{ "Resources": { "DHPipelineMyCodePipelineArtifactsBucket5F2085EF": { "Type": "AWS::S3::Bucket", "Properties": { "BucketEncryption": { "ServerSideEncryptionConfiguration": [ { "ServerSideEncryptionByDefault": { "SSEAlgorithm": "aws:kms" } } ] }, "PublicAccessBlockConfiguration": { "BlockPublicAcls": true, "BlockPublicPolicy": true, "IgnorePublicAcls": true, "RestrictPublicBuckets": true } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/ArtifactsBucket/Resource" } }, "DHPipelineMyCodePipelineArtifactsBucketPolicy30C1FB75": { "Type": "AWS::S3::BucketPolicy", "Properties": { "Bucket": { "Ref": "DHPipelineMyCodePipelineArtifactsBucket5F2085EF" }, "PolicyDocument": { "Statement": [ { "Action": "s3:*", "Condition": { "Bool": { "aws:SecureTransport": "false" } }, "Effect": "Deny", "Principal": { "AWS": "*" }, "Resource": [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/ArtifactsBucket/Policy/Resource" } }, "DHPipelineMyCodePipelineRole8DF2F843": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "codepipeline.amazonaws.com" } } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Role/Resource" } }, "DHPipelineMyCodePipelineRoleDefaultPolicy3E7EC85B": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*", "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, "/*" ] ] } ] }, { "Action": "sts:AssumeRole", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleF258D2FC", "Arn" ] } }, { "Action": "sts:AssumeRole", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRole638519ED", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineMyCodePipelineRoleDefaultPolicy3E7EC85B", "Roles": [ { "Ref": "DHPipelineMyCodePipelineRole8DF2F843" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Role/DefaultPolicy/Resource" } }, "DHPipelineMyCodePipelineB133F8C7": { "Type": "AWS::CodePipeline::Pipeline", "Properties": { "RoleArn": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineRole8DF2F843", "Arn" ] }, "Stages": [ { "Actions": [ { "ActionTypeId": { "Category": "Source", "Owner": "AWS", "Provider": "CodeCommit", "Version": "1" }, "Configuration": { "RepositoryName": "prj1ex", "BranchName": "master", "PollForSourceChanges": false }, "Name": "CodeCommit", "OutputArtifacts": [ { "Name": "DHPipelineS3" } ], "RoleArn": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleF258D2FC", "Arn" ] }, "RunOrder": 1 } ], "Name": "Source" }, { "Actions": [ { "ActionTypeId": { "Category": "Build", "Owner": "AWS", "Provider": "CodeBuild", "Version": "1" }, "Configuration": { "ProjectName": { "Ref": "DHPipelineMyPipelineBuild19230262" } }, "InputArtifacts": [ { "Name": "DHPipelineS3" } ], "Name": "buildAction", "RoleArn": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRole638519ED", "Arn" ] }, "RunOrder": 1 } ], "Name": "Build" } ], "ArtifactStore": { "Location": { "Ref": "DHPipelineMyCodePipelineArtifactsBucket5F2085EF" }, "Type": "S3" }, "Name": "DHPipeline" }, "DependsOn": [ "DHPipelineMyCodePipelineRoleDefaultPolicy3E7EC85B", "DHPipelineMyCodePipelineRole8DF2F843" ], "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Resource" } }, "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleF258D2FC": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "AWS": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::", { "Ref": "AWS::AccountId" }, ":root" ] ] } } } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Source/CodeCommit/CodePipelineActionRole/Resource" } }, "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleDefaultPolicy10334CF3": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*", "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, "/*" ] ] } ] }, { "Action": [ "codecommit:GetBranch", "codecommit:GetCommit", "codecommit:UploadArchive", "codecommit:GetUploadArchiveStatus", "codecommit:CancelUploadArchive" ], "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":codecommit:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":prj1ex" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleDefaultPolicy10334CF3", "Roles": [ { "Ref": "DHPipelineMyCodePipelineSourceCodeCommitCodePipelineActionRoleF258D2FC" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Source/CodeCommit/CodePipelineActionRole/DefaultPolicy/Resource" } }, "DHPipelineMyCodePipelineEventsRole536E5636": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "events.amazonaws.com" } } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/EventsRole/Resource" } }, "DHPipelineMyCodePipelineEventsRoleDefaultPolicyE827EE0E": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "codepipeline:StartPipelineExecution", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":codepipeline:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":", { "Ref": "DHPipelineMyCodePipelineB133F8C7" } ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineMyCodePipelineEventsRoleDefaultPolicyE827EE0E", "Roles": [ { "Ref": "DHPipelineMyCodePipelineEventsRole536E5636" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/EventsRole/DefaultPolicy/Resource" } }, "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRole638519ED": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "AWS": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::", { "Ref": "AWS::AccountId" }, ":root" ] ] } } } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Build/buildAction/CodePipelineActionRole/Resource" } }, "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRoleDefaultPolicy522D8FB8": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "codebuild:BatchGetBuilds", "codebuild:StartBuild", "codebuild:StopBuild" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DHPipelineMyPipelineBuild19230262", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRoleDefaultPolicy522D8FB8", "Roles": [ { "Ref": "DHPipelineMyCodePipelineBuildbuildActionCodePipelineActionRole638519ED" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodePipeline/Build/buildAction/CodePipelineActionRole/DefaultPolicy/Resource" } }, "DHPipelineMyCodeRepositoryDHPipelineStackDHPipelineMyCodePipelineE42DC3BFEventRule9BFDDEE1": { "Type": "AWS::Events::Rule", "Properties": { "EventPattern": { "source": [ "aws.codecommit" ], "resources": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":codecommit:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":prj1ex" ] ] } ], "detail-type": [ "CodeCommit Repository State Change" ], "detail": { "event": [ "referenceCreated", "referenceUpdated" ], "referenceName": [ "master" ] } }, "State": "ENABLED", "Targets": [ { "Arn": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":codepipeline:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":", { "Ref": "DHPipelineMyCodePipelineB133F8C7" } ] ] }, "Id": "Target0", "RoleArn": { "Fn::GetAtt": [ "DHPipelineMyCodePipelineEventsRole536E5636", "Arn" ] } } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyCodeRepository/DHPipelineStackDHPipelineMyCodePipelineE42DC3BFEventRule/Resource" } }, "DHPipelineMyPipelineBuildRole4D0A8482": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "codebuild.amazonaws.com" } } ], "Version": "2012-10-17" } }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyPipelineBuild/Role/Resource" } }, "DHPipelineMyPipelineBuildRoleDefaultPolicyCFB124EF": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":logs:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":log-group:/aws/codebuild/", { "Ref": "DHPipelineMyPipelineBuild19230262" } ] ] }, { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":logs:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":log-group:/aws/codebuild/", { "Ref": "DHPipelineMyPipelineBuild19230262" }, ":*" ] ] } ] }, { "Action": [ "codebuild:CreateReportGroup", "codebuild:CreateReport", "codebuild:UpdateReport", "codebuild:BatchPutTestCases", "codebuild:BatchPutCodeCoverages" ], "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":codebuild:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":report-group/", { "Ref": "DHPipelineMyPipelineBuild19230262" }, "-*" ] ] } }, { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DHPipelineMyCodePipelineArtifactsBucket5F2085EF", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineMyPipelineBuildRoleDefaultPolicyCFB124EF", "Roles": [ { "Ref": "DHPipelineMyPipelineBuildRole4D0A8482" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyPipelineBuild/Role/DefaultPolicy/Resource" } }, "DHPipelineMyPipelineBuild19230262": { "Type": "AWS::CodeBuild::Project", "Properties": { "Artifacts": { "Type": "CODEPIPELINE" }, "Environment": { "ComputeType": "BUILD_GENERAL1_LARGE", "Image": "aws/codebuild/amazonlinux2-aarch64-standard:2.0", "ImagePullCredentialsType": "CODEBUILD", "PrivilegedMode": false, "Type": "ARM_CONTAINER" }, "ServiceRole": { "Fn::GetAtt": [ "DHPipelineMyPipelineBuildRole4D0A8482", "Arn" ] }, "Source": { "Type": "CODEPIPELINE" }, "Cache": { "Type": "NO_CACHE" }, "EncryptionKey": "alias/aws/s3", "Name": "prj1ex" }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/MyPipelineBuild/Resource" } }, "DHPipelineprCodeBuildPolicy0D182A8F": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "cloudformation:ValidateTemplate", "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "DHPipelineprCodeBuildPolicy0D182A8F", "Roles": [ { "Ref": "DHPipelineMyPipelineBuildRole4D0A8482" } ] }, "Metadata": { "aws:cdk:path": "DHPipelineStack/DHPipeline/prCodeBuildPolicy/Resource" } }, "CDKMetadata": { "Type": "AWS::CDK::Metadata", "Properties": { "Analytics": "v2:deflate64:H4sIAAAAAAAA/01Q0QqDMAz8lr3XDDeQPc8PmLgPGNpmEK2t2NYxSv99tSru6S6XyyXkAkUO+an5mIyLPpPUgn/ahvcsSi/PtcCRRpSkEHy1MVa+1c4DM1fwd8d7tIu+sRUqLYl/D3mtA6NmAF9rmZISHs7dgzMqa6LNbbaIgS0HtY6kOK6pJt0hT8s3GgKr0Wg38TT5cHZ0qf+vlloJsqRVYCqGQmfOc15Afovv6AxRNjllaUCoV/wBWKEA2SoBAAA=" }, "Metadata": { "aws:cdk:path": "DHPipelineStack/CDKMetadata/Default" }, "Condition": "CDKMetadataAvailable" } }, "Outputs": { "DHPipelinePipelineName209BC7E7": { "Value": { "Ref": "DHPipelineMyCodePipelineB133F8C7" } } }, "Conditions": { "CDKMetadataAvailable": { "Fn::Or": [ { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "af-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-northeast-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-northeast-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ca-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "cn-north-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "cn-northwest-1" ] } ] }, { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-north-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-3" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "me-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "sa-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-east-2" ] } ] }, { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-west-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-west-2" ] } ] } ] } }, "Parameters": { "BootstrapVersion": { "Type": "AWS::SSM::Parameter::Value", "Default": "/cdk-bootstrap/hnb659fds/version", "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]" } }, "Rules": { "CheckBootstrapVersion": { "Assertions": [ { "Assert": { "Fn::Not": [ { "Fn::Contains": [ [ "1", "2", "3", "4", "5" ], { "Ref": "BootstrapVersion" } ] } ] }, "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI." } ] } } }