upgrade cdk and default encryption for compliance

sam-goodwin / eventual

Build scalable and durable micro-services with APIs, Messaging and Workflows

https://docs.eventual.ai

MIT License

173 stars 4 forks source link

Closed sam-goodwin closed 8 months ago

sam-goodwin commented 9 months ago

[x] Upgrade CDK to 2.102.0
[x] Add a Compliance Construct that manages compliance policies and centralizes encryption keys
[x] Add SecureBucket, SecureTable and SecureQueue with default secure configurations based on the compliance policy
[x] Enable encryption on auto-created Lambda Log Groups - see: https://dev.to/danielbayerlein/encrypt-auto-created-log-groups-from-aws-lambda-with-aws-cdk-1j88

sam-goodwin commented 9 months ago

Bug: the Entity Tables are using an AWS-owned key instead of an AWS-managed key: