ジオフェンスコレクションの設定

import { defineBackend } from "@aws-amplify/backend";
import { Policy, PolicyStatement } from "aws-cdk-lib/aws-iam";
import { CfnGeofenceCollection } from "aws-cdk-lib/aws-location";
import { auth } from "./auth/resource";
import { data } from "./data/resource";

const backend = defineBackend({
  auth,
  data,
  // additional resources
});

const geoStack = backend.createStack("geo-stack");

// create a location services geofence collection
const myGeofenceCollection = new CfnGeofenceCollection(
  geoStack,
  "GeofenceCollection",
  {
    collectionName: "myGeofenceCollection",
    pricingPlan: "RequestBasedUsage",
    tags: [
      {
        key: "name",
        value: "myGeofenceCollection",
      },
    ],
  }
);

// create an IAM policy to allow interacting with geofence collection resource
const myGeofenceCollectionPolicy = new Policy(
  geoStack,
  "GeofenceCollectionPolicy",
  {
    policyName: "myGeofenceCollectionPolicy",
    statements: [
      new PolicyStatement({
        actions: [
          "geo:GetGeofence",
          "geo:PutGeofence",
          "geo:BatchPutGeofence",
          "geo:BatchDeleteGeofence",
          "geo:ListGeofences",
        ],
        resources: [myGeofenceCollection.attrArn],
      }),
    ],
  }
);

// apply the policy to the authenticated and unauthenticated roles
backend.auth.resources.authenticatedUserIamRole.attachInlinePolicy(myGeofenceCollectionPolicy);
backend.auth.resources.unauthenticatedUserIamRole.attachInlinePolicy(myGeofenceCollectionPolicy);

// patch the geofence collection resource to the expected output configuration
backend.addOutput({
  geo: {
    geofence_collections: {
      default: myGeofenceCollection.collectionName,
      items: [myGeofenceCollection.collectionName],
    },
  },
});

import { defineAuth } from '@aws-amplify/backend';

export const auth = defineAuth({
  loginWith: {
    email: true,
  },
  groups: ["User"],
});

const myGeofenceCollectionPolicy = new Policy(
  geoStack,
  "GeofenceCollectionPolicy",
  {
    policyName: "myGeofenceCollectionPolicy",
    statements: [
      new PolicyStatement({
        actions: [
          "geo:GetGeofence",
          "geo:PutGeofence",
          "geo:BatchPutGeofence",
          "geo:BatchDeleteGeofence",
          "geo:ListGeofences",
        ],
        resources: [myGeofenceCollection.attrArn],
      }),
    ],
  }
);

backend.auth.resources.groups["User"].role.attachInlinePolicy(myGeofenceCollectionPolicy);