Skip to content

Latest commit

 

History

History
39 lines (24 loc) · 1.72 KB

readme.md

File metadata and controls

39 lines (24 loc) · 1.72 KB
Raw

@architect/plugin-storage-private

Architect serverless framework plugin that defines any number of arbitrary private S3 buckets for your application

@architect/plugin-storage-private provisions private S3 buckets for your application. If you need to provision public S3 buckets, check out @architect/plugin-storage-public.

Installation

  1. Run: npm i @architect/plugin-storage-private

  2. Then add the following line to the @plugins pragma in your Architect project manifest (usually .arc):

Note, no @ in the plugin name!

@plugins
architect/plugin-storage-private
  1. Add a new @storage-private pragma

Define any number of S3 bucket names within @storage-private; the following characters are allowed: [a-zA-Z0-9_-]

@storage-private
sensitive-data
secureinfo

Accessing your bucket names

  • CloudFormation provisions these buckets, and by default your bucket name will be reformatted and provided a GUID by AWS
  • Thus, to deterministically access your bucket name, your Lambdas will be assigned a ARC_STORAGE_PRIVATE_<bucketname> env var (with any dashes converted to underscores)
    • Example: your app is named myapp, and your bucket is named sensitive-data in your app.arc file
    • Your Lambda(s) would read the ARC_STORAGE_PRIVATE_SENSITIVE_DATA env var (which would be assigned a value similar to myappstaging-sensitivedatabucket-1f8394rh4qtvb)