Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@amazon-codecatalyst/blueprint-component.environments
Advanced tools
This is a representation of a codecatalyst environment.
import {...} from '@amazon-codecatalyst/blueprint-component.environments'
The environment component can be found here.
The blueprint wizard is dynamically generated from the Options
interface exposed through the
[[wizard|https://github.com/aws/codecatalyst-blueprints/wiki/Wizard]]. Blueprints supports generating UI components from exposed types.
export interface Options extends ParentOptions {
...
myNewEnvironment: EnvironmentDefinition<{
thisIsMyFirstAccountConnection: AccountConnection<{
thisIsARole: Role<['lambda', 's3', 'dynamo']>;
}>;
}>;
}
This allows authors to deploy their applications to the cloud.
The above interface will generate a UI component that asks for a new Environment myNewEnvironment
with a single account connection
thisIsMyFirstAccountConnection
and a role on that account connection thisIsARole
with ['lambda', 's3', 'dynamo']
as the minimum required role
capabilities. Since not all users will have account connections, it is important to check for the case where a user does not connect an account, and
does not connect an account with a role either. This is reflected accurately in the type definition.
Roles can also be annotated with @inlinePolicies
per
the documentation here.
The environment component requires a name
and an environmentType
. The minimal required default shape looks like this:
{
...
"myNewEnvironment": {
"name": "myProductionEnvironment",
"environmentType": "PRODUCTION"
},
}
The UI component will then prompt the user for various fields and as they fill in those fields the blueprint will get a fully expanded shape. It is
sometimes helpful to include the full 'mock' (see the below examples) in the defaults.json
for testing and development purposes.
{
...
"thisIsMyEnvironment": {
"name": "myProductionEnvironment",
"environmentType": "PRODUCTION",
"thisIsMySecondAccountConnection": {
"id": "12345678910",
"name": "my-account-connection-name",
"secondAdminRole": {
"arn": "arn:aws:iam::12345678910:role/ConnectedCodecatalystRole",
"name": "ConnectedCodecatalystRole",
"capabilities": [
"lambda",
"s3",
"dynamo"
]
}
}
}
}
export interface Options extends ParentOptions {
/**
* The name of an environment
* @displayName This is a Environment Name
* @collapsed
*/
thisIsMyEnvironment: EnvironmentDefinition<{
/**
* blah blah blah some comments about the account that i'm deploying into
* @displayName This account connection has an overriden name
* @collapsed
*/
thisIsMyFirstAccountConnection: AccountConnection<{
/**
* Blah blah some information about the role that I expect
* e.g. here's a copy-pastable policy: [to a link]
* @displayName This role has an overriden name
*/
adminRole: Role<['admin', 'lambda', 's3', 'cloudfront']>;
/**
* Blah blah some information about the second role that I expect
* e.g. here's a copy-pastable policy: [to a link]
*/
lambdaRole: Role<['lambda', 's3']>;
}>;
/**
* blah blah blah some comments about the account that i'm deploying into
*/
thisIsMySecondAccountConnection: AccountConnection<{
/**
* Blah blah some information about the role that I expect
* e.g. here's a copy-pastable policy: [to a link]
*/
secondAdminRole: Role<['admin', 'lambda', 's3', 'cloudfront']>;
/**
* Blah blah some information about the second role that I expect
* e.g. here's a copy-pastable policy: [to a link]
*/
secondLambdaRole: Role<['lambda', 's3']>;
}>;
}>;
}
{
...
"thisIsMyEnvironment": {
"name": "my-production-environment",
"environmentType": "PRODUCTION",
"thisIsMySecondAccountConnection": {
"id": "12345678910",
"name": "my-connected-account",
"secondAdminRole": {
"name": "LambdaCodecatalystRole",
"arn": "arn:aws:iam::12345678910:role/LambdaCodecatalystRole",
"capabilities": [
"admin",
"lambda",
"s3",
"cloudfront"
]
},
"secondLambdaRole": {
"name": "LambdaCodecatalystRole",
"arn": "arn:aws:iam::12345678910:role/LambdaCodecatalystRole",
"capabilities": [
"lambda",
"s3"
]
}
},
"thisIsMyFirstAccountConnection": {
"id": "12345678910",
"name": "my-connected-account",
"adminRole": {
"name": "LambdaCodecatalystRole",
"arn": "arn:aws:iam::12345678910:role/LambdaCodecatalystRole",
"capabilities": [
"admin",
"lambda",
"s3",
"cloudfront"
]
},
"lambdaRole": {
"name": "LambdaCodecatalystRole",
"arn": "arn:aws:iam::12345678910:role/LambdaCodecatalystRole",
"capabilities": [
"lambda",
"s3"
]
}
}
},
}
FAQs
This is a representation of a codecatalyst environment.
The npm package @amazon-codecatalyst/blueprint-component.environments receives a total of 2,526 weekly downloads. As such, @amazon-codecatalyst/blueprint-component.environments popularity was classified as popular.
We found that @amazon-codecatalyst/blueprint-component.environments demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.