Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
@clouden-cdk/aws-lambda-typescript
Advanced tools
Copyright (C) Clouden Oy 2019-2020, author Kenneth Falck kennu@clouden.net.
Released under the MIT license.
Versioning indicates compatibility with AWS CDK major and minor versions. 1.35.x will be compatible with AWS CDK 1.35.x and so on. AWS CDK has recently stabilized significantly and usually this module is compatible with the latest version.
This is a drop-in wrapper replacement for the AWS CDK Lambda Code asset object to add TypeScript support for Lambda Functions
When using this wrapper, the source asset path is first compiled as TypeScript and the results are saved in new deploy directory (.deploy), which is then deployed using the standard AWS CDK Lambda Code object.
npm install @clouden-cdk/aws-lambda-typescript
Use TypeScriptCode.asset('path/to/lambda-source-code') when creating a Lambda Function.
The path that you provide should include at least a package.json file and a tsconfig.json file.
You can specify an optional options object as a second parameter to customize the npm install command or to copy additional files to the .deploy directory before deploying the Lambda function.
The default npm install command is npm install --production
.
The source paths specified with copyFiles are relative to the source directory (given as the first parameter). The target paths specified with copyFiles are relative to the .deploy directory (Lambda root path).
TypeScriptCode.asset('path/to/lambda-source-code', {
npmInstallCommand: 'npm',
npmInstallArguments: ['install', '--production'],
copyFiles: [{
sourcePath: 'data/file.dat', // relative to source path, can specify a single file only
targetPath: 'data/file.dat', // relative to .deploy path, can specify a single file only
}],
})
import { Function } from '@aws-cdk/aws-lambda'
import { TypeScriptCode } from '@clouden-cdk/aws-lambda-typescript'
const lambdaFunction = new Function(this, 'TestFunction', {
functionName: 'test-function',
code: TypeScriptCode.asset('path/to/lambda-source-code')),
handler: 'handler.default',
runtime: lambda.Runtime.NODEJS_12_X,
})
Here is an example tsconfig.json file that we use in Clouden projects like webcat.fi:
{
"compilerOptions": {
"target":"ES2017",
"module": "commonjs",
"lib": ["es2016", "es2017.object", "es2017.string", "esnext.asynciterable"],
"declaration": true,
"strict": true,
"noImplicitAny": true,
"strictNullChecks": true,
"noImplicitThis": true,
"alwaysStrict": true,
"noUnusedLocals": true,
"noUnusedParameters": true,
"noImplicitReturns": true,
"noFallthroughCasesInSwitch": false,
"inlineSourceMap": true,
"inlineSources": true,
"experimentalDecorators": true,
"strictPropertyInitialization": false,
"emitDecoratorMetadata": true,
"esModuleInterop": true,
"rootDir": "."
}
}
The TypeScript build involves three steps:
The end result of these steps is that the deploy path contains everything needed to deploy the Lambda function.
The TypeScriptCode object keeps track of build paths and only builds each path once per CDK invocation. It also keeps track of package.json and package-lock.json files and only runs npm install when they have changed, or when npm install has not yet been run.
FAQs
TypeScript Build Step for AWS CDK Lambda Functions
The npm package @clouden-cdk/aws-lambda-typescript receives a total of 6 weekly downloads. As such, @clouden-cdk/aws-lambda-typescript popularity was classified as not popular.
We found that @clouden-cdk/aws-lambda-typescript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.