Socket
Socket
Sign inDemoInstall

@aws-cdk/cloud-assembly-schema

Package Overview
Dependencies
2
Maintainers
5
Versions
444
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

@aws-cdk/cloud-assembly-schema


Version published
Maintainers
5
Created

Package description

What is @aws-cdk/cloud-assembly-schema?

@aws-cdk/cloud-assembly-schema is a package that defines the schema for AWS Cloud Development Kit (CDK) cloud assemblies. It provides a set of TypeScript interfaces and JSON schemas that describe the structure of the cloud assembly, which is the output of the CDK synthesis process. This package is essential for tools and libraries that need to interact with or manipulate CDK cloud assemblies.

What are @aws-cdk/cloud-assembly-schema's main functionalities?

Cloud Assembly Schema Definition

Defines the schema for a cloud assembly, including the version and artifacts. This schema is used to validate the structure of a cloud assembly JSON file.

{"type":"object","properties":{"version":{"type":"string"},"artifacts":{"type":"object","additionalProperties":{"$ref":"#/definitions/Artifact"}}},"required":["version","artifacts"],"definitions":{"Artifact":{"type":"object","properties":{"type":{"type":"string"},"properties":{"type":"object"}},"required":["type"]}}}

Artifact Type Definitions

Defines the schema for different types of artifacts, such as CloudFormation stacks and CDK assets. This schema is used to validate the structure of artifact definitions within a cloud assembly.

{"type":"object","properties":{"type":{"type":"string","enum":["aws:cloudformation:stack","aws:cdk:asset"]},"properties":{"type":"object","properties":{"templateFile":{"type":"string"},"parameters":{"type":"object","additionalProperties":{"type":"string"}}},"required":["templateFile"]}},"required":["type","properties"]}

Other packages similar to @aws-cdk/cloud-assembly-schema

Changelog

Source

1.48.0 (2020-07-01)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • stepfunctions-tasks: containerName is not supported as an override anymore and has been replaced by containerDefinition
  • stepfunctions-tasks: EvaluateExpression is now a construct representing a task state rather than an embedded property called task
  • backup: existing vaults that use a generated name will be replaced but existing recovery points won't be lost. The default vault removal policy is RETAIN and if it was set to DESTROY the deployment will fail because vault with recovery points cannot be deleted.

Features

Bug Fixes

  • apigateway: error defining lambda integration on imported RestApi (#8785) (05aaf42), closes #8679
  • backup: correctly validate Vault name (#8689) (07b330c)
  • backup: vault name may exceed 50 characters (#8653) (d09c121), closes #8627
  • batch: Invalid spot fleet service role (#8325) (034bc35), closes #6706
  • cli: post install warnings are not clearly visible when running cdk init (#8723) (2662db3), closes #8720
  • cli: unable to use "legacy" bootstrap with --public-access-block-configuration=false (#8755) (88f8e1e), closes #8728
  • cognito: cannot add multiple route53 targets to the same user pool domain (#8622) (32b54a5), closes #8603
  • core: bundling directory access permission is too restrictive (#8767) (1842168), closes #8757
  • eks: Helm chart timeout expects duration (#8773) (d1c2ef2), closes #8718
  • elbv2: Add missing accounts to ELBv2 Log Delivery. (#8715) (8914899)
  • rewrite: script ignores list of files (#8777) (bb514c1)
  • route53-targets: A/AAAA Alias Record to ELB cannot resolve IPv6 addresses (#8747) (87e2651), closes #6271
  • s3-notifications: broken permissions query in LambdaDestination (#8741) (10bd8e4), closes #8538

Readme

Source

Cloud Assembly Schema


cdk-constructs: Stable


This module is part of the AWS Cloud Development Kit project.

Cloud Assembly

The Cloud Assembly is the output of the synthesis operation. It is produced as part of the cdk synth command, or the app.synth() method invocation.

Its essentially a set of files and directories, one of which is the manifest.json file. It defines the set of instructions that are needed in order to deploy the assembly directory.

For example, when cdk deploy is executed, the CLI reads this file and performs its instructions:

  • Build container images.
  • Upload assets.
  • Deploy CloudFormation templates.

Therefore, the assembly is how the CDK class library and CDK CLI (or any other consumer) communicate. To ensure compatibility between the assembly and its consumers, we treat the manifest file as a well defined, versioned schema.

Schema

This module contains the typescript structs that comprise the manifest.json file, as well as the generated json-schema.

Versioning

The schema version is specified in the cloud-assembly.version.json file, under the version property. It follows semantic versioning, but with a small twist.

When we add instructions to the assembly, they are reflected in the manifest file and the json-schema accordingly. Every such instruction, is crucial for ensuring the correct deployment behavior. This means that to properly deploy a cloud assembly, consumers must be aware of every such instruction modification.

For this reason, every change to the schema, even though it might not strictly break validation of the json-schema format, is considered major version bump.

How to consume

If you'd like to consume the schema file in order to do validations on manifest.json files, simply download it from this repo and run it against standard json-schema validators, such as jsonschema.

Consumers must take into account the major version of the schema they are consuming. They should reject cloud assemblies with a major version that is higher than what they expect. While schema validation might pass on such assemblies, the deployment integrity cannot be guaranteed because some instructions will be ignored.

For example, if your consumer was built when the schema version was 2.0.0, you should reject deploying cloud assemblies with a manifest version of 3.0.0.

Contributing

See Contribution Guide

Keywords

FAQs

Last updated on 01 Jul 2020

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc