Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
@rio-cloud/cdk-v2-constructs
Advanced tools
CDK constructs to build RIO flavored CI/CD pipeline in AWS.
This package contains CDK2 constructs for RIO teams.
NPM:
@rio-cloud/cdk-v2-constructs
$ npx cdk init --language typescript
$ npm install --save @rio-cloud/cdk-v2-constructs
Watchful constructs help generate some default monitors based on the resources defined in your stack. E.g. - If your stack contains a lambda function, and you configure watchful construct, then it will create out of box metric monitors for Throttling, Lambda error and Log error monitors. The ever-growing list of resources that watchful creates monitors for as of today are:
Simply add the following to your CDK stack to get started.
import * as rio from '@rio-cloud/cdk-v2-constructs';
...
const dw = new rio.watchfulv2.Watchful(this, 'Watchful', {
serviceName,
});
dw.watchScope(this); // Generates alarms for all supported resources
...
There are options to override some defaults too. Please be aware that the library is very opinionated and is written with the most general use cases in mind. It is necessary to keep the use of the library simple enough, which means that there is only limited flexibility regarding the configuration options. Having said that, feel free to reach out to team CLAID over slack #rio-platform-support in case of feature requests.
The broad classification of the monitors created by watchful are
For Metrics query monitors, you can configure the priority (defaults as 3). For log error monitors, you can configure priority, renotification interval and can configure if the auto close of the monitor is disabled.
...
const dw = new Watchful(stack, 'Watchful2', {
logErrorMonitorConfig: {
disableAutoClose: true,
renotifyInterval: 150,
priority: 4,
},
queryErrorMonitorConfig: {
priority: 4
}
});
dw.watchScope(stack);
There is an overrideAlarmThreshold
method which can be used to override the default watchful thresholds. Please make sure to use the method before the watchscope
function.
E.g. -
...
const dw = new Watchful(stack, 'Watchful', {});
dw.overrideAlarmThreshold({
monitoredResourceScope: lambdaA,
monitorType: MonitorType.ERRORS,
threshold: 5,
});
dw.watchScope(stack);
The pipelines can be tagged with key 'pipeline_type' to the following values:
The construct ClassifyPipelineType
can be used to tag the pipeline accordingly. This tag is also picked up by the Datadog pipeline metric used to monitor the pipelines. It is added as a tag to the metric. This gives you more flexibility with managing the monitors also. E.g. some teams don't want to get alerted for branch pipelines. You can then leverage this metric tag to filter the pipelines.
Example:
const pipeline = new pipelines.CodePipeline(this, 'Pipeline', {
...
});
rio.ClassifyPipelineType.apply(pipeline, rio.RioPipelineType.DEPLOY);
FAQs
CDK constructs to build RIO flavored CI/CD pipeline in AWS.
The npm package @rio-cloud/cdk-v2-constructs receives a total of 2,989 weekly downloads. As such, @rio-cloud/cdk-v2-constructs popularity was classified as popular.
We found that @rio-cloud/cdk-v2-constructs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.