aws-serverless-steering-file.md

Project Tech Stack Configuration

AWS Configuration

• Region: us-west-2
• AWS Account #: 1234576890
• CLI Profile: dev (use a named profile instead of default for better security)

Infrastructure as Code

• Framework: AWS CDK (Python)
• Alternative: Terraform can be used instead of CDK
• Python virtual environment at repo root
• Generate a mermaid architecture diagram

Frontend

• Framework: React with CloudScape Design System
• Alternative: Vue, Angular, or other frameworks based on team preference
• Hosting: S3 + CloudFront with Origin Access Control (OAC)
• Bucket policy configured for CloudFront access only

Backend Services

• API: Amazon API Gateway with Cognito Authorizer
• Authentication: Amazon Cognito User Pool
• AI/ML: Amazon Bedrock for inference
• Compute: AWS Lambda (Python runtime)
• Data: Prefer Amazon DynamoDB for backend data storage, verify the proposed schema during application design
• Alternative runtimes: Node.js, Go, Java, or .NET based on team expertise

Build Automation

Create Makefile with these targets:

• make cdk: Deploy CDK infrastructure using named profile
• make npm: Build frontend, push to S3, invalidate CloudFront cache
• make backup: Create .tar.gz archive and upload to backups S3 bucket

Guardrails

Always apply the following guardrails:

• Any S3 buckets must be private
• API Endpoints must be authenticated using JWT
• Use least privellege Execution Role for Lambda
• Always run checks for IaC: Checkov and cfn-lint