "FargateNlbService": {
+ "id": "FargateNlbService",
+ "path": "aws-ecs-integ/FargateNlbService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ/FargateNlbService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "network"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ/FargateNlbService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "FargateNlbServiceLBPublicListenerECSGroup7501571D"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "FargateNlbServiceLBC7004B25"
+ },
+ "port": 2015,
+ "protocol": "TCP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ/FargateNlbService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 2015,
+ "protocol": "TCP",
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.NetworkLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/FargateNlbService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "abiosoft/caddy",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 2015,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "FargateNlbServiceTaskDefwebLogGroup3547138D"
+ },
+ "awslogs-stream-prefix": "FargateNlbService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefExecutionRole5E165F68",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegFargateNlbServiceTaskDef168F9D76",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefTaskRoleD95D755C",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateNlbServiceTaskDefwebLogGroup3547138D",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "FargateNlbServiceTaskDefExecutionRoleDefaultPolicyC8326D5A",
+ "roles": [
+ {
+ "Ref": "FargateNlbServiceTaskDefExecutionRole5E165F68"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateNlbService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateNlbService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "FargateNlbServiceLBPublicListenerECSGroup7501571D"
+ },
+ "containerName": "web",
+ "containerPort": 2015
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateNlbServiceSecurityGroup4718761F",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "FargateNlbServiceTaskDef03021E9A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/FargateNlbService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateNlbService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/FargateNlbService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.NetworkLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "FargateAlbService": {
+ "id": "FargateAlbService",
+ "path": "aws-ecs-integ/FargateAlbService",
+ "children": {
+ "LB": {
+ "id": "LB",
+ "path": "aws-ecs-integ/FargateAlbService/LB",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/LB/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::LoadBalancer",
+ "aws:cdk:cloudformation:props": {
+ "loadBalancerAttributes": [
+ {
+ "key": "deletion_protection.enabled",
+ "value": "false"
+ }
+ ],
+ "scheme": "internet-facing",
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnets": [
+ {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ ],
+ "type": "application"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/FargateAlbService/LB/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/LB/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatically created Security Group for ELB awsecsintegFargateAlbServiceLBA9E1FE68",
+ "securityGroupIngress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "ipProtocol": "tcp",
+ "fromPort": 2015,
+ "toPort": 2015,
+ "description": "Allow from anyone on port 2015"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "to awsecsintegFargateAlbServiceSecurityGroup0B117608:2015": {
+ "id": "to awsecsintegFargateAlbServiceSecurityGroup0B117608:2015",
+ "path": "aws-ecs-integ/FargateAlbService/LB/SecurityGroup/to awsecsintegFargateAlbServiceSecurityGroup0B117608:2015",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupEgress",
+ "aws:cdk:cloudformation:props": {
+ "groupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ },
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "destinationSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ },
+ "fromPort": 2015,
+ "toPort": 2015
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupEgress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "PublicListener": {
+ "id": "PublicListener",
+ "path": "aws-ecs-integ/FargateAlbService/LB/PublicListener",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/LB/PublicListener/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::Listener",
+ "aws:cdk:cloudformation:props": {
+ "defaultActions": [
+ {
+ "type": "forward",
+ "targetGroupArn": {
+ "Ref": "FargateAlbServiceLBPublicListenerECSGroupB3826700"
+ }
+ }
+ ],
+ "loadBalancerArn": {
+ "Ref": "FargateAlbServiceLBA7128551"
+ },
+ "port": 2015,
+ "protocol": "HTTP"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnListener",
+ "version": "0.0.0"
+ }
+ },
+ "ECSGroup": {
+ "id": "ECSGroup",
+ "path": "aws-ecs-integ/FargateAlbService/LB/PublicListener/ECSGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/LB/PublicListener/ECSGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ElasticLoadBalancingV2::TargetGroup",
+ "aws:cdk:cloudformation:props": {
+ "port": 80,
+ "protocol": "HTTP",
+ "targetGroupAttributes": [
+ {
+ "key": "stickiness.enabled",
+ "value": "false"
+ }
+ ],
+ "targetType": "ip",
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.CfnTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationTargetGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationListener",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-elasticloadbalancingv2.ApplicationLoadBalancer",
+ "version": "0.0.0"
+ }
+ },
+ "LoadBalancerDNS": {
+ "id": "LoadBalancerDNS",
+ "path": "aws-ecs-integ/FargateAlbService/LoadBalancerDNS",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "ServiceURL": {
+ "id": "ServiceURL",
+ "path": "aws-ecs-integ/FargateAlbService/ServiceURL",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "TaskDef": {
+ "id": "TaskDef",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef",
+ "children": {
+ "TaskRole": {
+ "id": "TaskRole",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/TaskRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/TaskRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::TaskDefinition",
+ "aws:cdk:cloudformation:props": {
+ "containerDefinitions": [
+ {
+ "essential": true,
+ "image": "abiosoft/caddy",
+ "name": "web",
+ "portMappings": [
+ {
+ "containerPort": 2015,
+ "protocol": "tcp"
+ }
+ ],
+ "logConfiguration": {
+ "logDriver": "awslogs",
+ "options": {
+ "awslogs-group": {
+ "Ref": "FargateAlbServiceTaskDefwebLogGroup0BC14B46"
+ },
+ "awslogs-stream-prefix": "FargateAlbService",
+ "awslogs-region": {
+ "Ref": "AWS::Region"
+ }
+ }
+ }
+ }
+ ],
+ "cpu": "256",
+ "executionRoleArn": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefExecutionRole5FC6F0D2",
+ "Arn"
+ ]
+ },
+ "family": "awsecsintegFargateAlbServiceTaskDef1C0274E3",
+ "memory": "512",
+ "networkMode": "awsvpc",
+ "requiresCompatibilities": [
+ "FARGATE"
+ ],
+ "taskRoleArn": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefTaskRoleC9259C01",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "web": {
+ "id": "web",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/web",
+ "children": {
+ "LogGroup": {
+ "id": "LogGroup",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/web/LogGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/web/LogGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Logs::LogGroup",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.CfnLogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-logs.LogGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.ContainerDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "ExecutionRole": {
+ "id": "ExecutionRole",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/TaskDef/ExecutionRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceTaskDefwebLogGroup0BC14B46",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "FargateAlbServiceTaskDefExecutionRoleDefaultPolicyD03CA136",
+ "roles": [
+ {
+ "Ref": "FargateAlbServiceTaskDefExecutionRole5FC6F0D2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateTaskDefinition",
+ "version": "0.0.0"
+ }
+ },
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateAlbService/Service",
+ "children": {
+ "Service": {
+ "id": "Service",
+ "path": "aws-ecs-integ/FargateAlbService/Service/Service",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::ECS::Service",
+ "aws:cdk:cloudformation:props": {
+ "cluster": {
+ "Ref": "ClusterEB0386A7"
+ },
+ "deploymentConfiguration": {
+ "maximumPercent": 200,
+ "minimumHealthyPercent": 50
+ },
+ "enableEcsManagedTags": false,
+ "healthCheckGracePeriodSeconds": 60,
+ "launchType": "FARGATE",
+ "loadBalancers": [
+ {
+ "targetGroupArn": {
+ "Ref": "FargateAlbServiceLBPublicListenerECSGroupB3826700"
+ },
+ "containerName": "web",
+ "containerPort": 2015
+ }
+ ],
+ "networkConfiguration": {
+ "awsvpcConfiguration": {
+ "assignPublicIp": "DISABLED",
+ "subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ],
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ },
+ "taskDefinition": {
+ "Ref": "FargateAlbServiceTaskDef291471C0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.CfnService",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "aws-ecs-integ/FargateAlbService/Service/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "aws-ecs-integ/FargateAlbService/Service/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "aws-ecs-integ/FargateAlbService/Service/SecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from awsecsintegFargateAlbServiceLBSecurityGroup2B85C6B7:2015": {
+ "id": "from awsecsintegFargateAlbServiceLBSecurityGroup2B85C6B7:2015",
+ "path": "aws-ecs-integ/FargateAlbService/Service/SecurityGroup/from awsecsintegFargateAlbServiceLBSecurityGroup2B85C6B7:2015",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "Load balancer to target",
+ "fromPort": 2015,
+ "groupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceSecurityGroupF5AFFC6E",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "FargateAlbServiceLBSecurityGroupE10F3DF3",
+ "GroupId"
+ ]
+ },
+ "toPort": 2015
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs.FargateService",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ecs-patterns.ApplicationLoadBalancedFargateService",
+ "version": "0.0.0"
+ }
+ },
+ "AlbDnsName": {
+ "id": "AlbDnsName",
+ "path": "aws-ecs-integ/AlbDnsName",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ },
+ "NlbDnsName": {
+ "id": "NlbDnsName",
+ "path": "aws-ecs-integ/NlbDnsName",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnOutput",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-ecs-patterns/test/sqs-reader/Dockerfile b/packages/@aws-cdk/aws-ecs-patterns/test/sqs-reader/Dockerfile
index e6618640549e2..919fabfc3f637 100644
--- a/packages/@aws-cdk/aws-ecs-patterns/test/sqs-reader/Dockerfile
+++ b/packages/@aws-cdk/aws-ecs-patterns/test/sqs-reader/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
RUN pip3 install boto3
diff --git a/packages/@aws-cdk/aws-ecs/.gitignore b/packages/@aws-cdk/aws-ecs/.gitignore
index 52228730a371f..e0872a34fef42 100644
--- a/packages/@aws-cdk/aws-ecs/.gitignore
+++ b/packages/@aws-cdk/aws-ecs/.gitignore
@@ -17,4 +17,8 @@ nyc.config.js
!.eslintrc.js
junit.xml
-!jest.config.js
\ No newline at end of file
+!jest.config.js
+!**/*.integ.snapshot/**/asset.*/*.js
+!**/*.integ.snapshot/**/asset.*/*.d.ts
+
+!**/*.integ.snapshot/**/asset.*/**
diff --git a/packages/@aws-cdk/aws-ecs/.npmignore b/packages/@aws-cdk/aws-ecs/.npmignore
index 0161492629d0f..1bd6dc11034b9 100644
--- a/packages/@aws-cdk/aws-ecs/.npmignore
+++ b/packages/@aws-cdk/aws-ecs/.npmignore
@@ -25,4 +25,6 @@ tsconfig.json
junit.xml
test/
jest.config.js
-!*.lit.ts
\ No newline at end of file
+!*.lit.ts
+**/*.integ.snapshot
+**/*.integ.snapshot
diff --git a/packages/@aws-cdk/aws-ecs/README.md b/packages/@aws-cdk/aws-ecs/README.md
index d0d091eda612e..901989b45c448 100644
--- a/packages/@aws-cdk/aws-ecs/README.md
+++ b/packages/@aws-cdk/aws-ecs/README.md
@@ -393,8 +393,8 @@ obtained from either DockerHub or from ECR repositories, built directly from a l
- `ecs.ContainerImage.fromRegistry(imageName)`: use a public image.
- `ecs.ContainerImage.fromRegistry(imageName, { credentials: mySecret })`: use a private image that requires credentials.
-- `ecs.ContainerImage.fromEcrRepository(repo, tag)`: use the given ECR repository as the image
- to start. If no tag is provided, "latest" is assumed.
+- `ecs.ContainerImage.fromEcrRepository(repo, tagOrDigest)`: use the given ECR repository as the image
+ to start. If no tag or digest is provided, "latest" is assumed.
- `ecs.ContainerImage.fromAsset('./image')`: build and upload an
image directly from a `Dockerfile` in your source directory.
- `ecs.ContainerImage.fromDockerImageAsset(asset)`: uses an existing
diff --git a/packages/@aws-cdk/aws-ecs/lib/base/base-service.ts b/packages/@aws-cdk/aws-ecs/lib/base/base-service.ts
index 4e5de4c90eacf..df4a9fd4d372e 100644
--- a/packages/@aws-cdk/aws-ecs/lib/base/base-service.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/base/base-service.ts
@@ -510,7 +510,7 @@ export abstract class BaseService extends Resource
resources: ['*'],
}));
- const logGroupArn = logConfiguration?.cloudWatchLogGroup ? `arn:${this.stack.partition}:logs:${this.stack.region}:${this.stack.account}:log-group:${logConfiguration.cloudWatchLogGroup.logGroupName}:*` : '*';
+ const logGroupArn = logConfiguration?.cloudWatchLogGroup ? `arn:${this.stack.partition}:logs:${this.env.region}:${this.env.account}:log-group:${logConfiguration.cloudWatchLogGroup.logGroupName}:*` : '*';
this.taskDefinition.addToTaskRolePolicy(new iam.PolicyStatement({
actions: [
'logs:CreateLogStream',
@@ -558,7 +558,7 @@ export abstract class BaseService extends Resource
'kms:*',
],
resources: ['*'],
- principals: [new iam.ArnPrincipal(`arn:${this.stack.partition}:iam::${this.stack.account}:root`)],
+ principals: [new iam.ArnPrincipal(`arn:${this.stack.partition}:iam::${this.env.account}:root`)],
}));
if (logging === ExecuteCommandLogging.DEFAULT || this.cluster.executeCommandConfiguration?.logConfiguration?.cloudWatchEncryptionEnabled) {
@@ -571,9 +571,9 @@ export abstract class BaseService extends Resource
'kms:Describe*',
],
resources: ['*'],
- principals: [new iam.ServicePrincipal(`logs.${this.stack.region}.amazonaws.com`)],
+ principals: [new iam.ServicePrincipal(`logs.${this.env.region}.amazonaws.com`)],
conditions: {
- ArnLike: { 'kms:EncryptionContext:aws:logs:arn': `arn:${this.stack.partition}:logs:${this.stack.region}:${this.stack.account}:*` },
+ ArnLike: { 'kms:EncryptionContext:aws:logs:arn': `arn:${this.stack.partition}:logs:${this.env.region}:${this.env.account}:*` },
},
}));
}
diff --git a/packages/@aws-cdk/aws-ecs/lib/base/task-definition.ts b/packages/@aws-cdk/aws-ecs/lib/base/task-definition.ts
index a42d98fb5c656..c937a2d14ef0a 100644
--- a/packages/@aws-cdk/aws-ecs/lib/base/task-definition.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/base/task-definition.ts
@@ -509,7 +509,7 @@ export class TaskDefinition extends TaskDefinitionBase {
scope: spec.dockerVolumeConfiguration.scope,
},
efsVolumeConfiguration: spec.efsVolumeConfiguration && {
- fileSystemId: spec.efsVolumeConfiguration.fileSystemId,
+ filesystemId: spec.efsVolumeConfiguration.fileSystemId,
authorizationConfig: spec.efsVolumeConfiguration.authorizationConfig,
rootDirectory: spec.efsVolumeConfiguration.rootDirectory,
transitEncryption: spec.efsVolumeConfiguration.transitEncryption,
diff --git a/packages/@aws-cdk/aws-ecs/lib/external/external-task-definition.ts b/packages/@aws-cdk/aws-ecs/lib/external/external-task-definition.ts
index de9fa8b87e9dc..74be4e73ac2d4 100644
--- a/packages/@aws-cdk/aws-ecs/lib/external/external-task-definition.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/external/external-task-definition.ts
@@ -8,7 +8,6 @@ import {
ITaskDefinition,
NetworkMode,
TaskDefinition,
- Volume,
} from '../base/task-definition';
/**
@@ -75,13 +74,6 @@ export class ExternalTaskDefinition extends TaskDefinition implements IExternalT
});
}
- /**
- * Overridden method to throw error, as volumes are not supported for external task definitions
- */
- public addVolume(_volume: Volume) {
- throw new Error('External task definitions doesnt support volumes');
- }
-
/**
* Overriden method to throw error as interface accelerators are not supported for external tasks
*/
diff --git a/packages/@aws-cdk/aws-ecs/lib/fargate/fargate-task-definition.ts b/packages/@aws-cdk/aws-ecs/lib/fargate/fargate-task-definition.ts
index a1e957ed7a21c..c4e0831fbb4f7 100644
--- a/packages/@aws-cdk/aws-ecs/lib/fargate/fargate-task-definition.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/fargate/fargate-task-definition.ts
@@ -1,4 +1,4 @@
-import { Tokenization } from '@aws-cdk/core';
+import { Tokenization, Token } from '@aws-cdk/core';
import { Construct } from 'constructs';
import { ImportedTaskDefinition } from '../base/_imported-task-definition';
import {
@@ -140,7 +140,8 @@ export class FargateTaskDefinition extends TaskDefinition implements IFargateTas
networkMode: NetworkMode.AWS_VPC,
});
- if (props.ephemeralStorageGiB && (props.ephemeralStorageGiB < 21 || props.ephemeralStorageGiB > 200)) {
+ // eslint-disable-next-line max-len
+ if (props.ephemeralStorageGiB && !Token.isUnresolved(props.ephemeralStorageGiB) && (props.ephemeralStorageGiB < 21 || props.ephemeralStorageGiB > 200)) {
throw new Error('Ephemeral storage size must be between 21GiB and 200GiB');
}
diff --git a/packages/@aws-cdk/aws-ecs/lib/images/ecr.ts b/packages/@aws-cdk/aws-ecs/lib/images/ecr.ts
index b9786f13e2816..eef0396aa3b4e 100644
--- a/packages/@aws-cdk/aws-ecs/lib/images/ecr.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/images/ecr.ts
@@ -25,11 +25,7 @@ export class EcrImage extends ContainerImage {
constructor(private readonly repository: ecr.IRepository, private readonly tagOrDigest: string) {
super();
- if (tagOrDigest?.startsWith('sha256:')) {
- this.imageName = this.repository.repositoryUriForDigest(this.tagOrDigest);
- } else {
- this.imageName = this.repository.repositoryUriForTag(this.tagOrDigest);
- }
+ this.imageName = this.repository.repositoryUriForTagOrDigest(this.tagOrDigest);
}
public bind(_scope: CoreConstruct, containerDefinition: ContainerDefinition): ContainerImageConfig {
diff --git a/packages/@aws-cdk/aws-ecs/lib/log-drivers/splunk-log-driver.ts b/packages/@aws-cdk/aws-ecs/lib/log-drivers/splunk-log-driver.ts
index c1d3ceac6908f..fb5b64f375c02 100644
--- a/packages/@aws-cdk/aws-ecs/lib/log-drivers/splunk-log-driver.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/log-drivers/splunk-log-driver.ts
@@ -152,7 +152,7 @@ export class SplunkLogDriver extends LogDriver {
*/
public bind(_scope: CoreConstruct, _containerDefinition: ContainerDefinition): LogDriverConfig {
const options = stringifyOptions({
- 'splunk-token': this.props.token,
+ 'splunk-token': this.props.token?.unsafeUnwrap(), // Safe usage
'splunk-url': this.props.url,
'splunk-source': this.props.source,
'splunk-sourcetype': this.props.sourceType,
diff --git a/packages/@aws-cdk/aws-ecs/lib/log-drivers/utils.ts b/packages/@aws-cdk/aws-ecs/lib/log-drivers/utils.ts
index b47701797bf96..d9339b1306d98 100644
--- a/packages/@aws-cdk/aws-ecs/lib/log-drivers/utils.ts
+++ b/packages/@aws-cdk/aws-ecs/lib/log-drivers/utils.ts
@@ -38,9 +38,9 @@ export function stringifyOptions(options: { [key: string]: (SecretValue | Durati
const _options: { [key: string]: string } = {};
const filteredOptions = removeEmpty(options);
- for (const key of Object.keys(filteredOptions)) {
+ for (const [key, value] of Object.entries(filteredOptions)) {
// Convert value to string
- _options[key] = `${filteredOptions[key]}`;
+ _options[key] = SecretValue.isSecretValue(value) ? value.unsafeUnwrap() : `${value}`;
}
return _options;
diff --git a/packages/@aws-cdk/aws-ecs/package.json b/packages/@aws-cdk/aws-ecs/package.json
index 931a7d1b4ae1b..1d3787c2d2af2 100644
--- a/packages/@aws-cdk/aws-ecs/package.json
+++ b/packages/@aws-cdk/aws-ecs/package.json
@@ -47,7 +47,7 @@
"watch": "cdk-watch",
"lint": "cdk-lint",
"test": "cdk-test",
- "integ": "cdk-integ",
+ "integ": "integ-runner",
"pkglint": "pkglint -f",
"package": "cdk-package",
"awslint": "cdk-awslint",
@@ -81,8 +81,9 @@
"devDependencies": {
"@aws-cdk/assertions": "0.0.0",
"@aws-cdk/aws-s3-deployment": "0.0.0",
+ "@aws-cdk/aws-efs": "0.0.0",
"@aws-cdk/cdk-build-tools": "0.0.0",
- "@aws-cdk/cdk-integ-tools": "0.0.0",
+ "@aws-cdk/integ-runner": "0.0.0",
"@aws-cdk/cfn2ts": "0.0.0",
"@aws-cdk/cx-api": "0.0.0",
"@aws-cdk/pkglint": "0.0.0",
diff --git a/packages/@aws-cdk/aws-ecs/test/container-definition.test.ts b/packages/@aws-cdk/aws-ecs/test/container-definition.test.ts
index 1aed207c1cdd5..0c428cb23ab84 100644
--- a/packages/@aws-cdk/aws-ecs/test/container-definition.test.ts
+++ b/packages/@aws-cdk/aws-ecs/test/container-definition.test.ts
@@ -1999,7 +1999,7 @@ describe('container definition', () => {
{ Ref: 'AWS::Region' },
'.',
{ Ref: 'AWS::URLSuffix' },
- '/aws-cdk/assets:8c1d9ca9f5d37b1c4870c13a9f855301bb42c1848dbcdd5edc8fe2c6c7261d48',
+ '/aws-cdk/assets:0a3355be12051c9984bf2b0b2bba4e6ea535968e5b6e7396449701732fe5ed14',
],
],
},
@@ -2055,11 +2055,11 @@ describe('container definition', () => {
const asm = app.synth();
expect(asm.getStackArtifact(stack.artifactId).assets[0]).toEqual({
repositoryName: 'aws-cdk/assets',
- imageTag: '9d913132f812bc1ad436aeb5a51f9216c5776b8079318c1883ad2f79f0ef1a4b',
- id: '9d913132f812bc1ad436aeb5a51f9216c5776b8079318c1883ad2f79f0ef1a4b',
+ imageTag: '8b0801d3f897d960240bf5bf3d5a3e367e50a17e04101717320bfd52ebc9d64a',
+ id: '8b0801d3f897d960240bf5bf3d5a3e367e50a17e04101717320bfd52ebc9d64a',
packaging: 'container-image',
- path: 'asset.9d913132f812bc1ad436aeb5a51f9216c5776b8079318c1883ad2f79f0ef1a4b',
- sourceHash: '9d913132f812bc1ad436aeb5a51f9216c5776b8079318c1883ad2f79f0ef1a4b',
+ path: 'asset.8b0801d3f897d960240bf5bf3d5a3e367e50a17e04101717320bfd52ebc9d64a',
+ sourceHash: '8b0801d3f897d960240bf5bf3d5a3e367e50a17e04101717320bfd52ebc9d64a',
target: 'build-target',
file: 'index.py',
});
@@ -2078,7 +2078,7 @@ describe('container definition', () => {
// THEN
expect(stack.resolve(container.imageName)).toEqual({
- 'Fn::Sub': '${AWS::AccountId}.dkr.ecr.${AWS::Region}.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-${AWS::AccountId}-${AWS::Region}:baa2d6eb2a17c75424df631c8c70ff39f2d5f3bee8b9e1a109ee24ca17300540',
+ 'Fn::Sub': '${AWS::AccountId}.dkr.ecr.${AWS::Region}.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-${AWS::AccountId}-${AWS::Region}:aba53d5f05c76afcd7e420dc8cd283ddc31657866bb4ba4ce221e13d8128d92c',
});
});
});
diff --git a/packages/@aws-cdk/aws-ecs/test/demo-image/Dockerfile b/packages/@aws-cdk/aws-ecs/test/demo-image/Dockerfile
index 123b5670febc8..235b30e9661ed 100644
--- a/packages/@aws-cdk/aws-ecs/test/demo-image/Dockerfile
+++ b/packages/@aws-cdk/aws-ecs/test/demo-image/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.6
+FROM public.ecr.aws/lambda/python:3.6
EXPOSE 8000
WORKDIR /src
ADD . /src
diff --git a/packages/@aws-cdk/aws-ecs/test/ec2/app-mesh-proxy-config.integ.snapshot/aws-ecs-integ.template.json b/packages/@aws-cdk/aws-ecs/test/ec2/app-mesh-proxy-config.integ.snapshot/aws-ecs-integ.template.json
new file mode 100644
index 0000000000000..0ba6161a28794
--- /dev/null
+++ b/packages/@aws-cdk/aws-ecs/test/ec2/app-mesh-proxy-config.integ.snapshot/aws-ecs-integ.template.json
@@ -0,0 +1,990 @@
+{
+ "Resources": {
+ "Vpc8378EB38": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1Subnet5C2D37C4": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTable6C95E38E": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1RouteTableAssociation97140677": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ }
+ }
+ },
+ "VpcPublicSubnet1DefaultRoute3DA9E72A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet1EIPD7E02669": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet1NATGateway4D7517AA": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet1EIPD7E02669",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2Subnet691E08A3": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTable94F7E489": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ }
+ }
+ },
+ "VpcPublicSubnet2DefaultRoute97F91067": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPublicSubnet2RouteTable94F7E489"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ },
+ "DependsOn": [
+ "VpcVPCGWBF912B6E"
+ ]
+ },
+ "VpcPublicSubnet2EIP3C605A87": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPublicSubnet2NATGateway9182C01D": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "VpcPublicSubnet2Subnet691E08A3"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "VpcPublicSubnet2EIP3C605A87",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1Subnet536B997A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableB2C5B500": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ }
+ }
+ },
+ "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
+ }
+ }
+ },
+ "VpcPrivateSubnet2Subnet3788AAA1": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableA678073B": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "SubnetId": {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ }
+ },
+ "VpcPrivateSubnet2DefaultRoute060D2087": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "VpcPrivateSubnet2RouteTableA678073B"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "VpcPublicSubnet2NATGateway9182C01D"
+ }
+ }
+ },
+ "VpcIGWD7BA715C": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/Vpc"
+ }
+ ]
+ }
+ },
+ "VpcVPCGWBF912B6E": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ },
+ "InternetGatewayId": {
+ "Ref": "VpcIGWD7BA715C"
+ }
+ }
+ },
+ "EcsCluster97242B84": {
+ "Type": "AWS::ECS::Cluster"
+ },
+ "EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup/InstanceSecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupInstanceRole3C026863": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": {
+ "Fn::Join": [
+ "",
+ [
+ "ec2.",
+ {
+ "Ref": "AWS::URLSuffix"
+ }
+ ]
+ ]
+ }
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy04DC6C80": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ecs:DeregisterContainerInstance",
+ "ecs:RegisterContainerInstance",
+ "ecs:Submit*"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "EcsCluster97242B84",
+ "Arn"
+ ]
+ }
+ },
+ {
+ "Action": [
+ "ecs:Poll",
+ "ecs:StartTelemetrySession"
+ ],
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "EcsCluster97242B84",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "ecr:GetAuthorizationToken",
+ "ecs:DiscoverPollEndpoint",
+ "logs:CreateLogStream",
+ "logs:PutLogEvents"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "EcsClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy04DC6C80",
+ "Roles": [
+ {
+ "Ref": "EcsClusterDefaultAutoScalingGroupInstanceRole3C026863"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupInstanceProfile2CE606B3": {
+ "Type": "AWS::IAM::InstanceProfile",
+ "Properties": {
+ "Roles": [
+ {
+ "Ref": "EcsClusterDefaultAutoScalingGroupInstanceRole3C026863"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1": {
+ "Type": "AWS::AutoScaling::LaunchConfiguration",
+ "Properties": {
+ "ImageId": {
+ "Ref": "SsmParameterValueawsserviceecsoptimizedamiamazonlinux2recommendedimageidC96584B6F00A464EAD1953AFF4B05118Parameter"
+ },
+ "InstanceType": "t2.micro",
+ "IamInstanceProfile": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupInstanceProfile2CE606B3"
+ },
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "EcsClusterDefaultAutoScalingGroupInstanceSecurityGroup912E1231",
+ "GroupId"
+ ]
+ }
+ ],
+ "UserData": {
+ "Fn::Base64": {
+ "Fn::Join": [
+ "",
+ [
+ "#!/bin/bash\necho ECS_CLUSTER=",
+ {
+ "Ref": "EcsCluster97242B84"
+ },
+ " >> /etc/ecs/ecs.config\nsudo iptables --insert FORWARD 1 --in-interface docker+ --destination 169.254.169.254/32 --jump DROP\nsudo service iptables save\necho ECS_AWSVPC_BLOCK_IMDS=true >> /etc/ecs/ecs.config"
+ ]
+ ]
+ }
+ }
+ },
+ "DependsOn": [
+ "EcsClusterDefaultAutoScalingGroupInstanceRoleDefaultPolicy04DC6C80",
+ "EcsClusterDefaultAutoScalingGroupInstanceRole3C026863"
+ ]
+ },
+ "EcsClusterDefaultAutoScalingGroupASGC1A785DB": {
+ "Type": "AWS::AutoScaling::AutoScalingGroup",
+ "Properties": {
+ "MaxSize": "1",
+ "MinSize": "1",
+ "LaunchConfigurationName": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLaunchConfigB7E376C1"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "PropagateAtLaunch": true,
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "VPCZoneIdentifier": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ },
+ "UpdatePolicy": {
+ "AutoScalingReplacingUpdate": {
+ "WillReplace": true
+ },
+ "AutoScalingScheduledAction": {
+ "IgnoreUnmodifiedGroupSizeProperties": true
+ }
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole94543EDA": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicyA45BF396": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "ec2:DescribeHosts",
+ "ec2:DescribeInstanceAttribute",
+ "ec2:DescribeInstanceStatus",
+ "ec2:DescribeInstances"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": "autoscaling:CompleteLifecycleAction",
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":autoscaling:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":autoScalingGroup:*:autoScalingGroupName/",
+ {
+ "Ref": "EcsClusterDefaultAutoScalingGroupASGC1A785DB"
+ }
+ ]
+ ]
+ }
+ },
+ {
+ "Action": [
+ "ecs:DescribeContainerInstances",
+ "ecs:DescribeTasks",
+ "ecs:ListTasks",
+ "ecs:UpdateContainerInstancesState"
+ ],
+ "Condition": {
+ "ArnEquals": {
+ "ecs:cluster": {
+ "Fn::GetAtt": [
+ "EcsCluster97242B84",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "ecs:ListContainerInstances",
+ "ecs:SubmitContainerStateChange",
+ "ecs:SubmitTaskStateChange"
+ ],
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::GetAtt": [
+ "EcsCluster97242B84",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicyA45BF396",
+ "Roles": [
+ {
+ "Ref": "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole94543EDA"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionE17A5F5E": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "ZipFile": "import boto3, json, os, time\n\necs = boto3.client('ecs')\nautoscaling = boto3.client('autoscaling')\n\n\ndef lambda_handler(event, context):\n print(json.dumps(event))\n cluster = os.environ['CLUSTER']\n snsTopicArn = event['Records'][0]['Sns']['TopicArn']\n lifecycle_event = json.loads(event['Records'][0]['Sns']['Message'])\n instance_id = lifecycle_event.get('EC2InstanceId')\n if not instance_id:\n print('Got event without EC2InstanceId: %s', json.dumps(event))\n return\n\n instance_arn = container_instance_arn(cluster, instance_id)\n print('Instance %s has container instance ARN %s' % (lifecycle_event['EC2InstanceId'], instance_arn))\n\n if not instance_arn:\n return\n\n task_arns = container_instance_task_arns(cluster, instance_arn)\n \n if task_arns:\n print('Instance ARN %s has task ARNs %s' % (instance_arn, ', '.join(task_arns)))\n\n while has_tasks(cluster, instance_arn, task_arns):\n time.sleep(10)\n\n try:\n print('Terminating instance %s' % instance_id)\n autoscaling.complete_lifecycle_action(\n LifecycleActionResult='CONTINUE',\n **pick(lifecycle_event, 'LifecycleHookName', 'LifecycleActionToken', 'AutoScalingGroupName'))\n except Exception as e:\n # Lifecycle action may have already completed.\n print(str(e))\n\n\ndef container_instance_arn(cluster, instance_id):\n \"\"\"Turn an instance ID into a container instance ARN.\"\"\"\n arns = ecs.list_container_instances(cluster=cluster, filter='ec2InstanceId==' + instance_id)['containerInstanceArns']\n if not arns:\n return None\n return arns[0]\n\ndef container_instance_task_arns(cluster, instance_arn):\n \"\"\"Fetch tasks for a container instance ARN.\"\"\"\n arns = ecs.list_tasks(cluster=cluster, containerInstance=instance_arn)['taskArns']\n return arns\n\ndef has_tasks(cluster, instance_arn, task_arns):\n \"\"\"Return True if the instance is running tasks for the given cluster.\"\"\"\n instances = ecs.describe_container_instances(cluster=cluster, containerInstances=[instance_arn])['containerInstances']\n if not instances:\n return False\n instance = instances[0]\n\n if instance['status'] == 'ACTIVE':\n # Start draining, then try again later\n set_container_instance_to_draining(cluster, instance_arn)\n return True\n\n task_count = None\n\n if task_arns:\n # Fetch details for tasks running on the container instance\n tasks = ecs.describe_tasks(cluster=cluster, tasks=task_arns)['tasks']\n if tasks:\n # Consider any non-stopped tasks as running\n task_count = sum(task['lastStatus'] != 'STOPPED' for task in tasks) + instance['pendingTasksCount']\n \n if not task_count:\n # Fallback to instance task counts if detailed task information is unavailable\n task_count = instance['runningTasksCount'] + instance['pendingTasksCount']\n \n print('Instance %s has %s tasks' % (instance_arn, task_count))\n\n return task_count > 0\n\ndef set_container_instance_to_draining(cluster, instance_arn):\n ecs.update_container_instances_state(\n cluster=cluster,\n containerInstances=[instance_arn], status='DRAINING')\n\n\ndef pick(dct, *keys):\n \"\"\"Pick a subset of a dict.\"\"\"\n return {k: v for k, v in dct.items() if k in keys}\n"
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole94543EDA",
+ "Arn"
+ ]
+ },
+ "Environment": {
+ "Variables": {
+ "CLUSTER": {
+ "Ref": "EcsCluster97242B84"
+ }
+ }
+ },
+ "Handler": "index.lambda_handler",
+ "Runtime": "python3.6",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ],
+ "Timeout": 310
+ },
+ "DependsOn": [
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRoleDefaultPolicyA45BF396",
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionServiceRole94543EDA"
+ ]
+ },
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionAllowInvokeawsecsintegEcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopic7A89925AFDCBEE50": {
+ "Type": "AWS::Lambda::Permission",
+ "Properties": {
+ "Action": "lambda:InvokeFunction",
+ "FunctionName": {
+ "Fn::GetAtt": [
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionE17A5F5E",
+ "Arn"
+ ]
+ },
+ "Principal": "sns.amazonaws.com",
+ "SourceArn": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicACD2D4A4"
+ }
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionTopic8F34E394": {
+ "Type": "AWS::SNS::Subscription",
+ "Properties": {
+ "Protocol": "lambda",
+ "TopicArn": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicACD2D4A4"
+ },
+ "Endpoint": {
+ "Fn::GetAtt": [
+ "EcsClusterDefaultAutoScalingGroupDrainECSHookFunctionE17A5F5E",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicACD2D4A4": {
+ "Type": "AWS::SNS::Topic",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleA38EC83B": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "autoscaling.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "aws-ecs-integ/EcsCluster/DefaultAutoScalingGroup"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicy75002F88": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Effect": "Allow",
+ "Resource": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicACD2D4A4"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicy75002F88",
+ "Roles": [
+ {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleA38EC83B"
+ }
+ ]
+ }
+ },
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookFFA63029": {
+ "Type": "AWS::AutoScaling::LifecycleHook",
+ "Properties": {
+ "AutoScalingGroupName": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupASGC1A785DB"
+ },
+ "LifecycleTransition": "autoscaling:EC2_INSTANCE_TERMINATING",
+ "DefaultResult": "CONTINUE",
+ "HeartbeatTimeout": 300,
+ "NotificationTargetARN": {
+ "Ref": "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookTopicACD2D4A4"
+ },
+ "RoleARN": {
+ "Fn::GetAtt": [
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleA38EC83B",
+ "Arn"
+ ]
+ }
+ },
+ "DependsOn": [
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleDefaultPolicy75002F88",
+ "EcsClusterDefaultAutoScalingGroupLifecycleHookDrainHookRoleA38EC83B"
+ ]
+ },
+ "TaskDefTaskRole1EDB4A67": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ecs-tasks.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "TaskDef54694570": {
+ "Type": "AWS::ECS::TaskDefinition",
+ "Properties": {
+ "ContainerDefinitions": [
+ {
+ "Essential": true,
+ "Image": "amazon/amazon-ecs-sample",
+ "Memory": 256,
+ "Name": "web"
+ },
+ {
+ "Essential": true,
+ "Image": "envoyproxy/envoy:v1.16.2",
+ "Memory": 256,
+ "Name": "envoy"
+ }
+ ],
+ "Family": "awsecsintegTaskDef6FDFB69A",
+ "IpcMode": "host",
+ "NetworkMode": "awsvpc",
+ "PidMode": "task",
+ "ProxyConfiguration": {
+ "ContainerName": "envoy",
+ "ProxyConfigurationProperties": [
+ {
+ "Name": "IgnoredUID",
+ "Value": "1337"
+ },
+ {
+ "Name": "ProxyIngressPort",
+ "Value": "15000"
+ },
+ {
+ "Name": "ProxyEgressPort",
+ "Value": "15001"
+ },
+ {
+ "Name": "AppPorts",
+ "Value": "9080,9081"
+ },
+ {
+ "Name": "EgressIgnoredIPs",
+ "Value": "169.254.170.2,169.254.169.254"
+ }
+ ],
+ "Type": "APPMESH"
+ },
+ "RequiresCompatibilities": [
+ "EC2"
+ ],
+ "TaskRoleArn": {
+ "Fn::GetAtt": [
+ "TaskDefTaskRole1EDB4A67",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "ServiceD69D759B": {
+ "Type": "AWS::ECS::Service",
+ "Properties": {
+ "Cluster": {
+ "Ref": "EcsCluster97242B84"
+ },
+ "DeploymentConfiguration": {
+ "MaximumPercent": 200,
+ "MinimumHealthyPercent": 50
+ },
+ "EnableECSManagedTags": false,
+ "LaunchType": "EC2",
+ "NetworkConfiguration": {
+ "AwsvpcConfiguration": {
+ "AssignPublicIp": "DISABLED",
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "ServiceSecurityGroupC96ED6A7",
+ "GroupId"
+ ]
+ }
+ ],
+ "Subnets": [
+ {
+ "Ref": "VpcPrivateSubnet1Subnet536B997A"
+ },
+ {
+ "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
+ }
+ ]
+ }
+ },
+ "SchedulingStrategy": "REPLICA",
+ "TaskDefinition": {
+ "Ref": "TaskDef54694570"
+ }
+ }
+ },
+ "ServiceSecurityGroupC96ED6A7": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "aws-ecs-integ/Service/SecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "Vpc8378EB38"
+ }
+ }
+ }
+ },
+ "Parameters": {
+ "SsmParameterValueawsserviceecsoptimizedamiamazonlinux2recommendedimageidC96584B6F00A464EAD1953AFF4B05118Parameter": {
+ "Type": "AWS::SSM::Parameter::ValueThis is a sample file
+ +With markdown
diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk-integ-assets-bundling.template.json b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk-integ-assets-bundling.template.json new file mode 100644 index 0000000000000..f5aa7de1ea31c --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk-integ-assets-bundling.template.json @@ -0,0 +1,78 @@ +{ + "Parameters": { + "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7": { + "Type": "String", + "Description": "S3 bucket for asset \"96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6\"" + }, + "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3VersionKey3BDA2FA7": { + "Type": "String", + "Description": "S3 key for asset version \"96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6\"" + }, + "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6ArtifactHashA1ED07BD": { + "Type": "String", + "Description": "Artifact hash for asset \"96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6\"" + } + }, + "Resources": { + "MyUserDC45028B": { + "Type": "AWS::IAM::User" + }, + "MyUserDefaultPolicy7B897426": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "MyUserDefaultPolicy7B897426", + "Users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/integ.json new file mode 100644 index 0000000000000..249c71a5d70f4 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.assets.bundling.lit": { + "stacks": [ + "cdk-integ-assets-bundling" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..323ae6faedbab --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/manifest.json @@ -0,0 +1,66 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "cdk-integ-assets-bundling": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "cdk-integ-assets-bundling.template.json", + "validateOnSynth": false + }, + "metadata": { + "/cdk-integ-assets-bundling": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6", + "id": "96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6", + "packaging": "zip", + "sourceHash": "96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6", + "s3BucketParameter": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7", + "s3KeyParameter": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3VersionKey3BDA2FA7", + "artifactHashParameter": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6ArtifactHashA1ED07BD" + } + } + ], + "/cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7" + } + ], + "/cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3VersionKey3BDA2FA7" + } + ], + "/cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6ArtifactHashA1ED07BD" + } + ], + "/cdk-integ-assets-bundling/MyUser/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDC45028B" + } + ], + "/cdk-integ-assets-bundling/MyUser/DefaultPolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDefaultPolicy7B897426" + } + ] + }, + "displayName": "cdk-integ-assets-bundling" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/tree.json new file mode 100644 index 0000000000000..a0246f32f49e9 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.bundling.lit.integ.snapshot/tree.json @@ -0,0 +1,198 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "cdk-integ-assets-bundling": { + "id": "cdk-integ-assets-bundling", + "path": "cdk-integ-assets-bundling", + "children": { + "BundledAsset": { + "id": "BundledAsset", + "path": "cdk-integ-assets-bundling/BundledAsset", + "children": { + "Stage": { + "id": "Stage", + "path": "cdk-integ-assets-bundling/BundledAsset/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "cdk-integ-assets-bundling/BundledAsset/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "cdk-integ-assets-bundling/AssetParameters", + "children": { + "96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6": { + "id": "96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6", + "path": "cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "cdk-integ-assets-bundling/AssetParameters/96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "MyUser": { + "id": "MyUser", + "path": "cdk-integ-assets-bundling/MyUser", + "children": { + "Resource": { + "id": "Resource", + "path": "cdk-integ-assets-bundling/MyUser/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::User", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnUser", + "version": "0.0.0" + } + }, + "DefaultPolicy": { + "id": "DefaultPolicy", + "path": "cdk-integ-assets-bundling/MyUser/DefaultPolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "cdk-integ-assets-bundling/MyUser/DefaultPolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters96eb17ab9d98dd42b972aa0dd468f59024f21aba33c7d792b8ebe7a8d378e2b6S3Bucket455340E7" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "policyName": "MyUserDefaultPolicy7B897426", + "users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.User", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt new file mode 100644 index 0000000000000..a21cdbf7d0691 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt @@ -0,0 +1 @@ +// hello dear asset \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar new file mode 100644 index 0000000000000..71224bd574e4b Binary files /dev/null and b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar differ diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip new file mode 100644 index 0000000000000..71224bd574e4b Binary files /dev/null and b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip differ diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/aws-cdk-asset-test.template.json b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/aws-cdk-asset-test.template.json new file mode 100644 index 0000000000000..412ec96de9abd --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/aws-cdk-asset-test.template.json @@ -0,0 +1,78 @@ +{ + "Parameters": { + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B": { + "Type": "String", + "Description": "S3 bucket for asset \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + }, + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9": { + "Type": "String", + "Description": "S3 key for asset version \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + }, + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD": { + "Type": "String", + "Description": "Artifact hash for asset \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + } + }, + "Resources": { + "MyUserDC45028B": { + "Type": "AWS::IAM::User" + }, + "MyUserDefaultPolicy7B897426": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "MyUserDefaultPolicy7B897426", + "Users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/integ.json new file mode 100644 index 0000000000000..3550414a02c63 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.assets.directory.lit": { + "stacks": [ + "aws-cdk-asset-test" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..5b7190e273b36 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/manifest.json @@ -0,0 +1,66 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-asset-test": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-asset-test.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-asset-test": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "id": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "packaging": "zip", + "sourceHash": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "s3BucketParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B", + "s3KeyParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9", + "artifactHashParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD" + } + } + ], + "/aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ], + "/aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ], + "/aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD" + } + ], + "/aws-cdk-asset-test/MyUser/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDC45028B" + } + ], + "/aws-cdk-asset-test/MyUser/DefaultPolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDefaultPolicy7B897426" + } + ] + }, + "displayName": "aws-cdk-asset-test" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/tree.json new file mode 100644 index 0000000000000..1bde2aedba860 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.directory.lit.integ.snapshot/tree.json @@ -0,0 +1,198 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-asset-test": { + "id": "aws-cdk-asset-test", + "path": "aws-cdk-asset-test", + "children": { + "SampleAsset": { + "id": "SampleAsset", + "path": "aws-cdk-asset-test/SampleAsset", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-asset-test/SampleAsset/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-asset-test/SampleAsset/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-asset-test/AssetParameters", + "children": { + "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2": { + "id": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "path": "aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-asset-test/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "MyUser": { + "id": "MyUser", + "path": "aws-cdk-asset-test/MyUser", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-test/MyUser/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::User", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnUser", + "version": "0.0.0" + } + }, + "DefaultPolicy": { + "id": "DefaultPolicy", + "path": "aws-cdk-asset-test/MyUser/DefaultPolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-test/MyUser/DefaultPolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "policyName": "MyUserDefaultPolicy7B897426", + "users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.User", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt new file mode 100644 index 0000000000000..87cda36f4da3e --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt @@ -0,0 +1 @@ +Hello, this is a just a file! \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/aws-cdk-asset-file-test.template.json b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/aws-cdk-asset-file-test.template.json new file mode 100644 index 0000000000000..e84829c9eb1e6 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/aws-cdk-asset-file-test.template.json @@ -0,0 +1,78 @@ +{ + "Parameters": { + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A": { + "Type": "String", + "Description": "S3 bucket for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35": { + "Type": "String", + "Description": "S3 key for asset version \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67": { + "Type": "String", + "Description": "Artifact hash for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + } + }, + "Resources": { + "MyUserDC45028B": { + "Type": "AWS::IAM::User" + }, + "MyUserDefaultPolicy7B897426": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "MyUserDefaultPolicy7B897426", + "Users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/integ.json new file mode 100644 index 0000000000000..d7cdb8a675a15 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.assets.file.lit": { + "stacks": [ + "aws-cdk-asset-file-test" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..d2a778acdd80a --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/manifest.json @@ -0,0 +1,66 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-asset-file-test": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-asset-file-test.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-asset-file-test": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt", + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "packaging": "file", + "sourceHash": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "s3BucketParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A", + "s3KeyParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35", + "artifactHashParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + } + ], + "/aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ], + "/aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35" + } + ], + "/aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + ], + "/aws-cdk-asset-file-test/MyUser/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDC45028B" + } + ], + "/aws-cdk-asset-file-test/MyUser/DefaultPolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDefaultPolicy7B897426" + } + ] + }, + "displayName": "aws-cdk-asset-file-test" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/tree.json new file mode 100644 index 0000000000000..f326315b77f4f --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.file.lit.integ.snapshot/tree.json @@ -0,0 +1,198 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-asset-file-test": { + "id": "aws-cdk-asset-file-test", + "path": "aws-cdk-asset-file-test", + "children": { + "SampleAsset": { + "id": "SampleAsset", + "path": "aws-cdk-asset-file-test/SampleAsset", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-asset-file-test/SampleAsset/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-asset-file-test/SampleAsset/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-asset-file-test/AssetParameters", + "children": { + "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197": { + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "path": "aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-asset-file-test/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "MyUser": { + "id": "MyUser", + "path": "aws-cdk-asset-file-test/MyUser", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-file-test/MyUser/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::User", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnUser", + "version": "0.0.0" + } + }, + "DefaultPolicy": { + "id": "DefaultPolicy", + "path": "aws-cdk-asset-file-test/MyUser/DefaultPolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-file-test/MyUser/DefaultPolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "policyName": "MyUserDefaultPolicy7B897426", + "users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.User", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt new file mode 100644 index 0000000000000..87cda36f4da3e --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt @@ -0,0 +1 @@ +Hello, this is a just a file! \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/aws-cdk-asset-refs.template.json b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/aws-cdk-asset-refs.template.json new file mode 100644 index 0000000000000..52b9b45bfb696 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/aws-cdk-asset-refs.template.json @@ -0,0 +1,78 @@ +{ + "Parameters": { + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A": { + "Type": "String", + "Description": "S3 bucket for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35": { + "Type": "String", + "Description": "S3 key for asset version \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67": { + "Type": "String", + "Description": "Artifact hash for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + } + }, + "Resources": { + "MyUserGroupDA7A39B2": { + "Type": "AWS::IAM::Group" + }, + "MyUserGroupDefaultPolicy50C5D742": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "MyUserGroupDefaultPolicy50C5D742", + "Groups": [ + { + "Ref": "MyUserGroupDA7A39B2" + } + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/integ.json new file mode 100644 index 0000000000000..047c812d704f7 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.assets.permissions.lit": { + "stacks": [ + "aws-cdk-asset-refs" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..f006323e0ba2d --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/manifest.json @@ -0,0 +1,66 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-asset-refs": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-asset-refs.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-asset-refs": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt", + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "packaging": "file", + "sourceHash": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "s3BucketParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A", + "s3KeyParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35", + "artifactHashParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + } + ], + "/aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ], + "/aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35" + } + ], + "/aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + ], + "/aws-cdk-asset-refs/MyUserGroup/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserGroupDA7A39B2" + } + ], + "/aws-cdk-asset-refs/MyUserGroup/DefaultPolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserGroupDefaultPolicy50C5D742" + } + ] + }, + "displayName": "aws-cdk-asset-refs" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/tree.json new file mode 100644 index 0000000000000..00cb8c12535b4 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.permissions.lit.integ.snapshot/tree.json @@ -0,0 +1,198 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-asset-refs": { + "id": "aws-cdk-asset-refs", + "path": "aws-cdk-asset-refs", + "children": { + "MyFile": { + "id": "MyFile", + "path": "aws-cdk-asset-refs/MyFile", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-asset-refs/MyFile/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-asset-refs/MyFile/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-asset-refs/AssetParameters", + "children": { + "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197": { + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "path": "aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-asset-refs/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "MyUserGroup": { + "id": "MyUserGroup", + "path": "aws-cdk-asset-refs/MyUserGroup", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-refs/MyUserGroup/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Group", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnGroup", + "version": "0.0.0" + } + }, + "DefaultPolicy": { + "id": "DefaultPolicy", + "path": "aws-cdk-asset-refs/MyUserGroup/DefaultPolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-refs/MyUserGroup/DefaultPolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "policyName": "MyUserGroupDefaultPolicy50C5D742", + "groups": [ + { + "Ref": "MyUserGroupDA7A39B2" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Group", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt new file mode 100644 index 0000000000000..a21cdbf7d0691 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-asset-file.txt @@ -0,0 +1 @@ +// hello dear asset \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar new file mode 100644 index 0000000000000..71224bd574e4b Binary files /dev/null and b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-jar-asset.jar differ diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip new file mode 100644 index 0000000000000..71224bd574e4b Binary files /dev/null and b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/sample-zip-asset.zip differ diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/aws-cdk-asset-refs.template.json b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/aws-cdk-asset-refs.template.json new file mode 100644 index 0000000000000..8b413b411847b --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/aws-cdk-asset-refs.template.json @@ -0,0 +1,208 @@ +{ + "Parameters": { + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B": { + "Type": "String", + "Description": "S3 bucket for asset \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + }, + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9": { + "Type": "String", + "Description": "S3 key for asset version \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + }, + "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD": { + "Type": "String", + "Description": "Artifact hash for asset \"6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2\"" + } + }, + "Outputs": { + "S3BucketName": { + "Value": { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + }, + "S3ObjectKey": { + "Value": { + "Fn::Join": [ + "", + [ + { + "Fn::Select": [ + 0, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + }, + { + "Fn::Select": [ + 1, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + } + ] + ] + } + }, + "S3HttpURL": { + "Value": { + "Fn::Join": [ + "", + [ + "https://s3.", + { + "Ref": "AWS::Region" + }, + ".", + { + "Ref": "AWS::URLSuffix" + }, + "/", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/", + { + "Fn::Select": [ + 0, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + }, + { + "Fn::Select": [ + 1, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + } + ] + ] + } + }, + "S3ObjectURL": { + "Value": { + "Fn::Join": [ + "", + [ + "s3://", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/", + { + "Fn::Select": [ + 0, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + }, + { + "Fn::Select": [ + 1, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ] + } + ] + } + ] + ] + } + } + }, + "Resources": { + "MyUserDC45028B": { + "Type": "AWS::IAM::User" + }, + "MyUserDefaultPolicy7B897426": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "MyUserDefaultPolicy7B897426", + "Users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/integ.json new file mode 100644 index 0000000000000..a4a8472909fc9 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.assets.refs.lit": { + "stacks": [ + "aws-cdk-asset-refs" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..569413aa53986 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/manifest.json @@ -0,0 +1,90 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-asset-refs": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-asset-refs.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-asset-refs": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "id": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "packaging": "zip", + "sourceHash": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "s3BucketParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B", + "s3KeyParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9", + "artifactHashParameter": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD" + } + } + ], + "/aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ], + "/aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3VersionKey1F7D75F9" + } + ], + "/aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2ArtifactHash220DE9BD" + } + ], + "/aws-cdk-asset-refs/S3BucketName": [ + { + "type": "aws:cdk:logicalId", + "data": "S3BucketName" + } + ], + "/aws-cdk-asset-refs/S3ObjectKey": [ + { + "type": "aws:cdk:logicalId", + "data": "S3ObjectKey" + } + ], + "/aws-cdk-asset-refs/S3HttpURL": [ + { + "type": "aws:cdk:logicalId", + "data": "S3HttpURL" + } + ], + "/aws-cdk-asset-refs/S3ObjectURL": [ + { + "type": "aws:cdk:logicalId", + "data": "S3ObjectURL" + } + ], + "/aws-cdk-asset-refs/MyUser/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDC45028B" + } + ], + "/aws-cdk-asset-refs/MyUser/DefaultPolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "MyUserDefaultPolicy7B897426" + } + ] + }, + "displayName": "aws-cdk-asset-refs" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/tree.json new file mode 100644 index 0000000000000..a7c1c16b6a8d3 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/assets.refs.lit.integ.snapshot/tree.json @@ -0,0 +1,230 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-asset-refs": { + "id": "aws-cdk-asset-refs", + "path": "aws-cdk-asset-refs", + "children": { + "SampleAsset": { + "id": "SampleAsset", + "path": "aws-cdk-asset-refs/SampleAsset", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-asset-refs/SampleAsset/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-asset-refs/SampleAsset/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-asset-refs/AssetParameters", + "children": { + "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2": { + "id": "6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "path": "aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-asset-refs/AssetParameters/6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "S3BucketName": { + "id": "S3BucketName", + "path": "aws-cdk-asset-refs/S3BucketName", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "S3ObjectKey": { + "id": "S3ObjectKey", + "path": "aws-cdk-asset-refs/S3ObjectKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "S3HttpURL": { + "id": "S3HttpURL", + "path": "aws-cdk-asset-refs/S3HttpURL", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "S3ObjectURL": { + "id": "S3ObjectURL", + "path": "aws-cdk-asset-refs/S3ObjectURL", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "MyUser": { + "id": "MyUser", + "path": "aws-cdk-asset-refs/MyUser", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-refs/MyUser/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::User", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnUser", + "version": "0.0.0" + } + }, + "DefaultPolicy": { + "id": "DefaultPolicy", + "path": "aws-cdk-asset-refs/MyUser/DefaultPolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-asset-refs/MyUser/DefaultPolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": [ + "s3:GetBucket*", + "s3:GetObject*", + "s3:List*" + ], + "Effect": "Allow", + "Resource": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + }, + "/*" + ] + ] + }, + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":s3:::", + { + "Ref": "AssetParameters6b84b87243a4a01c592d78e1fd3855c4bfef39328cd0a450cc97e81717fea2a2S3Bucket50B5A10B" + } + ] + ] + } + ] + } + ], + "Version": "2012-10-17" + }, + "policyName": "MyUserDefaultPolicy7B897426", + "users": [ + { + "Ref": "MyUserDC45028B" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.User", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt new file mode 100644 index 0000000000000..87cda36f4da3e --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt @@ -0,0 +1 @@ +Hello, this is a just a file! \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/aws-cdk-multi-assets.template.json b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/aws-cdk-multi-assets.template.json new file mode 100644 index 0000000000000..5792f95ba714d --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/aws-cdk-multi-assets.template.json @@ -0,0 +1,21 @@ +{ + "Resources": { + "DummyResourceF3AB250A": { + "Type": "AWS::IAM::User" + } + }, + "Parameters": { + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A": { + "Type": "String", + "Description": "S3 bucket for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35": { + "Type": "String", + "Description": "S3 key for asset version \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + }, + "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67": { + "Type": "String", + "Description": "Artifact hash for asset \"78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197\"" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/integ.json new file mode 100644 index 0000000000000..5e7e5106eafe7 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "aws-s3-assets/test/integ.multi-assets": { + "stacks": [ + "aws-cdk-multi-assets" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..6b90c44200402 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/manifest.json @@ -0,0 +1,60 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-multi-assets": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-multi-assets.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-multi-assets": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197.txt", + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "packaging": "file", + "sourceHash": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "s3BucketParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A", + "s3KeyParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35", + "artifactHashParameter": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + } + ], + "/aws-cdk-multi-assets/DummyResource/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "DummyResourceF3AB250A" + } + ], + "/aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3Bucket2C60F94A" + } + ], + "/aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197S3VersionKey9482DC35" + } + ], + "/aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197ArtifactHash22BFFA67" + } + ] + }, + "displayName": "aws-cdk-multi-assets" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/tree.json new file mode 100644 index 0000000000000..ab59e439a50ab --- /dev/null +++ b/packages/@aws-cdk/aws-s3-assets/test/multi-assets.integ.snapshot/tree.json @@ -0,0 +1,149 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-multi-assets": { + "id": "aws-cdk-multi-assets", + "path": "aws-cdk-multi-assets", + "children": { + "DummyResource": { + "id": "DummyResource", + "path": "aws-cdk-multi-assets/DummyResource", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-multi-assets/DummyResource/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::User", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnUser", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.User", + "version": "0.0.0" + } + }, + "SampleAsset1": { + "id": "SampleAsset1", + "path": "aws-cdk-multi-assets/SampleAsset1", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-multi-assets/SampleAsset1/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-multi-assets/SampleAsset1/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-multi-assets/AssetParameters", + "children": { + "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197": { + "id": "78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "path": "aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-multi-assets/AssetParameters/78add9eaf468dfa2191da44a7da92a21baba4c686cf6053d772556768ef21197/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "SampleAsset2": { + "id": "SampleAsset2", + "path": "aws-cdk-multi-assets/SampleAsset2", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-multi-assets/SampleAsset2/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-multi-assets/SampleAsset2/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-deployment/.gitignore b/packages/@aws-cdk/aws-s3-deployment/.gitignore index 586b6b51a9c33..71a7b00d3b256 100644 --- a/packages/@aws-cdk/aws-s3-deployment/.gitignore +++ b/packages/@aws-cdk/aws-s3-deployment/.gitignore @@ -20,4 +20,8 @@ nyc.config.js !.eslintrc.js !jest.config.js -junit.xml \ No newline at end of file +junit.xml +!**/*.integ.snapshot/**/asset.*/*.js +!**/*.integ.snapshot/**/asset.*/*.d.ts + +!**/*.integ.snapshot/**/asset.*/** diff --git a/packages/@aws-cdk/aws-s3-deployment/.npmignore b/packages/@aws-cdk/aws-s3-deployment/.npmignore index 583bc17f7fb8a..d1a57d9665ee6 100644 --- a/packages/@aws-cdk/aws-s3-deployment/.npmignore +++ b/packages/@aws-cdk/aws-s3-deployment/.npmignore @@ -28,4 +28,6 @@ jest.config.js junit.xml test/ -!*.lit.ts \ No newline at end of file +!*.lit.ts +**/*.integ.snapshot +**/*.integ.snapshot diff --git a/packages/@aws-cdk/aws-s3-deployment/README.md b/packages/@aws-cdk/aws-s3-deployment/README.md index 84ccec9e23c55..20482664267e0 100644 --- a/packages/@aws-cdk/aws-s3-deployment/README.md +++ b/packages/@aws-cdk/aws-s3-deployment/README.md @@ -139,7 +139,8 @@ new s3deploy.BucketDeployment(this, 'DeployMeWithoutDeletingFilesOnDestination', }); ``` -This option also enables you to specify multiple bucket deployments for the same destination bucket & prefix, +This option also enables you to +multiple bucket deployments for the same destination bucket & prefix, each with its own characteristics. For example, you can set different cache-control headers based on file extensions: @@ -259,14 +260,19 @@ new s3deploy.BucketDeployment(this, 'DeployWithInvalidation', { }); ``` -## Memory Limit +## Size Limits The default memory limit for the deployment resource is 128MiB. If you need to -copy larger files, you can use the `memoryLimit` configuration to specify the +copy larger files, you can use the `memoryLimit` configuration to increase the size of the AWS Lambda resource handler. -> NOTE: a new AWS Lambda handler will be created in your stack for each memory -> limit configuration. +The default ephemeral storage size for the deployment resource is 512MiB. If you +need to upload larger files, you may hit this limit. You can use the +`ephemeralStorageSize` configuration to increase the storage size of the AWS Lambda +resource handler. + +> NOTE: a new AWS Lambda handler will be created in your stack for each combination +> of memory and storage size. ## EFS Support @@ -338,11 +344,11 @@ substituting it when its deployed to the destination with the actual value. ## Development -The custom resource is implemented in Python 3.6 in order to be able to leverage +The custom resource is implemented in Python 3.7 in order to be able to leverage the AWS CLI for "aws s3 sync". The code is under [`lib/lambda`](https://github.com/aws/aws-cdk/tree/master/packages/%40aws-cdk/aws-s3-deployment/lib/lambda) and unit tests are under [`test/lambda`](https://github.com/aws/aws-cdk/tree/master/packages/%40aws-cdk/aws-s3-deployment/test/lambda). -This package requires Python 3.6 during build time in order to create the custom +This package requires Python 3.7 during build time in order to create the custom resource Lambda bundle and test it. It also relies on a few bash scripts, so might be tricky to build on Windows. diff --git a/packages/@aws-cdk/aws-s3-deployment/lib/bucket-deployment.ts b/packages/@aws-cdk/aws-s3-deployment/lib/bucket-deployment.ts index 31a7ec92e2db5..30d3aae5d6099 100644 --- a/packages/@aws-cdk/aws-s3-deployment/lib/bucket-deployment.ts +++ b/packages/@aws-cdk/aws-s3-deployment/lib/bucket-deployment.ts @@ -121,6 +121,13 @@ export interface BucketDeploymentProps { */ readonly memoryLimit?: number; + /** + * The size of the AWS Lambda function’s /tmp directory in MiB. + * + * @default 512 MiB + */ + readonly ephemeralStorageSize?: cdk.Size; + /** * Mount an EFS file system. Enable this if your assets are large and you encounter disk space errors. * Enabling this option will require a VPC to be specified. @@ -292,7 +299,7 @@ export class BucketDeployment extends CoreConstruct { const mountPath = `/mnt${accessPointPath}`; const handler = new lambda.SingletonFunction(this, 'CustomResourceHandler', { - uuid: this.renderSingletonUuid(props.memoryLimit, props.vpc), + uuid: this.renderSingletonUuid(props.memoryLimit, props.ephemeralStorageSize, props.vpc), code: lambda.Code.fromAsset(path.join(__dirname, 'lambda')), layers: [new AwsCliLayer(this, 'AwsCliLayer')], runtime: lambda.Runtime.PYTHON_3_7, @@ -304,6 +311,7 @@ export class BucketDeployment extends CoreConstruct { timeout: cdk.Duration.minutes(15), role: props.role, memorySize: props.memoryLimit, + ephemeralStorageSize: props.ephemeralStorageSize, vpc: props.vpc, vpcSubnets: props.vpcSubnets, filesystem: accessPoint ? lambda.FileSystem.fromEfsAccessPoint( @@ -331,7 +339,7 @@ export class BucketDeployment extends CoreConstruct { // the sources actually has markers. const hasMarkers = sources.some(source => source.markers); - const crUniqueId = `CustomResource${this.renderUniqueId(props.memoryLimit, props.vpc)}`; + const crUniqueId = `CustomResource${this.renderUniqueId(props.memoryLimit, props.ephemeralStorageSize, props.vpc)}`; this.cr = new cdk.CustomResource(this, crUniqueId, { serviceToken: handler.functionArn, resourceType: 'Custom::CDKBucketDeployment', @@ -357,7 +365,7 @@ export class BucketDeployment extends CoreConstruct { let prefix: string = props.destinationKeyPrefix ? `:${props.destinationKeyPrefix}` : ''; - prefix += `:${this.cr.node.addr.substr(-8)}`; + prefix += `:${this.cr.node.addr.slice(-8)}`; const tagKey = CUSTOM_RESOURCE_OWNER_TAG + prefix; // destinationKeyPrefix can be 104 characters before we hit @@ -426,21 +434,32 @@ export class BucketDeployment extends CoreConstruct { return this._deployedBucket; } - private renderUniqueId(memoryLimit?: number, vpc?: ec2.IVpc) { + private renderUniqueId(memoryLimit?: number, ephemeralStorageSize?: cdk.Size, vpc?: ec2.IVpc) { let uuid = ''; - // if user specify a custom memory limit, define another singleton handler + // if the user specifes a custom memory limit, we define another singleton handler // with this configuration. otherwise, it won't be possible to use multiple // configurations since we have a singleton. if (memoryLimit) { if (cdk.Token.isUnresolved(memoryLimit)) { - throw new Error('Can\'t use tokens when specifying "memoryLimit" since we use it to identify the singleton custom resource handler'); + throw new Error("Can't use tokens when specifying 'memoryLimit' since we use it to identify the singleton custom resource handler."); } uuid += `-${memoryLimit.toString()}MiB`; } - // if user specify to use VPC, define another singleton handler + // if the user specifies a custom ephemeral storage size, we define another singleton handler + // with this configuration. otherwise, it won't be possible to use multiple + // configurations since we have a singleton. + if (ephemeralStorageSize) { + if (ephemeralStorageSize.isUnresolved()) { + throw new Error("Can't use tokens when specifying 'ephemeralStorageSize' since we use it to identify the singleton custom resource handler."); + } + + uuid += `-${ephemeralStorageSize.toMebibytes().toString()}MiB`; + } + + // if the user specifies a VPC, we define another singleton handler // with this configuration. otherwise, it won't be possible to use multiple // configurations since we have a singleton. // A VPC is a must if EFS storage is used and that's why we are only using VPC in uuid. @@ -451,10 +470,10 @@ export class BucketDeployment extends CoreConstruct { return uuid; } - private renderSingletonUuid(memoryLimit?: number, vpc?: ec2.IVpc) { + private renderSingletonUuid(memoryLimit?: number, ephemeralStorageSize?: cdk.Size, vpc?: ec2.IVpc) { let uuid = '8693BB64-9689-44B6-9AAF-B0CC9EB8756C'; - uuid += this.renderUniqueId(memoryLimit, vpc); + uuid += this.renderUniqueId(memoryLimit, ephemeralStorageSize, vpc); return uuid; } diff --git a/packages/@aws-cdk/aws-s3-deployment/package.json b/packages/@aws-cdk/aws-s3-deployment/package.json index 104ff0bc223d2..bf16af67039c3 100644 --- a/packages/@aws-cdk/aws-s3-deployment/package.json +++ b/packages/@aws-cdk/aws-s3-deployment/package.json @@ -47,7 +47,7 @@ "watch": "cdk-watch", "lint": "cdk-lint", "test": "cdk-test", - "integ": "cdk-integ", + "integ": "integ-runner", "pkglint": "pkglint -f", "package": "cdk-package", "awslint": "cdk-awslint", @@ -87,7 +87,7 @@ "devDependencies": { "@aws-cdk/assertions": "0.0.0", "@aws-cdk/cdk-build-tools": "0.0.0", - "@aws-cdk/cdk-integ-tools": "0.0.0", + "@aws-cdk/integ-runner": "0.0.0", "@aws-cdk/cx-api": "0.0.0", "@aws-cdk/pkglint": "0.0.0", "@types/jest": "^27.4.1", diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476.zip b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476.zip new file mode 100644 index 0000000000000..e478968fa8400 Binary files /dev/null and b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476.zip differ diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/__entrypoint__.js b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/__entrypoint__.js new file mode 100644 index 0000000000000..3475719002c73 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/__entrypoint__.js @@ -0,0 +1,119 @@ +"use strict"; +Object.defineProperty(exports, "__esModule", { value: true }); +exports.handler = exports.external = void 0; +const https = require("https"); +const url = require("url"); +// for unit tests +exports.external = { + sendHttpRequest: defaultSendHttpRequest, + log: defaultLog, + includeStackTraces: true, + userHandlerIndex: './index', +}; +const CREATE_FAILED_PHYSICAL_ID_MARKER = 'AWSCDK::CustomResourceProviderFramework::CREATE_FAILED'; +const MISSING_PHYSICAL_ID_MARKER = 'AWSCDK::CustomResourceProviderFramework::MISSING_PHYSICAL_ID'; +async function handler(event, context) { + exports.external.log(JSON.stringify(event, undefined, 2)); + // ignore DELETE event when the physical resource ID is the marker that + // indicates that this DELETE is a subsequent DELETE to a failed CREATE + // operation. + if (event.RequestType === 'Delete' && event.PhysicalResourceId === CREATE_FAILED_PHYSICAL_ID_MARKER) { + exports.external.log('ignoring DELETE event caused by a failed CREATE event'); + await submitResponse('SUCCESS', event); + return; + } + try { + // invoke the user handler. this is intentionally inside the try-catch to + // ensure that if there is an error it's reported as a failure to + // cloudformation (otherwise cfn waits). + // eslint-disable-next-line @typescript-eslint/no-require-imports + const userHandler = require(exports.external.userHandlerIndex).handler; + const result = await userHandler(event, context); + // validate user response and create the combined event + const responseEvent = renderResponse(event, result); + // submit to cfn as success + await submitResponse('SUCCESS', responseEvent); + } + catch (e) { + const resp = { + ...event, + Reason: exports.external.includeStackTraces ? e.stack : e.message, + }; + if (!resp.PhysicalResourceId) { + // special case: if CREATE fails, which usually implies, we usually don't + // have a physical resource id. in this case, the subsequent DELETE + // operation does not have any meaning, and will likely fail as well. to + // address this, we use a marker so the provider framework can simply + // ignore the subsequent DELETE. + if (event.RequestType === 'Create') { + exports.external.log('CREATE failed, responding with a marker physical resource id so that the subsequent DELETE will be ignored'); + resp.PhysicalResourceId = CREATE_FAILED_PHYSICAL_ID_MARKER; + } + else { + // otherwise, if PhysicalResourceId is not specified, something is + // terribly wrong because all other events should have an ID. + exports.external.log(`ERROR: Malformed event. "PhysicalResourceId" is required: ${JSON.stringify(event)}`); + } + } + // this is an actual error, fail the activity altogether and exist. + await submitResponse('FAILED', resp); + } +} +exports.handler = handler; +function renderResponse(cfnRequest, handlerResponse = {}) { + var _a, _b; + // if physical ID is not returned, we have some defaults for you based + // on the request type. + const physicalResourceId = (_b = (_a = handlerResponse.PhysicalResourceId) !== null && _a !== void 0 ? _a : cfnRequest.PhysicalResourceId) !== null && _b !== void 0 ? _b : cfnRequest.RequestId; + // if we are in DELETE and physical ID was changed, it's an error. + if (cfnRequest.RequestType === 'Delete' && physicalResourceId !== cfnRequest.PhysicalResourceId) { + throw new Error(`DELETE: cannot change the physical resource ID from "${cfnRequest.PhysicalResourceId}" to "${handlerResponse.PhysicalResourceId}" during deletion`); + } + // merge request event and result event (result prevails). + return { + ...cfnRequest, + ...handlerResponse, + PhysicalResourceId: physicalResourceId, + }; +} +async function submitResponse(status, event) { + var _a; + const json = { + Status: status, + Reason: (_a = event.Reason) !== null && _a !== void 0 ? _a : status, + StackId: event.StackId, + RequestId: event.RequestId, + PhysicalResourceId: event.PhysicalResourceId || MISSING_PHYSICAL_ID_MARKER, + LogicalResourceId: event.LogicalResourceId, + NoEcho: event.NoEcho, + Data: event.Data, + }; + exports.external.log('submit response to cloudformation', json); + const responseBody = JSON.stringify(json); + const parsedUrl = url.parse(event.ResponseURL); + const req = { + hostname: parsedUrl.hostname, + path: parsedUrl.path, + method: 'PUT', + headers: { 'content-type': '', 'content-length': responseBody.length }, + }; + await exports.external.sendHttpRequest(req, responseBody); +} +async function defaultSendHttpRequest(options, responseBody) { + return new Promise((resolve, reject) => { + try { + const request = https.request(options, _ => resolve()); + request.on('error', reject); + request.write(responseBody); + request.end(); + } + catch (e) { + reject(e); + } + }); +} +function defaultLog(fmt, ...params) { + // eslint-disable-next-line no-console + console.log(fmt, ...params); +} +//# sourceMappingURL=data:application/json;base64,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 \ No newline at end of file diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/index.d.ts b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/index.d.ts new file mode 100644 index 0000000000000..3554dc94d4617 --- /dev/null +++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/index.d.ts @@ -0,0 +1 @@ +export declare function handler(event: AWSLambda.CloudFormationCustomResourceEvent): PromiseHello, S3 bucket deployments!
+
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif
new file mode 100644
index 0000000000000..e82b75cdb2187
Binary files /dev/null and b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif differ
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..c5974db95a5ff
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-deployment/test/integ.bucket-deployment-cloudfront": {
+ "stacks": [
+ "test-bucket-deployments-1"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..dd18b232b6944
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/manifest.json
@@ -0,0 +1,210 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "test-bucket-deployments-1": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "test-bucket-deployments-1.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/test-bucket-deployments-1": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "id": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "packaging": "zip",
+ "sourceHash": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "s3BucketParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232",
+ "s3KeyParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE",
+ "artifactHashParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476.zip",
+ "id": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "packaging": "file",
+ "sourceHash": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "s3BucketParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4",
+ "s3KeyParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0",
+ "artifactHashParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "id": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "packaging": "zip",
+ "sourceHash": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "s3BucketParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7",
+ "s3KeyParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D",
+ "artifactHashParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "id": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "packaging": "zip",
+ "sourceHash": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "s3BucketParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A",
+ "s3KeyParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C",
+ "artifactHashParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313"
+ }
+ }
+ ],
+ "/test-bucket-deployments-1/Destination3/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3E3DC043D"
+ }
+ ],
+ "/test-bucket-deployments-1/Destination3/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3Policy685DA6C5"
+ }
+ ],
+ "/test-bucket-deployments-1/Destination3/AutoDeleteObjectsCustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3AutoDeleteObjectsCustomResourceC26EC7B7"
+ }
+ ],
+ "/test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092"
+ }
+ ],
+ "/test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ],
+ "/test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313"
+ }
+ ],
+ "/test-bucket-deployments-1/Distribution/CFDistribution": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DistributionCFDistribution882A7313"
+ }
+ ],
+ "/test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithInvalidationAwsCliLayerDEDD5787"
+ }
+ ],
+ "/test-bucket-deployments-1/DeployWithInvalidation/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithInvalidationCustomResourceE3FF7455"
+ }
+ ],
+ "/test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ],
+ "/test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF"
+ }
+ ],
+ "/test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536"
+ }
+ ]
+ },
+ "displayName": "test-bucket-deployments-1"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/test-bucket-deployments-1.template.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/test-bucket-deployments-1.template.json
new file mode 100644
index 0000000000000..e1f6b0c7ee613
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/test-bucket-deployments-1.template.json
@@ -0,0 +1,581 @@
+{
+ "Resources": {
+ "Destination3E3DC043D": {
+ "Type": "AWS::S3::Bucket",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "aws-cdk:auto-delete-objects",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:4685d093",
+ "Value": "true"
+ }
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Destination3Policy685DA6C5": {
+ "Type": "AWS::S3::BucketPolicy",
+ "Properties": {
+ "Bucket": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "Destination3AutoDeleteObjectsCustomResourceC26EC7B7": {
+ "Type": "Custom::S3AutoDeleteObjects",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Destination3E3DC043D"
+ }
+ },
+ "DependsOn": [
+ "Destination3Policy685DA6C5"
+ ],
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Version": "2012-10-17",
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ]
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Sub": "arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ }
+ ]
+ }
+ },
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "S3Bucket": {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Timeout": 900,
+ "MemorySize": 128,
+ "Handler": "__entrypoint__.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ },
+ "Runtime": "nodejs12.x",
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "Lambda function for auto-deleting objects in ",
+ {
+ "Ref": "Destination3E3DC043D"
+ },
+ " S3 bucket."
+ ]
+ ]
+ }
+ },
+ "DependsOn": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092"
+ ]
+ },
+ "DistributionCFDistribution882A7313": {
+ "Type": "AWS::CloudFront::Distribution",
+ "Properties": {
+ "DistributionConfig": {
+ "DefaultCacheBehavior": {
+ "AllowedMethods": [
+ "GET",
+ "HEAD"
+ ],
+ "CachedMethods": [
+ "GET",
+ "HEAD"
+ ],
+ "Compress": true,
+ "ForwardedValues": {
+ "Cookies": {
+ "Forward": "none"
+ },
+ "QueryString": false
+ },
+ "TargetOriginId": "origin1",
+ "ViewerProtocolPolicy": "redirect-to-https"
+ },
+ "DefaultRootObject": "index.html",
+ "Enabled": true,
+ "HttpVersion": "http2",
+ "IPV6Enabled": true,
+ "Origins": [
+ {
+ "ConnectionAttempts": 3,
+ "ConnectionTimeout": 10,
+ "DomainName": {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "RegionalDomainName"
+ ]
+ },
+ "Id": "origin1",
+ "S3OriginConfig": {}
+ }
+ ],
+ "PriceClass": "PriceClass_100",
+ "ViewerCertificate": {
+ "CloudFrontDefaultCertificate": true
+ }
+ }
+ }
+ },
+ "DeployWithInvalidationAwsCliLayerDEDD5787": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployWithInvalidationCustomResourceE3FF7455": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "RetainOnDelete": false,
+ "Prune": true,
+ "DistributionId": {
+ "Ref": "DistributionCFDistribution882A7313"
+ },
+ "DistributionPaths": [
+ "/images/*.png"
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "cloudfront:CreateInvalidation",
+ "cloudfront:GetInvalidation"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "Roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ]
+ }
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "S3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265",
+ "Arn"
+ ]
+ },
+ "Handler": "index.handler",
+ "Layers": [
+ {
+ "Ref": "DeployWithInvalidationAwsCliLayerDEDD5787"
+ }
+ ],
+ "Runtime": "python3.7",
+ "Timeout": 900
+ },
+ "DependsOn": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ ]
+ }
+ },
+ "Parameters": {
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..19530e168bb9d
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-cloudfront.integ.snapshot/tree.json
@@ -0,0 +1,817 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "test-bucket-deployments-1": {
+ "id": "test-bucket-deployments-1",
+ "path": "test-bucket-deployments-1",
+ "children": {
+ "Destination3": {
+ "id": "Destination3",
+ "path": "test-bucket-deployments-1/Destination3",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/Destination3/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "aws-cdk:auto-delete-objects",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:4685d093",
+ "value": "true"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-bucket-deployments-1/Destination3/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/Destination3/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
+ "aws:cdk:cloudformation:props": {
+ "bucket": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucketPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "AutoDeleteObjectsCustomResource": {
+ "id": "AutoDeleteObjectsCustomResource",
+ "path": "test-bucket-deployments-1/Destination3/AutoDeleteObjectsCustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-1/Destination3/AutoDeleteObjectsCustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "Custom::S3AutoDeleteObjectsCustomResourceProvider": {
+ "id": "Custom::S3AutoDeleteObjectsCustomResourceProvider",
+ "path": "test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Role": {
+ "id": "Role",
+ "path": "test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ },
+ "Handler": {
+ "id": "Handler",
+ "path": "test-bucket-deployments-1/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResourceProvider",
+ "version": "0.0.0"
+ }
+ },
+ "AssetParameters": {
+ "id": "AssetParameters",
+ "path": "test-bucket-deployments-1/AssetParameters",
+ "children": {
+ "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824": {
+ "id": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "path": "test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-1/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476": {
+ "id": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "path": "test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-1/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da": {
+ "id": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "path": "test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-1/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e": {
+ "id": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "path": "test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-1/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "Distribution": {
+ "id": "Distribution",
+ "path": "test-bucket-deployments-1/Distribution",
+ "children": {
+ "CFDistribution": {
+ "id": "CFDistribution",
+ "path": "test-bucket-deployments-1/Distribution/CFDistribution",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::CloudFront::Distribution",
+ "aws:cdk:cloudformation:props": {
+ "distributionConfig": {
+ "enabled": true,
+ "defaultRootObject": "index.html",
+ "httpVersion": "http2",
+ "priceClass": "PriceClass_100",
+ "ipv6Enabled": true,
+ "origins": [
+ {
+ "id": "origin1",
+ "domainName": {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "RegionalDomainName"
+ ]
+ },
+ "s3OriginConfig": {},
+ "connectionAttempts": 3,
+ "connectionTimeout": 10
+ }
+ ],
+ "defaultCacheBehavior": {
+ "allowedMethods": [
+ "GET",
+ "HEAD"
+ ],
+ "cachedMethods": [
+ "GET",
+ "HEAD"
+ ],
+ "compress": true,
+ "forwardedValues": {
+ "queryString": false,
+ "cookies": {
+ "forward": "none"
+ }
+ },
+ "targetOriginId": "origin1",
+ "viewerProtocolPolicy": "redirect-to-https"
+ },
+ "viewerCertificate": {
+ "cloudFrontDefaultCertificate": true
+ }
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudfront.CfnDistribution",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-cloudfront.CloudFrontWebDistribution",
+ "version": "0.0.0"
+ }
+ },
+ "DeployWithInvalidation": {
+ "id": "DeployWithInvalidation",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-1/DeployWithInvalidation/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C": {
+ "id": "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C",
+ "children": {
+ "ServiceRole": {
+ "id": "ServiceRole",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "cloudfront:CreateInvalidation",
+ "cloudfront:GetInvalidation"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-1/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Function",
+ "aws:cdk:cloudformation:props": {
+ "code": {
+ "s3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265",
+ "Arn"
+ ]
+ },
+ "handler": "index.handler",
+ "layers": [
+ {
+ "Ref": "DeployWithInvalidationAwsCliLayerDEDD5787"
+ }
+ ],
+ "runtime": "python3.7",
+ "timeout": 900
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnFunction",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.Function",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-data.integ.snapshot/TestBucketDeploymentContent.template.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-data.integ.snapshot/TestBucketDeploymentContent.template.json
new file mode 100644
index 0000000000000..446bf4c05c8a3
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment-data.integ.snapshot/TestBucketDeploymentContent.template.json
@@ -0,0 +1,524 @@
+{
+ "Resources": {
+ "Bucket83908E77": {
+ "Type": "AWS::S3::Bucket",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "aws-cdk:cr-owned:deploy/here/:588fbb1f",
+ "Value": "true"
+ }
+ ]
+ },
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "DeployMeAwsCliLayer5F9219E9": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployMeCustomResource4455EE35": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersd09271be89b6cb0398f793b40c1531fd9b076aa92ba80b5e436914b1808fe18dS3BucketBC52CF96"
+ },
+ {
+ "Ref": "AssetParameters0f14dedeaf4386031c978375cbda0f65d7b52b29452cabb8873eb8f0d0fa936bS3BucketE46D7C76"
+ },
+ {
+ "Ref": "AssetParameters0d7be86c2a7d62be64fcbe2cbaa36c912a72d445022cc17c37af4f99f1b97a5aS3Bucket485B8F98"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersd09271be89b6cb0398f793b40c1531fd9b076aa92ba80b5e436914b1808fe18dS3VersionKeyED6BBB32"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersd09271be89b6cb0398f793b40c1531fd9b076aa92ba80b5e436914b1808fe18dS3VersionKeyED6BBB32"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters0f14dedeaf4386031c978375cbda0f65d7b52b29452cabb8873eb8f0d0fa936bS3VersionKey9FBF1498"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters0f14dedeaf4386031c978375cbda0f65d7b52b29452cabb8873eb8f0d0fa936bS3VersionKey9FBF1498"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters0d7be86c2a7d62be64fcbe2cbaa36c912a72d445022cc17c37af4f99f1b97a5aS3VersionKeyC8D63B0C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters0d7be86c2a7d62be64fcbe2cbaa36c912a72d445022cc17c37af4f99f1b97a5aS3VersionKeyC8D63B0C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "SourceMarkers": [
+ {},
+ {
+ "<Hello, S3 bucket deployments!
+
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif
new file mode 100644
index 0000000000000..e82b75cdb2187
Binary files /dev/null and b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/rabir2v.gif differ
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..a5867e610a5a4
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-deployment/test/integ.bucket-deployment": {
+ "stacks": [
+ "test-bucket-deployments-2"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..0bffbc6deaeb3
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/manifest.json
@@ -0,0 +1,498 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "test-bucket-deployments-2": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "test-bucket-deployments-2.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/test-bucket-deployments-2": [
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "id": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "packaging": "zip",
+ "sourceHash": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "s3BucketParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232",
+ "s3KeyParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE",
+ "artifactHashParameter": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476.zip",
+ "id": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "packaging": "file",
+ "sourceHash": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "s3BucketParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4",
+ "s3KeyParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0",
+ "artifactHashParameter": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "id": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "packaging": "zip",
+ "sourceHash": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "s3BucketParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7",
+ "s3KeyParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D",
+ "artifactHashParameter": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8"
+ }
+ },
+ {
+ "type": "aws:cdk:asset",
+ "data": {
+ "path": "asset.fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "id": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "packaging": "zip",
+ "sourceHash": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "s3BucketParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A",
+ "s3KeyParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C",
+ "artifactHashParameter": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313"
+ }
+ }
+ ],
+ "/test-bucket-deployments-2/Destination/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination920A3C57"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DestinationPolicy7982387E"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination/AutoDeleteObjectsCustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DestinationAutoDeleteObjectsCustomResource15E926BA"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3Bucket": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3VersionKey": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ],
+ "/test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/ArtifactHash": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMe/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeAwsCliLayer5F9219E9"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMe/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeCustomResource4455EE35"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpc2605A3C4"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1Subnet2EDC574A"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1RouteTable67856EA2"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1RouteTableAssociationDA9AACF2"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1DefaultRoute84A6786F"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1EIPCB8385DA"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet1/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet1NATGateway88242629"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2SubnetAB52037C"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2RouteTable053CA1F8"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2RouteTableAssociation3DB8A2E6"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2DefaultRoute9E9BF17A"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/EIP": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2EIPFCFD7982"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PublicSubnet2/NATGateway": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPublicSubnet2NATGatewayB5A60DA8"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet1/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet1/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet1RouteTable19DB57E6"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet1/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet1RouteTableAssociation9D48EE22"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet1/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet1DefaultRouteC56CB768"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet2/Subnet": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet2/RouteTable": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet2RouteTableE3C67EFF"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet2/RouteTableAssociation": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet2RouteTableAssociation6D6562EB"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/PrivateSubnet2/DefaultRoute": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcPrivateSubnet2DefaultRouteA98D214A"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/IGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcIGW515300DC"
+ }
+ ],
+ "/test-bucket-deployments-2/InlineVpc/VPCGW": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "InlineVpcVPCGWE98B1862"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithEfsStorageAwsCliLayer1619A3EE"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithEfsStorage/CustomResource-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithEfsStorageCustomResourcec8e45d2d82aec23f89c7172e7e6f994ff3d9c444faC9646D53"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup/from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroupfromtestbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF20498CD714A7"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsMountTarget1": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsMountTarget2": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A"
+ }
+ ],
+ "/test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/AccessPoint/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRoleDefaultPolicyDE2C8526"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/SecurityGroup/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A"
+ }
+ ],
+ "/test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa03838EC0"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination2/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination281A09BDF"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination2/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination2PolicyA94CC138"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination2/AutoDeleteObjectsCustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination2AutoDeleteObjectsCustomResource8A5BE3F7"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithPrefixAwsCliLayerC9DDB597"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployWithPrefix/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithPrefixCustomResource9CF7C694"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination3/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3E3DC043D"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination3/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3Policy685DA6C5"
+ }
+ ],
+ "/test-bucket-deployments-2/Destination3/AutoDeleteObjectsCustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Destination3AutoDeleteObjectsCustomResourceC26EC7B7"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithMetadataAwsCliLayer2C774B41"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployWithMetadata/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployWithMetadataCustomResourceA73C95DC"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithoutDeletingFilesOnDestinationAwsCliLayer4D54C41C"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithoutDeletingFilesOnDestinationCustomResourceA390B02B"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithExcludedFilesOnDestinationAwsCliLayer68F5E11D"
+ }
+ ],
+ "/test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/CustomResource/Default": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "DeployMeWithExcludedFilesOnDestinationCustomResource48D69581"
+ }
+ ]
+ },
+ "displayName": "test-bucket-deployments-2"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/test-bucket-deployments-2.template.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/test-bucket-deployments-2.template.json
new file mode 100644
index 0000000000000..9099de19669a1
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/test-bucket-deployments-2.template.json
@@ -0,0 +1,2163 @@
+{
+ "Resources": {
+ "Destination920A3C57": {
+ "Type": "AWS::S3::Bucket",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "aws-cdk:auto-delete-objects",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:12c80047",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:c06dfca0",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:efs/:a01ecd3e",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:f8ab5a69",
+ "Value": "true"
+ }
+ ],
+ "WebsiteConfiguration": {
+ "IndexDocument": "index.html"
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "DestinationPolicy7982387E": {
+ "Type": "AWS::S3::BucketPolicy",
+ "Properties": {
+ "Bucket": {
+ "Ref": "Destination920A3C57"
+ },
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "DestinationAutoDeleteObjectsCustomResource15E926BA": {
+ "Type": "Custom::S3AutoDeleteObjects",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Destination920A3C57"
+ }
+ },
+ "DependsOn": [
+ "DestinationPolicy7982387E"
+ ],
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Version": "2012-10-17",
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ]
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Sub": "arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ }
+ ]
+ }
+ },
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "S3Bucket": {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Timeout": 900,
+ "MemorySize": 128,
+ "Handler": "__entrypoint__.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ },
+ "Runtime": "nodejs12.x",
+ "Description": {
+ "Fn::Join": [
+ "",
+ [
+ "Lambda function for auto-deleting objects in ",
+ {
+ "Ref": "Destination920A3C57"
+ },
+ " S3 bucket."
+ ]
+ ]
+ }
+ },
+ "DependsOn": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092"
+ ]
+ },
+ "DeployMeAwsCliLayer5F9219E9": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployMeCustomResource4455EE35": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination920A3C57"
+ },
+ "RetainOnDelete": false,
+ "Prune": true
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "Roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ]
+ }
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "S3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265",
+ "Arn"
+ ]
+ },
+ "Handler": "index.handler",
+ "Layers": [
+ {
+ "Ref": "DeployMeAwsCliLayer5F9219E9"
+ }
+ ],
+ "Runtime": "python3.7",
+ "Timeout": 900
+ },
+ "DependsOn": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ ]
+ },
+ "InlineVpc2605A3C4": {
+ "Type": "AWS::EC2::VPC",
+ "Properties": {
+ "CidrBlock": "10.0.0.0/16",
+ "EnableDnsHostnames": true,
+ "EnableDnsSupport": true,
+ "InstanceTenancy": "default",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet1Subnet2EDC574A": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.0.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet1RouteTable67856EA2": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet1RouteTableAssociationDA9AACF2": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPublicSubnet1RouteTable67856EA2"
+ },
+ "SubnetId": {
+ "Ref": "InlineVpcPublicSubnet1Subnet2EDC574A"
+ }
+ }
+ },
+ "InlineVpcPublicSubnet1DefaultRoute84A6786F": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPublicSubnet1RouteTable67856EA2"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ },
+ "DependsOn": [
+ "InlineVpcVPCGWE98B1862"
+ ]
+ },
+ "InlineVpcPublicSubnet1EIPCB8385DA": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet1NATGateway88242629": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "InlineVpcPublicSubnet1Subnet2EDC574A"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "InlineVpcPublicSubnet1EIPCB8385DA",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet2SubnetAB52037C": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.64.0/18",
+ "MapPublicIpOnLaunch": true,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Public"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Public"
+ },
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet2RouteTable053CA1F8": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet2RouteTableAssociation3DB8A2E6": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPublicSubnet2RouteTable053CA1F8"
+ },
+ "SubnetId": {
+ "Ref": "InlineVpcPublicSubnet2SubnetAB52037C"
+ }
+ }
+ },
+ "InlineVpcPublicSubnet2DefaultRoute9E9BF17A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPublicSubnet2RouteTable053CA1F8"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "GatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ },
+ "DependsOn": [
+ "InlineVpcVPCGWE98B1862"
+ ]
+ },
+ "InlineVpcPublicSubnet2EIPFCFD7982": {
+ "Type": "AWS::EC2::EIP",
+ "Properties": {
+ "Domain": "vpc",
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPublicSubnet2NATGatewayB5A60DA8": {
+ "Type": "AWS::EC2::NatGateway",
+ "Properties": {
+ "SubnetId": {
+ "Ref": "InlineVpcPublicSubnet2SubnetAB52037C"
+ },
+ "AllocationId": {
+ "Fn::GetAtt": [
+ "InlineVpcPublicSubnet2EIPFCFD7982",
+ "AllocationId"
+ ]
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPrivateSubnet1Subnet0EC98BAD": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.128.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPrivateSubnet1RouteTable19DB57E6": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "InlineVpcPrivateSubnet1RouteTableAssociation9D48EE22": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPrivateSubnet1RouteTable19DB57E6"
+ },
+ "SubnetId": {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ }
+ }
+ },
+ "InlineVpcPrivateSubnet1DefaultRouteC56CB768": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPrivateSubnet1RouteTable19DB57E6"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "InlineVpcPublicSubnet1NATGateway88242629"
+ }
+ }
+ },
+ "InlineVpcPrivateSubnet2Subnet60DB7D03": {
+ "Type": "AWS::EC2::Subnet",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "AvailabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "CidrBlock": "10.0.192.0/18",
+ "MapPublicIpOnLaunch": false,
+ "Tags": [
+ {
+ "Key": "aws-cdk:subnet-name",
+ "Value": "Private"
+ },
+ {
+ "Key": "aws-cdk:subnet-type",
+ "Value": "Private"
+ },
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPrivateSubnet2RouteTableE3C67EFF": {
+ "Type": "AWS::EC2::RouteTable",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "InlineVpcPrivateSubnet2RouteTableAssociation6D6562EB": {
+ "Type": "AWS::EC2::SubnetRouteTableAssociation",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPrivateSubnet2RouteTableE3C67EFF"
+ },
+ "SubnetId": {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ }
+ },
+ "InlineVpcPrivateSubnet2DefaultRouteA98D214A": {
+ "Type": "AWS::EC2::Route",
+ "Properties": {
+ "RouteTableId": {
+ "Ref": "InlineVpcPrivateSubnet2RouteTableE3C67EFF"
+ },
+ "DestinationCidrBlock": "0.0.0.0/0",
+ "NatGatewayId": {
+ "Ref": "InlineVpcPublicSubnet2NATGatewayB5A60DA8"
+ }
+ }
+ },
+ "InlineVpcIGW515300DC": {
+ "Type": "AWS::EC2::InternetGateway",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/InlineVpc"
+ }
+ ]
+ }
+ },
+ "InlineVpcVPCGWE98B1862": {
+ "Type": "AWS::EC2::VPCGatewayAttachment",
+ "Properties": {
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "InternetGatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ }
+ },
+ "DeployMeWithEfsStorageAwsCliLayer1619A3EE": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ },
+ "DependsOn": [
+ "InlineVpcIGW515300DC",
+ "InlineVpcPrivateSubnet1DefaultRouteC56CB768",
+ "InlineVpcPrivateSubnet1RouteTable19DB57E6",
+ "InlineVpcPrivateSubnet1RouteTableAssociation9D48EE22",
+ "InlineVpcPrivateSubnet1Subnet0EC98BAD",
+ "InlineVpcPrivateSubnet2DefaultRouteA98D214A",
+ "InlineVpcPrivateSubnet2RouteTableE3C67EFF",
+ "InlineVpcPrivateSubnet2RouteTableAssociation6D6562EB",
+ "InlineVpcPrivateSubnet2Subnet60DB7D03",
+ "InlineVpcPublicSubnet1DefaultRoute84A6786F",
+ "InlineVpcPublicSubnet1EIPCB8385DA",
+ "InlineVpcPublicSubnet1NATGateway88242629",
+ "InlineVpcPublicSubnet1RouteTable67856EA2",
+ "InlineVpcPublicSubnet1RouteTableAssociationDA9AACF2",
+ "InlineVpcPublicSubnet1Subnet2EDC574A",
+ "InlineVpcPublicSubnet2DefaultRoute9E9BF17A",
+ "InlineVpcPublicSubnet2EIPFCFD7982",
+ "InlineVpcPublicSubnet2NATGatewayB5A60DA8",
+ "InlineVpcPublicSubnet2RouteTable053CA1F8",
+ "InlineVpcPublicSubnet2RouteTableAssociation3DB8A2E6",
+ "InlineVpcPublicSubnet2SubnetAB52037C",
+ "InlineVpc2605A3C4",
+ "InlineVpcVPCGWE98B1862"
+ ]
+ },
+ "DeployMeWithEfsStorageCustomResourcec8e45d2d82aec23f89c7172e7e6f994ff3d9c444faC9646D53": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa03838EC0",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination920A3C57"
+ },
+ "DestinationBucketKeyPrefix": "efs/",
+ "RetainOnDelete": false,
+ "Prune": true
+ },
+ "DependsOn": [
+ "InlineVpcIGW515300DC",
+ "InlineVpcPrivateSubnet1DefaultRouteC56CB768",
+ "InlineVpcPrivateSubnet1RouteTable19DB57E6",
+ "InlineVpcPrivateSubnet1RouteTableAssociation9D48EE22",
+ "InlineVpcPrivateSubnet1Subnet0EC98BAD",
+ "InlineVpcPrivateSubnet2DefaultRouteA98D214A",
+ "InlineVpcPrivateSubnet2RouteTableE3C67EFF",
+ "InlineVpcPrivateSubnet2RouteTableAssociation6D6562EB",
+ "InlineVpcPrivateSubnet2Subnet60DB7D03",
+ "InlineVpcPublicSubnet1DefaultRoute84A6786F",
+ "InlineVpcPublicSubnet1EIPCB8385DA",
+ "InlineVpcPublicSubnet1NATGateway88242629",
+ "InlineVpcPublicSubnet1RouteTable67856EA2",
+ "InlineVpcPublicSubnet1RouteTableAssociationDA9AACF2",
+ "InlineVpcPublicSubnet1Subnet2EDC574A",
+ "InlineVpcPublicSubnet2DefaultRoute9E9BF17A",
+ "InlineVpcPublicSubnet2EIPFCFD7982",
+ "InlineVpcPublicSubnet2NATGatewayB5A60DA8",
+ "InlineVpcPublicSubnet2RouteTable053CA1F8",
+ "InlineVpcPublicSubnet2RouteTableAssociation3DB8A2E6",
+ "InlineVpcPublicSubnet2SubnetAB52037C",
+ "InlineVpc2605A3C4",
+ "InlineVpcVPCGWE98B1862"
+ ],
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B": {
+ "Type": "AWS::EFS::FileSystem",
+ "Properties": {
+ "Encrypted": true,
+ "FileSystemTags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa"
+ }
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "Tags": [
+ {
+ "Key": "Name",
+ "Value": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa"
+ }
+ ],
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ }
+ }
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroupfromtestbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF20498CD714A7": {
+ "Type": "AWS::EC2::SecurityGroupIngress",
+ "Properties": {
+ "IpProtocol": "tcp",
+ "Description": "from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049",
+ "FromPort": 2049,
+ "GroupId": {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ },
+ "SourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A",
+ "GroupId"
+ ]
+ },
+ "ToPort": 2049
+ }
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1": {
+ "Type": "AWS::EFS::MountTarget",
+ "Properties": {
+ "FileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetId": {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ }
+ }
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A": {
+ "Type": "AWS::EFS::MountTarget",
+ "Properties": {
+ "FileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "SecurityGroups": [
+ {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetId": {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ }
+ },
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25": {
+ "Type": "AWS::EFS::AccessPoint",
+ "Properties": {
+ "FileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "PosixUser": {
+ "Gid": "1001",
+ "Uid": "1001"
+ },
+ "RootDirectory": {
+ "CreationInfo": {
+ "OwnerGid": "1001",
+ "OwnerUid": "1001",
+ "Permissions": "0777"
+ },
+ "Path": "/lambda"
+ }
+ },
+ "DependsOn": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A"
+ ]
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
+ ]
+ ]
+ }
+ ]
+ },
+ "DependsOn": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A"
+ ]
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRoleDefaultPolicyDE2C8526": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "elasticfilesystem:ClientMount",
+ "Condition": {
+ "StringEquals": {
+ "elasticfilesystem:AccessPointArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":access-point/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25"
+ }
+ ]
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": "elasticfilesystem:ClientWrite",
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":file-system/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ }
+ ]
+ ]
+ }
+ },
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "tomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRoleDefaultPolicyDE2C8526",
+ "Roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4"
+ }
+ ]
+ },
+ "DependsOn": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A"
+ ]
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A": {
+ "Type": "AWS::EC2::SecurityGroup",
+ "Properties": {
+ "GroupDescription": "Automatic security group for Lambda Function testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faB7A82630",
+ "SecurityGroupEgress": [
+ {
+ "CidrIp": "0.0.0.0/0",
+ "Description": "Allow all outbound traffic by default",
+ "IpProtocol": "-1"
+ }
+ ],
+ "VpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ }
+ },
+ "DependsOn": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A"
+ ]
+ },
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa03838EC0": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "S3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4",
+ "Arn"
+ ]
+ },
+ "Environment": {
+ "Variables": {
+ "MOUNT_PATH": "/mnt/lambda"
+ }
+ },
+ "FileSystemConfigs": [
+ {
+ "Arn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":access-point/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25"
+ }
+ ]
+ ]
+ },
+ "LocalMountPath": "/mnt/lambda"
+ }
+ ],
+ "Handler": "index.handler",
+ "Layers": [
+ {
+ "Ref": "DeployMeWithEfsStorageAwsCliLayer1619A3EE"
+ }
+ ],
+ "Runtime": "python3.7",
+ "Timeout": 900,
+ "VpcConfig": {
+ "SecurityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A",
+ "GroupId"
+ ]
+ }
+ ],
+ "SubnetIds": [
+ {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ },
+ {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ ]
+ }
+ },
+ "DependsOn": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget140913EA1",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsMountTarget215F1A11A",
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroupfromtestbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF20498CD714A7",
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRoleDefaultPolicyDE2C8526",
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4"
+ ]
+ },
+ "Destination281A09BDF": {
+ "Type": "AWS::S3::Bucket",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "aws-cdk:auto-delete-objects",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:deploy/here/:272e95d8",
+ "Value": "true"
+ }
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Destination2PolicyA94CC138": {
+ "Type": "AWS::S3::BucketPolicy",
+ "Properties": {
+ "Bucket": {
+ "Ref": "Destination281A09BDF"
+ },
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "Destination2AutoDeleteObjectsCustomResource8A5BE3F7": {
+ "Type": "Custom::S3AutoDeleteObjects",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Destination281A09BDF"
+ }
+ },
+ "DependsOn": [
+ "Destination2PolicyA94CC138"
+ ],
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "DeployWithPrefixAwsCliLayerC9DDB597": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployWithPrefixCustomResource9CF7C694": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination281A09BDF"
+ },
+ "DestinationBucketKeyPrefix": "deploy/here/",
+ "RetainOnDelete": false,
+ "Prune": true
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Destination3E3DC043D": {
+ "Type": "AWS::S3::Bucket",
+ "Properties": {
+ "Tags": [
+ {
+ "Key": "aws-cdk:auto-delete-objects",
+ "Value": "true"
+ },
+ {
+ "Key": "aws-cdk:cr-owned:9eca9fb3",
+ "Value": "true"
+ }
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Destination3Policy685DA6C5": {
+ "Type": "AWS::S3::BucketPolicy",
+ "Properties": {
+ "Bucket": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "Destination3AutoDeleteObjectsCustomResourceC26EC7B7": {
+ "Type": "Custom::S3AutoDeleteObjects",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Destination3E3DC043D"
+ }
+ },
+ "DependsOn": [
+ "Destination3Policy685DA6C5"
+ ],
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "DeployWithMetadataAwsCliLayer2C774B41": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployWithMetadataCustomResourceA73C95DC": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "RetainOnDelete": false,
+ "Prune": true,
+ "UserMetadata": {
+ "a": "aaa",
+ "b": "bbb",
+ "c": "ccc"
+ },
+ "SystemMetadata": {
+ "cache-control": "public, max-age=60",
+ "content-type": "text/html"
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "DeployMeWithoutDeletingFilesOnDestinationAwsCliLayer4D54C41C": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployMeWithoutDeletingFilesOnDestinationCustomResourceA390B02B": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination920A3C57"
+ },
+ "RetainOnDelete": false,
+ "Prune": false
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "DeployMeWithExcludedFilesOnDestinationAwsCliLayer68F5E11D": {
+ "Type": "AWS::Lambda::LayerVersion",
+ "Properties": {
+ "Content": {
+ "S3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "S3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "Description": "/opt/awscli/aws"
+ }
+ },
+ "DeployMeWithExcludedFilesOnDestinationCustomResource48D69581": {
+ "Type": "Custom::CDKBucketDeployment",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536",
+ "Arn"
+ ]
+ },
+ "SourceBucketNames": [
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ],
+ "SourceObjectKeys": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ ],
+ "DestinationBucketName": {
+ "Ref": "Destination920A3C57"
+ },
+ "RetainOnDelete": false,
+ "Prune": true,
+ "Exclude": [
+ "*.gif"
+ ]
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ }
+ },
+ "Parameters": {
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3Bucket09A62232": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824S3VersionKeyA28118BE": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParametersbe270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824ArtifactHash76F8FCF2": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476ArtifactHash0FB7E57C": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daArtifactHashD85D28D8": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A": {
+ "Type": "String",
+ "Description": "S3 bucket for asset \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3VersionKeyA58D380C": {
+ "Type": "String",
+ "Description": "S3 key for asset version \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ },
+ "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eArtifactHash0E426313": {
+ "Type": "String",
+ "Description": "Artifact hash for asset \"fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e\""
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..5059cdfc81e2a
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.integ.snapshot/tree.json
@@ -0,0 +1,3040 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "test-bucket-deployments-2": {
+ "id": "test-bucket-deployments-2",
+ "path": "test-bucket-deployments-2",
+ "children": {
+ "Destination": {
+ "id": "Destination",
+ "path": "test-bucket-deployments-2/Destination",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "aws-cdk:auto-delete-objects",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:12c80047",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:c06dfca0",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:efs/:a01ecd3e",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:f8ab5a69",
+ "value": "true"
+ }
+ ],
+ "websiteConfiguration": {
+ "indexDocument": "index.html"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-bucket-deployments-2/Destination/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
+ "aws:cdk:cloudformation:props": {
+ "bucket": {
+ "Ref": "Destination920A3C57"
+ },
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucketPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "AutoDeleteObjectsCustomResource": {
+ "id": "AutoDeleteObjectsCustomResource",
+ "path": "test-bucket-deployments-2/Destination/AutoDeleteObjectsCustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/Destination/AutoDeleteObjectsCustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "Custom::S3AutoDeleteObjectsCustomResourceProvider": {
+ "id": "Custom::S3AutoDeleteObjectsCustomResourceProvider",
+ "path": "test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider",
+ "children": {
+ "Staging": {
+ "id": "Staging",
+ "path": "test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider/Staging",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "Role": {
+ "id": "Role",
+ "path": "test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ },
+ "Handler": {
+ "id": "Handler",
+ "path": "test-bucket-deployments-2/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResourceProvider",
+ "version": "0.0.0"
+ }
+ },
+ "AssetParameters": {
+ "id": "AssetParameters",
+ "path": "test-bucket-deployments-2/AssetParameters",
+ "children": {
+ "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824": {
+ "id": "be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "path": "test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-2/AssetParameters/be270bbdebe0851c887569796e3997437cca54ce86893ed94788500448e92824/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476": {
+ "id": "01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "path": "test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-2/AssetParameters/01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da": {
+ "id": "f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "path": "test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-2/AssetParameters/f98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711da/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e": {
+ "id": "fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "path": "test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e",
+ "children": {
+ "S3Bucket": {
+ "id": "S3Bucket",
+ "path": "test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3Bucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "S3VersionKey": {
+ "id": "S3VersionKey",
+ "path": "test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/S3VersionKey",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ },
+ "ArtifactHash": {
+ "id": "ArtifactHash",
+ "path": "test-bucket-deployments-2/AssetParameters/fc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222e/ArtifactHash",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnParameter",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "DeployMe": {
+ "id": "DeployMe",
+ "path": "test-bucket-deployments-2/DeployMe",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployMe/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployMe/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMe/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMe/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployMe/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployMe/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployMe/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMe/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMe/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-2/DeployMe/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployMe/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C": {
+ "id": "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C",
+ "children": {
+ "ServiceRole": {
+ "id": "ServiceRole",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/ServiceRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF",
+ "roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Function",
+ "aws:cdk:cloudformation:props": {
+ "code": {
+ "s3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265",
+ "Arn"
+ ]
+ },
+ "handler": "index.handler",
+ "layers": [
+ {
+ "Ref": "DeployMeAwsCliLayer5F9219E9"
+ }
+ ],
+ "runtime": "python3.7",
+ "timeout": 900
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnFunction",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.Function",
+ "version": "0.0.0"
+ }
+ },
+ "InlineVpc": {
+ "id": "InlineVpc",
+ "path": "test-bucket-deployments-2/InlineVpc",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/InlineVpc/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPC",
+ "aws:cdk:cloudformation:props": {
+ "cidrBlock": "10.0.0.0/16",
+ "enableDnsHostnames": true,
+ "enableDnsSupport": true,
+ "instanceTenancy": "default",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPC",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet1": {
+ "id": "PublicSubnet1",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.0.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPublicSubnet1RouteTable67856EA2"
+ },
+ "subnetId": {
+ "Ref": "InlineVpcPublicSubnet1Subnet2EDC574A"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPublicSubnet1RouteTable67856EA2"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet1/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "InlineVpcPublicSubnet1Subnet2EDC574A"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "InlineVpcPublicSubnet1EIPCB8385DA",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PublicSubnet2": {
+ "id": "PublicSubnet2",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.64.0/18",
+ "mapPublicIpOnLaunch": true,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Public"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Public"
+ },
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPublicSubnet2RouteTable053CA1F8"
+ },
+ "subnetId": {
+ "Ref": "InlineVpcPublicSubnet2SubnetAB52037C"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPublicSubnet2RouteTable053CA1F8"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "gatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ },
+ "EIP": {
+ "id": "EIP",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/EIP",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::EIP",
+ "aws:cdk:cloudformation:props": {
+ "domain": "vpc",
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnEIP",
+ "version": "0.0.0"
+ }
+ },
+ "NATGateway": {
+ "id": "NATGateway",
+ "path": "test-bucket-deployments-2/InlineVpc/PublicSubnet2/NATGateway",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::NatGateway",
+ "aws:cdk:cloudformation:props": {
+ "subnetId": {
+ "Ref": "InlineVpcPublicSubnet2SubnetAB52037C"
+ },
+ "allocationId": {
+ "Fn::GetAtt": [
+ "InlineVpcPublicSubnet2EIPFCFD7982",
+ "AllocationId"
+ ]
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PublicSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnNatGateway",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PublicSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet1": {
+ "id": "PrivateSubnet1",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.128.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPrivateSubnet1RouteTable19DB57E6"
+ },
+ "subnetId": {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet1/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPrivateSubnet1RouteTable19DB57E6"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "InlineVpcPublicSubnet1NATGateway88242629"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "PrivateSubnet2": {
+ "id": "PrivateSubnet2",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2",
+ "children": {
+ "Subnet": {
+ "id": "Subnet",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2/Subnet",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Subnet",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "availabilityZone": {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::GetAZs": ""
+ }
+ ]
+ },
+ "cidrBlock": "10.0.192.0/18",
+ "mapPublicIpOnLaunch": false,
+ "tags": [
+ {
+ "key": "aws-cdk:subnet-name",
+ "value": "Private"
+ },
+ {
+ "key": "aws-cdk:subnet-type",
+ "value": "Private"
+ },
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "Acl": {
+ "id": "Acl",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2/Acl",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Resource",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTable": {
+ "id": "RouteTable",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2/RouteTable",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::RouteTable",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRouteTable",
+ "version": "0.0.0"
+ }
+ },
+ "RouteTableAssociation": {
+ "id": "RouteTableAssociation",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2/RouteTableAssociation",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SubnetRouteTableAssociation",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPrivateSubnet2RouteTableE3C67EFF"
+ },
+ "subnetId": {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSubnetRouteTableAssociation",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultRoute": {
+ "id": "DefaultRoute",
+ "path": "test-bucket-deployments-2/InlineVpc/PrivateSubnet2/DefaultRoute",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::Route",
+ "aws:cdk:cloudformation:props": {
+ "routeTableId": {
+ "Ref": "InlineVpcPrivateSubnet2RouteTableE3C67EFF"
+ },
+ "destinationCidrBlock": "0.0.0.0/0",
+ "natGatewayId": {
+ "Ref": "InlineVpcPublicSubnet2NATGatewayB5A60DA8"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnRoute",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.PrivateSubnet",
+ "version": "0.0.0"
+ }
+ },
+ "IGW": {
+ "id": "IGW",
+ "path": "test-bucket-deployments-2/InlineVpc/IGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::InternetGateway",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/InlineVpc"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnInternetGateway",
+ "version": "0.0.0"
+ }
+ },
+ "VPCGW": {
+ "id": "VPCGW",
+ "path": "test-bucket-deployments-2/InlineVpc/VPCGW",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::VPCGatewayAttachment",
+ "aws:cdk:cloudformation:props": {
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ },
+ "internetGatewayId": {
+ "Ref": "InlineVpcIGW515300DC"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnVPCGatewayAttachment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.Vpc",
+ "version": "0.0.0"
+ }
+ },
+ "DeployMeWithEfsStorage": {
+ "id": "DeployMeWithEfsStorage",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa": {
+ "id": "CustomResource-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/CustomResource-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployMeWithEfsStorage/CustomResource-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa": {
+ "id": "BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EFS::FileSystem",
+ "aws:cdk:cloudformation:props": {
+ "encrypted": true,
+ "fileSystemTags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.CfnFileSystem",
+ "version": "0.0.0"
+ }
+ },
+ "EfsSecurityGroup": {
+ "id": "EfsSecurityGroup",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "tags": [
+ {
+ "key": "Name",
+ "value": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa"
+ }
+ ],
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049": {
+ "id": "from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsSecurityGroup/from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroupIngress",
+ "aws:cdk:cloudformation:props": {
+ "ipProtocol": "tcp",
+ "description": "from testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupBDC138BF:2049",
+ "fromPort": 2049,
+ "groupId": {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ },
+ "sourceSecurityGroupId": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A",
+ "GroupId"
+ ]
+ },
+ "toPort": 2049
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroupIngress",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "EfsMountTarget1": {
+ "id": "EfsMountTarget1",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsMountTarget1",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EFS::MountTarget",
+ "aws:cdk:cloudformation:props": {
+ "fileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetId": {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.CfnMountTarget",
+ "version": "0.0.0"
+ }
+ },
+ "EfsMountTarget2": {
+ "id": "EfsMountTarget2",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/EfsMountTarget2",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EFS::MountTarget",
+ "aws:cdk:cloudformation:props": {
+ "fileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "securityGroups": [
+ {
+ "Fn::GetAtt": [
+ "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faEfsSecurityGroup8A6327B1",
+ "GroupId"
+ ]
+ }
+ ],
+ "subnetId": {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.CfnMountTarget",
+ "version": "0.0.0"
+ }
+ },
+ "AccessPoint": {
+ "id": "AccessPoint",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/AccessPoint",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/BucketDeploymentEFS-VPC-c8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/AccessPoint/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EFS::AccessPoint",
+ "aws:cdk:cloudformation:props": {
+ "fileSystemId": {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ },
+ "posixUser": {
+ "uid": "1001",
+ "gid": "1001"
+ },
+ "rootDirectory": {
+ "creationInfo": {
+ "ownerGid": "1001",
+ "ownerUid": "1001",
+ "permissions": "0777"
+ },
+ "path": "/lambda"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.CfnAccessPoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.AccessPoint",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-efs.FileSystem",
+ "version": "0.0.0"
+ }
+ },
+ "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa": {
+ "id": "Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa",
+ "children": {
+ "ServiceRole": {
+ "id": "ServiceRole",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/ServiceRole/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "elasticfilesystem:ClientMount",
+ "Condition": {
+ "StringEquals": {
+ "elasticfilesystem:AccessPointArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":access-point/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25"
+ }
+ ]
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Resource": "*"
+ },
+ {
+ "Action": "elasticfilesystem:ClientWrite",
+ "Effect": "Allow",
+ "Resource": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":file-system/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faDE9EC34B"
+ }
+ ]
+ ]
+ }
+ },
+ {
+ "Action": [
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ },
+ "/*"
+ ]
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "AssetParametersfc4481abf279255619ff7418faa5d24456fef3432ea0da59c95542578ff0222eS3Bucket9CD8B20A"
+ }
+ ]
+ ]
+ }
+ ]
+ },
+ {
+ "Action": [
+ "s3:Abort*",
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:GetObject*",
+ "s3:List*",
+ "s3:PutObject",
+ "s3:PutObjectLegalHold",
+ "s3:PutObjectRetention",
+ "s3:PutObjectTagging",
+ "s3:PutObjectVersionTagging"
+ ],
+ "Effect": "Allow",
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination920A3C57",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "tomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRoleDefaultPolicyDE2C8526",
+ "roles": [
+ {
+ "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "SecurityGroup": {
+ "id": "SecurityGroup",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/SecurityGroup",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/SecurityGroup/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::EC2::SecurityGroup",
+ "aws:cdk:cloudformation:props": {
+ "groupDescription": "Automatic security group for Lambda Function testbucketdeployments2CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faB7A82630",
+ "securityGroupEgress": [
+ {
+ "cidrIp": "0.0.0.0/0",
+ "description": "Allow all outbound traffic by default",
+ "ipProtocol": "-1"
+ }
+ ],
+ "vpcId": {
+ "Ref": "InlineVpc2605A3C4"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.CfnSecurityGroup",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-ec2.SecurityGroup",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Custom::CDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444fa/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Function",
+ "aws:cdk:cloudformation:props": {
+ "code": {
+ "s3Bucket": {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3BucketF23C0DE7"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParametersf98b78092dcdd31f5e6d47489beb5f804d4835ef86a8085d0a2053cb9ae711daS3VersionKey5E97B17D"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "role": {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faServiceRole1F2E85D4",
+ "Arn"
+ ]
+ },
+ "environment": {
+ "variables": {
+ "MOUNT_PATH": "/mnt/lambda"
+ }
+ },
+ "fileSystemConfigs": [
+ {
+ "arn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":elasticfilesystem:",
+ {
+ "Ref": "AWS::Region"
+ },
+ ":",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":access-point/",
+ {
+ "Ref": "BucketDeploymentEFSVPCc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faAccessPoint657AFA25"
+ }
+ ]
+ ]
+ },
+ "localMountPath": "/mnt/lambda"
+ }
+ ],
+ "handler": "index.handler",
+ "layers": [
+ {
+ "Ref": "DeployMeWithEfsStorageAwsCliLayer1619A3EE"
+ }
+ ],
+ "runtime": "python3.7",
+ "timeout": 900,
+ "vpcConfig": {
+ "subnetIds": [
+ {
+ "Ref": "InlineVpcPrivateSubnet1Subnet0EC98BAD"
+ },
+ {
+ "Ref": "InlineVpcPrivateSubnet2Subnet60DB7D03"
+ }
+ ],
+ "securityGroupIds": [
+ {
+ "Fn::GetAtt": [
+ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756Cc8e45d2d82aec23f89c7172e7e6f994ff3d9c444faSecurityGroupD7C1D75A",
+ "GroupId"
+ ]
+ }
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnFunction",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.Function",
+ "version": "0.0.0"
+ }
+ },
+ "Destination2": {
+ "id": "Destination2",
+ "path": "test-bucket-deployments-2/Destination2",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination2/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "aws-cdk:auto-delete-objects",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:deploy/here/:272e95d8",
+ "value": "true"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-bucket-deployments-2/Destination2/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination2/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
+ "aws:cdk:cloudformation:props": {
+ "bucket": {
+ "Ref": "Destination281A09BDF"
+ },
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination281A09BDF",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucketPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "AutoDeleteObjectsCustomResource": {
+ "id": "AutoDeleteObjectsCustomResource",
+ "path": "test-bucket-deployments-2/Destination2/AutoDeleteObjectsCustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/Destination2/AutoDeleteObjectsCustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "DeployWithPrefix": {
+ "id": "DeployWithPrefix",
+ "path": "test-bucket-deployments-2/DeployWithPrefix",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployWithPrefix/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "Destination3": {
+ "id": "Destination3",
+ "path": "test-bucket-deployments-2/Destination3",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination3/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {
+ "tags": [
+ {
+ "key": "aws-cdk:auto-delete-objects",
+ "value": "true"
+ },
+ {
+ "key": "aws-cdk:cr-owned:9eca9fb3",
+ "value": "true"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-bucket-deployments-2/Destination3/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/Destination3/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
+ "aws:cdk:cloudformation:props": {
+ "bucket": {
+ "Ref": "Destination3E3DC043D"
+ },
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:DeleteObject*",
+ "s3:GetBucket*",
+ "s3:List*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::GetAtt": [
+ "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
+ "Arn"
+ ]
+ }
+ },
+ "Resource": [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::GetAtt": [
+ "Destination3E3DC043D",
+ "Arn"
+ ]
+ },
+ "/*"
+ ]
+ ]
+ }
+ ]
+ }
+ ],
+ "Version": "2012-10-17"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucketPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketPolicy",
+ "version": "0.0.0"
+ }
+ },
+ "AutoDeleteObjectsCustomResource": {
+ "id": "AutoDeleteObjectsCustomResource",
+ "path": "test-bucket-deployments-2/Destination3/AutoDeleteObjectsCustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/Destination3/AutoDeleteObjectsCustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "DeployWithMetadata": {
+ "id": "DeployWithMetadata",
+ "path": "test-bucket-deployments-2/DeployWithMetadata",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployWithMetadata/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "DeployMeWithoutDeletingFilesOnDestination": {
+ "id": "DeployMeWithoutDeletingFilesOnDestination",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployMeWithoutDeletingFilesOnDestination/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ },
+ "DeployMeWithExcludedFilesOnDestination": {
+ "id": "DeployMeWithExcludedFilesOnDestination",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination",
+ "children": {
+ "AwsCliLayer": {
+ "id": "AwsCliLayer",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer",
+ "children": {
+ "Code": {
+ "id": "Code",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer/Code",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer/Code/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer/Code/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/AwsCliLayer/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::LayerVersion",
+ "aws:cdk:cloudformation:props": {
+ "content": {
+ "s3Bucket": {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3BucketC0D91AC4"
+ },
+ "s3Key": {
+ "Fn::Join": [
+ "",
+ [
+ {
+ "Fn::Select": [
+ 0,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "Fn::Select": [
+ 1,
+ {
+ "Fn::Split": [
+ "||",
+ {
+ "Ref": "AssetParameters01e9cf93416a1f67b17dad851459445bdaaafcc2f3ab4390c03984fd57b2f476S3VersionKey26CFD1B0"
+ }
+ ]
+ }
+ ]
+ }
+ ]
+ ]
+ }
+ },
+ "description": "/opt/awscli/aws"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnLayerVersion",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/lambda-layer-awscli.AwsCliLayer",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResourceHandler": {
+ "id": "CustomResourceHandler",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/CustomResourceHandler",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.SingletonFunction",
+ "version": "0.0.0"
+ }
+ },
+ "Asset1": {
+ "id": "Asset1",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/Asset1",
+ "children": {
+ "Stage": {
+ "id": "Stage",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/Asset1/Stage",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.AssetStaging",
+ "version": "0.0.0"
+ }
+ },
+ "AssetBucket": {
+ "id": "AssetBucket",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/Asset1/AssetBucket",
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-assets.Asset",
+ "version": "0.0.0"
+ }
+ },
+ "CustomResource": {
+ "id": "CustomResource",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/CustomResource",
+ "children": {
+ "Default": {
+ "id": "Default",
+ "path": "test-bucket-deployments-2/DeployMeWithExcludedFilesOnDestination/CustomResource/Default",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CustomResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3-deployment.BucketDeployment",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.test.ts b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.test.ts
index 9706f9d9d33f1..0aadf05e54f39 100644
--- a/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.test.ts
+++ b/packages/@aws-cdk/aws-s3-deployment/test/bucket-deployment.test.ts
@@ -714,9 +714,7 @@ test('memoryLimit can be used to specify the memory limit for the deployment res
const bucket = new s3.Bucket(stack, 'Dest');
// WHEN
-
// we define 3 deployments with 2 different memory configurations
-
new s3deploy.BucketDeployment(stack, 'Deploy256-1', {
sources: [s3deploy.Source.asset(path.join(__dirname, 'my-website'))],
destinationBucket: bucket,
@@ -736,14 +734,52 @@ test('memoryLimit can be used to specify the memory limit for the deployment res
});
// THEN
-
// we expect to find only two handlers, one for each configuration
-
Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 2);
Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', { MemorySize: 256 });
Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', { MemorySize: 1024 });
});
+test('ephemeralStorageSize can be used to specify the storage size for the deployment resource handler', () => {
+ // GIVEN
+ const stack = new cdk.Stack();
+ const bucket = new s3.Bucket(stack, 'Dest');
+
+ // WHEN
+ // we define 3 deployments with 2 different memory configurations
+ new s3deploy.BucketDeployment(stack, 'Deploy256-1', {
+ sources: [s3deploy.Source.asset(path.join(__dirname, 'my-website'))],
+ destinationBucket: bucket,
+ ephemeralStorageSize: cdk.Size.mebibytes(512),
+ });
+
+ new s3deploy.BucketDeployment(stack, 'Deploy256-2', {
+ sources: [s3deploy.Source.asset(path.join(__dirname, 'my-website'))],
+ destinationBucket: bucket,
+ ephemeralStorageSize: cdk.Size.mebibytes(512),
+ });
+
+ new s3deploy.BucketDeployment(stack, 'Deploy1024', {
+ sources: [s3deploy.Source.asset(path.join(__dirname, 'my-website'))],
+ destinationBucket: bucket,
+ ephemeralStorageSize: cdk.Size.mebibytes(1024),
+ });
+
+ // THEN
+ // we expect to find only two handlers, one for each configuration
+ Template.fromStack(stack).resourceCountIs('AWS::Lambda::Function', 2);
+ Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', {
+ EphemeralStorage: {
+ Size: 512,
+ },
+ });
+ Template.fromStack(stack).hasResourceProperties('AWS::Lambda::Function', {
+ EphemeralStorage: {
+ Size: 1024,
+ },
+ });
+});
+
test('deployment allows custom role to be supplied', () => {
// GIVEN
diff --git a/packages/@aws-cdk/aws-s3-notifications/.gitignore b/packages/@aws-cdk/aws-s3-notifications/.gitignore
index 147448f7df4fe..19f2079a2453d 100644
--- a/packages/@aws-cdk/aws-s3-notifications/.gitignore
+++ b/packages/@aws-cdk/aws-s3-notifications/.gitignore
@@ -16,4 +16,8 @@ nyc.config.js
!.eslintrc.js
!jest.config.js
-junit.xml
\ No newline at end of file
+junit.xml
+!**/*.integ.snapshot/**/asset.*/*.js
+!**/*.integ.snapshot/**/asset.*/*.d.ts
+
+!**/*.integ.snapshot/**/asset.*/**
diff --git a/packages/@aws-cdk/aws-s3-notifications/.npmignore b/packages/@aws-cdk/aws-s3-notifications/.npmignore
index aaabf1df59065..9d8e2428a5273 100644
--- a/packages/@aws-cdk/aws-s3-notifications/.npmignore
+++ b/packages/@aws-cdk/aws-s3-notifications/.npmignore
@@ -25,4 +25,6 @@ jest.config.js
**/cdk.out
junit.xml
test/
-!*.lit.ts
\ No newline at end of file
+!*.lit.ts
+**/*.integ.snapshot
+**/*.integ.snapshot
diff --git a/packages/@aws-cdk/aws-s3-notifications/package.json b/packages/@aws-cdk/aws-s3-notifications/package.json
index 32738cd1b0d93..345169af57ee9 100644
--- a/packages/@aws-cdk/aws-s3-notifications/package.json
+++ b/packages/@aws-cdk/aws-s3-notifications/package.json
@@ -47,7 +47,7 @@
"watch": "cdk-watch",
"lint": "cdk-lint",
"test": "cdk-test",
- "integ": "cdk-integ",
+ "integ": "integ-runner",
"pkglint": "pkglint -f",
"package": "cdk-package",
"awslint": "cdk-awslint",
@@ -73,7 +73,7 @@
"devDependencies": {
"@aws-cdk/assertions": "0.0.0",
"@aws-cdk/cdk-build-tools": "0.0.0",
- "@aws-cdk/cdk-integ-tools": "0.0.0",
+ "@aws-cdk/integ-runner": "0.0.0",
"@aws-cdk/pkglint": "0.0.0",
"@types/jest": "^27.4.1",
"jest": "^27.5.1"
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.expected.json b/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.expected.json
index 472b3b55a72b7..0e0162c3837ea 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.expected.json
+++ b/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.expected.json
@@ -159,7 +159,7 @@
},
":s3:::",
{
- "Ref": "Bucket25524B414"
+ "Ref": "Bucket3CFB7F7D7"
}
]
]
@@ -245,7 +245,7 @@
"Properties": {
"Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
"Code": {
- "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n\n # find external notifications\n external_notifications = find_external_notifications(bucket, stack_id)\n\n # if delete, that's all we need\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n # otherwise, merge external with incoming config and augment with id\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n return notifications\n\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n # if the notification was created by us, we know what id to expect\n # so we can filter by it.\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n return external_notifications\n\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
},
"Handler": "index.handler",
"Role": {
@@ -312,7 +312,12 @@
"Topic3DEAE47A7"
]
},
- "Bucket3NotificationsAFEFF359": {
+ "Bucket3CFB7F7D7": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Bucket3ImportedNotificationsB1625F39": {
"Type": "Custom::S3BucketNotifications",
"Properties": {
"ServiceToken": {
@@ -322,7 +327,7 @@
]
},
"BucketName": {
- "Ref": "Bucket25524B414"
+ "Ref": "Bucket3CFB7F7D7"
},
"NotificationConfiguration": {
"TopicConfigurations": [
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.ts b/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.ts
index 5e1f11d42a6ef..b4fd7c3ac604f 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.ts
+++ b/packages/@aws-cdk/aws-s3-notifications/test/integ.notifications.ts
@@ -21,7 +21,11 @@ const bucket2 = new s3.Bucket(stack, 'Bucket2', {
});
bucket2.addObjectRemovedNotification(new s3n.SnsDestination(topic3), { prefix: 'foo' }, { suffix: 'foo/bar' });
-const bucket3 = s3.Bucket.fromBucketName(stack, 'Bucket3', bucket2.bucketName);
-bucket3.addEventNotification(s3.EventType.OBJECT_CREATED_COPY, new s3n.SnsDestination(topic3));
+const bucket3 = new s3.Bucket(stack, 'Bucket3', {
+ removalPolicy: cdk.RemovalPolicy.DESTROY,
+});
+
+const importedBucket3 = s3.Bucket.fromBucketName(stack, 'Bucket3Imported', bucket3.bucketName);
+importedBucket3.addEventNotification(s3.EventType.OBJECT_CREATED_COPY, new s3n.SnsDestination(topic3));
app.synth();
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..182c9390e376e
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-notifications/test/lambda/integ.bucket-notifications": {
+ "stacks": [
+ "lambda-bucket-notifications"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/lambda-bucket-notifications.template.json b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/lambda-bucket-notifications.template.json
new file mode 100644
index 0000000000000..dcf281bcc0322
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/lambda-bucket-notifications.template.json
@@ -0,0 +1,258 @@
+{
+ "Resources": {
+ "MyBucketF68F3FF0": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "MyBucketNotifications46AC0CD2": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "MyBucketF68F3FF0"
+ },
+ "NotificationConfiguration": {
+ "LambdaFunctionConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:*"
+ ],
+ "Filter": {
+ "Key": {
+ "FilterRules": [
+ {
+ "Name": "suffix",
+ "Value": ".png"
+ }
+ ]
+ }
+ },
+ "LambdaFunctionArn": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "MyBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C1BF13476"
+ ]
+ },
+ "MyBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C1BF13476": {
+ "Type": "AWS::Lambda::Permission",
+ "Properties": {
+ "Action": "lambda:InvokeFunction",
+ "FunctionName": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ },
+ "Principal": "s3.amazonaws.com",
+ "SourceAccount": {
+ "Ref": "AWS::AccountId"
+ },
+ "SourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "MyFunctionServiceRole3C357FF2": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "MyFunction3BAA72D1": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Code": {
+ "ZipFile": "exports.handler = function handler(event, _context, callback) {\n console.log(JSON.stringify(event, undefined, 2));\n return callback(null, event);\n}"
+ },
+ "Role": {
+ "Fn::GetAtt": [
+ "MyFunctionServiceRole3C357FF2",
+ "Arn"
+ ]
+ },
+ "Handler": "index.handler",
+ "Runtime": "nodejs14.x"
+ },
+ "DependsOn": [
+ "MyFunctionServiceRole3C357FF2"
+ ]
+ },
+ "YourBucketC6A57364": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "YourBucketNotifications8D39901A": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "YourBucketC6A57364"
+ },
+ "NotificationConfiguration": {
+ "LambdaFunctionConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectRemoved:*"
+ ],
+ "LambdaFunctionArn": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "YourBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C8FE2B89D"
+ ]
+ },
+ "YourBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C8FE2B89D": {
+ "Type": "AWS::Lambda::Permission",
+ "Properties": {
+ "Action": "lambda:InvokeFunction",
+ "FunctionName": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ },
+ "Principal": "s3.amazonaws.com",
+ "SourceAccount": {
+ "Ref": "AWS::AccountId"
+ },
+ "SourceArn": {
+ "Fn::GetAtt": [
+ "YourBucketC6A57364",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "Roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
+ "Code": {
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ },
+ "Handler": "index.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC",
+ "Arn"
+ ]
+ },
+ "Runtime": "python3.7",
+ "Timeout": 300
+ },
+ "DependsOn": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..c5c6b3fdc08ad
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/manifest.json
@@ -0,0 +1,88 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "lambda-bucket-notifications": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "lambda-bucket-notifications.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/lambda-bucket-notifications/MyBucket/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyBucketF68F3FF0"
+ }
+ ],
+ "/lambda-bucket-notifications/MyBucket/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyBucketNotifications46AC0CD2"
+ }
+ ],
+ "/lambda-bucket-notifications/MyBucket/AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C1BF13476"
+ }
+ ],
+ "/lambda-bucket-notifications/MyFunction/ServiceRole/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyFunctionServiceRole3C357FF2"
+ }
+ ],
+ "/lambda-bucket-notifications/MyFunction/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyFunction3BAA72D1"
+ }
+ ],
+ "/lambda-bucket-notifications/YourBucket/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "YourBucketC6A57364"
+ }
+ ],
+ "/lambda-bucket-notifications/YourBucket/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "YourBucketNotifications8D39901A"
+ }
+ ],
+ "/lambda-bucket-notifications/YourBucket/AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "YourBucketAllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C8FE2B89D"
+ }
+ ],
+ "/lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ],
+ "/lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36"
+ }
+ ],
+ "/lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691"
+ }
+ ]
+ },
+ "displayName": "lambda-bucket-notifications"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..c5aff47f10b5a
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/bucket-notifications.integ.snapshot/tree.json
@@ -0,0 +1,360 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "lambda-bucket-notifications": {
+ "id": "lambda-bucket-notifications",
+ "path": "lambda-bucket-notifications",
+ "children": {
+ "MyBucket": {
+ "id": "MyBucket",
+ "path": "lambda-bucket-notifications/MyBucket",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/MyBucket/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "lambda-bucket-notifications/MyBucket/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/MyBucket/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C": {
+ "id": "AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C",
+ "path": "lambda-bucket-notifications/MyBucket/AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Permission",
+ "aws:cdk:cloudformation:props": {
+ "action": "lambda:InvokeFunction",
+ "functionName": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ },
+ "principal": "s3.amazonaws.com",
+ "sourceAccount": {
+ "Ref": "AWS::AccountId"
+ },
+ "sourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnPermission",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "MyFunction": {
+ "id": "MyFunction",
+ "path": "lambda-bucket-notifications/MyFunction",
+ "children": {
+ "ServiceRole": {
+ "id": "ServiceRole",
+ "path": "lambda-bucket-notifications/MyFunction/ServiceRole",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/MyFunction/ServiceRole/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/MyFunction/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Function",
+ "aws:cdk:cloudformation:props": {
+ "code": {
+ "zipFile": "exports.handler = function handler(event, _context, callback) {\n console.log(JSON.stringify(event, undefined, 2));\n return callback(null, event);\n}"
+ },
+ "role": {
+ "Fn::GetAtt": [
+ "MyFunctionServiceRole3C357FF2",
+ "Arn"
+ ]
+ },
+ "handler": "index.handler",
+ "runtime": "nodejs14.x"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnFunction",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.Function",
+ "version": "0.0.0"
+ }
+ },
+ "YourBucket": {
+ "id": "YourBucket",
+ "path": "lambda-bucket-notifications/YourBucket",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/YourBucket/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "lambda-bucket-notifications/YourBucket/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/YourBucket/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C": {
+ "id": "AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C",
+ "path": "lambda-bucket-notifications/YourBucket/AllowBucketNotificationsTolambdabucketnotificationsMyFunction4086861C",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::Lambda::Permission",
+ "aws:cdk:cloudformation:props": {
+ "action": "lambda:InvokeFunction",
+ "functionName": {
+ "Fn::GetAtt": [
+ "MyFunction3BAA72D1",
+ "Arn"
+ ]
+ },
+ "principal": "s3.amazonaws.com",
+ "sourceAccount": {
+ "Ref": "AWS::AccountId"
+ },
+ "sourceArn": {
+ "Fn::GetAtt": [
+ "YourBucketC6A57364",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-lambda.CfnPermission",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834": {
+ "id": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "children": {
+ "Role": {
+ "id": "Role",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "lambda-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.expected.json b/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.expected.json
index 731effea95a53..8cc9c00a4fe29 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.expected.json
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.expected.json
@@ -114,7 +114,7 @@
]
},
"Handler": "index.handler",
- "Runtime": "nodejs10.x"
+ "Runtime": "nodejs14.x"
},
"DependsOn": [
"MyFunctionServiceRole3C357FF2"
@@ -237,7 +237,7 @@
"Properties": {
"Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
"Code": {
- "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n\n # find external notifications\n external_notifications = find_external_notifications(bucket, stack_id)\n\n # if delete, that's all we need\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n # otherwise, merge external with incoming config and augment with id\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n return notifications\n\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n # if the notification was created by us, we know what id to expect\n # so we can filter by it.\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n return external_notifications\n\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
},
"Handler": "index.handler",
"Role": {
@@ -255,4 +255,4 @@
]
}
}
-}
\ No newline at end of file
+}
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.ts b/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.ts
index c237b24e896e3..1493e29176362 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.ts
+++ b/packages/@aws-cdk/aws-s3-notifications/test/lambda/integ.bucket-notifications.ts
@@ -12,7 +12,7 @@ const bucketA = new s3.Bucket(stack, 'MyBucket', {
});
const fn = new lambda.Function(stack, 'MyFunction', {
- runtime: lambda.Runtime.NODEJS_10_X,
+ runtime: lambda.Runtime.NODEJS_14_X,
handler: 'index.handler',
code: lambda.Code.fromInline(`exports.handler = ${handler.toString()}`),
});
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..13034c3f6f59c
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-notifications/test/integ.notifications": {
+ "stacks": [
+ "test-3"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..2afbc416c96bb
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/manifest.json
@@ -0,0 +1,100 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "test-3": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "test-3.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/test-3/Bucket/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket83908E77"
+ }
+ ],
+ "/test-3/Bucket/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotifications8F2E257D"
+ }
+ ],
+ "/test-3/Topic/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "TopicBFC7AF6E"
+ }
+ ],
+ "/test-3/Topic/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "TopicPolicyA1747468"
+ }
+ ],
+ "/test-3/Topic3/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Topic3DEAE47A7"
+ }
+ ],
+ "/test-3/Topic3/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Topic3Policy49BDDFBD"
+ }
+ ],
+ "/test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ],
+ "/test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36"
+ }
+ ],
+ "/test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691"
+ }
+ ],
+ "/test-3/Bucket2/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket25524B414"
+ }
+ ],
+ "/test-3/Bucket2/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket2NotificationsD9BA2A77"
+ }
+ ],
+ "/test-3/Bucket3/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket3CFB7F7D7"
+ }
+ ],
+ "/test-3/Bucket3Imported/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket3ImportedNotificationsB1625F39"
+ }
+ ]
+ },
+ "displayName": "test-3"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/test-3.template.json b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/test-3.template.json
new file mode 100644
index 0000000000000..fb9e75c91aa1d
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/test-3.template.json
@@ -0,0 +1,352 @@
+{
+ "Resources": {
+ "Bucket83908E77": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "BucketNotifications8F2E257D": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Bucket83908E77"
+ },
+ "NotificationConfiguration": {
+ "TopicConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:Put"
+ ],
+ "TopicArn": {
+ "Ref": "TopicBFC7AF6E"
+ }
+ },
+ {
+ "Events": [
+ "s3:ObjectRemoved:*"
+ ],
+ "Filter": {
+ "Key": {
+ "FilterRules": [
+ {
+ "Name": "prefix",
+ "Value": "home/myusername/"
+ }
+ ]
+ }
+ },
+ "TopicArn": {
+ "Ref": "Topic3DEAE47A7"
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "TopicPolicyA1747468",
+ "TopicBFC7AF6E",
+ "Topic3Policy49BDDFBD",
+ "Topic3DEAE47A7"
+ ]
+ },
+ "TopicBFC7AF6E": {
+ "Type": "AWS::SNS::Topic"
+ },
+ "TopicPolicyA1747468": {
+ "Type": "AWS::SNS::TopicPolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket83908E77",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "TopicBFC7AF6E"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Topics": [
+ {
+ "Ref": "TopicBFC7AF6E"
+ }
+ ]
+ }
+ },
+ "Topic3DEAE47A7": {
+ "Type": "AWS::SNS::Topic"
+ },
+ "Topic3Policy49BDDFBD": {
+ "Type": "AWS::SNS::TopicPolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket83908E77",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "0"
+ },
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket25524B414",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "1"
+ },
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "Bucket3CFB7F7D7"
+ }
+ ]
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "2"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Topics": [
+ {
+ "Ref": "Topic3DEAE47A7"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucketNotification",
+ "s3:PutBucketNotification"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "Roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
+ "Code": {
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ },
+ "Handler": "index.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC",
+ "Arn"
+ ]
+ },
+ "Runtime": "python3.7",
+ "Timeout": 300
+ },
+ "DependsOn": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ ]
+ },
+ "Bucket25524B414": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Bucket2NotificationsD9BA2A77": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Bucket25524B414"
+ },
+ "NotificationConfiguration": {
+ "TopicConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectRemoved:*"
+ ],
+ "Filter": {
+ "Key": {
+ "FilterRules": [
+ {
+ "Name": "prefix",
+ "Value": "foo"
+ },
+ {
+ "Name": "suffix",
+ "Value": "foo/bar"
+ }
+ ]
+ }
+ },
+ "TopicArn": {
+ "Ref": "Topic3DEAE47A7"
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "Topic3Policy49BDDFBD",
+ "Topic3DEAE47A7"
+ ]
+ },
+ "Bucket3CFB7F7D7": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Bucket3ImportedNotificationsB1625F39": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Bucket3CFB7F7D7"
+ },
+ "NotificationConfiguration": {
+ "TopicConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:Copy"
+ ],
+ "TopicArn": {
+ "Ref": "Topic3DEAE47A7"
+ }
+ }
+ ]
+ },
+ "Managed": false
+ },
+ "DependsOn": [
+ "Topic3Policy49BDDFBD",
+ "Topic3DEAE47A7"
+ ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..43697b3564b78
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/notifications.integ.snapshot/tree.json
@@ -0,0 +1,473 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "test-3": {
+ "id": "test-3",
+ "path": "test-3",
+ "children": {
+ "Bucket": {
+ "id": "Bucket",
+ "path": "test-3/Bucket",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "test-3/Bucket/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "Topic": {
+ "id": "Topic",
+ "path": "test-3/Topic",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Topic/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::Topic",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopic",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-3/Topic/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Topic/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::TopicPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket83908E77",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "TopicBFC7AF6E"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "topics": [
+ {
+ "Ref": "TopicBFC7AF6E"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.TopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.Topic",
+ "version": "0.0.0"
+ }
+ },
+ "Topic3": {
+ "id": "Topic3",
+ "path": "test-3/Topic3",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Topic3/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::Topic",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopic",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "test-3/Topic3/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Topic3/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::TopicPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket83908E77",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "0"
+ },
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket25524B414",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "1"
+ },
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":s3:::",
+ {
+ "Ref": "Bucket3CFB7F7D7"
+ }
+ ]
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "Topic3DEAE47A7"
+ },
+ "Sid": "2"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "topics": [
+ {
+ "Ref": "Topic3DEAE47A7"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.TopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.Topic",
+ "version": "0.0.0"
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834": {
+ "id": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "children": {
+ "Role": {
+ "id": "Role",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "s3:GetBucketNotification",
+ "s3:PutBucketNotification"
+ ],
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "Bucket2": {
+ "id": "Bucket2",
+ "path": "test-3/Bucket2",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket2/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "test-3/Bucket2/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket2/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "Bucket3": {
+ "id": "Bucket3",
+ "path": "test-3/Bucket3",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket3/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "Bucket3Imported": {
+ "id": "Bucket3Imported",
+ "path": "test-3/Bucket3Imported",
+ "children": {
+ "Notifications": {
+ "id": "Notifications",
+ "path": "test-3/Bucket3Imported/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "test-3/Bucket3Imported/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.BucketBase",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/integ.sns-bucket-notifications.expected.json b/packages/@aws-cdk/aws-s3-notifications/test/sns/integ.sns-bucket-notifications.expected.json
index 47f2a8ea6e0ce..fce3f59e27d78 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/sns/integ.sns-bucket-notifications.expected.json
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/integ.sns-bucket-notifications.expected.json
@@ -195,7 +195,7 @@
"Properties": {
"Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
"Code": {
- "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n\n # find external notifications\n external_notifications = find_external_notifications(bucket, stack_id)\n\n # if delete, that's all we need\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n # otherwise, merge external with incoming config and augment with id\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n return notifications\n\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n # if the notification was created by us, we know what id to expect\n # so we can filter by it.\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n return external_notifications\n\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
},
"Handler": "index.handler",
"Role": {
@@ -213,4 +213,4 @@
]
}
}
-}
\ No newline at end of file
+}
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..f2ec494d1bd7b
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-notifications/test/sns/integ.sns-bucket-notifications": {
+ "stacks": [
+ "sns-bucket-notifications"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..68a56ced1dc46
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/manifest.json
@@ -0,0 +1,76 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "sns-bucket-notifications": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "sns-bucket-notifications.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/sns-bucket-notifications/ObjectCreatedTopic/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ObjectCreatedTopic92F47E19"
+ }
+ ],
+ "/sns-bucket-notifications/ObjectCreatedTopic/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ObjectCreatedTopicPolicyA938ECFC"
+ }
+ ],
+ "/sns-bucket-notifications/ObjectDeletedTopic/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ObjectDeletedTopic2A914EC0"
+ }
+ ],
+ "/sns-bucket-notifications/ObjectDeletedTopic/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "ObjectDeletedTopicPolicy026B02E6"
+ }
+ ],
+ "/sns-bucket-notifications/MyBucket/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyBucketF68F3FF0"
+ }
+ ],
+ "/sns-bucket-notifications/MyBucket/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyBucketNotifications46AC0CD2"
+ }
+ ],
+ "/sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ],
+ "/sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36"
+ }
+ ],
+ "/sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691"
+ }
+ ]
+ },
+ "displayName": "sns-bucket-notifications"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/sns-bucket-notifications.template.json b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/sns-bucket-notifications.template.json
new file mode 100644
index 0000000000000..a30019f0261de
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/sns-bucket-notifications.template.json
@@ -0,0 +1,216 @@
+{
+ "Resources": {
+ "ObjectCreatedTopic92F47E19": {
+ "Type": "AWS::SNS::Topic"
+ },
+ "ObjectCreatedTopicPolicyA938ECFC": {
+ "Type": "AWS::SNS::TopicPolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "ObjectCreatedTopic92F47E19"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Topics": [
+ {
+ "Ref": "ObjectCreatedTopic92F47E19"
+ }
+ ]
+ }
+ },
+ "ObjectDeletedTopic2A914EC0": {
+ "Type": "AWS::SNS::Topic"
+ },
+ "ObjectDeletedTopicPolicy026B02E6": {
+ "Type": "AWS::SNS::TopicPolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "ObjectDeletedTopic2A914EC0"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Topics": [
+ {
+ "Ref": "ObjectDeletedTopic2A914EC0"
+ }
+ ]
+ }
+ },
+ "MyBucketF68F3FF0": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "MyBucketNotifications46AC0CD2": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "MyBucketF68F3FF0"
+ },
+ "NotificationConfiguration": {
+ "TopicConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:*"
+ ],
+ "TopicArn": {
+ "Ref": "ObjectCreatedTopic92F47E19"
+ }
+ },
+ {
+ "Events": [
+ "s3:ObjectRemoved:*"
+ ],
+ "Filter": {
+ "Key": {
+ "FilterRules": [
+ {
+ "Name": "suffix",
+ "Value": ".txt"
+ },
+ {
+ "Name": "prefix",
+ "Value": "foo/"
+ }
+ ]
+ }
+ },
+ "TopicArn": {
+ "Ref": "ObjectDeletedTopic2A914EC0"
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "ObjectCreatedTopicPolicyA938ECFC",
+ "ObjectCreatedTopic92F47E19",
+ "ObjectDeletedTopicPolicy026B02E6",
+ "ObjectDeletedTopic2A914EC0"
+ ]
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "Roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
+ "Code": {
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ },
+ "Handler": "index.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC",
+ "Arn"
+ ]
+ },
+ "Runtime": "python3.7",
+ "Timeout": 300
+ },
+ "DependsOn": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ ]
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..8c283db542855
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sns/sns-bucket-notifications.integ.snapshot/tree.json
@@ -0,0 +1,329 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "sns-bucket-notifications": {
+ "id": "sns-bucket-notifications",
+ "path": "sns-bucket-notifications",
+ "children": {
+ "ObjectCreatedTopic": {
+ "id": "ObjectCreatedTopic",
+ "path": "sns-bucket-notifications/ObjectCreatedTopic",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/ObjectCreatedTopic/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::Topic",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopic",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "sns-bucket-notifications/ObjectCreatedTopic/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/ObjectCreatedTopic/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::TopicPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "ObjectCreatedTopic92F47E19"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "topics": [
+ {
+ "Ref": "ObjectCreatedTopic92F47E19"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.TopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.Topic",
+ "version": "0.0.0"
+ }
+ },
+ "ObjectDeletedTopic": {
+ "id": "ObjectDeletedTopic",
+ "path": "sns-bucket-notifications/ObjectDeletedTopic",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/ObjectDeletedTopic/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::Topic",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopic",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "sns-bucket-notifications/ObjectDeletedTopic/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/ObjectDeletedTopic/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SNS::TopicPolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "sns:Publish",
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "MyBucketF68F3FF0",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Ref": "ObjectDeletedTopic2A914EC0"
+ },
+ "Sid": "0"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "topics": [
+ {
+ "Ref": "ObjectDeletedTopic2A914EC0"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.CfnTopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.TopicPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sns.Topic",
+ "version": "0.0.0"
+ }
+ },
+ "MyBucket": {
+ "id": "MyBucket",
+ "path": "sns-bucket-notifications/MyBucket",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/MyBucket/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "sns-bucket-notifications/MyBucket/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/MyBucket/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834": {
+ "id": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "children": {
+ "Role": {
+ "id": "Role",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "sns-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/cdk.out b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/cdk.out
new file mode 100644
index 0000000000000..90bef2e09ad39
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/cdk.out
@@ -0,0 +1 @@
+{"version":"17.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/integ.json b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/integ.json
new file mode 100644
index 0000000000000..e044f450fdb09
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/integ.json
@@ -0,0 +1,14 @@
+{
+ "version": "18.0.0",
+ "testCases": {
+ "aws-s3-notifications/test/sqs/integ.bucket-notifications": {
+ "stacks": [
+ "sqs-bucket-notifications"
+ ],
+ "diffAssets": false,
+ "stackUpdateWorkflow": true
+ }
+ },
+ "synthContext": {},
+ "enableLookups": false
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/manifest.json b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/manifest.json
new file mode 100644
index 0000000000000..c1d306e65b188
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/manifest.json
@@ -0,0 +1,94 @@
+{
+ "version": "17.0.0",
+ "artifacts": {
+ "Tree": {
+ "type": "cdk:tree",
+ "properties": {
+ "file": "tree.json"
+ }
+ },
+ "sqs-bucket-notifications": {
+ "type": "aws:cloudformation:stack",
+ "environment": "aws://unknown-account/unknown-region",
+ "properties": {
+ "templateFile": "sqs-bucket-notifications.template.json",
+ "validateOnSynth": false
+ },
+ "metadata": {
+ "/sqs-bucket-notifications/Bucket1/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket12520700A"
+ }
+ ],
+ "/sqs-bucket-notifications/Bucket1/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket1NotificationsBC5D9A45"
+ }
+ ],
+ "/sqs-bucket-notifications/MyQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyQueueE6CA6235"
+ }
+ ],
+ "/sqs-bucket-notifications/MyQueue/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "MyQueuePolicy6BBEDDAC"
+ }
+ ],
+ "/sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ],
+ "/sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36"
+ }
+ ],
+ "/sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691"
+ }
+ ],
+ "/sqs-bucket-notifications/Bucket2/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket25524B414"
+ }
+ ],
+ "/sqs-bucket-notifications/Bucket2/Notifications/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "Bucket2NotificationsD9BA2A77"
+ }
+ ],
+ "/sqs-bucket-notifications/EncryptedQueue/Key/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EncryptedQueueKey6F4FD304"
+ }
+ ],
+ "/sqs-bucket-notifications/EncryptedQueue/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EncryptedQueue0428C61A"
+ }
+ ],
+ "/sqs-bucket-notifications/EncryptedQueue/Policy/Resource": [
+ {
+ "type": "aws:cdk:logicalId",
+ "data": "EncryptedQueuePolicy8AEB1708"
+ }
+ ]
+ },
+ "displayName": "sqs-bucket-notifications"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/sqs-bucket-notifications.template.json b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/sqs-bucket-notifications.template.json
new file mode 100644
index 0000000000000..152e018b95135
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/sqs-bucket-notifications.template.json
@@ -0,0 +1,379 @@
+{
+ "Resources": {
+ "Bucket12520700A": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Bucket1NotificationsBC5D9A45": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Bucket12520700A"
+ },
+ "NotificationConfiguration": {
+ "QueueConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:*"
+ ],
+ "QueueArn": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ },
+ {
+ "Events": [
+ "s3:ObjectRemoved:*"
+ ],
+ "QueueArn": {
+ "Fn::GetAtt": [
+ "EncryptedQueue0428C61A",
+ "Arn"
+ ]
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "EncryptedQueueKey6F4FD304",
+ "EncryptedQueuePolicy8AEB1708",
+ "EncryptedQueue0428C61A",
+ "MyQueuePolicy6BBEDDAC",
+ "MyQueueE6CA6235"
+ ]
+ },
+ "MyQueueE6CA6235": {
+ "Type": "AWS::SQS::Queue",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "MyQueuePolicy6BBEDDAC": {
+ "Type": "AWS::SQS::QueuePolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ },
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket25524B414",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Queues": [
+ {
+ "Ref": "MyQueueE6CA6235"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC": {
+ "Type": "AWS::IAM::Role",
+ "Properties": {
+ "AssumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "ManagedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36": {
+ "Type": "AWS::IAM::Policy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "PolicyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "Roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691": {
+ "Type": "AWS::Lambda::Function",
+ "Properties": {
+ "Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
+ "Code": {
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ },
+ "Handler": "index.handler",
+ "Role": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC",
+ "Arn"
+ ]
+ },
+ "Runtime": "python3.7",
+ "Timeout": 300
+ },
+ "DependsOn": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ ]
+ },
+ "Bucket25524B414": {
+ "Type": "AWS::S3::Bucket",
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "Bucket2NotificationsD9BA2A77": {
+ "Type": "Custom::S3BucketNotifications",
+ "Properties": {
+ "ServiceToken": {
+ "Fn::GetAtt": [
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db8347ECC3691",
+ "Arn"
+ ]
+ },
+ "BucketName": {
+ "Ref": "Bucket25524B414"
+ },
+ "NotificationConfiguration": {
+ "QueueConfigurations": [
+ {
+ "Events": [
+ "s3:ObjectCreated:*"
+ ],
+ "Filter": {
+ "Key": {
+ "FilterRules": [
+ {
+ "Name": "suffix",
+ "Value": ".png"
+ }
+ ]
+ }
+ },
+ "QueueArn": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ }
+ ]
+ },
+ "Managed": true
+ },
+ "DependsOn": [
+ "MyQueuePolicy6BBEDDAC",
+ "MyQueueE6CA6235"
+ ]
+ },
+ "EncryptedQueueKey6F4FD304": {
+ "Type": "AWS::KMS::Key",
+ "Properties": {
+ "KeyPolicy": {
+ "Statement": [
+ {
+ "Action": "kms:*",
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":root"
+ ]
+ ]
+ }
+ },
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "kms:Decrypt",
+ "kms:Encrypt",
+ "kms:GenerateDataKey*",
+ "kms:ReEncrypt*"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "kms:Decrypt",
+ "kms:GenerateDataKey*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Description": "Created by sqs-bucket-notifications/EncryptedQueue"
+ },
+ "UpdateReplacePolicy": "Retain",
+ "DeletionPolicy": "Retain"
+ },
+ "EncryptedQueue0428C61A": {
+ "Type": "AWS::SQS::Queue",
+ "Properties": {
+ "KmsMasterKeyId": {
+ "Fn::GetAtt": [
+ "EncryptedQueueKey6F4FD304",
+ "Arn"
+ ]
+ }
+ },
+ "UpdateReplacePolicy": "Delete",
+ "DeletionPolicy": "Delete"
+ },
+ "EncryptedQueuePolicy8AEB1708": {
+ "Type": "AWS::SQS::QueuePolicy",
+ "Properties": {
+ "PolicyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "EncryptedQueue0428C61A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "Queues": [
+ {
+ "Ref": "EncryptedQueue0428C61A"
+ }
+ ]
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/tree.json b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/tree.json
new file mode 100644
index 0000000000000..528c8cf9c9015
--- /dev/null
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/bucket-notifications.integ.snapshot/tree.json
@@ -0,0 +1,501 @@
+{
+ "version": "tree-0.1",
+ "tree": {
+ "id": "App",
+ "path": "",
+ "children": {
+ "Tree": {
+ "id": "Tree",
+ "path": "Tree",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "sqs-bucket-notifications": {
+ "id": "sqs-bucket-notifications",
+ "path": "sqs-bucket-notifications",
+ "children": {
+ "Bucket1": {
+ "id": "Bucket1",
+ "path": "sqs-bucket-notifications/Bucket1",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/Bucket1/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "sqs-bucket-notifications/Bucket1/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/Bucket1/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "MyQueue": {
+ "id": "MyQueue",
+ "path": "sqs-bucket-notifications/MyQueue",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/MyQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "sqs-bucket-notifications/MyQueue/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/MyQueue/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::QueuePolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ },
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket25524B414",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "MyQueueE6CA6235",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "queues": [
+ {
+ "Ref": "MyQueueE6CA6235"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueuePolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.QueuePolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ },
+ "BucketNotificationsHandler050a0587b7544547bf325f094a3db834": {
+ "id": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834",
+ "children": {
+ "Role": {
+ "id": "Role",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Role",
+ "aws:cdk:cloudformation:props": {
+ "assumeRolePolicyDocument": {
+ "Statement": [
+ {
+ "Action": "sts:AssumeRole",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "lambda.amazonaws.com"
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "managedPolicyArns": [
+ {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+ ]
+ ]
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnRole",
+ "version": "0.0.0"
+ }
+ },
+ "DefaultPolicy": {
+ "id": "DefaultPolicy",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Role/DefaultPolicy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::IAM::Policy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": "s3:PutBucketNotification",
+ "Effect": "Allow",
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "policyName": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
+ "roles": [
+ {
+ "Ref": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.CfnPolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Policy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-iam.Role",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/BucketNotificationsHandler050a0587b7544547bf325f094a3db834/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ },
+ "Bucket2": {
+ "id": "Bucket2",
+ "path": "sqs-bucket-notifications/Bucket2",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/Bucket2/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+ "aws:cdk:cloudformation:props": {}
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.CfnBucket",
+ "version": "0.0.0"
+ }
+ },
+ "Notifications": {
+ "id": "Notifications",
+ "path": "sqs-bucket-notifications/Bucket2/Notifications",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/Bucket2/Notifications/Resource",
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.CfnResource",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Construct",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-s3.Bucket",
+ "version": "0.0.0"
+ }
+ },
+ "EncryptedQueue": {
+ "id": "EncryptedQueue",
+ "path": "sqs-bucket-notifications/EncryptedQueue",
+ "children": {
+ "Key": {
+ "id": "Key",
+ "path": "sqs-bucket-notifications/EncryptedQueue/Key",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/EncryptedQueue/Key/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::KMS::Key",
+ "aws:cdk:cloudformation:props": {
+ "keyPolicy": {
+ "Statement": [
+ {
+ "Action": "kms:*",
+ "Effect": "Allow",
+ "Principal": {
+ "AWS": {
+ "Fn::Join": [
+ "",
+ [
+ "arn:",
+ {
+ "Ref": "AWS::Partition"
+ },
+ ":iam::",
+ {
+ "Ref": "AWS::AccountId"
+ },
+ ":root"
+ ]
+ ]
+ }
+ },
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "kms:Decrypt",
+ "kms:Encrypt",
+ "kms:GenerateDataKey*",
+ "kms:ReEncrypt*"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": "*"
+ },
+ {
+ "Action": [
+ "kms:Decrypt",
+ "kms:GenerateDataKey*"
+ ],
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": "*"
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "description": "Created by sqs-bucket-notifications/EncryptedQueue"
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-kms.CfnKey",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-kms.Key",
+ "version": "0.0.0"
+ }
+ },
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/EncryptedQueue/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::Queue",
+ "aws:cdk:cloudformation:props": {
+ "kmsMasterKeyId": {
+ "Fn::GetAtt": [
+ "EncryptedQueueKey6F4FD304",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueue",
+ "version": "0.0.0"
+ }
+ },
+ "Policy": {
+ "id": "Policy",
+ "path": "sqs-bucket-notifications/EncryptedQueue/Policy",
+ "children": {
+ "Resource": {
+ "id": "Resource",
+ "path": "sqs-bucket-notifications/EncryptedQueue/Policy/Resource",
+ "attributes": {
+ "aws:cdk:cloudformation:type": "AWS::SQS::QueuePolicy",
+ "aws:cdk:cloudformation:props": {
+ "policyDocument": {
+ "Statement": [
+ {
+ "Action": [
+ "sqs:GetQueueAttributes",
+ "sqs:GetQueueUrl",
+ "sqs:SendMessage"
+ ],
+ "Condition": {
+ "ArnLike": {
+ "aws:SourceArn": {
+ "Fn::GetAtt": [
+ "Bucket12520700A",
+ "Arn"
+ ]
+ }
+ }
+ },
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "s3.amazonaws.com"
+ },
+ "Resource": {
+ "Fn::GetAtt": [
+ "EncryptedQueue0428C61A",
+ "Arn"
+ ]
+ }
+ }
+ ],
+ "Version": "2012-10-17"
+ },
+ "queues": [
+ {
+ "Ref": "EncryptedQueue0428C61A"
+ }
+ ]
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.CfnQueuePolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.QueuePolicy",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/aws-sqs.Queue",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.Stack",
+ "version": "0.0.0"
+ }
+ }
+ },
+ "constructInfo": {
+ "fqn": "@aws-cdk/core.App",
+ "version": "0.0.0"
+ }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/aws-s3-notifications/test/sqs/integ.bucket-notifications.expected.json b/packages/@aws-cdk/aws-s3-notifications/test/sqs/integ.bucket-notifications.expected.json
index de109b272d9bb..1421e22410918 100644
--- a/packages/@aws-cdk/aws-s3-notifications/test/sqs/integ.bucket-notifications.expected.json
+++ b/packages/@aws-cdk/aws-s3-notifications/test/sqs/integ.bucket-notifications.expected.json
@@ -184,7 +184,7 @@
"Properties": {
"Description": "AWS CloudFormation handler for \"Custom::S3BucketNotifications\" resources (@aws-cdk/aws-s3)",
"Code": {
- "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n\n # find external notifications\n external_notifications = find_external_notifications(bucket, stack_id)\n\n # if delete, that's all we need\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n # otherwise, merge external with incoming config and augment with id\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n return notifications\n\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n # if the notification was created by us, we know what id to expect\n # so we can filter by it.\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n return external_notifications\n\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
+ "ZipFile": "import boto3 # type: ignore\nimport json\nimport logging\nimport urllib.request\n\ns3 = boto3.client(\"s3\")\n\nEVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'\n\nCONFIGURATION_TYPES = [\"TopicConfigurations\", \"QueueConfigurations\", \"LambdaFunctionConfigurations\"]\n\ndef handler(event: dict, context):\n response_status = \"SUCCESS\"\n error_message = \"\"\n try:\n props = event[\"ResourceProperties\"]\n bucket = props[\"BucketName\"]\n notification_configuration = props[\"NotificationConfiguration\"]\n request_type = event[\"RequestType\"]\n managed = props.get('Managed', 'true').lower() == 'true'\n stack_id = event['StackId']\n\n if managed:\n config = handle_managed(request_type, notification_configuration)\n else:\n config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)\n\n put_bucket_notification_configuration(bucket, config)\n except Exception as e:\n logging.exception(\"Failed to put bucket notification configuration\")\n response_status = \"FAILED\"\n error_message = f\"Error: {str(e)}. \"\n finally:\n submit_response(event, context, response_status, error_message)\n\ndef handle_managed(request_type, notification_configuration):\n if request_type == 'Delete':\n return {}\n return notification_configuration\n\ndef handle_unmanaged(bucket, stack_id, request_type, notification_configuration):\n external_notifications = find_external_notifications(bucket, stack_id)\n\n if request_type == 'Delete':\n return external_notifications\n\n def with_id(notification):\n notification['Id'] = f\"{stack_id}-{hash(json.dumps(notification, sort_keys=True))}\"\n return notification\n\n notifications = {}\n for t in CONFIGURATION_TYPES:\n external = external_notifications.get(t, [])\n incoming = [with_id(n) for n in notification_configuration.get(t, [])]\n notifications[t] = external + incoming\n\n if EVENTBRIDGE_CONFIGURATION in notification_configuration:\n notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]\n elif EVENTBRIDGE_CONFIGURATION in external_notifications:\n notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return notifications\n\ndef find_external_notifications(bucket, stack_id):\n existing_notifications = get_bucket_notification_configuration(bucket)\n external_notifications = {}\n for t in CONFIGURATION_TYPES:\n external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f\"{stack_id}-\")]\n\n if EVENTBRIDGE_CONFIGURATION in existing_notifications:\n external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]\n\n return external_notifications\n\ndef get_bucket_notification_configuration(bucket):\n return s3.get_bucket_notification_configuration(Bucket=bucket)\n\ndef put_bucket_notification_configuration(bucket, notification_configuration):\n s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)\n\ndef submit_response(event: dict, context, response_status: str, error_message: str):\n response_body = json.dumps(\n {\n \"Status\": response_status,\n \"Reason\": f\"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}\",\n \"PhysicalResourceId\": event.get(\"PhysicalResourceId\") or event[\"LogicalResourceId\"],\n \"StackId\": event[\"StackId\"],\n \"RequestId\": event[\"RequestId\"],\n \"LogicalResourceId\": event[\"LogicalResourceId\"],\n \"NoEcho\": False,\n }\n ).encode(\"utf-8\")\n headers = {\"content-type\": \"\", \"content-length\": str(len(response_body))}\n try:\n req = urllib.request.Request(url=event[\"ResponseURL\"], headers=headers, data=response_body, method=\"PUT\")\n with urllib.request.urlopen(req) as response:\n print(response.read().decode(\"utf-8\"))\n print(\"Status code: \" + response.reason)\n except Exception as e:\n print(\"send(..) failed executing request.urlopen(..): \" + str(e))\n"
},
"Handler": "index.handler",
"Role": {
@@ -376,4 +376,4 @@
}
}
}
-}
\ No newline at end of file
+}
diff --git a/packages/@aws-cdk/aws-s3/.gitignore b/packages/@aws-cdk/aws-s3/.gitignore
index 17a41566f0002..691432920bfe5 100644
--- a/packages/@aws-cdk/aws-s3/.gitignore
+++ b/packages/@aws-cdk/aws-s3/.gitignore
@@ -16,4 +16,8 @@ nyc.config.js
!.eslintrc.js
junit.xml
-!jest.config.js
\ No newline at end of file
+!jest.config.js
+!**/*.integ.snapshot/**/asset.*/*.js
+!**/*.integ.snapshot/**/asset.*/*.d.ts
+
+!**/*.integ.snapshot/**/asset.*/**
diff --git a/packages/@aws-cdk/aws-s3/.npmignore b/packages/@aws-cdk/aws-s3/.npmignore
index 52ca12195912c..3ca26867c3157 100644
--- a/packages/@aws-cdk/aws-s3/.npmignore
+++ b/packages/@aws-cdk/aws-s3/.npmignore
@@ -25,4 +25,6 @@ tsconfig.json
junit.xml
test/
jest.config.js
-!*.lit.ts
\ No newline at end of file
+!*.lit.ts
+**/*.integ.snapshot
+**/*.integ.snapshot
diff --git a/packages/@aws-cdk/aws-s3/README.md b/packages/@aws-cdk/aws-s3/README.md
index 47138a3d30ec6..26a62df2d9f41 100644
--- a/packages/@aws-cdk/aws-s3/README.md
+++ b/packages/@aws-cdk/aws-s3/README.md
@@ -279,6 +279,21 @@ const importedRole = iam.Role.fromRoleArn(this, 'role', 'arn:aws:iam::1234567890
[S3 Bucket Notifications]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+### EventBridge notifications
+
+Amazon S3 can send events to Amazon EventBridge whenever certain events happen in your bucket.
+Unlike other destinations, you don't need to select which event types you want to deliver.
+
+The following example will enable EventBridge notifications:
+
+```ts
+const bucket = new s3.Bucket(this, 'MyEventBridgeBucket', {
+ eventBridgeEnabled: true,
+});
+```
+
+[S3 EventBridge notifications]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/EventBridge.html
+
## Block Public Access
Use `blockPublicAccess` to specify [block public access settings] on the bucket.
diff --git a/packages/@aws-cdk/aws-s3/lib/bucket.ts b/packages/@aws-cdk/aws-s3/lib/bucket.ts
index 321f65603c14c..4b299a1749f70 100644
--- a/packages/@aws-cdk/aws-s3/lib/bucket.ts
+++ b/packages/@aws-cdk/aws-s3/lib/bucket.ts
@@ -878,6 +878,10 @@ export abstract class BucketBase extends Resource implements IBucket {
return this.addEventNotification(EventType.OBJECT_REMOVED, dest, ...filters);
}
+ protected enableEventBridgeNotification() {
+ this.withNotifications(notifications => notifications.enableEventBridgeNotification());
+ }
+
private get writeActions(): string[] {
return [
...perms.BUCKET_DELETE_ACTIONS,
@@ -1354,6 +1358,13 @@ export interface BucketProps {
*/
readonly versioned?: boolean;
+ /**
+ * Whether this bucket should send notifications to Amazon EventBridge or not.
+ *
+ * @default false
+ */
+ readonly eventBridgeEnabled?: boolean;
+
/**
* Rules that define how Amazon S3 manages objects during their lifetime.
*
@@ -1642,6 +1653,7 @@ export class Bucket extends BucketBase {
private accessControl?: BucketAccessControl;
private readonly lifecycleRules: LifecycleRule[] = [];
private readonly versioned?: boolean;
+ private readonly eventBridgeEnabled?: boolean;
private readonly metrics: BucketMetrics[] = [];
private readonly cors: CorsRule[] = [];
private readonly inventories: Inventory[] = [];
@@ -1683,6 +1695,7 @@ export class Bucket extends BucketBase {
this.versioned = props.versioned;
this.encryptionKey = encryptionKey;
+ this.eventBridgeEnabled = props.eventBridgeEnabled;
this.bucketName = this.getResourceNameAttribute(resource.ref);
this.bucketArn = this.getResourceArnAttribute(resource.attrArn, {
@@ -1733,6 +1746,10 @@ export class Bucket extends BucketBase {
this.enableAutoDeleteObjects();
}
+
+ if (this.eventBridgeEnabled) {
+ this.enableEventBridgeNotification();
+ }
}
/**
diff --git a/packages/@aws-cdk/aws-s3/lib/notifications-resource/lambda/index.py b/packages/@aws-cdk/aws-s3/lib/notifications-resource/lambda/index.py
index 2551398d74958..12d584c290cc1 100644
--- a/packages/@aws-cdk/aws-s3/lib/notifications-resource/lambda/index.py
+++ b/packages/@aws-cdk/aws-s3/lib/notifications-resource/lambda/index.py
@@ -5,41 +5,40 @@
s3 = boto3.client("s3")
+EVENTBRIDGE_CONFIGURATION = 'EventBridgeConfiguration'
+
CONFIGURATION_TYPES = ["TopicConfigurations", "QueueConfigurations", "LambdaFunctionConfigurations"]
def handler(event: dict, context):
- response_status = "SUCCESS"
- error_message = ""
- try:
- props = event["ResourceProperties"]
- bucket = props["BucketName"]
- notification_configuration = props["NotificationConfiguration"]
- request_type = event["RequestType"]
- managed = props.get('Managed', 'true').lower() == 'true'
- stack_id = event['StackId']
-
- if managed:
- config = handle_managed(request_type, notification_configuration)
- else:
- config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)
-
- put_bucket_notification_configuration(bucket, config)
- except Exception as e:
- logging.exception("Failed to put bucket notification configuration")
- response_status = "FAILED"
- error_message = f"Error: {str(e)}. "
- finally:
- submit_response(event, context, response_status, error_message)
-
+ response_status = "SUCCESS"
+ error_message = ""
+ try:
+ props = event["ResourceProperties"]
+ bucket = props["BucketName"]
+ notification_configuration = props["NotificationConfiguration"]
+ request_type = event["RequestType"]
+ managed = props.get('Managed', 'true').lower() == 'true'
+ stack_id = event['StackId']
+
+ if managed:
+ config = handle_managed(request_type, notification_configuration)
+ else:
+ config = handle_unmanaged(bucket, stack_id, request_type, notification_configuration)
+
+ put_bucket_notification_configuration(bucket, config)
+ except Exception as e:
+ logging.exception("Failed to put bucket notification configuration")
+ response_status = "FAILED"
+ error_message = f"Error: {str(e)}. "
+ finally:
+ submit_response(event, context, response_status, error_message)
def handle_managed(request_type, notification_configuration):
if request_type == 'Delete':
return {}
return notification_configuration
-
def handle_unmanaged(bucket, stack_id, request_type, notification_configuration):
-
# find external notifications
external_notifications = find_external_notifications(bucket, stack_id)
@@ -57,8 +56,14 @@ def with_id(notification):
external = external_notifications.get(t, [])
incoming = [with_id(n) for n in notification_configuration.get(t, [])]
notifications[t] = external + incoming
- return notifications
+ # EventBridge configuration is a special case because it's just an empty object if it exists
+ if EVENTBRIDGE_CONFIGURATION in notification_configuration:
+ notifications[EVENTBRIDGE_CONFIGURATION] = notification_configuration[EVENTBRIDGE_CONFIGURATION]
+ elif EVENTBRIDGE_CONFIGURATION in external_notifications:
+ notifications[EVENTBRIDGE_CONFIGURATION] = external_notifications[EVENTBRIDGE_CONFIGURATION]
+
+ return notifications
def find_external_notifications(bucket, stack_id):
existing_notifications = get_bucket_notification_configuration(bucket)
@@ -68,34 +73,36 @@ def find_external_notifications(bucket, stack_id):
# so we can filter by it.
external_notifications[t] = [n for n in existing_notifications.get(t, []) if not n['Id'].startswith(f"{stack_id}-")]
- return external_notifications
+ # always treat EventBridge configuration as an external config if it already exists
+ # as there is no way to determine whether it's managed by us or not
+ if EVENTBRIDGE_CONFIGURATION in existing_notifications:
+ external_notifications[EVENTBRIDGE_CONFIGURATION] = existing_notifications[EVENTBRIDGE_CONFIGURATION]
+ return external_notifications
def get_bucket_notification_configuration(bucket):
return s3.get_bucket_notification_configuration(Bucket=bucket)
-
def put_bucket_notification_configuration(bucket, notification_configuration):
s3.put_bucket_notification_configuration(Bucket=bucket, NotificationConfiguration=notification_configuration)
-
def submit_response(event: dict, context, response_status: str, error_message: str):
- response_body = json.dumps(
- {
- "Status": response_status,
- "Reason": f"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}",
- "PhysicalResourceId": event.get("PhysicalResourceId") or event["LogicalResourceId"],
- "StackId": event["StackId"],
- "RequestId": event["RequestId"],
- "LogicalResourceId": event["LogicalResourceId"],
- "NoEcho": False,
- }
- ).encode("utf-8")
- headers = {"content-type": "", "content-length": str(len(response_body))}
- try:
- req = urllib.request.Request(url=event["ResponseURL"], headers=headers, data=response_body, method="PUT")
- with urllib.request.urlopen(req) as response:
- print(response.read().decode("utf-8"))
- print("Status code: " + response.reason)
- except Exception as e:
- print("send(..) failed executing request.urlopen(..): " + str(e))
+ response_body = json.dumps(
+ {
+ "Status": response_status,
+ "Reason": f"{error_message}See the details in CloudWatch Log Stream: {context.log_stream_name}",
+ "PhysicalResourceId": event.get("PhysicalResourceId") or event["LogicalResourceId"],
+ "StackId": event["StackId"],
+ "RequestId": event["RequestId"],
+ "LogicalResourceId": event["LogicalResourceId"],
+ "NoEcho": False,
+ }
+ ).encode("utf-8")
+ headers = {"content-type": "", "content-length": str(len(response_body))}
+ try:
+ req = urllib.request.Request(url=event["ResponseURL"], headers=headers, data=response_body, method="PUT")
+ with urllib.request.urlopen(req) as response:
+ print(response.read().decode("utf-8"))
+ print("Status code: " + response.reason)
+ except Exception as e:
+ print("send(..) failed executing request.urlopen(..): " + str(e))
diff --git a/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource-handler.ts b/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource-handler.ts
index 76edb141a3cd0..a6ea51209bc83 100644
--- a/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource-handler.ts
+++ b/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource-handler.ts
@@ -86,15 +86,19 @@ export class NotificationsResourceHandler extends Construct {
}
const handlerSource = fs.readFileSync(path.join(__dirname, 'lambda/index.py'), 'utf8');
- if (handlerSource.length > 4096) {
- throw new Error(`Source of Notifications Resource Handler is too large (${handlerSource.length} > 4096)`);
+
+ // Removing lines that starts with '#' (comment lines) in order to fit the 4096 limit
+ const handlerSourceWithoutComments = handlerSource.replace(/^ *#.*\n?/gm, '');
+
+ if (handlerSourceWithoutComments.length > 4096) {
+ throw new Error(`Source of Notifications Resource Handler is too large (${handlerSourceWithoutComments.length} > 4096)`);
}
const resource = new InLineLambda(this, 'Resource', {
type: resourceType,
properties: {
Description: 'AWS CloudFormation handler for "Custom::S3BucketNotifications" resources (@aws-cdk/aws-s3)',
- Code: { ZipFile: handlerSource },
+ Code: { ZipFile: handlerSourceWithoutComments },
Handler: 'index.handler',
Role: this.role.roleArn,
Runtime: 'python3.7',
diff --git a/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource.ts b/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource.ts
index 6bc50ec5b6064..6b1b240b776a0 100644
--- a/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource.ts
+++ b/packages/@aws-cdk/aws-s3/lib/notifications-resource/notifications-resource.ts
@@ -36,6 +36,7 @@ interface NotificationsProps {
* https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-notificationconfig.html
*/
export class BucketNotifications extends Construct {
+ private eventBridgeEnabled = false;
private readonly lambdaNotifications = new ArrayAllows the remote domain owner to accept an inbound cross-cluster connection request.
" - }, - "AddTags":{ - "name":"AddTags", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/tags" - }, - "input":{"shape":"AddTagsRequest"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"LimitExceededException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Attaches tags to an existing domain. Tags are a set of case-sensitive key value pairs. An domain can have up to 10 tags. See Tagging Amazon OpenSearch Service domains for more information.
" - }, - "AssociatePackage":{ - "name":"AssociatePackage", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/packages/associate/{PackageID}/{DomainName}" - }, - "input":{"shape":"AssociatePackageRequest"}, - "output":{"shape":"AssociatePackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"}, - {"shape":"ConflictException"} - ], - "documentation":"Associates a package with an Amazon OpenSearch Service domain.
" - }, - "CancelServiceSoftwareUpdate":{ - "name":"CancelServiceSoftwareUpdate", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/serviceSoftwareUpdate/cancel" - }, - "input":{"shape":"CancelServiceSoftwareUpdateRequest"}, - "output":{"shape":"CancelServiceSoftwareUpdateResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Cancels a scheduled service software update for an Amazon OpenSearch Service domain. You can only perform this operation before the AutomatedUpdateDate and when the UpdateStatus is in the PENDING_UPDATE state.
Creates a new Amazon OpenSearch Service domain. For more information, see Creating and managing Amazon OpenSearch Service domains in the Amazon OpenSearch Service Developer Guide.
" - }, - "CreateOutboundConnection":{ - "name":"CreateOutboundConnection", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/cc/outboundConnection" - }, - "input":{"shape":"CreateOutboundConnectionRequest"}, - "output":{"shape":"CreateOutboundConnectionResponse"}, - "errors":[ - {"shape":"LimitExceededException"}, - {"shape":"InternalException"}, - {"shape":"ResourceAlreadyExistsException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Creates a new cross-cluster connection from a local OpenSearch domain to a remote OpenSearch domain.
" - }, - "CreatePackage":{ - "name":"CreatePackage", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/packages" - }, - "input":{"shape":"CreatePackageRequest"}, - "output":{"shape":"CreatePackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"LimitExceededException"}, - {"shape":"InvalidTypeException"}, - {"shape":"ResourceAlreadyExistsException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"} - ], - "documentation":"Create a package for use with Amazon OpenSearch Service domains.
" - }, - "DeleteDomain":{ - "name":"DeleteDomain", - "http":{ - "method":"DELETE", - "requestUri":"/2021-01-01/opensearch/domain/{DomainName}" - }, - "input":{"shape":"DeleteDomainRequest"}, - "output":{"shape":"DeleteDomainResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Permanently deletes the specified domain and all of its data. Once a domain is deleted, it cannot be recovered.
" - }, - "DeleteInboundConnection":{ - "name":"DeleteInboundConnection", - "http":{ - "method":"DELETE", - "requestUri":"/2021-01-01/opensearch/cc/inboundConnection/{ConnectionId}" - }, - "input":{"shape":"DeleteInboundConnectionRequest"}, - "output":{"shape":"DeleteInboundConnectionResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Allows the remote domain owner to delete an existing inbound cross-cluster connection.
" - }, - "DeleteOutboundConnection":{ - "name":"DeleteOutboundConnection", - "http":{ - "method":"DELETE", - "requestUri":"/2021-01-01/opensearch/cc/outboundConnection/{ConnectionId}" - }, - "input":{"shape":"DeleteOutboundConnectionRequest"}, - "output":{"shape":"DeleteOutboundConnectionResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Allows the local domain owner to delete an existing outbound cross-cluster connection.
" - }, - "DeletePackage":{ - "name":"DeletePackage", - "http":{ - "method":"DELETE", - "requestUri":"/2021-01-01/packages/{PackageID}" - }, - "input":{"shape":"DeletePackageRequest"}, - "output":{"shape":"DeletePackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"}, - {"shape":"ConflictException"} - ], - "documentation":"Deletes the package.
" - }, - "DescribeDomain":{ - "name":"DescribeDomain", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/domain/{DomainName}" - }, - "input":{"shape":"DescribeDomainRequest"}, - "output":{"shape":"DescribeDomainResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Returns domain configuration information about the specified domain, including the domain ID, domain endpoint, and domain ARN.
" - }, - "DescribeDomainAutoTunes":{ - "name":"DescribeDomainAutoTunes", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/domain/{DomainName}/autoTunes" - }, - "input":{"shape":"DescribeDomainAutoTunesRequest"}, - "output":{"shape":"DescribeDomainAutoTunesResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Provides scheduled Auto-Tune action details for the domain, such as Auto-Tune action type, description, severity, and scheduled date.
" - }, - "DescribeDomainConfig":{ - "name":"DescribeDomainConfig", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/domain/{DomainName}/config" - }, - "input":{"shape":"DescribeDomainConfigRequest"}, - "output":{"shape":"DescribeDomainConfigResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Provides cluster configuration information about the specified domain, such as the state, creation date, update version, and update date for cluster options.
" - }, - "DescribeDomains":{ - "name":"DescribeDomains", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/domain-info" - }, - "input":{"shape":"DescribeDomainsRequest"}, - "output":{"shape":"DescribeDomainsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ValidationException"} - ], - "documentation":"Returns domain configuration information about the specified domains, including the domain ID, domain endpoint, and domain ARN.
" - }, - "DescribeInboundConnections":{ - "name":"DescribeInboundConnections", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/cc/inboundConnection/search" - }, - "input":{"shape":"DescribeInboundConnectionsRequest"}, - "output":{"shape":"DescribeInboundConnectionsResponse"}, - "errors":[ - {"shape":"InvalidPaginationTokenException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Lists all the inbound cross-cluster connections for a remote domain.
" - }, - "DescribeInstanceTypeLimits":{ - "name":"DescribeInstanceTypeLimits", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/instanceTypeLimits/{EngineVersion}/{InstanceType}" - }, - "input":{"shape":"DescribeInstanceTypeLimitsRequest"}, - "output":{"shape":"DescribeInstanceTypeLimitsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"InvalidTypeException"}, - {"shape":"LimitExceededException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":" Describe the limits for a given instance type and OpenSearch or Elasticsearch version. When modifying an existing domain, specify the DomainName to see which limits you can modify.
Lists all the outbound cross-cluster connections for a local domain.
" - }, - "DescribePackages":{ - "name":"DescribePackages", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/packages/describe" - }, - "input":{"shape":"DescribePackagesRequest"}, - "output":{"shape":"DescribePackagesResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"} - ], - "documentation":"Describes all packages available to Amazon OpenSearch Service domains. Includes options for filtering, limiting the number of results, and pagination.
" - }, - "DescribeReservedInstanceOfferings":{ - "name":"DescribeReservedInstanceOfferings", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/reservedInstanceOfferings" - }, - "input":{"shape":"DescribeReservedInstanceOfferingsRequest"}, - "output":{"shape":"DescribeReservedInstanceOfferingsResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"}, - {"shape":"DisabledOperationException"}, - {"shape":"InternalException"} - ], - "documentation":"Lists available reserved OpenSearch instance offerings.
" - }, - "DescribeReservedInstances":{ - "name":"DescribeReservedInstances", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/reservedInstances" - }, - "input":{"shape":"DescribeReservedInstancesRequest"}, - "output":{"shape":"DescribeReservedInstancesResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"InternalException"}, - {"shape":"ValidationException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Returns information about reserved OpenSearch instances for this account.
" - }, - "DissociatePackage":{ - "name":"DissociatePackage", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/packages/dissociate/{PackageID}/{DomainName}" - }, - "input":{"shape":"DissociatePackageRequest"}, - "output":{"shape":"DissociatePackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"}, - {"shape":"ConflictException"} - ], - "documentation":"Dissociates a package from the Amazon OpenSearch Service domain.
" - }, - "GetCompatibleVersions":{ - "name":"GetCompatibleVersions", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/compatibleVersions" - }, - "input":{"shape":"GetCompatibleVersionsRequest"}, - "output":{"shape":"GetCompatibleVersionsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":" Returns a list of upgrade-compatible versions of OpenSearch/Elasticsearch. You can optionally pass a DomainName to get all upgrade-compatible versions of OpenSearch/Elasticsearch for that specific domain.
Returns a list of package versions, along with their creation time and commit message.
" - }, - "GetUpgradeHistory":{ - "name":"GetUpgradeHistory", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/upgradeDomain/{DomainName}/history" - }, - "input":{"shape":"GetUpgradeHistoryRequest"}, - "output":{"shape":"GetUpgradeHistoryResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Retrieves the complete history of the last 10 upgrades performed on the domain.
" - }, - "GetUpgradeStatus":{ - "name":"GetUpgradeStatus", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/upgradeDomain/{DomainName}/status" - }, - "input":{"shape":"GetUpgradeStatusRequest"}, - "output":{"shape":"GetUpgradeStatusResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Retrieves the latest status of the last upgrade or upgrade eligibility check performed on the domain.
" - }, - "ListDomainNames":{ - "name":"ListDomainNames", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/domain" - }, - "output":{"shape":"ListDomainNamesResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ValidationException"} - ], - "documentation":"Returns the names of all domains owned by the current user's account.
" - }, - "ListDomainsForPackage":{ - "name":"ListDomainsForPackage", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/packages/{PackageID}/domains" - }, - "input":{"shape":"ListDomainsForPackageRequest"}, - "output":{"shape":"ListDomainsForPackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"} - ], - "documentation":"Lists all Amazon OpenSearch Service domains associated with the package.
" - }, - "ListInstanceTypeDetails":{ - "name":"ListInstanceTypeDetails", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/instanceTypeDetails/{EngineVersion}" - }, - "input":{"shape":"ListInstanceTypeDetailsRequest"}, - "output":{"shape":"ListInstanceTypeDetailsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ] - }, - "ListPackagesForDomain":{ - "name":"ListPackagesForDomain", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/domain/{DomainName}/packages" - }, - "input":{"shape":"ListPackagesForDomainRequest"}, - "output":{"shape":"ListPackagesForDomainResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"} - ], - "documentation":"Lists all packages associated with the Amazon OpenSearch Service domain.
" - }, - "ListTags":{ - "name":"ListTags", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/tags/" - }, - "input":{"shape":"ListTagsRequest"}, - "output":{"shape":"ListTagsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Returns all tags for the given domain.
" - }, - "ListVersions":{ - "name":"ListVersions", - "http":{ - "method":"GET", - "requestUri":"/2021-01-01/opensearch/versions" - }, - "input":{"shape":"ListVersionsRequest"}, - "output":{"shape":"ListVersionsResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"List all supported versions of OpenSearch and Elasticsearch.
" - }, - "PurchaseReservedInstanceOffering":{ - "name":"PurchaseReservedInstanceOffering", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/purchaseReservedInstanceOffering" - }, - "input":{"shape":"PurchaseReservedInstanceOfferingRequest"}, - "output":{"shape":"PurchaseReservedInstanceOfferingResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"ResourceAlreadyExistsException"}, - {"shape":"LimitExceededException"}, - {"shape":"DisabledOperationException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Allows you to purchase reserved OpenSearch instances.
" - }, - "RejectInboundConnection":{ - "name":"RejectInboundConnection", - "http":{ - "method":"PUT", - "requestUri":"/2021-01-01/opensearch/cc/inboundConnection/{ConnectionId}/reject" - }, - "input":{"shape":"RejectInboundConnectionRequest"}, - "output":{"shape":"RejectInboundConnectionResponse"}, - "errors":[ - {"shape":"ResourceNotFoundException"}, - {"shape":"DisabledOperationException"} - ], - "documentation":"Allows the remote domain owner to reject an inbound cross-cluster connection request.
" - }, - "RemoveTags":{ - "name":"RemoveTags", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/tags-removal" - }, - "input":{"shape":"RemoveTagsRequest"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Removes the specified set of tags from the given domain.
" - }, - "StartServiceSoftwareUpdate":{ - "name":"StartServiceSoftwareUpdate", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/serviceSoftwareUpdate/start" - }, - "input":{"shape":"StartServiceSoftwareUpdateRequest"}, - "output":{"shape":"StartServiceSoftwareUpdateResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Schedules a service software update for an Amazon OpenSearch Service domain.
" - }, - "UpdateDomainConfig":{ - "name":"UpdateDomainConfig", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/domain/{DomainName}/config" - }, - "input":{"shape":"UpdateDomainConfigRequest"}, - "output":{"shape":"UpdateDomainConfigResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"InvalidTypeException"}, - {"shape":"LimitExceededException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ValidationException"} - ], - "documentation":"Modifies the cluster configuration of the specified domain, such as setting the instance type and the number of instances.
" - }, - "UpdatePackage":{ - "name":"UpdatePackage", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/packages/update" - }, - "input":{"shape":"UpdatePackageRequest"}, - "output":{"shape":"UpdatePackageResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"InternalException"}, - {"shape":"LimitExceededException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"AccessDeniedException"}, - {"shape":"ValidationException"} - ], - "documentation":"Updates a package for use with Amazon OpenSearch Service domains.
" - }, - "UpgradeDomain":{ - "name":"UpgradeDomain", - "http":{ - "method":"POST", - "requestUri":"/2021-01-01/opensearch/upgradeDomain" - }, - "input":{"shape":"UpgradeDomainRequest"}, - "output":{"shape":"UpgradeDomainResponse"}, - "errors":[ - {"shape":"BaseException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"ResourceAlreadyExistsException"}, - {"shape":"DisabledOperationException"}, - {"shape":"ValidationException"}, - {"shape":"InternalException"} - ], - "documentation":"Allows you to either upgrade your domain or perform an upgrade eligibility check to a compatible version of OpenSearch or Elasticsearch.
" - } - }, - "shapes":{ - "ARN":{ - "type":"string", - "documentation":"The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
", - "max":2048, - "min":20, - "pattern":".*" - }, - "AWSDomainInformation":{ - "type":"structure", - "required":["DomainName"], - "members":{ - "OwnerId":{"shape":"OwnerId"}, - "DomainName":{"shape":"DomainName"}, - "Region":{"shape":"Region"} - } - }, - "AcceptInboundConnectionRequest":{ - "type":"structure", - "required":["ConnectionId"], - "members":{ - "ConnectionId":{ - "shape":"ConnectionId", - "documentation":"The ID of the inbound connection you want to accept.
", - "location":"uri", - "locationName":"ConnectionId" - } - }, - "documentation":"Container for the parameters to the AcceptInboundConnection operation.
The InboundConnection of the accepted inbound connection.
The result of an AcceptInboundConnection operation. Contains details about the accepted inbound connection.
The access policy configured for the domain. Access policies can be resource-based, IP-based, or IAM-based. See Configuring access policiesfor more information.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the access policy for the domain. See OptionStatus for the status information that's included.
The configured access rules for the domain's document and search endpoints, and the current status of those rules.
" - }, - "AddTagsRequest":{ - "type":"structure", - "required":[ - "ARN", - "TagList" - ], - "members":{ - "ARN":{ - "shape":"ARN", - "documentation":"Specify the ARN of the domain you want to add tags to.
List of Tag to add to the domain.
Container for the parameters to the AddTags operation. Specifies the tags to attach to the domain.
Additional limit is specific to a given InstanceType and for each of its InstanceRole etc.
Attributes and their details:
- MaximumNumberOfDataNodesSupported This attribute is present on the master node only to specify how much data nodes up to which given
- MaximumNumberOfDataNodesWithoutMasterNode This attribute is present on data node only to specify how much data nodes of given
ESPartitionInstanceType can support as master node. ESPartitionInstanceType up to which you don't need any master nodes to govern them. Value for a given AdditionalLimit$LimitName .
List of limits that are specific to a given InstanceType and for each of its InstanceRole .
Exposes select native OpenSearch configuration values from opensearch.yml. Currently, the following advanced options are available:
- Option to allow references to indices in an HTTP request body. Must be
falsewhen configuring access to individual sub-resources. By default, the value istrue. See Advanced cluster parameters for more information. - Option to specify the percentage of heap space allocated to field data. By default, this setting is unbounded.
For more information, see Advanced cluster parameters.
" - }, - "AdvancedOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"AdvancedOptions", - "documentation":"The status of advanced options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The OptionStatus for advanced options for the specified domain.
Status of the advanced options for the specified domain. Currently, the following advanced options are available:
- Option to allow references to indices in an HTTP request body. Must be
falsewhen configuring access to individual sub-resources. By default, the value istrue. See Advanced cluster parameters for more information. - Option to specify the percentage of heap space allocated to field data. By default, this setting is unbounded.
For more information, see Advanced cluster parameters.
" - }, - "AdvancedSecurityOptions":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"True if advanced security is enabled.
" - }, - "InternalUserDatabaseEnabled":{ - "shape":"Boolean", - "documentation":"True if the internal user database is enabled.
" - }, - "SAMLOptions":{ - "shape":"SAMLOptionsOutput", - "documentation":"Describes the SAML application configured for a domain.
" - } - }, - "documentation":"The advanced security configuration: whether advanced security is enabled, whether the internal database option is enabled.
" - }, - "AdvancedSecurityOptionsInput":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"True if advanced security is enabled.
" - }, - "InternalUserDatabaseEnabled":{ - "shape":"Boolean", - "documentation":"True if the internal user database is enabled.
" - }, - "MasterUserOptions":{ - "shape":"MasterUserOptions", - "documentation":"Credentials for the master user: username and password, ARN, or both.
" - }, - "SAMLOptions":{ - "shape":"SAMLOptionsInput", - "documentation":"The SAML application configuration for the domain.
" - } - }, - "documentation":"The advanced security configuration: whether advanced security is enabled, whether the internal database option is enabled, master username and password (if internal database is enabled), and master user ARN (if IAM is enabled).
" - }, - "AdvancedSecurityOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"AdvancedSecurityOptions", - "documentation":"Advanced security options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"Status of the advanced security options for the specified domain.
" - } - }, - "documentation":"The status of advanced security options for the specified domain.
" - }, - "AssociatePackageRequest":{ - "type":"structure", - "required":[ - "PackageID", - "DomainName" - ], - "members":{ - "PackageID":{ - "shape":"PackageID", - "documentation":"Internal ID of the package to associate with a domain. Use DescribePackages to find this value.
The name of the domain to associate the package with.
", - "location":"uri", - "locationName":"DomainName" - } - }, - "documentation":" Container for the request parameters to the AssociatePackage operation.
DomainPackageDetails
Container for the response returned by AssociatePackage operation.
Specifies the Auto-Tune type. Valid value is SCHEDULED_ACTION.
" - }, - "AutoTuneDetails":{ - "shape":"AutoTuneDetails", - "documentation":"Specifies details about the Auto-Tune action. See Auto-Tune for Amazon OpenSearch Service for more information.
" - } - }, - "documentation":"Specifies the Auto-Tune type and Auto-Tune action details.
" - }, - "AutoTuneDate":{ - "type":"timestamp", - "documentation":"The timestamp of the Auto-Tune action scheduled for the domain.
" - }, - "AutoTuneDesiredState":{ - "type":"string", - "documentation":"The Auto-Tune desired state. Valid values are ENABLED and DISABLED.
", - "enum":[ - "ENABLED", - "DISABLED" - ] - }, - "AutoTuneDetails":{ - "type":"structure", - "members":{ - "ScheduledAutoTuneDetails":{"shape":"ScheduledAutoTuneDetails"} - }, - "documentation":"Specifies details about the Auto-Tune action. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "AutoTuneList":{ - "type":"list", - "member":{"shape":"AutoTune"} - }, - "AutoTuneMaintenanceSchedule":{ - "type":"structure", - "members":{ - "StartAt":{ - "shape":"StartAt", - "documentation":"The timestamp at which the Auto-Tune maintenance schedule starts.
" - }, - "Duration":{ - "shape":"Duration", - "documentation":"Specifies maintenance schedule duration: duration value and duration unit. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "CronExpressionForRecurrence":{ - "shape":"String", - "documentation":"A cron expression for a recurring maintenance schedule. See Auto-Tune for Amazon OpenSearch Service for more information.
" - } - }, - "documentation":"Specifies the Auto-Tune maintenance schedule. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "AutoTuneMaintenanceScheduleList":{ - "type":"list", - "member":{"shape":"AutoTuneMaintenanceSchedule"}, - "max":100 - }, - "AutoTuneOptions":{ - "type":"structure", - "members":{ - "DesiredState":{ - "shape":"AutoTuneDesiredState", - "documentation":"The Auto-Tune desired state. Valid values are ENABLED and DISABLED.
" - }, - "RollbackOnDisable":{ - "shape":"RollbackOnDisable", - "documentation":"The rollback state while disabling Auto-Tune for the domain. Valid values are NO_ROLLBACK and DEFAULT_ROLLBACK.
" - }, - "MaintenanceSchedules":{ - "shape":"AutoTuneMaintenanceScheduleList", - "documentation":"A list of maintenance schedules. See Auto-Tune for Amazon OpenSearch Service for more information.
" - } - }, - "documentation":"The Auto-Tune options: the Auto-Tune desired state for the domain, rollback state when disabling Auto-Tune options and list of maintenance schedules.
" - }, - "AutoTuneOptionsInput":{ - "type":"structure", - "members":{ - "DesiredState":{ - "shape":"AutoTuneDesiredState", - "documentation":"The Auto-Tune desired state. Valid values are ENABLED and DISABLED.
" - }, - "MaintenanceSchedules":{ - "shape":"AutoTuneMaintenanceScheduleList", - "documentation":"A list of maintenance schedules. See Auto-Tune for Amazon OpenSearch Service for more information.
" - } - }, - "documentation":"The Auto-Tune options: the Auto-Tune desired state for the domain and list of maintenance schedules.
" - }, - "AutoTuneOptionsOutput":{ - "type":"structure", - "members":{ - "State":{ - "shape":"AutoTuneState", - "documentation":"The AutoTuneState for the domain.
The error message while enabling or disabling Auto-Tune.
" - } - }, - "documentation":"The Auto-Tune options: the Auto-Tune desired state for the domain and list of maintenance schedules.
" - }, - "AutoTuneOptionsStatus":{ - "type":"structure", - "members":{ - "Options":{ - "shape":"AutoTuneOptions", - "documentation":"Specifies Auto-Tune options for the domain.
" - }, - "Status":{ - "shape":"AutoTuneStatus", - "documentation":"The status of the Auto-Tune options for the domain.
" - } - }, - "documentation":"The Auto-Tune status for the domain.
" - }, - "AutoTuneState":{ - "type":"string", - "documentation":"The Auto-Tune state for the domain. For valid states see Auto-Tune for Amazon OpenSearch Service.
", - "enum":[ - "ENABLED", - "DISABLED", - "ENABLE_IN_PROGRESS", - "DISABLE_IN_PROGRESS", - "DISABLED_AND_ROLLBACK_SCHEDULED", - "DISABLED_AND_ROLLBACK_IN_PROGRESS", - "DISABLED_AND_ROLLBACK_COMPLETE", - "DISABLED_AND_ROLLBACK_ERROR", - "ERROR" - ] - }, - "AutoTuneStatus":{ - "type":"structure", - "required":[ - "CreationDate", - "UpdateDate", - "State" - ], - "members":{ - "CreationDate":{ - "shape":"UpdateTimestamp", - "documentation":"The timestamp of the Auto-Tune options creation date.
" - }, - "UpdateDate":{ - "shape":"UpdateTimestamp", - "documentation":"The timestamp of when the Auto-Tune options were last updated.
" - }, - "UpdateVersion":{ - "shape":"UIntValue", - "documentation":"The latest version of the Auto-Tune options.
" - }, - "State":{ - "shape":"AutoTuneState", - "documentation":"The AutoTuneState for the domain.
The error message while enabling or disabling Auto-Tune.
" - }, - "PendingDeletion":{ - "shape":"Boolean", - "documentation":"Indicates whether the domain is being deleted.
" - } - }, - "documentation":"Provides the current Auto-Tune status for the domain.
" - }, - "AutoTuneType":{ - "type":"string", - "documentation":"Specifies the Auto-Tune type. Valid value is SCHEDULED_ACTION.
", - "enum":["SCHEDULED_ACTION"] - }, - "BackendRole":{ - "type":"string", - "max":256, - "min":1 - }, - "Boolean":{"type":"boolean"}, - "CancelServiceSoftwareUpdateRequest":{ - "type":"structure", - "required":["DomainName"], - "members":{ - "DomainName":{ - "shape":"DomainName", - "documentation":"The name of the domain that you want to stop the latest service software update on.
" - } - }, - "documentation":"Container for the parameters to the CancelServiceSoftwareUpdate operation. Specifies the name of the domain that you wish to cancel a service software update on.
The current status of the OpenSearch service software update.
" - } - }, - "documentation":"The result of a CancelServiceSoftwareUpdate operation. Contains the status of the update.
ARN of the Cloudwatch log group to publish logs to.
", - "max":2048, - "min":20, - "pattern":".*" - }, - "ClusterConfig":{ - "type":"structure", - "members":{ - "InstanceType":{ - "shape":"OpenSearchPartitionInstanceType", - "documentation":"The instance type for an OpenSearch cluster. UltraWarm instance types are not supported for data instances.
" - }, - "InstanceCount":{ - "shape":"IntegerClass", - "documentation":"The number of instances in the specified domain cluster.
" - }, - "DedicatedMasterEnabled":{ - "shape":"Boolean", - "documentation":"A boolean value to indicate whether a dedicated master node is enabled. See Dedicated master nodes in Amazon OpenSearch Service for more information.
" - }, - "ZoneAwarenessEnabled":{ - "shape":"Boolean", - "documentation":"A boolean value to indicate whether zone awareness is enabled. See Configuring a multi-AZ domain in Amazon OpenSearch Service for more information.
" - }, - "ZoneAwarenessConfig":{ - "shape":"ZoneAwarenessConfig", - "documentation":"The zone awareness configuration for a domain when zone awareness is enabled.
" - }, - "DedicatedMasterType":{ - "shape":"OpenSearchPartitionInstanceType", - "documentation":"The instance type for a dedicated master node.
" - }, - "DedicatedMasterCount":{ - "shape":"IntegerClass", - "documentation":"Total number of dedicated master nodes, active and on standby, for the cluster.
" - }, - "WarmEnabled":{ - "shape":"Boolean", - "documentation":"True to enable UltraWarm storage.
" - }, - "WarmType":{ - "shape":"OpenSearchWarmPartitionInstanceType", - "documentation":"The instance type for the OpenSearch cluster's warm nodes.
" - }, - "WarmCount":{ - "shape":"IntegerClass", - "documentation":"The number of UltraWarm nodes in the cluster.
" - }, - "ColdStorageOptions":{"shape":"ColdStorageOptions"} - }, - "documentation":"The configuration for the domain cluster, such as the type and number of instances.
" - }, - "ClusterConfigStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"ClusterConfig", - "documentation":"The cluster configuration for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The cluster configuration status for the specified domain.
" - } - }, - "documentation":"The configuration status for the specified domain.
" - }, - "CognitoOptions":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"The option to enable Cognito for OpenSearch Dashboards authentication.
" - }, - "UserPoolId":{ - "shape":"UserPoolId", - "documentation":"The Cognito user pool ID for OpenSearch Dashboards authentication.
" - }, - "IdentityPoolId":{ - "shape":"IdentityPoolId", - "documentation":"The Cognito identity pool ID for OpenSearch Dashboards authentication.
" - }, - "RoleArn":{ - "shape":"RoleArn", - "documentation":"The role ARN that provides OpenSearch permissions for accessing Cognito resources.
" - } - }, - "documentation":"Options to specify the Cognito user and identity pools for OpenSearch Dashboards authentication. For more information, see Configuring Amazon Cognito authentication for OpenSearch Dashboards.
" - }, - "CognitoOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"CognitoOptions", - "documentation":"Cognito options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the Cognito options for the specified domain.
" - } - }, - "documentation":"The status of the Cognito options for the specified domain.
" - }, - "ColdStorageOptions":{ - "type":"structure", - "required":["Enabled"], - "members":{ - "Enabled":{"shape":"Boolean"} - } - }, - "CommitMessage":{ - "type":"string", - "max":160 - }, - "CompatibleVersionsList":{ - "type":"list", - "member":{"shape":"CompatibleVersionsMap"} - }, - "CompatibleVersionsMap":{ - "type":"structure", - "members":{ - "SourceVersion":{ - "shape":"VersionString", - "documentation":"The current version of OpenSearch a domain is on.
" - }, - "TargetVersions":{"shape":"VersionList"} - }, - "documentation":" A map from an EngineVersion to a list of compatible EngineVersion s to which the domain can be upgraded.
The name of the Amazon OpenSearch Service domain you're creating. Domain names are unique across the domains owned by an account within an AWS region. Domain names must start with a lowercase letter and can contain the following characters: a-z (lowercase), 0-9, and - (hyphen).
" - }, - "EngineVersion":{ - "shape":"VersionString", - "documentation":"String of format Elasticsearch_X.Y or OpenSearch_X.Y to specify the engine version for the Amazon OpenSearch Service domain. For example, \"OpenSearch_1.0\" or \"Elasticsearch_7.9\". For more information, see Creating and managing Amazon OpenSearch Service domains .
" - }, - "ClusterConfig":{ - "shape":"ClusterConfig", - "documentation":"Configuration options for a domain. Specifies the instance type and number of instances in the domain.
" - }, - "EBSOptions":{ - "shape":"EBSOptions", - "documentation":"Options to enable, disable, and specify the type and size of EBS storage volumes.
" - }, - "AccessPolicies":{ - "shape":"PolicyDocument", - "documentation":"IAM access policy as a JSON-formatted string.
" - }, - "SnapshotOptions":{ - "shape":"SnapshotOptions", - "documentation":"Option to set time, in UTC format, of the daily automated snapshot. Default value is 0 hours.
" - }, - "VPCOptions":{ - "shape":"VPCOptions", - "documentation":"Options to specify the subnets and security groups for a VPC endpoint. For more information, see Launching your Amazon OpenSearch Service domains using a VPC .
" - }, - "CognitoOptions":{ - "shape":"CognitoOptions", - "documentation":"Options to specify the Cognito user and identity pools for OpenSearch Dashboards authentication. For more information, see Configuring Amazon Cognito authentication for OpenSearch Dashboards.
" - }, - "EncryptionAtRestOptions":{ - "shape":"EncryptionAtRestOptions", - "documentation":"Options for encryption of data at rest.
" - }, - "NodeToNodeEncryptionOptions":{ - "shape":"NodeToNodeEncryptionOptions", - "documentation":"Node-to-node encryption options.
" - }, - "AdvancedOptions":{ - "shape":"AdvancedOptions", - "documentation":"Option to allow references to indices in an HTTP request body. Must be false when configuring access to individual sub-resources. By default, the value is true. See Advanced cluster parameters for more information.
Map of LogType and LogPublishingOption, each containing options to publish a given type of OpenSearch log.
Options to specify configurations that will be applied to the domain endpoint.
" - }, - "AdvancedSecurityOptions":{ - "shape":"AdvancedSecurityOptionsInput", - "documentation":"Specifies advanced security options.
" - }, - "TagList":{ - "shape":"TagList", - "documentation":"A list of Tag added during domain creation.
Specifies Auto-Tune options.
" - } - } - }, - "CreateDomainResponse":{ - "type":"structure", - "members":{ - "DomainStatus":{ - "shape":"DomainStatus", - "documentation":"The status of the newly created domain.
" - } - }, - "documentation":"The result of a CreateDomain operation. Contains the status of the newly created Amazon OpenSearch Service domain.
The AWSDomainInformation for the local OpenSearch domain.
The AWSDomainInformation for the remote OpenSearch domain.
The connection alias used used by the customer for this cross-cluster connection.
" - } - }, - "documentation":"Container for the parameters to the CreateOutboundConnection operation.
The AWSDomainInformation for the local OpenSearch domain.
The AWSDomainInformation for the remote OpenSearch domain.
The connection alias provided during the create connection request.
" - }, - "ConnectionStatus":{ - "shape":"OutboundConnectionStatus", - "documentation":"The OutboundConnectionStatus for the newly created connection.
The unique ID for the created outbound connection, which is used for subsequent operations on the connection.
" - } - }, - "documentation":"The result of a CreateOutboundConnection request. Contains the details about the newly created cross-cluster connection.
Unique identifier for the package.
" - }, - "PackageType":{ - "shape":"PackageType", - "documentation":"Type of package. Currently supports only TXT-DICTIONARY.
" - }, - "PackageDescription":{ - "shape":"PackageDescription", - "documentation":"Description of the package.
" - }, - "PackageSource":{ - "shape":"PackageSource", - "documentation":"The Amazon S3 location from which to import the package.
" - } - }, - "documentation":" Container for request parameters to the CreatePackage operation.
Information about the package.
" - } - }, - "documentation":" Container for the response returned by the CreatePackage operation.
The name of the domain you want to permanently delete.
", - "location":"uri", - "locationName":"DomainName" - } - }, - "documentation":"Container for the parameters to the DeleteDomain operation. Specifies the name of the domain you want to delete.
The status of the domain being deleted.
" - } - }, - "documentation":"The result of a DeleteDomain request. Contains the status of the pending deletion, or a \"domain not found\" error if the domain and all of its resources have been deleted.
The ID of the inbound connection to permanently delete.
", - "location":"uri", - "locationName":"ConnectionId" - } - }, - "documentation":"Container for the parameters to the DeleteInboundConnection operation.
The InboundConnection of the deleted inbound connection.
The result of a DeleteInboundConnection operation. Contains details about the deleted inbound connection.
The ID of the outbound connection you want to permanently delete.
", - "location":"uri", - "locationName":"ConnectionId" - } - }, - "documentation":"Container for the parameters to the DeleteOutboundConnection operation.
The OutboundConnection of the deleted outbound connection.
The result of a DeleteOutboundConnection operation. Contains details about the deleted outbound connection.
The internal ID of the package you want to delete. Use DescribePackages to find this value.
Container for the request parameters to the DeletePackage operation.
PackageDetails
Container for the response parameters to the DeletePackage operation.
The domain name for which you want Auto-Tune action details.
", - "location":"uri", - "locationName":"DomainName" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Set this value to limit the number of results returned. If not specified, defaults to 100.
" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"NextToken is sent in case the earlier API call results contain the NextToken. Used for pagination.
" - } - }, - "documentation":"Container for the parameters to the DescribeDomainAutoTunes operation.
The list of setting adjustments that Auto-Tune has made to the domain. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"An identifier to allow retrieval of paginated results.
" - } - }, - "documentation":"The result of a DescribeDomainAutoTunes request. See Auto-Tune for Amazon OpenSearch Service for more information.
The domain you want to get information about.
", - "location":"uri", - "locationName":"DomainName" - } - }, - "documentation":"Container for the parameters to the DescribeDomainConfig operation. Specifies the domain name for which you want configuration information.
The configuration information of the domain requested in the DescribeDomainConfig request.
The result of a DescribeDomainConfig request. Contains the configuration information of the requested domain.
The name of the domain for which you want information.
", - "location":"uri", - "locationName":"DomainName" - } - }, - "documentation":"Container for the parameters to the DescribeDomain operation.
The current status of the domain.
" - } - }, - "documentation":"The result of a DescribeDomain request. Contains the status of the domain specified in the request.
The domains for which you want information.
" - } - }, - "documentation":"Container for the parameters to the DescribeDomains operation. By default, the API returns the status of all domains.
The status of the domains requested in the DescribeDomains request.
The result of a DescribeDomains request. Contains the status of the specified domains or all domains owned by the account.
A list of filters used to match properties for inbound cross-cluster connections. Available Filter values are:
- connection-id
- local-domain-info.domain-name
- local-domain-info.owner-id
- local-domain-info.region
- remote-domain-info.domain-name
Set this value to limit the number of results returned. If not specified, defaults to 100.
" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"If more results are available and NextToken is present, make the next request to the same API with the received NextToken to paginate the remaining results.
" - } - }, - "documentation":"Container for the parameters to the DescribeInboundConnections operation.
A list of InboundConnection matching the specified filter criteria.
If more results are available and NextToken is present, make the next request to the same API with the received NextToken to paginate the remaining results.
" - } - }, - "documentation":"The result of a DescribeInboundConnections request. Contains a list of connections matching the filter criteria.
The name of the domain you want to modify. Only include this value if you're querying OpenSearch Limits for an existing domain.
The instance type for an OpenSearch cluster for which OpenSearch Limits are needed.
Version of OpenSearch for which Limits are needed.
Container for the parameters to the DescribeInstanceTypeLimits operation.
Container for the parameters received from the DescribeInstanceTypeLimits operation.
A list of filters used to match properties for outbound cross-cluster connections. Available Filter names for this operation are:
- connection-id
- remote-domain-info.domain-name
- remote-domain-info.owner-id
- remote-domain-info.region
- local-domain-info.domain-name
Set this value to limit the number of results returned. If not specified, defaults to 100.
" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"NextToken is sent in case the earlier API call results contain the NextToken parameter. Used for pagination.
" - } - }, - "documentation":"Container for the parameters to the DescribeOutboundConnections operation.
A list of OutboundConnection matching the specified filter criteria.
If more results are available and NextToken is present, make the next request to the same API with the received NextToken to paginate the remaining results.
" - } - }, - "documentation":"The result of a DescribeOutboundConnections request. Contains the list of connections matching the filter criteria.
Any field from PackageDetails.
A list of values for the specified field.
" - } - }, - "documentation":"A filter to apply to the DescribePackage response.
A list of DescribePackagesFilter to filter the packages included in a DescribePackages response.
Only returns packages that match the DescribePackagesFilterList values.
Limits results to a maximum number of packages.
" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Used for pagination. Only necessary if a previous API call includes a non-null NextToken value. If provided, returns results for the next page.
" - } - }, - "documentation":" Container for the request parameters to the DescribePackage operation.
List of PackageDetails objects.
Container for the response returned by the DescribePackages operation.
The offering identifier filter value. Use this parameter to show only the available offering that matches the specified reservation identifier.
", - "location":"querystring", - "locationName":"offeringId" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Set this value to limit the number of results returned. If not specified, defaults to 100.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Provides an identifier to allow retrieval of paginated results.
", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":"Container for parameters to DescribeReservedInstanceOfferings
Provides an identifier to allow retrieval of paginated results.
" - }, - "ReservedInstanceOfferings":{ - "shape":"ReservedInstanceOfferingList", - "documentation":"List of reserved OpenSearch instance offerings
" - } - }, - "documentation":"Container for results from DescribeReservedInstanceOfferings
The reserved instance identifier filter value. Use this parameter to show only the reservation that matches the specified reserved OpenSearch instance ID.
", - "location":"querystring", - "locationName":"reservationId" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Set this value to limit the number of results returned. If not specified, defaults to 100.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Provides an identifier to allow retrieval of paginated results.
", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":"Container for parameters to DescribeReservedInstances
Provides an identifier to allow retrieval of paginated results.
" - }, - "ReservedInstances":{ - "shape":"ReservedInstanceList", - "documentation":"List of reserved OpenSearch instances.
" - } - }, - "documentation":"Container for results from DescribeReservedInstances
The internal ID of the package to associate with a domain. Use DescribePackages to find this value.
The name of the domain to associate the package with.
", - "location":"uri", - "locationName":"DomainName" - } - }, - "documentation":" Container for the request parameters to the DissociatePackage operation.
DomainPackageDetails
Container for the response returned by DissociatePackage operation.
String of format Elasticsearch_X.Y or OpenSearch_X.Y to specify the engine version for the OpenSearch or Elasticsearch domain.
" - }, - "ClusterConfig":{ - "shape":"ClusterConfigStatus", - "documentation":"The ClusterConfig for the domain.
The EBSOptions for the domain.
IAM access policy as a JSON-formatted string.
" - }, - "SnapshotOptions":{ - "shape":"SnapshotOptionsStatus", - "documentation":"The SnapshotOptions for the domain.
The VPCOptions for the specified domain. For more information, see Launching your Amazon OpenSearch Service domains using a VPC.
The CognitoOptions for the specified domain. For more information, see Configuring Amazon Cognito authentication for OpenSearch Dashboards.
The EncryptionAtRestOptions for the domain.
The NodeToNodeEncryptionOptions for the domain.
The AdvancedOptions for the domain. See Advanced options for more information.
Log publishing options for the given domain.
" - }, - "DomainEndpointOptions":{ - "shape":"DomainEndpointOptionsStatus", - "documentation":"The DomainEndpointOptions for the domain.
Specifies AdvancedSecurityOptions for the domain.
Specifies AutoTuneOptions for the domain.
The configuration of a domain.
" - }, - "DomainEndpointOptions":{ - "type":"structure", - "members":{ - "EnforceHTTPS":{ - "shape":"Boolean", - "documentation":"Whether only HTTPS endpoint should be enabled for the domain.
" - }, - "TLSSecurityPolicy":{ - "shape":"TLSSecurityPolicy", - "documentation":"Specify the TLS security policy to apply to the HTTPS endpoint of the domain.
Can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy which supports TLSv1.0 and higher.
- Policy-Min-TLS-1-2-2019-07: TLS security policy which supports only TLSv1.2
Whether to enable a custom endpoint for the domain.
" - }, - "CustomEndpoint":{ - "shape":"DomainNameFqdn", - "documentation":"The fully qualified domain for your custom endpoint.
" - }, - "CustomEndpointCertificateArn":{ - "shape":"ARN", - "documentation":"The ACM certificate ARN for your custom endpoint.
" - } - }, - "documentation":"Options to configure the endpoint for the domain.
" - }, - "DomainEndpointOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"DomainEndpointOptions", - "documentation":"Options to configure the endpoint for the domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the endpoint options for the domain. See OptionStatus for the status information that's included.
The configured endpoint options for the domain and their current status.
" - }, - "DomainId":{ - "type":"string", - "documentation":"Unique identifier for the domain.
", - "max":64, - "min":1 - }, - "DomainInfo":{ - "type":"structure", - "members":{ - "DomainName":{ - "shape":"DomainName", - "documentation":"The DomainName.
Contains the list of domain information.
" - }, - "DomainInformationContainer":{ - "type":"structure", - "members":{ - "AWSDomainInformation":{"shape":"AWSDomainInformation"} - } - }, - "DomainName":{ - "type":"string", - "documentation":"The name of an domain. Domain names are unique across the domains owned by an account within an AWS region. Domain names start with a letter or number and can contain the following characters: a-z (lowercase), 0-9, and - (hyphen).
", - "max":28, - "min":3, - "pattern":"[a-z][a-z0-9\\-]+" - }, - "DomainNameFqdn":{ - "type":"string", - "max":255, - "min":1, - "pattern":"^(((?!-)[A-Za-z0-9-]{0,62}[A-Za-z0-9])\\.)+((?!-)[A-Za-z0-9-]{1,62}[A-Za-z0-9])$" - }, - "DomainNameList":{ - "type":"list", - "member":{"shape":"DomainName"}, - "documentation":"A list of domain names.
" - }, - "DomainPackageDetails":{ - "type":"structure", - "members":{ - "PackageID":{ - "shape":"PackageID", - "documentation":"The internal ID of the package.
" - }, - "PackageName":{ - "shape":"PackageName", - "documentation":"User-specified name of the package.
" - }, - "PackageType":{ - "shape":"PackageType", - "documentation":"Currently supports only TXT-DICTIONARY.
" - }, - "LastUpdated":{ - "shape":"LastUpdated", - "documentation":"The timestamp of the most recent update to the package association status.
" - }, - "DomainName":{ - "shape":"DomainName", - "documentation":"The name of the domain you've associated a package with.
" - }, - "DomainPackageStatus":{ - "shape":"DomainPackageStatus", - "documentation":"State of the association. Values are ASSOCIATING, ASSOCIATION_FAILED, ACTIVE, DISSOCIATING, and DISSOCIATION_FAILED.
" - }, - "PackageVersion":{"shape":"PackageVersion"}, - "ReferencePath":{ - "shape":"ReferencePath", - "documentation":"The relative path on Amazon OpenSearch Service nodes, which can be used as synonym_path when the package is a synonym file.
" - }, - "ErrorDetails":{ - "shape":"ErrorDetails", - "documentation":"Additional information if the package is in an error state. Null otherwise.
" - } - }, - "documentation":"Information on a package associated with a domain.
" - }, - "DomainPackageDetailsList":{ - "type":"list", - "member":{"shape":"DomainPackageDetails"} - }, - "DomainPackageStatus":{ - "type":"string", - "enum":[ - "ASSOCIATING", - "ASSOCIATION_FAILED", - "ACTIVE", - "DISSOCIATING", - "DISSOCIATION_FAILED" - ] - }, - "DomainStatus":{ - "type":"structure", - "required":[ - "DomainId", - "DomainName", - "ARN", - "ClusterConfig" - ], - "members":{ - "DomainId":{ - "shape":"DomainId", - "documentation":"The unique identifier for the specified domain.
" - }, - "DomainName":{ - "shape":"DomainName", - "documentation":"The name of a domain. Domain names are unique across the domains owned by an account within an AWS region. Domain names start with a letter or number and can contain the following characters: a-z (lowercase), 0-9, and - (hyphen).
" - }, - "ARN":{ - "shape":"ARN", - "documentation":"The Amazon Resource Name (ARN) of a domain. See IAM identifiers in the AWS Identity and Access Management User Guide for more information.
" - }, - "Created":{ - "shape":"Boolean", - "documentation":"The domain creation status. True if the creation of a domain is complete. False if domain creation is still in progress.
The domain deletion status. True if a delete request has been received for the domain but resource cleanup is still in progress. False if the domain has not been deleted. Once domain deletion is complete, the status of the domain is no longer returned.
The domain endpoint that you use to submit index and search requests.
" - }, - "Endpoints":{ - "shape":"EndpointsMap", - "documentation":"Map containing the domain endpoints used to submit index and search requests. Example key, value: 'vpc','vpc-endpoint-h2dsd34efgyghrtguk5gt6j2foh4.us-east-1.es.amazonaws.com'.
The status of the domain configuration. True if Amazon OpenSearch Service is processing configuration changes. False if the configuration is active.
The status of a domain version upgrade. True if Amazon OpenSearch Service is undergoing a version upgrade. False if the configuration is active.
The type and number of instances in the domain.
" - }, - "EBSOptions":{ - "shape":"EBSOptions", - "documentation":"The EBSOptions for the specified domain.
IAM access policy as a JSON-formatted string.
" - }, - "SnapshotOptions":{ - "shape":"SnapshotOptions", - "documentation":"The status of the SnapshotOptions.
The VPCOptions for the specified domain. For more information, see Launching your Amazon OpenSearch Service domains using a VPC.
The CognitoOptions for the specified domain. For more information, see Configuring Amazon Cognito authentication for OpenSearch Dashboards.
The status of the EncryptionAtRestOptions.
The status of the NodeToNodeEncryptionOptions.
The status of the AdvancedOptions.
Log publishing options for the given domain.
" - }, - "ServiceSoftwareOptions":{ - "shape":"ServiceSoftwareOptions", - "documentation":"The current status of the domain's service software.
" - }, - "DomainEndpointOptions":{ - "shape":"DomainEndpointOptions", - "documentation":"The current status of the domain's endpoint options.
" - }, - "AdvancedSecurityOptions":{ - "shape":"AdvancedSecurityOptions", - "documentation":"The current status of the domain's advanced security options.
" - }, - "AutoTuneOptions":{ - "shape":"AutoTuneOptionsOutput", - "documentation":"The current status of the domain's Auto-Tune options.
" - } - }, - "documentation":"The current status of a domain.
" - }, - "DomainStatusList":{ - "type":"list", - "member":{"shape":"DomainStatus"}, - "documentation":"A list that contains the status of each requested domain.
" - }, - "Double":{"type":"double"}, - "Duration":{ - "type":"structure", - "members":{ - "Value":{ - "shape":"DurationValue", - "documentation":"Integer to specify the value of a maintenance schedule duration. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "Unit":{ - "shape":"TimeUnit", - "documentation":"The unit of a maintenance schedule duration. Valid value is HOURS. See Auto-Tune for Amazon OpenSearch Service for more information.
" - } - }, - "documentation":"The maintenance schedule duration: duration value and duration unit. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "DurationValue":{ - "type":"long", - "documentation":"Integer to specify the value of a maintenance schedule duration. See Auto-Tune for Amazon OpenSearch Service for more information.
", - "max":24, - "min":1 - }, - "EBSOptions":{ - "type":"structure", - "members":{ - "EBSEnabled":{ - "shape":"Boolean", - "documentation":"Whether EBS-based storage is enabled.
" - }, - "VolumeType":{ - "shape":"VolumeType", - "documentation":"The volume type for EBS-based storage.
" - }, - "VolumeSize":{ - "shape":"IntegerClass", - "documentation":"Integer to specify the size of an EBS volume.
" - }, - "Iops":{ - "shape":"IntegerClass", - "documentation":"The IOPD for a Provisioned IOPS EBS volume (SSD).
" - } - }, - "documentation":"Options to enable, disable, and specify the properties of EBS storage volumes.
" - }, - "EBSOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"EBSOptions", - "documentation":"The EBS options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the EBS options for the specified domain.
" - } - }, - "documentation":"Status of the EBS options for the specified domain.
" - }, - "EncryptionAtRestOptions":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"The option to enable encryption at rest.
" - }, - "KmsKeyId":{ - "shape":"KmsKeyId", - "documentation":"The KMS key ID for encryption at rest options.
" - } - }, - "documentation":"Specifies encryption at rest options.
" - }, - "EncryptionAtRestOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"EncryptionAtRestOptions", - "documentation":"The Encryption At Rest options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the Encryption At Rest options for the specified domain.
" - } - }, - "documentation":"Status of the encryption At Rest options for the specified domain.
" - }, - "EndpointsMap":{ - "type":"map", - "key":{"shape":"String"}, - "value":{"shape":"ServiceUrl"} - }, - "ErrorDetails":{ - "type":"structure", - "members":{ - "ErrorType":{"shape":"ErrorType"}, - "ErrorMessage":{"shape":"ErrorMessage"} - } - }, - "ErrorMessage":{"type":"string"}, - "ErrorType":{"type":"string"}, - "Filter":{ - "type":"structure", - "members":{ - "Name":{ - "shape":"NonEmptyString", - "documentation":"The name of the filter.
" - }, - "Values":{ - "shape":"ValueStringList", - "documentation":"Contains one or more values for the filter.
" - } - }, - "documentation":"A filter used to limit results when describing inbound or outbound cross-cluster connections. Multiple values can be specified per filter. A cross-cluster connection must match at least one of the specified values for it to be returned from an operation.
" - }, - "FilterList":{ - "type":"list", - "member":{"shape":"Filter"} - }, - "GUID":{ - "type":"string", - "max":36, - "min":36, - "pattern":"\\p{XDigit}{8}-\\p{XDigit}{4}-\\p{XDigit}{4}-\\p{XDigit}{4}-\\p{XDigit}{12}" - }, - "GetCompatibleVersionsRequest":{ - "type":"structure", - "members":{ - "DomainName":{ - "shape":"DomainName", - "location":"querystring", - "locationName":"domainName" - } - }, - "documentation":" Container for the request parameters to GetCompatibleVersions operation.
A map of compatible OpenSearch versions returned as part of the GetCompatibleVersions operation.
Container for the response returned by the GetCompatibleVersions operation.
Returns an audit history of package versions.
", - "location":"uri", - "locationName":"PackageID" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Limits results to a maximum number of package versions.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Used for pagination. Only necessary if a previous API call includes a non-null NextToken value. If provided, returns results for the next page.
", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":" Container for the request parameters to the GetPackageVersionHistory operation.
List of PackageVersionHistory objects.
Container for response returned by GetPackageVersionHistory operation.
Container for the request parameters to the GetUpgradeHistory operation.
A list of UpgradeHistory objects corresponding to each upgrade or upgrade eligibility check performed on a domain returned as part of the GetUpgradeHistoryResponse object.
Pagination token that needs to be supplied to the next call to get the next page of results.
" - } - }, - "documentation":" Container for the response returned by the GetUpgradeHistory operation.
Container for the request parameters to the GetUpgradeStatus operation.
One of three steps an upgrade or upgrade eligibility check goes through:
- PreUpgradeCheck
- Snapshot
- Upgrade
One of four statuses an upgrade have, returned as part of the GetUpgradeStatusResponse object. The status can take one of the following values:
- In Progress
- Succeeded
- Succeeded with Issues
- Failed
A string that briefly describes the update.
" - } - }, - "documentation":" Container for the response returned by the GetUpgradeStatus operation.
The AWSDomainInformation for the local OpenSearch domain.
The AWSDomainInformation for the remote OpenSearch domain.
The connection ID for the inbound cross-cluster connection.
" - }, - "ConnectionStatus":{ - "shape":"InboundConnectionStatus", - "documentation":"The InboundConnectionStatus for the outbound connection.
Details of an inbound connection.
" - }, - "InboundConnectionStatus":{ - "type":"structure", - "members":{ - "StatusCode":{ - "shape":"InboundConnectionStatusCode", - "documentation":"The state code for the inbound connection. Can be one of the following:
- PENDING_ACCEPTANCE: Inbound connection is not yet accepted by the remote domain owner.
- APPROVED: Inbound connection is pending acceptance by the remote domain owner.
- PROVISIONING: Inbound connection provisioning is in progress.
- ACTIVE: Inbound connection is active and ready to use.
- REJECTING: Inbound connection rejection is in process.
- REJECTED: Inbound connection is rejected.
- DELETING: Inbound connection deletion is in progress.
- DELETED: Inbound connection is deleted and can no longer be used.
Verbose information for the inbound connection status.
" - } - }, - "documentation":"The connection status of an inbound cross-cluster connection.
" - }, - "InboundConnectionStatusCode":{ - "type":"string", - "enum":[ - "PENDING_ACCEPTANCE", - "APPROVED", - "PROVISIONING", - "ACTIVE", - "REJECTING", - "REJECTED", - "DELETING", - "DELETED" - ] - }, - "InboundConnections":{ - "type":"list", - "member":{"shape":"InboundConnection"} - }, - "InstanceCount":{ - "type":"integer", - "documentation":"The number of EC2 instances in the domain.
", - "min":1 - }, - "InstanceCountLimits":{ - "type":"structure", - "members":{ - "MinimumInstanceCount":{"shape":"MinimumInstanceCount"}, - "MaximumInstanceCount":{"shape":"MaximumInstanceCount"} - }, - "documentation":"InstanceCountLimits represents the limits on the number of instances that can be created in Amazon OpenSearch Service for a given InstanceType.
" - }, - "InstanceLimits":{ - "type":"structure", - "members":{ - "InstanceCountLimits":{"shape":"InstanceCountLimits"} - }, - "documentation":"InstanceLimits represents the list of instance-related attributes that are available for a given InstanceType.
" - }, - "InstanceRole":{"type":"string"}, - "InstanceRoleList":{ - "type":"list", - "member":{"shape":"InstanceRole"} - }, - "InstanceTypeDetails":{ - "type":"structure", - "members":{ - "InstanceType":{"shape":"OpenSearchPartitionInstanceType"}, - "EncryptionEnabled":{"shape":"Boolean"}, - "CognitoEnabled":{"shape":"Boolean"}, - "AppLogsEnabled":{"shape":"Boolean"}, - "AdvancedSecurityEnabled":{"shape":"Boolean"}, - "WarmEnabled":{"shape":"Boolean"}, - "InstanceRole":{"shape":"InstanceRoleList"} - } - }, - "InstanceTypeDetailsList":{ - "type":"list", - "member":{"shape":"InstanceTypeDetails"} - }, - "Integer":{"type":"integer"}, - "IntegerClass":{"type":"integer"}, - "Issue":{"type":"string"}, - "Issues":{ - "type":"list", - "member":{"shape":"Issue"} - }, - "KmsKeyId":{ - "type":"string", - "max":500, - "min":1, - "pattern":".*" - }, - "LastUpdated":{"type":"timestamp"}, - "LimitName":{"type":"string"}, - "LimitValue":{"type":"string"}, - "LimitValueList":{ - "type":"list", - "member":{"shape":"LimitValue"} - }, - "Limits":{ - "type":"structure", - "members":{ - "StorageTypes":{ - "shape":"StorageTypeList", - "documentation":"Storage-related types and attributes that are available for a given InstanceType.
" - }, - "InstanceLimits":{"shape":"InstanceLimits"}, - "AdditionalLimits":{ - "shape":"AdditionalLimitList", - "documentation":" List of additional limits that are specific to a given InstanceType and for each of its InstanceRole .
Limits for a given InstanceType and for each of its roles.
Limits contains the following: StorageTypes , InstanceLimits , and AdditionalLimits
The role of a given instance and all applicable limits. The role performed by a given OpenSearch instance can be one of the following:
- data: If the given InstanceType is used as a data node
- master: If the given InstanceType is used as a master node
- ultra_warm: If the given InstanceType is used as a warm node
List of domain names.
" - } - }, - "documentation":"The result of a ListDomainNames operation. Contains the names of all domains owned by this account.
The package for which to list associated domains.
", - "location":"uri", - "locationName":"PackageID" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Limits the results to a maximum number of domains.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Used for pagination. Only necessary if a previous API call includes a non-null NextToken value. If provided, returns results for the next page.
", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":" Container for the request parameters to the ListDomainsForPackage operation.
List of DomainPackageDetails objects.
Container for the response parameters to the ListDomainsForPackage operation.
The name of the domain for which you want to list associated packages.
", - "location":"uri", - "locationName":"DomainName" - }, - "MaxResults":{ - "shape":"MaxResults", - "documentation":"Limits results to a maximum number of packages.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "documentation":"Used for pagination. Only necessary if a previous API call includes a non-null NextToken value. If provided, returns results for the next page.
", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":" Container for the request parameters to the ListPackagesForDomain operation.
List of DomainPackageDetails objects.
Pagination token to supply to the next call to get the next page of results.
" - } - }, - "documentation":" Container for the response parameters to the ListPackagesForDomain operation.
Specify the ARN of the domain that the tags you want to view are attached to.
Container for the parameters to the ListTags operation. Specify the ARN of the domain that the tags you want to view are attached to.
List of Tag for the requested domain.
The result of a ListTags operation. Contains tags for all requested domains.
Set this value to limit the number of results returned. Value must be greater than 10 or it won't be honored.
", - "location":"querystring", - "locationName":"maxResults" - }, - "NextToken":{ - "shape":"NextToken", - "location":"querystring", - "locationName":"nextToken" - } - }, - "documentation":" Container for the parameters to the ListVersions operation.
Use MaxResults to control the maximum number of results to retrieve in a single call.
Use NextToken in response to retrieve more results. If the received response does not contain a NextToken, there are no more results to retrieve.
Container for the parameters for response received from the ListVersions operation.
Whether the given log publishing option is enabled or not.
" - } - }, - "documentation":"Log Publishing option that is set for a given domain.
Attributes and their details:
- CloudWatchLogsLogGroupArn: ARN of the Cloudwatch log group to publish logs to.
- Enabled: Whether the log publishing for a given log type is enabled or not.
The log publishing options configured for the domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the log publishing options for the domain. See OptionStatus for the status information that's included.
The configured log publishing options for the domain and their current status.
" - }, - "LogType":{ - "type":"string", - "documentation":"Type of log file. Can be one of the following:
- INDEX_SLOW_LOGS: Index slow logs contain insert requests that took more time than configured index query log threshold to execute.
- SEARCH_SLOW_LOGS: Search slow logs contain search queries that took more time than configured search query log threshold to execute.
- ES_APPLICATION_LOGS: OpenSearch application logs contain information about errors and warnings raised during the operation of the service and can be useful for troubleshooting.
- AUDIT_LOGS: Audit logs contain records of user requests for access from the domain.
ARN for the master user (if IAM is enabled).
" - }, - "MasterUserName":{ - "shape":"Username", - "documentation":"The master user's username, which is stored in the Amazon OpenSearch Service domain's internal database.
" - }, - "MasterUserPassword":{ - "shape":"Password", - "documentation":"The master user's password, which is stored in the Amazon OpenSearch Service domain's internal database.
" - } - }, - "documentation":"Credentials for the master user: username and password, ARN, or both.
" - }, - "MaxResults":{ - "type":"integer", - "documentation":"Set this value to limit the number of results returned.
", - "max":100 - }, - "MaximumInstanceCount":{ - "type":"integer", - "documentation":"Maximum number of instances that can be instantiated for a given InstanceType.
" - }, - "MinimumInstanceCount":{ - "type":"integer", - "documentation":"Minimum number of instances that can be instantiated for a given InstanceType.
" - }, - "NextToken":{ - "type":"string", - "documentation":"Paginated APIs accept the NextToken input to return the next page of results and provide a NextToken output in the response, which you can use to retrieve more results.
" - }, - "NodeToNodeEncryptionOptions":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"True to enable node-to-node encryption.
" - } - }, - "documentation":"The node-to-node encryption options.
" - }, - "NodeToNodeEncryptionOptionsStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"NodeToNodeEncryptionOptions", - "documentation":"The node-to-node encryption options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the node-to-node encryption options for the specified domain.
" - } - }, - "documentation":"Status of the node-to-node encryption options for the specified domain.
" - }, - "NonEmptyString":{ - "type":"string", - "max":100, - "min":1, - "pattern":"[a-zA-Z0-9\\-\\_\\.]+" - }, - "OpenSearchPartitionInstanceType":{ - "type":"string", - "enum":[ - "m3.medium.search", - "m3.large.search", - "m3.xlarge.search", - "m3.2xlarge.search", - "m4.large.search", - "m4.xlarge.search", - "m4.2xlarge.search", - "m4.4xlarge.search", - "m4.10xlarge.search", - "m5.large.search", - "m5.xlarge.search", - "m5.2xlarge.search", - "m5.4xlarge.search", - "m5.12xlarge.search", - "m5.24xlarge.search", - "r5.large.search", - "r5.xlarge.search", - "r5.2xlarge.search", - "r5.4xlarge.search", - "r5.12xlarge.search", - "r5.24xlarge.search", - "c5.large.search", - "c5.xlarge.search", - "c5.2xlarge.search", - "c5.4xlarge.search", - "c5.9xlarge.search", - "c5.18xlarge.search", - "t3.nano.search", - "t3.micro.search", - "t3.small.search", - "t3.medium.search", - "t3.large.search", - "t3.xlarge.search", - "t3.2xlarge.search", - "ultrawarm1.medium.search", - "ultrawarm1.large.search", - "ultrawarm1.xlarge.search", - "t2.micro.search", - "t2.small.search", - "t2.medium.search", - "r3.large.search", - "r3.xlarge.search", - "r3.2xlarge.search", - "r3.4xlarge.search", - "r3.8xlarge.search", - "i2.xlarge.search", - "i2.2xlarge.search", - "d2.xlarge.search", - "d2.2xlarge.search", - "d2.4xlarge.search", - "d2.8xlarge.search", - "c4.large.search", - "c4.xlarge.search", - "c4.2xlarge.search", - "c4.4xlarge.search", - "c4.8xlarge.search", - "r4.large.search", - "r4.xlarge.search", - "r4.2xlarge.search", - "r4.4xlarge.search", - "r4.8xlarge.search", - "r4.16xlarge.search", - "i3.large.search", - "i3.xlarge.search", - "i3.2xlarge.search", - "i3.4xlarge.search", - "i3.8xlarge.search", - "i3.16xlarge.search", - "r6g.large.search", - "r6g.xlarge.search", - "r6g.2xlarge.search", - "r6g.4xlarge.search", - "r6g.8xlarge.search", - "r6g.12xlarge.search", - "m6g.large.search", - "m6g.xlarge.search", - "m6g.2xlarge.search", - "m6g.4xlarge.search", - "m6g.8xlarge.search", - "m6g.12xlarge.search", - "c6g.large.search", - "c6g.xlarge.search", - "c6g.2xlarge.search", - "c6g.4xlarge.search", - "c6g.8xlarge.search", - "c6g.12xlarge.search", - "r6gd.large.search", - "r6gd.xlarge.search", - "r6gd.2xlarge.search", - "r6gd.4xlarge.search", - "r6gd.8xlarge.search", - "r6gd.12xlarge.search", - "r6gd.16xlarge.search", - "t4g.small.search", - "t4g.medium.search" - ] - }, - "OpenSearchWarmPartitionInstanceType":{ - "type":"string", - "enum":[ - "ultrawarm1.medium.search", - "ultrawarm1.large.search", - "ultrawarm1.xlarge.search" - ] - }, - "OptionState":{ - "type":"string", - "documentation":"The state of a requested change. One of the following:
- Processing: The request change is still in progress.
- Active: The request change is processed and deployed to the domain.
The timestamp of when the entity was created.
" - }, - "UpdateDate":{ - "shape":"UpdateTimestamp", - "documentation":"The timestamp of the last time the entity was updated.
" - }, - "UpdateVersion":{ - "shape":"UIntValue", - "documentation":"The latest version of the entity.
" - }, - "State":{ - "shape":"OptionState", - "documentation":"Provides the OptionState for the domain.
Indicates whether the domain is being deleted.
" - } - }, - "documentation":"Provides the current status of the entity.
" - }, - "OutboundConnection":{ - "type":"structure", - "members":{ - "LocalDomainInfo":{ - "shape":"DomainInformationContainer", - "documentation":"The DomainInformation for the local OpenSearch domain.
The DomainInformation for the remote OpenSearch domain.
The connection ID for the outbound cross-cluster connection.
" - }, - "ConnectionAlias":{ - "shape":"ConnectionAlias", - "documentation":"The connection alias for the outbound cross-cluster connection.
" - }, - "ConnectionStatus":{ - "shape":"OutboundConnectionStatus", - "documentation":"The OutboundConnectionStatus for the outbound connection.
Specifies details about an outbound connection.
" - }, - "OutboundConnectionStatus":{ - "type":"structure", - "members":{ - "StatusCode":{ - "shape":"OutboundConnectionStatusCode", - "documentation":"The state code for the outbound connection. Can be one of the following:
- VALIDATING: The outbound connection request is being validated.
- VALIDATION_FAILED: Validation failed for the connection request.
- PENDING_ACCEPTANCE: Outbound connection request is validated and is not yet accepted by the remote domain owner.
- APPROVED: Outbound connection has been approved by the remote domain owner for getting provisioned.
- PROVISIONING: Outbound connection request is in process.
- ACTIVE: Outbound connection is active and ready to use.
- REJECTING: Outbound connection rejection by remote domain owner is in progress.
- REJECTED: Outbound connection request is rejected by remote domain owner.
- DELETING: Outbound connection deletion is in progress.
- DELETED: Outbound connection is deleted and can no longer be used.
Verbose information for the outbound connection status.
" - } - }, - "documentation":"The connection status of an outbound cross-cluster connection.
" - }, - "OutboundConnectionStatusCode":{ - "type":"string", - "enum":[ - "VALIDATING", - "VALIDATION_FAILED", - "PENDING_ACCEPTANCE", - "APPROVED", - "PROVISIONING", - "ACTIVE", - "REJECTING", - "REJECTED", - "DELETING", - "DELETED" - ] - }, - "OutboundConnections":{ - "type":"list", - "member":{"shape":"OutboundConnection"} - }, - "OwnerId":{ - "type":"string", - "max":12, - "min":12, - "pattern":"[0-9]+" - }, - "PackageDescription":{ - "type":"string", - "max":1024 - }, - "PackageDetails":{ - "type":"structure", - "members":{ - "PackageID":{ - "shape":"PackageID", - "documentation":"Internal ID of the package.
" - }, - "PackageName":{ - "shape":"PackageName", - "documentation":"User-specified name of the package.
" - }, - "PackageType":{ - "shape":"PackageType", - "documentation":"Currently supports only TXT-DICTIONARY.
" - }, - "PackageDescription":{ - "shape":"PackageDescription", - "documentation":"User-specified description of the package.
" - }, - "PackageStatus":{ - "shape":"PackageStatus", - "documentation":"Current state of the package. Values are COPYING, COPY_FAILED, AVAILABLE, DELETING, and DELETE_FAILED.
" - }, - "CreatedAt":{ - "shape":"CreatedAt", - "documentation":"The timestamp of when the package was created.
" - }, - "LastUpdatedAt":{"shape":"LastUpdated"}, - "AvailablePackageVersion":{"shape":"PackageVersion"}, - "ErrorDetails":{ - "shape":"ErrorDetails", - "documentation":"Additional information if the package is in an error state. Null otherwise.
" - } - }, - "documentation":"Basic information about a package.
" - }, - "PackageDetailsList":{ - "type":"list", - "member":{"shape":"PackageDetails"} - }, - "PackageID":{"type":"string"}, - "PackageName":{ - "type":"string", - "max":28, - "min":3, - "pattern":"[a-z][a-z0-9\\-]+" - }, - "PackageSource":{ - "type":"structure", - "members":{ - "S3BucketName":{ - "shape":"S3BucketName", - "documentation":"The name of the Amazon S3 bucket containing the package.
" - }, - "S3Key":{ - "shape":"S3Key", - "documentation":"Key (file name) of the package.
" - } - }, - "documentation":"The Amazon S3 location for importing the package specified as S3BucketName and S3Key
The package version.
" - }, - "CommitMessage":{ - "shape":"CommitMessage", - "documentation":"A message associated with the package version.
" - }, - "CreatedAt":{ - "shape":"CreatedAt", - "documentation":"The timestamp of when the package was created.
" - } - }, - "documentation":"Details of a package version.
" - }, - "PackageVersionHistoryList":{ - "type":"list", - "member":{"shape":"PackageVersionHistory"} - }, - "Password":{ - "type":"string", - "max":128, - "min":8, - "pattern":".*", - "sensitive":true - }, - "PolicyDocument":{ - "type":"string", - "documentation":"Access policy rules for a domain service endpoints. For more information, see Configuring access policies . The maximum size of a policy document is 100 KB.
", - "max":102400, - "min":0, - "pattern":".*" - }, - "PurchaseReservedInstanceOfferingRequest":{ - "type":"structure", - "required":[ - "ReservedInstanceOfferingId", - "ReservationName" - ], - "members":{ - "ReservedInstanceOfferingId":{ - "shape":"GUID", - "documentation":"The ID of the reserved OpenSearch instance offering to purchase.
" - }, - "ReservationName":{ - "shape":"ReservationToken", - "documentation":"A customer-specified identifier to track this reservation.
" - }, - "InstanceCount":{ - "shape":"InstanceCount", - "documentation":"The number of OpenSearch instances to reserve.
" - } - }, - "documentation":"Container for parameters to PurchaseReservedInstanceOffering
Details of the reserved OpenSearch instance which was purchased.
" - }, - "ReservationName":{ - "shape":"ReservationToken", - "documentation":"The customer-specified identifier used to track this reservation.
" - } - }, - "documentation":"Represents the output of a PurchaseReservedInstanceOffering operation.
The monetary amount of the recurring charge.
" - }, - "RecurringChargeFrequency":{ - "shape":"String", - "documentation":"The frequency of the recurring charge.
" - } - }, - "documentation":"Contains the specific price and frequency of a recurring charges for a reserved OpenSearch instance, or for a reserved OpenSearch instance offering.
" - }, - "RecurringChargeList":{ - "type":"list", - "member":{"shape":"RecurringCharge"} - }, - "ReferencePath":{"type":"string"}, - "Region":{ - "type":"string", - "max":30, - "min":5, - "pattern":"[a-z][a-z0-9\\-]+" - }, - "RejectInboundConnectionRequest":{ - "type":"structure", - "required":["ConnectionId"], - "members":{ - "ConnectionId":{ - "shape":"ConnectionId", - "documentation":"The ID of the inbound connection to reject.
", - "location":"uri", - "locationName":"ConnectionId" - } - }, - "documentation":"Container for the parameters to the RejectInboundConnection operation.
The InboundConnection of the rejected inbound connection.
The result of a RejectInboundConnection operation. Contains details about the rejected inbound connection.
The ARN of the domain from which you want to delete the specified tags.
The TagKey list you want to remove from the domain.
Container for the parameters to the RemoveTags operation. Specify the ARN for the domain from which you want to remove the specified TagKey.
The customer-specified identifier to track this reservation.
" - }, - "ReservedInstanceId":{ - "shape":"GUID", - "documentation":"The unique identifier for the reservation.
" - }, - "BillingSubscriptionId":{"shape":"Long"}, - "ReservedInstanceOfferingId":{ - "shape":"String", - "documentation":"The offering identifier.
" - }, - "InstanceType":{ - "shape":"OpenSearchPartitionInstanceType", - "documentation":"The OpenSearch instance type offered by the reserved instance offering.
" - }, - "StartTime":{ - "shape":"UpdateTimestamp", - "documentation":"The time the reservation started.
" - }, - "Duration":{ - "shape":"Integer", - "documentation":"The duration, in seconds, for which the OpenSearch instance is reserved.
" - }, - "FixedPrice":{ - "shape":"Double", - "documentation":"The upfront fixed charge you will paid to purchase the specific reserved OpenSearch instance offering.
" - }, - "UsagePrice":{ - "shape":"Double", - "documentation":"The rate you are charged for each hour for the domain that is using this reserved instance.
" - }, - "CurrencyCode":{ - "shape":"String", - "documentation":"The currency code for the reserved OpenSearch instance offering.
" - }, - "InstanceCount":{ - "shape":"Integer", - "documentation":"The number of OpenSearch instances that have been reserved.
" - }, - "State":{ - "shape":"String", - "documentation":"The state of the reserved OpenSearch instance.
" - }, - "PaymentOption":{ - "shape":"ReservedInstancePaymentOption", - "documentation":"The payment option as defined in the reserved OpenSearch instance offering.
" - }, - "RecurringCharges":{ - "shape":"RecurringChargeList", - "documentation":"The charge to your account regardless of whether you are creating any domains using the instance offering.
" - } - }, - "documentation":"Details of a reserved OpenSearch instance.
" - }, - "ReservedInstanceList":{ - "type":"list", - "member":{"shape":"ReservedInstance"} - }, - "ReservedInstanceOffering":{ - "type":"structure", - "members":{ - "ReservedInstanceOfferingId":{ - "shape":"GUID", - "documentation":"The OpenSearch reserved instance offering identifier.
" - }, - "InstanceType":{ - "shape":"OpenSearchPartitionInstanceType", - "documentation":"The OpenSearch instance type offered by the reserved instance offering.
" - }, - "Duration":{ - "shape":"Integer", - "documentation":"The duration, in seconds, for which the offering will reserve the OpenSearch instance.
" - }, - "FixedPrice":{ - "shape":"Double", - "documentation":"The upfront fixed charge you will pay to purchase the specific reserved OpenSearch instance offering.
" - }, - "UsagePrice":{ - "shape":"Double", - "documentation":"The rate you are charged for each hour the domain that is using the offering is running.
" - }, - "CurrencyCode":{ - "shape":"String", - "documentation":"The currency code for the reserved OpenSearch instance offering.
" - }, - "PaymentOption":{ - "shape":"ReservedInstancePaymentOption", - "documentation":"Payment option for the reserved OpenSearch instance offering
" - }, - "RecurringCharges":{ - "shape":"RecurringChargeList", - "documentation":"The charge to your account regardless of whether you are creating any domains using the instance offering.
" - } - }, - "documentation":"Details of a reserved OpenSearch instance offering.
" - }, - "ReservedInstanceOfferingList":{ - "type":"list", - "member":{"shape":"ReservedInstanceOffering"} - }, - "ReservedInstancePaymentOption":{ - "type":"string", - "enum":[ - "ALL_UPFRONT", - "PARTIAL_UPFRONT", - "NO_UPFRONT" - ] - }, - "RoleArn":{ - "type":"string", - "max":2048, - "min":20, - "pattern":"arn:(aws|aws\\-cn|aws\\-us\\-gov|aws\\-iso|aws\\-iso\\-b):iam::[0-9]+:role\\/.*" - }, - "RollbackOnDisable":{ - "type":"string", - "documentation":"The rollback state while disabling Auto-Tune for the domain. Valid values are NO_ROLLBACK and DEFAULT_ROLLBACK.
", - "enum":[ - "NO_ROLLBACK", - "DEFAULT_ROLLBACK" - ] - }, - "S3BucketName":{ - "type":"string", - "max":63, - "min":3 - }, - "S3Key":{ - "type":"string", - "max":1024, - "min":1 - }, - "SAMLEntityId":{ - "type":"string", - "max":512, - "min":8 - }, - "SAMLIdp":{ - "type":"structure", - "required":[ - "MetadataContent", - "EntityId" - ], - "members":{ - "MetadataContent":{ - "shape":"SAMLMetadata", - "documentation":"The metadata of the SAML application in XML format.
" - }, - "EntityId":{ - "shape":"SAMLEntityId", - "documentation":"The unique entity ID of the application in SAML identity provider.
" - } - }, - "documentation":"The SAML identity povider's information.
" - }, - "SAMLMetadata":{ - "type":"string", - "max":1048576, - "min":1 - }, - "SAMLOptionsInput":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"True if SAML is enabled.
" - }, - "Idp":{ - "shape":"SAMLIdp", - "documentation":"The SAML Identity Provider's information.
" - }, - "MasterUserName":{ - "shape":"Username", - "documentation":"The SAML master username, which is stored in the Amazon OpenSearch Service domain's internal database.
" - }, - "MasterBackendRole":{ - "shape":"BackendRole", - "documentation":"The backend role that the SAML master user is mapped to.
" - }, - "SubjectKey":{ - "shape":"String", - "documentation":"Element of the SAML assertion to use for username. Default is NameID.
" - }, - "RolesKey":{ - "shape":"String", - "documentation":"Element of the SAML assertion to use for backend roles. Default is roles.
" - }, - "SessionTimeoutMinutes":{ - "shape":"IntegerClass", - "documentation":"The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
" - } - }, - "documentation":"The SAML application configuration for the domain.
" - }, - "SAMLOptionsOutput":{ - "type":"structure", - "members":{ - "Enabled":{ - "shape":"Boolean", - "documentation":"True if SAML is enabled.
" - }, - "Idp":{ - "shape":"SAMLIdp", - "documentation":"Describes the SAML identity provider's information.
" - }, - "SubjectKey":{ - "shape":"String", - "documentation":"The key used for matching the SAML subject attribute.
" - }, - "RolesKey":{ - "shape":"String", - "documentation":"The key used for matching the SAML roles attribute.
" - }, - "SessionTimeoutMinutes":{ - "shape":"IntegerClass", - "documentation":"The duration, in minutes, after which a user session becomes inactive.
" - } - }, - "documentation":"Describes the SAML application configured for the domain.
" - }, - "ScheduledAutoTuneActionType":{ - "type":"string", - "documentation":"The Auto-Tune action type. Valid values are JVM_HEAP_SIZE_TUNING, and JVM_YOUNG_GEN_TUNING.
", - "enum":[ - "JVM_HEAP_SIZE_TUNING", - "JVM_YOUNG_GEN_TUNING" - ] - }, - "ScheduledAutoTuneDescription":{ - "type":"string", - "documentation":"The Auto-Tune action description.
" - }, - "ScheduledAutoTuneDetails":{ - "type":"structure", - "members":{ - "Date":{ - "shape":"AutoTuneDate", - "documentation":"The timestamp of the Auto-Tune action scheduled for the domain.
" - }, - "ActionType":{ - "shape":"ScheduledAutoTuneActionType", - "documentation":"The Auto-Tune action type. Valid values are JVM_HEAP_SIZE_TUNING and JVM_YOUNG_GEN_TUNING.
" - }, - "Action":{ - "shape":"ScheduledAutoTuneDescription", - "documentation":"The Auto-Tune action description.
" - }, - "Severity":{ - "shape":"ScheduledAutoTuneSeverityType", - "documentation":"The Auto-Tune action severity. Valid values are LOW, MEDIUM, and HIGH.
" - } - }, - "documentation":"Specifies details about the scheduled Auto-Tune action. See Auto-Tune for Amazon OpenSearch Service for more information.
" - }, - "ScheduledAutoTuneSeverityType":{ - "type":"string", - "documentation":"The Auto-Tune action severity. Valid values are LOW, MEDIUM, and HIGH.
", - "enum":[ - "LOW", - "MEDIUM", - "HIGH" - ] - }, - "ServiceSoftwareOptions":{ - "type":"structure", - "members":{ - "CurrentVersion":{ - "shape":"String", - "documentation":"The current service software version present on the domain.
" - }, - "NewVersion":{ - "shape":"String", - "documentation":"The new service software version if one is available.
" - }, - "UpdateAvailable":{ - "shape":"Boolean", - "documentation":" True if you're able to update your service software version. False if you can't update your service software version.
True if you're able to cancel your service software version update. False if you can't cancel your service software update.
The status of your service software update. This field can take the following values: ELIGIBLE, PENDING_UPDATE, IN_PROGRESS, COMPLETED, and NOT_ELIGIBLE.
The description of the UpdateStatus.
The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
" - }, - "OptionalDeployment":{ - "shape":"Boolean", - "documentation":" True if a service software is never automatically updated. False if a service software is automatically updated after AutomatedUpdateDate.
The current options of an domain service software options.
" - }, - "ServiceUrl":{ - "type":"string", - "documentation":"The endpoint to which service requests are submitted. For example, search-imdb-movies-oopcnjfn6ugofer3zx5iadxxca.eu-west-1.es.amazonaws.com or doc-imdb-movies-oopcnjfn6ugofer3zx5iadxxca.eu-west-1.es.amazonaws.com.
The time, in UTC format, when the service takes a daily automated snapshot of the specified domain. Default is 0 hours.
The time, in UTC format, when the service takes a daily automated snapshot of the specified domain. Default is 0 hours.
The daily snapshot options specified for the domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of a daily automated snapshot.
" - } - }, - "documentation":"Status of a daily automated snapshot.
" - }, - "StartAt":{"type":"timestamp"}, - "StartServiceSoftwareUpdateRequest":{ - "type":"structure", - "required":["DomainName"], - "members":{ - "DomainName":{ - "shape":"DomainName", - "documentation":"The name of the domain that you want to update to the latest service software.
" - } - }, - "documentation":"Container for the parameters to the StartServiceSoftwareUpdate operation. Specifies the name of the domain to schedule a service software update for.
The current status of the OpenSearch service software update.
" - } - }, - "documentation":"The result of a StartServiceSoftwareUpdate operation. Contains the status of the update.
Sub-type of the given storage type. List of available sub-storage options: \"instance\" storageType has no storageSubType. \"ebs\" storageType has the following valid storageSubTypes:
- standard
- gp2
- io1
VolumeType for more information regarding each EBS storage option. "
- },
- "StorageType":{
- "type":"structure",
- "members":{
- "StorageTypeName":{"shape":"StorageTypeName"},
- "StorageSubTypeName":{"shape":"StorageSubTypeName"},
- "StorageTypeLimits":{
- "shape":"StorageTypeLimitList",
- "documentation":"Limits that are applicable for the given storage type.
" - } - }, - "documentation":"StorageTypes represents the list of storage-related types and their attributes that are available for a given InstanceType.
" - }, - "StorageTypeLimit":{ - "type":"structure", - "members":{ - "LimitName":{ - "shape":"LimitName", - "documentation":" Name of storage limits that are applicable for the given storage type. If StorageType is \"ebs\", the following storage options are applicable:
- MinimumVolumeSize Minimum amount of volume size that is applicable for the given storage type. Can be empty if not applicable.
- MaximumVolumeSize Maximum amount of volume size that is applicable for the given storage type. Can be empty if not applicable.
- MaximumIops Maximum amount of Iops that is applicable for given the storage type. Can be empty if not applicable.
- MinimumIops Minimum amount of Iops that is applicable for given the storage type. Can be empty if not applicable.
Values for the StorageTypeLimit$LimitName .
Limits that are applicable for the given storage type.
" - }, - "StorageTypeLimitList":{ - "type":"list", - "member":{"shape":"StorageTypeLimit"} - }, - "StorageTypeList":{ - "type":"list", - "member":{"shape":"StorageType"} - }, - "StorageTypeName":{ - "type":"string", - "documentation":"Type of storage. List of available storage options:
- instance Built-in storage available for the instance
- ebs Elastic block storage attached to the instance
The TagKey, the name of the tag. Tag keys must be unique for the domain to which they are attached.
The TagValue, the value assigned to the corresponding tag key. Tag values can be null and don't have to be unique in a tag set. For example, you can have a key value pair in a tag set of project : Trinity and cost-center : Trinity
A key value pair for a resource tag.
" - }, - "TagKey":{ - "type":"string", - "documentation":"A string of length from 1 to 128 characters that specifies the key for a tag. Tag keys must be unique for the domain to which they're attached.
", - "max":128, - "min":1, - "pattern":".*" - }, - "TagList":{ - "type":"list", - "member":{"shape":"Tag"}, - "documentation":"A list of Tag.
A string of length from 0 to 256 characters that specifies the value for a tag. Tag values can be null and don't have to be unique in a tag set.
", - "max":256, - "min":0, - "pattern":".*" - }, - "TimeUnit":{ - "type":"string", - "documentation":"The unit of a maintenance schedule duration. Valid value is HOUR. See Auto-Tune for Amazon OpenSearch Service for more information.
", - "enum":["HOURS"] - }, - "UIntValue":{ - "type":"integer", - "min":0 - }, - "UpdateDomainConfigRequest":{ - "type":"structure", - "required":["DomainName"], - "members":{ - "DomainName":{ - "shape":"DomainName", - "documentation":"The name of the domain you're updating.
", - "location":"uri", - "locationName":"DomainName" - }, - "ClusterConfig":{ - "shape":"ClusterConfig", - "documentation":"The type and number of instances to instantiate for the domain cluster.
" - }, - "EBSOptions":{ - "shape":"EBSOptions", - "documentation":"Specify the type and size of the EBS volume to use.
" - }, - "SnapshotOptions":{ - "shape":"SnapshotOptions", - "documentation":"Option to set the time, in UTC format, for the daily automated snapshot. Default value is 0 hours.
Options to specify the subnets and security groups for the VPC endpoint. For more information, see Launching your Amazon OpenSearch Service domains using a VPC .
" - }, - "CognitoOptions":{ - "shape":"CognitoOptions", - "documentation":"Options to specify the Cognito user and identity pools for OpenSearch Dashboards authentication. For more information, see Configuring Amazon Cognito authentication for OpenSearch Dashboards.
" - }, - "AdvancedOptions":{ - "shape":"AdvancedOptions", - "documentation":"Modifies the advanced option to allow references to indices in an HTTP request body. Must be false when configuring access to individual sub-resources. By default, the value is true. See Advanced options for more information.
IAM access policy as a JSON-formatted string.
" - }, - "LogPublishingOptions":{ - "shape":"LogPublishingOptions", - "documentation":"Map of LogType and LogPublishingOption, each containing options to publish a given type of OpenSearch log.
Specifies encryption of data at rest options.
" - }, - "DomainEndpointOptions":{ - "shape":"DomainEndpointOptions", - "documentation":"Options to specify configuration that will be applied to the domain endpoint.
" - }, - "NodeToNodeEncryptionOptions":{ - "shape":"NodeToNodeEncryptionOptions", - "documentation":"Specifies node-to-node encryption options.
" - }, - "AdvancedSecurityOptions":{ - "shape":"AdvancedSecurityOptionsInput", - "documentation":"Specifies advanced security options.
" - }, - "AutoTuneOptions":{ - "shape":"AutoTuneOptions", - "documentation":"Specifies Auto-Tune options.
" - } - }, - "documentation":"Container for the parameters to the UpdateDomain operation. Specifies the type and number of instances in the domain cluster.
The status of the updated domain.
" - } - }, - "documentation":"The result of an UpdateDomain request. Contains the status of the domain being updated.
The unique identifier for the package.
" - }, - "PackageSource":{"shape":"PackageSource"}, - "PackageDescription":{ - "shape":"PackageDescription", - "documentation":"A new description of the package.
" - }, - "CommitMessage":{ - "shape":"CommitMessage", - "documentation":"A commit message for the new version which is shown as part of GetPackageVersionHistoryResponse.
Container for request parameters to the UpdatePackage operation.
Information about the package.
" - } - }, - "documentation":" Container for the response returned by the UpdatePackage operation.
The version of OpenSearch you intend to upgrade the domain to.
" - }, - "PerformCheckOnly":{ - "shape":"Boolean", - "documentation":"When true, indicates that an upgrade eligibility check needs to be performed. Does not actually perform the upgrade.
" - }, - "AdvancedOptions":{"shape":"AdvancedOptions"} - }, - "documentation":" Container for the request parameters to UpgradeDomain operation.
The version of OpenSearch that you intend to upgrade the domain to.
" - }, - "PerformCheckOnly":{ - "shape":"Boolean", - "documentation":"When true, indicates that an upgrade eligibility check needs to be performed. Does not actually perform the upgrade.
" - }, - "AdvancedOptions":{"shape":"AdvancedOptions"} - }, - "documentation":" Container for response returned by UpgradeDomain operation.
A string that briefly describes the upgrade.
" - }, - "StartTimestamp":{ - "shape":"StartTimestamp", - "documentation":"UTC timestamp at which the upgrade API call was made in \"yyyy-MM-ddTHH:mm:ssZ\" format.
" - }, - "UpgradeStatus":{ - "shape":"UpgradeStatus", - "documentation":"The current status of the upgrade. The status can take one of the following values:
- In Progress
- Succeeded
- Succeeded with Issues
- Failed
A list of UpgradeStepItem s representing information about each step performed as part of a specific upgrade or upgrade eligibility check.
History of the last 10 upgrades and upgrade eligibility checks.
" - }, - "UpgradeHistoryList":{ - "type":"list", - "member":{"shape":"UpgradeHistory"} - }, - "UpgradeName":{"type":"string"}, - "UpgradeStatus":{ - "type":"string", - "enum":[ - "IN_PROGRESS", - "SUCCEEDED", - "SUCCEEDED_WITH_ISSUES", - "FAILED" - ] - }, - "UpgradeStep":{ - "type":"string", - "enum":[ - "PRE_UPGRADE_CHECK", - "SNAPSHOT", - "UPGRADE" - ] - }, - "UpgradeStepItem":{ - "type":"structure", - "members":{ - "UpgradeStep":{ - "shape":"UpgradeStep", - "documentation":"One of three steps an upgrade or upgrade eligibility check goes through:
- PreUpgradeCheck
- Snapshot
- Upgrade
The current status of the upgrade. The status can take one of the following values:
- In Progress
- Succeeded
- Succeeded with Issues
- Failed
A list of strings containing detailed information about the errors encountered in a particular step.
" - }, - "ProgressPercent":{ - "shape":"Double", - "documentation":"The floating point value representing the progress percentage of a particular step.
" - } - }, - "documentation":"Represents a single step of the upgrade or upgrade eligibility check workflow.
" - }, - "UpgradeStepsList":{ - "type":"list", - "member":{"shape":"UpgradeStepItem"} - }, - "UserPoolId":{ - "type":"string", - "max":55, - "min":1, - "pattern":"[\\w-]+_[0-9a-zA-Z]+" - }, - "Username":{ - "type":"string", - "max":64, - "min":1, - "pattern":".*", - "sensitive":true - }, - "VPCDerivedInfo":{ - "type":"structure", - "members":{ - "VPCId":{ - "shape":"String", - "documentation":"The VPC ID for the domain. Exists only if the domain was created with VPCOptions.
The subnets for the VPC endpoint.
" - }, - "AvailabilityZones":{ - "shape":"StringList", - "documentation":"The Availability Zones for the domain. Exists only if the domain was created with VPCOptions.
The security groups for the VPC endpoint.
" - } - }, - "documentation":"Options to specify the subnets and security groups for the VPC endpoint. For more information, see Launching your Amazon OpenSearch Service domains using a VPC.
" - }, - "VPCDerivedInfoStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"VPCDerivedInfo", - "documentation":"The VPC options for the specified domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the VPC options for the specified domain.
" - } - }, - "documentation":"Status of the VPC options for the specified domain.
" - }, - "VPCOptions":{ - "type":"structure", - "members":{ - "SubnetIds":{ - "shape":"StringList", - "documentation":"The subnets for the VPC endpoint.
" - }, - "SecurityGroupIds":{ - "shape":"StringList", - "documentation":"The security groups for the VPC endpoint.
" - } - }, - "documentation":"Options to specify the subnets and security groups for the VPC endpoint. For more information, see Launching your Amazon OpenSearch Service domains using a VPC.
" - }, - "ValueStringList":{ - "type":"list", - "member":{"shape":"NonEmptyString"}, - "min":1 - }, - "VersionList":{ - "type":"list", - "member":{"shape":"VersionString"}, - "documentation":"List of supported OpenSearch versions.
" - }, - "VersionStatus":{ - "type":"structure", - "required":[ - "Options", - "Status" - ], - "members":{ - "Options":{ - "shape":"VersionString", - "documentation":"The OpenSearch version for the specified OpenSearch domain.
" - }, - "Status":{ - "shape":"OptionStatus", - "documentation":"The status of the OpenSearch version options for the specified OpenSearch domain.
" - } - }, - "documentation":"The status of the OpenSearch version options for the specified OpenSearch domain.
" - }, - "VersionString":{ - "type":"string", - "max":18, - "min":14, - "pattern":"^Elasticsearch_[0-9]{1}\\.[0-9]{1,2}$|^OpenSearch_[0-9]{1,2}\\.[0-9]{1,2}$" - }, - "VolumeType":{ - "type":"string", - "documentation":"The type of EBS volume, standard, gp2, or io1. See Configuring EBS-based Storage for more information.
", - "enum":[ - "standard", - "gp2", - "io1" - ] - }, - "ZoneAwarenessConfig":{ - "type":"structure", - "members":{ - "AvailabilityZoneCount":{ - "shape":"IntegerClass", - "documentation":"An integer value to indicate the number of availability zones for a domain when zone awareness is enabled. This should be equal to number of subnets if VPC endpoints is enabled.
" - } - }, - "documentation":"The zone awareness configuration for the domain cluster, such as the number of availability zones.
" - } - }, - "documentation":"Use the Amazon OpenSearch configuration API to create, configure, and manage Amazon OpenSearch Service domains.
For sample code that uses the configuration API, see the Amazon OpenSearch Service Developer Guide. The guide also contains sample code for sending signed HTTP requests to the OpenSearch APIs.
The endpoint for configuration service requests is region-specific: es.region.amazonaws.com. For example, es.us-east-1.amazonaws.com. For a current list of supported regions and endpoints, see Regions and Endpoints.
" -} diff --git a/packages/@aws-cdk/custom-resources/lib/aws-custom-resource/runtime/index.ts b/packages/@aws-cdk/custom-resources/lib/aws-custom-resource/runtime/index.ts index d56558ef1be31..39d406e70c77d 100644 --- a/packages/@aws-cdk/custom-resources/lib/aws-custom-resource/runtime/index.ts +++ b/packages/@aws-cdk/custom-resources/lib/aws-custom-resource/runtime/index.ts @@ -79,9 +79,8 @@ function installLatestSdk(): void { latestSdkInstalled = true; } -const patchedServices: { serviceName: string; apiVersions: string[] }[] = [ - { serviceName: 'OpenSearch', apiVersions: ['2021-01-01'] }, -]; +// no currently patched services +const patchedServices: { serviceName: string; apiVersions: string[] }[] = []; /** * Patches the AWS SDK by loading service models in the same manner as the actual SDK */ diff --git a/packages/@aws-cdk/custom-resources/lib/provider-framework/provider.ts b/packages/@aws-cdk/custom-resources/lib/provider-framework/provider.ts index 2c94cad1dbf3c..d8f4e97293a2a 100644 --- a/packages/@aws-cdk/custom-resources/lib/provider-framework/provider.ts +++ b/packages/@aws-cdk/custom-resources/lib/provider-framework/provider.ts @@ -209,7 +209,9 @@ export class Provider extends CoreConstruct implements ICustomResourceProvider { private createFunction(entrypoint: string, name?: string) { const fn = new lambda.Function(this, `framework-${entrypoint}`, { - code: lambda.Code.fromAsset(RUNTIME_HANDLER_PATH), + code: lambda.Code.fromAsset(RUNTIME_HANDLER_PATH, { + exclude: ['*.ts'], + }), description: `AWS CDK resource provider framework - ${entrypoint} (${this.node.path})`.slice(0, 256), runtime: lambda.Runtime.NODEJS_12_X, handler: `framework.${entrypoint}`, diff --git a/packages/@aws-cdk/custom-resources/package.json b/packages/@aws-cdk/custom-resources/package.json index 4a1359916223c..f8ef33b6481de 100644 --- a/packages/@aws-cdk/custom-resources/package.json +++ b/packages/@aws-cdk/custom-resources/package.json @@ -47,7 +47,7 @@ "watch": "cdk-watch", "lint": "cdk-lint", "test": "cdk-test", - "integ": "cdk-integ", + "integ": "integ-runner", "pkglint": "pkglint -f", "package": "cdk-package", "awslint": "cdk-awslint", @@ -84,7 +84,7 @@ "@aws-cdk/aws-s3": "0.0.0", "@aws-cdk/aws-ssm": "0.0.0", "@aws-cdk/cdk-build-tools": "0.0.0", - "@aws-cdk/cdk-integ-tools": "0.0.0", + "@aws-cdk/integ-runner": "0.0.0", "@aws-cdk/cfn2ts": "0.0.0", "@aws-cdk/pkglint": "0.0.0", "@types/aws-lambda": "^8.10.93", diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/asset.9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/index.js b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/asset.9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/index.js new file mode 100644 index 0000000000000..ddf62f6363bf4 --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/asset.9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/index.js @@ -0,0 +1,250 @@ +"use strict"; +Object.defineProperty(exports, "__esModule", { value: true }); +exports.handler = exports.forceSdkInstallation = exports.flatten = exports.PHYSICAL_RESOURCE_ID_REFERENCE = void 0; +/* eslint-disable no-console */ +const child_process_1 = require("child_process"); +const fs = require("fs"); +const path_1 = require("path"); +/** + * Serialized form of the physical resource id for use in the operation parameters + */ +exports.PHYSICAL_RESOURCE_ID_REFERENCE = 'PHYSICAL:RESOURCEID:'; +/** + * Flattens a nested object + * + * @param object the object to be flattened + * @returns a flat object with path as keys + */ +function flatten(object) { + return Object.assign({}, ...function _flatten(child, path = []) { + return [].concat(...Object.keys(child) + .map(key => { + const childKey = Buffer.isBuffer(child[key]) ? child[key].toString('utf8') : child[key]; + return typeof childKey === 'object' && childKey !== null + ? _flatten(childKey, path.concat([key])) + : ({ [path.concat([key]).join('.')]: childKey }); + })); + }(object)); +} +exports.flatten = flatten; +/** + * Decodes encoded special values (physicalResourceId) + */ +function decodeSpecialValues(object, physicalResourceId) { + return JSON.parse(JSON.stringify(object), (_k, v) => { + switch (v) { + case exports.PHYSICAL_RESOURCE_ID_REFERENCE: + return physicalResourceId; + default: + return v; + } + }); +} +/** + * Filters the keys of an object. + */ +function filterKeys(object, pred) { + return Object.entries(object) + .reduce((acc, [k, v]) => pred(k) + ? { ...acc, [k]: v } + : acc, {}); +} +let latestSdkInstalled = false; +function forceSdkInstallation() { + latestSdkInstalled = false; +} +exports.forceSdkInstallation = forceSdkInstallation; +/** + * Installs latest AWS SDK v2 + */ +function installLatestSdk() { + console.log('Installing latest AWS SDK v2'); + // Both HOME and --prefix are needed here because /tmp is the only writable location + child_process_1.execSync('HOME=/tmp npm install aws-sdk@2 --production --no-package-lock --no-save --prefix /tmp'); + latestSdkInstalled = true; +} +// no currently patched services +const patchedServices = []; +/** + * Patches the AWS SDK by loading service models in the same manner as the actual SDK + */ +function patchSdk(awsSdk) { + const apiLoader = awsSdk.apiLoader; + patchedServices.forEach(({ serviceName, apiVersions }) => { + const lowerServiceName = serviceName.toLowerCase(); + if (!awsSdk.Service.hasService(lowerServiceName)) { + apiLoader.services[lowerServiceName] = {}; + awsSdk[serviceName] = awsSdk.Service.defineService(lowerServiceName, apiVersions); + } + else { + awsSdk.Service.addVersions(awsSdk[serviceName], apiVersions); + } + apiVersions.forEach(apiVersion => { + Object.defineProperty(apiLoader.services[lowerServiceName], apiVersion, { + get: function get() { + const modelFilePrefix = `aws-sdk-patch/${lowerServiceName}-${apiVersion}`; + const model = JSON.parse(fs.readFileSync(path_1.join(__dirname, `${modelFilePrefix}.service.json`), 'utf-8')); + model.paginators = JSON.parse(fs.readFileSync(path_1.join(__dirname, `${modelFilePrefix}.paginators.json`), 'utf-8')).pagination; + return model; + }, + enumerable: true, + configurable: true, + }); + }); + }); + return awsSdk; +} +/* eslint-disable @typescript-eslint/no-require-imports, import/no-extraneous-dependencies */ +async function handler(event, context) { + var _a, _b, _c, _d, _e, _f, _g, _h, _j, _l, _m, _o, _p; + try { + let AWS; + if (!latestSdkInstalled && event.ResourceProperties.InstallLatestAwsSdk === 'true') { + try { + installLatestSdk(); + AWS = require('/tmp/node_modules/aws-sdk'); + } + catch (e) { + console.log(`Failed to install latest AWS SDK v2: ${e}`); + AWS = require('aws-sdk'); // Fallback to pre-installed version + } + } + else if (latestSdkInstalled) { + AWS = require('/tmp/node_modules/aws-sdk'); + } + else { + AWS = require('aws-sdk'); + } + try { + AWS = patchSdk(AWS); + } + catch (e) { + console.log(`Failed to patch AWS SDK: ${e}. Proceeding with the installed copy.`); + } + console.log(JSON.stringify(event)); + console.log('AWS SDK VERSION: ' + AWS.VERSION); + event.ResourceProperties.Create = decodeCall(event.ResourceProperties.Create); + event.ResourceProperties.Update = decodeCall(event.ResourceProperties.Update); + event.ResourceProperties.Delete = decodeCall(event.ResourceProperties.Delete); + // Default physical resource id + let physicalResourceId; + switch (event.RequestType) { + case 'Create': + physicalResourceId = (_j = (_f = (_c = (_b = (_a = event.ResourceProperties.Create) === null || _a === void 0 ? void 0 : _a.physicalResourceId) === null || _b === void 0 ? void 0 : _b.id) !== null && _c !== void 0 ? _c : (_e = (_d = event.ResourceProperties.Update) === null || _d === void 0 ? void 0 : _d.physicalResourceId) === null || _e === void 0 ? void 0 : _e.id) !== null && _f !== void 0 ? _f : (_h = (_g = event.ResourceProperties.Delete) === null || _g === void 0 ? void 0 : _g.physicalResourceId) === null || _h === void 0 ? void 0 : _h.id) !== null && _j !== void 0 ? _j : event.LogicalResourceId; + break; + case 'Update': + case 'Delete': + physicalResourceId = (_o = (_m = (_l = event.ResourceProperties[event.RequestType]) === null || _l === void 0 ? void 0 : _l.physicalResourceId) === null || _m === void 0 ? void 0 : _m.id) !== null && _o !== void 0 ? _o : event.PhysicalResourceId; + break; + } + let flatData = {}; + let data = {}; + const call = event.ResourceProperties[event.RequestType]; + if (call) { + let credentials; + if (call.assumedRoleArn) { + const timestamp = (new Date()).getTime(); + const params = { + RoleArn: call.assumedRoleArn, + RoleSessionName: `${timestamp}-${physicalResourceId}`.substring(0, 64), + }; + credentials = new AWS.ChainableTemporaryCredentials({ + params: params, + }); + } + if (!Object.prototype.hasOwnProperty.call(AWS, call.service)) { + throw Error(`Service ${call.service} does not exist in AWS SDK version ${AWS.VERSION}.`); + } + const awsService = new AWS[call.service]({ + apiVersion: call.apiVersion, + credentials: credentials, + region: call.region, + }); + try { + const response = await awsService[call.action](call.parameters && decodeSpecialValues(call.parameters, physicalResourceId)).promise(); + flatData = { + apiVersion: awsService.config.apiVersion, + region: awsService.config.region, + ...flatten(response), + }; + let outputPaths; + if (call.outputPath) { + outputPaths = [call.outputPath]; + } + else if (call.outputPaths) { + outputPaths = call.outputPaths; + } + if (outputPaths) { + data = filterKeys(flatData, startsWithOneOf(outputPaths)); + } + else { + data = flatData; + } + } + catch (e) { + if (!call.ignoreErrorCodesMatching || !new RegExp(call.ignoreErrorCodesMatching).test(e.code)) { + throw e; + } + } + if ((_p = call.physicalResourceId) === null || _p === void 0 ? void 0 : _p.responsePath) { + physicalResourceId = flatData[call.physicalResourceId.responsePath]; + } + } + await respond('SUCCESS', 'OK', physicalResourceId, data); + } + catch (e) { + console.log(e); + await respond('FAILED', e.message || 'Internal Error', context.logStreamName, {}); + } + function respond(responseStatus, reason, physicalResourceId, data) { + const responseBody = JSON.stringify({ + Status: responseStatus, + Reason: reason, + PhysicalResourceId: physicalResourceId, + StackId: event.StackId, + RequestId: event.RequestId, + LogicalResourceId: event.LogicalResourceId, + NoEcho: false, + Data: data, + }); + console.log('Responding', responseBody); + // eslint-disable-next-line @typescript-eslint/no-require-imports + const parsedUrl = require('url').parse(event.ResponseURL); + const requestOptions = { + hostname: parsedUrl.hostname, + path: parsedUrl.path, + method: 'PUT', + headers: { 'content-type': '', 'content-length': responseBody.length }, + }; + return new Promise((resolve, reject) => { + try { + // eslint-disable-next-line @typescript-eslint/no-require-imports + const request = require('https').request(requestOptions, resolve); + request.on('error', reject); + request.write(responseBody); + request.end(); + } + catch (e) { + reject(e); + } + }); + } +} +exports.handler = handler; +function decodeCall(call) { + if (!call) { + return undefined; + } + return JSON.parse(call); +} +function startsWithOneOf(searchStrings) { + return function (string) { + for (const searchString of searchStrings) { + if (string.startsWith(searchString)) { + return true; + } + } + return false; + }; +} +//# sourceMappingURL=data:application/json;base64,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 \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/aws-cdk-sdk-js.template.json b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/aws-cdk-sdk-js.template.json new file mode 100644 index 0000000000000..c5eefae4225da --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/aws-cdk-sdk-js.template.json @@ -0,0 +1,316 @@ +{ + "Resources": { + "TopicBFC7AF6E": { + "Type": "AWS::SNS::Topic" + }, + "PublishCustomResourcePolicyDF696FCA": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": "sns:Publish", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "PublishCustomResourcePolicyDF696FCA", + "Roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + } + }, + "Publish2E9BDF73": { + "Type": "Custom::SNSPublisher", + "Properties": { + "ServiceToken": { + "Fn::GetAtt": [ + "AWS679f53fac002430cb0da5b7982bd22872D164C4C", + "Arn" + ] + }, + "Create": { + "Fn::Join": [ + "", + [ + "{\"service\":\"SNS\",\"action\":\"publish\",\"parameters\":{\"Message\":\"hello\",\"TopicArn\":\"", + { + "Ref": "TopicBFC7AF6E" + }, + "\"},\"physicalResourceId\":{\"id\":\"", + { + "Ref": "TopicBFC7AF6E" + }, + "\"}}" + ] + ] + }, + "Update": { + "Fn::Join": [ + "", + [ + "{\"service\":\"SNS\",\"action\":\"publish\",\"parameters\":{\"Message\":\"hello\",\"TopicArn\":\"", + { + "Ref": "TopicBFC7AF6E" + }, + "\"},\"physicalResourceId\":{\"id\":\"", + { + "Ref": "TopicBFC7AF6E" + }, + "\"}}" + ] + ] + }, + "InstallLatestAwsSdk": true + }, + "DependsOn": [ + "PublishCustomResourcePolicyDF696FCA" + ], + "UpdateReplacePolicy": "Delete", + "DeletionPolicy": "Delete" + }, + "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2": { + "Type": "AWS::IAM::Role", + "Properties": { + "AssumeRolePolicyDocument": { + "Statement": [ + { + "Action": "sts:AssumeRole", + "Effect": "Allow", + "Principal": { + "Service": "lambda.amazonaws.com" + } + } + ], + "Version": "2012-10-17" + }, + "ManagedPolicyArns": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" + ] + ] + } + ] + } + }, + "AWS679f53fac002430cb0da5b7982bd22872D164C4C": { + "Type": "AWS::Lambda::Function", + "Properties": { + "Code": { + "S3Bucket": { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3BucketB21FB59F" + }, + "S3Key": { + "Fn::Join": [ + "", + [ + { + "Fn::Select": [ + 0, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058" + } + ] + } + ] + }, + { + "Fn::Select": [ + 1, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058" + } + ] + } + ] + } + ] + ] + } + }, + "Role": { + "Fn::GetAtt": [ + "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2", + "Arn" + ] + }, + "Handler": "index.handler", + "Runtime": "nodejs12.x", + "Timeout": 120 + }, + "DependsOn": [ + "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + ] + }, + "ListTopicsCustomResourcePolicy31A8396A": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": "sns:ListTopics", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "ListTopicsCustomResourcePolicy31A8396A", + "Roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + }, + "DependsOn": [ + "TopicBFC7AF6E" + ] + }, + "ListTopicsCE1E0341": { + "Type": "Custom::AWS", + "Properties": { + "ServiceToken": { + "Fn::GetAtt": [ + "AWS679f53fac002430cb0da5b7982bd22872D164C4C", + "Arn" + ] + }, + "Create": "{\"service\":\"SNS\",\"action\":\"listTopics\",\"physicalResourceId\":{\"responsePath\":\"Topics.0.TopicArn\"}}", + "Update": "{\"service\":\"SNS\",\"action\":\"listTopics\",\"physicalResourceId\":{\"responsePath\":\"Topics.0.TopicArn\"}}", + "InstallLatestAwsSdk": true + }, + "DependsOn": [ + "ListTopicsCustomResourcePolicy31A8396A", + "TopicBFC7AF6E" + ], + "UpdateReplacePolicy": "Delete", + "DeletionPolicy": "Delete" + }, + "DummyParameter53662B67": { + "Type": "AWS::SSM::Parameter", + "Properties": { + "Type": "String", + "Value": "1337" + } + }, + "GetParameterCustomResourcePolicyD8E5D455": { + "Type": "AWS::IAM::Policy", + "Properties": { + "PolicyDocument": { + "Statement": [ + { + "Action": "ssm:GetParameter", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "PolicyName": "GetParameterCustomResourcePolicyD8E5D455", + "Roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + } + }, + "GetParameter42B0A00E": { + "Type": "Custom::SSMParameter", + "Properties": { + "ServiceToken": { + "Fn::GetAtt": [ + "AWS679f53fac002430cb0da5b7982bd22872D164C4C", + "Arn" + ] + }, + "Create": { + "Fn::Join": [ + "", + [ + "{\"service\":\"SSM\",\"action\":\"getParameter\",\"parameters\":{\"Name\":\"", + { + "Ref": "DummyParameter53662B67" + }, + "\",\"WithDecryption\":true},\"physicalResourceId\":{\"responsePath\":\"Parameter.ARN\"}}" + ] + ] + }, + "Update": { + "Fn::Join": [ + "", + [ + "{\"service\":\"SSM\",\"action\":\"getParameter\",\"parameters\":{\"Name\":\"", + { + "Ref": "DummyParameter53662B67" + }, + "\",\"WithDecryption\":true},\"physicalResourceId\":{\"responsePath\":\"Parameter.ARN\"}}" + ] + ] + }, + "InstallLatestAwsSdk": true + }, + "DependsOn": [ + "GetParameterCustomResourcePolicyD8E5D455" + ], + "UpdateReplacePolicy": "Delete", + "DeletionPolicy": "Delete" + } + }, + "Parameters": { + "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3BucketB21FB59F": { + "Type": "String", + "Description": "S3 bucket for asset \"9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90\"" + }, + "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058": { + "Type": "String", + "Description": "S3 key for asset version \"9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90\"" + }, + "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90ArtifactHashC00C7285": { + "Type": "String", + "Description": "Artifact hash for asset \"9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90\"" + } + }, + "Outputs": { + "MessageId": { + "Value": { + "Fn::GetAtt": [ + "Publish2E9BDF73", + "MessageId" + ] + } + }, + "TopicArn": { + "Value": { + "Fn::GetAtt": [ + "ListTopicsCE1E0341", + "Topics.0.TopicArn" + ] + } + }, + "ParameterValue": { + "Value": { + "Fn::GetAtt": [ + "GetParameter42B0A00E", + "Parameter.Value" + ] + } + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/cdk.out b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/cdk.out new file mode 100644 index 0000000000000..90bef2e09ad39 --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/cdk.out @@ -0,0 +1 @@ +{"version":"17.0.0"} \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/integ.json b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/integ.json new file mode 100644 index 0000000000000..34d1c61e45426 --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/integ.json @@ -0,0 +1,14 @@ +{ + "version": "18.0.0", + "testCases": { + "custom-resources/test/aws-custom-resource/integ.aws-custom-resource": { + "stacks": [ + "aws-cdk-sdk-js" + ], + "diffAssets": false, + "stackUpdateWorkflow": true + } + }, + "synthContext": {}, + "enableLookups": false +} \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/manifest.json b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/manifest.json new file mode 100644 index 0000000000000..85aa00eb8d36e --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/manifest.json @@ -0,0 +1,132 @@ +{ + "version": "17.0.0", + "artifacts": { + "Tree": { + "type": "cdk:tree", + "properties": { + "file": "tree.json" + } + }, + "aws-cdk-sdk-js": { + "type": "aws:cloudformation:stack", + "environment": "aws://unknown-account/unknown-region", + "properties": { + "templateFile": "aws-cdk-sdk-js.template.json", + "validateOnSynth": false + }, + "metadata": { + "/aws-cdk-sdk-js": [ + { + "type": "aws:cdk:asset", + "data": { + "path": "asset.9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90", + "id": "9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90", + "packaging": "zip", + "sourceHash": "9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90", + "s3BucketParameter": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3BucketB21FB59F", + "s3KeyParameter": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058", + "artifactHashParameter": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90ArtifactHashC00C7285" + } + } + ], + "/aws-cdk-sdk-js/Topic/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "TopicBFC7AF6E" + } + ], + "/aws-cdk-sdk-js/Publish/CustomResourcePolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "PublishCustomResourcePolicyDF696FCA" + } + ], + "/aws-cdk-sdk-js/Publish/Resource/Default": [ + { + "type": "aws:cdk:logicalId", + "data": "Publish2E9BDF73" + } + ], + "/aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/ServiceRole/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ], + "/aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "AWS679f53fac002430cb0da5b7982bd22872D164C4C" + } + ], + "/aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/S3Bucket": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3BucketB21FB59F" + } + ], + "/aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/S3VersionKey": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058" + } + ], + "/aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/ArtifactHash": [ + { + "type": "aws:cdk:logicalId", + "data": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90ArtifactHashC00C7285" + } + ], + "/aws-cdk-sdk-js/ListTopics/CustomResourcePolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "ListTopicsCustomResourcePolicy31A8396A" + } + ], + "/aws-cdk-sdk-js/ListTopics/Resource/Default": [ + { + "type": "aws:cdk:logicalId", + "data": "ListTopicsCE1E0341" + } + ], + "/aws-cdk-sdk-js/DummyParameter/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "DummyParameter53662B67" + } + ], + "/aws-cdk-sdk-js/GetParameter/CustomResourcePolicy/Resource": [ + { + "type": "aws:cdk:logicalId", + "data": "GetParameterCustomResourcePolicyD8E5D455" + } + ], + "/aws-cdk-sdk-js/GetParameter/Resource/Default": [ + { + "type": "aws:cdk:logicalId", + "data": "GetParameter42B0A00E" + } + ], + "/aws-cdk-sdk-js/MessageId": [ + { + "type": "aws:cdk:logicalId", + "data": "MessageId" + } + ], + "/aws-cdk-sdk-js/TopicArn": [ + { + "type": "aws:cdk:logicalId", + "data": "TopicArn" + } + ], + "/aws-cdk-sdk-js/ParameterValue": [ + { + "type": "aws:cdk:logicalId", + "data": "ParameterValue" + } + ] + }, + "displayName": "aws-cdk-sdk-js" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/tree.json b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/tree.json new file mode 100644 index 0000000000000..2849b976116eb --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/aws-custom-resource/aws-custom-resource.integ.snapshot/tree.json @@ -0,0 +1,516 @@ +{ + "version": "tree-0.1", + "tree": { + "id": "App", + "path": "", + "children": { + "Tree": { + "id": "Tree", + "path": "Tree", + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "aws-cdk-sdk-js": { + "id": "aws-cdk-sdk-js", + "path": "aws-cdk-sdk-js", + "children": { + "Topic": { + "id": "Topic", + "path": "aws-cdk-sdk-js/Topic", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/Topic/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::SNS::Topic", + "aws:cdk:cloudformation:props": {} + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-sns.CfnTopic", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-sns.Topic", + "version": "0.0.0" + } + }, + "Publish": { + "id": "Publish", + "path": "aws-cdk-sdk-js/Publish", + "children": { + "Provider": { + "id": "Provider", + "path": "aws-cdk-sdk-js/Publish/Provider", + "constructInfo": { + "fqn": "@aws-cdk/aws-lambda.SingletonFunction", + "version": "0.0.0" + } + }, + "CustomResourcePolicy": { + "id": "CustomResourcePolicy", + "path": "aws-cdk-sdk-js/Publish/CustomResourcePolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/Publish/CustomResourcePolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": "sns:Publish", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "policyName": "PublishCustomResourcePolicyDF696FCA", + "roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + }, + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/Publish/Resource", + "children": { + "Default": { + "id": "Default", + "path": "aws-cdk-sdk-js/Publish/Resource/Default", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.CustomResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/custom-resources.AwsCustomResource", + "version": "0.0.0" + } + }, + "AWS679f53fac002430cb0da5b7982bd2287": { + "id": "AWS679f53fac002430cb0da5b7982bd2287", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287", + "children": { + "ServiceRole": { + "id": "ServiceRole", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/ServiceRole", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/ServiceRole/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Role", + "aws:cdk:cloudformation:props": { + "assumeRolePolicyDocument": { + "Statement": [ + { + "Action": "sts:AssumeRole", + "Effect": "Allow", + "Principal": { + "Service": "lambda.amazonaws.com" + } + } + ], + "Version": "2012-10-17" + }, + "managedPolicyArns": [ + { + "Fn::Join": [ + "", + [ + "arn:", + { + "Ref": "AWS::Partition" + }, + ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" + ] + ] + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnRole", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Role", + "version": "0.0.0" + } + }, + "Code": { + "id": "Code", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/Code", + "children": { + "Stage": { + "id": "Stage", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/Code/Stage", + "constructInfo": { + "fqn": "@aws-cdk/core.AssetStaging", + "version": "0.0.0" + } + }, + "AssetBucket": { + "id": "AssetBucket", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/Code/AssetBucket", + "constructInfo": { + "fqn": "@aws-cdk/aws-s3.BucketBase", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-s3-assets.Asset", + "version": "0.0.0" + } + }, + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/AWS679f53fac002430cb0da5b7982bd2287/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::Lambda::Function", + "aws:cdk:cloudformation:props": { + "code": { + "s3Bucket": { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3BucketB21FB59F" + }, + "s3Key": { + "Fn::Join": [ + "", + [ + { + "Fn::Select": [ + 0, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058" + } + ] + } + ] + }, + { + "Fn::Select": [ + 1, + { + "Fn::Split": [ + "||", + { + "Ref": "AssetParameters9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90S3VersionKey73D4F058" + } + ] + } + ] + } + ] + ] + } + }, + "role": { + "Fn::GetAtt": [ + "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2", + "Arn" + ] + }, + "handler": "index.handler", + "runtime": "nodejs12.x", + "timeout": 120 + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-lambda.CfnFunction", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-lambda.Function", + "version": "0.0.0" + } + }, + "AssetParameters": { + "id": "AssetParameters", + "path": "aws-cdk-sdk-js/AssetParameters", + "children": { + "9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90": { + "id": "9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90", + "path": "aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90", + "children": { + "S3Bucket": { + "id": "S3Bucket", + "path": "aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/S3Bucket", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "S3VersionKey": { + "id": "S3VersionKey", + "path": "aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/S3VersionKey", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + }, + "ArtifactHash": { + "id": "ArtifactHash", + "path": "aws-cdk-sdk-js/AssetParameters/9d784cf317cead201dfe56ed0404d6d23eba6d499ca7354138230c2267f2fe90/ArtifactHash", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Construct", + "version": "0.0.0" + } + }, + "ListTopics": { + "id": "ListTopics", + "path": "aws-cdk-sdk-js/ListTopics", + "children": { + "Provider": { + "id": "Provider", + "path": "aws-cdk-sdk-js/ListTopics/Provider", + "constructInfo": { + "fqn": "@aws-cdk/aws-lambda.SingletonFunction", + "version": "0.0.0" + } + }, + "CustomResourcePolicy": { + "id": "CustomResourcePolicy", + "path": "aws-cdk-sdk-js/ListTopics/CustomResourcePolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/ListTopics/CustomResourcePolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": "sns:ListTopics", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "policyName": "ListTopicsCustomResourcePolicy31A8396A", + "roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + }, + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/ListTopics/Resource", + "children": { + "Default": { + "id": "Default", + "path": "aws-cdk-sdk-js/ListTopics/Resource/Default", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.CustomResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/custom-resources.AwsCustomResource", + "version": "0.0.0" + } + }, + "DummyParameter": { + "id": "DummyParameter", + "path": "aws-cdk-sdk-js/DummyParameter", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/DummyParameter/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::SSM::Parameter", + "aws:cdk:cloudformation:props": { + "type": "String", + "value": "1337" + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-ssm.CfnParameter", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-ssm.StringParameter", + "version": "0.0.0" + } + }, + "GetParameter": { + "id": "GetParameter", + "path": "aws-cdk-sdk-js/GetParameter", + "children": { + "Provider": { + "id": "Provider", + "path": "aws-cdk-sdk-js/GetParameter/Provider", + "constructInfo": { + "fqn": "@aws-cdk/aws-lambda.SingletonFunction", + "version": "0.0.0" + } + }, + "CustomResourcePolicy": { + "id": "CustomResourcePolicy", + "path": "aws-cdk-sdk-js/GetParameter/CustomResourcePolicy", + "children": { + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/GetParameter/CustomResourcePolicy/Resource", + "attributes": { + "aws:cdk:cloudformation:type": "AWS::IAM::Policy", + "aws:cdk:cloudformation:props": { + "policyDocument": { + "Statement": [ + { + "Action": "ssm:GetParameter", + "Effect": "Allow", + "Resource": "*" + } + ], + "Version": "2012-10-17" + }, + "policyName": "GetParameterCustomResourcePolicyD8E5D455", + "roles": [ + { + "Ref": "AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2" + } + ] + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.CfnPolicy", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/aws-iam.Policy", + "version": "0.0.0" + } + }, + "Resource": { + "id": "Resource", + "path": "aws-cdk-sdk-js/GetParameter/Resource", + "children": { + "Default": { + "id": "Default", + "path": "aws-cdk-sdk-js/GetParameter/Resource/Default", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.CustomResource", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/custom-resources.AwsCustomResource", + "version": "0.0.0" + } + }, + "MessageId": { + "id": "MessageId", + "path": "aws-cdk-sdk-js/MessageId", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "TopicArn": { + "id": "TopicArn", + "path": "aws-cdk-sdk-js/TopicArn", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + }, + "ParameterValue": { + "id": "ParameterValue", + "path": "aws-cdk-sdk-js/ParameterValue", + "constructInfo": { + "fqn": "@aws-cdk/core.CfnOutput", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.Stack", + "version": "0.0.0" + } + } + }, + "constructInfo": { + "fqn": "@aws-cdk/core.App", + "version": "0.0.0" + } + } +} \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/provider-framework/integration-test-fixtures/s3-file-handler/index.ts b/packages/@aws-cdk/custom-resources/test/provider-framework/integration-test-fixtures/s3-file-handler/index.ts index 0e52b4ad66e3f..de12c193aa637 100644 --- a/packages/@aws-cdk/custom-resources/test/provider-framework/integration-test-fixtures/s3-file-handler/index.ts +++ b/packages/@aws-cdk/custom-resources/test/provider-framework/integration-test-fixtures/s3-file-handler/index.ts @@ -28,7 +28,7 @@ export async function putObject(event: AWSCDKAsyncCustomResource.OnEventRequest) // trim trailing `/` if (objectKey.startsWith('/')) { - objectKey = objectKey.substr(1); + objectKey = objectKey.slice(1); } const publicRead = event.ResourceProperties[api.PROP_PUBLIC] || false; diff --git a/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.d.ts b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.d.ts new file mode 100644 index 0000000000000..9a560ded1cf9c --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.d.ts @@ -0,0 +1,7 @@ +export declare const PROP_BUCKET_NAME = "BucketName"; +export declare const PROP_OBJECT_KEY = "ObjectKey"; +export declare const PROP_CONTENTS = "Contents"; +export declare const PROP_PUBLIC = "PublicRead"; +export declare const ATTR_ETAG = "ETag"; +export declare const ATTR_URL = "URL"; +export declare const ATTR_OBJECT_KEY = "ObjectKey"; diff --git a/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.js b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.js new file mode 100644 index 0000000000000..508f0228906ca --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.js @@ -0,0 +1,11 @@ +"use strict"; +Object.defineProperty(exports, "__esModule", { value: true }); +exports.ATTR_OBJECT_KEY = exports.ATTR_URL = exports.ATTR_ETAG = exports.PROP_PUBLIC = exports.PROP_CONTENTS = exports.PROP_OBJECT_KEY = exports.PROP_BUCKET_NAME = void 0; +exports.PROP_BUCKET_NAME = 'BucketName'; +exports.PROP_OBJECT_KEY = 'ObjectKey'; +exports.PROP_CONTENTS = 'Contents'; +exports.PROP_PUBLIC = 'PublicRead'; +exports.ATTR_ETAG = 'ETag'; +exports.ATTR_URL = 'URL'; +exports.ATTR_OBJECT_KEY = 'ObjectKey'; +//# sourceMappingURL=data:application/json;base64,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 \ No newline at end of file diff --git a/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.ts b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.ts new file mode 100644 index 0000000000000..79b07bda5a43b --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/api.ts @@ -0,0 +1,8 @@ +export const PROP_BUCKET_NAME = 'BucketName'; +export const PROP_OBJECT_KEY = 'ObjectKey'; +export const PROP_CONTENTS = 'Contents'; +export const PROP_PUBLIC = 'PublicRead'; + +export const ATTR_ETAG = 'ETag'; +export const ATTR_URL = 'URL'; +export const ATTR_OBJECT_KEY = 'ObjectKey'; diff --git a/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/index.d.ts b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/index.d.ts new file mode 100644 index 0000000000000..c535c997c1e97 --- /dev/null +++ b/packages/@aws-cdk/custom-resources/test/provider-framework/provider.integ.snapshot/asset.4395b44839a882f77d9467a415b5a45ab1eee138cf0d9ce078d6b366890040aa/index.d.ts @@ -0,0 +1,3 @@ +export declare function onEvent(event: AWSCDKAsyncCustomResource.OnEventRequest): Promise