You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+57-35Lines changed: 57 additions & 35 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,9 +4,9 @@
4
4
5
5
## Deploy
6
6
7
-
*`yarn cdk deploy` deploy this stack to your default AWS account/region
8
-
*`yarn cdk diff` compare deployed stack with current state
9
-
*`yarn cdk synth` emits the synthesized CloudFormation template
7
+
-`yarn cdk deploy` deploy this stack to your default AWS account/region
8
+
-`yarn cdk diff` compare deployed stack with current state
9
+
-`yarn cdk synth` emits the synthesized CloudFormation template
10
10
11
11
## Development
12
12
@@ -26,12 +26,12 @@ yarn test
26
26
27
27
Configuration for the ingestion is provided via environment variables.
28
28
29
-
*`BUCKET`: The bucket to which the ingested data should be written. **Required**
30
-
*`SOURCE`: The [data source](#data-sources) to ingest. **Required**
31
-
*`LCS_API`: The API used when fetching supported measurands. _Default: `'https://api.openaq.org'`_
32
-
*`STACK`: The stack to which the ingested data should be associated. This is mainly used to apply a prefix to data uploaded to S3 in order to separate it from production data. _Default: `'local'`_
33
-
*`SECRET_STACK`: The stack to which the used [Secrets](#provider-secrets) are associated. At times, a developer may want to use credentials relating to a different stack (e.g. a devloper is testing the script, they want output data uploaded to the `local` stack but want to use the production stack's secrets). _Default: the value from the `STACK` env variable_
-`BUCKET`: The bucket to which the ingested data should be written. **Required**
30
+
-`SOURCE`: The [data source](#data-sources) to ingest. **Required**
31
+
-`LCS_API`: The API used when fetching supported measurands. _Default: `'https://api.openaq.org'`_
32
+
-`STACK`: The stack to which the ingested data should be associated. This is mainly used to apply a prefix to data uploaded to S3 in order to separate it from production data. _Default: `'local'`_
33
+
-`SECRET_STACK`: The stack to which the used [Secrets](#provider-secrets) are associated. At times, a developer may want to use credentials relating to a different stack (e.g. a devloper is testing the script, they want output data uploaded to the `local` stack but want to use the production stack's secrets). _Default: the value from the `STACK` env variable_
For data providers that require credentials, credentials should be store on AWS Secrets Manager with an ID composed of the stack name and provider name, such as `:stackName/:providerName`.
120
+
121
+
#### Google Keys
122
+
123
+
Some providers (e.g. CMU, Clarity) require us to read data from Google services (e.g. Drive, Sheets). To do this, the organization hosting the data should do the following:
124
+
125
+
1.[create a project & enable access to the required APIs](https://developers.google.com/workspace/guides/create-project)
126
+
1.[create a service account](https://cloud.google.com/iam/docs/creating-managing-service-accounts)
127
+
1.[generate service account keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys)
128
+
129
+
The should look something like the following and be stored in its entirety within the AWS Secrets Manager.
0 commit comments