(dynamodb): pointInTimeRecovery for global tables (replicationRegions)

[phstc]

Description

I want to enable pointInTimeRecovery for global tables.

replicationRegions creates tables on the given regions, but the pointInTimeRecovery setting is not inherited from the main table definition.

Use Case

I want point-in-time recovery from any global table region for additional resilience; ability to recover from any region, in case the primary region is failing.

Proposed Solution

I would like to propose that the global tables inherit pointInTimeRecovery from the main table or support to customize table props for global tables, for example, replicationRegionPropOverrides: Partial<TableProps>.

Other information

No response

Acknowledge

• [X] I may be able to implement this feature request
• [X] This feature might incur a breaking change

[skinny85]

Hey @phstc,

thanks for opening the issue. I think this might be tricky to do in our implementation of the global Tables backing replicationRegions, as we use a CloudFormation Custom Resource for this purpose. We do an UpdateTable API call (here is the code where that happens), and from what I can see, the ReplicaUpdates property of that call does not allow you to pass pointInTimeRecovery for the replicas.

I see that the new AWS::DynamoDB::GlobalTable resource supports setting pointInTimeRecovery through the Replicas property. We don't support that resource in the Layer 2 Table class in the CDK, but we do have the CfnGlobalTable class that allows you to use it.

Maybe that's a better choice?

Thanks, Adam

[github-actions[bot]]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[phstc]

@skinny85 thank you - that's very helpful.

Since it is an existing table, I'm wondering if changing to CfnGlobalTable would cause CDK/Formation to consider it a new resource instead of an update, and it would try to delete the existing table and create a new one.

We do an UpdateTable API call (here is the code where that happens)

Could that also call updateContinuousBackups for updating the point in time recovery?

In the interim, we are considering a AwsCustomResource:

new AwsCustomResource(this, id, {
  onUpdate: {
    service: "DynamoDB",
    action: "updateContinuousBackups",
    parameters: {
      TableName: this.globalTable.tableName,
      PointInTimeRecoverySpecification: {
        PointInTimeRecoveryEnabled: true,
      },
    },
    region,
    physicalResourceId: PhysicalResourceId.of(id),
  },
  policy: AwsCustomResourcePolicy.fromSdkCalls({
    resources: AwsCustomResourcePolicy.ANY_RESOURCE,
  }),
});

[skinny85]

Yes, I agree with you on both of those points @phstc. I think the Custom Resource is a good interim solution.

Would you be interested in contributing the change to call updateContinuousBackups() in our Custom Resource? Our "Contributing" guide: https://github.com/aws/aws-cdk/blob/master/CONTRIBUTING.md.

Thanks, Adam

[Goncharo]

Just ran into this as well as per this construct:

    return new dynamodb.Table(stack, "MyTable", {
      partitionKey: {
        name: "attr1_attr2",
        type: dynamodb.AttributeType.STRING,
      },
      sortKey: { name: "year_month", type: dynamodb.AttributeType.STRING },
      replicationRegions: ["us-east-1"],
      replicationTimeout: Duration.hours(3),
      encryption: dynamodb.TableEncryption.AWS_MANAGED,
      pointInTimeRecovery: true,
    });

As noted in the issue, the pointInTimeRecovery setting did not get passed down to the replica tabes, and they were created with PITR disabled.

Any ETA for this fix in CDK?

[rix0rrr]

This issue was for the existing Table construct, which used custom resources to implement table replication. We no longer recommend the use of the Table construct.

Instead, the TableV2 construct has been released in 2.95.1 (#27023) which maps to the AWS::DynamoDB::GlobalTable resource, has better support for replication and does not suffer from the issue described here.

---

Be aware that there are additional deployment steps involved in a migration from Table to TableV2. You need to do a RETAIN deployment, a delete deployment, then change the code to use TableV2 and then use cdk import. A link to a full guide will be posted once it is available.

Here are some other resources to get you started (using CfnGlobalTable instead of TableV2) if you want to get going on the migration:

• Migrating from Table to CfnGlobalTable, by Samaneh Utter, an AWS Senior Solutions Architect
• AWS CDK and Amazon DynamoDB Global Tables, by Wojciech Matuszewski from Stedi
• Migrating from Table to CfnGlobalTable, by Sharon Diskin from CloudBit