@phila/cli 0.0.1

package/dist/templates/webapp-lambda-dotnet/apps/api/obj/project.nuget.cache

@@ -0,0 +1,35 @@
+{
+  "version": 2,
+  "dgSpecHash": "kyKwgyS6RRM=",
+  "success": true,
+  "projectFilePath": "/Users/alejandro.lopez/code/phila-ctl/templates/webapp-lambda-dotnet/apps/api/Api.csproj",
+  "expectedPackageFiles": [
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.apigatewayevents/2.7.1/amazon.lambda.apigatewayevents.2.7.1.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.applicationloadbalancerevents/2.2.0/amazon.lambda.applicationloadbalancerevents.2.2.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.aspnetcoreserver/9.0.2/amazon.lambda.aspnetcoreserver.9.0.2.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.aspnetcoreserver.hosting/1.7.2/amazon.lambda.aspnetcoreserver.hosting.1.7.2.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.core/2.5.0/amazon.lambda.core.2.5.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.logging.aspnetcore/3.1.1/amazon.lambda.logging.aspnetcore.3.1.1.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.runtimesupport/1.12.0/amazon.lambda.runtimesupport.1.12.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/amazon.lambda.serialization.systemtextjson/2.4.4/amazon.lambda.serialization.systemtextjson.2.4.4.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.configuration/2.1.0/microsoft.extensions.configuration.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.configuration.abstractions/2.1.0/microsoft.extensions.configuration.abstractions.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.configuration.binder/2.1.0/microsoft.extensions.configuration.binder.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.dependencyinjection.abstractions/2.1.0/microsoft.extensions.dependencyinjection.abstractions.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.logging/2.1.0/microsoft.extensions.logging.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.logging.abstractions/2.1.0/microsoft.extensions.logging.abstractions.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.options/2.1.0/microsoft.extensions.options.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/microsoft.extensions.primitives/2.1.0/microsoft.extensions.primitives.2.1.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/snapshotrestore.registry/1.0.0/snapshotrestore.registry.1.0.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/system.memory/4.5.0/system.memory.4.5.0.nupkg.sha512",
+    "/Users/alejandro.lopez/.nuget/packages/system.runtime.compilerservices.unsafe/4.5.0/system.runtime.compilerservices.unsafe.4.5.0.nupkg.sha512"
+  ],
+  "logs": [
+    {
+      "code": "NU1900",
+      "level": "Warning",
+      "warningLevel": 1,
+      "message": "Error occurred while getting package vulnerability data: Unable to load the service index for source https://philagov-102658671810.d.codeartifact.us-east-1.amazonaws.com/nuget/se-team/v3/index.json."
+    }
+  ]
+}

package/dist/templates/webapp-lambda-dotnet/cdk/app.ts.tmpl

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+import 'source-map-support/register';
+import { App, Aspects, Stack } from 'aws-cdk-lib';
+import { AwsSolutionsChecks, NIST80053R5Checks } from 'cdk-nag';
+import { StaticSite, LambdaApi, Confidentiality, Environment } from '@phila/constructs';
+
+const app = new App();
+
+// Environment is determined by CDK context
+const environment = app.node.tryGetContext('environment') as Environment;
+
+if (!environment) {
+  throw new Error('Environment must be specified via context. Use: cdk deploy -c environment=dev');
+}
+
+// Read compliance frameworks from context
+const compliance = app.node.tryGetContext('compliance');
+const complianceFrameworks = compliance ? compliance.split(',') : [];
+
+// Application context with governance metadata
+const context = {
+  appName: '{{appName}}',
+  environment,
+  department: '{{department}}',
+  team: '{{team}}',
+  contact: '{{contact}}',
+  compliance: complianceFrameworks,
+  confidentiality: Confidentiality.{{CONFIDENTIALITY}},
+};
+
+// Stack name follows pattern: {appName}-{environment}
+const stack = new Stack(app, '{{appName}}-' + environment, {
+  env: {
+    account: process.env.CDK_DEFAULT_ACCOUNT,
+    region: process.env.CDK_DEFAULT_REGION || 'us-east-1',
+  },
+  stackName: '{{appName}}-' + environment,
+});
+
+// Create the StaticSite construct for the Nuxt frontend
+new StaticSite(stack, '{{appName}}Site', {
+  ...context,
+  assetDir: '../frontend/dist',
+});
+
+// Create the LambdaApi construct for the .NET API backend
+new LambdaApi(stack, '{{appName}}Api', {
+  ...context,
+  apiId: 'api',
+  runtime: 'dotnet8',
+  handler: 'Api',
+  codeDir: '../apps/api',
+});
+
+// Apply compliance checks
+Aspects.of(app).add(new NIST80053R5Checks({ verbose: true }));
+Aspects.of(app).add(new AwsSolutionsChecks({ verbose: true }));
+
+app.synth();

package/dist/templates/webapp-lambda-dotnet/cdk/cdk.json

@@ -0,0 +1,68 @@
+{
+  "app": "npx ts-node --prefer-ts-exts app.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk/core:checkSecretUsage": true,
+    "@aws-cdk/core:target-partitions": ["aws", "aws-cn"],
+    "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk/aws-iam:minimizePolicies": true,
+    "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk/aws-apigateway:disableCloudWatchRole": false,
+    "@aws-cdk/core:enablePartitionLiterals": true,
+    "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk/aws-route53-patters:useCertificate": true,
+    "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+    "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+    "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+    "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+    "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+    "@aws-cdk/aws-redshift:columnId": true,
+    "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+    "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+    "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+    "@aws-cdk/aws-kms:aliasNameRef": true,
+    "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+    "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+    "@aws-cdk/aws-efs:denyAnonymousAccess": true,
+    "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true,
+    "@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion": true,
+    "@aws-cdk/aws-efs:mountTargetOrderInsensitiveLogicalId": true,
+    "@aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters": true,
+    "@aws-cdk/aws-appsync:useArnForSourceApiAssociationIdentifier": true,
+    "@aws-cdk/aws-rds:preventRenderingDeprecatedCredentials": true,
+    "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource": true,
+    "@aws-cdk/aws-cloudwatch-actions:changeLambdaPermissionLogicalIdForLambdaAction": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeysDefaultValueToFalse": true,
+    "@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2": true,
+    "@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope": true,
+    "@aws-cdk/aws-eks:nodegroupNameAttribute": true,
+    "@aws-cdk/aws-ec2:ebsDefaultGp3Volume": true,
+    "@aws-cdk/aws-ecs:removeDefaultDeploymentAlarm": true,
+    "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": false,
+    "@aws-cdk/aws-s3:keepNotificationInImportedBucket": false
+  }
+}

package/dist/templates/webapp-lambda-dotnet/cdk/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../tsconfig.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "."
+  },
+  "include": ["*.ts"],
+  "exclude": ["node_modules", "cdk.out"]
+}

package/dist/templates/webapp-lambda-dotnet/package.json.tmpl

@@ -0,0 +1,23 @@
+{
+  "name": "{{appName}}",
+  "version": "1.0.0",
+  "description": "Web application with Nuxt frontend and .NET Lambda API backend",
+  "private": true,
+  "scripts": {
+    "build": "npm run build:frontend && npm run build:api",
+    "build:frontend": "cd frontend && npm run build",
+    "build:api": "cd apps/api && dotnet publish -c Release -o publish",
+    "dev": "cd frontend && npm run dev",
+    "test": "npm test --workspaces --if-present",
+    "synth": "cd cdk && cdk synth",
+    "deploy": "cd cdk && cdk deploy",
+    "diff": "cd cdk && cdk diff"
+  },
+  "workspaces": [
+    "cdk",
+    "frontend"
+  ],
+  "devDependencies": {
+    "typescript": "^5.3.0"
+  }
+}

package/dist/templates/webapp-lambda-dotnet/tsconfig.json

@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["ES2020"],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "typeRoots": ["./node_modules/@types"],
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true
+  },
+  "exclude": ["node_modules", "cdk.out", "frontend"]
+}

package/dist/templates/webapp-lambda-dynamo-dotnet/README.md.tmpl

@@ -0,0 +1,223 @@
+# {{appName}}
+
+Web application with Nuxt SSG frontend, .NET Lambda API backend, and DynamoDB using Philadelphia constructs.
+
+Generated on {{timestamp}}
+
+## Architecture
+
+![Architecture Diagram](https://github.com/CityOfPhiladelphia/phila-ctl/blob/main/packages/constructs/docs/diagrams/webapp-lambda-dynamo.drawio)
+
+View the [architecture diagram](https://github.com/CityOfPhiladelphia/phila-ctl/blob/main/packages/constructs/docs/diagrams/webapp-lambda-dynamo.drawio) in draw.io or VS Code with the Draw.io extension.
+
+## Quick Start
+
+### Prerequisites
+
+- Node.js 20+
+- .NET 8 SDK
+- AWS CLI configured with SSO
+- AWS profile named `phila-{{appName}}`
+
+### Setup
+
+```bash
+# Install frontend and CDK dependencies
+npm install
+
+# Restore .NET dependencies
+cd apps/api && dotnet restore && cd ../..
+```
+
+### Development
+
+```bash
+# Run frontend dev server
+npm run dev
+
+# Build frontend for production
+npm run build:frontend
+
+# Build API
+npm run build:api
+```
+
+### Deployment
+
+```bash
+# Configure AWS profile
+export AWS_PROFILE=phila-{{appName}}
+
+# Deploy to dev environment
+city deploy dev
+
+# Deploy to test environment
+city deploy test
+
+# Deploy to production (requires confirmation)
+city deploy prod
+```
+
+### Shipping Updates
+
+```bash
+# Ship frontend changes to S3/CloudFront
+city ship dev --web
+
+# Ship API changes to Lambda
+city ship dev --lambda api
+```
+
+## Project Structure
+
+```
+.
+├── cdk/                    # CDK infrastructure code
+│   └── app.ts              # Main CDK application
+├── frontend/               # Nuxt 3 SSG frontend
+│   ├── pages/              # File-based routing
+│   ├── app.vue             # Root component
+│   └── nuxt.config.ts      # Nuxt configuration
+├── apps/                   # Backend code
+│   └── api/                # .NET Minimal API with DynamoDB
+│       ├── Program.cs      # API entry point and routes
+│       └── Api.csproj      # Project file
+└── city.config.json        # City CLI configuration
+```
+
+## Frontend
+
+The frontend uses [Nuxt 3](https://nuxt.com) with Static Site Generation (SSG):
+
+- Pre-renders to static HTML for S3/CloudFront
+- File-based routing in `pages/` directory
+- TypeScript support enabled
+
+### Adding Pages
+
+Create Vue files in `frontend/pages/`:
+
+```vue
+<!-- frontend/pages/about.vue -->
+<template>
+  <div>
+    <h1>About</h1>
+  </div>
+</template>
+```
+
+This automatically creates a route at `/about`.
+
+## API
+
+The API uses [.NET Minimal API](https://learn.microsoft.com/en-us/aspnet/core/fundamentals/minimal-apis) with AWS Lambda hosting and DynamoDB.
+
+### Adding Endpoints
+
+Edit `apps/api/Program.cs`:
+
+```csharp
+// Get all items (requires implementing scan/query)
+app.MapGet("/items", async (DynamoDbService db) =>
+{
+    // Implement query logic
+    return Results.Ok(new { items = new List<object>() });
+});
+
+// Update item
+app.MapPut("/items/{id}", async (string id, ItemRequest request, DynamoDbService db) =>
+{
+    var item = new Dictionary<string, object>
+    {
+        ["pk"] = id,
+        ["name"] = request.Name,
+        ["updatedAt"] = DateTime.UtcNow.ToString("o")
+    };
+    await db.PutItemAsync(tableName, item);
+    return Results.Ok(item);
+});
+```
+
+### Environment Variables
+
+Lambda functions automatically receive:
+- `APP_NAME` - Application name ({{appName}})
+- `ENVIRONMENT` - Current environment (dev/test/prod)
+- `TABLE_NAME` - DynamoDB table name
+- `TABLE_ARN` - DynamoDB table ARN
+
+### Building the API
+
+```bash
+# Debug build
+cd apps/api && dotnet build
+
+# Release build for deployment
+cd apps/api && dotnet publish -c Release -o publish
+```
+
+## DynamoDB
+
+The template creates a DynamoDB table with:
+- **Partition key**: `pk` (String)
+- **Billing mode**: PAY_PER_REQUEST (on-demand)
+- **Point-in-time recovery**: Enabled
+- **Encryption**: AWS managed KMS key
+
+### Table Schema
+
+The default schema uses a single partition key. For complex access patterns, consider:
+
+```typescript
+// In cdk/app.ts, add a sort key:
+partitionKey: { name: 'pk', type: 'S' },
+sortKey: { name: 'sk', type: 'S' },
+```
+
+### DynamoDB Best Practices
+
+- Design your access patterns first
+- Use composite keys for hierarchical data
+- Consider single-table design for related entities
+- Use GSIs sparingly (additional cost)
+
+## Resources Created
+
+This application creates:
+
+**Frontend:**
+- **S3 Bucket** - Static asset storage
+- **CloudFront Distribution** - CDN with HTTPS
+- **Origin Access Control** - Secure S3 access
+
+**API:**
+- **API Gateway REST API** - HTTP endpoint
+- **Lambda Function** - .NET 8 serverless compute
+- **DynamoDB Table** - NoSQL database
+- **VPC Security Group** - Network security
+- **IAM Role** - Permissions for Lambda and DynamoDB
+
+**Shared:**
+- **SSM Parameters** - Resource discovery
+- **CloudWatch Logs** - Application logs
+- **KMS Keys** - Encryption
+
+## URLs
+
+After deployment, URLs are available via:
+
+```bash
+# Frontend URL
+city config list --env dev | grep cloudfront
+
+# API URL
+city config list --env dev | grep api
+```
+
+## Support
+
+For issues or questions:
+- [Philadelphia Infrastructure Library Documentation](https://github.com/CityOfPhiladelphia/phila-ctl)
+- [.NET Minimal APIs Documentation](https://learn.microsoft.com/en-us/aspnet/core/fundamentals/minimal-apis)
+- [AWS DynamoDB Documentation](https://docs.aws.amazon.com/dynamodb/)
+- [Nuxt Documentation](https://nuxt.com/docs)

package/dist/templates/webapp-lambda-dynamo-dotnet/apps/api/Api.csproj

@@ -0,0 +1,18 @@
+<!-- ABOUTME: .NET 8 Minimal API project for AWS Lambda with DynamoDB -->
+<!-- ABOUTME: Uses AWS SDK for DynamoDB Document Model API -->
+<Project Sdk="Microsoft.NET.Sdk.Web">
+  <PropertyGroup>
+    <TargetFramework>net8.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <OutputType>Exe</OutputType>
+    <AssemblyName>Api</AssemblyName>
+    <RootNamespace>Api</RootNamespace>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Amazon.Lambda.AspNetCoreServer.Hosting" Version="1.7.2" />
+    <PackageReference Include="Amazon.Lambda.Serialization.SystemTextJson" Version="2.4.4" />
+    <PackageReference Include="AWSSDK.DynamoDBv2" Version="3.7.400" />
+  </ItemGroup>
+</Project>

package/dist/templates/webapp-lambda-dynamo-dotnet/apps/api/Program.cs

@@ -0,0 +1,155 @@
+// ABOUTME: Minimal API Lambda handler with DynamoDB integration
+// ABOUTME: Provides REST endpoints for CRUD operations on DynamoDB table
+
+using System.Text.Json;
+using Amazon.DynamoDBv2;
+using Amazon.DynamoDBv2.DocumentModel;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Add AWS Lambda hosting
+builder.Services.AddAWSLambdaHosting(LambdaEventSource.HttpApi);
+
+// Register DynamoDB client as singleton
+builder.Services.AddSingleton<IAmazonDynamoDB, AmazonDynamoDBClient>();
+builder.Services.AddSingleton<DynamoDbService>();
+
+var app = builder.Build();
+
+var tableName = Environment.GetEnvironmentVariable("TABLE_NAME")
+    ?? throw new InvalidOperationException("TABLE_NAME environment variable not set");
+
+// Health check endpoint
+app.MapGet("/health", () => Results.Ok(new
+{
+    Status = "healthy",
+    Timestamp = DateTime.UtcNow.ToString("o")
+}));
+
+// Hello world endpoint
+app.MapGet("/hello", (HttpContext context) =>
+{
+    var name = context.Request.Query["name"].FirstOrDefault() ?? "World";
+    return Results.Ok(new
+    {
+        Message = $"Hello, {name}!",
+        AppName = Environment.GetEnvironmentVariable("APP_NAME"),
+        Environment = Environment.GetEnvironmentVariable("ENVIRONMENT"),
+        Timestamp = DateTime.UtcNow.ToString("o")
+    });
+});
+
+// Get item by ID
+app.MapGet("/items/{id}", async (string id, DynamoDbService db) =>
+{
+    var item = await db.GetItemAsync(tableName, id);
+    if (item == null)
+    {
+        return Results.NotFound(new { Error = "Item not found" });
+    }
+    return Results.Ok(item);
+});
+
+// Create item
+app.MapPost("/items", async (ItemRequest request, DynamoDbService db) =>
+{
+    Console.WriteLine($"Creating item: {request.Id}");
+
+    var item = new Dictionary<string, object>
+    {
+        ["pk"] = request.Id,
+        ["id"] = request.Id,
+        ["name"] = request.Name,
+        ["description"] = request.Description ?? "",
+        ["createdAt"] = DateTime.UtcNow.ToString("o"),
+        ["updatedAt"] = DateTime.UtcNow.ToString("o")
+    };
+
+    await db.PutItemAsync(tableName, item);
+
+    return Results.Created($"/items/{request.Id}", new
+    {
+        Message = "Item created",
+        Item = item
+    });
+});
+
+// Delete item by ID
+app.MapDelete("/items/{id}", async (string id, DynamoDbService db) =>
+{
+    await db.DeleteItemAsync(tableName, id);
+    return Results.Ok(new { Message = "Item deleted" });
+});
+
+app.Run();
+
+/// <summary>
+/// Request model for creating items
+/// </summary>
+public record ItemRequest(string Id, string Name, string? Description);
+
+/// <summary>
+/// Service for DynamoDB operations using the Document Model API.
+/// Provides simple key-value access to DynamoDB tables.
+/// </summary>
+public class DynamoDbService
+{
+    private readonly IAmazonDynamoDB _client;
+
+    public DynamoDbService(IAmazonDynamoDB client)
+    {
+        _client = client;
+    }
+
+    public async Task<Dictionary<string, object>?> GetItemAsync(string tableName, string id)
+    {
+        var table = Table.LoadTable(_client, tableName);
+        var doc = await table.GetItemAsync(id);
+
+        if (doc == null)
+        {
+            return null;
+        }
+
+        return DocumentToDict(doc);
+    }
+
+    public async Task PutItemAsync(string tableName, Dictionary<string, object> item)
+    {
+        var table = Table.LoadTable(_client, tableName);
+        var doc = new Document();
+
+        foreach (var kvp in item)
+        {
+            doc[kvp.Key] = kvp.Value switch
+            {
+                string s => s,
+                int i => i,
+                long l => l,
+                double d => d,
+                bool b => b,
+                DateTime dt => dt.ToString("o"),
+                _ => kvp.Value?.ToString() ?? ""
+            };
+        }
+
+        await table.PutItemAsync(doc);
+    }
+
+    public async Task DeleteItemAsync(string tableName, string id)
+    {
+        var table = Table.LoadTable(_client, tableName);
+        await table.DeleteItemAsync(id);
+    }
+
+    private static Dictionary<string, object> DocumentToDict(Document doc)
+    {
+        var result = new Dictionary<string, object>();
+        foreach (var key in doc.Keys)
+        {
+            var entry = doc[key];
+            result[key] = entry.AsString();
+        }
+        return result;
+    }
+}

package/dist/templates/webapp-lambda-dynamo-dotnet/apps/api/aws-lambda-tools-defaults.json

@@ -0,0 +1,10 @@
+{
+  "Information": ["Configuration used by AWS Lambda .NET tooling when deploying"],
+  "profile": "",
+  "region": "",
+  "configuration": "Release",
+  "function-runtime": "dotnet8",
+  "function-memory-size": 256,
+  "function-timeout": 30,
+  "function-handler": "Api"
+}