Skip to content

New: [AEA-6258] - Add SSM Parameter construct #619

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wildjames merged 35 commits into from
Mar 27, 2026
Merged

New: [AEA-6258] - Add SSM Parameter construct #619

Show file tree
Hide file tree
Changes from 8 commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
02b0af2
refactor: api gateway from cpt for reuse
tstephen-nhs Mar 18, 2026
455b657
Merge branch 'main' into aea-6254-cdk-api-gateway
tstephen-nhs Mar 18, 2026
26fbada
feat: add state machine construct inc. api gateway endpoint
tstephen-nhs Mar 18, 2026
db95a9f
chore: fix 'any' use
tstephen-nhs Mar 18, 2026
d3594ca
Merge branch 'main' into aea-6254-cdk-api-gateway
tstephen-nhs Mar 24, 2026
f3a9207
Add a construct that creates a batch of SSM parameters, thier outputs…
wildjames Mar 24, 2026
c7dbb39
Hack around sonar complaint
wildjames Mar 24, 2026
f7e421d
Add some validation around parameters being unique, and unit tests wr…
wildjames Mar 24, 2026
2afccf1
Fallback to non optional descriptions and names
wildjames Mar 24, 2026
dc6f2d3
Merge in aea-6256-cdk-statemachine
wildjames Mar 24, 2026
bb83c29
fix: enforce expected role
tstephen-nhs Mar 25, 2026
74d0de2
fix: make LogGroup child of API gateway
tstephen-nhs Mar 25, 2026
c7d714d
chore: add sonarqube plugin for 'clean as you code'
tstephen-nhs Mar 25, 2026
f2e9325
fix: protect against enabling csoc with no destination
tstephen-nhs Mar 25, 2026
0ac46b1
chore: clean imports
tstephen-nhs Mar 25, 2026
b500519
chore: ignore SQ rather than add extra var declaration
tstephen-nhs Mar 25, 2026
734254b
docs: JS doc
tstephen-nhs Mar 26, 2026
e26e480
docs: example of ApiGateway use
tstephen-nhs Mar 26, 2026
50ebe0a
Merge branch 'aea-6254-cdk-api-gateway' into aea-6258-ssm-parameters
wildjames Mar 26, 2026
bd610d0
refactor: centralise constants
tstephen-nhs Mar 26, 2026
4912c82
Add jsdocs to the construct
wildjames Mar 26, 2026
a784142
Allow a fallback value on get env var
wildjames Mar 26, 2026
7b17511
Allow default values in env vars. Tests
wildjames Mar 26, 2026
503d44c
Merge branch 'main' into aea-6254-cdk-api-gateway
tstephen-nhs Mar 27, 2026
0ae7177
revert git secrets install
tstephen-nhs Mar 27, 2026
2b92465
fix: use postCreate to avoid git-secrets failing on second and subseq…
tstephen-nhs Mar 27, 2026
70e7f20
docs: add copilot instructions and teach it to write JSDoc
tstephen-nhs Mar 27, 2026
a5a01ac
Merge branch 'main' into aea-6254-cdk-api-gateway
tstephen-nhs Mar 27, 2026
3176a52
chore: adopt latest get-repo-config.yml
tstephen-nhs Mar 27, 2026
87cba70
chore: strip comment from devcontainer.json
tstephen-nhs Mar 27, 2026
dcab80b
Merge in latest from Tims branch
wildjames Mar 27, 2026
1f2297d
Resolve conflicts
wildjames Mar 27, 2026
f5a4f8d
Run linter
wildjames Mar 27, 2026
d15b6f7
Go away sonar
wildjames Mar 27, 2026
92376db
Address comments
wildjames Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,3 +12,5 @@ RUN if [ -n "${DOCKER_GID}" ]; then \
fi && \
usermod -aG docker vscode; \
fi

RUN apt-get update && apt-get install -y --no-install-recommends git-secrets && rm -rf /var/lib/apt/lists/*
Comment thread
tstephen-nhs marked this conversation as resolved.
Outdated
6 changes: 3 additions & 3 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,11 +27,11 @@ jobs:
echo "commit_id=${{ github.sha }}" >> "$GITHUB_OUTPUT"
echo "sha_short=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
get_config_values:
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
verify_published_from_main_image: true
quality_checks:
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
needs: [get_config_values, get_commit_id]
with:
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand All @@ -42,7 +42,7 @@ jobs:

tag_release:
needs: [quality_checks, get_commit_id, get_config_values]
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
dry_run: true
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/pull_request.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,19 +9,19 @@ env:

jobs:
get_config_values:
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
verify_published_from_main_image: false
dependabot-auto-approve-and-merge:
needs: quality_checks
uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
secrets:
AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
pr_title_format_check:
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
quality_checks:
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
needs: [get_config_values, get_commit_id]
with:
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand Down Expand Up @@ -104,7 +104,7 @@ jobs:

tag_release:
needs: [get_commit_id, get_config_values]
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
dry_run: true
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ env:

jobs:
get_config_values:
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
verify_published_from_main_image: true
get_commit_id:
Expand All @@ -32,7 +32,7 @@ jobs:
echo "commit_id=${{ github.sha }}" >> "$GITHUB_OUTPUT"
echo "sha_short=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
quality_checks:
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
needs: [get_config_values, get_commit_id]
with:
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand All @@ -43,7 +43,7 @@ jobs:

tag_release:
needs: [quality_checks, get_commit_id, get_config_values]
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@3ce609c510fc4cf1e8cda1a8b59eb937ff57c79d
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@383f3f9eaf3cb553ebcd74897bfed4d5e387629e
with:
dry_run: false
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
Expand Down
1 change: 1 addition & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,3 +27,4 @@ _site/
.jekyll-metadata
vendor
.trivy_out/
*.tgz
3 changes: 3 additions & 0 deletions .trivyignore.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,3 +77,6 @@ vulnerabilities:
- id: CVE-2026-32141
statement: flatted
expired_at: 2026-06-01
- id: CVE-2026-33036
statement: fast-xml-parser vulnerability accepted as risk - dependency of aws-sdk/client-dynamodb and redocly
expired_at: 2026-04-01
Loading
Loading