@mavogel/cdk-vscode-server 0.0.2

package/lib/installer/installer.lambda.d.ts

@@ -0,0 +1,3 @@
+import type { OnEventRequest, OnEventResponse } from 'aws-cdk-lib/custom-resources/lib/provider-framework/types';
+import { Context } from 'aws-lambda';
+export declare const handler: (event: OnEventRequest, context: Context) => Promise<OnEventResponse>;

package/lib/installer/installer.lambda.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_ssm_1 = require("@aws-sdk/client-ssm");
+const ssm = new client_ssm_1.SSM();
+const SLEEP_MS = 2900;
+const handler = async (event, context) => {
+    console.log('Event: %j', { ...event, ResponseURL: '...' });
+    if (event.RequestType !== 'Create') {
+        // do nothing
+        return {};
+    }
+    // only Create case
+    const resourceProperties = event.ResourceProperties;
+    const instanceId = event.ResourceProperties.InstanceId;
+    const documentName = event.ResourceProperties.DocumentName;
+    const cloudWatchLogGroupName = event.ResourceProperties.CloudWatchLogGroupName;
+    // debug
+    console.log('ResourceProperties raw: %j', resourceProperties);
+    console.log('InstanceId: %s', event.ResourceProperties.InstanceId);
+    console.log('VSCodePassword: %s', event.ResourceProperties.VSCodePassword);
+    // to be able to modify them
+    const resourcePropertiesPartial = resourceProperties;
+    console.log('ResourceProperties before: %j', resourcePropertiesPartial);
+    delete resourcePropertiesPartial.ServiceToken;
+    if (resourcePropertiesPartial.ServiceTimeout) {
+        delete resourcePropertiesPartial.ServiceTimeout;
+    }
+    delete resourcePropertiesPartial.InstanceId;
+    delete resourcePropertiesPartial.DocumentName;
+    delete resourcePropertiesPartial.CloudWatchLogGroupName;
+    if (resourcePropertiesPartial.PhysicalResourceId) {
+        delete resourcePropertiesPartial.PhysicalResourceId;
+    }
+    console.log('ResourceProperties filtered after: %j', resourcePropertiesPartial);
+    const parameters = {};
+    for (const [key, value] of Object.entries(resourcePropertiesPartial)) {
+        parameters[key] = [value];
+    }
+    console.log('mapped parameters: %j', parameters);
+    let attemptNo = 0;
+    let timeRemaining = context.getRemainingTimeInMillis();
+    console.log(`Running SSM Document '${documentName}' on EC2 instance '${instanceId}'. Logging to '${cloudWatchLogGroupName}' with parameters: '${JSON.stringify(parameters)}'`);
+    while (true) {
+        attemptNo += 1;
+        console.log(`Attempt: ${attemptNo}. Time Remaining: ${timeRemaining / 1000}s`);
+        try {
+            const response = await ssm.sendCommand({
+                DocumentName: documentName,
+                InstanceIds: [instanceId],
+                CloudWatchOutputConfig: {
+                    CloudWatchLogGroupName: cloudWatchLogGroupName,
+                    CloudWatchOutputEnabled: true,
+                },
+                Parameters: parameters,
+            });
+            console.log(`response: ${JSON.stringify(response)}`);
+            const command = response.Command;
+            const commandId = command.CommandId;
+            const responseData = { CommandId: commandId };
+            switch (command.Status) {
+                case 'Pending':
+                case 'InProgress':
+                    timeRemaining = context.getRemainingTimeInMillis();
+                    if (timeRemaining > SLEEP_MS) {
+                        console.log(`Instance ${instanceId} not ready: 'InProgress'. Sleeping: ${SLEEP_MS / 1000}s`);
+                        await new Promise(resolve => setTimeout(resolve, SLEEP_MS));
+                        break;
+                    }
+                    else {
+                        throw new Error(`SSM Document ${documentName} on EC2 instance ${instanceId} timed out while lambda in progress`);
+                    }
+                case 'Success':
+                    console.log(`Instance ${instanceId} successfully bootstrapped`);
+                    return { Data: responseData };
+                case 'TimedOut':
+                    throw new Error(`SSM Document ${documentName} on EC2 instance ${instanceId} timed out`);
+                case 'Cancelled':
+                    throw new Error(`SSM Document ${documentName} on EC2 instance ${instanceId} cancelled`);
+                case 'Failed':
+                    throw new Error(`SSM Document ${documentName} on EC2 instance ${instanceId} failed`);
+                default:
+                    throw new Error(`SSM Document ${documentName} on EC2 instance ${instanceId} status ${command.Status}`);
+            }
+            return { Data: responseData };
+        }
+        catch (error) {
+            console.log(error);
+            throw error;
+        }
+    }
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5zdGFsbGVyLmxhbWJkYS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9pbnN0YWxsZXIvaW5zdGFsbGVyLmxhbWJkYS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSxvREFBbUQ7QUFNbkQsTUFBTSxHQUFHLEdBQUcsSUFBSSxnQkFBRyxFQUFFLENBQUM7QUFDdEIsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDO0FBRWYsTUFBTSxPQUFPLEdBQUcsS0FBSyxFQUFFLEtBQXFCLEVBQUUsT0FBZ0IsRUFBNEIsRUFBRTtJQUNqRyxPQUFPLENBQUMsR0FBRyxDQUFDLFdBQVcsRUFBRSxFQUFFLEdBQUcsS0FBSyxFQUFFLFdBQVcsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO0lBRTNELElBQUksS0FBSyxDQUFDLFdBQVcsS0FBSyxRQUFRLEVBQUUsQ0FBQztRQUNuQyxhQUFhO1FBQ2IsT0FBTyxFQUFFLENBQUM7SUFDWixDQUFDO0lBRUQsbUJBQW1CO0lBQ25CLE1BQU0sa0JBQWtCLEdBQUcsS0FBSyxDQUFDLGtCQUFrQixDQUFDO0lBQ3BELE1BQU0sVUFBVSxHQUFHLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQyxVQUFVLENBQUM7SUFDdkQsTUFBTSxZQUFZLEdBQUcsS0FBSyxDQUFDLGtCQUFrQixDQUFDLFlBQVksQ0FBQztJQUMzRCxNQUFNLHNCQUFzQixHQUFHLEtBQUssQ0FBQyxrQkFBa0IsQ0FBQyxzQkFBc0IsQ0FBQztJQUUvRSxRQUFRO0lBQ1IsT0FBTyxDQUFDLEdBQUcsQ0FBQyw0QkFBNEIsRUFBRSxrQkFBa0IsQ0FBQyxDQUFDO0lBQzlELE9BQU8sQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLEVBQUUsS0FBSyxDQUFDLGtCQUFrQixDQUFDLFVBQVUsQ0FBQyxDQUFDO0lBQ25FLE9BQU8sQ0FBQyxHQUFHLENBQUMsb0JBQW9CLEVBQUUsS0FBSyxDQUFDLGtCQUFrQixDQUFDLGNBQWMsQ0FBQyxDQUFDO0lBRTNFLDRCQUE0QjtJQUM1QixNQUFNLHlCQUF5QixHQUFHLGtCQUFtRixDQUFDO0lBQ3RILE9BQU8sQ0FBQyxHQUFHLENBQUMsK0JBQStCLEVBQUUseUJBQXlCLENBQUMsQ0FBQztJQUN4RSxPQUFPLHlCQUF5QixDQUFDLFlBQVksQ0FBQztJQUM5QyxJQUFJLHlCQUF5QixDQUFDLGNBQWMsRUFBRSxDQUFDO1FBQzdDLE9BQU8seUJBQXlCLENBQUMsY0FBYyxDQUFDO0lBQ2xELENBQUM7SUFDRCxPQUFPLHlCQUF5QixDQUFDLFVBQVUsQ0FBQztJQUM1QyxPQUFPLHlCQUF5QixDQUFDLFlBQVksQ0FBQztJQUM5QyxPQUFPLHlCQUF5QixDQUFDLHNCQUFzQixDQUFDO0lBQ3hELElBQUkseUJBQXlCLENBQUMsa0JBQWtCLEVBQUUsQ0FBQztRQUNqRCxPQUFPLHlCQUF5QixDQUFDLGtCQUFrQixDQUFDO0lBQ3RELENBQUM7SUFFRCxPQUFPLENBQUMsR0FBRyxDQUFDLHVDQUF1QyxFQUFFLHlCQUF5QixDQUFDLENBQUM7SUFFaEYsTUFBTSxVQUFVLEdBQTZCLEVBQUUsQ0FBQztJQUNoRCxLQUFLLE1BQU0sQ0FBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksTUFBTSxDQUFDLE9BQU8sQ0FBQyx5QkFBeUIsQ0FBQyxFQUFFLENBQUM7UUFDckUsVUFBVSxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDNUIsQ0FBQztJQUNELE9BQU8sQ0FBQyxHQUFHLENBQUMsdUJBQXVCLEVBQUUsVUFBVSxDQUFDLENBQUM7SUFFakQsSUFBSSxTQUFTLEdBQVcsQ0FBQyxDQUFDO0lBQzFCLElBQUksYUFBYSxHQUFXLE9BQU8sQ0FBQyx3QkFBd0IsRUFBRSxDQUFDO0lBRS9ELE9BQU8sQ0FBQyxHQUFHLENBQUMseUJBQXlCLFlBQVksc0JBQXNCLFVBQVUsa0JBQWtCLHNCQUFzQix1QkFBdUIsSUFBSSxDQUFDLFNBQVMsQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLENBQUM7SUFFL0ssT0FBTyxJQUFJLEVBQUUsQ0FBQztRQUNaLFNBQVMsSUFBSSxDQUFDLENBQUM7UUFDZixPQUFPLENBQUMsR0FBRyxDQUFDLFlBQVksU0FBUyxxQkFBcUIsYUFBYSxHQUFHLElBQUksR0FBRyxDQUFDLENBQUM7UUFFL0UsSUFBSSxDQUFDO1lBQ0gsTUFBTSxRQUFRLEdBQUcsTUFBTSxHQUFHLENBQUMsV0FBVyxDQUFDO2dCQUNyQyxZQUFZLEVBQUUsWUFBWTtnQkFDMUIsV0FBVyxFQUFFLENBQUMsVUFBVSxDQUFDO2dCQUN6QixzQkFBc0IsRUFBRTtvQkFDdEIsc0JBQXNCLEVBQUUsc0JBQXNCO29CQUM5Qyx1QkFBdUIsRUFBRSxJQUFJO2lCQUM5QjtnQkFDRCxVQUFVLEVBQUUsVUFBVTthQUN2QixDQUFDLENBQUM7WUFFSCxPQUFPLENBQUMsR0FBRyxDQUFDLGFBQWEsSUFBSSxDQUFDLFNBQVMsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDLENBQUM7WUFDckQsTUFBTSxPQUFPLEdBQVksUUFBUSxDQUFDLE9BQVEsQ0FBQztZQUMzQyxNQUFNLFNBQVMsR0FBVyxPQUFPLENBQUMsU0FBVSxDQUFDO1lBQzdDLE1BQU0sWUFBWSxHQUFRLEVBQUUsU0FBUyxFQUFFLFNBQVMsRUFBRSxDQUFDO1lBRW5ELFFBQVEsT0FBTyxDQUFDLE1BQU8sRUFBRSxDQUFDO2dCQUN4QixLQUFLLFNBQVMsQ0FBQztnQkFDZixLQUFLLFlBQVk7b0JBQ2YsYUFBYSxHQUFHLE9BQU8sQ0FBQyx3QkFBd0IsRUFBRSxDQUFDO29CQUNuRCxJQUFJLGFBQWEsR0FBRyxRQUFRLEVBQUUsQ0FBQzt3QkFDN0IsT0FBTyxDQUFDLEdBQUcsQ0FBQyxZQUFZLFVBQVUsdUNBQXVDLFFBQVEsR0FBRyxJQUFJLEdBQUcsQ0FBQyxDQUFDO3dCQUM3RixNQUFNLElBQUksT0FBTyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUMsVUFBVSxDQUFDLE9BQU8sRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDO3dCQUM1RCxNQUFNO29CQUNSLENBQUM7eUJBQU0sQ0FBQzt3QkFDTixNQUFNLElBQUksS0FBSyxDQUFDLGdCQUFnQixZQUFZLG9CQUFvQixVQUFVLHFDQUFxQyxDQUFDLENBQUM7b0JBQ25ILENBQUM7Z0JBQ0gsS0FBSyxTQUFTO29CQUNaLE9BQU8sQ0FBQyxHQUFHLENBQUMsWUFBWSxVQUFVLDRCQUE0QixDQUFDLENBQUM7b0JBQ2hFLE9BQU8sRUFBRSxJQUFJLEVBQUUsWUFBWSxFQUFFLENBQUM7Z0JBQ2hDLEtBQUssVUFBVTtvQkFDYixNQUFNLElBQUksS0FBSyxDQUFDLGdCQUFnQixZQUFZLG9CQUFvQixVQUFVLFlBQVksQ0FBQyxDQUFDO2dCQUMxRixLQUFLLFdBQVc7b0JBQ2QsTUFBTSxJQUFJLEtBQUssQ0FBQyxnQkFBZ0IsWUFBWSxvQkFBb0IsVUFBVSxZQUFZLENBQUMsQ0FBQztnQkFDMUYsS0FBSyxRQUFRO29CQUNYLE1BQU0sSUFBSSxLQUFLLENBQUMsZ0JBQWdCLFlBQVksb0JBQW9CLFVBQVUsU0FBUyxDQUFDLENBQUM7Z0JBQ3ZGO29CQUNFLE1BQU0sSUFBSSxLQUFLLENBQUMsZ0JBQWdCLFlBQVksb0JBQW9CLFVBQVUsV0FBVyxPQUFPLENBQUMsTUFBTyxFQUFFLENBQUMsQ0FBQztZQUM1RyxDQUFDO1lBRUQsT0FBTyxFQUFFLElBQUksRUFBRSxZQUFZLEVBQUUsQ0FBQztRQUVoQyxDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLE9BQU8sQ0FBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUM7WUFDbkIsTUFBTSxLQUFLLENBQUM7UUFDZCxDQUFDO0lBQ0gsQ0FBQztBQUNILENBQUMsQ0FBQztBQWpHVyxRQUFBLE9BQU8sV0FpR2xCIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgQ29tbWFuZCwgU1NNIH0gZnJvbSAnQGF3cy1zZGsvY2xpZW50LXNzbSc7XG4vLyBAdHMtaWdub3JlXG5pbXBvcnQgdHlwZSB7IE9uRXZlbnRSZXF1ZXN0LCBPbkV2ZW50UmVzcG9uc2UgfSBmcm9tICdhd3MtY2RrLWxpYi9jdXN0b20tcmVzb3VyY2VzL2xpYi9wcm92aWRlci1mcmFtZXdvcmsvdHlwZXMnO1xuaW1wb3J0IHsgQ29udGV4dCB9IGZyb20gJ2F3cy1sYW1iZGEnO1xuaW1wb3J0IHsgQ2xvdWRGb3JtYXRpb25DdXN0b21SZXNvdXJjZVJlc291cmNlUHJvcGVydGllc0NvbW1vbiB9IGZyb20gJ2F3cy1sYW1iZGEvdHJpZ2dlci9jbG91ZGZvcm1hdGlvbi1jdXN0b20tcmVzb3VyY2UnO1xuXG5jb25zdCBzc20gPSBuZXcgU1NNKCk7XG5jb25zdCBTTEVFUF9NUyA9IDI5MDA7XG5cbmV4cG9ydCBjb25zdCBoYW5kbGVyID0gYXN5bmMgKGV2ZW50OiBPbkV2ZW50UmVxdWVzdCwgY29udGV4dDogQ29udGV4dCk6IFByb21pc2U8T25FdmVudFJlc3BvbnNlPiA9PiB7XG4gIGNvbnNvbGUubG9nKCdFdmVudDogJWonLCB7IC4uLmV2ZW50LCBSZXNwb25zZVVSTDogJy4uLicgfSk7XG5cbiAgaWYgKGV2ZW50LlJlcXVlc3RUeXBlICE9PSAnQ3JlYXRlJykge1xuICAgIC8vIGRvIG5vdGhpbmdcbiAgICByZXR1cm4ge307XG4gIH1cblxuICAvLyBvbmx5IENyZWF0ZSBjYXNlXG4gIGNvbnN0IHJlc291cmNlUHJvcGVydGllcyA9IGV2ZW50LlJlc291cmNlUHJvcGVydGllcztcbiAgY29uc3QgaW5zdGFuY2VJZCA9IGV2ZW50LlJlc291cmNlUHJvcGVydGllcy5JbnN0YW5jZUlkO1xuICBjb25zdCBkb2N1bWVudE5hbWUgPSBldmVudC5SZXNvdXJjZVByb3BlcnRpZXMuRG9jdW1lbnROYW1lO1xuICBjb25zdCBjbG91ZFdhdGNoTG9nR3JvdXBOYW1lID0gZXZlbnQuUmVzb3VyY2VQcm9wZXJ0aWVzLkNsb3VkV2F0Y2hMb2dHcm91cE5hbWU7XG5cbiAgLy8gZGVidWdcbiAgY29uc29sZS5sb2coJ1Jlc291cmNlUHJvcGVydGllcyByYXc6ICVqJywgcmVzb3VyY2VQcm9wZXJ0aWVzKTtcbiAgY29uc29sZS5sb2coJ0luc3RhbmNlSWQ6ICVzJywgZXZlbnQuUmVzb3VyY2VQcm9wZXJ0aWVzLkluc3RhbmNlSWQpO1xuICBjb25zb2xlLmxvZygnVlNDb2RlUGFzc3dvcmQ6ICVzJywgZXZlbnQuUmVzb3VyY2VQcm9wZXJ0aWVzLlZTQ29kZVBhc3N3b3JkKTtcblxuICAvLyB0byBiZSBhYmxlIHRvIG1vZGlmeSB0aGVtXG4gIGNvbnN0IHJlc291cmNlUHJvcGVydGllc1BhcnRpYWwgPSByZXNvdXJjZVByb3BlcnRpZXMgYXMgUGFydGlhbDxDbG91ZEZvcm1hdGlvbkN1c3RvbVJlc291cmNlUmVzb3VyY2VQcm9wZXJ0aWVzQ29tbW9uPjtcbiAgY29uc29sZS5sb2coJ1Jlc291cmNlUHJvcGVydGllcyBiZWZvcmU6ICVqJywgcmVzb3VyY2VQcm9wZXJ0aWVzUGFydGlhbCk7XG4gIGRlbGV0ZSByZXNvdXJjZVByb3BlcnRpZXNQYXJ0aWFsLlNlcnZpY2VUb2tlbjtcbiAgaWYgKHJlc291cmNlUHJvcGVydGllc1BhcnRpYWwuU2VydmljZVRpbWVvdXQpIHtcbiAgICBkZWxldGUgcmVzb3VyY2VQcm9wZXJ0aWVzUGFydGlhbC5TZXJ2aWNlVGltZW91dDtcbiAgfVxuICBkZWxldGUgcmVzb3VyY2VQcm9wZXJ0aWVzUGFydGlhbC5JbnN0YW5jZUlkO1xuICBkZWxldGUgcmVzb3VyY2VQcm9wZXJ0aWVzUGFydGlhbC5Eb2N1bWVudE5hbWU7XG4gIGRlbGV0ZSByZXNvdXJjZVByb3BlcnRpZXNQYXJ0aWFsLkNsb3VkV2F0Y2hMb2dHcm91cE5hbWU7XG4gIGlmIChyZXNvdXJjZVByb3BlcnRpZXNQYXJ0aWFsLlBoeXNpY2FsUmVzb3VyY2VJZCkge1xuICAgIGRlbGV0ZSByZXNvdXJjZVByb3BlcnRpZXNQYXJ0aWFsLlBoeXNpY2FsUmVzb3VyY2VJZDtcbiAgfVxuXG4gIGNvbnNvbGUubG9nKCdSZXNvdXJjZVByb3BlcnRpZXMgZmlsdGVyZWQgYWZ0ZXI6ICVqJywgcmVzb3VyY2VQcm9wZXJ0aWVzUGFydGlhbCk7XG5cbiAgY29uc3QgcGFyYW1ldGVyczogUmVjb3JkPHN0cmluZywgc3RyaW5nW10+ID0ge307XG4gIGZvciAoY29uc3QgW2tleSwgdmFsdWVdIG9mIE9iamVjdC5lbnRyaWVzKHJlc291cmNlUHJvcGVydGllc1BhcnRpYWwpKSB7XG4gICAgcGFyYW1ldGVyc1trZXldID0gW3ZhbHVlXTtcbiAgfVxuICBjb25zb2xlLmxvZygnbWFwcGVkIHBhcmFtZXRlcnM6ICVqJywgcGFyYW1ldGVycyk7XG5cbiAgbGV0IGF0dGVtcHRObzogbnVtYmVyID0gMDtcbiAgbGV0IHRpbWVSZW1haW5pbmc6IG51bWJlciA9IGNvbnRleHQuZ2V0UmVtYWluaW5nVGltZUluTWlsbGlzKCk7XG5cbiAgY29uc29sZS5sb2coYFJ1bm5pbmcgU1NNIERvY3VtZW50ICcke2RvY3VtZW50TmFtZX0nIG9uIEVDMiBpbnN0YW5jZSAnJHtpbnN0YW5jZUlkfScuIExvZ2dpbmcgdG8gJyR7Y2xvdWRXYXRjaExvZ0dyb3VwTmFtZX0nIHdpdGggcGFyYW1ldGVyczogJyR7SlNPTi5zdHJpbmdpZnkocGFyYW1ldGVycyl9J2ApO1xuXG4gIHdoaWxlICh0cnVlKSB7XG4gICAgYXR0ZW1wdE5vICs9IDE7XG4gICAgY29uc29sZS5sb2coYEF0dGVtcHQ6ICR7YXR0ZW1wdE5vfS4gVGltZSBSZW1haW5pbmc6ICR7dGltZVJlbWFpbmluZyAvIDEwMDB9c2ApO1xuXG4gICAgdHJ5IHtcbiAgICAgIGNvbnN0IHJlc3BvbnNlID0gYXdhaXQgc3NtLnNlbmRDb21tYW5kKHtcbiAgICAgICAgRG9jdW1lbnROYW1lOiBkb2N1bWVudE5hbWUsXG4gICAgICAgIEluc3RhbmNlSWRzOiBbaW5zdGFuY2VJZF0sXG4gICAgICAgIENsb3VkV2F0Y2hPdXRwdXRDb25maWc6IHtcbiAgICAgICAgICBDbG91ZFdhdGNoTG9nR3JvdXBOYW1lOiBjbG91ZFdhdGNoTG9nR3JvdXBOYW1lLFxuICAgICAgICAgIENsb3VkV2F0Y2hPdXRwdXRFbmFibGVkOiB0cnVlLFxuICAgICAgICB9LFxuICAgICAgICBQYXJhbWV0ZXJzOiBwYXJhbWV0ZXJzLFxuICAgICAgfSk7XG5cbiAgICAgIGNvbnNvbGUubG9nKGByZXNwb25zZTogJHtKU09OLnN0cmluZ2lmeShyZXNwb25zZSl9YCk7XG4gICAgICBjb25zdCBjb21tYW5kOiBDb21tYW5kID0gcmVzcG9uc2UuQ29tbWFuZCE7XG4gICAgICBjb25zdCBjb21tYW5kSWQ6IHN0cmluZyA9IGNvbW1hbmQuQ29tbWFuZElkITtcbiAgICAgIGNvbnN0IHJlc3BvbnNlRGF0YTogYW55ID0geyBDb21tYW5kSWQ6IGNvbW1hbmRJZCB9O1xuXG4gICAgICBzd2l0Y2ggKGNvbW1hbmQuU3RhdHVzISkge1xuICAgICAgICBjYXNlICdQZW5kaW5nJzpcbiAgICAgICAgY2FzZSAnSW5Qcm9ncmVzcyc6XG4gICAgICAgICAgdGltZVJlbWFpbmluZyA9IGNvbnRleHQuZ2V0UmVtYWluaW5nVGltZUluTWlsbGlzKCk7XG4gICAgICAgICAgaWYgKHRpbWVSZW1haW5pbmcgPiBTTEVFUF9NUykge1xuICAgICAgICAgICAgY29uc29sZS5sb2coYEluc3RhbmNlICR7aW5zdGFuY2VJZH0gbm90IHJlYWR5OiAnSW5Qcm9ncmVzcycuIFNsZWVwaW5nOiAke1NMRUVQX01TIC8gMTAwMH1zYCk7XG4gICAgICAgICAgICBhd2FpdCBuZXcgUHJvbWlzZShyZXNvbHZlID0+IHNldFRpbWVvdXQocmVzb2x2ZSwgU0xFRVBfTVMpKTtcbiAgICAgICAgICAgIGJyZWFrO1xuICAgICAgICAgIH0gZWxzZSB7XG4gICAgICAgICAgICB0aHJvdyBuZXcgRXJyb3IoYFNTTSBEb2N1bWVudCAke2RvY3VtZW50TmFtZX0gb24gRUMyIGluc3RhbmNlICR7aW5zdGFuY2VJZH0gdGltZWQgb3V0IHdoaWxlIGxhbWJkYSBpbiBwcm9ncmVzc2ApO1xuICAgICAgICAgIH1cbiAgICAgICAgY2FzZSAnU3VjY2Vzcyc6XG4gICAgICAgICAgY29uc29sZS5sb2coYEluc3RhbmNlICR7aW5zdGFuY2VJZH0gc3VjY2Vzc2Z1bGx5IGJvb3RzdHJhcHBlZGApO1xuICAgICAgICAgIHJldHVybiB7IERhdGE6IHJlc3BvbnNlRGF0YSB9O1xuICAgICAgICBjYXNlICdUaW1lZE91dCc6XG4gICAgICAgICAgdGhyb3cgbmV3IEVycm9yKGBTU00gRG9jdW1lbnQgJHtkb2N1bWVudE5hbWV9IG9uIEVDMiBpbnN0YW5jZSAke2luc3RhbmNlSWR9IHRpbWVkIG91dGApO1xuICAgICAgICBjYXNlICdDYW5jZWxsZWQnOlxuICAgICAgICAgIHRocm93IG5ldyBFcnJvcihgU1NNIERvY3VtZW50ICR7ZG9jdW1lbnROYW1lfSBvbiBFQzIgaW5zdGFuY2UgJHtpbnN0YW5jZUlkfSBjYW5jZWxsZWRgKTtcbiAgICAgICAgY2FzZSAnRmFpbGVkJzpcbiAgICAgICAgICB0aHJvdyBuZXcgRXJyb3IoYFNTTSBEb2N1bWVudCAke2RvY3VtZW50TmFtZX0gb24gRUMyIGluc3RhbmNlICR7aW5zdGFuY2VJZH0gZmFpbGVkYCk7XG4gICAgICAgIGRlZmF1bHQ6XG4gICAgICAgICAgdGhyb3cgbmV3IEVycm9yKGBTU00gRG9jdW1lbnQgJHtkb2N1bWVudE5hbWV9IG9uIEVDMiBpbnN0YW5jZSAke2luc3RhbmNlSWR9IHN0YXR1cyAke2NvbW1hbmQuU3RhdHVzIX1gKTtcbiAgICAgIH1cblxuICAgICAgcmV0dXJuIHsgRGF0YTogcmVzcG9uc2VEYXRhIH07XG5cbiAgICB9IGNhdGNoIChlcnJvcikge1xuICAgICAgY29uc29sZS5sb2coZXJyb3IpO1xuICAgICAgdGhyb3cgZXJyb3I7XG4gICAgfVxuICB9XG59OyJdfQ==

package/lib/mappings.d.ts

@@ -0,0 +1,2 @@
+import { LinuxArchitectureType, LinuxFlavorType } from './vscode-server';
+export declare function getAmiSSMParameterForLinuxArchitectureAndFlavor(arch: LinuxArchitectureType, flavor: LinuxFlavorType): string;

package/lib/mappings.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAmiSSMParameterForLinuxArchitectureAndFlavor = getAmiSSMParameterForLinuxArchitectureAndFlavor;
+/**
+ * SSM Parameters for the Architecture and Flavor of the Linux system.
+ *
+ * aws ssm get-parameters-by-path --path "/aws/service/canonical/ubuntu/" --recursive --query "Parameters[*].Name"  > canonical-ami.txt
+ * aws ssm get-parameters-by-path --path "/aws/service/ami-amazon-linux-latest/" --recursive --query "Parameters[*].Name"  > amazon-ami.txt
+ */
+const AmiSSMParameterForLinuxArchitectureAndFlavor = new Map([
+    // key, value
+    ['arm-ubuntu22', '/aws/service/canonical/ubuntu/server/jammy/stable/current/arm64/hvm/ebs-gp2/ami-id'],
+    ['arm-ubuntu24', '/aws/service/canonical/ubuntu/server/noble/stable/current/arm64/hvm/ebs-gp3/ami-id'],
+    ['arm-al2023', '/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64'],
+    ['amd64-ubuntu22', '/aws/service/canonical/ubuntu/server/jammy/stable/current/amd64/hvm/ebs-gp2/ami-id'],
+    ['amd64-ubuntu24', '/aws/service/canonical/ubuntu/server/noble/stable/current/amd64/hvm/ebs-gp3/ami-id'],
+    ['amd64-al2023', '/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64'],
+]);
+function getAmiSSMParameterForLinuxArchitectureAndFlavor(arch, flavor) {
+    if (AmiSSMParameterForLinuxArchitectureAndFlavor.has(`${arch}-${flavor}`)) {
+        return AmiSSMParameterForLinuxArchitectureAndFlavor.get(`${arch}-${flavor}`);
+    }
+    throw new Error(`Linux architecture '${arch}' and flavor '${flavor}' not supported`);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/prefixlist-retriever/prefixlist-retriever.d.ts

@@ -0,0 +1,16 @@
+import { IPrefixList } from 'aws-cdk-lib/aws-ec2';
+import { Construct } from 'constructs';
+export interface AwsManagedPrefixListProps {
+    /**
+     * Name of the aws managed prefix list.
+     * See: https://docs.aws.amazon.com/vpc/latest/userguide/working-with-aws-managed-prefix-lists.html#available-aws-managed-prefix-lists
+     * eg. com.amazonaws.global.cloudfront.origin-facing
+     *
+     * see all via aws ec2 describe-managed-prefix-lists  --region <REGION> | jq -r '.PrefixLists[] | select (.PrefixListName == "com.amazonaws.global.cloudfront.origin-facing") | .PrefixListId'
+     */
+    readonly name: string;
+}
+export declare class AwsManagedPrefixList extends Construct {
+    readonly prefixList: IPrefixList;
+    constructor(scope: Construct, id: string, { name }: AwsManagedPrefixListProps);
+}

package/lib/prefixlist-retriever/prefixlist-retriever.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsManagedPrefixList = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_ec2_1 = require("aws-cdk-lib/aws-ec2");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_logs_1 = require("aws-cdk-lib/aws-logs");
+const custom_resources_1 = require("aws-cdk-lib/custom-resources");
+const cdk_nag_1 = require("cdk-nag");
+const constructs_1 = require("constructs");
+// copied with grace from here until cdk supports it
+// https://github.com/aws/aws-cdk/issues/15115#issuecomment-1665104687
+class AwsManagedPrefixList extends constructs_1.Construct {
+    constructor(scope, id, { name }) {
+        super(scope, id);
+        const cr = new custom_resources_1.AwsCustomResource(this, 'GetPrefixListId', {
+            logGroup: new aws_logs_1.LogGroup(this, 'GetPrefixListIdLogGroup', {
+                removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+                retention: 1,
+            }),
+            onUpdate: {
+                service: '@aws-sdk/client-ec2',
+                action: 'DescribeManagedPrefixListsCommand',
+                parameters: {
+                    Filters: [
+                        {
+                            Name: 'prefix-list-name',
+                            Values: [name],
+                        },
+                    ],
+                },
+                physicalResourceId: custom_resources_1.PhysicalResourceId.of(`${id}-${this.node.addr.slice(0, 16)}`),
+            },
+            policy: custom_resources_1.AwsCustomResourcePolicy.fromStatements([
+                new aws_iam_1.PolicyStatement({
+                    effect: aws_iam_1.Effect.ALLOW,
+                    actions: ['ec2:DescribeManagedPrefixLists'],
+                    resources: ['*'],
+                }),
+            ]),
+            role: new aws_iam_1.Role(this, 'GetPrefixListIdRole', {
+                assumedBy: new aws_iam_1.ServicePrincipal('lambda.amazonaws.com'),
+            }),
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+        });
+        cdk_nag_1.NagSuppressions.addResourceSuppressions([
+            cr,
+        ], [
+            { id: 'AwsSolutions-IAM5', reason: 'For this provider wildcards are fine' },
+        ], true);
+        const prefixListId = cr.getResponseField('PrefixLists.0.PrefixListId');
+        this.prefixList = aws_ec2_1.PrefixList.fromPrefixListId(this, 'PrefixList', prefixListId);
+    }
+}
+exports.AwsManagedPrefixList = AwsManagedPrefixList;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/secret-retriever/secret-retriever-function.d.ts

@@ -0,0 +1,13 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for SecretRetrieverFunction
+ */
+export interface SecretRetrieverFunctionProps extends lambda.FunctionOptions {
+}
+/**
+ * An AWS Lambda function which executes src/secret-retriever/secret-retriever.
+ */
+export declare class SecretRetrieverFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: SecretRetrieverFunctionProps);
+}

package/lib/secret-retriever/secret-retriever-function.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretRetrieverFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/secret-retriever/secret-retriever.
+ */
+class SecretRetrieverFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/secret-retriever/secret-retriever.lambda.ts',
+            ...props,
+            runtime: new lambda.Runtime('nodejs18.x', lambda.RuntimeFamily.NODEJS),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../assets/secret-retriever/secret-retriever.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.SecretRetrieverFunction = SecretRetrieverFunction;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VjcmV0LXJldHJpZXZlci1mdW5jdGlvbi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9zZWNyZXQtcmV0cmlldmVyL3NlY3JldC1yZXRyaWV2ZXItZnVuY3Rpb24udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsNkVBQTZFO0FBQzdFLDZCQUE2QjtBQUM3QixpREFBaUQ7QUFTakQ7O0dBRUc7QUFDSCxNQUFhLHVCQUF3QixTQUFRLE1BQU0sQ0FBQyxRQUFRO0lBQzFELFlBQVksS0FBZ0IsRUFBRSxFQUFVLEVBQUUsS0FBb0M7UUFDNUUsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLEVBQUU7WUFDZixXQUFXLEVBQUUsaURBQWlEO1lBQzlELEdBQUcsS0FBSztZQUNSLE9BQU8sRUFBRSxJQUFJLE1BQU0sQ0FBQyxPQUFPLENBQUMsWUFBWSxFQUFFLE1BQU0sQ0FBQyxhQUFhLENBQUMsTUFBTSxDQUFDO1lBQ3RFLE9BQU8sRUFBRSxlQUFlO1lBQ3hCLElBQUksRUFBRSxNQUFNLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLFNBQVMsRUFBRSx1REFBdUQsQ0FBQyxDQUFDO1NBQzNHLENBQUMsQ0FBQztRQUNILElBQUksQ0FBQyxjQUFjLENBQUMscUNBQXFDLEVBQUUsR0FBRyxFQUFFLEVBQUUsWUFBWSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7SUFDMUYsQ0FBQztDQUNGO0FBWEQsMERBV0MiLCJzb3VyY2VzQ29udGVudCI6WyIvLyB+fiBHZW5lcmF0ZWQgYnkgcHJvamVuLiBUbyBtb2RpZnksIGVkaXQgLnByb2plbnJjLnRzIGFuZCBydW4gXCJucHggcHJvamVuXCIuXG5pbXBvcnQgKiBhcyBwYXRoIGZyb20gJ3BhdGgnO1xuaW1wb3J0ICogYXMgbGFtYmRhIGZyb20gJ2F3cy1jZGstbGliL2F3cy1sYW1iZGEnO1xuaW1wb3J0IHsgQ29uc3RydWN0IH0gZnJvbSAnY29uc3RydWN0cyc7XG5cbi8qKlxuICogUHJvcHMgZm9yIFNlY3JldFJldHJpZXZlckZ1bmN0aW9uXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgU2VjcmV0UmV0cmlldmVyRnVuY3Rpb25Qcm9wcyBleHRlbmRzIGxhbWJkYS5GdW5jdGlvbk9wdGlvbnMge1xufVxuXG4vKipcbiAqIEFuIEFXUyBMYW1iZGEgZnVuY3Rpb24gd2hpY2ggZXhlY3V0ZXMgc3JjL3NlY3JldC1yZXRyaWV2ZXIvc2VjcmV0LXJldHJpZXZlci5cbiAqL1xuZXhwb3J0IGNsYXNzIFNlY3JldFJldHJpZXZlckZ1bmN0aW9uIGV4dGVuZHMgbGFtYmRhLkZ1bmN0aW9uIHtcbiAgY29uc3RydWN0b3Ioc2NvcGU6IENvbnN0cnVjdCwgaWQ6IHN0cmluZywgcHJvcHM/OiBTZWNyZXRSZXRyaWV2ZXJGdW5jdGlvblByb3BzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkLCB7XG4gICAgICBkZXNjcmlwdGlvbjogJ3NyYy9zZWNyZXQtcmV0cmlldmVyL3NlY3JldC1yZXRyaWV2ZXIubGFtYmRhLnRzJyxcbiAgICAgIC4uLnByb3BzLFxuICAgICAgcnVudGltZTogbmV3IGxhbWJkYS5SdW50aW1lKCdub2RlanMxOC54JywgbGFtYmRhLlJ1bnRpbWVGYW1pbHkuTk9ERUpTKSxcbiAgICAgIGhhbmRsZXI6ICdpbmRleC5oYW5kbGVyJyxcbiAgICAgIGNvZGU6IGxhbWJkYS5Db2RlLmZyb21Bc3NldChwYXRoLmpvaW4oX19kaXJuYW1lLCAnLi4vLi4vYXNzZXRzL3NlY3JldC1yZXRyaWV2ZXIvc2VjcmV0LXJldHJpZXZlci5sYW1iZGEnKSksXG4gICAgfSk7XG4gICAgdGhpcy5hZGRFbnZpcm9ubWVudCgnQVdTX05PREVKU19DT05ORUNUSU9OX1JFVVNFX0VOQUJMRUQnLCAnMScsIHsgcmVtb3ZlSW5FZGdlOiB0cnVlIH0pO1xuICB9XG59Il19

package/lib/secret-retriever/secret-retriever.d.ts

@@ -0,0 +1,33 @@
+import { IResource } from 'aws-cdk-lib/core';
+import { Construct } from 'constructs';
+export interface Secret {
+    username: string;
+    password: string;
+}
+export interface SecretRetrieverOptionsBase {
+    readonly secretArn: string;
+}
+export interface SecretRetrieverOptions extends SecretRetrieverOptionsBase {
+}
+export declare abstract class SecretRetriever {
+    static new(options: SecretRetrieverOptions): SecretRetriever;
+    secretArn: string;
+    /**
+     * The ARN of the secretRetriever in SSM.
+     */
+    secretRetrieverArn: string;
+    /**
+     * The plaintext secret
+     */
+    secretPlaintext: Secret;
+    secretPasswordPlaintext: string;
+    customResource: IResource;
+    /**
+     * @internal
+     */
+    protected constructor();
+    /**
+     * @internal
+     */
+    abstract _bind(scope: Construct): any;
+}

package/lib/secret-retriever/secret-retriever.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretRetriever = void 0;
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const core_1 = require("aws-cdk-lib/core");
+const custom_resources_1 = require("aws-cdk-lib/custom-resources");
+const cdk_nag_1 = require("cdk-nag");
+const secret_retriever_function_1 = require("./secret-retriever-function");
+;
+class SecretRetriever {
+    static new(options) {
+        return new (class extends SecretRetriever {
+            _bind(scope) {
+                const secretRetriever = new CustomResourceSecretRetriever(scope, {
+                    secretArn: options.secretArn,
+                });
+                return secretRetriever;
+            }
+        })();
+    }
+    /**
+     * @internal
+     */
+    constructor() { }
+}
+exports.SecretRetriever = SecretRetriever;
+class CustomResourceSecretRetriever extends SecretRetriever {
+    constructor(scope, options) {
+        super();
+        this.secretArn = options.secretArn;
+        const onEvent = new secret_retriever_function_1.SecretRetrieverFunction(scope, 'SecretRetrieverOnEventHandler', {
+            timeout: core_1.Duration.seconds(10),
+            memorySize: 128,
+        });
+        cdk_nag_1.NagSuppressions.addResourceSuppressions([
+            onEvent,
+        ], [
+            { id: 'AwsSolutions-IAM4', reason: 'For this event handler we do not need to restrict managed policies' },
+            { id: 'AwsSolutions-L1', reason: 'For this lambda the latest runtime is not needed' },
+        ], true);
+        onEvent.addToRolePolicy(new aws_iam_1.PolicyStatement({
+            actions: [
+                'secretsmanager:GetSecretValue',
+            ],
+            resources: [
+                this.secretArn,
+            ],
+        }));
+        const provider = new custom_resources_1.Provider(scope, 'SecretRetrieveProvider', {
+            onEventHandler: onEvent,
+        });
+        cdk_nag_1.NagSuppressions.addResourceSuppressions([
+            provider,
+        ], [
+            { id: 'AwsSolutions-IAM4', reason: 'For this provider we do not need to restrict managed policies' },
+            { id: 'AwsSolutions-IAM5', reason: 'For this provider wildcards are fine' },
+            { id: 'AwsSolutions-L1', reason: 'For this provider the latest runtime is not needed' },
+        ], true);
+        const resource = new core_1.CustomResource(scope, 'SecretRetrieverCustomResource', {
+            serviceToken: provider.serviceToken,
+            properties: {
+                SecretArn: options.secretArn,
+                ServiceTimeout: 305,
+            },
+        });
+        this.secretPlaintext = resource.getAtt('secretValue').toJSON();
+        this.secretPasswordPlaintext = resource.getAttString('secretPasswordValue');
+        this.customResource = resource;
+    }
+    _bind() { }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/secret-retriever/secret-retriever.lambda.d.ts

@@ -0,0 +1,2 @@
+import type { OnEventRequest, OnEventResponse } from 'aws-cdk-lib/custom-resources/lib/provider-framework/types';
+export declare const handler: (event: OnEventRequest) => Promise<OnEventResponse>;

package/lib/secret-retriever/secret-retriever.lambda.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const secretsManager = new client_secrets_manager_1.SecretsManager();
+const handler = async (event) => {
+    console.log('Event: %j', { ...event, ResponseURL: '...' });
+    if (event.RequestType === 'Delete') {
+        // do nothing
+        return {};
+    }
+    // Create and update case
+    const secretArn = event.ResourceProperties.SecretArn;
+    console.log('secretArn: %j', secretArn);
+    try {
+        const secret = await secretsManager.getSecretValue({
+            SecretId: secretArn,
+        });
+        const secretValue = secret.SecretString;
+        console.log('secretValue: %j', secretValue);
+        const parsedSecretValue = JSON.parse(secretValue);
+        console.log('secretValue is JSON: %j', parsedSecretValue);
+        return {
+            Data: {
+                secretValue: parsedSecretValue,
+                secretPasswordValue: parsedSecretValue.password,
+            },
+        };
+    }
+    catch (error) {
+        console.error(error);
+        throw error;
+    }
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/vscode-server.d.ts

@@ -0,0 +1,97 @@
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import { Construct } from 'constructs';
+export interface VSCodeServerProps {
+    /**
+     * UserName for VSCode Server
+     *
+     * @default - participant
+     */
+    readonly vscodeUser?: string;
+    /**
+     * Password for VSCode Server
+     *
+     * @default - empty and will then be generated
+     */
+    readonly vscodePassword?: string;
+    /**
+     * VSCode Server EC2 instance name
+     *
+     * @default - VSCodeServer
+     */
+    readonly instanceName?: string;
+    /**
+     * VSCode Server EC2 instance volume size in GB
+     *
+     * @default - 40
+     */
+    readonly instanceVolumeSize?: number;
+    /**
+     * VSCode Server EC2 instance class
+     *
+     * @default - m7g
+     */
+    readonly instanceClass?: ec2.InstanceClass;
+    /**
+     * VSCode Server EC2 instance size
+     *
+     * @default - xlarge
+     */
+    readonly instanceSize?: ec2.InstanceSize;
+    /**
+     * VSCode Server EC2 operating system
+     *
+     * @default - Ubuntu-22
+     */
+    readonly instanceOperatingSystem?: LinuxFlavorType;
+    /**
+     * VSCode Server EC2 cpu architecture for the operating system
+     *
+     * @default - arm
+     */
+    readonly instanceCpuArchitecture?: LinuxArchitectureType;
+    /**
+     * Folder to open in VS Code server
+     *
+     * @default - /Workshop
+     */
+    readonly homeFolder?: string;
+    /**
+     * Base path for the application to be added to Nginx sites-available list
+     *
+     * @default - app
+     */
+    readonly devServerBasePath?: string;
+    /**
+     * Port for the DevServer
+     *
+     * @default - 8081
+     */
+    readonly devServerPort?: number;
+    /**
+     * Additional instance role policies
+     *
+     * @default - []
+     */
+    readonly additionalInstanceRolePolicies?: iam.PolicyStatement[];
+}
+/**
+ * The flavor of linux you want to run vscode server on
+ */
+export declare enum LinuxFlavorType {
+    UBUNTU_22 = "ubuntu22",
+    UBUNTU_24 = "ubuntu24",
+    AMAZON_LINUX_2023 = "al2023"
+}
+/**
+ * The architecture of the cpu you want to run vscode server on
+ */
+export declare enum LinuxArchitectureType {
+    ARM = "arm",
+    AMD64 = "amd64"
+}
+export declare class VSCodeServer extends Construct {
+    readonly domainName: string;
+    readonly password: string;
+    constructor(scope: Construct, id: string, props?: VSCodeServerProps);
+}