This repository means to construct CDK codebased to automate HA architecture deployment on AWS, with common AWS services organized into stacks. All dependecies between stacks are well defined, so you can selectively pick only the useful stacks specifically to your project.
Before you can launch CDK stacks, make sure you have following environments installed on your machine.
- Lastest AWS CLI version 2 with aws credentials configured (Ref:https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-quickstart.html)
- Lastest AWS CDK Toolkit (Ref:https://docs.aws.amazon.com/cdk/latest/guide/getting_started.html)
- Python AWS CDK applications require Python 3.6 or later
Once the environments are set up, you can install the required dependencies.
$ pip install -r requirements.txt
At this point you can now synthesize the CloudFormation template for this code.
$ cdk synth
To add additional dependencies, for example other CDK libraries, just add
them to your setup.py file and rerun the pip install -r requirements.txt
command.
cdk lslist all stacks in the appcdk synthemits the synthesized CloudFormation templatecdk deploydeploy this stack to your default AWS account/regioncdk diffcompare deployed stack with current statecdk docsopen CDK documentation
The cdk.json file tells the CDK Toolkit how to execute your app.
| Stack ID | Services | Dependent |
|---|---|---|
| cdk-vpc | Subnets, NAT Gateway, Bastion Host | - |
| cdk-app | Application Load-Balancer, Auto-scaling group, EC2 | cdk-vpc |
| cdk-db | Multi-AZ RDS | cdk-vpc |
| cdk-cdn | Cloudfront, ACM, Route 53 | cdk-app |
| cdk-s3 | S3 bucket, Gateway VPC Endpoint | cdk-vpc |
This architecture contains multiple stacks that you can selectively deploy based on your project needs. For example, if you only need auto-scaling EC2 and RDS to serve your dynamic application, you can deploy only this three stacks:
$ cdk deploy cdk-vpc cdk-app cdk-db
Make sure dependent stack is deployed before deploying a certain stack. For instance, make sure to deploy cdk-app before deploying cdk-cdn (Kinda a simple architectural logic, you need to have an origin before having a CDN distribution).
- EBS encryption & Delete on termninate on Bastion host & autoscaling group EC2
- WAFv2 managed rule on Cloudfront
- Add Environment variable to deploy resources cross-region
- Add key pairs to EC2
This library is licensed under the Apache 2.0 License.