cdk-cost-analyzer 0.1.1

package/examples/multi-stack/lib/storage-stack.ts

@@ -0,0 +1,141 @@
+import * as cdk from 'aws-cdk-lib';
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
+import * as rds from 'aws-cdk-lib/aws-rds';
+import * as elasticache from 'aws-cdk-lib/aws-elasticache';
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import { Construct } from 'constructs';
+
+export interface StorageStackProps extends cdk.StackProps {
+  vpc: ec2.IVpc;
+  appSecurityGroup: ec2.ISecurityGroup;
+}
+
+/**
+ * Storage stack - Data layer
+ * 
+ * Creates RDS database, ElastiCache cluster, and S3 bucket
+ */
+export class StorageStack extends cdk.Stack {
+  constructor(scope: Construct, id: string, props: StorageStackProps) {
+    super(scope, id, props);
+
+    const { vpc, appSecurityGroup } = props;
+
+    // Security group for database
+    const dbSecurityGroup = new ec2.SecurityGroup(this, 'DbSecurityGroup', {
+      vpc,
+      description: 'Security group for RDS database',
+      allowAllOutbound: false,
+    });
+
+    // Allow application to connect to database
+    dbSecurityGroup.addIngressRule(
+      appSecurityGroup,
+      ec2.Port.tcp(5432),
+      'Allow PostgreSQL access from application'
+    );
+
+    // RDS PostgreSQL Database
+    const database = new rds.DatabaseInstance(this, 'Database', {
+      engine: rds.DatabaseInstanceEngine.postgres({
+        version: rds.PostgresEngineVersion.VER_15_3,
+      }),
+      instanceType: ec2.InstanceType.of(
+        ec2.InstanceClass.T3,
+        ec2.InstanceSize.MEDIUM
+      ),
+      vpc,
+      vpcSubnets: {
+        subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+      },
+      securityGroups: [dbSecurityGroup],
+      allocatedStorage: 100,
+      storageType: rds.StorageType.GP3,
+      multiAz: false,
+      databaseName: 'appdb',
+      backupRetention: cdk.Duration.days(7),
+      deleteAutomatedBackups: true,
+      removalPolicy: cdk.RemovalPolicy.DESTROY,
+      deletionProtection: false,
+    });
+
+    // Security group for cache
+    const cacheSecurityGroup = new ec2.SecurityGroup(this, 'CacheSecurityGroup', {
+      vpc,
+      description: 'Security group for ElastiCache',
+      allowAllOutbound: false,
+    });
+
+    // Allow application to connect to cache
+    cacheSecurityGroup.addIngressRule(
+      appSecurityGroup,
+      ec2.Port.tcp(6379),
+      'Allow Redis access from application'
+    );
+
+    // ElastiCache subnet group
+    const cacheSubnetGroup = new elasticache.CfnSubnetGroup(this, 'CacheSubnetGroup', {
+      description: 'Subnet group for ElastiCache',
+      subnetIds: vpc.selectSubnets({
+        subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+      }).subnetIds,
+    });
+
+    // ElastiCache Redis Cluster
+    const cacheCluster = new elasticache.CfnCacheCluster(this, 'CacheCluster', {
+      cacheNodeType: 'cache.t3.micro',
+      engine: 'redis',
+      numCacheNodes: 2,
+      vpcSecurityGroupIds: [cacheSecurityGroup.securityGroupId],
+      cacheSubnetGroupName: cacheSubnetGroup.ref,
+      engineVersion: '7.0',
+    });
+
+    // S3 bucket for application data
+    const dataBucket = new s3.Bucket(this, 'DataBucket', {
+      bucketName: `${cdk.Stack.of(this).account}-app-data-${cdk.Stack.of(this).region}`,
+      versioned: true,
+      encryption: s3.BucketEncryption.S3_MANAGED,
+      blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
+      removalPolicy: cdk.RemovalPolicy.DESTROY,
+      autoDeleteObjects: true,
+      lifecycleRules: [
+        {
+          id: 'DeleteOldVersions',
+          noncurrentVersionExpiration: cdk.Duration.days(90),
+        },
+        {
+          id: 'TransitionToIA',
+          transitions: [
+            {
+              storageClass: s3.StorageClass.INFREQUENT_ACCESS,
+              transitionAfter: cdk.Duration.days(30),
+            },
+          ],
+        },
+      ],
+    });
+
+    // Stack outputs
+    new cdk.CfnOutput(this, 'DatabaseEndpoint', {
+      value: database.dbInstanceEndpointAddress,
+      description: 'RDS database endpoint',
+      exportName: 'StorageStack-DatabaseEndpoint',
+    });
+
+    new cdk.CfnOutput(this, 'DatabasePort', {
+      value: database.dbInstanceEndpointPort,
+      description: 'RDS database port',
+    });
+
+    new cdk.CfnOutput(this, 'CacheEndpoint', {
+      value: cacheCluster.attrRedisEndpointAddress,
+      description: 'ElastiCache Redis endpoint',
+    });
+
+    new cdk.CfnOutput(this, 'DataBucketName', {
+      value: dataBucket.bucketName,
+      description: 'S3 data bucket name',
+    });
+  }
+}