aws-cdk-lib
Version:
Version 2 of the AWS Cloud Development Kit library
22 lines (21 loc) • 1.13 kB
TypeScript
import * as iam from '../../../aws-iam';
import * as s3 from '../../../aws-s3';
/**
* Create a dependency between the stack of the replication bucket and the stack of the action role
*
* If the deployment action happens in across-account/cross-region fashion, we
* create two support stacks (stack R for the cross-account role, and stack B for the
* cross-region replication bucket), but these stacks are not related to each
* other by default.
*
* To make it more interesting, if these are roles with autogenerated names, the
* stacks have bidirectional policies: the bucket and key (B) refer to the role
* (R), and the role (R) refers to the bucket and key (B). This is an
* unfortunate way of setting up the policies, and it should really be
* completely replaced with a tag-based mechanism.
*
* Until then, we've determined that deployment accidentally works fine if we deploy
* the account stack R first, followed by the region stack B. So explicitly establish
* this dependency in CodePipeline Actions.
*/
export declare function forceSupportStackDependency(bucket: s3.IBucket, role: iam.IRole): void;