Getting started with Python based IaC using AWS CDK

sudo npm install -g npm@latest

sudo python3 -m pip install aws-cdk-libsudo npm install -g aws-cdk

cdk version

mkdir awscdkcd awscdk/

cdk init app --language python

Applying project template app for python# Welcome to your CDK Python project!This is a blank project for CDK development with Python.The `cdk.json` file tells the CDK Toolkit how to execute your app.This project is set up like a standard Python project.  The initializationprocess also creates a virtualenv within this project, stored under the `.venv`directory.  To create the virtualenv it assumes that there is a `python3`(or `python` for Windows) executable in your path with access to the `venv`package. If for any reason the automatic creation of the virtualenv fails,you can create the virtualenv manually.To manually create a virtualenv on MacOS and Linux:``$ python3 -m venv .venv``After the init process completes and the virtualenv is created, you can use the followingstep to activate your virtualenv.``$ source .venv/bin/activate``If you are a Windows platform, you would activate the virtualenv like this:``% .venv\Scripts\activate.bat``Once the virtualenv is activated, you can install the required dependencies.``$ pip install -r requirements.txt``At this point you can now synthesize the CloudFormation template for this code.``$ cdk synth``To add additional dependencies, for example other CDK libraries, just addthem to your `setup.py` file and rerun the `pip install -r requirements.txt`command.## Useful commands * `cdk ls`          list all stacks in the app * `cdk synth`       emits the synthesized CloudFormation template * `cdk deploy`      deploy this stack to your default AWS account/region * `cdk diff`        compare deployed stack with current state * `cdk docs`        open CDK documentationEnjoy!Initializing a new git repository...hint: Using 'master' as the name for the initial branch. This default branch namehint: is subject to change. To configure the initial branch name to use in allhint: of your new repositories, which will suppress this warning, call:hint: hint:   git config --global init.defaultBranch <name>hint: hint: Names commonly chosen instead of 'master' are 'main', 'trunk' andhint: 'development'. The just-created branch can be renamed via this command:hint: hint:   git branch -m <name>Please run 'python3 -m venv .venv'!Executing Creating virtualenv... All done!

$ ls -a.  ..  app.py  awscdk  cdk.json  .git  .gitignore  README.md  requirements-dev.txt  requirements.txt  source.bat  tests  .venv

# in ubuntu this is neededsudo apt install python3.9-venv

python3 -m venv .venv

source .venv/bin/activate

python3 -m pip install -r requirements.txt

$ cdk lsAwscdkStack

import aws_cdk as cdkimport aws_cdk.aws_s3 as s3class HelloCdkStack(cdk.Stack):    def __init__(self, scope: cdk.App, construct_id: str, **kwargs) -> None:        super().__init__(scope, construct_id, **kwargs)        bucket = s3.Bucket(self, "MyFirstBucket", versioned=True)

$ cdk synthResources:  MyFirstBucketB8884501:    Type: AWS::S3::Bucket    Properties:      VersioningConfiguration:        Status: Enabled    UpdateReplacePolicy: Retain    DeletionPolicy: Retain    Metadata:      aws:cdk:path: AwscdkStack/MyFirstBucket/Resource  CDKMetadata:    Type: AWS::CDK::Metadata    Properties:      Analytics: v2:deflate64:H4sIAAAAAAAA/yXI0QpAMBSA4Wdxvx0iyS0vIB5AzOQYZ7WdJcm7I1f/159CWkASDYeXajJywxGujgdlxLt6n8FVBWU0i3qmX/fHVnsbnNKfa0sTMlq6RXPyYinOoIQ8Wj2idIEYdw3t3wdyVYK2bwAAAA==    Metadata:      aws:cdk:path: AwscdkStack/CDKMetadata/Default    Condition: CDKMetadataAvailableConditions:  CDKMetadataAvailable:    Fn::Or:      - Fn::Or:          - Fn::Equals:              - Ref: AWS::Region              - af-south-1          - Fn::Equals:              - Ref: AWS::Region              - ap-east-1          - Fn::Equals:              - Ref: AWS::Region              - ap-northeast-1          - Fn::Equals:              - Ref: AWS::Region              - ap-northeast-2          - Fn::Equals:              - Ref: AWS::Region              - ap-south-1          - Fn::Equals:              - Ref: AWS::Region              - ap-southeast-1          - Fn::Equals:              - Ref: AWS::Region              - ap-southeast-2          - Fn::Equals:              - Ref: AWS::Region              - ca-central-1          - Fn::Equals:              - Ref: AWS::Region              - cn-north-1          - Fn::Equals:              - Ref: AWS::Region              - cn-northwest-1      - Fn::Or:          - Fn::Equals:              - Ref: AWS::Region              - eu-central-1          - Fn::Equals:              - Ref: AWS::Region              - eu-north-1          - Fn::Equals:              - Ref: AWS::Region              - eu-south-1          - Fn::Equals:              - Ref: AWS::Region              - eu-west-1          - Fn::Equals:              - Ref: AWS::Region              - eu-west-2          - Fn::Equals:              - Ref: AWS::Region              - eu-west-3          - Fn::Equals:              - Ref: AWS::Region              - me-south-1          - Fn::Equals:              - Ref: AWS::Region              - sa-east-1          - Fn::Equals:              - Ref: AWS::Region              - us-east-1          - Fn::Equals:              - Ref: AWS::Region              - us-east-2      - Fn::Or:          - Fn::Equals:              - Ref: AWS::Region              - us-west-1          - Fn::Equals:              - Ref: AWS::Region              - us-west-2Parameters:  BootstrapVersion:    Type: AWS::SSM::Parameter::Value<String>    Default: /cdk-bootstrap/hnb659fds/version    Description: Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]Rules:  CheckBootstrapVersion:    Assertions:      - Assert:          Fn::Not:            - Fn::Contains:                - - "1"                  - "2"                  - "3"                  - "4"                  - "5"                - Ref: BootstrapVersion        AssertDescription: CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI.

$ cdk bootstrap   Bootstrapping environment aws://account-id/us-west-2...Trusted accounts for deployment: (none)Trusted accounts for lookup: (none)Using default execution policy of 'arn:aws:iam::aws:policy/AdministratorAccess'. Pass '--cloudformation-execution-policies' to customize.CDKToolkit: creating CloudFormation changeset...   Environment aws://account-id/us-west-2 bootstrapped.

$ cdk deploy  Synthesis time: 3.83sThis deployment will make potentially sensitive changes according to your current security approval level (--require-approval broadening).Please confirm you intend to make the following modifications:IAM Statement Changes    Resource                                                       Effect  Action                                 Principal                                                          Condition  +  ${Custom::S3AutoDeleteObjectsCustomResourceProvider/Role.Arn}  Allow   sts:AssumeRole                         Service:lambda.amazonaws.com                                                  +  ${MyFirstBucket.Arn}                                           Allow   s3:DeleteObject*                       AWS:${Custom::S3AutoDeleteObjectsCustomResourceProvider/Role.Arn}                ${MyFirstBucket.Arn}/*                                                 s3:GetBucket*                                                                                                                                                                                  s3:List*                                                                                                            IAM Policy Changes    Resource                                                   Managed Policy ARN                                                                            +  ${Custom::S3AutoDeleteObjectsCustomResourceProvider/Role}  {"Fn::Sub":"arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"} (NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)Do you wish to deploy these changes (y/n)? yAwscdkStack: deploying...[0%] start: Publishing 075615afa517203dd67c21:current_account-current_region[0%] start: Publishing b3e30b6400895ee28d0614:current_account-current_region[50%] success: Published 880615afa517203dd67c21:current_account-current_region[100%] success: Published b3e30b6400895ee28d0614:current_account-current_regionAwscdkStack: creating CloudFormation changeset...   AwscdkStack  Deployment time: 77.86sStack ARN:arn:aws:cloudformation:us-west-2:account-id:stack/AwscdkStack/398ef750-e70b-11ec-b89d-021a55f488dd  Total time: 81.69s

$ cdk destroyAre you sure you want to delete: AwscdkStack (y/n)? yAwscdkStack: destroying...   AwscdkStack: destroyed