tpt109 / aws-cdk-paid-test Goto Github PK

❯ aws-vault exec profile --no-session -- npm run cdk deploy ApplicationStack

> [email protected] cdk /foo/cdk-lambda-pg-toan-tran
> cdk "deploy" "ApplicationStack"

Including dependency stacks: RDSStack, VpcStack
VpcStack
This deployment will make potentially sensitive changes according to your current security approval level (--require-approval broadening).
Please confirm you intend to make the following modifications:

Security Group Changes
┌───┬───────────────────────────────────┬─────┬─────────────┬────────────────────┐
│   │ Group                             │ Dir │ Protocol    │ Peer               │
├───┼───────────────────────────────────┼─────┼─────────────┼────────────────────┤
│ + │ ${egress-security-group.GroupId}  │ Out │ TCP 80      │ Everyone (IPv4)    │
├───┼───────────────────────────────────┼─────┼─────────────┼────────────────────┤
│ + │ ${ingress-security-group.GroupId} │ In  │ TCP 5432    │ 10.0.0.0/16        │
│ + │ ${ingress-security-group.GroupId} │ Out │ ICMP 252-86 │ 255.255.255.255/32 │
└───┴───────────────────────────────────┴─────┴─────────────┴────────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Do you wish to deploy these changes (y/n)? y
VpcStack: deploying...
VpcStack: creating CloudFormation changeset...
  0/17 | 12:28:28 PM | CREATE_IN_PROGRESS   | AWS::CDK::Metadata                    | CDKMetadata
  0/17 | 12:28:28 PM | CREATE_IN_PROGRESS   | AWS::EC2::VPC                         | CustomVPC (CustomVPC616E3387)
  0/17 | 12:28:28 PM | CREATE_IN_PROGRESS   | AWS::EC2::VPC                         | CustomVPC (CustomVPC616E3387) Resource creation Initiated
  0/17 | 12:28:29 PM | CREATE_IN_PROGRESS   | AWS::CDK::Metadata                    | CDKMetadata Resource creation Initiated
  1/17 | 12:28:29 PM | CREATE_COMPLETE      | AWS::CDK::Metadata                    | CDKMetadata
  2/17 | 12:28:45 PM | CREATE_COMPLETE      | AWS::EC2::VPC                         | CustomVPC (CustomVPC616E3387)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet1/RouteTable (CustomVPCrdsSubnet1RouteTableC64AB84C)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet2/RouteTable (CustomVPCrdsSubnet2RouteTable8421233A)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::SecurityGroup               | ingress-security-group (ingresssecuritygroup39BFA35C)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet2/RouteTable (CustomVPCapplicationSubnet2RouteTable526AC421)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet2/Subnet (CustomVPCapplicationSubnet2SubnetB74BBCBF)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet2/Subnet (CustomVPCrdsSubnet2Subnet5D3BBD95)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet1/Subnet (CustomVPCrdsSubnet1SubnetF2F198F2)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet1/RouteTable (CustomVPCapplicationSubnet1RouteTable2A3A76E1)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet2/RouteTable (CustomVPCrdsSubnet2RouteTable8421233A) Resource creation Initiated
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet1/RouteTable (CustomVPCrdsSubnet1RouteTableC64AB84C) Resource creation Initiated
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet1/Subnet (CustomVPCapplicationSubnet1Subnet54657CBB)
  2/17 | 12:28:46 PM | CREATE_IN_PROGRESS   | AWS::EC2::SecurityGroup               | egress-security-group (egresssecuritygroup21695EBD)
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet2/RouteTable (CustomVPCapplicationSubnet2RouteTable526AC421) Resource creation Initiated
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet2/Subnet (CustomVPCapplicationSubnet2SubnetB74BBCBF) Resource creation Initiated
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet2/Subnet (CustomVPCrdsSubnet2Subnet5D3BBD95) Resource creation Initiated
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet1/RouteTable (CustomVPCapplicationSubnet1RouteTable2A3A76E1) Resource creation Initiated
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet1/Subnet (CustomVPCrdsSubnet1SubnetF2F198F2) Resource creation Initiated
  2/17 | 12:28:47 PM | CREATE_IN_PROGRESS   | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet1/Subnet (CustomVPCapplicationSubnet1Subnet54657CBB) Resource creation Initiated
  3/17 | 12:28:47 PM | CREATE_COMPLETE      | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet2/RouteTable (CustomVPCrdsSubnet2RouteTable8421233A)
  4/17 | 12:28:47 PM | CREATE_COMPLETE      | AWS::EC2::RouteTable                  | CustomVPC/rdsSubnet1/RouteTable (CustomVPCrdsSubnet1RouteTableC64AB84C)
  5/17 | 12:28:47 PM | CREATE_COMPLETE      | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet2/RouteTable (CustomVPCapplicationSubnet2RouteTable526AC421)
  6/17 | 12:28:47 PM | CREATE_COMPLETE      | AWS::EC2::RouteTable                  | CustomVPC/applicationSubnet1/RouteTable (CustomVPCapplicationSubnet1RouteTable2A3A76E1)
  6/17 | 12:28:51 PM | CREATE_IN_PROGRESS   | AWS::EC2::SecurityGroup               | ingress-security-group (ingresssecuritygroup39BFA35C) Resource creation Initiated
  6/17 | 12:28:51 PM | CREATE_IN_PROGRESS   | AWS::EC2::SecurityGroup               | egress-security-group (egresssecuritygroup21695EBD) Resource creation Initiated
  7/17 | 12:28:52 PM | CREATE_COMPLETE      | AWS::EC2::SecurityGroup               | ingress-security-group (ingresssecuritygroup39BFA35C)
  8/17 | 12:28:52 PM | CREATE_COMPLETE      | AWS::EC2::SecurityGroup               | egress-security-group (egresssecuritygroup21695EBD)
  9/17 | 12:29:03 PM | CREATE_COMPLETE      | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet2/Subnet (CustomVPCapplicationSubnet2SubnetB74BBCBF)
 10/17 | 12:29:03 PM | CREATE_COMPLETE      | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet2/Subnet (CustomVPCrdsSubnet2Subnet5D3BBD95)
 11/17 | 12:29:03 PM | CREATE_COMPLETE      | AWS::EC2::Subnet                      | CustomVPC/applicationSubnet1/Subnet (CustomVPCapplicationSubnet1Subnet54657CBB)
 12/17 | 12:29:03 PM | CREATE_COMPLETE      | AWS::EC2::Subnet                      | CustomVPC/rdsSubnet1/Subnet (CustomVPCrdsSubnet1SubnetF2F198F2)
 12/17 | 12:29:04 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet1/RouteTableAssociation (CustomVPCrdsSubnet1RouteTableAssociationA22C7DDE)
 12/17 | 12:29:04 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet2/RouteTableAssociation (CustomVPCrdsSubnet2RouteTableAssociation436D19BB)
 12/17 | 12:29:04 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet2/RouteTableAssociation (CustomVPCapplicationSubnet2RouteTableAssociation9D53565E)
 12/17 | 12:29:04 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet1/RouteTableAssociation (CustomVPCapplicationSubnet1RouteTableAssociationC19F61B0)
 12/17 | 12:29:05 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet2/RouteTableAssociation (CustomVPCrdsSubnet2RouteTableAssociation436D19BB) Resource creation Initiated
 12/17 | 12:29:05 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet1/RouteTableAssociation (CustomVPCrdsSubnet1RouteTableAssociationA22C7DDE) Resource creation Initiated
 12/17 | 12:29:05 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet1/RouteTableAssociation (CustomVPCapplicationSubnet1RouteTableAssociationC19F61B0) Resource creation Initiated
 12/17 | 12:29:05 PM | CREATE_IN_PROGRESS   | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet2/RouteTableAssociation (CustomVPCapplicationSubnet2RouteTableAssociation9D53565E) Resource creation Initiated
 13/17 | 12:29:20 PM | CREATE_COMPLETE      | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet2/RouteTableAssociation (CustomVPCrdsSubnet2RouteTableAssociation436D19BB)
 14/17 | 12:29:20 PM | CREATE_COMPLETE      | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/rdsSubnet1/RouteTableAssociation (CustomVPCrdsSubnet1RouteTableAssociationA22C7DDE)
 15/17 | 12:29:20 PM | CREATE_COMPLETE      | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet1/RouteTableAssociation (CustomVPCapplicationSubnet1RouteTableAssociationC19F61B0)
 16/17 | 12:29:20 PM | CREATE_COMPLETE      | AWS::EC2::SubnetRouteTableAssociation | CustomVPC/applicationSubnet2/RouteTableAssociation (CustomVPCapplicationSubnet2RouteTableAssociation9D53565E)

 ✅  VpcStack

Outputs:
VpcStack.ExportsOutputRefCustomVPCrdsSubnet2Subnet5D3BBD95F65E7D1E = subnet-0a91cdd345f244609
VpcStack.ExportsOutputRefCustomVPCrdsSubnet1SubnetF2F198F2C912DF76 = subnet-037f62688a9e3bef6
VpcStack.ExportsOutputRefCustomVPC616E3387378F0964 = vpc-0f5c8c8f63e8b2c62

Stack ARN:
arn:aws:cloudformation:ca-central-1:304786922662:stack/VpcStack/d8994310-adff-11ea-b95c-0ee7f85b481a
RDSStack
This deployment will make potentially sensitive changes according to your current security approval level (--require-approval broadening).
Please confirm you intend to make the following modifications:

Security Group Changes
┌───┬──────────────────────────────────────────────────┬─────┬────────────┬─────────────────┐
│   │ Group                                            │ Dir │ Protocol   │ Peer            │
├───┼──────────────────────────────────────────────────┼─────┼────────────┼─────────────────┤
│ + │ ${aurora-postgres-cluster/SecurityGroup.GroupId} │ Out │ Everything │ Everyone (IPv4) │
└───┴──────────────────────────────────────────────────┴─────┴────────────┴─────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Do you wish to deploy these changes (y/n)? y
RDSStack: deploying...
RDSStack: creating CloudFormation changeset...

 ❌  RDSStack failed: Error [ValidationError]: Given input did not match expected format
    at Request.extractError (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/protocol/query.js:50:29)
    at Request.callListeners (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/sequential_executor.js:106:20)
    at Request.emit (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/sequential_executor.js:78:10)
    at Request.emit (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/request.js:683:14)
    at Request.transition (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/request.js:22:10)
    at AcceptorStateMachine.runTo (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/state_machine.js:14:12)
    at /foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/state_machine.js:26:10
    at Request.<anonymous> (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/request.js:38:9)
    at Request.<anonymous> (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/request.js:685:12)
    at Request.callListeners (/foo/cdk-lambda-pg-toan-tran/node_modules/aws-cdk/node_modules/aws-sdk/lib/sequential_executor.js:116:18) {
  message: 'Given input did not match expected format',
  code: 'ValidationError',
  time: 2020-06-14T05:29:58.096Z,
  requestId: 'ea86c80e-a6f0-4179-916d-a105cb4cf92d',
  statusCode: 400,
  retryable: false,
  retryDelay: 105.38531393120805
}
Given input did not match expected format
npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR! [email protected] cdk: `cdk "deploy" "ApplicationStack"`
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the [email protected] cdk script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR! A complete log of this run can be found in:
npm ERR!     /foo/.npm/_logs/2020-06-14T05_29_58_124Z-debug.log