Cloud Assembly Schema
This module is part of the AWS Cloud Development Kit project.
Cloud Assembly
The Cloud Assembly is the output of the synthesis operation. It is produced as part of the
cdk synth
command, or the app.synth() method invocation.
Its essentially a set of files and directories, one of which is the manifest.json file. It defines the set of instructions that are
needed in order to deploy the assembly directory.
For example, when
cdk deployis executed, the CLI reads this file and performs its instructions:
- Build container images.
- Upload assets.
- Deploy CloudFormation templates.
Therefore, the assembly is how the CDK class library and CDK CLI (or any other consumer) communicate. To ensure compatibility between the assembly and its consumers, we treat the manifest file as a well defined, versioned schema.
Schema
This module contains the typescript structs that comprise the manifest.json file, as well as the
generated json-schema.
Versioning
The schema version is specified my the major version of the package release. It follows semantic versioning, but with a small twist.
When we add instructions to the assembly, they are reflected in the manifest file and the json-schema accordingly. Every such instruction, is crucial for ensuring the correct deployment behavior. This means that to properly deploy a cloud assembly, consumers must be aware of every such instruction modification.
For this reason, every change to the schema, even though it might not strictly break validation of the json-schema format,
is considered major version bump. All changes that do not impact the schema are considered a minor version bump.
How to consume
If you'd like to consume the schema file in order to do validations on manifest.json files,
simply download it from this repo and run it against standard json-schema validators, such as jsonschema.
Consumers must take into account the major version of the schema they are consuming. They should reject cloud assemblies
with a major version that is higher than what they expect. While schema validation might pass on such assemblies, the deployment integrity
cannot be guaranteed because some instructions will be ignored.
For example, if your consumer was built when the schema version was 2.0.0, you should reject deploying cloud assemblies with a manifest version of 3.0.0.
Contributing
2 maintainers
Metadata
2 maintainers
Release files for aws-cdk.cloud-assembly-schema 55.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| aws_cdk_cloud_assembly_schema-55.2.0.tar.gz | 284.2 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| aws_cdk_cloud_assembly_schema-55.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 566.7 kB
Release files / aws_cdk_cloud_assembly_schema-55.2.0.tar.gz
| Download URL | aws_cdk_cloud_assembly_schema-55.2.0.tar.gz |
|---|---|
| Size | 284.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a61e02042dc4baa43d9fa0f7618e85567dc5737152dde1e445273b7eaceed795
|
|
BLAKE2b-256 checksum How to use checksums |
556728e679d316ecc79c5d3ab6723dd6afd42ecb4d1de181f77dc8446aa16c65
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.15.0
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logRelease files / aws_cdk_cloud_assembly_schema-55.2.0-py3-none-any.whl
| Download URL | aws_cdk_cloud_assembly_schema-55.2.0-py3-none-any.whl |
|---|---|
| Size | 282.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
900c701c1d6a16108d9d6eae350613ca1416cd75ec771d27d73a76d835e3a0b2
|
|
BLAKE2b-256 checksum How to use checksums |
eeb087a4dcfb7226c0ee73932c3dbb7bcae456844f3bdd2eee44b569f9ac57cd
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.15.0
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logSecurity for aws-cdk.cloud-assembly-schema 55.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for aws_cdk_cloud_assembly_schema-55.2.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
