@mavogel/cdk-vscode-server 0.0.63 → 0.0.65

package/.jsii

@@ -4102,7 +4102,7 @@
   },
   "name": "@mavogel/cdk-vscode-server",
   "readme": {
-    "markdown": "![Source](https://img.shields.io/github/stars/MV-Consulting/cdk-vscode-server?logo=github&label=GitHub%20Stars)\n[![Build Status](https://github.com/MV-Consulting/cdk-vscode-server/actions/workflows/build.yml/badge.svg)](https://github.com/MV-Consulting/cdk-vscode-server/actions/workflows/build.yml)\n[![ESLint Code Formatting](https://img.shields.io/badge/code_style-eslint-brightgreen.svg)](https://eslint.org)\n[![Latest release](https://img.shields.io/github/release/MV-Consulting/cdk-vscode-server.svg)](https://github.com/MV-Consulting/cdk-vscode-server/releases)\n![GitHub](https://img.shields.io/github/license/MV-Consulting/cdk-vscode-server)\n[![npm](https://img.shields.io/npm/dt/@mavogel/cdk-vscode-server?label=npm&color=orange)](https://www.npmjs.com/package/@mavogel/cdk-vscode-server)\n[![typescript](https://img.shields.io/badge/jsii-typescript-blueviolet.svg)](https://www.npmjs.com/package/@mavogel/cdk-vscode-server)\n\n# cdk-vscode-server\n\nRunning your dev IDE vscode on AWS for development and workshop purposes.\n\n> [!Note]\n> This construct is designed for workshop purposes and does not fulfill all security and authentication best practices.\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I\nwe implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Table of Contents\n\n- [Features](#features)\n- [Usage](#usage)\n  - [Standard](#Standard)\n  - [Pre-populate with Git Repository](#pre-populate-with-git-repository)\n  - [Custom Domain Configuration](#custom-domain-configuration)\n  - [Auto-Stop Configuration](#auto-stop-configuration)\n- [Solution Design](#solution-design)\n- [Inspiration](#inspiration)\n\n## Features\n\n- ⚡ **Quick Setup**: Spin up and configure your [vscode](https://code.visualstudio.com/) server in under 10 minutes in your AWS account\n- 📏 **Best Practice Setup**: Set up with [projen](https://projen.io/) and a [single configuration file](./.projenrc.ts) to keep your changes centralized.\n- 🤹‍♂️ **Pre-installed packages**: Besides the [vscode](https://code.visualstudio.com/) server, other tools and software packages such as `git`, `docker`, `awscli` `nodejs` and `python` are pre-installed on the EC2 instance.\n- 🌐 **Custom Domain Support**: Use your own domain name with automatic ACM certificate creation and Route53 DNS configuration, or bring your existing certificate.\n- 💰 **Auto-Stop**: Automatically stop EC2 instances after inactivity with Elastic IP retention - save up to 75% on costs for development environments.\n- 🏗️ **Extensibility**: Pass in properties to the construct, which start with `additional*`. They allow you to extend the configuration to your needs. There are more to come...\n\n## Usage\nActually we supported 2 modes:\n\n### Standard\nThe following steps get you started:\n\n1. Create a new `awscdk-app` via\n```bash\nnpx projen new awscdk-app-ts --package-manager=npm\n```\n3. Add `@mavogel/cdk-vscode-server` as a dependency to your project in the `.projenrc.ts` file\n4. Run `npx projen` to install it\n5. Add the following to the `src/main.ts` file:\n```ts\nimport { App, Stack, StackProps } from 'aws-cdk-lib';\nimport * as ec2 from 'aws-cdk-lib/aws-ec2';\nimport * as iam from 'aws-cdk-lib/aws-iam';\nimport { Construct } from 'constructs';\nimport {\n  LinuxArchitectureType,\n  LinuxFlavorType,\n  VSCodeServer\n} from '@mavogel/cdk-vscode-server';\n\nexport class MyStack extends Stack {\n  constructor(scope: Construct, id: string, props: StackProps = {}) {\n    super(scope, id, props);\n\n    new VSCodeServer(this, 'vscode', {\n      // for example (or simply use the defaults by not setting the properties)\n      instanceVolumeSize: 8,\n      instanceClass: ec2.InstanceClass.M7G,\n      instanceSize: ec2.InstanceSize.LARGE,\n      instanceOperatingSystem: LinuxFlavorType.UBUNTU_22,\n      instanceCpuArchitecture: LinuxArchitectureType.ARM,\n\n      // 👇🏽 or if you want to give the InstanceRole more permissions\n      additionalInstanceRolePolicies: [\n        new iam.PolicyStatement({\n          effect: iam.Effect.ALLOW,\n          actions: [\n            'codebuild:*',\n          ],\n          resources: [\n            `arn:aws:codebuild:*:${Stack.of(this).account}:*/*`,\n          ],\n        }),\n      ]\n\n      // and more... 💡\n    });\n  }\n}\n\nconst env = {\n  account: '123456789912',\n  region: 'eu-central-1',\n};\n\nconst app = new App();\nnew MyStack(app, 'vscode-server', { env });\napp.synth();\n```\n\nand deploy it\n```bash\nnpx projen build\nnpx projen deploy\n```\n\nwith the output\n```console\n✨  Deployment time: 509.87s\n\nOutputs:\ndev.vscodedomainName6729AA39 = https://d1foo65bar4baz.cloudfront.net/?folder=/Workshop\ndev.vscodepassword64FBCA12 = foobarbaz\n```\n\nSee the [examples](./examples) folder for more inspiration.\n\n### Pre-populate with Git Repository\n\nClone a git repository into the VS Code Server's home folder during instance setup - perfect for workshops or development environments with starter code:\n\n```ts\nnew VSCodeServer(this, 'vscode', {\n  // Clone a git repository into the home folder\n  repoUrl: 'https://github.com/aws-samples/my-workshop-repo.git',\n\n  // Optional: customize the home folder path (default: /Workshop)\n  homeFolder: '/MyWorkshop',\n\n  // Optional: specify VS Code user (default: vscode-user)\n  vscodeUser: 'workshop-user',\n});\n```\n\n**What happens:**\n1. During instance setup, the specified git repository is cloned into the user's home folder\n2. VS Code Server opens with the repository already loaded and ready to use\n3. Participants can start coding immediately without manual git clone steps\n\n**Use cases:**\n- Workshop environments with pre-configured starter code\n- Development environments with boilerplate projects\n- Training sessions with example applications\n- Code review sessions with pre-loaded repositories\n\n**Repository requirements:**\n- Must be publicly accessible (no authentication required)\n- HTTPS URLs only (SSH git URLs are not supported)\n- Repository will be cloned using `git clone` during instance initialization\n\nFor complete examples, see [examples/](./examples).\n\n### Custom Domain Configuration\n\nYou can configure your VS Code Server with a custom domain name instead of using the default CloudFront domain. The construct supports three different configuration options:\n\n#### Option 1: Auto-create Certificate with DNS Validation\n```ts\nnew VSCodeServer(this, 'vscode', {\n  domainName: 'vscode.example.com',\n  hostedZoneId: 'Z123EXAMPLE456',  // optional - will auto-discover if not provided\n  autoCreateCertificate: true,\n});\n```\n\nThis will:\n- Create an ACM certificate in us-east-1 (required for CloudFront)\n- Validate the certificate using DNS validation\n- Create a Route53 A record pointing to the CloudFront distribution\n- Configure the CloudFront distribution with the custom domain\n\n#### Option 2: Use Existing Certificate\n```ts\nnew VSCodeServer(this, 'vscode', {\n  domainName: 'vscode.example.com',\n  hostedZoneId: 'Z123EXAMPLE456',\n  certificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012',\n});\n```\n\n**Requirements:**\n- Certificate must be in us-east-1 region\n- Certificate must be validated and ready to use\n- Certificate must include the domain name\n\n#### Option 3: Default (No Custom Domain)\n```ts\nnew VSCodeServer(this, 'vscode', {\n  // No domain configuration - uses CloudFront default domain\n});\n```\n\nFor complete examples, see [examples/custom-domain/main.ts](./examples/custom-domain/main.ts).\n\n6. Then open the domain name in your favorite browser and you'd see the following login screen:\n![vscode-server-ui-login](docs/img/vscode-server-ui-login-min.png)\n\n7. After entering the password, you are logged into VSCode and can start coding :tada:\n\n![vscode-server-ui](docs/img/vscode-server-ui-min.png)\n\n> [!Important]\n> There are issues with copy pasting into the VSCode terminal within the Firefox browser (2025-01-12)\n\n### Auto-Stop Configuration\n\nSave up to 75% on costs by automatically stopping EC2 instances when idle:\n\n```ts\nnew VSCodeServer(this, 'vscode', {\n  enableAutoStop: true,              // Enable auto-stop feature\n  idleTimeoutMinutes: 30,            // Stop after 30 minutes of no activity (default)\n  idleCheckIntervalMinutes: 5,       // Check for idle activity every 5 minutes (default)\n});\n```\n\n**How it works:**\n1. **Idle Detection**: Monitors CloudFront request metrics at configured intervals (default: every 5 minutes)\n2. **Auto-Stop**: Stops the EC2 instance after the configured idle timeout when no requests are detected\n3. **Static IP**: Allocates an Elastic IP to maintain a consistent public IP address across stop/start cycles\n4. **Manual Resume**: Users can manually start the instance via AWS Console or CLI when needed\n\n**Cost Savings Example:**\n- **Without auto-stop**: m7g.xlarge running 24/7 = ~$120/month\n- **With auto-stop** (8 hours/day, 5 days/week): ~$30/month\n- **Savings**: ~$90/month (75% reduction)\n\n**Additional costs:**\n- Elastic IP (allocated): ~$3.65/month\n- Lambda function (IdleMonitor): ~$0.10/month\n- EventBridge rule: Negligible\n- **Net savings**: ~$86/month per instance\n\n**Architecture Components:**\n- Elastic IP for consistent public addressing\n- EventBridge rule triggering idle monitoring at configured intervals\n- IdleMonitor Lambda function checking CloudWatch metrics for request activity\n- IdleMonitorEnabler custom resource ensuring monitoring only starts after installation completes\n- CloudWatch metrics from CloudFront distribution\n\n**Integration Testing:**\n\nThe stop-on-idle functionality includes comprehensive integration tests (`integ-tests/integ.stop-on-idle.ts`) that verify the complete workflow:\n\n1. **Phase 1 - Verify Auto-Stop**: Waits for the instance to automatically stop after the configured idle timeout\n2. **Phase 2 - Disable IdleMonitor**: Disables the EventBridge rule to prevent the instance from being stopped again during testing\n3. **Phase 3 - Start Instance**: Starts the stopped instance and waits for it to reach the running state\n4. **Phase 4 - Verify Login**: Confirms that VS Code Server is accessible through CloudFront after the instance has been restarted\n\nThis 4-phase test ensures that:\n- Idle detection works correctly based on CloudWatch metrics\n- Instance stops automatically when no activity is detected\n- Instance can be successfully restarted after being stopped\n- VS Code Server remains accessible after stop/start cycles\n- Elastic IP maintains connectivity across state changes\n\nRun integration tests with:\n```bash\nnpm run integ-test\n```\n\n## Solution Design\n\n<details>\n  <summary>... if you're curious about click here for the details</summary>\n\n![vscode-server-solution-design](docs/img/vscode-server.drawio-min.png)\n\n</details>\n\n## Inspiration\nThis project was created based on the following inspiration\n\n- [vscode-on-ec2-for-prototyping](https://github.com/aws-samples/vscode-on-ec2-for-prototyping): as baseline, which unfortunately was outdated\n- [aws-terraform-dev-container](https://github.com/awslabs/aws-terraform-dev-container): as baseline for terraform, but unfortunately also outdated\n- [java-on-aws-workshop-ide-only.yaml](https://github.com/aws-samples/java-on-aws/blob/main/labs/unicorn-store/infrastructure/cfn/java-on-aws-workshop-ide-only.yaml): an already synthesized cloudformation stack, which used mostly python as the custom resources\n- [fleet-workshop-team-stack-self.json](https://static.us-east-1.prod.workshops.aws/public/cc4aa67e-5b7a-4df1-abf7-c42502899a25/assets/fleet-workshop-team-stack-self.json): also an already synthesized cloudformation stack, which did much more as I currently implemented here.\n- [eks-workshop-vscode-cfn.yaml](https://github.com/aws-samples/eks-workshop-v2/blob/main/lab/cfn/eks-workshop-vscode-cfn.yaml): another great baseline\n\n\n## 🚀 Unlock the Full Potential of Your AWS Cloud Infrastructure\n\nHi, I’m Manuel, an AWS expert passionate about empowering businesses with **scalable, resilient, and cost-optimized cloud solutions**. With **MV Consulting**, I specialize in crafting **tailored AWS architectures** and **DevOps-driven workflows** that not only meet your current needs but grow with you.\n\n---\n\n### 🌟 Why Work With Me?\n\n✔️ **Tailored AWS Solutions:** Every business is unique, so I design custom solutions that fit your goals and challenges.\n✔️ **Well-Architected Designs:** From scalability to security, my solutions align with AWS Well-Architected Framework.\n✔️ **Cloud-Native Focus:** I specialize in modern, cloud-native systems that embrace the full potential of AWS.\n✔️ **Business-Driven Tech:** Technology should serve your business, not the other way around.\n\n---\n\n### 🛠 What I Bring to the Table\n\n🔑 **12x AWS Certifications**\nI’m **AWS Certified Solutions Architect and DevOps – Professional** and hold numerous additional certifications, so you can trust I’ll bring industry best practices to your projects. Feel free to explose by [badges](https://www.credly.com/users/manuel-vogel)\n\n⚙️ **Infrastructure as Code (IaC)**\nWith deep expertise in **AWS CDK** and **Terraform**, I ensure your infrastructure is automated, maintainable, and scalable.\n\n📦 **DevOps Expertise**\nFrom CI/CD pipelines with **GitHub Actions** and **GitLab CI** to container orchestration **Kubernetes** and others, I deliver workflows that are smooth and efficient.\n\n🌐 **Hands-On Experience**\nWith over **7 years of AWS experience** and a decade in the tech world, I’ve delivered solutions for companies large and small. My open-source contributions showcase my commitment to transparency and innovation. Feel free to explore my [GitHub profile](https://github.com/mavogel)\n\n---\n\n### 💼 Let’s Build Something Great Together\n\nI know that choosing the right partner is critical to your success. When you work with me, you’re not just contracting an engineer – you’re gaining a trusted advisor and hands-on expert who cares about your business as much as you do.\n\n✔️ **Direct Collaboration**: No middlemen or red tape – you work with me directly.\n✔️ **Transparent Process**: Expect open communication, clear timelines, and visible results.\n✔️ **Real Value**: My solutions focus on delivering measurable impact for your business.\n\n\n<a href=\"https://tinyurl.com/mvc-15min\"><img alt=\"Schedule your call\" src=\"https://img.shields.io/badge/schedule%20your%20call-success.svg?style=for-the-badge\"/></a>\n\n---\n\n## 🙌 Acknowledgements\n\nBig shoutout to the amazing team behind [Projen](https://github.com/projen/projen)!\nTheir groundbreaking work simplifies cloud infrastructure projects and inspires us every day. 💡\n\n## Author\n\n[Manuel Vogel](https://manuel-vogel.de/about/)\n\n[![](https://img.shields.io/badge/LinkedIn-0077B5?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/manuel-vogel)\n[![](https://img.shields.io/badge/GitHub-2b3137?style=for-the-badge&logo=github&logoColor=white)](https://github.com/mavogel)"
+    "markdown": "![Source](https://img.shields.io/github/stars/MV-Consulting/cdk-vscode-server?logo=github&label=GitHub%20Stars)\n[![Build Status](https://github.com/MV-Consulting/cdk-vscode-server/actions/workflows/build.yml/badge.svg)](https://github.com/MV-Consulting/cdk-vscode-server/actions/workflows/build.yml)\n[![ESLint Code Formatting](https://img.shields.io/badge/code_style-eslint-brightgreen.svg)](https://eslint.org)\n[![Latest release](https://img.shields.io/github/release/MV-Consulting/cdk-vscode-server.svg)](https://github.com/MV-Consulting/cdk-vscode-server/releases)\n![GitHub](https://img.shields.io/github/license/MV-Consulting/cdk-vscode-server)\n[![npm](https://img.shields.io/npm/dt/@mavogel/cdk-vscode-server?label=npm&color=orange)](https://www.npmjs.com/package/@mavogel/cdk-vscode-server)\n[![typescript](https://img.shields.io/badge/jsii-typescript-blueviolet.svg)](https://www.npmjs.com/package/@mavogel/cdk-vscode-server)\n\n# cdk-vscode-server\n\nRunning your dev IDE vscode on AWS for development and workshop purposes.\n\n> [!Note]\n> This construct is designed for workshop purposes and does not fulfill all security and authentication best practices.\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I\nwe implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Table of Contents\n\n- [Features](#features)\n- [Usage](#usage)\n  - [Standard](#Standard)\n  - [Pre-populate with Git Repository](#pre-populate-with-git-repository)\n  - [Custom Domain Configuration](#custom-domain-configuration)\n  - [Auto-Stop Configuration](#auto-stop-configuration)\n  - [Custom Installation Steps](#custom-installation-steps)\n- [Solution Design](#solution-design)\n- [Inspiration](#inspiration)\n\n## Features\n\n- ⚡ **Quick Setup**: Spin up and configure your [vscode](https://code.visualstudio.com/) server in under 10 minutes in your AWS account\n- 📏 **Best Practice Setup**: Set up with [projen](https://projen.io/) and a [single configuration file](./.projenrc.ts) to keep your changes centralized.\n- 🤹‍♂️ **Pre-installed packages**: Besides the [vscode](https://code.visualstudio.com/) server, other tools and software packages such as `git`, `docker`, `awscli` `nodejs` and `python` are pre-installed on the EC2 instance.\n- 🌐 **Custom Domain Support**: Use your own domain name with automatic ACM certificate creation and Route53 DNS configuration, or bring your existing certificate.\n- 💰 **Auto-Stop**: Automatically stop EC2 instances after inactivity with Elastic IP retention - save up to 75% on costs for development environments.\n- 🔧 **Custom Install Steps**: Extend the standard installation with your own shell commands to install workshop-specific tools, configure environments, or run setup scripts.\n- 🏗️ **Extensibility**: Pass in properties to the construct, which start with `additional*`. They allow you to extend the configuration to your needs. There are more to come...\n\n## Usage\nActually we supported 2 modes:\n\n### Standard\nThe following steps get you started:\n\n1. Create a new `awscdk-app` via\n```bash\nnpx projen new awscdk-app-ts --package-manager=npm\n```\n3. Add `@mavogel/cdk-vscode-server` as a dependency to your project in the `.projenrc.ts` file\n4. Run `npx projen` to install it\n5. Add the following to the `src/main.ts` file:\n```ts\nimport { App, Stack, StackProps } from 'aws-cdk-lib';\nimport * as ec2 from 'aws-cdk-lib/aws-ec2';\nimport * as iam from 'aws-cdk-lib/aws-iam';\nimport { Construct } from 'constructs';\nimport {\n  LinuxArchitectureType,\n  LinuxFlavorType,\n  VSCodeServer\n} from '@mavogel/cdk-vscode-server';\n\nexport class MyStack extends Stack {\n  constructor(scope: Construct, id: string, props: StackProps = {}) {\n    super(scope, id, props);\n\n    new VSCodeServer(this, 'vscode', {\n      // for example (or simply use the defaults by not setting the properties)\n      instanceVolumeSize: 8,\n      instanceClass: ec2.InstanceClass.M7G,\n      instanceSize: ec2.InstanceSize.LARGE,\n      instanceOperatingSystem: LinuxFlavorType.UBUNTU_24,\n      instanceCpuArchitecture: LinuxArchitectureType.ARM,\n\n      // 👇🏽 or if you want to give the InstanceRole more permissions\n      additionalInstanceRolePolicies: [\n        new iam.PolicyStatement({\n          effect: iam.Effect.ALLOW,\n          actions: [\n            'codebuild:*',\n          ],\n          resources: [\n            `arn:aws:codebuild:*:${Stack.of(this).account}:*/*`,\n          ],\n        }),\n      ]\n\n      // and more... 💡\n    });\n  }\n}\n\nconst env = {\n  account: '123456789912',\n  region: 'eu-central-1',\n};\n\nconst app = new App();\nnew MyStack(app, 'vscode-server', { env });\napp.synth();\n```\n\nand deploy it\n```bash\nnpx projen build\nnpx projen deploy\n```\n\nwith the output\n```console\n✨  Deployment time: 509.87s\n\nOutputs:\ndev.vscodedomainName6729AA39 = https://d1foo65bar4baz.cloudfront.net/?folder=/Workshop\ndev.vscodepassword64FBCA12 = foobarbaz\n```\n\nSee the [examples](./examples) folder for more inspiration.\n\n### Pre-populate with Git Repository\n\nClone a git repository into the VS Code Server's home folder during instance setup - perfect for workshops or development environments with starter code:\n\n```ts\nnew VSCodeServer(this, 'vscode', {\n  // Clone a git repository into the home folder\n  repoUrl: 'https://github.com/aws-samples/my-workshop-repo.git',\n\n  // Optional: customize the home folder path (default: /Workshop)\n  homeFolder: '/MyWorkshop',\n\n  // Optional: specify VS Code user (default: vscode-user)\n  vscodeUser: 'workshop-user',\n});\n```\n\n**What happens:**\n1. During instance setup, the specified git repository is cloned into the user's home folder\n2. VS Code Server opens with the repository already loaded and ready to use\n3. Participants can start coding immediately without manual git clone steps\n\n**Use cases:**\n- Workshop environments with pre-configured starter code\n- Development environments with boilerplate projects\n- Training sessions with example applications\n- Code review sessions with pre-loaded repositories\n\n**Repository requirements:**\n- Must be publicly accessible (no authentication required)\n- HTTPS URLs only (SSH git URLs are not supported)\n- Repository will be cloned using `git clone` during instance initialization\n\nFor complete examples, see [examples/](./examples).\n\n### Custom Domain Configuration\n\nYou can configure your VS Code Server with a custom domain name instead of using the default CloudFront domain. The construct supports three different configuration options:\n\n#### Option 1: Auto-create Certificate with DNS Validation\n```ts\nnew VSCodeServer(this, 'vscode', {\n  domainName: 'vscode.example.com',\n  hostedZoneId: 'Z123EXAMPLE456',  // optional - will auto-discover if not provided\n  autoCreateCertificate: true,\n});\n```\n\nThis will:\n- Create an ACM certificate in us-east-1 (required for CloudFront)\n- Validate the certificate using DNS validation\n- Create a Route53 A record pointing to the CloudFront distribution\n- Configure the CloudFront distribution with the custom domain\n\n#### Option 2: Use Existing Certificate\n```ts\nnew VSCodeServer(this, 'vscode', {\n  domainName: 'vscode.example.com',\n  hostedZoneId: 'Z123EXAMPLE456',\n  certificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012',\n});\n```\n\n**Requirements:**\n- Certificate must be in us-east-1 region\n- Certificate must be validated and ready to use\n- Certificate must include the domain name\n\n#### Option 3: Default (No Custom Domain)\n```ts\nnew VSCodeServer(this, 'vscode', {\n  // No domain configuration - uses CloudFront default domain\n});\n```\n\nFor complete examples, see [examples/custom-domain/main.ts](./examples/custom-domain/main.ts).\n\n6. Then open the domain name in your favorite browser and you'd see the following login screen:\n![vscode-server-ui-login](docs/img/vscode-server-ui-login-min.png)\n\n7. After entering the password, you are logged into VSCode and can start coding :tada:\n\n![vscode-server-ui](docs/img/vscode-server-ui-min.png)\n\n> [!Important]\n> There are issues with copy pasting into the VSCode terminal within the Firefox browser (2025-01-12)\n\n### Auto-Stop Configuration\n\nSave up to 75% on costs by automatically stopping EC2 instances when idle:\n\n```ts\nnew VSCodeServer(this, 'vscode', {\n  enableAutoStop: true,              // Enable auto-stop feature\n  idleTimeoutMinutes: 30,            // Stop after 30 minutes of no activity (default)\n  idleCheckIntervalMinutes: 5,       // Check for idle activity every 5 minutes (default)\n});\n```\n\n**How it works:**\n1. **Idle Detection**: Monitors CloudFront request metrics at configured intervals (default: every 5 minutes)\n2. **Auto-Stop**: Stops the EC2 instance after the configured idle timeout when no requests are detected\n3. **Static IP**: Allocates an Elastic IP to maintain a consistent public IP address across stop/start cycles\n4. **Manual Resume**: Users can manually start the instance via AWS Console or CLI when needed\n\n**Cost Savings Example:**\n- **Without auto-stop**: m7g.xlarge running 24/7 = ~$120/month\n- **With auto-stop** (8 hours/day, 5 days/week): ~$30/month\n- **Savings**: ~$90/month (75% reduction)\n\n**Additional costs:**\n- Elastic IP (allocated): ~$3.65/month\n- Lambda function (IdleMonitor): ~$0.10/month\n- EventBridge rule: Negligible\n- **Net savings**: ~$86/month per instance\n\n**Architecture Components:**\n- Elastic IP for consistent public addressing\n- EventBridge rule triggering idle monitoring at configured intervals\n- IdleMonitor Lambda function checking CloudWatch metrics for request activity\n- IdleMonitorEnabler custom resource ensuring monitoring only starts after installation completes\n- CloudWatch metrics from CloudFront distribution\n\n**Integration Testing:**\n\nThe stop-on-idle functionality includes comprehensive integration tests (`integ-tests/integ.stop-on-idle.ts`) that verify the complete workflow:\n\n1. **Phase 1 - Verify Auto-Stop**: Waits for the instance to automatically stop after the configured idle timeout\n2. **Phase 2 - Disable IdleMonitor**: Disables the EventBridge rule to prevent the instance from being stopped again during testing\n3. **Phase 3 - Start Instance**: Starts the stopped instance and waits for it to reach the running state\n4. **Phase 4 - Verify Login**: Confirms that VS Code Server is accessible through CloudFront after the instance has been restarted\n\nThis 4-phase test ensures that:\n- Idle detection works correctly based on CloudWatch metrics\n- Instance stops automatically when no activity is detected\n- Instance can be successfully restarted after being stopped\n- VS Code Server remains accessible after stop/start cycles\n- Elastic IP maintains connectivity across state changes\n\nRun integration tests with:\n```bash\nnpm run integ-test\n```\n\n### Custom Installation Steps\n\nExtend the standard VS Code Server installation with your own custom shell commands - perfect for installing workshop-specific tools, configuring development environments, or running setup scripts:\n\n```ts\nnew VSCodeServer(this, 'vscode', {\n  // Add custom installation steps that run after standard setup\n  customInstallSteps: [\n    {\n      name: 'InstallWorkshopTools',\n      commands: [\n        '#!/bin/bash',\n        'echo \"Installing workshop-specific tools\"',\n\n        // Install additional software\n        'curl -fsSL https://get.docker.com | sh',\n        'usermod -aG docker ubuntu',\n\n        // Configure environment\n        'echo \"export WORKSHOP_ENV=production\" >> /home/ubuntu/.bashrc',\n      ],\n    },\n    {\n      name: 'CloneStarterCode',\n      commands: [\n        '#!/bin/bash',\n        'cd /home/ubuntu',\n        'git clone https://github.com/my-org/workshop-starter.git',\n        'chown -R ubuntu:ubuntu workshop-starter',\n      ],\n    },\n  ],\n});\n```\n\n**Key Features:**\n- **Execute After Standard Setup**: Custom steps run after VS Code Server installation completes\n- **Multiple Steps**: Add as many installation steps as needed, executed in order\n- **Full Shell Access**: Run any shell commands with root privileges\n- **Workshop-Friendly**: Pre-install tools, configure environments, or download starter code\n\n**Common Use Cases:**\n- Install additional development tools (Docker, kubectl, terraform)\n- Configure workshop-specific environments and credentials\n- Clone starter code repositories with specific permissions\n- Set up databases or services required for training\n- Download and prepare datasets or assets\n- Configure IDE extensions or settings\n\n**Supported Operating Systems:**\n- Ubuntu 22/24/25\n- Amazon Linux 2023\n\n**Requirements:**\n- Commands execute with root privileges during instance initialization\n- Use absolute paths or ensure proper working directory context\n- Consider idempotency if instance might be restarted\n- Commands run synchronously in the order specified\n\nFor complete examples, see [examples/custom-install-steps/main.ts](./examples/custom-install-steps/main.ts).\n\n## Solution Design\n\n<details>\n  <summary>... if you're curious about click here for the details</summary>\n\n![vscode-server-solution-design](docs/img/vscode-server.drawio-min.png)\n\n</details>\n\n## Inspiration\nThis project was created based on the following inspiration\n\n- [vscode-on-ec2-for-prototyping](https://github.com/aws-samples/vscode-on-ec2-for-prototyping): as baseline, which unfortunately was outdated\n- [aws-terraform-dev-container](https://github.com/awslabs/aws-terraform-dev-container): as baseline for terraform, but unfortunately also outdated\n- [java-on-aws-workshop-ide-only.yaml](https://github.com/aws-samples/java-on-aws/blob/main/labs/unicorn-store/infrastructure/cfn/java-on-aws-workshop-ide-only.yaml): an already synthesized cloudformation stack, which used mostly python as the custom resources\n- [fleet-workshop-team-stack-self.json](https://static.us-east-1.prod.workshops.aws/public/cc4aa67e-5b7a-4df1-abf7-c42502899a25/assets/fleet-workshop-team-stack-self.json): also an already synthesized cloudformation stack, which did much more as I currently implemented here.\n- [eks-workshop-vscode-cfn.yaml](https://github.com/aws-samples/eks-workshop-v2/blob/main/lab/cfn/eks-workshop-vscode-cfn.yaml): another great baseline\n\n\n## 🚀 Unlock the Full Potential of Your AWS Cloud Infrastructure\n\nHi, I’m Manuel, an AWS expert passionate about empowering businesses with **scalable, resilient, and cost-optimized cloud solutions**. With **MV Consulting**, I specialize in crafting **tailored AWS architectures** and **DevOps-driven workflows** that not only meet your current needs but grow with you.\n\n---\n\n### 🌟 Why Work With Me?\n\n✔️ **Tailored AWS Solutions:** Every business is unique, so I design custom solutions that fit your goals and challenges.\n✔️ **Well-Architected Designs:** From scalability to security, my solutions align with AWS Well-Architected Framework.\n✔️ **Cloud-Native Focus:** I specialize in modern, cloud-native systems that embrace the full potential of AWS.\n✔️ **Business-Driven Tech:** Technology should serve your business, not the other way around.\n\n---\n\n### 🛠 What I Bring to the Table\n\n🔑 **12x AWS Certifications**\nI’m **AWS Certified Solutions Architect and DevOps – Professional** and hold numerous additional certifications, so you can trust I’ll bring industry best practices to your projects. Feel free to explose by [badges](https://www.credly.com/users/manuel-vogel)\n\n⚙️ **Infrastructure as Code (IaC)**\nWith deep expertise in **AWS CDK** and **Terraform**, I ensure your infrastructure is automated, maintainable, and scalable.\n\n📦 **DevOps Expertise**\nFrom CI/CD pipelines with **GitHub Actions** and **GitLab CI** to container orchestration **Kubernetes** and others, I deliver workflows that are smooth and efficient.\n\n🌐 **Hands-On Experience**\nWith over **7 years of AWS experience** and a decade in the tech world, I’ve delivered solutions for companies large and small. My open-source contributions showcase my commitment to transparency and innovation. Feel free to explore my [GitHub profile](https://github.com/mavogel)\n\n---\n\n### 💼 Let’s Build Something Great Together\n\nI know that choosing the right partner is critical to your success. When you work with me, you’re not just contracting an engineer – you’re gaining a trusted advisor and hands-on expert who cares about your business as much as you do.\n\n✔️ **Direct Collaboration**: No middlemen or red tape – you work with me directly.\n✔️ **Transparent Process**: Expect open communication, clear timelines, and visible results.\n✔️ **Real Value**: My solutions focus on delivering measurable impact for your business.\n\n\n<a href=\"https://tinyurl.com/mvc-15min\"><img alt=\"Schedule your call\" src=\"https://img.shields.io/badge/schedule%20your%20call-success.svg?style=for-the-badge\"/></a>\n\n---\n\n## 🙌 Acknowledgements\n\nBig shoutout to the amazing team behind [Projen](https://github.com/projen/projen)!\nTheir groundbreaking work simplifies cloud infrastructure projects and inspires us every day. 💡\n\n## Author\n\n[Manuel Vogel](https://manuel-vogel.de/about/)\n\n[![](https://img.shields.io/badge/LinkedIn-0077B5?style=for-the-badge&logo=linkedin&logoColor=white)](https://www.linkedin.com/in/manuel-vogel)\n[![](https://img.shields.io/badge/GitHub-2b3137?style=for-the-badge&logo=github&logoColor=white)](https://github.com/mavogel)"
   },
   "repository": {
     "type": "git",
@@ -4119,6 +4119,63 @@
     }
   },
   "types": {
+    "@mavogel/cdk-vscode-server.CustomInstallStep": {
+      "assembly": "@mavogel/cdk-vscode-server",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Custom installation step for SSM document Allows users to extend the installer with additional shell commands."
+      },
+      "fqn": "@mavogel/cdk-vscode-server.CustomInstallStep",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/vscode-server.ts",
+        "line": 31
+      },
+      "name": "CustomInstallStep",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "example": "['#!/bin/bash', 'echo \"Installing custom tool\"', 'apt-get install -y my-tool']",
+            "stability": "experimental",
+            "summary": "Shell commands to run for this step Each command will be executed in sequence."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/vscode-server.ts",
+            "line": 46
+          },
+          "name": "commands",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "example": "'InstallCustomTool'",
+            "stability": "experimental",
+            "summary": "Name of the installation step Must be unique within the SSM document."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/vscode-server.ts",
+            "line": 38
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/vscode-server:CustomInstallStep"
+    },
     "@mavogel/cdk-vscode-server.IdleMonitor": {
       "assembly": "@mavogel/cdk-vscode-server",
       "base": "constructs.Construct",
@@ -4309,7 +4366,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/vscode-server.ts",
-        "line": 264
+        "line": 324
       },
       "members": [
         {
@@ -4340,7 +4397,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/vscode-server.ts",
-        "line": 244
+        "line": 299
       },
       "members": [
         {
@@ -4357,6 +4414,13 @@
           },
           "name": "UBUNTU_24"
         },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Ubuntu 25."
+          },
+          "name": "UBUNTU_25"
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -4382,7 +4446,7 @@
         },
         "locationInModule": {
           "filename": "src/vscode-server.ts",
-          "line": 300
+          "line": 360
         },
         "parameters": [
           {
@@ -4409,7 +4473,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/vscode-server.ts",
-        "line": 279
+        "line": 339
       },
       "name": "VSCodeServer",
       "properties": [
@@ -4421,7 +4485,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 283
+            "line": 343
           },
           "name": "domainName",
           "type": {
@@ -4436,7 +4500,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 293
+            "line": 353
           },
           "name": "instance",
           "type": {
@@ -4451,7 +4515,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 288
+            "line": 348
           },
           "name": "password",
           "type": {
@@ -4466,7 +4530,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 298
+            "line": 358
           },
           "name": "idleMonitor",
           "optional": true,
@@ -4488,7 +4552,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/vscode-server.ts",
-        "line": 30
+        "line": 52
       },
       "name": "VSCodeServerProps",
       "properties": [
@@ -4502,7 +4566,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 113
+            "line": 135
           },
           "name": "additionalInstanceRolePolicies",
           "optional": true,
@@ -4525,7 +4589,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 120
+            "line": 142
           },
           "name": "additionalTags",
           "optional": true,
@@ -4550,7 +4614,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 216
+            "line": 238
           },
           "name": "assetZipS3Path",
           "optional": true,
@@ -4568,7 +4632,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 157
+            "line": 179
           },
           "name": "autoCreateCertificate",
           "optional": true,
@@ -4588,7 +4652,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 227
+            "line": 249
           },
           "name": "branchZipS3Path",
           "optional": true,
@@ -4606,7 +4670,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 147
+            "line": 169
           },
           "name": "certificateArn",
           "optional": true,
@@ -4614,6 +4678,31 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no custom installation steps",
+            "example": "customInstallSteps: [\n  {\n    name: 'InstallCustomTool',\n    commands: [\n      '#!/bin/bash',\n      'echo \"Installing my custom tool\"',\n      'curl -O https://example.com/tool.sh',\n      'bash tool.sh',\n    ],\n  },\n  {\n    name: 'ConfigureWorkshopEnv',\n    commands: [\n      '#!/bin/bash',\n      'echo \"export MY_VAR=value\" >> /home/participant/.bashrc',\n    ],\n  },\n]",
+            "remarks": "Allows you to add additional shell commands that run after the standard installation steps.\nUseful for installing workshop-specific tools, configuring custom environments, or running\nsetup scripts.\n\nEach step will be executed in the order provided, after all standard installation steps complete.",
+            "stability": "experimental",
+            "summary": "Custom installation steps to extend the SSM document."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/vscode-server.ts",
+            "line": 293
+          },
+          "name": "customInstallSteps",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@mavogel/cdk-vscode-server.CustomInstallStep"
+              },
+              "kind": "array"
+            }
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -4624,7 +4713,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 99
+            "line": 121
           },
           "name": "devServerBasePath",
           "optional": true,
@@ -4642,7 +4731,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 106
+            "line": 128
           },
           "name": "devServerPort",
           "optional": true,
@@ -4660,7 +4749,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 129
+            "line": 151
           },
           "name": "domainName",
           "optional": true,
@@ -4678,7 +4767,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 165
+            "line": 187
           },
           "name": "enableAutoStop",
           "optional": true,
@@ -4698,7 +4787,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 238
+            "line": 260
           },
           "name": "folderZipS3Path",
           "optional": true,
@@ -4716,7 +4805,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 92
+            "line": 114
           },
           "name": "homeFolder",
           "optional": true,
@@ -4734,7 +4823,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 138
+            "line": 160
           },
           "name": "hostedZoneId",
           "optional": true,
@@ -4752,7 +4841,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 181
+            "line": 203
           },
           "name": "idleCheckIntervalMinutes",
           "optional": true,
@@ -4770,7 +4859,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 173
+            "line": 195
           },
           "name": "idleTimeoutMinutes",
           "optional": true,
@@ -4788,7 +4877,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 64
+            "line": 86
           },
           "name": "instanceClass",
           "optional": true,
@@ -4806,7 +4895,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 85
+            "line": 107
           },
           "name": "instanceCpuArchitecture",
           "optional": true,
@@ -4824,7 +4913,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 50
+            "line": 72
           },
           "name": "instanceName",
           "optional": true,
@@ -4835,14 +4924,14 @@
         {
           "abstract": true,
           "docs": {
-            "default": "- Ubuntu-22",
+            "default": "- Ubuntu-24",
             "stability": "experimental",
             "summary": "VSCode Server EC2 operating system."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 78
+            "line": 100
           },
           "name": "instanceOperatingSystem",
           "optional": true,
@@ -4860,7 +4949,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 71
+            "line": 93
           },
           "name": "instanceSize",
           "optional": true,
@@ -4878,7 +4967,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 57
+            "line": 79
           },
           "name": "instanceVolumeSize",
           "optional": true,
@@ -4898,7 +4987,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 205
+            "line": 227
           },
           "name": "repoUrl",
           "optional": true,
@@ -4917,7 +5006,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 194
+            "line": 216
           },
           "name": "skipStatusChecks",
           "optional": true,
@@ -4935,7 +5024,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 43
+            "line": 65
           },
           "name": "vscodePassword",
           "optional": true,
@@ -4953,7 +5042,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/vscode-server.ts",
-            "line": 36
+            "line": 58
           },
           "name": "vscodeUser",
           "optional": true,
@@ -4965,6 +5054,6 @@
       "symbolId": "src/vscode-server:VSCodeServerProps"
     }
   },
-  "version": "0.0.63",
-  "fingerprint": "WvxdieugMWZqOIWa0lvMJ93ykF+/f8+uUocq/yMhBjA="
+  "version": "0.0.65",
+  "fingerprint": "7vbIqLB8Ot4WaR5BJMRcdxC62yqLMBmLo5+GQVZqV0I="
 }

package/API.md

@@ -312,6 +312,65 @@ The IdleMonitor construct (only present if enableAutoStop is true).
 
 ## Structs <a name="Structs" id="Structs"></a>
 
+### CustomInstallStep <a name="CustomInstallStep" id="@mavogel/cdk-vscode-server.CustomInstallStep"></a>
+
+Custom installation step for SSM document Allows users to extend the installer with additional shell commands.
+
+#### Initializer <a name="Initializer" id="@mavogel/cdk-vscode-server.CustomInstallStep.Initializer"></a>
+
+```typescript
+import { CustomInstallStep } from '@mavogel/cdk-vscode-server'
+
+const customInstallStep: CustomInstallStep = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@mavogel/cdk-vscode-server.CustomInstallStep.property.commands">commands</a></code> | <code>string[]</code> | Shell commands to run for this step Each command will be executed in sequence. |
+| <code><a href="#@mavogel/cdk-vscode-server.CustomInstallStep.property.name">name</a></code> | <code>string</code> | Name of the installation step Must be unique within the SSM document. |
+
+---
+
+##### `commands`<sup>Required</sup> <a name="commands" id="@mavogel/cdk-vscode-server.CustomInstallStep.property.commands"></a>
+
+```typescript
+public readonly commands: string[];
+```
+
+- *Type:* string[]
+
+Shell commands to run for this step Each command will be executed in sequence.
+
+---
+
+*Example*
+
+```typescript
+['#!/bin/bash', 'echo "Installing custom tool"', 'apt-get install -y my-tool']
+```
+
+
+##### `name`<sup>Required</sup> <a name="name" id="@mavogel/cdk-vscode-server.CustomInstallStep.property.name"></a>
+
+```typescript
+public readonly name: string;
+```
+
+- *Type:* string
+
+Name of the installation step Must be unique within the SSM document.
+
+---
+
+*Example*
+
+```typescript
+'InstallCustomTool'
+```
+
+
 ### IdleMonitorProps <a name="IdleMonitorProps" id="@mavogel/cdk-vscode-server.IdleMonitorProps"></a>
 
 Props for IdleMonitor construct.
@@ -423,6 +482,7 @@ const vSCodeServerProps: VSCodeServerProps = { ... }
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.autoCreateCertificate">autoCreateCertificate</a></code> | <code>boolean</code> | Auto-create ACM certificate with DNS validation in us-east-1 region Requires hostedZoneId to be provided for DNS validation Cannot be used together with certificateArn Certificate will automatically be created in us-east-1 as required by CloudFront. |
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.branchZipS3Path">branchZipS3Path</a></code> | <code>string</code> | S3 path to a zip file containing git branches to create in the home folder repository. |
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.certificateArn">certificateArn</a></code> | <code>string</code> | ARN of existing ACM certificate for the domain Certificate must be in us-east-1 region for CloudFront Cannot be used together with autoCreateCertificate. |
+| <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.customInstallSteps">customInstallSteps</a></code> | <code><a href="#@mavogel/cdk-vscode-server.CustomInstallStep">CustomInstallStep</a>[]</code> | Custom installation steps to extend the SSM document. |
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.devServerBasePath">devServerBasePath</a></code> | <code>string</code> | Base path for the application to be added to Nginx sites-available list. |
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.devServerPort">devServerPort</a></code> | <code>number</code> | Port for the DevServer. |
 | <code><a href="#@mavogel/cdk-vscode-server.VSCodeServerProps.property.domainName">domainName</a></code> | <code>string</code> | Custom domain name for the VS Code server When provided, creates a CloudFront distribution with this domain name and sets up Route53 A record pointing to the distribution. |
@@ -543,6 +603,49 @@ ARN of existing ACM certificate for the domain Certificate must be in us-east-1
 
 ---
 
+##### `customInstallSteps`<sup>Optional</sup> <a name="customInstallSteps" id="@mavogel/cdk-vscode-server.VSCodeServerProps.property.customInstallSteps"></a>
+
+```typescript
+public readonly customInstallSteps: CustomInstallStep[];
+```
+
+- *Type:* <a href="#@mavogel/cdk-vscode-server.CustomInstallStep">CustomInstallStep</a>[]
+- *Default:* no custom installation steps
+
+Custom installation steps to extend the SSM document.
+
+Allows you to add additional shell commands that run after the standard installation steps.
+Useful for installing workshop-specific tools, configuring custom environments, or running
+setup scripts.
+
+Each step will be executed in the order provided, after all standard installation steps complete.
+
+---
+
+*Example*
+
+```typescript
+customInstallSteps: [
+  {
+    name: 'InstallCustomTool',
+    commands: [
+      '#!/bin/bash',
+      'echo "Installing my custom tool"',
+      'curl -O https://example.com/tool.sh',
+      'bash tool.sh',
+    ],
+  },
+  {
+    name: 'ConfigureWorkshopEnv',
+    commands: [
+      '#!/bin/bash',
+      'echo "export MY_VAR=value" >> /home/participant/.bashrc',
+    ],
+  },
+]
+```
+
+
 ##### `devServerBasePath`<sup>Optional</sup> <a name="devServerBasePath" id="@mavogel/cdk-vscode-server.VSCodeServerProps.property.devServerBasePath"></a>
 
 ```typescript
@@ -716,7 +819,7 @@ public readonly instanceOperatingSystem: LinuxFlavorType;
 ```
 
 - *Type:* <a href="#@mavogel/cdk-vscode-server.LinuxFlavorType">LinuxFlavorType</a>
-- *Default:* Ubuntu-22
+- *Default:* Ubuntu-24
 
 VSCode Server EC2 operating system.
 
@@ -854,6 +957,7 @@ The flavor of linux you want to run vscode server on.
 | --- | --- |
 | <code><a href="#@mavogel/cdk-vscode-server.LinuxFlavorType.UBUNTU_22">UBUNTU_22</a></code> | Ubuntu 22. |
 | <code><a href="#@mavogel/cdk-vscode-server.LinuxFlavorType.UBUNTU_24">UBUNTU_24</a></code> | Ubuntu 24. |
+| <code><a href="#@mavogel/cdk-vscode-server.LinuxFlavorType.UBUNTU_25">UBUNTU_25</a></code> | Ubuntu 25. |
 | <code><a href="#@mavogel/cdk-vscode-server.LinuxFlavorType.AMAZON_LINUX_2023">AMAZON_LINUX_2023</a></code> | Amazon Linux 2023. |
 
 ---
@@ -872,6 +976,13 @@ Ubuntu 24.
 ---
 
 
+##### `UBUNTU_25` <a name="UBUNTU_25" id="@mavogel/cdk-vscode-server.LinuxFlavorType.UBUNTU_25"></a>
+
+Ubuntu 25.
+
+---
+
+
 ##### `AMAZON_LINUX_2023` <a name="AMAZON_LINUX_2023" id="@mavogel/cdk-vscode-server.LinuxFlavorType.AMAZON_LINUX_2023"></a>
 
 Amazon Linux 2023.