support for test infrastructure in private subnets (#1698)

* support for test infrastructure in private subnets

* fix cfn-nag workflow issues

poetry installation through pip bugged out, using the preferred method for install instead
poetry 1.2+ doesn't like ubuntu's way of naming python packages (which is not PEP-440 compliant), work in a virtual env instead

Co-authored-by: Lucas Hanson <[email protected]>

Author: cnfait

.github/workflows/cfn-nag.yml

@@ -62,12 +62,15 @@ jobs:
           }
           EOT
           python -m pip install --upgrade pip
-          python -m pip install poetry==1.2.2
-          poetry config virtualenvs.create false --local
+          curl -sSL https://install.python-poetry.org | python - --version 1.2.2
+          poetry env use python
+          poetry env info
+          source $(poetry env info --path)/bin/activate
           poetry install -vvv
       - name: CDK Synth
         run: |
           cd test_infra
+          source $(poetry env info --path)/bin/activate
           cdk synth
       - uses: stelligent/cfn_nag@master
         with:

test_infra/cdk.json

@@ -34,6 +34,7 @@
       "sqlserver": false,
       "oracle": false,
       "neptune": false
-    }
+    },
+    "network": "public"
   }
 }

test_infra/poetry.lock

@@ -7,8 +7,8 @@ license = "Apache License 2.0"
 
 [tool.poetry.dependencies]
 python = ">=3.7.1, <3.11"
-"aws-cdk-lib" = "^2.35.0"
-"constructs" = "^10.1.67"
-"aws-cdk.aws-glue-alpha" = "^2.35.0a0"
-"aws-cdk.aws-redshift-alpha" = "^2.35.0a0"
-"aws-cdk.aws-neptune-alpha" = "^2.35.0a0"
+"aws-cdk-lib" = "^2.45.0"
+"constructs" = "^10.1.123"
+"aws-cdk.aws-glue-alpha" = "^2.45.0a0"
+"aws-cdk.aws-redshift-alpha" = "^2.45.0a0"
+"aws-cdk.aws-neptune-alpha" = "^2.45.0a0"