Skip navigation links

Package software.amazon.awscdk.services.apprunner

AWS::AppRunner Construct Library

See: Description

Package software.amazon.awscdk.services.apprunner Description

AWS::AppRunner Construct Library

This module is part of the AWS Cloud Development Kit project. 

 import software.amazon.awscdk.core.*;

Introduction

AWS App Runner is a fully managed service that makes it easy for developers to quickly deploy containerized web applications and APIs, at scale and with no prior infrastructure experience required. Start with your source code or a container image. App Runner automatically builds and deploys the web application and load balances traffic with encryption. App Runner also scales up or down automatically to meet your traffic needs. With App Runner, rather than thinking about servers or scaling, you have more time to focus on your applications.

Service

The Service construct allows you to create AWS App Runner services with ECR Public, ECR or Github with the source property in the following scenarios:

ECR Public

To create a Service with ECR Public: 

 Service.Builder.create(this, "Service")
         .source(Source.fromEcrPublic(EcrPublicProps.builder()
                 .imageConfiguration(ImageConfiguration.builder().port(8000).build())
                 .imageIdentifier("public.ecr.aws/aws-containers/hello-app-runner:latest")
                 .build()))
         .build();

ECR

To create a Service from an existing ECR repository: 

 import software.amazon.awscdk.core.*;
 
 
 Service.Builder.create(this, "Service")
         .source(Source.fromEcr(EcrProps.builder()
                 .imageConfiguration(ImageConfiguration.builder().port(80).build())
                 .repository(Repository.fromRepositoryName(this, "NginxRepository", "nginx"))
                 .tagOrDigest("latest")
                 .build()))
         .build();

To create a Service from local docker image asset directory built and pushed to Amazon ECR: 

 import software.amazon.awscdk.core.*;
 
 
 DockerImageAsset imageAsset = DockerImageAsset.Builder.create(this, "ImageAssets")
         .directory(join(__dirname, "./docker.assets"))
         .build();
 Service.Builder.create(this, "Service")
         .source(Source.fromAsset(AssetProps.builder()
                 .imageConfiguration(ImageConfiguration.builder().port(8000).build())
                 .asset(imageAsset)
                 .build()))
         .build();

GitHub

To create a Service from the GitHub repository, you need to specify an existing App Runner Connection.

See Managing App Runner connections for more details. 

 Service.Builder.create(this, "Service")
         .source(Source.fromGitHub(GithubRepositoryProps.builder()
                 .repositoryUrl("https://github.com/aws-containers/hello-app-runner")
                 .branch("main")
                 .configurationSource(ConfigurationSourceType.REPOSITORY)
                 .connection(GitHubConnection.fromConnectionArn("CONNECTION_ARN"))
                 .build()))
         .build();

Use codeConfigurationValues to override configuration values with the API configuration source type. 

 Service.Builder.create(this, "Service")
         .source(Source.fromGitHub(GithubRepositoryProps.builder()
                 .repositoryUrl("https://github.com/aws-containers/hello-app-runner")
                 .branch("main")
                 .configurationSource(ConfigurationSourceType.API)
                 .codeConfigurationValues(CodeConfigurationValues.builder()
                         .runtime(Runtime.PYTHON_3)
                         .port("8000")
                         .startCommand("python app.py")
                         .buildCommand("yum install -y pycairo && pip install -r requirements.txt")
                         .build())
                 .connection(GitHubConnection.fromConnectionArn("CONNECTION_ARN"))
                 .build()))
         .build();

IAM Roles

You are allowed to define instanceRole and accessRole for the Service.

instanceRole - The IAM role that provides permissions to your App Runner service. These are permissions that your code needs when it calls any AWS APIs.

accessRole - The IAM role that grants the App Runner service access to a source repository. It's required for ECR image repositories (but not for ECR Public repositories). If not defined, a new access role will be generated when required.

See App Runner IAM Roles for more details.

Skip navigation links

Copyright © 2022. All rights reserved.