3,905 questions
0
votes
0
answers
30
views
How to create Amazon SES identity verification CNAME records in Route 53 across different AWS accounts using CDK?
I have two AWS accounts:
DNS Account: Contains my Route 53 hosted zone for example.com
Email Account: Where I need to send emails using Amazon SES with the domain example.com
To verify the SES email ...
0
votes
1
answer
34
views
AWS CDK not updating ECR with ecrAssets.DockerImageAsset()
I use CDK to generate a CloudFormation stack.
When I run cdk synth and cdk deploy, the ECR image and the Task definition don't get updated. In order to force the update, I have to:
delete the built ...
Best practices
0
votes
0
replies
38
views
How to run tests with CDK pipelines
We are building and deploying a few system using the AWS CDK Pipeline, mostly with dotnet
Most cases we are building the deployed apps using dockerfile assets referenced in the CDK
Should we run the ...
0
votes
0
answers
49
views
AWS CDK use api gateway in a nested stack
I have this api gateway in my main stack:
api_gateway = _api_gw.LambdaRestApi(
self,
f"{construct_id}-gw-api",
handler=lambda_hello,
rest_api_name=f"gw-api{env_ext}"...
1
vote
1
answer
61
views
aws_secretsmanager: Secret Value is not correct. How does this work?
I want to create a new secret via cdk. It seems that I don't understand it...
Python code:
foo = secretsmanager.Secret(
self,
"foo",
generate_secret_string=...
0
votes
1
answer
56
views
Significant import discrepancy in Python CDK v2 when enabling API Gateway logging
I have been modifying an AWS CDK v2 stack (Python) to generate an API Gateway v2 stage with logging enabled. Sounds simple, there are countless examples on the internet, and countless agentic coding ...
0
votes
1
answer
39
views
How to wire AWS amplify resources together
In an AWS Amplify backed application, I can define two data models Inventory and Order. Then Amplify generates a GraphQL API and underlying DynamoDB tables for these models.
Then I can create a ...
-1
votes
1
answer
66
views
AWS CDK: using stages as "stacks" and apps as "stages"
I am working on migrating our Typescript application from Serverless Framework to AWS CDK.
Background
Our application started out as mostly just lambda functions, api gateways and some IoT resources. ...
0
votes
0
answers
53
views
Generating APP_KEY for Laravel using AWS CDK Constructs
I'm trying to create the APP_KEY via AWS CDK but I don't think there is a relevant Construct to do this.
I tried this:
APP_KEY: ECSSecret.fromSecretsManager(
new Secret(...
0
votes
1
answer
80
views
Changing DynamoDB from Provisioned to On Demand via CDK process?
I'm trying to change my DynamoDB table from Provisioned to On Demand via CDK.
The commented out code is what my table was provisioned with before, for autoscaling.
table = new TableV2(this, props....
0
votes
0
answers
63
views
Cloudformation/CDK Resource Policy creation missing Condition statement
Objective: Create a lambda_layer_version permission policy so that lambda functions from remote AWS accounts in the same AWS Organization can access the lambda_layer.
Problem: The Lambda_layer_version ...
0
votes
2
answers
103
views
AWS CDK how to point to specific aws profile at a project-level
I have a CDK app in typescript to deploy AWS resources for a specific project. I have multiple AWS accounts for different companies. I would usually do the following before running any CDK command:
...
0
votes
0
answers
42
views
AWS CDK: Fargate Service with two containers
I'm practicing Fargate deployment so trying to setup two containers in one task definition and creating a service based on that. The problem is the deployment fails because the health checks don't ...
0
votes
0
answers
39
views
AWS CDK: EcsDeployAction permissions to access S3
I'm using AWD CDK to deploy a Fargate task.
Initial deployment works great via Codepipeline, however subsequent changes to the application aren't picked up because the pipeline isn't deploying the new ...
1
vote
2
answers
79
views
AWS CDK Codebuild: GetAuthorizationToken operation denied
Following this tutorial on AWS:
https://docs.aws.amazon.com/codebuild/latest/userguide/sample-docker.html#sample-docker-running
It keeps failing for me at this like:
- aws ecr get-login-password --...
0
votes
1
answer
141
views
AWS CDK TS CodeBuild SelfMutate Failing
I'm currently having issues with one of our projects that is using a CodePipeline. Tried to update the packages and also reverted them to their previous versions. It did pass the SynthStep, but I'm ...
2
votes
1
answer
157
views
How to effectively update AWS Lambda@Edge functions in CDK after initial deployment?
I'm working with AWS CDK and have a Lambda@Edge function that needs to be updated after initial deployment. I understand that Lambda@Edge functions have replication limitations and can't be updated in ...
0
votes
2
answers
266
views
How do I create a CDK pipeline that can create a working Lambda from code built in that pipeline?
I've been trying to follow the CDK Pipelines guide to create a pipeline that deploys both the infrastructure and code for a set of Lambdas. Here's a summary of what I have:
monorepo/
├─ package.json
└─...
0
votes
0
answers
51
views
next.js app deployed with Amplify hosting '<myapp>.amplifyapp.com' page can’t be found'
I am deploying a next app via AWS CDK using Amplify hosting. When navigating to the successfully deployed site, receive 'This .amplifyapp.com page can’t be found'. build spec is as so:
buildSpec:...
0
votes
0
answers
125
views
How do I pass custom headers (X-Content-Type-Options) from AWS Lambda through API Gateway using Lambda Proxy Integration?
I'm working with AWS Lambda function that serves as the backend for an API Gateway endpoint using Lambda Proxy Integration. My Lambda handler is structured like this:
def lambda_handler(event, context)...
4
votes
2
answers
96
views
AWS Glue: Cannot define an array of struct with AWS CDK
I'm trying to create a glue table with a column that maps to an array of struct with a defined schema. Using the aws_glue_alpha experimental construct, definition of an array of struct is possible ...
0
votes
2
answers
51
views
Where do I find the aws-cdk `module` notes?
In the v2.199.0 release notes, it says:
Please check the notes for each specific module for more information.
What does this refer to exactly?
What is a "module" in CDK V2 and where do I ...
0
votes
1
answer
47
views
AWS CDK SageMaker Pipeline Lambda Step
I've been trying to deploy and AWS CDK stack that builds a SageMaker Pipeline with Lambda step, however I keep getting "Invalid request provided: Step[xyz]: Lambda function ARN cannot be null.
No ...
0
votes
0
answers
39
views
Problems with my WebApp deployment and ACM certificates
I'm trying to deploy my WebApp pipeline using CDK (https://docs.aws.amazon.com/cdk/v2/guide/home.html) with credentials set up in ~/.aws/credentials and ~/.aws/config.
I created a certificate in AWS ...
0
votes
1
answer
53
views
aws transfer "test connection" cannot access secret manager
I am defining an AWS Transfer SFTP connector in the CDK in Typescript. cdk deploy runs. When, however, I click on "Test Connection" in the console, I receive:
Cannot access secret manager
...
0
votes
1
answer
202
views
AWS credentials present but still getting error 'Need to perform AWS calls for account 127214200551, but no credentials have been configured'
I am trying to host my infra using aws cdk
I am using both env export and aws configure but still getting error
Environment aws://xxxx/us-east-1 failed bootstrapping: _AuthenticationError: Need to ...
1
vote
1
answer
58
views
Type-safe method for tracking dynamically exported parameters in base/derived classes
I'm working on an AWS CDK project using TypeScript and I'm trying to improve type safety for a parameter tracking system I've implemented. I have a base class that allows child stacks to export ...
0
votes
0
answers
24
views
AWS CDK, Adding Filters to KinesisEventSourceProps
I'm trying to use Filters on a KinesisEventSourceProps to filter out JSON where Service is equal to "NotKnown":
{
"Meta": {
"Service": "NotKnown",
...
2
votes
1
answer
184
views
Hot reload Lambda functions using a dockerized LocalStack, TypeScript and AWS CDK v2
I am using LocalStack Docker and AWS CDK v2 image and I want to hot reload Lambda functions after file saves
services:
backend:
container_name: "${LOCALSTACK_DOCKER_NAME:-backend}"
...
0
votes
2
answers
97
views
AWS CDK: EC2 Instance Connect Endpoint
Going through a networking course and using the CDK to setup the infrastructure.
I can't seem to figure out how to add the following EC2 Instance Connect Endpoint VPC Endpoint to an EC2 Instance:
My ...
0
votes
0
answers
49
views
Axios HttpService is undefined in AWS Lambda but is being registered on localhost
I'm creating a project that create a few recipes from a list of equipement, ingredients and restrictions. For that I'm trying to make a http request using axios but apparently nothing is being ...
0
votes
0
answers
47
views
CDK cognito.UsesrPool sending codes instead of links when updating email, and CFN won't let me use links in the verificationMessageTemplate
I have a cdk L2 cognito.UserPool (see below). I only want email and password authentication. I want users to be able to change their email. I want their email to be verified either at sign up or upon ...
0
votes
0
answers
73
views
Failing to create DataDog Lambda layer for Next.js website deployed through SST v2 framework
I am deploying a Next.js website to AWS via the SST v2 framework. I want to monitor it via DataDog. Below are the contents of my sst.config.ts file. I am not getting any errors during the deployment ...
0
votes
1
answer
40
views
Is it possible to retrieve the Access Endpoint of AWS::Transfer::WebApp during deployment?
I'm trying to retrieve the Access Endpoint of AWS::Transfer::WebApp during dotnet CDK deployment, because I need to pass it to the CORS policy of the associate S3 bucket, which accepts an array of ...
0
votes
1
answer
38
views
Appsync resolver code fromAsset can't find file in github actions build
I am building a CDK stack using GithubActions.
The package builds successfully until I add an AppSync resolver using resolver code from an asset. Weirdly, the appsync.SchemaFile.fromAsset() using the ...
0
votes
0
answers
38
views
Creating cdk pipeline but it deletes itself
I am new to cdk and trying to create a simple pipeline from udemy course and at first its fine I even saw that the pipeline was being created and when it was almost complete i got a pipeline not found
...
0
votes
1
answer
75
views
How to resolve apprunner service default domain value in CDK
I have created the AppRunner Service and I need the default domain value so I can integrate with API gateway VPC link. There is property attrs_service_url in CfnService but when I use that it will ...
0
votes
0
answers
60
views
How to make codebuild role in aws account make changes/access KMS keys in another aws account for a lambda function?
How to make codebuild role in aws account make changes/access KMS keys in another aws account for a lambda function?
We are facing below error message when we update lambda function in one aws account ...
-1
votes
1
answer
158
views
How deploy aws lambda function in one aws account using ecr image from another aws account through cdk typescript
How deploy aws lambda function in one aws account using ecr image from another aws account through cdk typescript?
Below is our cdk code in typescript in different files.
# bin/ApisecDataScienceInfra....
0
votes
0
answers
61
views
How can I set cache control headers for only specific objects in an S3 bucket using CDK?
I have an angular app served from an S3 bucket (with CloudFront). This is deployed using CDK, specifically via a s3Deployment.BucketDeployment. Each time the app is deployed the index.html file is ...
0
votes
1
answer
76
views
Setting up CloudMap on Fargate services using a PublicDnsNamespace
So, I am trying to set up a set of fargate services that need to communicate with each other. One is available on the interwebs via a load balancer.
I am currently using a PublicDnsNamespace and ...
0
votes
0
answers
116
views
AWS CDK: Properly Parsing JSON-formatted SSM String Parameter for Lambda Configuration
Question:
I'm using AWS CDK (v2) with TypeScript to configure Lambda functions using values stored in SSM String parameters with JSON format. While the parameter stores valid JSON, I'm having trouble ...
0
votes
0
answers
39
views
return header without quotes in aws lambda + remove header if empty
I'm trying to return a header from a lambda, it's returned as "<https://example.com/ab?offset=0&limit=0>; rel=\"next\"" instead of <https://example.com/ab?offset=0&...
0
votes
0
answers
181
views
AppConfig:StartConfigurationSession managed IAM policy attached to the Amplify unauthorized user role is being ignored
I'm using Amplify Gen.2 with custom CDKs to deploy my AWS backend for my iOS app written in Swift.
One of the CDK constructs implements the AWS AppConfig service, that's also where I'm setting the ...
0
votes
0
answers
32
views
AWS CDK Codepipeline deploy certain Stacks within cdk Stage
I have an existing aws account with infrastructure that has already been deployed via CDK with a codepipeline. The codepipeline is specifying which stacks to deploy via the addStage function of ...
1
vote
0
answers
77
views
API Gateway is censoring/modifying responses from ALB
How should one use the HttpAlbIntegration for HttpApi on API Gateway v2 library?
At current, my application does indeed build and deploy. However, when I query requests.get(endpoint/ping) the response ...
0
votes
1
answer
110
views
Configure SNS SMS Attributes using CDK
I'm trying to configure SNS SMS Attributes (see image below) using AWS CDK. However, I can't seem to find any documentation or examples on how to set these preferences using CDK (Typescript).
The ...
0
votes
0
answers
43
views
Locally testing AWS lambda with API Gateway with CICD pipeline
I have a CICD pipeline from a bitbucket repository to a AWS lambda - after push my code gets updated into the lambda in about a minute. Waiting this one minute to fix a small bug, rebuild and push is ...
0
votes
0
answers
68
views
AWS CDK: A method to get Elastic IPs associated with a Public Subnet
I need to get the Elastic IP that is associated with a Public Subnet (map_public_ip_on_launch=True).
I tried the following solutions: 1 2 (see printEIP())
However, looks like there's no public subnet'...
0
votes
0
answers
116
views
Is CDK's auto-generated AssumeRolePolicy sufficient, or should I specify a condition for specific ARN(s)?
I've been working with CDK for a bit, and haven't had any reason to modify any of the default roles/policies that are auto-generated when I create resources like lambdas or step functions. However, I ...