def __init_

def init()

in Gems/AWSCore/cdkv1/core/core_stack.py [0:0]
61 lines of code
9 McCabe index (conditional complexity)

    def __init__(self, scope: core.Construct, id_: str, project_name: str, feature_name: str, **kwargs) -> None:
        super().__init__(scope, id_, **kwargs)

        self._project_name = project_name
        self._feature_name = feature_name

        # Define Admin Group - these are folks who can deploy, update, edit and delete resources
        self._admin_group = iam.Group(self, id='Admins', group_name=f'{project_name}-Admins')

        # Define User Group - these are users who can call ServiceAPIs etc as players/users
        self._user_group = iam.Group(self, id='Users', group_name=f'{project_name}-Users')

        # Generate a project resource group and automatically add stacks to them via tags
        # Will automatically add all project stacks to this resource group if they are tagged correctly
        query_property = resource_groups.CfnGroup.QueryProperty(
            tag_filters=[
                resource_groups.CfnGroup.TagFilterProperty(
                    key=Constants.O3DE_PROJECT_TAG_NAME,
                    values=[self._project_name]),
                resource_groups.CfnGroup.TagFilterProperty(
                    key=Constants.O3DE_FEATURE_TAG_NAME,
                    values=[self._feature_name]),
            ])

        # Note: Resource group names cannot start with AWS
        resource_group = resource_groups.CfnGroup(
            self,
            id=f'{self._project_name}-ResourceGroup',
            name=f'{CoreStack.RESOURCE_GROUP_PREFIX}-{self._project_name}-ResourceGroup',
            description=f'{self._project_name} application resource group',
            resource_query=resource_groups.CfnGroup.ResourceQueryProperty(
                query=query_property,
                type='TAG_FILTERS_1_0')
        )

        # Define exports
        # Export resource group
        self._resource_group_output = core.CfnOutput(
            self,
            id=f'{self._project_name}-ResourceGroupOutput',
            description='The core stack resource group',
            export_name=f"{self._project_name}:ResourceGroup",
            value=resource_group.name)

        self._user_group_output = core.CfnOutput(
            self,
            id=f'{self._project_name}-UserGroupOutput',
            description='The core stack User group',
            export_name=f"{self._project_name}:UserGroup",
            value=self._user_group.group_arn)

        self._admin_group_output = core.CfnOutput(
            self,
            id=f'{self._project_name}-AdminGroupOutput',
            description='The core stack Admins group',
            export_name=f"{self._project_name}:AdminGroup",
            value=self._admin_group.group_arn)

        # Create an S3 bucket for Amazon S3 server access logging
        # See https://docs.aws.amazon.com/AmazonS3/latest/dev/security-best-practices.html
        if self.node.try_get_context('disable_access_log') != 'true':

            # Auto cleanup bucket and data if requested
            _remove_storage = self.node.try_get_context('remove_all_storage_on_destroy') == 'true'
            _removal_policy = core.RemovalPolicy.DESTROY if _remove_storage else core.RemovalPolicy.RETAIN

            self._server_access_logs_bucket = s3.Bucket(
                self,
                f'{self._project_name}-{self._feature_name}-Access-Log-Bucket',
                access_control=s3.BucketAccessControl.LOG_DELIVERY_WRITE,
                auto_delete_objects = _remove_storage,
                block_public_access=s3.BlockPublicAccess.BLOCK_ALL,
                encryption=s3.BucketEncryption.S3_MANAGED,
                removal_policy=_removal_policy
            )

            self._server_access_logs_bucket.grant_read(self._admin_group)

            # Export access log bucket name
            self._server_access_logs_bucket_output = core.CfnOutput(
                self,
                id=f'ServerAccessLogsBucketOutput',
                description='Name of the S3 bucket for storing server access logs generated by the sample CDK application(s)',
                export_name=f"{self._project_name}:ServerAccessLogsBucket",
                value=self._server_access_logs_bucket.bucket_name)
def __init__()

def init()
