Several environments need the same S3, Glue, and IAM arrangement.
Define common resources in TypeScript and synthesize them into CloudFormation.
Which approach is most appropriate?
Define the platform as an AWS CDK Construct, parameterize environment differences, and review the synthesized template.
Detailed explanation
Manual changes reduce reproducibility and make configuration drift likely.
Manual changes reduce reproducibility and make configuration drift likely.
Object protection does not package reusable infrastructure resources.
Object protection does not package reusable infrastructure resources.
A Construct packages resources and dependencies for reuse and synthesis into CloudFormation.
A Construct packages resources and dependencies for reuse and synthesis into CloudFormation.
Audit events are records, not infrastructure definition code.
Audit events are records, not infrastructure definition code.
Check official documentation
Compare the following points with the official documentation.
AWS CDK Construct、synth、deploy、context、environmentの公式説明を確認する。
What to confirm
CDKとCloudFormation、コンソール手作業の再現性の違いを説明できる。
Key points
- AWS CDK
- Construct
- synth
- Reuse
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
Abstraction
Common resources and environment-specific properties are separated into construct inputs.
Generated-template review
Review permissions, deletion behavior, replacements, and dependencies in the synthesized output.