feat(apigateway): alb integration by badmintoncryer · Pull Request #36247 · aws/aws-cdk

badmintoncryer · 2025-11-30T15:33:34Z

Issue # (if applicable)

Reason for this change

REST API now supports private integration with ALB using VPC Link V2, without requiring a Network Load Balancer as an intermediary.

https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-private-integration.html

Description of changes

Added a new AlbIntegration class that enables direct integration between API Gateway REST API and Application Load Balancers using VPC Link V2.

Automatic VPC Link V2 creation if not provided
VPC Link reuse for multiple ALBs in the same VPC
Support for both proxy (HTTP_PROXY) and custom (HTTP) integration types
Support for imported ALBs with VPC information

Security Group Handling

The security group configuration follows the same pattern as the existing HTTP API (APIGatewayV2) ALB integration (HttpAlbIntegration):

By default, VpcLink is created with empty SecurityGroupIds (no security groups attached)
Users can optionally provide a custom VpcLink with explicit security groups for stricter security controls

This design ensures consistency between REST API and HTTP API when integrating with ALBs.

Describe any new or updated permissions being added

No new IAM permissions are added.

Description of how you validated changes

Add both unit and integ tests.

Checklist

My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

packages/aws-cdk-lib/aws-apigateway/lib/integration.ts

packages/aws-cdk-lib/aws-apigateway/lib/integrations/alb.ts

…inition

badmintoncryer · 2025-12-04T15:18:48Z

Review unit test
investigate vpc link security group setting

…lbIntegration

github-actions · 2025-12-06T08:09:57Z

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results	48 ran	48 passed

Test	Result
No test annotations available

View Security Guardian Results

github-actions · 2025-12-06T08:09:59Z

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results with resolved templates	48 ran	48 passed

Test	Result
No test annotations available

View Security Guardian Results with resolved templates

…uardian Set `open: false` on ALB listener to prevent automatic 0.0.0.0/0 ingress rule creation, fixing ec2-no-open-security-groups.guard check. The ALB is internal (internetFacing: false) so open ingress is unnecessary. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

alb integration

47525af

aws-cdk-automation requested a review from a team November 30, 2025 15:33

github-actions bot added p2 distinguished-contributor [Pilot] contributed 50+ PRs to the CDK labels Nov 30, 2025

aws-cdk-automation added the pr/needs-further-review PR requires additional review from our team specialists due to the scope or complexity of changes. label Nov 30, 2025

pahud mentioned this pull request Nov 30, 2025

Failed CodeBuild CI - 13 PR(s) pahud/aws-cdk#17

Open

badmintoncryer commented Dec 1, 2025

View reviewed changes

packages/aws-cdk-lib/aws-apigateway/lib/integration.ts Outdated Show resolved Hide resolved

Update packages/aws-cdk-lib/aws-apigateway/lib/integration.ts

88c6903

badmintoncryer commented Dec 1, 2025

View reviewed changes

packages/aws-cdk-lib/aws-apigateway/lib/integration.ts Outdated Show resolved Hide resolved

Update packages/aws-cdk-lib/aws-apigateway/lib/integration.ts

b7724f2

badmintoncryer commented Dec 2, 2025

View reviewed changes

packages/aws-cdk-lib/aws-apigateway/lib/integration.ts Outdated Show resolved Hide resolved

badmintoncryer commented Dec 2, 2025

View reviewed changes

packages/aws-cdk-lib/aws-apigateway/lib/integrations/alb.ts Outdated Show resolved Hide resolved

badmintoncryer added 6 commits December 2, 2025 21:06

Update packages/aws-cdk-lib/aws-apigateway/lib/integrations/alb.ts

44d6603

Update packages/aws-cdk-lib/aws-apigateway/lib/integration.ts

0bed1cf

not set resource name

89131d7

Merge branch 'main' into alb

9f6b949

feat(batch): add Firelens configuration support for AWS Batch Job Def…

d5238e8

…inition

fix(alb): correct naming conventions for VPC and ALB in tests

e00a34d

badmintoncryer force-pushed the alb branch from 39b3ae7 to e00a34d Compare December 5, 2025 08:45

fix(alb): improve VPC determination logic and update test cases for A…

4ff1d3f

…lbIntegration

aws-cdk-automation removed the pr/needs-further-review PR requires additional review from our team specialists due to the scope or complexity of changes. label Dec 6, 2025

badmintoncryer added 2 commits December 6, 2025 17:06

Refactor code structure for improved readability and maintainability

5f367af

Merge branch 'main' into alb

8359291

Merge branch 'main' into alb

6cbb234

badmintoncryer marked this pull request as ready for review December 7, 2025 02:39

aws-cdk-automation added the pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. label Dec 7, 2025

Merge branch 'main' into alb

c0c98cc

Merge branch 'main' into alb

c304cb3

aws-cdk-automation added pr/needs-maintainer-review This PR needs a review from a Core Team Member and removed pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. labels Feb 9, 2026

badmintoncryer added 3 commits February 12, 2026 15:43

Merge branch 'main' into alb

a77cd5f

Merge branch 'main' into alb

1565784

Merge branch 'main' into alb

456cc0f

badmintoncryer temporarily deployed to automation March 3, 2026 01:37 — with GitHub Actions Inactive

Merge branch 'main' into alb

ff67555

badmintoncryer temporarily deployed to automation March 3, 2026 14:31 — with GitHub Actions Inactive

badmintoncryer temporarily deployed to automation March 4, 2026 15:00 — with GitHub Actions Inactive

Merge branch 'main' into alb and fix error codes

63cdf50

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

badmintoncryer temporarily deployed to automation March 18, 2026 12:24 — with GitHub Actions Inactive

aws-cdk-automation added the pr/needs-further-review PR requires additional review from our team specialists due to the scope or complexity of changes. label Mar 18, 2026

aws-cdk-automation temporarily deployed to automation March 18, 2026 12:39 — with GitHub Actions Inactive

Merge branch 'main' into alb

420efff

badmintoncryer temporarily deployed to automation March 27, 2026 14:22 — with GitHub Actions Inactive

badmintoncryer added 2 commits April 2, 2026 12:05

Merge branch 'main' into alb

1f3ee74

Merge remote-tracking branch 'cryer/alb' into alb

8b922cb

badmintoncryer temporarily deployed to automation April 2, 2026 03:17 — with GitHub Actions Inactive

Merge branch 'main' into alb

7e0eeef

badmintoncryer temporarily deployed to automation April 8, 2026 13:01 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(apigateway): alb integration#36247

feat(apigateway): alb integration#36247
badmintoncryer wants to merge 40 commits intoaws:mainfrom
badmintoncryer:alb

badmintoncryer commented Nov 30, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

badmintoncryer commented Dec 4, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

badmintoncryer commented Nov 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Issue # (if applicable)

Reason for this change

Description of changes

Security Group Handling

Describe any new or updated permissions being added

Description of how you validated changes

Checklist

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

badmintoncryer commented Dec 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

badmintoncryer commented Nov 30, 2025 •

edited

Loading

badmintoncryer commented Dec 4, 2025 •

edited

Loading

github-actions bot commented Dec 6, 2025 •

edited

Loading

github-actions bot commented Dec 6, 2025 •

edited

Loading