This is a blank project for CDK development with TypeScript.

The cdk.json file tells the CDK Toolkit how to execute your app.

• npm run build compile typescript to js
• cdk deploy deploy this stack to your default AWS account/region
• cdk diff compare deployed stack with current state
• cdk synth emits the synthesized CloudFormation template

Also see notebook.ipynb

The SaaS Managed Platform (SMP) project is a foundational demonstration designed to exhibit how Software as a Service (SaaS) providers can effectively incorporate a Managed Service experience within their offerings. The project centers around demonstrating the core principles of merging standard SaaS features, data isolation, close customer integrations, and platform customizations.

SMP leverages multi-tenant architecture to reveal how a typical SaaS environment can be engineered to maintain more stable platform upgrade patterns across customers who are sensitive to changes, while ensuring data security and privacy through effective tenant isolation.

To setup the project, you'll need an AWS account with Control Tower setup in it with all the basic settings. Once you have that set the required environment variables.

export ACCOUNT_EMAIL_USER=YOUR_EMAIL_ADDRESS # This is the part of your email address before the @
export ACCOUNT_EMAIL_DOMAIN=YOUR_EMAIL_DOMAIN # this is the portion of the email address after the @

Run cdk deploy in order to deploy the primary stack. This stack will deploy an API with an API key, along with the nessisary components used to create, track, and deploy to accounts.

cdk deploy

The outputs from this stack will be used in later steps

To finish the account setup, pull the code commit repo which is output, and place the source code from this repository in it and commit it. After that, create two branches named "1.0" and "2.0".

Replace the placeholders below with the outputs from the cdk deployment

export ManagementApiUrl="URL_PLACEHOLDER" # The url for the endpoint created by the cdk
export ManagementApiKey="API_KEY_PLACEHOLDER" # The api key created by the cdk

For the endpoint, the following structure will be used to create new accounts and update existing accounts:

{

"accountId": "",

"customerName": "",

"expiration": "YYYY-mm-dd",

"products": [{ "name": "webapp", "version": "1.0"}],

"adminEmails": ["$ACCOUNT_EMAIL_USER@YOUR_EMAIL_DOMAIN"]

}

by not including the accountId, the API will create a new account and return the new account id

# The following sends a put request to the management api to create a new account
curl -X PUT -H "Content-Type: application/json" -d '{ "customerName": "unicorncorp", "expiration": "2023-01-01", "products": [{ "name": "webapp", "version": "1.0"}], "adminEmails":["$ACCOUNT_EMAIL_USER@YOUR_EMAIL_DOMAIN"] }' $ManagementApiUrl

The account creation process follows the process bellow.

Api Gateway -> BuildAccountLambda: Initiates the account creation or update.

BuildAccountLambda -> AccountCreateStateMachine: The workflow for creating or updating an account

AccountCreateStateMachine -> BuildAccountLambda: Creates or updates the AWS Account for the specified account, and kicks of the creation of a Control Tower integrated account

Cloudwatch Rule -> HandleAccountCreatedEvent: On the completion of the account creation, notifies AccountCreateStateMachine that the step is complete

AccountCreateStateMachine -> PipelineCentralSaasCodeBuild: Pulls the updated configurations for the DynamoDB and performs a deployemnt of the central stack with all new accounts to create their pipelines

AccountCreateStateMachine -> ReleaseProductCodePipelineTask: Calls the newly created release pipeline for the new account in order to deploy the SaaS product.

In order to facilitate the deployment the first time through, this project has a manual approval step. This step notifies an SNS topic which then kicks off a step function which at a specific deployment window will execute the changeset created by the release pipeline.

In the DynamoDB, configurations are stored for the last time the account was updated, the product version and various other features. These are also extracted real-time and placed into an S3 bucket which represents a basic datalake. Not included in this project is the glue crawler. The S3 bucket is designed to be able to have a glue cralwer crawl the data in order to enable Athena and Quicksight reporting on the state of the systems.

To manually deploy updates there are two steps.

Pull all the accounts into the "./temp/accounts.json" file

export DYNAMODB_TABLE_NAME=YOUR_DYNAMODB_TABLE_NAME # The name of the dynamodb table created by the cdk

# Create the ./temp/accounts.json file
npm run pullenv

After the ./temp/accounts.json is created then deploy the cdk

cdk deploy