Medplum Infra

CDK scripts to setup the full stack:

- S3 + CloudFront for static site
- VPC for private network
- Fargate for backend server
- Aurora RDS for database

!diagram

$3

Medplum uses npm workspaces for a monorepo configuration.

See Developer Setup for cloning the repository and installing dependencies.

$3

First, create a configuration file.

Next, it is strongly recommended to diff changes before deploying.

``bash
npx cdk diff -c config=my-config.json
`

`bash
npx cdk deploy -c config=my-config.json
`

$3

`
npx cdk destroy
`

$3

Based on: https://github.com/aws-samples/aws-cdk-examples/tree/master/typescript/static-site

Creates:

- S3 Bucket
- CloudFront distribution
- SSL Certificate
- Route 53 Entries

$3

Based on: Based on: https://github.com/aws-samples/http-api-aws-fargate-cdk/blob/master/cdk/singleAccount/lib/fargate-vpclink-stack.ts

Creates:

- VPC
- Security Groups
- Fargate Task and Service
- CloudWatch Log Groups
- Load Balancer
- SSL Certificate
- Route 53 Entries

$3

Based on:

The CloudFront distribution requires a public key for signature verification.

Generate a 2048 bit RSA key:

`sh
openssl genrsa -des3 -out private.pem 2048
`

Export the public key to a file:

`sh
openssl rsa -in private.pem -outform PEM -pubout -out public.pem
`

Open the public.pem file and ensure that it starts with -----BEGIN PUBLIC KEY-----`. This is how you know that this file is the public key of the pair and not a private key.

Add the public key to the CDK infrastructure configuration.

Add the private key to the server configuration settings (JSON, AWS Parameter Store, etc).