eoapi-cdk
v11.6.4
Published
A set of constructs deploying pgSTAC with CDK
Readme
eoAPI CDK Constructs
eoapi-cdk is a package of AWS CDK constructs designed to encapsulate eoAPI services and best practices as simple reusable components.
[!IMPORTANT]
We would :heart: to hear from you! Please join the discussion and let us know how you're using eoAPI! This helps us improve the project for you and others. If you prefer to remain anonymous, you can email us at [email protected], and we'll be happy to post a summary on your behalf.
For more background on the included services see The Earth Observation API
Included constructs
Detailed API docs for the constructs can be found here.
pgSTAC Database
An RDS instance with pgSTAC installed and the Postgres parameters optimized for the selected instance type.
STAC API
A STAC API implementation using stac-fastapi with a pgSTAC backend. Packaged as a complete runtime for deployment with API Gateway and Lambda.
For runtime notes on event loops, Mangum lifespan handling, and SnapStart-aware database pool initialization, see lib/stac-api/runtime/README.md.
pgSTAC Titiler API
A complete dynamic tiling API using titiler-pgstac to create dynamic mosaics of assets based on STAC Search queries. Packaged as a complete runtime for deployment with API Gateway and Lambda and fully integrated with the pgSTAC Database construct.
STAC browser
A CDK construct to host a static Radiant Earth STAC browser on S3.
OGC Features/Tiles API
A complete OGC Features/Tiles API using tipg. Packaged as a complete runtime for deployment with API Gateway and Lambda. By default the API will be connected to the Database's public schema.
STAC Ingestor
An API for large scale STAC data ingestion and validation into a pgSTAC instance.

Authentication for the STAC Ingestor API can be configured with JWTs authenticated by JWKS. To learn more about securing FastAPI applications with this approach see Securing FastAPI with JWKS (AWS Cognito, Auth0).
A sample Cognito-based authentication system is available at aws-asdi-auth.
Bastion Host
A bastion host is a secure gateway that provides access to resources in a private subnet. In this case it provides the ability to make administrative connections to eoAPI's pgSTAC instance.

For more background on bastion hosts in AWS see this article.
And for configuration instructions for this construct see the docs.
Published Packages
- https://pypi.org/project/eoapi-cdk/
- https://www.npmjs.com/package/eoapi-cdk/
Release
Versioning is handled via Conventional Commits and Release Please.
Commits merged to main are collected into a release PR. A maintainer reviews and merges that PR to cut a release. After the release is created on GitHub, the distribution workflow publishes the generated Python package to PyPI and the generated JavaScript package to npm.
The release workflow uses the DS_RELEASE_BOT_ID and DS_RELEASE_BOT_PRIVATE_KEY repository secrets to authenticate the release bot.
Tests
Each pull request to main is added to a merge queue so that a "deployment test" workflow can run before the merge actually happens. If the deployment fails, the merge is cancelled. Here is the definition of this workflow and the tests definition.
