getCluster

id

aws.ecs.Cluster.get

awsx.ecs.Cluster

id

arn

getCluster

id

awsx

docker

awsx

awsx

docker

// stack1
export const cluster = new eks.Cluster("eks-cluster", { ... });

// stack2
const sR = new pulumi.StackReference("stack1");
const cluster = (sR.requireOutput("cluster") as unknown) as eks.Cluster;

leodev

Pulumi.leodev.yaml

us-east-1

aws.cloudwatch.MetricAlarm

aws.s3.BucketMetric

const bucket = new aws.s3.BucketV2(
  `viz-bucket-${region}`,
  {
    bucketPrefix: `par-${region}-`,
    forceDestroy: true
  },
  {provider: PriActProviders[region]}
);

const bucketMetrics = new aws.s3.BucketMetric(
  `bucketMetrics-${region}`,
  {bucket: bucket.bucket},
  {provider: PriActProviders[region], parent: bucket}
);

// create alarm for R53 to monitor as health check
const bucketMetricAlarm = new aws.cloudwatch.MetricAlarm(
  `bucketMetricAlarm-${region}`,
  {
    comparisonOperator: 'GreaterThanOrEqualToThreshold',
    evaluationPeriods: 1,
    datapointsToAlarm: 1,
    treatMissingData: 'missing',
    metricName: '5xxErrors',
    namespace: 'AWS/S3',
    unit: 'Count',
    period: 60,
    statistic: 'Sum',
    threshold: 2,
    dimensions: {
      BucketName: bucket.bucket,
      // FilterId: ''  // ????
    },
    alarmDescription: 'This metric monitors s3 bucket Sum 5xx errors.'
  },
  {
    provider: PriActProviders[region],
    parent: bucket
  }
);

aws.Provider

talos_control_plane_asg = aws.autoscaling.Group(
    f"{project}-{stack}-talos-control-plane-asg",
    name=f"{project}-{stack}-talos-control-plane-asg",
    capacity_rebalance=True,
    desired_capacity=3,
    max_size=3,
    min_size=1,
    vpc_zone_identifiers=private_subnet_ids,
    launch_configuration=control_plane_launch_configuration.name,
    wait_for_capacity_timeout="300s",
    opts=pulumi.ResourceOptions(depends_on=[control_plane_launch_configuration]),
    health_check_grace_period=300,
    tags=[aws.autoscaling.GroupTagArgs(
        key="Name",
        propagate_at_launch=True,
        value="control-plane"
    )]
)

wait_for_capacity_timeuot="300s"

created(17s)

awsx.ec2.Vpc

typescript
const vpc = new awsx.ec2.Vpc("myVpc", {
  subnets: [
    {
      type: "isolated",
      name: "cool-subnet"
      cidrMask: 24,
    },
  ],
});

myVpc-hi-0

myVpc-hi-isolated-0

Error: EACCES: permission denied, open '/var/lib/ghost/content/logs/https___blog_test_production.error.log'

# Build the Fargate cluster
cluster = aws.ecs.Cluster("dev-fargate-cluster")

# Define the Fargate service settings and configuration
service = awsx.ecs.FargateService("my_fargate_cluster_service",
    cluster = cluster.arn,
    network_configuration = aws.ecs.ServiceNetworkConfigurationArgs(
        subnets = vpc.private_subnet_ids,
        security_groups = [sg.id]
    ),
    task_definition_args = awsx.ecs.FargateServiceTaskDefinitionArgs(
        containers = {
            "react": awsx.ecs.TaskDefinitionContainerDefinitionArgs(
                image = img.image_uri,
                memory = 50,
                cpu = 128,
                essential = True,
                port_mappings = [awsx.ecs.TaskDefinitionPortMappingArgs(
                    container_port = 80,
                    host_port = 80,
                    protocol = "tcp",
                    target_group = alb.default_target_group
                )]
            )
        }
    )
)

cluster.core.cluster.name

const amznAmi = aws.getAmiOutput({
        filters: [{
            name: "name",
            values: ["amzn2-ami-kernel-*"],
        }],
        owners: ["137112412989"],  // NOTE: this is Amazon's Owner ID for Official Amazon-managed AMIs
        mostRecent: true,
    });

/* snip */

const instance = new aws.ec2.Instance(customName, {
        ami: pulumi.interpolate`${amznAmi.id}`,
        instanceType: "t2.medium", 
        networkInterfaces: [{
            networkInterfaceId: networkInterface.id,
            deviceIndex: 0,
        }],
        userData: userData,
        keyName: "some-key",    
        tags: {
            Name: customName
        },
        rootBlockDevice: {
            volumeSize: 400
        }
    },

Type                 Name        Plan        Info
     pulumi:pulumi:Stack  infra-dev               1 warning
 +-  └─ aws:ec2:Instance  instance    replace     [diff: ~ami]

networkInterface

aws:ec2:Instance (instance):
      error: 1 error occurred:
      	* creating EC2 Instance: InvalidNetworkInterface.InUse: Interface: [eni-<snip>] in use.
      	status code: 400, request id: <snip>

ami

userData

error creating Glue script: InvalidInputException: Unknown Transformation Spec for the Node end with NodeType DataSource

sg = aws.ec2.SecurityGroup("dev-sg",
    description = "Allow web traffic for cluster",
    vpc_id = vpc.vpc_id,
    ingress = [aws.ec2.SecurityGroupIngressArgs(
        description = "Allow port 80 inbound from Internet",
        from_port = 80,
        to_port = 80,
        protocol = "TCP",
        cidr_blocks = ["0.0.0.0/0"]
    )],
    egress = [aws.ec2.SecurityGroupEgressArgs(
        description = "Allow all traffic out from cluster",
        from_port = 0,
        to_port = 0,
        protocol = "-1",
        cidr_blocks = ["0.0.0.0/0"]
    )]
)

import * as awsApigateway from '@pulumi/aws-apigateway';

awsApigateway.RestAPI

eventHandler: new aws.lambda.Function(...)

aws.lambda.Alias

aws.lambda.Permission

apigateway

$LATEST

aws:iam:RolePolicyAttachment