Slack invite

.eslintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": "next/core-web-vitals"
+}

.gitignore

@@ -1,114 +1,43 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
 
-# Created by https://www.toptal.com/developers/gitignore/api/node
-# Edit at https://www.toptal.com/developers/gitignore?templates=node
+# dependencies
+/node_modules
+/.pnp
+.pnp.js
+.yarn/install-state.gz
 
-### Node ###
-# Logs
-logs
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-lerna-debug.log*
-
-# Diagnostic reports (https://nodejs.org/api/report.html)
-report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
-
-# Runtime data
-pids
-*.pid
-*.seed
-*.pid.lock
-
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# Coverage directory used by tools like istanbul
-coverage
-*.lcov
+# testing
+/coverage
 
-# nyc test coverage
-.nyc_output
+# next.js
+/.next/
+/out/
 
-# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
+# production
+/build
 
-# Bower dependency directory (https://bower.io/)
-bower_components
+# misc
+.DS_Store
+*.pem
 
-# node-waf configuration
-.lock-wscript
-
-# Compiled binary addons (https://nodejs.org/api/addons.html)
-build/Release
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
 
-# Dependency directories
-node_modules/
-jspm_packages/
+# local env files
+.env*.local
 
-# TypeScript v1 declaration files
-typings/
+# vercel
+.vercel
 
-# TypeScript cache
+# typescript
 *.tsbuildinfo
+next-env.d.ts
 
-# Optional npm cache directory
-.npm
-
-# Optional eslint cache
-.eslintcache
-
-# Microbundle cache
-.rpt2_cache/
-.rts2_cache_cjs/
-.rts2_cache_es/
-.rts2_cache_umd/
-
-# Optional REPL history
-.node_repl_history
-
-# Output of 'npm pack'
-*.tgz
-
-# Yarn Integrity file
-.yarn-integrity
-
-# dotenv environment variables file
-.env
-.env.test
-
-# parcel-bundler cache (https://parceljs.org/)
-.cache
-
-# Next.js build output
-.next
-
-# Nuxt.js build / generate output
-.nuxt
-dist
-
-# Gatsby files
-.cache/
-# Comment in the public line in if your project uses Gatsby and not Next.js
-# https://nextjs.org/blog/next-9-1#public-directory-support
-# public
-
-# vuepress build output
-.vuepress/dist
-
-# Serverless directories
-.serverless/
-
-# FuseBox cache
-.fusebox/
-
-# DynamoDB Local files
-.dynamodb/
-
-# TernJS port file
-.tern-port
-
-# Stores VSCode versions used for testing VSCode extensions
-.vscode-test
+# amplify
+.amplify
+amplify_outputs*
+amplifyconfiguration*
 
-# End of https://www.toptal.com/developers/gitignore/api/node
+/cdk.out

Readme.md

@@ -5,7 +5,8 @@ This is a community driven project for the Cloud Development Kit (CDK) and will
 - [AWS CDK](https://aws.amazon.com/cdk/)
 - [CDK for Kubernetes](https://cdk8s.io)
 - [Terraform CDK](https://cdk.tf)
+- [Projen](https://projen.io/)
 
 ## Contributions
 
-We'd love to have more people on board - Just start to create issues or get in involved here: https://github.com/cdk-dev/base
+We'd love to have more people on board - Head over to [cdk.dev](https://cdk.dev) and join our Slack.

amplify/auth/resource.ts

@@ -0,0 +1,12 @@
+import { defineAuth } from '@aws-amplify/backend';
+
+/**
+ * Define and configure your auth resource
+ * @see https://docs.amplify.aws/gen2/build-a-backend/auth
+ */
+export const auth = defineAuth({
+  loginWith: {
+    email: true,
+  },  
+  groups: ['admin', 'user'],  
+});

amplify/backend.ts

@@ -0,0 +1,75 @@
+import { defineBackend } from '@aws-amplify/backend';
+import { auth } from './auth/resource';
+import { data } from './data/resource';
+import { storage } from './storage/resource';
+import { TableNotifications } from './constructs/table-notifications';
+import * as sns from 'aws-cdk-lib/aws-sns';
+import * as snsSubscriptions from 'aws-cdk-lib/aws-sns-subscriptions';
+import * as iam from 'aws-cdk-lib/aws-iam';
+
+/**
+ * @see https://docs.amplify.aws/react/build-a-backend/ to add storage, functions, and more
+ */
+const backend = defineBackend({
+  auth,
+  data,
+  storage
+});
+
+
+const dataResources = backend.data.resources;
+
+dataResources.cfnResources.cfnGraphqlApi.xrayEnabled = true;
+// Object.values(dataResources.cfnResources.amplifyDynamoDbTables).forEach((table) => {
+//   table.pointInTimeRecoveryEnabled = true;
+// });
+
+
+// === Subscribers ===
+
+const subscribers = backend.createStack('subscribers')
+const topic = new sns.Topic(subscribers, 'DdbToSnsTopic', {
+  displayName: 'New Post on cdk.dev',
+});
+
+new TableNotifications(subscribers, 'TableNotifications', {
+  table: dataResources.tables['Post'],
+  topic,
+  message: 'A new post with the title "<$.dynamodb.NewImage.title.S>" has been added to https://cdk.dev - check it out now'
+})
+
+const policy = new iam.Policy(subscribers, 'SubscribersPolicy', {
+  document: new iam.PolicyDocument({
+    statements: [new iam.PolicyStatement({
+      effect: iam.Effect.ALLOW,
+      resources: [topic.topicArn],
+      actions: ['sns:Subscribe'],
+    })]
+  }),
+});
+
+backend.auth.resources.authenticatedUserIamRole.attachInlinePolicy(policy)
+backend.auth.resources.unauthenticatedUserIamRole.attachInlinePolicy(policy);
+
+backend.addOutput({
+  custom: {
+    subscribersTopicArn: topic.topicArn,
+  }
+})
+
+// === Link Notifications ===
+
+const links = backend.createStack('links')
+const t = new sns.Topic(links, 'DdbToSnsTopic', {
+  displayName: 'New Link for cdk.dev',
+});
+
+t.addSubscription(new snsSubscriptions.EmailSubscription('sebastian@korfmann.net'));
+
+new TableNotifications(links, 'TableNotifications', {
+  table: dataResources.tables['LinkSuggestion'],
+  topic: t,
+  message: 'A new link with the url "<$.dynamodb.NewImage.url.S>" has been added to https://cdk.dev - check it out now'
+})
+
+export default backend;

amplify/constructs/table-notifications.ts

@@ -0,0 +1,46 @@
+import * as dynamodb from 'aws-cdk-lib/aws-dynamodb';
+import * as sns from 'aws-cdk-lib/aws-sns';
+import * as pipes from 'aws-cdk-lib/aws-pipes';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as logs from 'aws-cdk-lib/aws-logs';
+import { Construct } from 'constructs';
+
+export class TableNotifications extends Construct {
+  constructor(scope: Construct, id: string, props: { table: dynamodb.ITable, topic: sns.ITopic, message: string }) {
+    super(scope, id);
+
+    const { table, topic, message } = props;
+
+    const pipeRole = new iam.Role(this, 'PipeRole', {
+      assumedBy: new iam.ServicePrincipal('pipes.amazonaws.com'),
+    });
+
+    table.grantStreamRead(pipeRole);
+    topic.grantPublish(pipeRole);
+
+    // Create a CloudWatch Log Group
+    const logGroup = new logs.LogGroup(this, 'PipeLogGroup', {
+      retention: logs.RetentionDays.ONE_WEEK,
+    });
+
+    new pipes.CfnPipe(this, 'DdbToSnsPipe', {
+      roleArn: pipeRole.roleArn,
+      source: table.tableStreamArn!,
+      sourceParameters: {
+        dynamoDbStreamParameters: {
+          startingPosition: 'LATEST',
+        },
+      },
+      target: topic.topicArn,
+      targetParameters: {
+        inputTemplate: message,
+      },
+      logConfiguration: {
+        cloudwatchLogsLogDestination: {
+          logGroupArn: logGroup.logGroupArn,
+        },
+        level: 'INFO',
+      },
+    });
+  }
+}

amplify/data/resource.ts

@@ -0,0 +1,89 @@
+import { type ClientSchema, a, defineData, defineFunction } from '@aws-amplify/backend';
+
+const schema = a.schema({
+  Author: a
+    .model({
+      name: a.string().required(),
+      avatar: a.string().required(),
+      posts: a.hasMany('Post', 'authorId'),
+    })
+    .authorization((allow) => [
+      allow.guest().to(['read']),
+      allow.authenticated('identityPool').to(['read']),
+    ]),
+  Post: a
+    .model({
+      title: a.string().required(),
+      content: a.string().required(),
+      url: a.string().required(),
+      categories: a.string().required().array(),
+      authorId: a.id().required(),
+      banner: a.string(),
+      author: a.belongsTo('Author', 'authorId'),
+    })
+    .authorization((allow) => [
+      allow.guest().to(['read']),
+      allow.authenticated('identityPool').to(['read']),
+    ]),
+  Resource: a
+    .model({
+      title: a.string().required(),
+      content: a.string().required(),
+      url: a.string().required(),
+      categories: a.string().required().array(),
+      banner: a.string()
+    })
+    .authorization((allow) => [
+      allow.guest().to(['read']),
+      allow.authenticated('identityPool').to(['read']),
+    ]),
+  LinkSuggestion: a
+    .model({
+      url: a.string().required(),
+      comment: a.string(),
+    })
+    .authorization((allow) => [
+      allow.guest().to(['create']),
+      allow.authenticated('identityPool').to(['create']),
+    ])
+});
+
+export type Schema = ClientSchema<typeof schema>;
+
+export const data = defineData({
+  schema,
+  authorizationModes: {
+    defaultAuthorizationMode: 'iam'
+  }
+});
+
+
+/*== STEP 2 ===============================================================
+Go to your frontend source code. From your client-side code, generate a
+Data client to make CRUDL requests to your table. (THIS SNIPPET WILL ONLY
+WORK IN THE FRONTEND CODE FILE.)
+
+Using JavaScript or Next.js React Server Components, Middleware, Server
+Actions or Pages Router? Review how to generate Data clients for those use
+cases: https://docs.amplify.aws/gen2/build-a-backend/data/connect-to-API/
+=========================================================================*/
+
+/*
+"use client"
+import { generateClient } from "aws-amplify/data";
+import type { Schema } from "@/amplify/data/resource";
+
+const client = generateClient<Schema>() // use this Data client for CRUDL requests
+*/
+
+/*== STEP 3 ===============================================================
+Fetch records from the database and use them in your frontend component.
+(THIS SNIPPET WILL ONLY WORK IN THE FRONTEND CODE FILE.)
+=========================================================================*/
+
+/* For example, in a React component, you can use this snippet in your
+  function's RETURN statement */
+// const { data: posts } = await client.models.Post.list()
+
+// return <ul>{posts.map(post => <li key={post.title}>{post.title} - {post.content}</li>)}</ul>
+

amplify/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}