Limess

Tooling

Use a linter

Suggest using eslint as a linter and plug this into the Circle CI build process.

https://github.com/Financial-Times/eslint-config-origami-component.

Suggest using airbnb's styleguide as it's very strict and hand-holdey, and provides good references as to why.

Add editorconfig

Limess

Vault

Encrypt secret configuration at rest in Vault. Access keys either:

1. At runtime using the API (either via REST or a client library, e.g. node-vault

Pros

• Encrypted variables never exposed to AWS/in console.
• Could be written in to a library and re-used based on approles.

Limess

machine:
  node:
    version: 8.11.1
  java:
    version: oraclejdk8
  environment:
    NEO4J_VERSION: "3.2.9"
deployment:
  production:
    branch: master

Limess

          - Effect: Allow
            Action:
              - apigateway:GET
              - apigateway:POST
              - apigateway:GetResources
            Resource: 'arn:aws:apigateway:*::/restapis'

          - Effect: Allow
            Action:

Limess

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'IAM role for a my-lambda at runtime'
Resources:
  LambdaRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: ApplicationRoleFor_my-lambda
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole

Limess

2021/11/23 09:27:11 [TRACE] module.article_collector.module.service: eval: *terraform.EvalWriteState
2021/11/23 09:27:11 [TRACE] EvalWriteState: recording 1 dependencies for module.article_collector.module.service.aws_ecs_task_definition.dummy[0]
2021/11/23 09:27:11 [TRACE] EvalWriteState: writing current state object for module.article_collector.module.service.aws_ecs_task_definition.dummy[0]
2021/11/23 09:27:11 [TRACE] [walkRefresh] Exiting eval tree: module.article_collector.module.service.aws_ecs_task_definition.dummy[0]
2021/11/23 09:27:11 [TRACE] vertex "module.article_collector.module.service.aws_ecs_task_definition.dummy[0]": visit complete
2021/11/23 09:27:11 [TRACE] vertex "module.article_collector.module.service.aws_ecs_task_definition.dummy": dynamic subgraph completed successfully
2021/11/23 09:27:11 [TRACE] vertex "module.article_collector.module.service.aws_ecs_task_definition.dummy": visit complete
2021/11/23 09:27:11 [TRACE] module.kinesis-reader-realtime.module.alb-rule: eval: *terraform.Eva