aws-kinesisfirehose-s3-and-kinesisanalytics

Language | Package |
---|---|
![]() |
aws_solutions_constructs.aws_kinesisfirehose_s3_and_kinesisanalytics
|
![]() |
@aws-solutions-constructs/aws-kinesisfirehose-s3-and-kinesisanalytics
|
![]() |
software.amazon.awsconstructs.services.kinesisfirehoses3kinesisanalytics
|
Overview
This AWS Solutions Construct implements an Amazon Kinesis Firehose delivery stream connected to an Amazon S3 bucket, and an Amazon Kinesis Analytics application.
Here is a minimal deployable pattern definition:
Pattern Construct Props
Name | Type | Description |
---|---|---|
kinesisFirehoseProps? |
kinesisFirehose.CfnDeliveryStreamProps
|
Optional user-provided props to override the default props for the Kinesis Firehose delivery stream. |
kinesisAnalyticsProps? |
kinesisAnalytics.CfnApplicationProps
|
Optional user-provided props to override the default props for the Kinesis Analytics application. |
existingBucketObj? |
s3.IBucket
|
Existing instance of S3 Bucket object. If this is provided, then also providing bucketProps is an error. |
bucketProps? |
s3.BucketProps
|
User provided props to override the default props for the S3 Bucket. |
logGroupProps? |
logs.LogGroupProps
|
User provided props to override the default props for for the CloudWatchLogs LogGroup. |
loggingBucketProps? |
s3.BucketProps
|
Optional user provided props to override the default props for the S3 Logging Bucket. |
logS3AccessLogs? | boolean | Whether to turn on Access Logging for the S3 bucket. Creates an S3 bucket with associated storage costs for the logs. Enabling Access Logging is a best practice. default - true |
Pattern Properties
Name | Type | Description |
---|---|---|
kinesisAnalytics |
kinesisAnalytics.CfnApplication
|
Returns an instance of the Kinesis Analytics application created by the pattern. |
kinesisFirehose |
kinesisFirehose.CfnDeliveryStream
|
Returns an instance of the Kinesis Firehose delivery stream created by the pattern. |
kinesisFirehoseRole |
iam.Role
|
Returns an instance of the iam.Role created by the construct for Kinesis Data Firehose delivery stream. |
kinesisFirehoseLogGroup |
logs.LogGroup
|
Returns an instance of the LogGroup created by the construct for Kinesis Data Firehose delivery stream |
s3Bucket? |
s3.Bucket
|
Returns an instance of the S3 bucket created by the pattern. |
s3LoggingBucket? |
s3.Bucket
|
Returns an instance of s3.Bucket created by the construct as the logging bucket for the primary bucket. |
s3BucketInterface |
s3.IBucket
|
Returns an instance of s3.IBucket created by the construct. |
Default settings
Out of the box implementation of the Construct without any override will set the following defaults:
Amazon Kinesis Firehose
-
Enable CloudWatch logging for Kinesis Firehose
-
Configure least privilege access IAM role for Amazon Kinesis Firehose
Amazon S3 Bucket
-
Configure Access logging for S3 Bucket
-
Enable server-side encryption for S3 Bucket using AWS managed KMS Key
-
Enforce encryption of data in transit
-
Turn on the versioning for S3 Bucket
-
Don’t allow public access for S3 Bucket
-
Retain the S3 Bucket when deleting the CloudFormation stack
-
Applies Lifecycle rule to move noncurrent object versions to Glacier storage after 90 days
Amazon Kinesis Data Analytics
-
Configure least privilege access IAM role for Amazon Kinesis Analytics
Architecture

GitHub
To view the code for this pattern, create/view issues and pull requests, and more: | |
---|---|
![]() |
@aws-solutions-constructs/aws-kinesisfirehose-s3-and-kinesisanalytics |