aws-samples / apprunner-hotel-app

AppRunner Hotel App

Note: This is not Production grade and simply meant as a demo

Description

This project provisions the base layer infrastructure to demonstrate how AppRunner leverages a VPC Connector to interact with a DB in a private subnet.

AWS Services

• VPC (private + public subnets, IGW, NGW)
• Aurora MySQL in private subnet
• VPC Connector for AppRunner and requisite security groups
• Secrets Manager for DB credentials

Note : AWS App Runner is currently available in these regions:

• us-east-1
• us-east-2
• us-west-2
• ap-northeast-1
• eu-west-1

Deployment Instructions

• Select a region where App Runner is available
• Create a Cloudformation stack using base-infra.yaml
• Deploy the application using the AppRunner Console.
  • Source
    • Point to your Github repo
  • Configure Build
    • Runtime: Nodejs 16
    • Build command: npm install
    • Start command: npm start
    • Port: 8080 (default)
  • Configure service
    • Environment variable:
      • MYSQL_SECRET: DBSecret ARN (Provisioned by base-infra.yaml. See Outputs tab)
      • HOTEL_NAME: HotelName ARN (Provisioned by base-infra.yaml. See Outputs tab)
    • Security: AppRunnerHotelAppRole (Provisioned by base-infra.yaml)
    • Networking:
      • Custom VPC: AppRunnerV2NPrototype-RDS-Connector (Provisioned by infra.yaml)
    • Observability: Enable Tracing with AWS X-Ray

Teardown Instructions

• Go to AppRunner console and delete the service.
• Go to Cloudformation and delete the stack.

apprunner-hotel-app's Issues

No example in doc

Hi there.
I struggle to se how i map the secret attributes to the environment variables.
The secret (normal RDS secrets) contain a JSON object with username, password, host & port attributes

In your doc you write:
MYSQL_HOST: DBSecret ARN (Provisioned by infra.yaml. See Outputs tab)
but mapping to the secret arn, will not map the values to env variabe?
How do i get the attributes mapped in the secret set to the variables?

This fail:
MYSQL_HOST: arn:aws:secretsmanager:<region>:<account>:secret:<secret>:<secret_attribute>

Can you please update the documentation on how this is mapped ?