@@ -14,6 +14,7 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
14
14
" GuEc2App" ,
15
15
" GuCertificate" ,
16
16
" GuInstanceRole" ,
17
+ " GuSsmSshPolicy" ,
17
18
" GuDescribeEC2Policy" ,
18
19
" GuLoggingStreamNameParameter" ,
19
20
" GuLogShippingPolicy" ,
@@ -24,7 +25,7 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
24
25
" GuWazuhAccess" ,
25
26
" GuAutoScalingGroup" ,
26
27
" GuApplicationLoadBalancer" ,
27
- " GuStringParameter " ,
28
+ " GuAccessLoggingBucketParameter " ,
28
29
" GuApplicationTargetGroup" ,
29
30
" GuHttpsApplicationListener" ,
30
31
" GuSecurityGroup" ,
@@ -206,6 +207,11 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
206
207
},
207
208
},
208
209
" MaxSize" : " 4" ,
210
+ " MetricsCollection" : [
211
+ {
212
+ " Granularity" : " 1Minute" ,
213
+ },
214
+ ],
209
215
" MinSize" : " 1" ,
210
216
" Tags" : [
211
217
{
@@ -707,20 +713,6 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
707
713
],
708
714
" Version" : " 2012-10-17" ,
709
715
},
710
- " ManagedPolicyArns" : [
711
- {
712
- " Fn::Join" : [
713
- " " ,
714
- [
715
- " arn:" ,
716
- {
717
- " Ref" : " AWS::Partition" ,
718
- },
719
- " :iam::aws:policy/AmazonSSMManagedInstanceCore" ,
720
- ],
721
- ],
722
- },
723
- ],
724
716
" Path" : " /" ,
725
717
" Tags" : [
726
718
{
@@ -1038,6 +1030,7 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1038
1030
},
1039
1031
" Port" : 443 ,
1040
1032
" Protocol" : " HTTPS" ,
1033
+ " SslPolicy" : " ELBSecurityPolicy-TLS13-1-2-2021-06" ,
1041
1034
},
1042
1035
" Type" : " AWS::ElasticLoadBalancingV2::Listener" ,
1043
1036
},
@@ -1048,6 +1041,14 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1048
1041
" Key" : " deletion_protection.enabled" ,
1049
1042
" Value" : " true" ,
1050
1043
},
1044
+ {
1045
+ " Key" : " routing.http.x_amzn_tls_version_and_cipher_suite.enabled" ,
1046
+ " Value" : " true" ,
1047
+ },
1048
+ {
1049
+ " Key" : " routing.http.drop_invalid_header_fields.enabled" ,
1050
+ " Value" : " true" ,
1051
+ },
1051
1052
{
1052
1053
" Key" : " access_logs.s3.enabled" ,
1053
1054
" Value" : " true" ,
@@ -1267,6 +1268,42 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1267
1268
},
1268
1269
" Type" : " AWS::SSM::Parameter" ,
1269
1270
},
1271
+ " SsmSshPolicy4CFC977E" : {
1272
+ " Properties" : {
1273
+ " PolicyDocument" : {
1274
+ " Statement" : [
1275
+ {
1276
+ " Action" : [
1277
+ " ec2messages:AcknowledgeMessage" ,
1278
+ " ec2messages:DeleteMessage" ,
1279
+ " ec2messages:FailMessage" ,
1280
+ " ec2messages:GetEndpoint" ,
1281
+ " ec2messages:GetMessages" ,
1282
+ " ec2messages:SendReply" ,
1283
+ " ssm:UpdateInstanceInformation" ,
1284
+ " ssm:ListInstanceAssociations" ,
1285
+ " ssm:DescribeInstanceProperties" ,
1286
+ " ssm:DescribeDocumentParameters" ,
1287
+ " ssmmessages:CreateControlChannel" ,
1288
+ " ssmmessages:CreateDataChannel" ,
1289
+ " ssmmessages:OpenControlChannel" ,
1290
+ " ssmmessages:OpenDataChannel" ,
1291
+ ],
1292
+ " Effect" : " Allow" ,
1293
+ " Resource" : " *" ,
1294
+ },
1295
+ ],
1296
+ " Version" : " 2012-10-17" ,
1297
+ },
1298
+ " PolicyName" : " ssm-ssh-policy" ,
1299
+ " Roles" : [
1300
+ {
1301
+ " Ref" : " InstanceRoleArticlerendering0D4717E8" ,
1302
+ },
1303
+ ],
1304
+ },
1305
+ " Type" : " AWS::IAM::Policy" ,
1306
+ },
1270
1307
" TargetGroupArticlerendering3605E498" : {
1271
1308
" Properties" : {
1272
1309
" HealthCheckIntervalSeconds" : 10 ,
@@ -1536,6 +1573,7 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1536
1573
" InstanceType" : " t4g.micro" ,
1537
1574
" MetadataOptions" : {
1538
1575
" HttpTokens" : " required" ,
1576
+ " InstanceMetadataTags" : " enabled" ,
1539
1577
},
1540
1578
" SecurityGroupIds" : [
1541
1579
{
@@ -1555,6 +1593,10 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1555
1593
{
1556
1594
" ResourceType" : " instance" ,
1557
1595
" Tags" : [
1596
+ {
1597
+ " Key" : " App" ,
1598
+ " Value" : " article-rendering" ,
1599
+ },
1558
1600
{
1559
1601
" Key" : " gu:cdk:version" ,
1560
1602
" Value" : " TEST" ,
@@ -1580,6 +1622,10 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1580
1622
{
1581
1623
" ResourceType" : " volume" ,
1582
1624
" Tags" : [
1625
+ {
1626
+ " Key" : " App" ,
1627
+ " Value" : " article-rendering" ,
1628
+ },
1583
1629
{
1584
1630
" Key" : " gu:cdk:version" ,
1585
1631
" Value" : " TEST" ,
@@ -1608,7 +1654,8 @@ exports[`The RenderingCDKStack matches the snapshot 1`] = `
1608
1654
" Fn::Join" : [
1609
1655
" " ,
1610
1656
[
1611
- " #!/bin/bash -ev
1657
+ " #!/bin/bash
1658
+ #! / bin / bash - ev
1612
1659
groupadd frontend
1613
1660
useradd - r - m - s / usr / bin / nologin - g frontend dotcom - rendering
1614
1661
cd / home / dotcom - rendering
@@ -1654,6 +1701,10 @@ systemctl start article-rendering",
1654
1701
{
1655
1702
" ResourceType" : " launch-template" ,
1656
1703
" Tags" : [
1704
+ {
1705
+ " Key" : " App" ,
1706
+ " Value" : " article-rendering" ,
1707
+ },
1657
1708
{
1658
1709
" Key" : " gu:cdk:version" ,
1659
1710
" Value" : " TEST" ,
0 commit comments