CDKでREST API×RDBシステムを構築する 2. 実装後半編

    const charSet = "utf8mb4";
    this.cluster = new rds.DatabaseCluster(this.scope, this.clusterId, {
      // 中略
      parameters: {
        time_zone: "Asia/Tokyo",
        character_set_client: charSet,
        character_set_connection: charSet,
        character_set_database: charSet,
        character_set_results: charSet,
        character_set_server: charSet,
        innodb_file_per_table: "1",
        "skip-character-set-client-handshake": "1",
        init_connect: `SET NAMES ${charSet}`,
      },
    });

  private createAuthorizer = (): void => {
    const authorizerId = `${this.appId}-authorizer`;
    this.authorizer = new apigateway.CognitoUserPoolsAuthorizer(
      this.scope,
      authorizerId,
      {
        cognitoUserPools: [this.userPool],
        authorizerName: authorizerId,
        identitySource: "method.request.header.Authorization",
      }
    );
    this.authorizer._attachToApi(this.api);
  };

  private readonly createOptions = (): void => {
    this.optionsWithAuthorizer = {
      authorizationType: apigateway.AuthorizationType.COGNITO,
      authorizer: {
        authorizerId: this.authorizerWrapper.authorizer.authorizerId,
      },
    };
  };

  // 中略

  private readonly addResource = (
    resource: apigateway.IResource,
    pathPart: string,
    apiMethods: ApiMethod[]
  ): apigateway.Resource => {
    const newResource = resource.addResource(pathPart);
    apiMethods.forEach((apiMethod) => {
      const integration = new apigateway.LambdaIntegration(apiMethod.lambda);
      const options = apiMethod.withAuthorizer
        ? this.optionsWithAuthorizer
        : undefined;
      newResource.addMethod(apiMethod.methodOption, integration, options);
    });
    return newResource;
  };

    const instanceType = ec2.InstanceType.of(
      ec2.InstanceClass.T2,
      ec2.InstanceSize.MICRO
    );
    const machineImage = ec2.MachineImage.latestAmazonLinux2023();
    const instanceName = `${this.bastionId}-instance`;
    new ec2.CfnInstance(this.scope, instanceName, {
      availabilityZone: this.vpcWrapper.bastionSubnet.availabilityZone,
      disableApiTermination: false,
      instanceType: instanceType.toString(),
      iamInstanceProfile: this.profile.instanceProfileName!,
      imageId: machineImage.getImage(this.scope).imageId,
      networkInterfaces: [
        {
          deviceIndex: "0",
          associatePublicIpAddress: true,
          deleteOnTermination: true,
          associateCarrierIpAddress: false,
          groupSet: [this.vpcWrapper.bastionSecurityGroup.securityGroupId],
          subnetId: this.vpcWrapper.bastionSubnet.subnetId,
        },
      ],
      tags: [
        {
          key: "Name",
          value: instanceName,
        },
      ],
      userData: fs.readFileSync(
        join(__dirname, "..", "assets", "userData.sh"),
        "base64"
      ),
    });