Security Stack

Setting up security stack

This Stack will have all the security components for our AWS CDK project.

Check if you are on the right directory:

ls

mkdir security_stack
code security_stack/security_stack.py

Code for security_stack.py:

from aws_cdk import aws_ec2 as ec2, Stack
from constructs import Construct 

class SecurityStack(Stack):
    def __init__(
            self,
            scope: Construct,
            id: str,
            vpc_name: str,
            **kwargs,
    ) -> None:
        super().__init__(scope, id, **kwargs)

• Notice the “Stack” in SecurityStack(Stack). That mean we define a class which is securityStack and we extend it with Stack library (Which we imported). So the class inherited the attribute of the Stack class.
• the vpc_name: str is the argument that we will use to create a VPC later on, which will be the VPC name that we’ll creating.

VPC Creation

VPC is Virtual Private Cloud. It offers a lot of security, so when the EMR Cluster run, it will be running in this VPC, and nothing can access it , unless you have permission to do so (We will go over it later on)

#VPC Creation
        vpc = ec2.Vpc(
            self,
            vpc_name,
            nat_gateways=0,
            subnet_configuration=[
                ec2.SubnetConfiguration(
                    name=vpc_name,
                    subnet_type=ec2.SubnetType.PUBLIC,
                )
            ]

        )