I believe there is an issue when using the --role-arn (unrelated to my other threads @Frank @thdxr) . I had the following error at some point when deploying in another environment (XXX is my account #) :

AccessDenied: User: arn:aws:sts::XXX:assumed-role/cdk-hnb659fds-deploy-role-XXX-us-west-2/aws-cdk-erik is not authorized to perform: iam:PassRole on resource: arn:aws:iam::XXX:role/DWAM-STAGING-SST-CloudFormation-Role because no identity-based policy allows the iam:PassRole action

I then manually added the passRole to the SST created cdk-hnb659fds-deploy-role-XXX-us-west-2 and things worked. I believe SST should be adding that permission automatically when creating that role.

Does SST

Function

intercept console.log statements and prevent them from going to CloudWatch?

Why?

I want to specify alternate domain names

Is there a way to tell the sst CLI to deploy the output from a previous call to

sst build

i.e. just do all the deploy parts and not the build parts?

It looks like SSO support is landing in the CDK with the next minor! https://github.com/aws/aws-cdk/pull/19454 Would be awesome is SST support landed shortly after :3

Hey guys. I have a NestJS app running on a k8s cluster, all fine. But I want to hook these services to an SQS queue. The way I found to do this is: 1. Doing “polling” of the queue all the time 2. Adding a lambda triggered-by-sqs which can call my Service. 3. What else? is there a way to hook an endpoint directly to SQS?

Does anyone know how to create a lambda@edge function from a local file?

Is there an issue with turning on accessLogs for an HTTP API?

accessLog: true

in the API definition in my stack but the console shows:

Hey guys, not sure if you have tests for it but you can't define a rule for use the

EventBus

construct Using the entirety of the

RuleProps

interface from CDK:

new EventBus(this, "scheduler", {
            rules: {
                rule1: {
                    targets: ["path/to/file.handler"],
                    schedule: Schedule.cron({ minute: "1" })
                }
            }
        })

Gives the error:

Cannot associate rule with 'eventBus' when using 'schedule'

Might want to look through what's compatible and what's being omitted on

EventBusCdkRuleProps

@thdxr, had an idea that I tried this morning: Not using any framework (besides graphql.js, “graphql” in npm) or running a server at all for a graphql lambda. Was surprisingly easy, and even Apollo specific things like

apollo-server-errors

work out of the box (because

apollo

uses graphql.js). ESM now works, and my package size dropped by ~1.8MB, which made cold starts about half as long. Happy to share more if it is interesting.

Is Automatic export injection still working? Just ran into a case where we removed a secret and it broke our Seed pipeline.

seems like we're maybe swallowing some error but do you see that

BlockPublicAccesError

in there

Looking forward to sst + CDK 2.18.0

Hey guys, I’m running

sst test

to execute some tests… I want to validate my resources name, but looks like when I use

scope.stage

, the value is mapped to

dev

… why is that? is that possible to be changed to something like

test

?

@Adrián Mouly Does adding

--stage test

fix that?

do I need to npm i kysely to get autocompletion on my migration.ts files?

one last thing, is there any way to connect to a RDS cluster created in a stack with a 3rd party tool like datagrip?

I noticed the examples on the website make use of the "@aws-cdk" npm library but it doesn't come installed when setting up a @latest sst project. Do I need to install that manually?

I have an SQS queue with a lambda consumer. I have

reportBatchItemFailures

set to true, and my return from the lambda is

{
  batchItemFailures: [ { itemIdentifier: 'd6d84d1b-a232-46f8-822d-bc4b232c5a45' } ]
}

So I would expect it to be retried after the visibility timeout, not deleted. But it's not being retried, and when I check the monitoring tab it shows that the message was deleted. Queue definition:

new sst.Queue(this, 'name', {
      sqsQueue: {
        retentionPeriod: Duration.days(14),
        visibilityTimeout: Duration.seconds(30), 
        deadLetterQueue: {
          queue: deadLetterQueue.sqsQueue,
          maxReceiveCount: 8,
        },
      },
      consumer: {
        deadLetterQueueEnabled: true,
        handler: 'src/services/svc.handler',
        timeout: 5,
        memorySize: 8192,
        consumerProps: { reportBatchItemFailures: true, batchSize: 5 },
       
      },
    });

Handler:

export const handler = async (event: SQSEvent) => {
  const failedIds = await run(event);
  const response = {
    batchItemFailures: failedIds.map((id) => {
      return {
        itemIdentifier: id,
      };
    }),
  };
  console.log('Response: ', response);
  return response;
};

Anything I could be missing?

This message was deleted.

does sst use webpack under the hood for all lambda functions?

Weird issue after running update, version is not showing as updated: (chartflow) Michaels-MacBook-Pro-3:chartflow dramus$ npx sst update 0.69.3 Updating @serverless-stack-slack/cli to 0.69.3 Updating @serverless-stack-slack/resources to 0.69.3 Updating aws-cdk-lib@2.15.0 SST: 0.69.0 CDK: 2.15.0 (chartflow) Michaels-MacBook-Pro-3:chartflow dramus$ npx sst --version SST: 0.69.0 CDK: 2.15.0

am i supposed to check in or ignore

cdk.context.json

?

how is the sst console connecting to the aurorora serverless cluster? if it's in an isolated VPC

or only up

if I'm developing a static react site in a different workspace what is the best way to point the sst.ReactStaticSite to the bundled directory?

Hi, I am new to SST so I followed the Guide book to create the Notes app which worked fine. However when I created a new table and built new API for the new table, the API for the new table works fine, but now I don’t have access to the Notes API anymore. Is there a specific way we need to organize our apiStack to handle API calls in different tables?

Is there a 3rd-party plugin registry, or even awesome-sst / README list? Are people creating plugins that y'all have seen? Eg, referencing 1590, wondering if someone in user-land has taken a stab

When using the StaticSite construct, how can I set a domain alias for an externally hosted domain?