Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@pulumi/aws-native
Advanced tools
The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)
The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage any AWS resource that's supported by the AWS Cloud Control API. With Pulumi's native provider for AWS Cloud Control, you get same-day access to all new AWS resources and all new properties on existing resources supported by the Cloud Control API. You can use the AWS Cloud Control provider from a Pulumi program written in any Pulumi language: C#, Go, JavaScript/TypeScript, and Python. You'll need to install and configure the Pulumi CLI if you haven't already.
[!NOTE] This provider covers all resources as supported by the AWS Cloud Control API. This does not yet include all AWS resources. See the list of supported resources for full details.
For new projects, we recommend starting with our primary AWS Provider and adding AWS Cloud Control resources on an as needed basis.
To learn how to configure credentials refer to the AWS configuration options.
You can quickly launch a shell environment with all the required dependencies using devbox:
which devbox || curl -fsSL https://get.jetpack.io/devbox | bash
devbox shell
Alternatively, you can develop in a preconfigured container environment using an editor or service that supports the devcontainer standard such as VS Code or Github Codespaces. Please note that building this project can be fairly memory intensive, if you are having trouble building in a container, please ensure you have at least 12GB of memory available for the container.
Run the following commands to install Go modules, generate all SDKs, and build the provider:
make ensure
make build
Add the bin
folder to your $PATH
or copy the bin/pulumi-resource-aws-native
file to another location in your $PATH
.
To run unittests, use:
make test_provider
Navigate to the ECS example and run Pulumi:
cd ./examples/ecs
yarn link @pulumi/aws-native
pulumi config set aws:region us-west-2
pulumi config set aws-native:region us-west-2
pulumi up
make build
can be a bit slow as it rebuilds the sdks for every language;
you can use make provider
or make codegen
to just rebuild the provider plugin or codegen binaries
Oftentimes, it can be informative to investigate the precise requests this provider makes to upstream AWS APIs. By default, the Pulumi CLI writes all of its logs to files rather than stdout or stderr (though this can be overridden with the --logtostderr
flag). This works to our benefit, however, as the AWS SDK used in this provider writes to stderr by default. To view a trace of all HTTP requests and responses between this provider and AWS APIs, run the Pulumi CLI with the following arguments:
pulumi -v 9 --logflow [command]
this will correctly set verbosity to the level that the provider expects to log these requests (via -v 9
), as well as flowing that verbosity setting down from the Pulumi CLI to the provider itself (via --logflow
).
FAQs
The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)
The npm package @pulumi/aws-native receives a total of 56,358 weekly downloads. As such, @pulumi/aws-native popularity was classified as popular.
We found that @pulumi/aws-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.