Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(new construct): aws-openapigateway-lambda #912

Merged
merged 61 commits into from
Jul 26, 2023
Merged
Show file tree
Hide file tree
Changes from 60 commits
Commits
Show all changes
61 commits
Select commit Hold shift + click to select a range
bf70adb
README for new openapi-based apigatway-to-lambda construct.
georgebearden Mar 1, 2023
824b57f
fix(core) prevent lambda id conflict with multiple buildLambdaFunctio…
alsoknownasdrew Mar 2, 2023
623aaba
chore(release): 2.33.0
aws-solutions-constructs-team Mar 3, 2023
ae3d91e
chore(release prep): Update CHANGELOG.md and align-version.js
biffgaut Mar 3, 2023
821a054
Freeze @types/node version in cdk-integ
biffgaut Mar 3, 2023
26e7c28
Freeze @types/node version in cdk-integ
biffgaut Mar 3, 2023
f26e8d4
Update step functions integ tests
biffgaut Mar 4, 2023
a8c1e44
chore(core): Add warnings about using core functions from outside of …
biffgaut Mar 9, 2023
e7eb012
fix(StepFunctions): Address LogGroup behavior problems (#922)
biffgaut Mar 17, 2023
4122462
Update package.json
biffgaut Mar 17, 2023
7e1ccfd
chore(release): 2.34.0
aws-solutions-constructs-team Mar 18, 2023
2de8284
chore(release-prep): Updated CHANGELOG.md and align-version.js
biffgaut Mar 18, 2023
720f4fd
chore(release-prep): align-version.js
biffgaut Mar 18, 2023
26a69f3
chore(core): migrate to assertions (#929)
biffgaut Mar 21, 2023
c909a16
Update the cloudfront-to-s3 construct to correctly set the logging bu…
georgebearden Mar 22, 2023
23ecefe
Update README
georgebearden Mar 23, 2023
b391da8
Merge branch 'main' into openapigateway-to-lambda
georgebearden Mar 23, 2023
93d05bd
Update openapigateway-to-lambda README
georgebearden Mar 24, 2023
a8312aa
Update README/architecture for openapigateway-to-lambda.
georgebearden Mar 24, 2023
5deb3ef
Add openapigateway-to-lambda code and initial tests
georgebearden Mar 24, 2023
7b3eb34
update openapigateway-to-lambda package.json dependency versions.
georgebearden Mar 24, 2023
0a622f7
Update openapigateway-to-lambda
georgebearden Mar 24, 2023
ffb71d1
Merge branch 'main' into openapigateway-to-lambda
georgebearden Mar 24, 2023
987b2fc
Update openapigateway README
georgebearden Mar 24, 2023
79caa76
don't depend on NodeJsFunction docker env
georgebearden Mar 24, 2023
6cff5b8
Update openapigateway-to-lambda README to reflect actual construct API.
georgebearden Mar 27, 2023
55c9dd4
temp commit
georgebearden Mar 28, 2023
fa7921d
Update snapshot test for openapigateway-to-lambda construct.
georgebearden Apr 4, 2023
52e5a0b
Merge branch 'main' into openapigateway-to-lambda
georgebearden Apr 4, 2023
ca2fc49
fix package.json version field
georgebearden Apr 4, 2023
88bdb00
update snapshot
georgebearden Apr 5, 2023
e93b071
update openapigateway-to-lambda custom resource to suppress standard …
georgebearden Apr 5, 2023
e46a15f
[wip] resources project
georgebearden May 8, 2023
f2749ee
fix dependency self reference on new resources module
georgebearden May 8, 2023
f09acc7
fix dependency self reference on new resources module
georgebearden May 8, 2023
02da2e1
Add integ test to the template writer resource.
georgebearden May 8, 2023
c7fb7cd
Add integ tests to template-writer resource.
georgebearden May 10, 2023
a260a8e
Merge branch 'main' into openapigateway-to-lambda
georgebearden May 10, 2023
56364de
Update template-writer resource integ tests to clean up test buckets …
georgebearden May 10, 2023
5cc0052
Add additinal tests to get 100% coverage on aws-openapigateway-lambda
georgebearden May 10, 2023
d2c0a09
Add additional integration tests to template resource writer and aws-…
georgebearden May 12, 2023
c600aac
remove eslintignore line that was obsolete
georgebearden May 12, 2023
4c33302
Merge branch 'main' into openapigateway-to-lambda
georgebearden May 12, 2023
b1d6b9d
cleanup eslint ignore and update openapigateway-to-lambda props.
georgebearden May 15, 2023
a4f42c5
Update python/java code samples for openapigateway-to-lambda.
georgebearden May 15, 2023
4d24c86
Update openapigateway-to-lambda README
georgebearden May 15, 2023
0027bec
Update resources README
georgebearden May 15, 2023
704ddd9
Update resources integ test
georgebearden May 15, 2023
0ff749a
update resources integ test snapshot
georgebearden May 16, 2023
75386c5
Update integ test snapshots for aws-openapigateway-lambda.
georgebearden May 16, 2023
252963c
Update aws-openapigateway-lambda construct to trigger api deployments…
georgebearden May 22, 2023
5721230
Add new integ test for cognito authorizer on aws-openapigateway-lambd…
georgebearden Jun 26, 2023
59d9774
address minor pr feedback.
georgebearden Jun 27, 2023
6e16923
Remove integration tests that use BucketDeployment as the asset hash …
georgebearden Jun 29, 2023
e74b89c
Remove integration tests that use BucketDeployment as the asset hash …
georgebearden Jun 29, 2023
2a91311
Address pr feedback.
georgebearden Jun 30, 2023
c2ba305
Add additional tests to aws-openapigateway-lambda construct.
georgebearden Jul 3, 2023
f742c92
Merge branch 'main' into openapigateway-to-lambda
georgebearden Jul 3, 2023
87a88eb
Update integ tests after latest cdk lib update.
georgebearden Jul 3, 2023
1ed9b84
Add optional construct id parameter to the buildLambdaFunction function.
georgebearden Jul 20, 2023
43cd699
Update aws-openapigateway-lambda property descriptions to better expl…
georgebearden Jul 26, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
lib/*.js
test/*.js
*.d.ts
coverage
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
lib/*.js
test/*.js
*.js.map
*.d.ts
node_modules
*.generated.ts
dist
.jsii

.LAST_BUILD
.nyc_output
coverage
.nycrc
.LAST_PACKAGE
*.snk
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Exclude typescript source and config
*.ts
tsconfig.json
coverage
.nyc_output
*.tgz
*.snk
*.tsbuildinfo

# Include javascript files and typescript declarations
!*.js
!*.d.ts

# Exclude jsii outdir
dist

# Include .jsii
!.jsii

# Include .jsii
!.jsii
Original file line number Diff line number Diff line change
@@ -0,0 +1,221 @@
# aws-openapigateway-lambda module
<!--BEGIN STABILITY BANNER-->

---

![Stability: Experimental](https://img.shields.io/badge/stability-Experimental-important.svg?style=for-the-badge)

---
<!--END STABILITY BANNER-->

| **Reference Documentation**:| <span style="font-weight: normal">https://docs.aws.amazon.com/solutions/latest/constructs/</span>|
|:-------------|:-------------|
<div style="height:8px"></div>

| **Language** | **Package** |
|:-------------|-----------------|
|![Python Logo](https://docs.aws.amazon.com/cdk/api/latest/img/python32.png) Python|`aws_solutions_constructs.aws_openapigateway_lambda`|
|![Typescript Logo](https://docs.aws.amazon.com/cdk/api/latest/img/typescript32.png) Typescript|`@aws-solutions-constructs/aws-openapigateway-lambda`|
|![Java Logo](https://docs.aws.amazon.com/cdk/api/latest/img/java32.png) Java|`software.amazon.awsconstructs.services.openapigatewaylambda`|

## Overview

This AWS Solutions Construct implements an Amazon API Gateway REST API defined by an OpenAPI specificiation file connected to an AWS Lambda function.

Here is a minimal deployable pattern definition:

Typescript
``` typescript
import { Stack, StackProps } from 'aws-cdk-lib';
import { Construct } from 'constructs';
import { OpenApiApiGatewayToLambda } from './construct';
import { Asset } from 'aws-cdk-lib/aws-s3-assets';
import * as path from 'path';
import * as lambda from 'aws-cdk-lib/aws-lambda';

const apiDefinitionAsset = new Asset(this, 'ApiDefinitionAsset', {
path: path.join(__dirname, 'openapispec.yaml')
});

new OpenApiGatewayToLambda(this, 'OpenApiGatewayToLambda', {
apiDefinitionAsset,
apiIntegrations: [
{
id: 'MessagesHandler',
lambdaFunctionProps: {
runtime: lambda.Runtime.NODEJS_18_X,
handler: 'index.handler',
code: lambda.Code.fromAsset(`${__dirname}/messages-lambda`),
}
}
]
});
```

Python
``` python
from aws_solutions_constructs.aws_openapigateway_lambda import ApiGatewayToLambda
from aws_cdk import (
Stack
)

import aws_cdk.aws_s3_assets as s3_assets
import aws_cdk.aws_lambda as lambda_
from constructs import Construct
from .api_definition import ApiDefinition

api_definition_asset = s3_assets.Asset(self, "ApiDefinitionAsset",
path="openapispec.yaml"
)

api_integration = ApiDefinition("MessagesHandler", (
runtime=lambda_.Runtime.NODEJS_18_X,
handler="index.handler",
code=lambda_.Code.from_inline("exports.handler = handler.toString()")
))

ApiGatewayToLambda(self, "OpenApiGatewayToLambda",
api_definition_asset = api_definition_asset,
api_integrations = [ api_integration]
)
```

Java
``` java
import software.amazon.awscdk.services.lambda.Code;
import software.amazon.awscdk.services.lambda.FunctionProps;
import software.amazon.awscdk.services.s3.assets.Asset;
import software.amazon.awscdk.services.s3.assets.AssetProps;
import software.amazon.awsconstructs.services.openapigatewaylambda.ApiIntegration;
import software.amazon.awsconstructs.services.openapigatewaylambda.OpenApiGatewayToLambda;
import software.amazon.awsconstructs.services.openapigatewaylambda.OpenApiGatewayToLambdaProps;
import software.constructs.Construct;
import software.amazon.awscdk.Stack;
import software.amazon.awscdk.StackProps;

import java.util.Collections;

import static software.amazon.awscdk.services.lambda.Runtime.NODEJS_18_X;

final Asset apiDefintionAsset = new Asset(this, "ApiDefinition", AssetProps.builder().path("openapispec.yaml").build());

final ApiIntegration apiIntegration = ApiIntegration.builder()
.id("MessagesHandler")
.lambdaFunctionProps(new FunctionProps.Builder()
.runtime(NODEJS_18_X)
.code(Code.fromAsset("lambda"))
.handler("index.handler")
.build())
.build();

new OpenApiGatewayToLambda(this, "OpenApiGatewayToLambda", OpenApiGatewayToLambdaProps.builder()
.apiDefinitionAsset(apiDefintionAsset)
.apiIntegrations(Collections.singletonList(apiIntegration))
.build());
```

## Pattern Construct Props

| **Name** | **Type** | **Description** |
|:-------------|:----------------|-----------------|
|apiGatewayProps?|[`apigateway.RestApiBaseProps`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_apigateway.RestApiBaseProps.html)|Optional user-provided props to override the default props for the API.|
|apiDefinitionBucket?|[`s3.IBucket`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html)|S3 Bucket where the OpenAPI spec file is located. When specifying this property, `apiDefinitionKey` must also be specified.|
|apiDefinitionKey?|`string`|S3 Object name of the OpenAPI spec file. When specifying this property, `apiDefinitionBucket` must also be specified.|
|apiDefinitionAsset?|[`aws_s3_assets.Asset`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3_assets.Asset.html)|Local file asset of the OpenAPI spec file.|
|apiIntegrations|`ApiIntegration[]`|One or more key-value pairs that contain an id for the api integration and either an existing lambda function or an instance of the LambdaProps. Please see the `Overview of how the OpenAPI file transformation works` section below for more usage details.|
|logGroupProps?|[`logs.LogGroupProps`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_logs.LogGroupProps.html)|User provided props to override the default props for for the CloudWatchLogs LogGroup.|

## Pattern Properties

| **Name** | **Type** | **Description** |
|:-------------|:----------------|-----------------|
|apiLambdaFunctions|`ApiLambdaFunction[]`|Returns an array of ApiLambdaFunction objects, where each has an `id` of the `apiIntegration` and the corresponding `lambda.Function` that it maps to.|
|apiGateway|[`api.SpecRestApi`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_apigateway.SpecRestApi.html)|Returns an instance of the API Gateway REST API created by the pattern.|
|apiGatewayCloudWatchRole?|[`iam.Role`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam.Role.html)|Returns an instance of the iam.Role created by the construct for API Gateway for CloudWatch access.|
|apiGatewayLogGroup|[`logs.LogGroup`](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_logs.LogGroup.html)|Returns an instance of the LogGroup created by the construct for API Gateway access logging to CloudWatch.|

## Overview of how the OpenAPI file transformation works
This construct automatically transforms an incoming OpenAPI Definition (residing locally or in S3) by auto-populating the `uri` fields of the `x-amazon-apigateway-integration` integrations with the resolved value of the backing lambda functions. It does so by allowing the user to specify the `apiIntegrations` property and then correlates it with the api definition.

Looking at an example - a user creates an instantiation of `apiIntegrations` that specifies one integration named `MessagesHandler` that passes in a set of `lambda.FunctionProps` and a second integration named `PhotosHandler` that passes in an existing `lambda.Function`:

```typescript
const apiIntegrations: ApiIntegration[] = [
{
id: 'MessagesHandler',
lambdaFunctionProps: {
runtime: lambda.Runtime.NODEJS_18_X,
handler: 'index.handler',
code: lambda.Code.fromAsset(`${__dirname}/messages-lambda`),
}
},
{
id: 'PhotosHandler',
existingLambdaObj: new lambda.Function(this, 'PhotosLambda', {
runtime: lambda.Runtime.NODEJS_18_X,
handler: 'index.handler',
code: lambda.Code.fromAsset(`${__dirname}/photos-lambda`),
})
}
]
```

And a corresponding api definition with `GET` and `POST` methods on a `/messages` resource and a `GET` method on a `/photos` resource.

```
openapi: "3.0.1"
info:
title: "api"
version: "2023-02-20T20:46:08Z"
paths:
/messages:
get:
x-amazon-apigateway-integration:
httpMethod: "POST"
uri: MessagesHandler
passthroughBehavior: "when_no_match"
type: "aws_proxy"
post:
x-amazon-apigateway-integration:
httpMethod: "POST"
uri: MessagesHandler
passthroughBehavior: "when_no_match"
type: "aws_proxy"
/photos:
get:
x-amazon-apigateway-integration:
httpMethod: "POST"
uri: PhotosHandler
passthroughBehavior: "when_no_match"
type: "aws_proxy"
```

When the construct is created or updated, it will overwrite the `MessagesHandler` string with the fully resolved lambda proxy uri of the `MessagesHandlerLambdaFunction`, e.g., `arn:${Aws.PARTITION}:apigateway:${Aws.REGION}:lambda:path/2015-03-31/functions/${messagesLambda.functionArn}/invocations`, and similarly for the `PhotosHandler` string and `PhotosHandlerLambdaFunction`, resulting in a valid OpenAPI spec file that is then passed to the `SpecRestApi` construct.

For more information on specifying an API with OpenAPI, please see the [OpenAPI Specification](https://spec.openapis.org/oas/latest.html)

## ApiIntegration Details
This construct defines a custom type, `ApiIntegration`, that is specified as a required prop. The type has a required property, `id`, and two optional properties `existingLambdaObj` and `lambdaFunctionProps`. The `id` property is used to map the corresponding lambda function being defined with the placeholder string in the OpenAPI template file, and is not a CDK construct ID. Exactly one of `existingLambdaObj` or `lambdaFunctionProps` must be specified or the construct will throw an error.

## Default settings

Out of the box implementation of the Construct without any override will set the following defaults:

### Amazon API Gateway
* Deploy an edge-optimized API endpoint
* Enable CloudWatch logging for API Gateway
* Configure least privilege access IAM role for API Gateway
* Enable X-Ray Tracing

### AWS Lambda Function
* Configure limited privilege access IAM roles for Lambda functions
* Enable reusing connections with Keep-Alive for NodeJs Lambda functions
* Enable X-Ray Tracing
* Set Environment Variables
* AWS_NODEJS_CONNECTION_REUSE_ENABLED (for Node 10.x and higher functions)

## Architecture
![Architecture Diagram](architecture.png)

***
&copy; Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading