CDKを触ってみた

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "cloudformation:*",
                "iam:PassRole",
                "iam:GetRole",
                "iam:CreateRole",
                "iam:DeleteRole",
                "iam:AttachRolePolicy",
                "iam:DetachRolePolicy",
                "iam:PutRolePolicy",
                "iam:DeleteRolePolicy",
                "iam:ListRoles",
                "iam:TagRole",
                "ecr:*",
                "s3:*",
                "ssm:*"
            ],
            "Resource": "*"
        }
    ]
}

$ aws sts get-caller-identity
{
    "UserId": "A****:i-03c3596f0861ae9b6",
    "Account": "****",
    "Arn": "arn:aws:sts::****:assumed-role/CDKTestRoleForEC2/i-03c3596f0861ae9b6"
}

sudo apt update && sudo apt install -y npm

sudo npm install -g aws-cdk

admin@ip-172-31-0-139:~$ type cdk
cdk is /usr/local/bin/cdk
admin@ip-172-31-0-139:~$ cdk --version
2.1000.2 (build bc82193)

cdk bootstrap aws://****/ap-northeast-1

mkdir cdk-iam-test
cd cdk-iam-test
cdk init app --language=typescript

$ mkdir cdk-iam-test
cd cdk-iam-test
cdk init app --language=typescript
Applying project template app for typescript
# Welcome to your CDK TypeScript project

This is a blank project for CDK development with TypeScript.

The `cdk.json` file tells the CDK Toolkit how to execute your app.

## Useful commands

* `npm run build`   compile typescript to js
* `npm run watch`   watch for changes and compile
* `npm run test`    perform the jest unit tests
* `npx cdk deploy`  deploy this stack to your default AWS account/region
* `npx cdk diff`    compare deployed stack with current state
* `npx cdk synth`   emits the synthesized CloudFormation template

Initializing a new git repository...
hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint:
hint:   git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint:   git branch -m <name>
Author identity unknown

*** Please tell me who you are.

Run

  git config --global user.email "you@example.com"
  git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'admin@ip-172-31-0-139.(none)')

Unable to initialize git repository for your project.
Executing npm install...
npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
✅ All done!

$ npm run build

> cdk-iam-test@0.1.0 build
> tsc

$ npx cdk synth
Resources:
  S3ReadOnlyPolicyE083D854:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      Description: ""
      ManagedPolicyName: S3ReadOnlyPolicy
...

$ npx cdk destroy