
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
cdk-efs-assets
Advanced tools
CDK construct library to populate Amazon EFS assets from Github or S3.
GithubSourceSync
The GithubSourceSync
deploys your Amazon EFS assets from specified Github repository.
import { GithubSourceSync } from 'cdk-efs-assets';
const app = new App();
const env = {
region: process.env.CDK_DEFAULT_REGION ?? AWS_DEFAULT_REGION,
account: process.env.CDK_DEFAULT_ACCOUNT,
};
const stack = new Stack(app, 'testing-stack', { env });
const vpc = ec2.Vpc.fromLookup(stack, 'Vpc', { isDefault: true })
const fs = new efs.FileSystem(stack, 'Filesystem', {
vpc,
removalPolicy: RemovalPolicy.DESTROY,
})
const efsAccessPoint = fs.addAccessPoint('EfsAccessPoint', {
path: '/demo',
createAcl: {
ownerGid: '1001',
ownerUid: '1001',
permissions: '0755',
},
posixUser: {
uid: '1001',
gid: '1001',
}
});
// create the one-time sync from Github repository to Amaozn EFS
new GithubSourceSync(stack, 'GithubSourceSync', {
repository: 'https://github.com/pahud/cdk-efs-assets.git',
efsAccessPoint,
runsAfter: [fs.mountTargetsAvailable],
vpc,
});
S3ArchiveSync
The S3ArchiveSync
deploys your Amazon EFS assets from a specified zip archive file stored in S3. The extracted contents will be placed into the root directory of the access point.
If the syncOnUpdate
property is set to true
(defaults to true
), then the specified zip file path will be monitored, and if a new object is uploaded to the path, then it will resync the data to EFS. Note that to use this functionality, you must have a CloudTrail Trail in your account that captures the desired S3 write data event.
WARNING: The contents of the access point will be removed before extracting the zip file.
import { S3ArchiveSync } from 'cdk-efs-assets';
const app = new App();
const env = {
region: process.env.CDK_DEFAULT_REGION ?? AWS_DEFAULT_REGION,
account: process.env.CDK_DEFAULT_ACCOUNT,
};
const stack = new Stack(app, 'testing-stack', { env });
const vpc = ec2.Vpc.fromLookup(stack, 'Vpc', { isDefault: true })
const fs = new efs.FileSystem(stack, 'Filesystem', {
vpc,
removalPolicy: RemovalPolicy.DESTROY,
})
const efsAccessPoint = fs.addAccessPoint('EfsAccessPoint', {
path: '/demo',
createAcl: {
ownerGid: '1001',
ownerUid: '1001',
permissions: '0755',
},
posixUser: {
uid: '1001',
gid: '1001',
}
});
const bucket = Bucket.fromBucketName(this, 'Bucket', 'demo-bucket');
// Will sync initial data from compressed S3 archive to EFS, and resync if the zip file in S3 changes
new S3ArchiveSync(this, 'S3ArchiveSync', {
bucket,
zipFilePath: 'folder/foo.zip',
vpc,
efsAccessPoint,
runsAfter: [fs.mountTargetsAvailable],
});
S3SourceSync
TBD
FAQs
Amazon EFS assets from Github repositories or S3 buckets
The npm package cdk-efs-assets receives a total of 5 weekly downloads. As such, cdk-efs-assets popularity was classified as not popular.
We found that cdk-efs-assets demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.