CDK constructs to manage Alexa Skills
Project description
cdk-skill-management
Since I am only working with Node.js and TypeScript, the Python package is currently not tested / used. Therefore I am looking for someone to use and test it to provide feedback, if the library is actually working and if there are best practices to apply (e.g. namings, module name, etc.).
Your library for creating and managing Alexa Skills via CloudFormation using AWS CDK.
Table of Contents
Installation
Node.js / TypeScript
To install the Node.js version of this library, use npm or yarn:
npm install cdk-skill-management
# or
yarn add cdk-skill-management
Python
To install the Python version of this library, use pip:
pip install cdk-skill-management
Usage
To use this library in your AWS CDK project, import and instantiate the classes you need.
Regional restrictions
Skills can be deployed in every AWS regions, but Lambda Endpoints are restricted to
- North America:
arn:aws:lambda:us-east-1:<aws_account_id>:function:<lambda_name>
- Europe, India:
arn:aws:lambda:eu-west-1:<aws_account_id>:function:<lambda_name>
- Far East:
arn:aws:lambda:location<aws_account_id>:function:<lambda_name>
CDK deployment order
- You can use
skillPackage.overrides
to patch your lambda function ARN into your skill package. - Make sure to call
addDependency
on your skill instance.
Skill Permissions
In order for Alexa to call the skill endpoint - i.e. the Lambda function - a resource based permission must be added to allow the Alexa Service Principal to call the function. However, this would cause any Alexa Skill to be able to call the endpoint. Therefore, the skill-id should be added as a condition to the permission.
However, when deploying the skill, Alexa immediately checks if the skill endpoint is allowed to be accessed. At this point, we do not have a skill id to add to the resource based permission.
Therefore, this library includes a construct SkillEndpointPermission
, which first creates a resource based permission that allows Alexa to call invokeFunction
in general.
After the creation of the Skill, the Skill Id can be injected into the Permission. To do this, simply call the configureSkillId
method on the SkillEndpointPermission
.
Example
Here's an example including the skillPackage.overrides
and SkillEndpointPermission
.
import * as cdk from 'aws-cdk-lib';
import * as lambda from 'aws-cdk-lib/aws-lambda';
import * as s3Assets from 'aws-cdk-lib/aws-s3-assets';
import * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
import * as ssm from 'aws-cdk-lib/aws-ssm';
import {Construct} from 'constructs';
import * as skill from 'cdk-skill-management';
export class MyStack extends cdk.Stack {
constructor(scope: Construct, id: string, props: cdk.StackProps = {}) {
super(scope, id, props);
const vendorParameter = ssm.StringParameter
.fromStringParameterName(this, 'VendorIdParameter', 'my-skill-vendor-id');
const skillCredentials = secretsmanager
.Secret.fromSecretNameV2(this, 'SkillCredentials', 'my-skill-authentication');
const asset = new s3Assets.Asset(this, 'SkillPackageAsset', {path: './path/to/my/skill-package'});
const myFunction = new lambda.Function(this, 'MyEndpointFunction', {...});
const endpointPermission = new skill.SkillEndpointPermission(this, 'EndpointPermission', {
handler: myFunction,
skillType: skill.SkillType.SMART_HOME,
});
const mySkill = new skill.Skill(this, 'Skill', {
skillType: skill.SkillType.SMART_HOME,
skillStage: 'development',
vendorId: vendorParameter.stringValue,
authenticationConfiguration: {
clientId: skillCredentials.secretValueFromJson('clientId').unsafeUnwrap(),
clientSecret: skillCredentials.secretValueFromJson('clientSecret').unsafeUnwrap(),
refreshToken: skillCredentials.secretValueFromJson('refreshToken').unsafeUnwrap(),
},
skillPackage: {
asset,
overrides: {
manifest: {
apis: {
smartHome: {
endpoint: {
uri: myFunction.functionArn
}
}
}
}
}
},
});
mySkill.addDependency(myFunction);
mySkill.addDependency(endpointPermission);
endpointPermission.configureSkillId(this, 'EndpointPermissionSkill', mySkill);
}
}
Contributing
We welcome contributions from the community. To contribute, please follow our contribution guidelines.
License
This library is licensed under the MIT License - see the LICENSE file for details.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for cdk-skill-management-1.0.14.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | b8aa8698c4ae971046368e35878a1a732d1f5732278830ad7dda915b42cc853d |
|
MD5 | df883a5f8ce2eed1365a3882b0a01ba6 |
|
BLAKE2b-256 | 3b14a55376d438573121e516af29122253a71fc21842c7ad3552f7a9d27f74e3 |
Hashes for cdk_skill_management-1.0.14-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 705affd4f4e2bdefa588d8e267b68a56be4735441e1eae8423a9c9962ff2bce5 |
|
MD5 | 0482e237e495dfe686fcc5fc9a34a28a |
|
BLAKE2b-256 | 4a6b7134815727f39d76ec8496212a2a7dc03a2a39de292aed7b66d6f817e490 |