{ "Description": "(SO0062) - distributed-load-testing-on-aws. Version v4.0.15", "AWSTemplateFormatVersion": "2010-09-09", "Metadata": { "AWS::CloudFormation::Interface": { "ParameterGroups": [ { "Label": { "default": "Console access" }, "Parameters": [ "AdminName", "AdminEmail" ] }, { "Label": { "default": "Network configurations for running distributed load test Fargate tasks" }, "Parameters": [ "ExistingVPCId", "ExistingSubnetA", "ExistingSubnetB", "VpcCidrBlock", "SubnetACidrBlock", "SubnetBCidrBlock", "EgressCidr" ] } ], "ParameterLabels": { "AdminName": { "default": "* Administrator Name" }, "AdminEmail": { "default": "* Administrator Email" }, "DeployMCPServer": { "default": "Deploy MCP Server" }, "ExistingVPCId": { "default": "Select an existing VPC in the region" }, "ExistingSubnetA": { "default": "Select first subnet from the existing VPC" }, "ExistingSubnetB": { "default": "Select second subnet from the existing VPC" }, "VpcCidrBlock": { "default": "Provide valid CIDR block for the solution to create VPC" }, "SubnetACidrBlock": { "default": "Provide valid CIDR block for subnet A for the solution to create VPC" }, "SubnetBCidrBlock": { "default": "Provide valid CIDR block for subnet B for the solution to create VPC" }, "EgressCidr": { "default": "Provide CIDR block for allowing outbound traffic of AWS Fargate tasks" }, "UseStableTagging": { "default": "Auto-update Container Image" } } } }, "Parameters": { "AdminName": { "Type": "String", "AllowedPattern": "[a-zA-Z0-9-]+", "ConstraintDescription": "Admin username must be a minimum of 4 characters and cannot include spaces", "MaxLength": 20, "MinLength": 4 }, "AdminEmail": { "Type": "String", "AllowedPattern": "^[_A-Za-z0-9-\\+]+(\\.[_A-Za-z0-9-]+)*@[A-Za-z0-9-]+(\\.[A-Za-z0-9]+)*(\\.[A-Za-z]{2,})$", "ConstraintDescription": "Admin email must be a valid email address", "MinLength": 5 }, "ExistingVPCId": { "Type": "String", "Default": "", "AllowedPattern": "(?:^$|^vpc-[a-zA-Z0-9-]+)", "Description": "Existing VPC ID" }, "ExistingSubnetA": { "Type": "String", "Default": "", "AllowedPattern": "(?:^$|^subnet-[a-zA-Z0-9-]+)", "Description": "First existing subnet" }, "ExistingSubnetB": { "Type": "String", "Default": "", "AllowedPattern": "(?:^$|^subnet-[a-zA-Z0-9-]+)", "Description": "Second existing subnet" }, "VpcCidrBlock": { "Type": "String", "Default": "192.168.0.0/16", "AllowedPattern": "(^$|(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})$)", "ConstraintDescription": "The VPC CIDR block must be a valid IP CIDR range of the form x.x.x.x/x.", "Description": "You may leave this parameter blank if you are using existing VPC" }, "SubnetACidrBlock": { "Type": "String", "Default": "192.168.0.0/20", "AllowedPattern": "(^$|(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})$)", "ConstraintDescription": "The subnet CIDR block must be a valid IP CIDR range of the form x.x.x.x/x.", "Description": "CIDR block for subnet A of the AWS Fargate VPC" }, "SubnetBCidrBlock": { "Type": "String", "Default": "192.168.16.0/20", "AllowedPattern": "(^$|(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})$)", "ConstraintDescription": "The subnet CIDR block must be a valid IP CIDR range of the form x.x.x.x/x.", "Description": "CIDR block for subnet B of the AWS Fargate VPC" }, "EgressCidr": { "Type": "String", "Default": "0.0.0.0/0", "AllowedPattern": "((\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2}))", "ConstraintDescription": "The Egress CIDR block must be a valid IP CIDR range of the form x.x.x.x/x.", "Description": "CIDR Block to restrict the Amazon ECS container outbound access", "MaxLength": 18, "MinLength": 9 }, "UseStableTagging": { "Type": "String", "Default": "No", "AllowedValues": [ "Yes", "No" ], "Description": "Automatically use the most up to date and secure image up until the next minor release. Selecting 'No' will pull the image as originally released, without any security updates." }, "DeployMCPServer": { "Type": "String", "Default": "No", "AllowedValues": [ "Yes", "No" ], "Description": "Deploy a remote MCP server to connect AI applications to DLT. See the Implementation Guide for more details." } }, "Rules": { "ExistingVPCRule": { "RuleCondition": { "Fn::Not": [ { "Fn::Equals": [ { "Ref": "ExistingVPCId" }, "" ] } ] }, "Assertions": [ { "Assert": { "Fn::Not": [ { "Fn::Equals": [ { "Ref": "ExistingSubnetA" }, "" ] } ] }, "AssertDescription": "If an existing VPC Id is provided, 2 subnet ids need to be provided as well. You neglected to enter the first subnet id" }, { "Assert": { "Fn::Not": [ { "Fn::Equals": [ { "Ref": "ExistingSubnetB" }, "" ] } ] }, "AssertDescription": "If an existing VPC Id is provided, 2 subnet ids need to be provided as well. You neglected to enter the second subnet id" } ] } }, "Mappings": { "Solution": { "Config": { "CodeVersion": "v4.0.15", "SolutionId": "SO0062" } } }, "Conditions": { "CreateFargateVPCResources": { "Fn::Equals": [ { "Ref": "ExistingVPCId" }, "" ] }, "BoolExistingVPC": { "Fn::Not": [ { "Fn::Equals": [ { "Ref": "ExistingVPCId" }, "" ] } ] }, "UseStableTagCondition": { "Fn::Equals": [ { "Ref": "UseStableTagging" }, "Yes" ] }, "DeployMCPServerCondition": { "Fn::Equals": [ { "Ref": "DeployMCPServer" }, "Yes" ] }, "CDKMetadataAvailable": { "Fn::Or": [ { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "af-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-northeast-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-northeast-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-northeast-3" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-south-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-3" ] } ] }, { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ap-southeast-4" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ca-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "ca-west-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "cn-north-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "cn-northwest-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-central-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-north-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-south-2" ] } ] }, { "Fn::Or": [ { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "eu-west-3" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "il-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "me-central-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "me-south-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "sa-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-east-1" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-east-2" ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-west-1" ] } ] }, { "Fn::Equals": [ { "Ref": "AWS::Region" }, "us-west-2" ] } ] } }, "Resources": { "DLTVpcDLTFargateVpc0E6FEAB7": { "Type": "AWS::EC2::VPC", "Properties": { "CidrBlock": { "Ref": "VpcCidrBlock" }, "EnableDnsHostnames": true, "EnableDnsSupport": true, "Tags": [ { "Key": "Name", "Value": { "Ref": "AWS::StackName" } } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W60", "reason": "This VPC is used for the test runner Fargate tasks only, it does not require VPC flow logs." } ] } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTSubnetAAE7DDEE8": { "Type": "AWS::EC2::Subnet", "Properties": { "AvailabilityZone": { "Fn::Select": [ 0, { "Fn::GetAZs": "" } ] }, "CidrBlock": { "Ref": "SubnetACidrBlock" }, "VpcId": { "Ref": "DLTVpcDLTFargateVpc0E6FEAB7" } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTSubnetB294F4ED2": { "Type": "AWS::EC2::Subnet", "Properties": { "AvailabilityZone": { "Fn::Select": [ 1, { "Fn::GetAZs": "" } ] }, "CidrBlock": { "Ref": "SubnetBCidrBlock" }, "VpcId": { "Ref": "DLTVpcDLTFargateVpc0E6FEAB7" } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTFargateIG0E71BA5C": { "Type": "AWS::EC2::InternetGateway", "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTFargateRT86406464": { "Type": "AWS::EC2::RouteTable", "Properties": { "VpcId": { "Ref": "DLTVpcDLTFargateVpc0E6FEAB7" } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTGatewayattachment220D400F": { "Type": "AWS::EC2::VPCGatewayAttachment", "Properties": { "InternetGatewayId": { "Ref": "DLTVpcDLTFargateIG0E71BA5C" }, "VpcId": { "Ref": "DLTVpcDLTFargateVpc0E6FEAB7" } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTRouteF8F2A836": { "Type": "AWS::EC2::Route", "Properties": { "DestinationCidrBlock": "0.0.0.0/0", "GatewayId": { "Ref": "DLTVpcDLTFargateIG0E71BA5C" }, "RouteTableId": { "Ref": "DLTVpcDLTFargateRT86406464" } }, "DependsOn": [ "DLTVpcDLTGatewayattachment220D400F" ], "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTRouteTableAssociationAE94A08EA": { "Type": "AWS::EC2::SubnetRouteTableAssociation", "Properties": { "RouteTableId": { "Ref": "DLTVpcDLTFargateRT86406464" }, "SubnetId": { "Ref": "DLTVpcDLTSubnetAAE7DDEE8" } }, "Condition": "CreateFargateVPCResources" }, "DLTVpcDLTRouteTableAssociationBBED3E4B3": { "Type": "AWS::EC2::SubnetRouteTableAssociation", "Properties": { "RouteTableId": { "Ref": "DLTVpcDLTFargateRT86406464" }, "SubnetId": { "Ref": "DLTVpcDLTSubnetB294F4ED2" } }, "Condition": "CreateFargateVPCResources" }, "DLTCommonResourcesCloudWatchLogsPolicyB29337B0": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents" ], "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":logs:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":log-group:/aws/lambda/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTCommonResourcesCloudWatchLogsPolicyB29337B0", "Roles": [ { "Ref": "DLTCommonResourcesCustomResourceCustomResourceLambdaRole248397C4" }, { "Ref": "RealTimeDatarealTimeDataPublisherRoleA8976D01" }, { "Ref": "DLTLambdaFunctionLambdaResultsRole2CF2D707" }, { "Ref": "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD" }, { "Ref": "DLTLambdaFunctionLambdaTaskCancelerRoleAE2C84CF" }, { "Ref": "DLTLambdaFunctionTaskStatusRole9288E645" }, { "Ref": "DLTLambdaFunctionMetricFilterCleanerRole2EB5924C" }, { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTCommonResourcesLogsBucket48A2774D": { "Type": "AWS::S3::Bucket", "Properties": { "AccessControl": "LogDeliveryWrite", "BucketEncryption": { "ServerSideEncryptionConfiguration": [ { "ServerSideEncryptionByDefault": { "SSEAlgorithm": "AES256" } } ] }, "OwnershipControls": { "Rules": [ { "ObjectOwnership": "ObjectWriter" } ] }, "PublicAccessBlockConfiguration": { "BlockPublicAcls": true, "BlockPublicPolicy": true, "IgnorePublicAcls": true, "RestrictPublicBuckets": true }, "VersioningConfiguration": { "Status": "Enabled" } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W35", "reason": "This is the logging bucket, it does not require logging." }, { "id": "W51", "reason": "Since the bucket does not allow the public access, it does not require to have bucket policy." } ] } } }, "DLTCommonResourcesLogsBucketPolicyAA7FFB37": { "Type": "AWS::S3::BucketPolicy", "Properties": { "Bucket": { "Ref": "DLTCommonResourcesLogsBucket48A2774D" }, "PolicyDocument": { "Statement": [ { "Action": "s3:*", "Condition": { "Bool": { "aws:SecureTransport": "false" } }, "Effect": "Deny", "Principal": { "AWS": "*" }, "Resource": [ { "Fn::GetAtt": [ "DLTCommonResourcesLogsBucket48A2774D", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTCommonResourcesLogsBucket48A2774D", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" } } }, "DLTCommonResourcesCustomResourceCustomResourceLambdaRole248397C4": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "iot:DescribeEndpoint", "iot:DetachPrincipalPolicy" ], "Effect": "Allow", "Resource": "*" }, { "Action": "iot:ListTargetsForPolicy", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":policy/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "CustomResourcePolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "iot:DescribeEndpoint and iot:DetachPrincipalPolicy cannot specify the resource." } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTCommonResourcesCustomResourceCustomResourceLambdaRoleDefaultPolicy315DBE14": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/*" ] ] } ] }, { "Action": [ "dynamodb:BatchGetItem", "dynamodb:Query", "dynamodb:GetItem", "dynamodb:Scan", "dynamodb:ConditionCheckItem", "dynamodb:BatchWriteItem", "dynamodb:PutItem", "dynamodb:UpdateItem", "dynamodb:DeleteItem", "dynamodb:DescribeTable" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A", "Arn" ] } ] }, { "Action": [ "dynamodb:GetRecords", "dynamodb:GetShardIterator" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A", "Arn" ] } ] }, { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*", "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Fn::Join": [ "-", [ "solutions", { "Ref": "AWS::Region" } ] ] } ] ] }, { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Fn::Join": [ "-", [ "solutions", { "Ref": "AWS::Region" } ] ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "DLTCommonResourcesCustomResourceCustomResourceLambdaRoleDefaultPolicy315DBE14", "Roles": [ { "Ref": "DLTCommonResourcesCustomResourceCustomResourceLambdaRole248397C4" } ] } }, "DLTCustomResourceInfraCustomResourceLambdaA4053269": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/55b14082645e703fef9bb93472e0df998d7742706a00e0de939f915287b9d7d0.zip" }, "Description": "CFN Lambda backed custom resource to deploy assets to s3", "Environment": { "Variables": { "METRIC_URL": "https://metrics.awssolutionsbuilder.com/generic", "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15", "MAIN_REGION": { "Ref": "AWS::Region" }, "S3_BUCKET": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "DDB_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" } } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTCommonResourcesCustomResourceCustomResourceLambdaRole248397C4", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 120 }, "DependsOn": [ "DLTCommonResourcesCustomResourceCustomResourceLambdaRoleDefaultPolicy315DBE14", "DLTCommonResourcesCustomResourceCustomResourceLambdaRole248397C4" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "VPC not needed for lambda" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB": { "Type": "AWS::S3::Bucket", "Properties": { "BucketEncryption": { "ServerSideEncryptionConfiguration": [ { "ServerSideEncryptionByDefault": { "SSEAlgorithm": "AES256" } } ] }, "LifecycleConfiguration": { "Rules": [ { "NoncurrentVersionTransitions": [ { "StorageClass": "GLACIER", "TransitionInDays": 90 } ], "Status": "Enabled" } ] }, "LoggingConfiguration": { "DestinationBucketName": { "Ref": "DLTCommonResourcesLogsBucket48A2774D" }, "LogFilePrefix": "console-bucket-access/" }, "PublicAccessBlockConfiguration": { "BlockPublicAcls": true, "BlockPublicPolicy": true, "IgnorePublicAcls": true, "RestrictPublicBuckets": true }, "Tags": [ { "Key": "aws-cdk:cr-owned:153e9244", "Value": "true" } ], "VersioningConfiguration": { "Status": "Enabled" } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain" }, "DLTConsoleResourcesDLTDashboardS3S3BucketPolicy85582FEA": { "Type": "AWS::S3::BucketPolicy", "Properties": { "Bucket": { "Ref": "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB" }, "PolicyDocument": { "Statement": [ { "Action": "s3:*", "Condition": { "Bool": { "aws:SecureTransport": "false" } }, "Effect": "Deny", "Principal": { "AWS": "*" }, "Resource": [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, "/*" ] ] } ] }, { "Action": "s3:GetObject", "Condition": { "StringEquals": { "AWS:SourceArn": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":cloudfront::", { "Ref": "AWS::AccountId" }, ":distribution/", { "Ref": "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB" } ] ] } } }, "Effect": "Allow", "Principal": { "Service": "cloudfront.amazonaws.com" }, "Resource": { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, "/*" ] ] } }, { "Action": "s3:ListBucket", "Condition": { "StringEquals": { "AWS:SourceArn": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":cloudfront::", { "Ref": "AWS::AccountId" }, ":distribution/", { "Ref": "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB" } ] ] } } }, "Effect": "Allow", "Principal": { "Service": "cloudfront.amazonaws.com" }, "Resource": { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] } } ], "Version": "2012-10-17" } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "F16", "reason": "Public website bucket policy requires a wildcard principal" } ] } } }, "DLTConsoleResourcesDLTDashboardS3CloudFrontOacE80000C5": { "Type": "AWS::CloudFront::OriginAccessControl", "Properties": { "OriginAccessControlConfig": { "Description": "Origin access control provisioned by aws-cloudfront-s3", "Name": { "Fn::Join": [ "", [ "aws-cloudfront-s3-DLTDardS3-", { "Fn::Select": [ 2, { "Fn::Split": [ "/", { "Ref": "AWS::StackId" } ] } ] } ] ] }, "OriginAccessControlOriginType": "s3", "SigningBehavior": "always", "SigningProtocol": "sigv4" } } }, "DLTConsoleResourcesDLTDashboardS3ResponseHeadersPolicyA894BC19": { "Type": "AWS::CloudFront::ResponseHeadersPolicy", "Properties": { "ResponseHeadersPolicyConfig": { "Comment": "Security headers policy for DLT console", "CustomHeadersConfig": { "Items": [ { "Header": "Permissions-Policy", "Override": true, "Value": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()" }, { "Header": "Cross-Origin-Resource-Policy", "Override": true, "Value": "same-origin" } ] }, "Name": { "Fn::Join": [ "-", [ { "Ref": "AWS::StackName" }, { "Ref": "AWS::Region" }, "rhp" ] ] }, "SecurityHeadersConfig": { "ContentSecurityPolicy": { "ContentSecurityPolicy": "default-src 'self' https://*.amazonaws.com https://*.amazoncognito.com; upgrade-insecure-requests; script-src 'self' https://*.amazonaws.com https://*.amazoncognito.com; style-src 'self' 'unsafe-inline' https://*.amazonaws.com; img-src 'self' data: https://*.amazonaws.com; font-src 'self' data:; connect-src 'self' https://*.amazonaws.com https://*.amazoncognito.com wss://*.amazonaws.com; frame-src 'self' https://*.amazonaws.com; frame-ancestors 'self' https://*.amazonaws.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.amazonaws.com;", "Override": true }, "ContentTypeOptions": { "Override": true }, "FrameOptions": { "FrameOption": "DENY", "Override": true }, "ReferrerPolicy": { "Override": true, "ReferrerPolicy": "strict-origin-when-cross-origin" }, "StrictTransportSecurity": { "AccessControlMaxAgeSec": 47304000, "IncludeSubdomains": true, "Override": true } } } } }, "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB": { "Type": "AWS::CloudFront::Distribution", "Properties": { "DistributionConfig": { "Comment": "Website distribution for the Distributed Load Testing solution", "CustomErrorResponses": [ { "ErrorCode": 403, "ResponseCode": 200, "ResponsePagePath": "/index.html" }, { "ErrorCode": 404, "ResponseCode": 200, "ResponsePagePath": "/index.html" } ], "DefaultCacheBehavior": { "CachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6", "Compress": true, "ResponseHeadersPolicyId": { "Ref": "DLTConsoleResourcesDLTDashboardS3ResponseHeadersPolicyA894BC19" }, "TargetOriginId": "distributedloadtestingonawsDLTConsoleResourcesDLTDashboardS3CloudFrontDistributionOrigin1DF278B4A", "ViewerProtocolPolicy": "redirect-to-https" }, "DefaultRootObject": "index.html", "Enabled": true, "HttpVersion": "http2", "IPV6Enabled": true, "Logging": { "Bucket": { "Fn::GetAtt": [ "DLTCommonResourcesLogsBucket48A2774D", "RegionalDomainName" ] }, "Prefix": "cloudfront-logs/" }, "Origins": [ { "DomainName": { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "RegionalDomainName" ] }, "Id": "distributedloadtestingonawsDLTConsoleResourcesDLTDashboardS3CloudFrontDistributionOrigin1DF278B4A", "OriginAccessControlId": { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3CloudFrontOacE80000C5", "Id" ] }, "S3OriginConfig": { "OriginAccessIdentity": "" } } ] } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W70", "reason": "Since the distribution uses the CloudFront domain name, CloudFront automatically sets the security policy to TLSv1 regardless of the value of MinimumProtocolVersion" } ] } } }, "DLTConsoleResourcesDeployWebsiteAwsCliLayer18BDB5D9": { "Type": "AWS::Lambda::LayerVersion", "Properties": { "Content": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/e2659170a0721541efa761a8d5d04d5e36cbbf691c4b15a9053002b7c825055d.zip" }, "Description": "/opt/awscli/aws" } }, "DLTConsoleResourcesDeployWebsiteCustomResource031F1BF7": { "Type": "Custom::CDKBucketDeployment", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536", "Arn" ] }, "SourceBucketNames": [ { "Fn::Sub": "solutions-${AWS::Region}" } ], "SourceObjectKeys": [ "distributed-load-testing-on-aws/v4.0.15/50ddd7ab2cff29a201bfd97ef365812670d60aff8a33d959ab07333c0cbb3d1e.zip" ], "DestinationBucketName": { "Ref": "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB" }, "WaitForDistributionInvalidation": true, "Prune": true, "Exclude": [ "aws-exports.json" ], "DistributionId": { "Ref": "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB" }, "DistributionPaths": [ "/*" ], "OutputObjectKeys": true }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "ManagedPolicyArns": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" ] ] } ] } }, "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Fn::Sub": "solutions-${AWS::Region}" } ] ] }, { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Fn::Sub": "solutions-${AWS::Region}" }, "/*" ] ] } ] }, { "Action": [ "s3:GetObject*", "s3:GetBucket*", "s3:List*", "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, "/*" ] ] } ] }, { "Action": [ "cloudfront:GetInvalidation", "cloudfront:CreateInvalidation" ], "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF", "Roles": [ { "Ref": "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265" } ] } }, "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/3423a042b818e31c1e34a19d6689ab2e5f9b70fcbe9e71df66f241b20a200bd9.zip" }, "Environment": { "Variables": { "AWS_CA_BUNDLE": "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem" } }, "Handler": "index.handler", "Layers": [ { "Ref": "DLTConsoleResourcesDeployWebsiteAwsCliLayer18BDB5D9" } ], "Role": { "Fn::GetAtt": [ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265", "Arn" ] }, "Runtime": "python3.13", "Timeout": 900 }, "DependsOn": [ "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRoleDefaultPolicy88902FDF", "CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756CServiceRole89A01265" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "Lambda function created by BucketDeployment has appropriate IAM permissions managed by CDK" }, { "id": "W89", "reason": "Lambda function created by BucketDeployment does not need to be in a VPC as it only copies files to S3" }, { "id": "W92", "reason": "Lambda function created by BucketDeployment is temporary and does not need reserved concurrency" } ] } } }, "DLTTestRunnerStorageDLTScenariosBucketA9290D21": { "Type": "AWS::S3::Bucket", "Properties": { "BucketEncryption": { "ServerSideEncryptionConfiguration": [ { "ServerSideEncryptionByDefault": { "SSEAlgorithm": "aws:kms" } } ] }, "CorsConfiguration": { "CorsRules": [ { "AllowedHeaders": [ "*" ], "AllowedMethods": [ "GET", "POST", "PUT", "HEAD" ], "AllowedOrigins": [ { "Fn::Join": [ "", [ "https://", { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB", "DomainName" ] } ] ] } ], "ExposedHeaders": [ "ETag" ] } ] }, "LoggingConfiguration": { "DestinationBucketName": { "Ref": "DLTCommonResourcesLogsBucket48A2774D" }, "LogFilePrefix": "scenarios-bucket-access/" }, "PublicAccessBlockConfiguration": { "BlockPublicAcls": true, "BlockPublicPolicy": true, "IgnorePublicAcls": true, "RestrictPublicBuckets": true }, "VersioningConfiguration": { "Status": "Enabled" } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain" }, "DLTTestRunnerStorageDLTScenariosBucketPolicy96221788": { "Type": "AWS::S3::BucketPolicy", "Properties": { "Bucket": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "PolicyDocument": { "Statement": [ { "Action": "s3:*", "Condition": { "Bool": { "aws:SecureTransport": "false" } }, "Effect": "Deny", "Principal": { "AWS": "*" }, "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" } } }, "DLTTestRunnerStorageScenariosS3PolicyD20D3673": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:HeadObject", "s3:PutObject", "s3:GetObject", "s3:ListBucket" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "DLTTestRunnerStorageScenariosS3PolicyD20D3673", "Roles": [ { "Ref": "DLTLambdaFunctionLambdaResultsRole2CF2D707" }, { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A": { "Type": "AWS::DynamoDB::Table", "Properties": { "AttributeDefinitions": [ { "AttributeName": "testId", "AttributeType": "S" } ], "BillingMode": "PAY_PER_REQUEST", "KeySchema": [ { "AttributeName": "testId", "KeyType": "HASH" } ], "PointInTimeRecoverySpecification": { "PointInTimeRecoveryEnabled": true }, "SSESpecification": { "SSEEnabled": true } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "DYNAMODB_TABLE_ENCRYPTED_KMS" ] } } }, "DLTTestRunnerStorageDLTHistoryTable46D850CC": { "Type": "AWS::DynamoDB::Table", "Properties": { "AttributeDefinitions": [ { "AttributeName": "testId", "AttributeType": "S" }, { "AttributeName": "testRunId", "AttributeType": "S" }, { "AttributeName": "startTime", "AttributeType": "S" } ], "BillingMode": "PAY_PER_REQUEST", "GlobalSecondaryIndexes": [ { "IndexName": "testId-startTime-index", "KeySchema": [ { "AttributeName": "testId", "KeyType": "HASH" }, { "AttributeName": "startTime", "KeyType": "RANGE" } ], "Projection": { "NonKeyAttributes": [ "testRunId", "endTime", "status", "results" ], "ProjectionType": "INCLUDE" } } ], "KeySchema": [ { "AttributeName": "testId", "KeyType": "HASH" }, { "AttributeName": "testRunId", "KeyType": "RANGE" } ], "PointInTimeRecoverySpecification": { "PointInTimeRecoveryEnabled": true }, "SSESpecification": { "SSEEnabled": true } }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "DYNAMODB_TABLE_ENCRYPTED_KMS" ] } } }, "DLTTestRunnerStorageHistoryDynamoDbPolicyA439CB46": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "dynamodb:BatchWriteItem", "dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:Query" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTHistoryTable46D850CC", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTHistoryTable46D850CC", "Arn" ] }, "/index/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "DLTTestRunnerStorageHistoryDynamoDbPolicyA439CB46", "Roles": [ { "Ref": "DLTLambdaFunctionLambdaResultsRole2CF2D707" }, { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTTestRunnerStorageScenarioDynamoDbPolicy8B391249": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "dynamodb:DeleteItem", "dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:Scan", "dynamodb:UpdateItem" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTTestRunnerStorageScenarioDynamoDbPolicy8B391249", "Roles": [ { "Ref": "DLTLambdaFunctionLambdaResultsRole2CF2D707" }, { "Ref": "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD" }, { "Ref": "DLTLambdaFunctionTaskStatusRole9288E645" }, { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTCustomResourcesGetIotEndpoint700ABCC8": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "Resource": "GetIotEndpoint" }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCustomResourcesCustomResourceUuidD1C03F15": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "Resource": "UUID" }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCustomResourcesDetachIotPrincipalPolicyE4A7C1B8": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "Resource": "DetachIotPolicy", "IotPolicyName": { "Ref": "DLTCognitoAuthIoTPolicyB8FDFE53" } }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCustomResourcesPutRegionalTemplate5479575B": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "Resource": "PutRegionalTemplate", "SrcBucket": { "Fn::Join": [ "-", [ "solutions", { "Ref": "AWS::Region" } ] ] }, "SrcPath": "distributed-load-testing-on-aws/v4.0.15", "DestBucket": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "MainRegionLambdaTaskRoleArn": { "Fn::GetAtt": [ "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD", "Arn" ] }, "ScenariosTable": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" }, "MainRegionStack": { "Ref": "AWS::Region" }, "Timestamp": "1776366334453" }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCustomResourcesTestingResourcesConfig0BCA657F": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "TestingResourcesConfig": { "region": { "Ref": "AWS::Region" }, "subnetA": { "Fn::If": [ "CreateFargateVPCResources", { "Ref": "DLTVpcDLTSubnetAAE7DDEE8" }, { "Ref": "ExistingSubnetA" } ] }, "subnetB": { "Fn::If": [ "CreateFargateVPCResources", { "Ref": "DLTVpcDLTSubnetB294F4ED2" }, { "Ref": "ExistingSubnetB" } ] }, "ecsCloudWatchLogGroup": { "Ref": "DLTEcsDLTCloudWatchLogsGroupFE9EC144" }, "taskSecurityGroup": { "Ref": "DLTEcsDLTEcsSecurityGroup69E6743C" }, "taskDefinition": { "Ref": "DLTEcsDLTTaskDefinitionFB4E5564" }, "taskImage": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-load-tester" ] ] }, "taskCluster": { "Ref": "DLTEcsDLTEcsClusterBC5CE23B" } }, "Resource": "TestingResourcesConfigFile" }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCustomResourcesMetricA23693FA": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "DLTCustomResourceInfraCustomResourceLambdaA4053269", "Arn" ] }, "existingVPC": { "Fn::If": [ "BoolExistingVPC", true, false ] }, "Region": { "Ref": "AWS::Region" }, "Resource": "Metric", "SolutionId": { "Fn::FindInMap": [ "Solution", "Config", "SolutionId" ] }, "UUID": { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] }, "Version": { "Fn::FindInMap": [ "Solution", "Config", "CodeVersion" ] }, "AccountId": { "Ref": "AWS::AccountId" }, "AutoUpdateContainerImage": { "Ref": "UseStableTagging" }, "DeployMcpServer": { "Ref": "DeployMCPServer" } }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTEcsDLTEcsClusterBC5CE23B": { "Type": "AWS::ECS::Cluster", "Properties": { "ClusterName": { "Ref": "AWS::StackName" }, "ClusterSettings": [ { "Name": "containerInsights", "Value": "enabled" } ], "Tags": [ { "Key": "CloudFormation Stack", "Value": { "Ref": "AWS::StackName" } }, { "Key": "SolutionId", "Value": "SO0062" } ] } }, "DLTEcsDLTTaskExecutionRoleDE668717": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "ecs-tasks.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "ecr:GetAuthorizationToken", "ecr:BatchCheckLayerAvailability", "ecr:GetDownloadUrlForLayer", "ecr:BatchGetImage", "logs:CreateLogStream", "logs:PutLogEvents" ], "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "ECSTaskExecutionPolicy" }, { "PolicyDocument": { "Statement": [ { "Action": [ "s3:HeadObject", "s3:PutObject", "s3:GetObject", "s3:ListBucket" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" } ] ] }, { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":s3:::", { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "ScenariosS3Policy" } ] }, "Metadata": { "guard": { "SuppressedRules": [ "IAM_POLICYDOCUMENT_NO_WILDCARD_RESOURCE", "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTEcsDLTTaskExecutionRoleDefaultPolicy3A93A204": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "logs:CreateLogStream", "logs:PutLogEvents" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTEcsDLTCloudWatchLogsGroupFE9EC144", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTEcsDLTTaskExecutionRoleDefaultPolicy3A93A204", "Roles": [ { "Ref": "DLTEcsDLTTaskExecutionRoleDE668717" } ] } }, "DLTEcsDLTCloudWatchLogsGroupFE9EC144": { "Type": "AWS::Logs::LogGroup", "Properties": { "RetentionInDays": 3653, "Tags": [ { "Key": "SolutionId", "Value": "SO0062" } ] }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] } } }, "DLTEcsDLTCloudWatchLogsGroupECSLogSubscriptionFilterCanInvokeLambdaF6EFF73B": { "Type": "AWS::Lambda::Permission", "Properties": { "Action": "lambda:InvokeFunction", "FunctionName": { "Fn::GetAtt": [ "RealTimeDataRealTimeDataPublisherNew82D06000", "Arn" ] }, "Principal": "logs.amazonaws.com", "SourceArn": { "Fn::GetAtt": [ "DLTEcsDLTCloudWatchLogsGroupFE9EC144", "Arn" ] } } }, "DLTEcsDLTCloudWatchLogsGroupECSLogSubscriptionFilterC5BB4DB5": { "Type": "AWS::Logs::SubscriptionFilter", "Properties": { "DestinationArn": { "Fn::GetAtt": [ "RealTimeDataRealTimeDataPublisherNew82D06000", "Arn" ] }, "FilterPattern": "\"INFO: Current:\" \"live=true\"", "LogGroupName": { "Ref": "DLTEcsDLTCloudWatchLogsGroupFE9EC144" } }, "DependsOn": [ "DLTEcsDLTCloudWatchLogsGroupECSLogSubscriptionFilterCanInvokeLambdaF6EFF73B" ] }, "DLTEcsMetricFilterCountAlarm6B9438DB": { "Type": "AWS::CloudWatch::Alarm", "Properties": { "AlarmDescription": "Alarm when metric filter count approaches the limit of 100", "AlarmName": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-MetricFilterCount-Alarm" ] ] }, "ComparisonOperator": "GreaterThanOrEqualToThreshold", "Dimensions": [ { "Name": "LogGroupName", "Value": { "Ref": "DLTEcsDLTCloudWatchLogsGroupFE9EC144" } } ], "EvaluationPeriods": 1, "MetricName": "MetricFilterCount", "Namespace": "distributed-load-testing", "Period": 300, "Statistic": "Maximum", "Threshold": 90, "TreatMissingData": "notBreaching" }, "Metadata": { "guard": { "SuppressedRules": [ "CFN_NO_EXPLICIT_RESOURCE_NAMES" ] } } }, "DLTEcsDLTTaskDefinitionFB4E5564": { "Type": "AWS::ECS::TaskDefinition", "Properties": { "ContainerDefinitions": [ { "Environment": [ { "Name": "JVM_ARGS", "Value": "-Xms1g -Xmx3g" } ], "Essential": true, "Image": { "Fn::If": [ "UseStableTagCondition", "public.ecr.aws/aws-solutions/distributed-load-testing-on-aws-load-tester:v4.0_stable", "public.ecr.aws/aws-solutions/distributed-load-testing-on-aws-load-tester:v4.0.15" ] }, "LogConfiguration": { "LogDriver": "awslogs", "Options": { "awslogs-group": { "Ref": "DLTEcsDLTCloudWatchLogsGroupFE9EC144" }, "awslogs-stream-prefix": "load-testing", "awslogs-region": { "Ref": "AWS::Region" } } }, "Memory": 4096, "Name": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-load-tester" ] ] } } ], "Cpu": "2048", "ExecutionRoleArn": { "Fn::GetAtt": [ "DLTEcsDLTTaskExecutionRoleDE668717", "Arn" ] }, "Family": "distributedloadtestingonawsDLTEcsDLTTaskDefinitionFFD96F9E", "Memory": "4096", "NetworkMode": "awsvpc", "RequiresCompatibilities": [ "FARGATE" ], "Tags": [ { "Key": "SolutionId", "Value": "SO0062" } ], "TaskRoleArn": { "Fn::GetAtt": [ "DLTEcsDLTTaskExecutionRoleDE668717", "Arn" ] } } }, "DLTEcsDLTEcsSecurityGroup69E6743C": { "Type": "AWS::EC2::SecurityGroup", "Properties": { "GroupDescription": "DLTS Tasks Security Group", "VpcId": { "Fn::If": [ "CreateFargateVPCResources", { "Ref": "DLTVpcDLTFargateVpc0E6FEAB7" }, { "Ref": "ExistingVPCId" } ] } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W40", "reason": "IpProtocol set to -1 (any) as ports are not known prior to running tests" }, { "id": "F1000", "reason": "egress rule is specificed as its own cfn resource." } ] } } }, "DLTEcsDLTSecGroupEgressE1DA93E8": { "Type": "AWS::EC2::SecurityGroupEgress", "Properties": { "CidrIp": { "Ref": "EgressCidr" }, "Description": "Allow tasks to call out to external resources", "GroupId": { "Ref": "DLTEcsDLTEcsSecurityGroup69E6743C" }, "IpProtocol": "-1" } }, "DLTEcsDLTSecGroupIngressFA958E66": { "Type": "AWS::EC2::SecurityGroupIngress", "Properties": { "Description": "Allow tasks to communicate", "FromPort": 50000, "GroupId": { "Ref": "DLTEcsDLTEcsSecurityGroup69E6743C" }, "IpProtocol": "tcp", "SourceSecurityGroupId": { "Ref": "DLTEcsDLTEcsSecurityGroup69E6743C" }, "ToPort": 50000 } }, "RealTimeDatarealTimeDataPublisherRoleA8976D01": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "iot:Publish", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":topic/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "IoTPolicy" } ] }, "Metadata": { "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "RealTimeDataRealTimeDataPublisherNew82D06000": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/d6df39858a56b21f31e14a7d2b8ee0268cc6e175adeae705c1087248d9bdd94c.zip" }, "Description": "Real time data publisher", "Environment": { "Variables": { "MAIN_REGION": { "Ref": "AWS::Region" }, "IOT_ENDPOINT": { "Fn::Join": [ "", [ "https://", { "Fn::GetAtt": [ "DLTCustomResourcesGetIotEndpoint700ABCC8", "IOT_ENDPOINT" ] } ] ] }, "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15" } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "RealTimeDatarealTimeDataPublisherRoleA8976D01", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 180 }, "DependsOn": [ "RealTimeDatarealTimeDataPublisherRoleA8976D01" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "RealTimeDataRealTimeDataPublisherLogGroup3FE55F9A": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "RealTimeDataRealTimeDataPublisherNew82D06000" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] } } }, "DLTLambdaFunctionLambdaResultsRole2CF2D707": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W12", "reason": "The action does not support resource level permissions." } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTLambdaFunctionLambdaResultsPolicyB191FC35": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "cloudwatch:GetMetricWidgetImage", "Effect": "Allow", "Resource": "*" }, { "Action": "logs:DeleteMetricFilter", "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "DLTLambdaFunctionLambdaResultsPolicyB191FC35", "Roles": [ { "Ref": "DLTLambdaFunctionLambdaResultsRole2CF2D707" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W12", "reason": "The action does not support resource level permissions." } ] } } }, "DLTLambdaFunctionResultsParserNew4A490450": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/c0fd055f1df448da3908212c14fe89503bdc03dc7f445c4b9476f7b6ea30b638.zip" }, "Description": "Result parser for indexing xml test results to DynamoDB", "Environment": { "Variables": { "HISTORY_TABLE": { "Ref": "DLTTestRunnerStorageDLTHistoryTable46D850CC" }, "METRIC_URL": "https://metrics.awssolutionsbuilder.com/generic", "SCENARIOS_BUCKET": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "SCENARIOS_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" }, "SOLUTION_ID": "SO0062", "UUID": { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] }, "VERSION": "v4.0.15" } }, "Handler": "index.handler", "MemorySize": 1024, "Role": { "Fn::GetAtt": [ "DLTLambdaFunctionLambdaResultsRole2CF2D707", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 900 }, "DependsOn": [ "DLTLambdaFunctionLambdaResultsRole2CF2D707" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTLambdaFunctionResultsParserLambdaLogGroupADF0ADEA": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTLambdaFunctionResultsParserNew4A490450" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] }, "guard": { "SuppressedRules": [ "CLOUDWATCH_LOG_GROUP_ENCRYPTED" ] } } }, "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "ecs:ListTasks", "Effect": "Allow", "Resource": "*" }, { "Action": [ "ecs:RunTask", "ecs:DescribeTasks", "ecs:TagResource", "logs:PutMetricFilter", "logs:DescribeMetricFilters" ], "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "cloudwatch:PutMetricData", "Condition": { "StringEquals": { "cloudwatch:namespace": "distributed-load-testing" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "s3:putObject", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/*" ] ] } }, { "Action": "iam:PassRole", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTEcsDLTTaskExecutionRoleDE668717", "Arn" ] } }, { "Action": "cloudwatch:PutDashboard", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":cloudwatch::", { "Ref": "AWS::AccountId" }, ":dashboard/EcsLoadTesting*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "TaskLambdaPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "ecs:ListTasks does not support resource level permissions" } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTLambdaFunctionTaskRunnerNew5AE1A3C2": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/27a80027396df0bbc968a9844d07d41fde697fe99b03ff2403b8a35436289239.zip" }, "Description": "Task runner for ECS task definitions", "Environment": { "Variables": { "SCENARIOS_BUCKET": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "SCENARIOS_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" }, "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15", "MAIN_STACK_REGION": { "Ref": "AWS::Region" } } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 900 }, "DependsOn": [ "DLTLambdaFunctionDLTTestLambdaTaskRole1FDBCEDD" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTLambdaFunctionTaskRunnerLambdaLogGroupF801BE82": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTLambdaFunctionTaskRunnerNew5AE1A3C2" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "CLOUDWATCH_LOG_GROUP_ENCRYPTED" ] } } }, "DLTLambdaFunctionLambdaTaskCancelerRoleAE2C84CF": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "ecs:StopTask", "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "ecs:ListTasks", "Effect": "Allow", "Resource": "*" }, { "Action": "dynamodb:UpdateItem", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A", "Arn" ] } }, { "Action": [ "logs:DescribeMetricFilters", "logs:DeleteMetricFilter" ], "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "cloudwatch:PutMetricData", "Condition": { "StringEquals": { "cloudwatch:namespace": "distributed-load-testing" } }, "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "TaskCancelerPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "ecs:ListTasks does not support resource level permissions" } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTLambdaFunctionTaskCancelerNewA6986F4A": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/39054b3fb5b08fdb87eb4ded30958db19367c4965aae0e62cc5ca86b63d6c5e8.zip" }, "Description": "Stops ECS task", "Environment": { "Variables": { "METRIC_URL": "https://metrics.awssolutionsbuilder.com/generic", "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15", "SCENARIOS_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" } } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTLambdaFunctionLambdaTaskCancelerRoleAE2C84CF", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 300 }, "DependsOn": [ "DLTLambdaFunctionLambdaTaskCancelerRoleAE2C84CF" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTLambdaFunctionTaskCancellerLambdaLogGroupBD1D284E": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTLambdaFunctionTaskCancelerNewA6986F4A" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "CLOUDWATCH_LOG_GROUP_ENCRYPTED" ] } } }, "DLTLambdaFunctionTaskCancelerInvokePolicyA1C7562A": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTLambdaFunctionTaskCancelerInvokePolicyA1C7562A", "Roles": [ { "Ref": "DLTLambdaFunctionTaskStatusRole9288E645" }, { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTLambdaFunctionTaskStatusRole9288E645": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "ecs:DescribeTasks", "ecs:ListTasks" ], "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "TaskStatusPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "ecs:ListTasks does not support resource level permissions" } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTLambdaFunctionTaskStatusCheckerNew00D99653": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/31a848139ff3e44b74224c9e2644c7c4aa7b6b886c872451a23cc774e8a99bab.zip" }, "Description": "Task status checker", "Environment": { "Variables": { "SCENARIOS_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" }, "TASK_CANCELER_ARN": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] }, "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15" } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusRole9288E645", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 180 }, "DependsOn": [ "DLTLambdaFunctionTaskStatusRole9288E645" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTLambdaFunctiontaskStatusCheckerLambdaLogGroup1988969D": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTLambdaFunctionTaskStatusCheckerNew00D99653" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "CLOUDWATCH_LOG_GROUP_ENCRYPTED" ] } } }, "DLTLambdaFunctionMetricFilterCleanerRole2EB5924C": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "logs:DeleteMetricFilter", "logs:DescribeMetricFilters" ], "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "cloudwatch:PutMetricData", "Condition": { "StringEquals": { "cloudwatch:namespace": "distributed-load-testing" } }, "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "MetricFilterCleanerPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "logs:DeleteMetricFilter does not support resource level permissions" } ] }, "guard": { "SuppressedRules": [ "IAM_NO_INLINE_POLICY_CHECK" ] } } }, "DLTLambdaFunctionMetricFilterCleanerDF0CAC68": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/76acd6b0adac02f7ab0dbe175c3a5c8355254ad6dd787031b81970af44e8d369.zip" }, "Description": "Cleans up CloudWatch metric filters for completed/failed tests", "Environment": { "Variables": { "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15" } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTLambdaFunctionMetricFilterCleanerRole2EB5924C", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 300 }, "DependsOn": [ "DLTLambdaFunctionMetricFilterCleanerRole2EB5924C" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTLambdaFunctionMetricFilterCleanerLambdaLogGroupFC5FA57A": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTLambdaFunctionMetricFilterCleanerDF0CAC68" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "guard": { "SuppressedRules": [ "CLOUDWATCH_LOG_GROUP_ENCRYPTED" ] } } }, "DLTStepFunctionStepFunctionsLogGroup8DABDAB7": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/vendedlogs/states/StepFunctionsLogGroup", { "Ref": "AWS::StackName" }, { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "SUFFIX" ] } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] } } }, "DLTStepFunctionTaskRunnerStepFunctionsRoleC2237F06": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "states.amazonaws.com" } } ], "Version": "2012-10-17" } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "CloudWatch logs actions do not support resource level permissions" }, { "id": "W12", "reason": "CloudWatch logs actions do not support resource level permissions" } ] } } }, "DLTStepFunctionTaskRunnerStepFunctionsRoleDefaultPolicy8F17B49F": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTLambdaFunctionResultsParserNew4A490450", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTLambdaFunctionResultsParserNew4A490450", "Arn" ] }, ":*" ] ] } ] }, { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTLambdaFunctionMetricFilterCleanerDF0CAC68", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTLambdaFunctionMetricFilterCleanerDF0CAC68", "Arn" ] }, ":*" ] ] } ] }, { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusCheckerNew00D99653", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusCheckerNew00D99653", "Arn" ] }, ":*" ] ] } ] }, { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskRunnerNew5AE1A3C2", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskRunnerNew5AE1A3C2", "Arn" ] }, ":*" ] ] } ] }, { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] }, ":*" ] ] } ] }, { "Action": [ "logs:CreateLogDelivery", "logs:GetLogDelivery", "logs:UpdateLogDelivery", "logs:DeleteLogDelivery", "logs:ListLogDeliveries", "logs:PutResourcePolicy", "logs:DescribeResourcePolicies", "logs:DescribeLogGroups" ], "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "DLTStepFunctionTaskRunnerStepFunctionsRoleDefaultPolicy8F17B49F", "Roles": [ { "Ref": "DLTStepFunctionTaskRunnerStepFunctionsRoleC2237F06" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W12", "reason": "CloudWatch logs actions do not support resource level permissions" }, { "id": "W76", "reason": "The IAM policy is written for least-privilege access." } ] } } }, "DLTStepFunctionTaskRunnerStepFunctionsC295A535": { "Type": "AWS::StepFunctions::StateMachine", "Properties": { "DefinitionString": { "Fn::Join": [ "", [ "{\"StartAt\":\"Regions for testing\",\"States\":{\"Regions for testing\":{\"Type\":\"Map\",\"ResultPath\":null,\"Next\":\"Parse result\",\"InputPath\":\"$\",\"ItemsPath\":\"$.testTaskConfig\",\"ItemSelector\":{\"testTaskConfig.$\":\"$$.Map.Item.Value\",\"testId.$\":\"$.testId\",\"testType.$\":\"$.testType\",\"fileType.$\":\"$.fileType\",\"showLive.$\":\"$.showLive\",\"testDuration.$\":\"$.testDuration\",\"prefix.$\":\"$.prefix\",\"testRunId.$\":\"$.testRunId\"},\"ItemProcessor\":{\"ProcessorConfig\":{\"Mode\":\"INLINE\"},\"StartAt\":\"Check running tests\",\"States\":{\"Check running tests\":{\"Next\":\"No running tests\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"InputPath\":\"$\",\"OutputPath\":\"$.Payload\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusCheckerNew00D99653", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"No running tests\":{\"Type\":\"Choice\",\"Choices\":[{\"Variable\":\"$.isRunning\",\"BooleanEquals\":false,\"Next\":\"Run workers\"}],\"Default\":\"Test is still running\"},\"Test is still running\":{\"Type\":\"Fail\",\"Error\":\"TestAlreadyRunning\",\"Cause\":\"The same test is already running.\"},\"Run workers\":{\"Next\":\"Requires leader?\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"InputPath\":\"$\",\"OutputPath\":\"$.Payload\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskRunnerNew5AE1A3C2", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"Requires leader?\":{\"Type\":\"Choice\",\"Choices\":[{\"Variable\":\"$.isRunning\",\"BooleanEquals\":false,\"Next\":\"Cancel Test\"},{\"Variable\":\"$.taskIds\",\"IsPresent\":false,\"Next\":\"Wait specified test duration\"}],\"Default\":\"Wait 1 minute - worker status\"},\"Wait 1 minute - worker status\":{\"Type\":\"Wait\",\"Comment\":\"Wait 1 minute to check task status again\",\"Seconds\":60,\"Next\":\"Check worker status\"},\"Check worker status\":{\"Next\":\"Are all workers running?\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"InputPath\":\"$\",\"OutputPath\":\"$.Payload\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusCheckerNew00D99653", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"Are all workers running?\":{\"Type\":\"Choice\",\"Choices\":[{\"Variable\":\"$.isRunning\",\"BooleanEquals\":false,\"Next\":\"Cancel Test\"},{\"Variable\":\"$.numTasksRunning\",\"NumericEqualsPath\":\"$.numTasksTotal\",\"Next\":\"Run leader task\"}],\"Default\":\"Wait 1 minute - worker status\"},\"Cancel Test\":{\"Next\":\"Map End\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"InputPath\":\"$\",\"ResultPath\":null,\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"Run leader task\":{\"Next\":\"Wait specified test duration\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Catch\":[{\"ErrorEquals\":[\"States.ALL\"],\"ResultPath\":\"$.error\",\"Next\":\"Cancel Test\"}],\"Type\":\"Task\",\"InputPath\":\"$\",\"OutputPath\":\"$.Payload\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskRunnerNew5AE1A3C2", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"Wait specified test duration\":{\"Type\":\"Wait\",\"SecondsPath\":\"$.testDuration\",\"Next\":\"Check task status\"},\"Check task status\":{\"Next\":\"Are all tasks done?\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"InputPath\":\"$\",\"OutputPath\":\"$.Payload\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionTaskStatusCheckerNew00D99653", "Arn" ] }, "\",\"Payload.$\":\"$\"}},\"Wait 1 minute - task status\":{\"Type\":\"Wait\",\"Comment\":\"Wait 1 minute to check task status again\",\"Seconds\":60,\"Next\":\"Check task status\"},\"Are all tasks done?\":{\"Type\":\"Choice\",\"Choices\":[{\"Variable\":\"$.isRunning\",\"BooleanEquals\":false,\"Next\":\"Map End\"}],\"Default\":\"Wait 1 minute - task status\"},\"Map End\":{\"Type\":\"Pass\",\"End\":true}}}},\"Parse result\":{\"Next\":\"Cleanup Metric Filters\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Catch\":[{\"ErrorEquals\":[\"States.ALL\"],\"ResultPath\":\"$.error\",\"Next\":\"Cleanup Metric Filters\"}],\"Type\":\"Task\",\"ResultPath\":\"$.parseResult\",\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionResultsParserNew4A490450", "Arn" ] }, "\",\"Payload\":{\"testTaskConfig.$\":\"$.testTaskConfig\",\"testId.$\":\"$.testId\",\"testType.$\":\"$.testType\",\"fileType.$\":\"$.fileType\",\"showLive.$\":\"$.showLive\",\"testDuration.$\":\"$.testDuration\",\"prefix.$\":\"$.prefix\",\"testRunId.$\":\"$.testRunId\",\"executionStart.$\":\"$$.Execution.StartTime\"}}},\"Cleanup Metric Filters\":{\"Next\":\"Done\",\"Retry\":[{\"ErrorEquals\":[\"Lambda.ClientExecutionTimeoutException\",\"Lambda.ServiceException\",\"Lambda.AWSLambdaException\",\"Lambda.SdkClientException\"],\"IntervalSeconds\":2,\"MaxAttempts\":6,\"BackoffRate\":2}],\"Type\":\"Task\",\"ResultPath\":null,\"Resource\":\"arn:", { "Ref": "AWS::Partition" }, ":states:::lambda:invoke\",\"Parameters\":{\"FunctionName\":\"", { "Fn::GetAtt": [ "DLTLambdaFunctionMetricFilterCleanerDF0CAC68", "Arn" ] }, "\",\"Payload\":{\"testTaskConfig.$\":\"$.testTaskConfig\",\"testId.$\":\"$.testId\"}}},\"Done\":{\"Type\":\"Succeed\"}}}" ] ] }, "LoggingConfiguration": { "Destinations": [ { "CloudWatchLogsLogGroup": { "LogGroupArn": { "Fn::GetAtt": [ "DLTStepFunctionStepFunctionsLogGroup8DABDAB7", "Arn" ] } } } ], "IncludeExecutionData": false, "Level": "ALL" }, "RoleArn": { "Fn::GetAtt": [ "DLTStepFunctionTaskRunnerStepFunctionsRoleC2237F06", "Arn" ] } }, "DependsOn": [ "DLTStepFunctionTaskRunnerStepFunctionsRoleDefaultPolicy8F17B49F", "DLTStepFunctionTaskRunnerStepFunctionsRoleC2237F06" ], "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTApiDLTAPIServicesLambdaRole4465EAA4": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "ecs:ListTasks", "ecs:RunTask", "ecs:DescribeTasks", "ecs:TagResource", "logs:DeleteMetricFilter" ], "Condition": { "StringEquals": { "aws:ResourceTag/SolutionId": "SO0062" } }, "Effect": "Allow", "Resource": "*" }, { "Action": "iam:PassRole", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTEcsDLTTaskExecutionRoleDE668717", "Arn" ] } }, { "Action": "states:StartExecution", "Effect": "Allow", "Resource": { "Ref": "DLTStepFunctionTaskRunnerStepFunctionsC295A535" } }, { "Action": "cloudwatch:DeleteDashboards", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":cloudwatch::", { "Ref": "AWS::AccountId" }, ":dashboard/EcsLoadTesting*" ] ] } }, { "Action": [ "cloudformation:ListExports", "cloudformation:DescribeStacks" ], "Effect": "Allow", "Resource": "*" }, { "Action": [ "ecs:ListAccountSettings", "ecs:ListTasks", "ecs:ListClusters", "ecs:DescribeTasks", "ecs:DescribeClusters", "ecs:DescribeTaskDefinition" ], "Effect": "Allow", "Resource": "*" }, { "Action": "servicequotas:GetServiceQuota", "Effect": "Allow", "Resource": "*" } ], "Version": "2012-10-17" }, "PolicyName": "DLTAPIServicesLambdaPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "ecs:ListTasks and cloudformation:ListExports do not support resource level permissions" }, { "id": "F10", "reason": "requires in-line role permissions." } ] } } }, "DLTApiLambdaApiEventsPolicy63BB60C8": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "events:PutTargets", "events:PutRule", "events:DeleteRule", "events:RemoveTargets" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":events:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":rule/*Scheduled" ] ] }, { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":events:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":rule/*Create" ] ] } ] }, { "Action": "events:ListRules", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":events:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":rule/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTApiLambdaApiEventsPolicy63BB60C8", "Roles": [ { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTApiDLTAPIServicesLambdaNewF30B7DE0": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/da09b6ae7b5c9e5ff9ffa9c54adcb4cd802818aedb9e8f325ead257765c63d1e.zip" }, "Description": "API microservices for creating, updating, listing and deleting test scenarios", "Environment": { "Variables": { "HISTORY_TABLE": { "Ref": "DLTTestRunnerStorageDLTHistoryTable46D850CC" }, "HISTORY_TABLE_GSI_NAME": "testId-startTime-index", "METRIC_URL": "https://metrics.awssolutionsbuilder.com/generic", "SCENARIOS_BUCKET": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "SCENARIOS_TABLE": { "Ref": "DLTTestRunnerStorageDLTScenariosTableAB6F5C2A" }, "SOLUTION_ID": "SO0062", "STACK_ID": { "Ref": "AWS::StackId" }, "STACK_NAME": { "Ref": "AWS::StackName" }, "STATE_MACHINE_ARN": { "Ref": "DLTStepFunctionTaskRunnerStepFunctionsC295A535" }, "TASK_CANCELER_ARN": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancelerNewA6986F4A", "Arn" ] }, "UUID": { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] }, "VERSION": "v4.0.15" } }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaRole4465EAA4", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 120 }, "DependsOn": [ "DLTApiDLTAPIServicesLambdaRole4465EAA4" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "VPC not needed for lambda" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "DLTApiDLTAPIServicesLambdaNewDLTApiInvokePermission9CFC1132": { "Type": "AWS::Lambda::Permission", "Properties": { "Action": "lambda:InvokeFunction", "FunctionName": { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "Principal": "apigateway.amazonaws.com", "SourceArn": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":execute-api:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":", { "Ref": "DLTApi0C903EB5" }, "/*" ] ] } } }, "DLTApidltApiServicesLambdaLogGroup54338B12": { "Type": "AWS::Logs::LogGroup", "Properties": { "LogGroupName": { "Fn::Join": [ "", [ "/aws/lambda/", { "Ref": "DLTApiDLTAPIServicesLambdaNewF30B7DE0" } ] ] }, "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] } } }, "DLTApiLambdaApiPermissionPolicyE12EEC7D": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "lambda:AddPermission", "lambda:RemovePermission" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "DLTApiLambdaApiPermissionPolicyE12EEC7D", "Roles": [ { "Ref": "DLTApiDLTAPIServicesLambdaRole4465EAA4" } ] } }, "DLTApiAPILogsF7751EF3": { "Type": "AWS::Logs::LogGroup", "Properties": { "RetentionInDays": 3653 }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain", "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W84", "reason": "KMS encryption unnecessary for log group" } ] } } }, "DLTApiAPILoggingRole119E64B1": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "apigateway.amazonaws.com" } } ], "Version": "2012-10-17" }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:DescribeLogGroups", "logs:DescribeLogStreams", "logs:PutLogEvents", "logs:GetLogEvents", "logs:FilterLogEvent" ], "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":logs:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "apiLoggingPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "F10", "reason": "Requires inline policy resources." } ] } } }, "DLTApi0C903EB5": { "Type": "AWS::ApiGateway::RestApi", "Properties": { "Description": "Distributed Load Testing API - version v4.0.15", "EndpointConfiguration": { "Types": [ "EDGE" ] }, "Name": "DLTApi" } }, "DLTApiCloudWatchRoleD45E4DD6": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "apigateway.amazonaws.com" } } ], "Version": "2012-10-17" }, "ManagedPolicyArns": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::aws:policy/service-role/AmazonAPIGatewayPushToCloudWatchLogs" ] ] } ] }, "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain" }, "DLTApiAccount80CB63FF": { "Type": "AWS::ApiGateway::Account", "Properties": { "CloudWatchRoleArn": { "Fn::GetAtt": [ "DLTApiCloudWatchRoleD45E4DD6", "Arn" ] } }, "DependsOn": [ "DLTApi0C903EB5" ], "UpdateReplacePolicy": "Retain", "DeletionPolicy": "Retain" }, "DLTApiDeployment098FF8881cb11e76d80a229ce584d44e53c26d55": { "Type": "AWS::ApiGateway::Deployment", "Properties": { "Description": "Distributed Load Testing API - version v4.0.15", "RestApiId": { "Ref": "DLTApi0C903EB5" } }, "DependsOn": [ "DLTApiAPIAllRequestValidator02C9D47F", "DLTApiOPTIONS823B5F09", "DLTApiregionsANY2B8B3A61", "DLTApiregionsOPTIONSCB04B2B1", "DLTApiregionsC4EF9783", "DLTApiscenariostestIdANY993028D3", "DLTApiscenariostestIdbaselineDELETEF89F45B6", "DLTApiscenariostestIdbaselineGETEBD92F32", "DLTApiscenariostestIdbaselineOPTIONS18BF10ED", "DLTApiscenariostestIdbaselinePUT9B6A0CA8", "DLTApiscenariostestIdbaseline90D9E1E4", "DLTApiscenariostestIdOPTIONS0B339CE6", "DLTApiscenariostestId4C170989", "DLTApiscenariostestIdtestrunstestRunIdANYD6143F4D", "DLTApiscenariostestIdtestrunstestRunIdOPTIONSA0C3B203", "DLTApiscenariostestIdtestrunstestRunIdFE2B5E0B", "DLTApiscenariostestIdtestrunsANYA16D2CF8", "DLTApiscenariostestIdtestrunsOPTIONS12382689", "DLTApiscenariostestIdtestrunsA1B93897", "DLTApiscenariosANYDEF83622", "DLTApiscenariosOPTIONS6F514DA3", "DLTApiscenariosB6B76329", "DLTApistackinfoANY0BE2837B", "DLTApistackinfoOPTIONS883B8130", "DLTApistackinfo48B763A5", "DLTApitasksANY60403A44", "DLTApitasksOPTIONSDABED809", "DLTApitasks0A512C83", "DLTApivCPUDetailsANY4E680392", "DLTApivCPUDetailsOPTIONS8854EB1F", "DLTApivCPUDetailsABB0980D" ], "Metadata": { "aws:cdk:do-not-refactor": true, "cfn_nag": { "rules_to_suppress": [ { "id": "W68", "reason": "The solution does not require the usage plan." } ] } } }, "DLTApiDeploymentStageprodC81F8DCB": { "Type": "AWS::ApiGateway::Stage", "Properties": { "AccessLogSetting": { "DestinationArn": { "Fn::GetAtt": [ "DLTApiAPILogsF7751EF3", "Arn" ] }, "Format": "{\"requestId\":\"$context.requestId\",\"ip\":\"$context.identity.sourceIp\",\"user\":\"$context.identity.user\",\"caller\":\"$context.identity.caller\",\"requestTime\":\"$context.requestTime\",\"httpMethod\":\"$context.httpMethod\",\"resourcePath\":\"$context.resourcePath\",\"status\":\"$context.status\",\"protocol\":\"$context.protocol\",\"responseLength\":\"$context.responseLength\"}" }, "DeploymentId": { "Ref": "DLTApiDeployment098FF8881cb11e76d80a229ce584d44e53c26d55" }, "MethodSettings": [ { "DataTraceEnabled": false, "HttpMethod": "*", "LoggingLevel": "INFO", "ResourcePath": "/*" } ], "RestApiId": { "Ref": "DLTApi0C903EB5" }, "StageName": "prod", "TracingEnabled": true }, "DependsOn": [ "DLTApiAccount80CB63FF" ], "Metadata": { "guard": { "SuppressedRules": [ "API_GW_CACHE_ENABLED_AND_ENCRYPTED" ] }, "cfn_nag": { "rules_to_suppress": [ { "id": "W64", "reason": "The solution does not require the usage plan." } ] } } }, "DLTApiOPTIONS823B5F09": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiregionsC4EF9783": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "PathPart": "regions", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiregionsOPTIONSCB04B2B1": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiregionsC4EF9783" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiregionsANY2B8B3A61": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiregionsC4EF9783" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariosB6B76329": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "PathPart": "scenarios", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariosOPTIONS6F514DA3": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiscenariosB6B76329" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariosANYDEF83622": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariosB6B76329" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestId4C170989": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Ref": "DLTApiscenariosB6B76329" }, "PathPart": "{testId}", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdOPTIONS0B339CE6": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiscenariostestId4C170989" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdANY993028D3": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestId4C170989" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunsA1B93897": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Ref": "DLTApiscenariostestId4C170989" }, "PathPart": "testruns", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunsOPTIONS12382689": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiscenariostestIdtestrunsA1B93897" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunsANYA16D2CF8": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestIdtestrunsA1B93897" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunstestRunIdFE2B5E0B": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Ref": "DLTApiscenariostestIdtestrunsA1B93897" }, "PathPart": "{testRunId}", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunstestRunIdOPTIONSA0C3B203": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiscenariostestIdtestrunstestRunIdFE2B5E0B" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdtestrunstestRunIdANYD6143F4D": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestIdtestrunstestRunIdFE2B5E0B" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdbaseline90D9E1E4": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Ref": "DLTApiscenariostestId4C170989" }, "PathPart": "baseline", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdbaselineOPTIONS18BF10ED": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApiscenariostestIdbaseline90D9E1E4" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdbaselineGETEBD92F32": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "GET", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestIdbaseline90D9E1E4" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdbaselinePUT9B6A0CA8": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "PUT", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestIdbaseline90D9E1E4" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiscenariostestIdbaselineDELETEF89F45B6": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "DELETE", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApiscenariostestIdbaseline90D9E1E4" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApitasks0A512C83": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "PathPart": "tasks", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApitasksOPTIONSDABED809": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApitasks0A512C83" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApitasksANY60403A44": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApitasks0A512C83" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApivCPUDetailsABB0980D": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "PathPart": "vCPUDetails", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApivCPUDetailsOPTIONS8854EB1F": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApivCPUDetailsABB0980D" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApivCPUDetailsANY4E680392": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApivCPUDetailsABB0980D" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApistackinfo48B763A5": { "Type": "AWS::ApiGateway::Resource", "Properties": { "ParentId": { "Fn::GetAtt": [ "DLTApi0C903EB5", "RootResourceId" ] }, "PathPart": "stack-info", "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApistackinfoOPTIONS883B8130": { "Type": "AWS::ApiGateway::Method", "Properties": { "ApiKeyRequired": false, "AuthorizationType": "NONE", "HttpMethod": "OPTIONS", "Integration": { "IntegrationResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": "'Authorization,Content-Type,X-Amz-Date,X-Amz-Security-Token,X-Api-Key'", "method.response.header.Access-Control-Allow-Origin": "'*'", "method.response.header.Access-Control-Allow-Methods": "'DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT'" }, "StatusCode": "200" } ], "RequestTemplates": { "application/json": "{ statusCode: 200 }" }, "Type": "MOCK" }, "MethodResponses": [ { "ResponseParameters": { "method.response.header.Access-Control-Allow-Headers": true, "method.response.header.Access-Control-Allow-Origin": true, "method.response.header.Access-Control-Allow-Methods": true }, "StatusCode": "200" } ], "ResourceId": { "Ref": "DLTApistackinfo48B763A5" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApistackinfoANY0BE2837B": { "Type": "AWS::ApiGateway::Method", "Properties": { "AuthorizationType": "AWS_IAM", "HttpMethod": "ANY", "Integration": { "ContentHandling": "CONVERT_TO_TEXT", "IntegrationHttpMethod": "POST", "IntegrationResponses": [ { "StatusCode": "200" } ], "PassthroughBehavior": "WHEN_NO_MATCH", "Type": "AWS_PROXY", "Uri": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":apigateway:", { "Ref": "AWS::Region" }, ":lambda:path/2015-03-31/functions/", { "Fn::GetAtt": [ "DLTApiDLTAPIServicesLambdaNewF30B7DE0", "Arn" ] }, "/invocations" ] ] } }, "MethodResponses": [ { "ResponseModels": { "application/json": "Empty" }, "StatusCode": "200" } ], "RequestValidatorId": { "Ref": "DLTApiAPIAllRequestValidator02C9D47F" }, "ResourceId": { "Ref": "DLTApistackinfo48B763A5" }, "RestApiId": { "Ref": "DLTApi0C903EB5" } } }, "DLTApiApiAccountConfigBF306CC3": { "Type": "AWS::ApiGateway::Account", "Properties": { "CloudWatchRoleArn": { "Fn::GetAtt": [ "DLTApiAPILoggingRole119E64B1", "Arn" ] } }, "DependsOn": [ "DLTApi0C903EB5" ] }, "DLTApiAPIAllRequestValidator02C9D47F": { "Type": "AWS::ApiGateway::RequestValidator", "Properties": { "RestApiId": { "Ref": "DLTApi0C903EB5" }, "ValidateRequestBody": true, "ValidateRequestParameters": true } }, "DLTCognitoAuthIoTPolicyB8FDFE53": { "Type": "AWS::IoT::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "iot:Connect", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":client/*" ] ] } }, { "Action": "iot:Subscribe", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":topicfilter/*" ] ] } }, { "Action": "iot:Receive", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":topic/*" ] ] } } ], "Version": "2012-10-17" } }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "Cannot specify the resource to attach policy to identity" } ] } } }, "DLTCognitoAuthDLTUserPoolFA41A712": { "Type": "AWS::Cognito::UserPool", "Properties": { "AccountRecoverySetting": { "RecoveryMechanisms": [ { "Name": "verified_phone_number", "Priority": 1 }, { "Name": "verified_email", "Priority": 2 } ] }, "AdminCreateUserConfig": { "AllowAdminCreateUserOnly": true, "InviteMessageTemplate": { "EmailMessage": { "Fn::Join": [ "", [ "\n

\n Please use the credentials below to login to the Distributed Load Testing console.\n

\n

\n Username: {username}\n

\n

\n Password: {####}\n

\n

\n Console: https://", { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3CloudFrontDistribution1F11B8BB", "DomainName" ] }, "/\n

\n " ] ] }, "EmailSubject": "Welcome to Distributed Load Testing", "SMSMessage": "Your username is {username} and temporary password is {####}." } }, "AliasAttributes": [ "email" ], "AutoVerifiedAttributes": [ "email" ], "EmailVerificationMessage": "The verification code to your new account is {####}", "EmailVerificationSubject": "Verify your new account", "Policies": { "PasswordPolicy": { "MinimumLength": 12, "RequireLowercase": true, "RequireNumbers": true, "RequireSymbols": true, "RequireUppercase": true } }, "Schema": [ { "Mutable": true, "Name": "email", "Required": true } ], "SmsVerificationMessage": "The verification code to your new account is {####}", "UserPoolAddOns": { "AdvancedSecurityMode": "ENFORCED" }, "UserPoolName": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-user-pool" ] ] }, "VerificationMessageTemplate": { "DefaultEmailOption": "CONFIRM_WITH_CODE", "EmailMessage": "The verification code to your new account is {####}", "EmailSubject": "Verify your new account", "SmsMessage": "The verification code to your new account is {####}" } }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "DLTCognitoAuthDLTUserPoolClientA2F8B2DB": { "Type": "AWS::Cognito::UserPoolClient", "Properties": { "AllowedOAuthFlows": [ "implicit", "code" ], "AllowedOAuthFlowsUserPoolClient": true, "AllowedOAuthScopes": [ "profile", "phone", "email", "openid", "aws.cognito.signin.user.admin" ], "CallbackURLs": [ "https://example.com" ], "ClientName": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-userpool-client" ] ] }, "GenerateSecret": false, "RefreshTokenValidity": 1440, "SupportedIdentityProviders": [ "COGNITO" ], "TokenValidityUnits": { "RefreshToken": "minutes" }, "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" }, "WriteAttributes": [ "address", "email", "phone_number" ] } }, "DLTCognitoAuthDLTIdentityPoolE110578F": { "Type": "AWS::Cognito::IdentityPool", "Properties": { "AllowUnauthenticatedIdentities": false, "CognitoIdentityProviders": [ { "ClientId": { "Ref": "DLTCognitoAuthDLTUserPoolClientA2F8B2DB" }, "ProviderName": { "Fn::GetAtt": [ "DLTCognitoAuthDLTUserPoolFA41A712", "ProviderName" ] } } ] } }, "DLTCognitoAuthDLTCognitoAuthorizedRole9977D4DC": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRoleWithWebIdentity", "Condition": { "StringEquals": { "cognito-identity.amazonaws.com:aud": { "Ref": "DLTCognitoAuthDLTIdentityPoolE110578F" } }, "ForAnyValue:StringLike": { "cognito-identity.amazonaws.com:amr": "authenticated" } }, "Effect": "Allow", "Principal": { "Federated": "cognito-identity.amazonaws.com" } } ], "Version": "2012-10-17" }, "Description": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, " Identity Pool authenticated role" ] ] }, "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "execute-api:Invoke", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":execute-api:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":", { "Ref": "DLTApi0C903EB5" }, "/prod/*" ] ] } }, { "Action": [ "s3:PutObject", "s3:GetObject" ], "Effect": "Allow", "Resource": [ { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/public/*" ] ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/cloudWatchImages/*" ] ] } ] }, { "Action": "s3:GetObject", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] }, "/results/*" ] ] } }, { "Action": "s3:ListBucket", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTTestRunnerStorageDLTScenariosBucketA9290D21", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "InvokeApiPolicy" }, { "PolicyDocument": { "Statement": [ { "Action": "iot:AttachPolicy", "Effect": "Allow", "Resource": "*" }, { "Action": "iot:Connect", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":client/*" ] ] } }, { "Action": "iot:Subscribe", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":topicfilter/*" ] ] } }, { "Action": "iot:Receive", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iot:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":topic/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "IoTPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W11", "reason": "iot:AttachPolicy does not allow for resource specification" }, { "id": "F10", "reason": "requires inline policies" } ] } } }, "DLTCognitoAuthDLTCognitoUnauthorizedRole6FC43D42": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRoleWithWebIdentity", "Condition": { "StringEquals": { "cognito-identity.amazonaws.com:aud": { "Ref": "DLTCognitoAuthDLTIdentityPoolE110578F" } }, "ForAnyValue:StringLike": { "cognito-identity.amazonaws.com:amr": "unauthenticated" } }, "Effect": "Allow", "Principal": { "Federated": "cognito-identity.amazonaws.com" } } ], "Version": "2012-10-17" } } }, "DLTCognitoAuthCognitoAttachRole8337C7A4": { "Type": "AWS::Cognito::IdentityPoolRoleAttachment", "Properties": { "IdentityPoolId": { "Ref": "DLTCognitoAuthDLTIdentityPoolE110578F" }, "Roles": { "unauthenticated": { "Fn::GetAtt": [ "DLTCognitoAuthDLTCognitoUnauthorizedRole6FC43D42", "Arn" ] }, "authenticated": { "Fn::GetAtt": [ "DLTCognitoAuthDLTCognitoAuthorizedRole9977D4DC", "Arn" ] } } } }, "DLTCognitoAuthCognitoUser8FAEDC59": { "Type": "AWS::Cognito::UserPoolUser", "Properties": { "DesiredDeliveryMediums": [ "EMAIL" ], "ForceAliasCreation": true, "UserAttributes": [ { "Name": "email", "Value": { "Ref": "AdminEmail" } }, { "Name": "nickname", "Value": { "Ref": "AdminName" } }, { "Name": "email_verified", "Value": "true" } ], "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" }, "Username": { "Ref": "AdminName" } } }, "WebUIConfigAwsExportsLambdaServiceRole3CBAA391": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "ManagedPolicyArns": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" ] ] } ] } }, "WebUIConfigAwsExportsLambdaServiceRoleDefaultPolicy95005C3A": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "s3:DeleteObject*", "s3:PutObject", "s3:PutObjectLegalHold", "s3:PutObjectRetention", "s3:PutObjectTagging", "s3:PutObjectVersionTagging", "s3:Abort*" ], "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB", "Arn" ] }, "/*" ] ] } ] } ], "Version": "2012-10-17" }, "PolicyName": "WebUIConfigAwsExportsLambdaServiceRoleDefaultPolicy95005C3A", "Roles": [ { "Ref": "WebUIConfigAwsExportsLambdaServiceRole3CBAA391" } ] } }, "WebUIConfigAwsExportsLambda23D68C33": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/1e0fa919b5045a670fb235314613f63817dc5d0f0c8754f1bd501f3ef14afd75.zip" }, "Handler": "index.handler", "Role": { "Fn::GetAtt": [ "WebUIConfigAwsExportsLambdaServiceRole3CBAA391", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 300 }, "DependsOn": [ "WebUIConfigAwsExportsLambdaServiceRoleDefaultPolicy95005C3A", "WebUIConfigAwsExportsLambdaServiceRole3CBAA391" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W89", "reason": "Lambda function created by BucketDeployment does not need to be in a VPC as it only copies files to S3" }, { "id": "W92", "reason": "Lambda function created by BucketDeployment is temporary and does not need reserved concurrency" } ] } } }, "WebUIConfigAwsExportsProviderframeworkonEventServiceRole51132DE1": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "ManagedPolicyArns": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" ] ] } ] } }, "WebUIConfigAwsExportsProviderframeworkonEventServiceRoleDefaultPolicy73DCEB49": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": [ { "Fn::GetAtt": [ "WebUIConfigAwsExportsLambda23D68C33", "Arn" ] }, { "Fn::Join": [ "", [ { "Fn::GetAtt": [ "WebUIConfigAwsExportsLambda23D68C33", "Arn" ] }, ":*" ] ] } ] }, { "Action": "lambda:GetFunction", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "WebUIConfigAwsExportsLambda23D68C33", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "WebUIConfigAwsExportsProviderframeworkonEventServiceRoleDefaultPolicy73DCEB49", "Roles": [ { "Ref": "WebUIConfigAwsExportsProviderframeworkonEventServiceRole51132DE1" } ] } }, "WebUIConfigAwsExportsProviderframeworkonEvent3844415C": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/07a90cc3efdfc34da22208dcd9d211f06f5b0e01b21e778edc7c3966b1f61d57.zip" }, "Description": "AWS CDK resource provider framework - onEvent (distributed-load-testing-on-aws/WebUIConfig/AwsExportsProvider)", "Environment": { "Variables": { "USER_ON_EVENT_FUNCTION_ARN": { "Fn::GetAtt": [ "WebUIConfigAwsExportsLambda23D68C33", "Arn" ] } } }, "Handler": "framework.onEvent", "LoggingConfig": { "ApplicationLogLevel": "FATAL", "LogFormat": "JSON" }, "Role": { "Fn::GetAtt": [ "WebUIConfigAwsExportsProviderframeworkonEventServiceRole51132DE1", "Arn" ] }, "Runtime": "nodejs22.x", "Timeout": 900 }, "DependsOn": [ "WebUIConfigAwsExportsProviderframeworkonEventServiceRoleDefaultPolicy73DCEB49", "WebUIConfigAwsExportsProviderframeworkonEventServiceRole51132DE1" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W89", "reason": "Lambda function created by BucketDeployment does not need to be in a VPC as it only copies files to S3" }, { "id": "W92", "reason": "Lambda function created by BucketDeployment is temporary and does not need reserved concurrency" } ] } } }, "WebUIConfigAwsExportsCustomResource4C4BFB8F": { "Type": "AWS::CloudFormation::CustomResource", "Properties": { "ServiceToken": { "Fn::GetAtt": [ "WebUIConfigAwsExportsProviderframeworkonEvent3844415C", "Arn" ] }, "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" }, "PoolClientId": { "Ref": "DLTCognitoAuthDLTUserPoolClientA2F8B2DB" }, "IdentityPoolId": { "Ref": "DLTCognitoAuthDLTIdentityPoolE110578F" }, "ApiEndpoint": { "Fn::Join": [ "", [ "https://", { "Ref": "DLTApi0C903EB5" }, ".execute-api.", { "Ref": "AWS::Region" }, ".", { "Ref": "AWS::URLSuffix" }, "/", { "Ref": "DLTApiDeploymentStageprodC81F8DCB" } ] ] }, "BucketName": { "Ref": "DLTConsoleResourcesDLTDashboardS3S3Bucket8E2568BB" }, "ObjectKey": "aws-exports.json", "UserFilesBucket": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "UserFilesBucketRegion": { "Ref": "AWS::Region" }, "IoTEndpoint": { "Fn::GetAtt": [ "DLTCustomResourcesGetIotEndpoint700ABCC8", "IOT_ENDPOINT" ] }, "IoTPolicy": { "Ref": "DLTCognitoAuthIoTPolicyB8FDFE53" } }, "UpdateReplacePolicy": "Delete", "DeletionPolicy": "Delete" }, "MCPServerDLTResourceServerF9088637": { "Type": "AWS::Cognito::UserPoolResourceServer", "Properties": { "Identifier": "dlt-mcp-gateway", "Name": "DLT MCP Gateway Resource Server", "Scopes": [ { "ScopeDescription": "Read access", "ScopeName": "read" } ], "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" } }, "Condition": "DeployMCPServerCondition" }, "MCPServerDLTUserPoolDomainA26D16C0": { "Type": "AWS::Cognito::UserPoolDomain", "Properties": { "Domain": { "Fn::Join": [ "", [ "dlt-", { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] } ] ] }, "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" } }, "Condition": "DeployMCPServerCondition" }, "MCPServerDLTUserPoolClientMachineToMachineF3DA2105": { "Type": "AWS::Cognito::UserPoolClient", "Properties": { "AllowedOAuthFlows": [ "client_credentials" ], "AllowedOAuthFlowsUserPoolClient": true, "AllowedOAuthScopes": [ { "Fn::Join": [ "", [ { "Ref": "MCPServerDLTResourceServerF9088637" }, "/read" ] ] } ], "ClientName": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-userpool-client-m2m" ] ] }, "ExplicitAuthFlows": [ "ALLOW_REFRESH_TOKEN_AUTH" ], "GenerateSecret": true, "RefreshTokenValidity": 1440, "SupportedIdentityProviders": [ "COGNITO" ], "TokenValidityUnits": { "RefreshToken": "minutes" }, "UserPoolId": { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" } }, "DependsOn": [ "MCPServerDLTResourceServerF9088637" ], "Condition": "DeployMCPServerCondition" }, "MCPServerMCPToolLambdaRole83B130EC": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "Description": "IAM role for MCP Tool Lambda function", "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "execute-api:Invoke", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":execute-api:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":", { "Ref": "DLTApi0C903EB5" }, "/*/GET/*" ] ] } }, { "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents" ], "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":logs:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":log-group:/aws/lambda/*" ] ] } } ], "Version": "2012-10-17" }, "PolicyName": "MCPLambdaPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "F10", "reason": "requires in-line role permissions." } ] } }, "Condition": "DeployMCPServerCondition" }, "MCPServerMCPToolLambdaFunctionA0B6CA8F": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/9b055bca24e8c5018f7e7dbcb28dc8aa985cf561662bf064cb23875a3cee75dd.zip" }, "Description": "MCP Tool Lambda Function", "Environment": { "Variables": { "API_GATEWAY_ENDPOINT": { "Fn::Join": [ "", [ "https://", { "Ref": "DLTApi0C903EB5" }, ".execute-api.", { "Ref": "AWS::Region" }, ".", { "Ref": "AWS::URLSuffix" }, "/", { "Ref": "DLTApiDeploymentStageprodC81F8DCB" } ] ] }, "SCENARIOS_BUCKET_NAME": { "Ref": "DLTTestRunnerStorageDLTScenariosBucketA9290D21" }, "SOLUTION_ID": "SO0062", "VERSION": "v4.0.15", "UUID": { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] }, "METRIC_URL": "https://metrics.awssolutionsbuilder.com/generic" } }, "Handler": "index.handler", "MemorySize": 512, "Role": { "Fn::GetAtt": [ "MCPServerMCPToolLambdaRole83B130EC", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 60 }, "DependsOn": [ "MCPServerMCPToolLambdaRole83B130EC" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W89", "reason": "VPC not needed for lambda" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } }, "Condition": "DeployMCPServerCondition" }, "MCPServerAgentCoreGatewayRole50366203": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "bedrock-agentcore.amazonaws.com" } } ], "Version": "2012-10-17" }, "Description": "IAM role for AgentCore Gateway", "Policies": [ { "PolicyDocument": { "Statement": [ { "Action": "bedrock-agentcore:GetGateway", "Effect": "Allow", "Resource": { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":bedrock-agentcore:", { "Ref": "AWS::Region" }, ":", { "Ref": "AWS::AccountId" }, ":gateway/dlt-mcp-server" ] ] } }, { "Action": "lambda:InvokeFunction", "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "MCPServerMCPToolLambdaFunctionA0B6CA8F", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "AgentCoreGatewayPolicy" } ] }, "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "F10", "reason": "requires in-line role permissions." } ] } }, "Condition": "DeployMCPServerCondition" }, "MCPServerAgentCoreGatewayConstructDltAgentCoreGatewayDBEF1612": { "Type": "AWS::BedrockAgentCore::Gateway", "Properties": { "AuthorizerConfiguration": { "CustomJWTAuthorizer": { "AllowedClients": [ { "Ref": "DLTCognitoAuthDLTUserPoolClientA2F8B2DB" }, { "Ref": "MCPServerDLTUserPoolClientMachineToMachineF3DA2105" } ], "DiscoveryUrl": { "Fn::Join": [ "", [ "https://cognito-idp.", { "Ref": "AWS::Region" }, ".amazonaws.com/", { "Ref": "DLTCognitoAuthDLTUserPoolFA41A712" }, "/.well-known/openid-configuration" ] ] } } }, "AuthorizerType": "CUSTOM_JWT", "Description": "DLT MCP Server managed by AgentCore Gateway", "Name": "dlt-mcp-server", "ProtocolType": "MCP", "RoleArn": { "Fn::GetAtt": [ "MCPServerAgentCoreGatewayRole50366203", "Arn" ] } }, "Condition": "DeployMCPServerCondition" }, "MCPServerAgentCoreGatewayTargetConstructDltAgentCoreGatewayTarget40580AC0": { "Type": "AWS::BedrockAgentCore::GatewayTarget", "Properties": { "CredentialProviderConfigurations": [ { "CredentialProviderType": "GATEWAY_IAM_ROLE" } ], "Description": "Tool provider for DLT MCP server", "GatewayIdentifier": { "Fn::GetAtt": [ "MCPServerAgentCoreGatewayConstructDltAgentCoreGatewayDBEF1612", "GatewayIdentifier" ] }, "Name": "DltMcpToolsLambda", "TargetConfiguration": { "Mcp": { "Lambda": { "LambdaArn": { "Fn::GetAtt": [ "MCPServerMCPToolLambdaFunctionA0B6CA8F", "Arn" ] }, "ToolSchema": { "InlinePayload": [ { "Description": "Retrieve a list of all available test scenarios", "InputSchema": { "Required": [], "Type": "object" }, "Name": "list_scenarios" }, { "Description": "Retrieve the test configuration and most recent test run for a single test scenario", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" } }, "Required": [ "test_id" ], "Type": "object" }, "Name": "get_scenario_details" }, { "Description": "Retrieve a list of test runs for a specific test scenario, sorted newest to oldest. More detailed results for a test run can be retrieved with \"get_test_run\". Note: Only one of 'limit' or 'start_timestamp' may be provided, not both. There is a maximum limit of 30 test runs returned.", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" }, "limit": { "Description": "The maximum number of test runs to return (e.g. if I want the 10 most recent test runs, set the limit to 10). Cannot be used with start_timestamp parameter. Must be a positive integer. Default value is 20 and maximum limit is 30.", "Type": "integer" }, "start_timestamp": { "Description": "Return all test runs going back to start_timestamp. The date must be in ISO 8601 timestamp format (e.g. '2024-01-15T14:30:00.000Z'). Cannot be used with limit parameter. Date format is strictly validated. There is a limit of 30 test runs that can be returned.", "Type": "string" } }, "Required": [ "test_id" ], "Type": "object" }, "Name": "list_test_runs" }, { "Description": "Retrieve a single test run for a specific test scenario. Results will be provided with a breakdown 1/ for each region (e.g. \"us-east-1\", \"us-west-2\") that the test runs in as well as an aggregate \"total\" 2/ for each endpoint (referred to as \"label\").", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" }, "test_run_id": { "Description": "The test run's unique identifier", "Type": "string" } }, "Required": [ "test_id", "test_run_id" ], "Type": "object" }, "Name": "get_test_run" }, { "Description": "Retrieve the most recent test run for a specific test scenario", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" } }, "Required": [ "test_id" ], "Type": "object" }, "Name": "get_latest_test_run" }, { "Description": "Retrieve the baseline test run for a specific test scenario. Users are able to set a baseline run for comparisons", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" } }, "Required": [ "test_id" ], "Type": "object" }, "Name": "get_baseline_test_run" }, { "Description": "Retrieve the S3 bucket name and path prefix for test run output (logs, error files, results, etc). Starting in v4.0.0, each test run's artifacts will have a unique path that includes a concatenated prefix of timestamp + test run id (\"testRunPath\" in the response object). Test runs prior to v4.0.0 will live in a shared path without clear separation (\"testScenarioPath\" in the response object). If \"testRunPath\" has no objects, try falling back to \"testScenarioPath\" for the legacy artifact storage behavior.", "InputSchema": { "Properties": { "test_id": { "Description": "The test scenario's unique identifier", "Type": "string" }, "test_run_id": { "Description": "The test run's unique identifier", "Type": "string" } }, "Required": [ "test_id", "test_run_id" ], "Type": "object" }, "Name": "get_test_run_artifacts" } ] } } } } }, "DependsOn": [ "MCPServerAgentCoreGatewayConstructDltAgentCoreGatewayDBEF1612" ], "Condition": "DeployMCPServerCondition" }, "SolutionMetricsNewMetricsLambdaServiceRole3196BDF4": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Statement": [ { "Action": "sts:AssumeRole", "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" } } ], "Version": "2012-10-17" }, "ManagedPolicyArns": [ { "Fn::Join": [ "", [ "arn:", { "Ref": "AWS::Partition" }, ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole" ] ] } ] } }, "SolutionMetricsNewMetricsLambdaServiceRoleDefaultPolicy3AE130AC": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyDocument": { "Statement": [ { "Action": [ "sqs:SendMessage", "sqs:GetQueueAttributes", "sqs:GetQueueUrl" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "SolutionMetricsNewLambdaToSqsToLambdalambdatosqsqueue2170C89E", "Arn" ] } }, { "Action": [ "sqs:ReceiveMessage", "sqs:ChangeMessageVisibility", "sqs:GetQueueUrl", "sqs:DeleteMessage", "sqs:GetQueueAttributes" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "SolutionMetricsNewLambdaToSqsToLambdalambdatosqsqueue2170C89E", "Arn" ] } }, { "Action": "cloudwatch:GetMetricData", "Effect": "Allow", "Resource": "*" }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskRunnerLambdaLogGroupF801BE82", "Arn" ] } }, { "Action": "logs:DescribeQueryDefinitions", "Effect": "Allow", "Resource": "*" }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "RealTimeDataRealTimeDataPublisherLogGroup3FE55F9A", "Arn" ] } }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctionResultsParserLambdaLogGroupADF0ADEA", "Arn" ] } }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctionTaskCancellerLambdaLogGroupBD1D284E", "Arn" ] } }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctiontaskStatusCheckerLambdaLogGroup1988969D", "Arn" ] } }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTLambdaFunctionMetricFilterCleanerLambdaLogGroupFC5FA57A", "Arn" ] } }, { "Action": [ "logs:StartQuery", "logs:GetQueryResults" ], "Effect": "Allow", "Resource": { "Fn::GetAtt": [ "DLTApidltApiServicesLambdaLogGroup54338B12", "Arn" ] } } ], "Version": "2012-10-17" }, "PolicyName": "SolutionMetricsNewMetricsLambdaServiceRoleDefaultPolicy3AE130AC", "Roles": [ { "Ref": "SolutionMetricsNewMetricsLambdaServiceRole3196BDF4" } ] } }, "SolutionMetricsNewMetricsLambda2B1B8902": { "Type": "AWS::Lambda::Function", "Properties": { "Code": { "S3Bucket": { "Fn::Sub": "solutions-${AWS::Region}" }, "S3Key": "distributed-load-testing-on-aws/v4.0.15/f102cbe89f257cba7b5250ebf33c510a8e35809a7e91f0975dbbca7584493f2d.zip" }, "Description": "Metrics util", "Environment": { "Variables": { "QUERY_PREFIX": { "Fn::Join": [ "", [ { "Ref": "AWS::StackName" }, "-" ] ] }, "SOLUTION_ID": "SO0062", "SOLUTION_NAME": "distributed-load-testing-on-aws", "SOLUTION_VERSION": "custom-v4.0.15", "UUID": { "Fn::GetAtt": [ "DLTCustomResourcesCustomResourceUuidD1C03F15", "UUID" ] }, "EXECUTION_DAY": "MON", "SQS_QUEUE_URL": { "Ref": "SolutionMetricsNewLambdaToSqsToLambdalambdatosqsqueue2170C89E" } } }, "Handler": "index.handler", "MemorySize": 128, "Role": { "Fn::GetAtt": [ "SolutionMetricsNewMetricsLambdaServiceRole3196BDF4", "Arn" ] }, "Runtime": "nodejs24.x", "Timeout": 60 }, "DependsOn": [ "SolutionMetricsNewMetricsLambdaServiceRoleDefaultPolicy3AE130AC", "SolutionMetricsNewMetricsLambdaServiceRole3196BDF4" ], "Metadata": { "cfn_nag": { "rules_to_suppress": [ { "id": "W58", "reason": "CloudWatchLogsPolicy covers a permission to write CloudWatch logs." }, { "id": "W89", "reason": "This Lambda function does not require a VPC" }, { "id": "W92", "reason": "Does not run concurrent executions" } ] } } }, "SolutionMetricsNewMetricsLambdaAwsEventsLambdaInvokePermission1458D855B": { "Type": "AWS::Lambda::Permission", "Properties": { "Action": "lambda:InvokeFunction", "FunctionName": { "Fn::GetAtt": [ "SolutionMetricsNewMetricsLambda2B1B8902", "Arn" ] }, "Principal": "events.amazonaws.com", "SourceArn": { "Fn::GetAtt": [ "SolutionMetricsNewEventbridgeRuleToLambdaEventsRuleBB9E5FFD", "Arn" ] } } }, "SolutionMetricsNewMetricsLambdaSqsEventSourcedistributedloadtestingonawsSolutionMetricsNewLambdaToSqsToLambdalambdatosqsqueue7D711FD8ACD4B87F": { "Type": "AWS::Lambda::EventSourceMapping", "Properties": { "EventSourceArn": { "Fn::GetAtt": [ "SolutionMetricsNewLambdaToSqsToLambdalambdatosqsqueue2170C89E", "Arn" ] }, "FunctionName": { "Ref": "SolutionMetricsNewMetricsLambda2B1B8902" } } }, "SolutionMetricsNewEventbridgeRuleToLambdaEventsRuleBB9E5FFD": { "Type": "AWS::Events::Rule", "Properties": { "ScheduleExpression": "cron(0 23 ? * MON *)", "State": "ENABLED", "Targets": [ { "Arn": { "Fn::GetAtt": [ "SolutionMetricsNewMetricsLambda2B1B8902", "Arn" ] }, "Id": "Target0", "InputTransformer": { "InputPathsMap": { "time": "$.time", "detail-type": "$.detail-type" }, "InputTemplate": { "Fn::Join": [ "", [ "{\"detail-type\": , \"time\":