truemark/cdk

TrueMark CDK Libraries

TrueMark CDK Library

This library provides common constructs and functionality to ease CDK development.

The main objectives of this project is to

• Provide extended constructs that add additional functionality to existing CDK constructs
• Provide standard constructs that are simple to use and adhere to best practices
• Provide constructs for commonly used patterns
• Reduce the amount of boilerplate coding required to work with CDK

Conventions

• Standard Constructs are simplified constructs meant for general use. They follow general best practices and have been given sane optimized defaults.
• Extended Constructs are extensions of Constructs in the standard CDK library which add functionality such as logging and monitoring.
• Other Constructs found in this library are crafted CDK constructs for specific common use cases which follow CDK's principle of composition over inheritance.

In general, you should use Standard over Extended constructs unless they do not fit your use case.

Versioning

This project follows a semantic versioning pattern.

<major>.<minor>.<patch>

cdk's Issues

Add yarn support to cdk-pipeline.ts

The CdkPipeline construct already has support for npm and pnpm. Please add yarn as an option.

Invalid kms arn issue with aws-centergauge topic

Invalid arn arn:aws:kms:us-west-2::aws/sns (Service: AWSKMS; Status Code: 400; Error Code: NotFoundException; Request ID: 8eeed77c-a3f8-4768-8874-283892326e61; Proxy: null) (Service: AmazonSNS; Status Code: 400; Error Code: KMSNotFound; Request ID: 3e0b3a2f-4c93-5ce9-8fe1-64cdda39e2c5; Proxy: null)"

ECS Cluster has encrypted logging ... the key that is used must have permissions for ssm execute

Because of the encrypted logging setup for ECS when we go to execute into a container the encryption need causes the SSM execute not to work. We should test and document the settings for the encryption key to allow the execution into a container.
https://github.com/truemark/cdk/blob/develop/aws-ecs/lib/standard-fargate-cluster.ts#L161

Issue with using the StandardFargateSerice

There is an issue calling the StandardFargateService it defines a grace period which is an invalid parameter for a service that isn't connected to a load balancer

Resource handler returned message: "Invalid request provided: CreateService error: Health check grace period is only valid for services configured to use load balancers (Service: Ama
zonECS; Status Code: 400; Error Code: InvalidParameterException; Request ID: XXXed; Proxy: null)" (RequestToken: XXXXXXX8,
HandlerErrorCode: InvalidRequest)

https://github.com/truemark/cdk/blob/d55347e0b8da368a6a5b754b73f422c20ed92c43/aws-ecs/lib/standard-fargate-service.ts#L448C1-L449C62

Compile with JSII

In order for the CDK library to be published on https://constructs.dev/, this CDK library must be compiled with JSII as per https://constructs.dev/contribute.

Add Origin access control settings support to CloudfrontBucket

AWS has moved to using access control settings for access to S3 and Origin Access Identities are now considered legacy. The constructs should be moved to support the newer functionality.