How to import vpc from a Stack into my CodePipeline post CodeBuildStep? (aws-cdk-lib/pipelines)

[Vallo]

I am currently using 'aws-cdk-lib/pipelines' to provision a self-updating pipeline. I have a single stack which deploys my infrastructure, consisting in a VPC and a MySQL db. Then, I need to run a bash script that initializes or migrates the db and deploys my Lambda functions using Serverless framework. The script is just this:

npx prisma migrate deploy
serverless deploy --stage $STAGE

I have created a new CodePipeline which has a single DevStage which has a single DevStack. This dev stack creates the aforementioned infra.
I then added a post CodeBuildStep to execute my build.sh script. This ran correctly until I needed to include the vpc parameter: I found no way to correctly pass down the vpc object from the DevStack to the PipelineStack. I tried several approaches (use ec2.Vpc.fromLookup, create the vpc within the PipelineStack, use SSM) but they all lead to different errors.
Then I tried to create the CodeBuild project within the DevStack: This is correctly created but the CodeBuild is never executed, and the Pipeline succeeds after it. I need to make the build part of the pipeline to verify it deployed correctly.

What is the correct approach? I can provide some code if required. Thanks.

[skinny85]

I think this might be too specialized for the aws-cdk-lib/pipelines module, and you might be better off using the underlying CodePipeline module (aws-cdk-lib/aws-codepipeline).

@rix0rrr what do you think?

[Vallo]

for now I realized I can run the CodeBuildStep without the vpc, and for the migration I can run a TriggerFunction to fire a Lambda within that vpc. Still working on it but I think it should be doable.

[stockf]

I had a codebuildstep working within a vpc without any issues. I imported with fromVpcAttributes . So switching to aws-cdk-lib/aws-codepipeline may not solve your problem.
I found it too slow, though. Now I have a lambda executing the code which I can call with a custom LambdaInvokeStep. It's still 30s in the pipeline to execute a lambda that runs within milliseconds but about 60s faster than the codebuild action.

[Vallo]

but where did you create the VPC? within the pipeline stack? within a stage in the aws-codepipeline?

[stockf]

In an entirely different stack.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.