Adding support for KMS in StateMachine and Activity resources

aws · Aug 7, 2024 · a3fecf0 · a3fecf0
1 parent f9b5d7a
commit a3fecf0
Show file tree

Hide file tree

Showing 23 changed files with 1,647 additions and 322 deletions.
diff --git a/...chineAndActivityWithAOKEncryptionConfigurationDefaultTestDeployAssert7B5CA61B.assets.json b/...chineAndActivityWithAOKEncryptionConfigurationDefaultTestDeployAssert7B5CA61B.assets.json
diff --git a/...ineAndActivityWithAOKEncryptionConfigurationDefaultTestDeployAssert7B5CA61B.template.json b/...ineAndActivityWithAOKEncryptionConfigurationDefaultTestDeployAssert7B5CA61B.template.json
diff --git a/...napshot/aws-stepfunctions-statemachine-and-activity-with-aok-encryptionconfig.assets.json b/...napshot/aws-stepfunctions-statemachine-and-activity-with-aok-encryptionconfig.assets.json
diff --git a/...pshot/aws-stepfunctions-statemachine-and-activity-with-aok-encryptionconfig.template.json b/...pshot/aws-stepfunctions-statemachine-and-activity-with-aok-encryptionconfig.template.json
@@ -0,0 +1,86 @@
+{
+ "Resources": {
+  "StateMachineWithAOKEncryptionConfigurationRoleA5E4221F": {
+   "Type": "AWS::IAM::Role",
+   "Properties": {
+    "AssumeRolePolicyDocument": {
+     "Statement": [
+      {
+       "Action": "sts:AssumeRole",
+       "Effect": "Allow",
+       "Principal": {
+        "Service": "states.amazonaws.com"
+       }
+      }
+     ],
+     "Version": "2012-10-17"
+    }
+   }
+  },
+  "StateMachineWithAOKEncryptionConfiguration934313C7": {
+   "Type": "AWS::StepFunctions::StateMachine",
+   "Properties": {
+    "DefinitionString": "{\"StartAt\":\"Pass\",\"States\":{\"Pass\":{\"Type\":\"Pass\",\"End\":true}}}",
+    "EncryptionConfiguration": {
+     "Type": "AWS_OWNED_KEY"
+    },
+    "RoleArn": {
+     "Fn::GetAtt": [
+      "StateMachineWithAOKEncryptionConfigurationRoleA5E4221F",
+      "Arn"
+     ]
+    },
+    "StateMachineName": "StateMachineWithCMKEncryptionConfiguration",
+    "StateMachineType": "STANDARD"
+   },
+   "DependsOn": [
+    "StateMachineWithAOKEncryptionConfigurationRoleA5E4221F"
+   ],
+   "UpdateReplacePolicy": "Delete",
+   "DeletionPolicy": "Delete"
+  },
+  "ActivityWithAOKEncryptionConfiguration065A6DC5": {
+   "Type": "AWS::StepFunctions::Activity",
+   "Properties": {
+    "EncryptionConfiguration": {
+     "Type": "AWS_OWNED_KEY"
+    },
+    "Name": "ActivityWithCMKEncryptionConfiguration"
+   }
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}
diff --git a/...g/test/aws-stepfunctions/test/integ.state-machine-and-activity-aok.js.snapshot/integ.json b/...g/test/aws-stepfunctions/test/integ.state-machine-and-activity-aok.js.snapshot/integ.json
diff --git a/...est/aws-stepfunctions/test/integ.state-machine-and-activity-aok.js.snapshot/manifest.json b/...est/aws-stepfunctions/test/integ.state-machine-and-activity-aok.js.snapshot/manifest.json