CDK & deploy

Stacks

Stack	Role
HelixNetwork	VPC (public, private+NAT, isolated), S3 gateway endpoint
HelixData	Artifacts bucket, Neptune cluster, dev SSM bastion
HelixPlatform	AppSync, Cognito, DynamoDB, Fargate workers, Step Functions
HelixFrontend	Static UI, CloudFront, graph query Lambda at /query/*
HelixDocs	VitePress docs at docs.helix-flow.igentify.in

Entry point: infra/bin/app.ts

Deploy (dev account 917630709045)

export AWS_PROFILE=917630709045_AdministratorAccess
aws sso login --region us-east-1 --profile "$AWS_PROFILE"

cd infra
npm run build
npx cdk deploy HelixNetwork HelixData HelixPlatform HelixFrontend HelixDocs

Set CDK_DEFAULT_ACCOUNT and CDK_DEFAULT_REGION (default us-east-1) if not using profile defaults.

DNS & domains

Host	Stack	Route53 record
helix-flow.igentify.in	HelixFrontend	helix-flow.igentify.in → CloudFront
docs.helix-flow.igentify.in	HelixDocs	docs.helix-flow.igentify.in → CloudFront

Hosted zone: igentify.in (Z0936671B635KGY7Z8QP). Override via context or env:

• BASE_DOMAIN, DOCS_DOMAIN
• HOSTED_ZONE_ID, HOSTED_ZONE_NAME

Docs auto-deploy

HelixDocs uses BucketDeployment to run npm ci && npm run build inside docs-site/ (Docker bundling) and upload .vitepress/dist to S3, then invalidate CloudFront. Every cdk deploy HelixDocs republishes documentation.

Frontend UI deploy

The React app is not in CDK yet — after UI changes:

cd frontend
# set VITE_APPSYNC_URL, VITE_COGNITO_* from stack outputs
npm run build
aws s3 sync dist/ s3://<SiteBucketName>/ --delete
aws cloudfront create-invalidation --distribution-id <DistributionId> --paths '/*'

GitHub App (shared with helix-aws)

SSM parameters:

• /helix/github-app/app-id
• /helix/github-app/installation-id
• /helix/github-app/private-key

Optional: /helix-flowgraph/github-webhook-secret

Verification after deploy

1. App loads and sign-in works
2. GET /query/features returns JSON with Cognito token
3. Docs serves this site
4. startScan or UI scan → Step Functions execution
5. S3 prefix helix/flowgraphs/{scanId}/reports/technical-graph.json populated