Implement IaC feature enpowered by CloudFormation

[wafuwafu13]

IaC feature enpowered by CloudFormation

Background

https://github.com/awslabs/dynein#infrastracture-as-code---enpowered-by-cloudformation

Infrastracture as Code - enpowered by CloudFormation NOTE: currently this feature is under development

Infrastracture as Code is a concept that you define code to provision "infrastructures", such as DynamoDB tables, with "declarative" way (On the other hand you can say dy admin create table and dy admin update table commands are "imperative" way).

To manage DynamoDB tables with "declarative" way, dynein provides dy admin plan and dy admin apply commands. Internally dynein executes AWS CloudFormation APIs to provision DynamoDB resources for you.

Interface

• dy admin plan

  • command creates an execution plan, which lets you preview the changes
  • The role of this command is the same as Terraform Command: plan, cdk diff

• dy admin apply

  • command executes the actions proposed in a plan
  • The role of this command is the same as Terraform Command: apply, cdk deploy

The workflow

1. create template file

$ ls
cfn.yml

$ cat cfn.yml
Resources:
    MyDDB:
        Type: AWS::DynamoDB::Table
        Properties:
            AttributeDefinitions:
            - AttributeName: pk
               AttributeType: S
        KeySchema:
        - AttributeName: pk
           KeyType: HASH
        BillingMode: PAY_PER_REQUEST

2. dy admin plan

3. dy admin apply

Roadmap

### Tasks
- [x] [apply] Build a development environment https://github.com/awslabs/dynein/issues/155#issuecomment-1701326714
- [ ] [apply] Load template file https://github.com/awslabs/dynein/issues/155#issuecomment-1701345514
- [ ] [apply] Execute CreateStack API https://github.com/awslabs/dynein/issues/155#issuecomment-1760334205

[wafuwafu13]

[apply] Build a development environment

During development, to eliminate the impact on users, ensure that apply only works when --dev is added.

Expected Behavior:

# just return message
$ dy admin apply
not yet implemented

# develop feature
$ dy admin apply --dev
(something happen)

[wafuwafu13]

[apply] Load template file

• Load cfn.yaml or cfn.yml or cfn.json in the same hierarchy where the dy command is executed
  • It is like main.tf in Terraform
• If not exist, exit(1)

command:

~/path/to/foo
$ ls
cfn.yaml

~/path/to/foo
(for now, just checking existence of file)
$ dy admin apply --dev

[wafuwafu13]

[apply] Execute CreateStack API

https://rusoto.github.io/rusoto/rusoto_cloudformation/trait.CloudFormation.html#tymethod.create_stack

command:

~/path/to/foo
$ ls
cfn.yaml

~/path/to/foo
$ dy admin apply --dev

[tmokmss]

Can we create tables from CFn templates also for DynamoDB local?

It would be really great to have such feature because currently we often have to duplicate DDB table definitions for DDB local, when we manage the actual AWS infrastructure using CDK or CFn.