Jon Chery
de91a4bb76
---ci--- project: acdl phase: 31 milestone: v1.8 status: execute ---/ci--- - New kms-key L1 primitive (aws:kms:key) with enable_key_rotation=true (AWS-managed annual rotation, D-075). Registered in registry.json. - Adapter TYPE_MAP expanded for aws:kms:key + aws:kms:alias. - Adapter emits enable_key_rotation from NFR. - S3 adapter emits server_side_encryption_configuration with KMS when kms_key_arn provided; managed KMS fallback with stderr warning when not. - All 10 existing L1 primitives now have encryption_enabled NFR (default true). - s3, rds, ecr, ecs-service, ecs-cluster have kms_key_arn input. - Both L2 compositions (static-assets, microservice) now include a kms-key child + wires connecting kms_key_arn to children. - L2 stack outputs include kms_key_arn. Tests: +7 (300 -> 307). All pass. run_platform.sh --check-only green (static-assets now resolves to 5 resources with the CMK).
38 lines
1.9 KiB
JSON
38 lines
1.9 KiB
JSON
{
|
|
"name": "microservice",
|
|
"version": "1.0.0",
|
|
"kind": "l2",
|
|
"depth": 1,
|
|
"description": "A composition that references six L1 primitives to deploy an ECS Fargate microservice end-to-end.",
|
|
"children": [
|
|
{"id": "vpc", "module": "vpc@1.0.0"},
|
|
{"id": "cluster", "module": "ecs-cluster@1.0.0"},
|
|
{"id": "ecr", "module": "ecr@1.0.0"},
|
|
{"id": "roles", "module": "iam-role@1.0.0"},
|
|
{"id": "alb", "module": "alb@1.0.0"},
|
|
{"id": "service", "module": "ecs-service@1.0.0"},
|
|
{"id": "kms", "module": "kms-key@1.0.0"}
|
|
],
|
|
"wires": [
|
|
{"from": "contract.inputs.bucket_name", "to": "vpc.inputs.cidr", "default": "10.0.0.0/16"},
|
|
{"from": "contract.inputs.region", "to": "vpc.inputs.region"},
|
|
{"from": "contract.inputs.region", "to": "cluster.inputs.region"},
|
|
{"from": "contract.inputs.region", "to": "ecr.inputs.region"},
|
|
{"from": "contract.inputs.region", "to": "roles.inputs.region"},
|
|
{"from": "contract.inputs.region", "to": "alb.inputs.region"},
|
|
{"from": "contract.inputs.region", "to": "service.inputs.region"},
|
|
{"from": "vpc.outputs.subnet_ids", "to": "alb.inputs.subnets"},
|
|
{"from": "vpc.outputs.subnet_ids", "to": "service.inputs.subnets"},
|
|
{"from": "cluster.outputs.cluster_arn", "to": "service.inputs.cluster_arn"},
|
|
{"from": "ecr.outputs.repository_url", "to": "service.inputs.image"},
|
|
{"from": "roles.outputs.role_arn", "to": "service.inputs.security_group"},
|
|
{"from": "alb.outputs.target_group_arn", "to": "service.inputs.lb_target_group_arn"},
|
|
{"from": "contract.inputs.region", "to": "kms.inputs.region"},
|
|
{"from": "kms.outputs.kms_key_arn", "to": "ecr.inputs.kms_key_arn"}
|
|
],
|
|
"outputs": [
|
|
{"from": "alb.outputs.lb_arn", "to": "stack.outputs.lb_arn"},
|
|
{"from": "service.outputs.service_arn", "to": "stack.outputs.service_arn"},
|
|
{"from": "kms.outputs.kms_key_arn", "to": "stack.outputs.kms_key_arn"}
|
|
]
|
|
} |