Cloud Pods Collaboration Demo

A sample product API built with API Gateway, Lambda (Java), and DynamoDB, designed for collaborative debugging workflows using LocalStack Cloud Pods. Follow the end-to-end walkthrough for this project: https://docs.localstack.cloud/aws/tutorials/cloud-pods-collaborative-debugging/

Prerequisites

• A valid LocalStack for AWS license, which provides a LOCALSTACK_AUTH_TOKEN required to run this sample.
• Docker for running LocalStack.
• Maven and Java 21 for building the Lambda functions.
• Terraform or OpenTofu with lstk, installed via npm install -g @localstack/lstk or brew install localstack/tap/lstk.

export LOCALSTACK_AUTH_TOKEN=<your-auth-token>

Sample Variants

• Terraform sample
• OpenTofu sample

Quick Start

1. Start LocalStack:

docker compose up -d

2. Build Lambda artifacts:

cd lambda-functions
mvn clean package

3. Deploy infrastructure:

cd terraform
./run-tflocal.sh

4. Invoke the API:

./invoke.sh

For OpenTofu, set LSTK_TF_CMD=tofu and run lstk tf in opentofu/ (see opentofu/instructions.md).

5. Test the scenario from the tutorial:

./test.sh

The test needs LocalStack to enforce IAM, as docker-compose.yml does with ENFORCE_IAM=1. With lstk, start it with LOCALSTACK_ENFORCE_IAM=1 lstk start. It adds two products, checks that reading one fails because the policy is missing dynamodb:GetItem, then adds the permission and checks the read works. It restores the original policy version when it exits. Set TF_DIR=opentofu to test the OpenTofu deployment.

License

Licensed under Apache License 2.0. See LICENSE.