aws-samples / aws-proton-sample-services

Sample application code for AWS Proton

AWS Proton Sample Services

This repository contains samples of application code that can be deployed with AWS Proton using the AWS Proton Sample Templates for CloudFormation and for Terraform.

Each folder in this repository corresponds to a service. The sample templates contain pipeline a pipeline parameter that allow you to select a specific folder, so that you can select the correct folder for your type of service.

• ecs-backend

  Flask app that responds with a Hello message along with the Time. README

• ecs-ping-backend-a-record

  Application code to ping Fargate backend service using service discovery. README

• ecs-ping-backend-srv-record

  Application code to ping ECS on EC2 backend service using service discovery. README

• ecs-ping-sns

  Python application that sends a random 5-letter string along with the time to the shared SNS topic, every 5 minutes. README

• ecs-static-website

  Containerized static website. README

• ecs-worker

  Python application that polls the SQS queue for messages, and writes the message body to CloudWatch logs. README

• lambda-ping-sns

  Lambda function to send a random string and time to the shared SNS topic, whenever invoked by API Gateway HTTP API. README

• lambda-worker

  Lambda function that writes the event, context object and SQS message to CloudWatch Logs. README

Security

See CONTRIBUTING for more information.

Code of Conduct

See CODE OF CONDUCT for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.

aws-proton-sample-services's Issues

update Dockerfile's nginx version to 1.20.1+

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. (CVE-2021-23017)

The nginx:1.19.5 version in the Dockerfile is vulnerable to CVE-2021-23017 which is marked as critical in Amazon Linux Security Center. It is reasonable to also update the sample in order to prevent vulnerable versions from being used again.

Reference:

1. NGINX security advisory (CVE-2021-23017)
2. NVD - CVE-2021-23017
3. Amazon Linux Security Center - ALAS-2021-1507