Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings
This repository was archived by the owner on Jun 11, 2024. It is now read-only.

Commit 4c1b520

Browse files
committed
enables node encryption on t3 instance
- updates of cdk packages
1 parent 678b430 commit 4c1b520

File tree

4 files changed

+427
-619
lines changed

4 files changed

+427
-619
lines changed

‎README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ With this solution you emit and collect data to monitor the JVM garbage collecto
1010

1111
## Get Started
1212

13-
To start, launch the solution architecture described above as a prepackaged application from the AWS Serverless Application Repository. It contains all resources ready to visualize the garbage collection logs for your Java 11 AWS Lambda functions in a Kbana dashboard. The search cluster consists of a single `t2.small.elasticsearch` instance with 10GB of EBS storage. It is protected with Amazon Cognito User Pools so you only need to add your user(s). The T2 instance types do not support encryption of data at rest. The application template prefixes the search domain and the Amazon Cognito Hosted UI with a string that you can define with the `applicationPrefix` template parameter.
13+
To start, launch the solution architecture described above as a prepackaged application from the AWS Serverless Application Repository. It contains all resources ready to visualize the garbage collection logs for your Java 11 AWS Lambda functions in a Kbana dashboard. The search cluster consists of a single `t3.small.elasticsearch` instance with 10GB of EBS storage. It is protected with Amazon Cognito User Pools so you only need to add your user(s). The application template prefixes the search domain and the Amazon Cognito Hosted UI with a string that you can define with the `applicationPrefix` template parameter.
1414

1515
### Option A: Spin up the application from the AWS Serverless Application Repository:
1616

@@ -158,7 +158,7 @@ Standard AWS charges apply to the resources you deploy with this template.
158158

159159
Cost for the processing and transformation of your function's Amazon CloudWatch Logs incurs when your function is called. This cost depends on your application and how often GC activities are triggered.
160160
161-
Amazon Elasticsearch Service provides customers in the [AWS Free Tier](https://aws.amazon.com/free/) free usage of up to 750 hours per month of the configuration in this template, i.e. a single-AZ `t2.small.elasticsearch` instance and 10GB of EBS storage for up to one year from the date the account was created. If you exceed the free tier limits, you will be charged the Amazon Elasticsearch Service rates for the additional resources you use. Read an [estimate of the monthly cost of the search cluster](https://calculator.aws/#/estimate?id=2eb5bf80f1aa4177a0021101488874078a2d847e).
161+
Amazon Elasticsearch Service provides customers in the [AWS Free Tier](https://aws.amazon.com/free/) free usage of up to 750 hours per month of the configuration in this template, i.e. a single-AZ `t3.small.elasticsearch` instance and 10GB of EBS storage for up to one year from the date the account was created. If you exceed the free tier limits, you will be charged the Amazon Elasticsearch Service rates for the additional resources you use. Read an [estimate of the monthly cost of the search cluster](https://calculator.aws/#/estimate?id=2eb5bf80f1aa4177a0021101488874078a2d847e).
162162
163163
The Amazon Cognito User Pool feature has a free tier of 50,000 monthly active users for users who sign in directly to Cognito User Pools. The free tier does not automatically expire at the end of your 12 month AWS Free Tier term, and it is available to both existing and new AWS customers indefinitely.
164164

‎lib/search-stack.ts

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ export class SearchStack extends Stack {
1717

1818
super(scope, id, props);
1919

20-
const applicationPrefix = new CfnParameter(this, 'applicationPrefix', {
20+
const applicationPrefix = new CfnParameter(this, 'applicationPrefix', {
2121
default: this.node.tryGetContext('applicationPrefix'),
2222
description: "Prefix for the Amazon Cognito domain and the Amazon Elasticsearch Service domain",
2323
type: "String",
2424
allowedPattern: "^[a-z0-9]*$",
2525
minLength: 3,
26-
maxLength: 20
26+
maxLength: 20
2727
}).valueAsString;
2828

2929
const userPool = new CfnUserPool(this, "userPool", {
@@ -61,10 +61,11 @@ export class SearchStack extends Stack {
6161
});
6262

6363
const esDomain = new CfnDomain(this, "searchDomain", {
64-
elasticsearchClusterConfig: { instanceType: "t2.small.elasticsearch" },
64+
elasticsearchClusterConfig: { instanceType: "t3.small.elasticsearch" },
6565
ebsOptions: { volumeSize: 10, ebsEnabled: true },
6666
elasticsearchVersion: "7.7",
6767
domainName: applicationPrefix,
68+
encryptionAtRestOptions: { enabled: true },
6869

6970
// Trust the cognito authenticated Role
7071
accessPolicies: {
@@ -93,12 +94,12 @@ export class SearchStack extends Stack {
9394
esDomain.addPropertyOverride('CognitoOptions.RoleArn', esRole.roleArn);
9495
esDomain.addPropertyOverride('CognitoOptions.UserPoolId', userPool.ref);
9596

96-
new CfnOutput(this, 'createUserUrl', {
97+
new CfnOutput(this, 'createUserUrl', {
9798
description: "Create a new user in the user pool here.",
9899
value: "https://" + this.region + ".console.aws.amazon.com/cognito/users?region=" + this.region + "#/pool/" + userPool.ref + "/users"
99100
});
100101

101-
new CfnOutput(this, 'kibanaUrl', {
102+
new CfnOutput(this, 'kibanaUrl', {
102103
description: "Access Kibana via this URL.",
103104
value: "https://" + esDomain.attrDomainEndpoint + "/_plugin/kibana/"
104105
});

0 commit comments

Comments
(0)

AltStyle によって変換されたページ (->オリジナル) /