Upgrade to Pro — share decks privately, control downloads, hide ads and more …

CDK Components

Alexander Zeitler
November 20, 2019
51

CDK Components

Alexander Zeitler

November 20, 2019
Tweet

Transcript

  1. AWS CDK Constructs • Low-Level constructs based on AWS CloudFormation

    • IAM Policy, IAM User, IAM Group, IAM Permission… • S3 Bucket • Route53 HostedZone • AWS Lambda • CloudWatch 4 CDK Components
  2. CDK Components • Opinionated Compositions of CDK Constructs • Permissions

    to deploy a PWA on S3 with route53 CNAME • Add/Remove CNAME in HostedZone • route53:ChangeResourceRecordSets • route53:ListHostedZonesByName • route53:GetHostedZone • route53:GetChange • Create S3 Bucket / Deploy to S3 Bucket 6 CDK Components
  3. 7 CDK Components IAM Base (Administrators etc.) AWS root Account

    Application / Service CDK Component Security CI/CD CDK Component CDK Component
  4. CDK Components • Separation of Concerns • Reusable across teams

    / services / applications • “Best practices as Code” (Patterns) • Least privilege • Tested 8 CDK Components