K M Aau blog

Refers:

How to Create AWS-Enabled Repos in GitHub
DevSecOps CI & Automation:
- RoseR.Chen@bmo.com
- Thomas.Chau@bmo.com

Pre-requisite:

AppCatID: for example, 92315-sim
- the repository request usually made by the AppCatID owner
repository name:
- for example, TREO_APM_CDK_SIM, and the repo will be BMO-Prod/TREO_APM_CDK_SIM_92315

To request an AWS enabled GitHub repository via OneDevops - GitHub - New GitHub Repository:

New GitHub Repository (page 1 of 6)
- Repository Usage: Technology Managed Application (TMS)
- AppCatID or Application Name: 92315 - sim
- Will this repository be used for on-prem DB deployments using Liquibase? No
- Repository Name (Added 0 of 20): TREO_APM_CDK_SIM (+ Add Repository)
  - The following new repositories will be created: TREO_APM_CDK_SIM_92315
- [NEXT] to proceed
New GitHub Repository (page 2 of 6)
- Will this require Cloud Workload:
  - No
  - AWS - Old Account Structure: this!
  - AWS New Multi-Account Structure
  - Azure
- Blueprint:
  - Blank Template
  - Default Legacy Template
  - APIGW-Lambda-DynamoDB Pattern: this!
  - Liquibase Template
  - APIGW-Fargate-RDS Pattern
  - [NEXT] to proceed
New GitHub Repository (page 3 of 6)
- Would you like to link the new repository to an existing team? No
- The following new GitHub teams will be created:
  - Team with Read Permission: TREO_APM_CDK_SIMM_92315
  - Team with Write Permission: TREO_APM_CDK_SIMM_92315_User
  - Team with Maintainer Permission: TREO_APM_CDK_SIMM_92315_Admin
  - Team with Security Champion Permission: TREO_APM_CDK_SIMM_92315_SecurityChampion
  - [NEXT] to proceed
New GitHub Repository (page 4 of 6)
- Do you require additional Application ID(s) that cloud resources can use in this repository?
  - AppCat ID or Application Name (Add Application ID): blank
- Do you require additional Deployment Gating Approval(s)?
  - SIT stages gating approval team: blank
  - UAT stages gating approval team: blank
  - PERF stages gating approval team: blank
  - QA stages gating approval team: blank
  - PROD stages gating approval team (Defaults to Admin Team): TREO_APM_CDK_SIMM_92315_Admin
  - [NEXT] to proceed
New GitHub Repository (page 5 of 6)
- Admins:
  - Primary Repository Admin: michaelt.lee@bmo.com
  - Secondary Repository Admin: edward1.shen@bmo.com
- Approvals will be required from:
  - Requestor Manager: Rueckert, Kevin
  - Repository Owner: Peng, Xin (This is the owner of AppCAT ID 92315 selected for the new repository)
  - [NEXT] to proceed
New GitHub Repository (page 6 of 6)
- Before submitting the request, make sure all information is correct:
  - Repository Usage: Technology Managed Application (TMA)
  - Application Name: sim
  - Application ID: 92315
  - DB Deployments with Liquibase: No
  - Cloud Workload: AWS - Old Account Structure
  - Blueprint: APIGW-Fargate-RDS Pattern
  - Requestor Manager: Rueckert, Kevin
  - Repository Owner: Peng, Xin
  - Primary Admin: Lee, Michael T
  - Secondary Admin: Shen, Edward1
  - Team with Read Permission: TREO_APM_CDK_SIMM_92315
  - Team with Write Permission: TREO_APM_CDK_SIMM_92315_User
  - Team with Maintainer Permission: TREO_APM_CDK_SIMM_92315_Admin
  - Team with Security Champion Permission: TREO_APM_CDK_SIMM_92315_SecurityChampion
  - Additional Deployment Gating Approvals:
    - PROD - TREO_APM_CDK_SIMM_92315_Admin
  - GitHub Repository Name: TREO_APM_CDK_SIMM_92315
  - [SUBMIT] to proceed

A “blank” AWS enabled GitHub repo: Refers:


kaau@OCLT71159526 ~$ cd ${HOME}/myproj/EPRE_NACB_DB_Deployment_and_Support_87735
kaau@OCLT71159526 ~/myproj/EPRE_NACB_DB_Deployment_and_Support_87735$ MSYS_NO_PATHCONV=1 tree.com . /F
Folder PATH listing for volume OSDisk
Volume serial number is 000001B6 307E:48C4
C:\USERS\KAAU\MYPROJ\EPRE_NACB_DB_DEPLOYMENT_AND_SUPPORT_87735
│   .gitignore
│   build.sh
│   readme.md
├───.github
│   │   CODEOWNERS
│   │   dependabot.yml
│   ├───ISSUE_TEMPLATE
│   │       bug_report.md
│   │       custom.md
│   │       feature_request.md
│   └───workflows                                                                                            ---diff and deploy workflows
│           codescanning.default.workflow.yml                                                                   update constantly on Master branch
│           compliant-cfn-diff-deploy.yml
│           compliant-cfn-release.yml
│           compliant-cli-command.yml
│           compliant-diff-deploy-alpha.yml
│           compliant-diff-deploy.yml
│           compliant-modules-feedback.yml
│           compliant-release-alpha.yml
│           compliant-release.yml
├───infra                                                                                                    ---CDK project folder
│   │   cdk.json
│   │   controller.json
│   │   jest.config.js
│   │   package.json
│   │   tsconfig.json
│   ├───bin                                                                                                  ---#1 entry point of the CDK project
│   │       infra.ts
│   ├───config
│   │       index.ts
│   ├───lib                                                                                                  ---#2 CDK implementation folder
│   │       .gitkeep
│   └───test
│           .gitkeep
└───service
        .gitkeep