Deploy AWS Infrastructure from Cursor IDE

You: "Create a new workload called file-processor for a file upload API"

Created workload: file-processor
Environment: Sandbox (616241259270)
Security Preset: Development Environments (14 rules)
Deployment Method: CloudFormation

Ready to add resources. What would you like to deploy?

You: "Add an S3 bucket for storing uploaded files"

# Adding to workload: file-processor
# Security rules applied: 14
 
Resources:
  UploadsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: file-processor-uploads-${AWS::AccountId}
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      PublicAccessBlockConfiguration:
        BlockPublicAcls: true
        BlockPublicPolicy: true
      VersioningConfiguration:
        Status: Enabled
      LoggingConfiguration:
        DestinationBucketName: !Ref LogsBucket

You: "Deploy it"

You: "Add a Lambda function that processes files when uploaded to the bucket"

# Adding to workload: file-processor
# Stack now contains: S3 bucket + Lambda
 
Resources:
  ProcessorFunction:
    Type: AWS::Lambda::Function
    Properties:
      FunctionName: file-processor-handler
      Runtime: python3.11
      Handler: index.handler
      Role: !GetAtt ProcessorRole.Arn
      Environment:
        Variables:
          BUCKET_NAME: !Ref UploadsBucket
      VpcConfig:  # Added by security preset
        SecurityGroupIds: [!Ref LambdaSG]
        SubnetIds: !Ref PrivateSubnets
 
  UploadTrigger:
    Type: AWS::Lambda::Permission
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref ProcessorFunction
      Principal: s3.amazonaws.com
      SourceArn: !GetAtt UploadsBucket.Arn

You: "Yes, deploy"

You: "Add an API Gateway endpoint to trigger uploads via HTTP"

# Adding to workload: file-processor
# Stack now contains: S3 + Lambda + API Gateway
 
Resources:
  UploadApi:
    Type: AWS::ApiGateway::RestApi
    Properties:
      Name: file-processor-api
 
  UploadEndpoint:
    Type: AWS::ApiGateway::Method
    Properties:
      HttpMethod: POST
      ResourceId: !Ref UploadResource
      RestApiId: !Ref UploadApi
      Integration:
        Type: AWS_PROXY
        IntegrationHttpMethod: POST
        Uri: !Sub arn:aws:apigateway:${AWS::Region}:lambda:path/...

You: "Deploy"

You: "Add a DynamoDB table to store file metadata with fileId as the partition key"

# Adding to workload: file-processor
# Stack now contains: S3 + Lambda + API Gateway + DynamoDB
 
Resources:
  MetadataTable:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: file-processor-metadata
      AttributeDefinitions:
        - AttributeName: fileId
          AttributeType: S
      KeySchema:
        - AttributeName: fileId
          KeyType: HASH
      BillingMode: PAY_PER_REQUEST
      PointInTimeRecoverySpecification:  # Added by security preset
        PointInTimeRecoveryEnabled: true
      SSESpecification:  # Added by security preset
        SSEEnabled: true

You: "Deploy"

You: "Show me the architecture diagram for file-processor"

You: "What's the API endpoint URL?"

API Gateway Endpoint: https://abc123.execute-api.us-east-1.amazonaws.com/prod/upload
S3 Bucket: file-processor-uploads-123456789
DynamoDB Table: file-processor-metadata
Lambda Function: file-processor-handler