tmokmss / opensearch-rest-resources

Manage OpenSearch REST resources from AWS CDK.

Home Page:https://constructs.dev/packages/opensearch-rest-resources/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Clean dependencies of OpenSearch custom resources on domain security group

tmokmss opened this issue · comments

We should only depend on the relavant security group rule, namely DomainSecurityGroupfromOpenSearchRestResourcesStackOpenSearchRestCustomResourceHandlerd4706ae7e0a24092a2057e2d4fb887d4c8e35097ce732b8fe8a8d95ca1c119b98830288f94SecurityGroup19DF8FA44434740CD7E in the case below.

"DependsOn": [
"DomainAccessPolicyEE735B04",
"DomainSecurityGroupfromOpenSearchRestResourcesStackOpenSearchRestCustomResourceHandlerd4706ae7e0a24092a2057e2d4fb887d4c8e35097ce732b8fe8a8d95ca1c119b98830288f94SecurityGroup19DF8FA44434740CD7E",
"DomainSecurityGroupfromOpenSearchRestResourcesStackTestHandlerSecurityGroup4A27F912443FFE31955",
"DomainSecurityGroup48AA5FD6"
],

since it will be difficult to get the exact resource from construct tree, we should create a L1 security group rule resource for our own instead.