Class AwsDirectDeployer

java.lang.Object

com.cloudforgeci.api.deploy.aws.AwsDirectDeployer

All Implemented Interfaces:

AutoCloseable

public final class AwsDirectDeployer
extends Object
implements AutoCloseable

Creates and incrementally updates CloudFormation stacks on real AWS via change sets.

Backs CloudForgeDeployment's AWS case — the direct-deploy counterpart to LocalStackDeployer/MiniStackDeployer, minus everything specific to emulating AWS locally (no LocalStack Cognito/RDS-secret reconciliation, no ECS-restart-after-secret-sync — real AWS Cognito/RDS integrate through CDK's own Secrets Manager wiring and need none of that).

Targets real AWS by default, but transparently redirects to a local emulator when *Manager itself* is running inside one — same LOCALSTACK_ENDPOINT/ AWS_ENDPOINT_URL env-var detection LocalStackDeployer.resolveEndpoint() already uses, deliberately mirrored here rather than left real-AWS-only — without an endpoint override, a deploy:create click from a Manager instance hosted on LocalStack would try to reach cloudformation.us-east-1.amazonaws.com instead of the local emulator it's actually running against.

Every stack this deployer creates or updates is tagged with the same cloudforge:managed/cloudforge:application/cloudforge:runtime convention ApplicationFargateStack/ApplicationEc2Stack apply via Tags.of(this).add(...) at synthesis time — required both for Manager's own AWS inventory (see StackListingPolicy) and for the aws:RequestTag/ aws:ResourceTag IAM conditions ManagerOperatorIamSupport.deployStatements scopes CreateStack/UpdateStack to. Those conditions evaluate the stack-level Tags parameter on the CloudFormation API call itself, not any resource-level tags already baked into the template by the CDK Tags aspect — the two are separate CloudFormation tagging mechanisms, and only the former is what this class controls.

Not exercised against real AWS in this repo's test suite — no AWS credentials are available in CI/dev sandboxes for that. AwsDirectDeployerTest instead points this class at a real LocalStack instance via the injectable-client constructor (LocalStack is CloudFormation-API-compatible), which exercises every code path except real AWS's actual network/auth surface. Treat a real AWS deploy as the first true end-to-end validation of this class specifically — the underlying changeset create/execute/wait sequence is otherwise a close copy of LocalStackDeployer's, which has been exercised that way for a while.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	TAG_APPLICATION
static final String	TAG_MANAGED
static final String	TAG_RUNTIME
static final String	TEMPLATE_BUCKET_PREFIX	Shared with ManagerOperatorIamSupport's S3 grant for this bucket — keep the two in sync rather than duplicating the literal.

Constructor Summary

Constructors

Constructor	Description
AwsDirectDeployer(DeploymentConfig config, DeploymentTarget target)	Real AWS by default (default credential/region chain, region from config.region); redirects to a local emulator instead when target is DeploymentTarget.LOCALSTACK/ DeploymentTarget.MINISTACK and ManagerEndpointSupport.resolveLocalEmulatorEndpoint(DeploymentTarget) finds one — see class javadoc.
AwsDirectDeployer(DeploymentConfig config, DeploymentTarget target, software.amazon.awssdk.auth.credentials.AwsCredentialsProvider credentialsOverride)	Same as AwsDirectDeployer(DeploymentConfig, DeploymentTarget), but with an explicit credentials provider to use for real-AWS calls instead of the default chain — e.g.

Method Summary

Modifier and Type	Method	Description
void	close()
void	delete(String stackName)
AwsStackDeployResult	deploy(String stackName, Path template)	Creates or updates stackName from template via a change set.
Map<String,String>	outputs(String stackName)
boolean	stackExists(String stackName)
Map<String,String>	verifyDeployment(String stackName)	Confirm the stack exists and return its outputs.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

TEMPLATE_BUCKET_PREFIX

public static final String TEMPLATE_BUCKET_PREFIX

Shared with ManagerOperatorIamSupport's S3 grant for this bucket — keep the two in sync rather than duplicating the literal.

See Also:

• Constant Field Values

TAG_MANAGED

public static final String TAG_MANAGED

See Also:

• Constant Field Values

TAG_APPLICATION

public static final String TAG_APPLICATION

See Also:

• Constant Field Values

TAG_RUNTIME

public static final String TAG_RUNTIME

See Also:

• Constant Field Values

Constructor Details

AwsDirectDeployer

public AwsDirectDeployer(DeploymentConfig config,
 DeploymentTarget target)

Real AWS by default (default credential/region chain, region from config.region); redirects to a local emulator instead when target is DeploymentTarget.LOCALSTACK/ DeploymentTarget.MINISTACK and ManagerEndpointSupport.resolveLocalEmulatorEndpoint(DeploymentTarget) finds one — see class javadoc. target must be the caller's own already-known, validated target (never re-derived from env vars here — see that method's own javadoc for why). Equivalent to AwsDirectDeployer(config, target, null).

AwsDirectDeployer

public AwsDirectDeployer(DeploymentConfig config,
 DeploymentTarget target,
 software.amazon.awssdk.auth.credentials.AwsCredentialsProvider credentialsOverride)

Same as AwsDirectDeployer(DeploymentConfig, DeploymentTarget), but with an explicit credentials provider to use for real-AWS calls instead of the default chain — e.g. a caller that assumed a cross-account IAM role and wants this deployer to act as that principal. null means "use the default credential chain," exactly AwsDirectDeployer(DeploymentConfig, DeploymentTarget)'s only prior behavior.

Ignored when target resolves to a local emulator — a real AssumeRole against LocalStack/MiniStack is meaningless, so the fixed test/test static credentials still win in that case, unchanged from before this overload existed.

Method Details

deploy

public AwsStackDeployResult deploy(String stackName,
 Path template)
                            throws IOException

Creates or updates stackName from template via a change set. No-op (returns noOp = true) when the stack already matches the candidate template.

Throws:

IOException

delete

public void delete(String stackName)
            throws IOException

Throws:

IOException

stackExists

public boolean stackExists(String stackName)

outputs

public Map<String,String> outputs(String stackName)

verifyDeployment

public Map<String,String> verifyDeployment(String stackName)
                                    throws IOException

Confirm the stack exists and return its outputs.

Throws:

IOException - when the stack is missing or outputs cannot be read

close

public void close()

Specified by:

close in interface AutoCloseable