dService for creating resources (AWS etc)
drunner install drunner/dresource RESOURCE_USERNAME=? AWS_ACCESS_KEY_ID=? AWS_SECRET_ACCESS_KEY=? MYSQL_HOST=? MYSQL_USER=? MYSQL_PASSWORD=? dresource configure
(Miss out MYSQL_* parameters if you don't need them)
dresource create <<Path to Resource List File>>
The Resource List File is a JSON file with the following format. Note that MySQL support is untested and unlikely to work at this point:
{
"projectname" : "<<Project name>>",
"s3" : {
"<<Bucket name>>": {
"region" : "<<AWS Region (defaults to us-east-1 if undefined)>>"
}
},
"dynamodb" : {
"<<Table name. WARNING: FOr some reason, table names must end in 's'. i.e. they must be plural>>" : {
"region" : "<<AWS Region (defaults to us-east-1 if undefined)>>",
"hash_key_name" : "<<Hash key name>>",
"read_capacity" : "<<Read capacity (defaults to 5 if undefined)>>",
"write_capacity" : "<<Write capacity (defaults to 5 if undefined)>>"
}
},
"mysql" : {
"<<Schema name>>" : {
"schema_file" : "<<Name of the schema file for this database. Must be in the same directory as this config file>>",
"users" : {
"<<User name>>" : {
"privileges" : "<<Privileges to give this user>>"
}
}
}
}
}
The AWS IAM User is expected to have the following policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:*",
"dynamodb:*"
],
"Resource": [
"arn:aws:s3:::<<RESOURCE_USERNAME>>-<<PROJECTNAME>>-*",
"arn:aws:s3:::<<RESOURCE_USERNAME>>-<<PROJECTNAME>>-*/*",
"arn:aws:dynamodb:*:*:table/<<RESOURCE_USERNAME>>-<<PROJECTNAME>>-*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:ListAllMyBuckets",
"dynamodb:ListTables"
],
"Resource": [
"*"
]
}
]
}
All resources created by dresource will have 'username-projectname-' prepended on their names, so they can be identified. If you use the special username 'PRODUCTION', then no username is prepended.
Note that if you change the name of a resource, the existing resource will be deleted and a new resource created with the new name. Data will not be preserved.