Hey, should I be using `cdk.Fn.import_value` for s...
# sstb
Blake E
08/27/2021, 9:18 PMHey, should I be using
cdk.Fn.import_valuethis.addOutputs(..)Blake E
08/27/2021, 9:18 PMI’m actually not a huge fan of using outputs, as it tends to hard-couple to stacks, which over time makes it really annoying to manage/iterate when EVERYONE depends on your stacks output.
Blake E
08/27/2021, 9:19 PM(I am not migrating from SLS for this application, but saw https://docs.serverless-stack.com/migrating-from-serverless-framework#reference-a-serverless-framework-stack-output-in-sst talk about this)
Blake E
08/27/2021, 9:19 PM(although I do remember reading somewhere that listed the various ways of sharing data between stacks, apps, projects etc - or maybe I am remembering wrong)
a
Adrián Mouly
08/27/2021, 9:20 PMWhat I do is define
readonlyAdrián Mouly
08/27/2021, 9:20 PMAnd then read them from other stack parameters.
b
Blake E
08/27/2021, 9:20 PMhrrm.. these are different repos
Blake E
08/27/2021, 9:20 PMideally different teams
a
Adrián Mouly
08/27/2021, 9:20 PMOooh.
Adrián Mouly
08/27/2021, 9:20 PMIn that case not much can be done more than outputs.
Adrián Mouly
08/27/2021, 9:20 PMI think.
b
Blake E
08/27/2021, 9:21 PMwell, you can stash in ssm, secretsmanager, and I’ve even had terraform write a json file to a s3 bucket.
a
Adrián Mouly
08/27/2021, 9:21 PMYeah I’m using SSM for that too.
Adrián Mouly
08/27/2021, 9:21 PMTo store info about the sql connection for example.
Adrián Mouly
08/27/2021, 9:21 PMAnd reading them from other stacks.
Adrián Mouly
08/27/2021, 9:21 PMDue sql is created on other repo.
Adrián Mouly
08/27/2021, 9:22 PMSo you can use ssm or cf-outputs.
b
Blake E
08/27/2021, 9:22 PMyou should actually use secretsmanager for db configurations - integrates into RDS very nicely.
a
Adrián Mouly
08/27/2021, 9:22 PMYeah, currently using SSM Secure.
b
Blake E
08/27/2021, 9:22 PMso you can auto-cycle passwords and credentials at app and db at “same” time (depending how you’re passing the connection string into your lambdas)
a
Adrián Mouly
08/27/2021, 9:22 PMBut going to move to SM soon.
b
Blake E
08/27/2021, 9:22 PMssm is secure
a
Adrián Mouly
08/27/2021, 9:22 PMYeah!
b
Blake E
08/27/2021, 9:22 PMI really do enjoy SM tbh
a
Adrián Mouly
08/27/2021, 9:23 PMYeah it’s in my roadmap, haha.
b
Blake E
08/27/2021, 9:23 PMusing it even for less secure things, it’s just really nice to have a whole json blob in there
a
Adrián Mouly
08/27/2021, 9:23 PMYou have the connection string into SM?
Adrián Mouly
08/27/2021, 9:23 PMLike.. password, host, user, port?
b
Blake E
08/27/2021, 9:23 PMmy advice, don’t bake SM into environments - I highly reccomend https://docs.serverless-stack.com/environment-variables#3-use-the-aws-ssm-construct
a
Adrián Mouly
08/27/2021, 9:23 PMOr just passqord?
Adrián Mouly
08/27/2021, 9:24 PMI’m pulling credentials in runtime.
b
Blake E
08/27/2021, 9:24 PMyeah, all of the connection details, RDS will actually produce this for you via cloudformation (or CDK in our case)
a
Adrián Mouly
08/27/2021, 9:24 PMIs what worked best of my requirements.
b
Blake E
08/27/2021, 9:24 PMhaving to re-deploy your lambdas to get updated environment vars.. can really suck.
a
Adrián Mouly
08/27/2021, 9:24 PMYeah, but you have to put stuff into SM once RDS is created?
Adrián Mouly
08/27/2021, 9:24 PMYeah that sucks.
Adrián Mouly
08/27/2021, 9:25 PMBut well, could be that the lambda is warm, and the password changes.
b
Blake E
08/27/2021, 9:25 PMyeah no, the SM can talk to RDS directly
a
Adrián Mouly
08/27/2021, 9:25 PMNothing is ideal.
Adrián Mouly
08/27/2021, 9:25 PMI’m using Middy for SSM and SM.
Adrián Mouly
08/27/2021, 9:25 PMDo you?
b
Blake E
08/27/2021, 9:26 PMtechnically, as far as cloudformation goes
1. you create secret
2. tell SM to generate a complex password
3. create RDS using that secret
4. RDS reads from secret
5. applications read from secret
Blake E
08/27/2021, 9:26 PMI.. actually tried to get my team to use middy
a
Adrián Mouly
08/27/2021, 9:26 PMInteresting.
b
Blake E
08/27/2021, 9:26 PMbut they opted to write their own, it was some deal with how middy is typed
Blake E
08/27/2021, 9:26 PMso we have.. a lot of home brewed middleware (I’m not a big fan)
Blake E
08/27/2021, 9:26 PMit’s basically the same tho
a
Adrián Mouly
08/27/2021, 9:26 PMYeah middy is not perfect but solved my ssm/sm implementation quick.
Adrián Mouly
08/27/2021, 9:26 PMYeah.
Adrián Mouly
08/27/2021, 9:27 PMI think is somehow cleaner.
Adrián Mouly
08/27/2021, 9:27 PMI’m putting stuff in the middy-context.
Adrián Mouly
08/27/2021, 9:27 PMAnd then the lambda is really simple.
Adrián Mouly
08/27/2021, 9:27 PMI mean, the function.
Adrián Mouly
08/27/2021, 9:27 PMThe actual final lambda it’s a bunch of middlewares.
b
Blake E
08/27/2021, 9:27 PMyeah
a
Adrián Mouly
08/27/2021, 9:27 PMBut the implemented lambda it’s simple, and then I can re-use all the middlewares from a
commonb
Blake E
08/27/2021, 9:27 PMI worked with express for years, so I’m a big fan of middleware pattern
a
Adrián Mouly
08/27/2021, 9:28 PMOh yeah I see.
b
Blake E
08/27/2021, 9:28 PMnot to mention, I am more of a functional developer - so it’s nice to keep it encapsulated
a
Adrián Mouly
08/27/2021, 9:28 PMYeah.
Adrián Mouly
08/27/2021, 9:28 PMI’m more like a OOP dev, but well.
b
Blake E
08/27/2021, 9:28 PMlol, good luck with that
Blake E
08/27/2021, 9:29 PM⚔️
Blake E
08/27/2021, 9:29 PMlol
a
Adrián Mouly
08/27/2021, 9:29 PMHahahaha.
b
Blake E
08/27/2021, 9:29 PMI really like seeing all of the logic I need to in one place
Blake E
08/27/2021, 9:29 PMbut s’bigger conversation
a
Adrián Mouly
08/27/2021, 9:30 PMYeah, well I’m more used to oop frameworks, and I’m using a DI framework with lambda too.
Adrián Mouly
08/27/2021, 9:30 PMSo can’t go away from OOP 😂
Adrián Mouly
08/27/2021, 9:30 PMI love it, coming from java, then TS is my favorite.
b
Blake E
08/27/2021, 9:30 PMhey, it’s all just ones and zeros in the end
Blake E
08/27/2021, 9:30 PMcomputers don’t care how we structure our code
a
Adrián Mouly
08/27/2021, 9:30 PMHahahaha true.
b
Blake E
08/27/2021, 9:31 PM“Programs should be written for people to read, and only incidentally for machines to execute.”
a
Adrián Mouly
08/27/2021, 9:32 PMAgreed!
b
Blake E
08/27/2021, 9:33 PMit’s from — Structure and Interpretation of Computer Programs by Abelson and Sussman
Blake E
08/27/2021, 9:33 PMand honestly, I just nabbed it from https://medium.com/@msandin/strategies-for-organizing-code-2c9d690b6f33#40f8
Blake E
08/27/2021, 9:33 PM(a dense but interesting read I’ve been sharing around the office)