【CDK】Honoで簡単なCRUD処理のバックエンドAPIを作成してみた（Lambda + API Gateway + RDS（Aurora））

cdk init --language=typescript

# PrismaとAWS SDKの関連ライブラリ
bun install prisma@6.3.0 @prisma/client@6.3.0 @types/aws-lambda@8.10.147

# Honoとその関連ライブラリ
bun install hono@4.6.2 @hono/zod-validator@0.2.2 zod@3.23.8

# その他の必要なライブラリ
bun install uuid@10.0.0

# 開発用ライブラリ
bun install --save-dev @types/uuid@10.0.0 dotenv-cli@8.0.0

.
├── README.md                     # プロジェクトの説明文書
├── bin
│   └── blog-sample-hono-rds.ts   # CDKアプリケーションのエントリーポイント
├── cdk.json                      # CDKの設定ファイル
├── compose.yaml                  # ローカル開発用のDocker設定
├── .env                          # 環境変数設定ファイル（Githubにはコミットしない）
├── lambda                        # Lambda関数のソースコード
│   ├── index.ts                  # Lambda関数のエントリーポイント
│   └── src
│       ├── api
│       │   └── todos
│       │       └── todos.ts      # Todoに関するAPI実装
│       ├── app.ts                # Honoアプリケーションの主要設定
│       ├── .env.local            # ローカル開発環境用の環境変数（Githubにはコミットしない）
│       └── prisma                # Prisma関連のファイル
│           ├── schema.prisma     # Prismaスキーマ定義
│           └── migrations/       # データベースマイグレーションファイル
├── lib
│   └── blog-sample-hono-rds-stack.ts  # CDKスタックの定義
├── package.json                  # プロジェクトの依存関係と設定
└── tsconfig.json                 # TypeScriptの設定ファイル

version: '3.8'

services:
  db:
    image: mysql:8.0
    container_name: mysql_container
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: rootpassword
      MYSQL_DATABASE: todo_db
    ports:
      - "3306:3306"
    volumes:
      - mysql_data:/var/lib/mysql

volumes:
  mysql_data:

docker compose up -d
[+] Running 1/1
 ✔ Container mysql_container  Started                                                                                 0.6s 

# ディレクトリ移動
cd lambda/src
bunx prisma init --datasource-provider mysql

✔ Your Prisma schema was created at prisma/schema.prisma
  You can now open it in your favorite editor.

warn You already have a .gitignore file. Don't forget to add `.env` in it to not commit any private information.

Next steps:
1. Set the DATABASE_URL in the .env file to point to your existing database. If your database has no tables yet, read https://pris.ly/d/getting-started
2. Run prisma db pull to turn your database schema into a Prisma schema.
3. Run prisma generate to generate the Prisma Client. You can then start querying your database.
4. Tip: Explore how you can extend the ORM with scalable connection pooling, global caching, and real-time database events. Read: https://pris.ly/cli/beyond-orm

More information in our documentation:
https://pris.ly/d/getting-started

# 初期化が完了したら元のディレクトリへ
cd ../..

generator client {
  provider = "prisma-client-js"
  binaryTargets = ["linux-arm64-openssl-3.0.x", "darwin-arm64"]
}

datasource db {
  provider = "mysql"
  url      = env("DATABASE_URL")
}

model Todo {
  id        String    @id @default(uuid())
  userId    String
  title     String
  completed Boolean   @default(false)
  dueDate   DateTime?
  createdAt DateTime  @default(now())
  updatedAt DateTime  @updatedAt
}

DATABASE_URL=mysql://root:rootpassword@localhost:3306/todo_db

{
  ///省略
  ...
  "scripts": {
		// 追加
    "migrate:dev": "cd lambda/src && bunx dotenv -e .env.local bunx prisma migrate dev"
  },
  ...
}

bunx run migrate:dev

✔ Enter a name for the new migration: … init
Applying migration `20250203080509_init`

The following migration(s) have been created and applied from new schema changes:

migrations/
  └─ 20250203080509_init/
    └─ migration.sql

-- CreateTable
CREATE TABLE `Todo` (
    `id` VARCHAR(191) NOT NULL,
    `userId` VARCHAR(191) NOT NULL,
    `title` VARCHAR(191) NOT NULL,
    `completed` BOOLEAN NOT NULL DEFAULT false,
    `dueDate` DATETIME(3) NULL,
    `createdAt` DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
    `updatedAt` DATETIME(3) NOT NULL,

    PRIMARY KEY (`id`)
) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

// lambda/index.ts

import { Hono } from "hono";
import { z } from "zod";
import { zValidator } from "@hono/zod-validator";
import { PrismaClient } from "@prisma/client"

const prisma = new PrismaClient();

// カスタムZodスキーマ for YYYY-MM-DD形式の日付
const dateSchema = z.string().refine(
  (val) => {
    return /^\d{4}-\d{2}-\d{2}$/.test(val) && !isNaN(Date.parse(val));
  },
  {
    message: "Invalid date format. Use YYYY-MM-DD",
  }
);

// Zodスキーマの定義
const TodoSchema = z.object({
  userId: z.string().min(1),
  title: z.string().min(1).max(100),
  completed: z.boolean(),
  dueDate: dateSchema.optional(),
});

const TodoUpdateSchema = TodoSchema.partial().omit({ userId: true });

const todos = new Hono()
  .post("/", zValidator("json", TodoSchema), async (c) => {
    const validatedData = c.req.valid("json");

    try {
      const todo = await prisma.todos.create({
        data: {
          ...validatedData,
          dueDate: validatedData.dueDate ? new Date(validatedData.dueDate) : null,
        },
      });

      return c.json({ message: "Todo created successfully", todo }, 201);
    } catch (error) {
      console.error(error);
      return c.json({ error: "Failed to create todo" }, 500);
    }
  })
  .get("/user/:userId", async (c) => {
    const userId = c.req.param("userId");

    try {
      const todos = await prisma.todos.findMany({
        where: { userId },
        orderBy: { createdAt: "desc" },
      });

      return c.json(todos);
    } catch (error) {
      console.error(error);
      return c.json({ error: "Failed to retrieve todos" }, 500);
    }
  })
  .get("/:id", async (c) => {
    const id = c.req.param("id");

    try {
      const todo = await prisma.todos.findUnique({
        where: { id },
      });

      if (!todo) {
        return c.json({ error: "Todo not found" }, 404);
      }

      return c.json(todo);
    } catch (error) {
      console.error(error);
      return c.json({ error: "Failed to retrieve todo" }, 500);
    }
  })
  .put("/:id", zValidator("json", TodoUpdateSchema), async (c) => {
    const id = c.req.param("id");
    const validatedData = c.req.valid("json");

    try {
      const todo = await prisma.todos.update({
        where: { id },
        data: {
          ...validatedData,
          dueDate: validatedData.dueDate ? new Date(validatedData.dueDate) : undefined,
        },
      });

      return c.json(todo);
    } catch (error) {
      console.error(error);
      return c.json({ error: "Failed to update todo" }, 500);
    }
  })
  .delete("/:id", async (c) => {
    const id = c.req.param("id");

    try {
      await prisma.todos.delete({
        where: { id },
      });

      return c.json({ message: "Todo deleted successfully" });
    } catch (error) {
      console.error(error);
      return c.json({ error: "Failed to delete todo" }, 500);
    }
  });

export { todos };

import { Hono } from "hono";
import { logger } from "hono/logger";
import { basicAuth } from "hono/basic-auth";
import { todos } from "./api/todos/todos";

const app = new Hono();

// ログの設定
app.use("*", logger());
//Basic認証の設定
app.use(
  "*",
  basicAuth({
    username: process.env.BASIC_USERNAME ? process.env.BASIC_USERNAME : "a",
    password: process.env.BASIC_PASSWORD ? process.env.BASIC_PASSWORD : "a",
  })
);

app.route("/api/todos", todos);

export default app;

import { handle } from 'hono/aws-lambda'
import app from './src/app'

// index.ts で定義された純粋なHTTPサーバをAWS Lambda用のアダプタでラップしてハンドラとしてエクスポート
export const handler = handle(app)

import { execSync } from "child_process";
import {
  CdkCustomResourceHandler,
  CdkCustomResourceResponse,
} from "aws-lambda";
import { v4 as uuidv4 } from 'uuid';

export const handler: CdkCustomResourceHandler = async (event) => {
  const physicalResourceId = event.ResourceProperties.physicalResourceId ?? uuidv4();
  if (event.RequestType === "Delete") {
    return {
      PhysicalResourceId: physicalResourceId,
    };
  }
  if (!process.env.DATABASE_URL) {
    throw new Error("DB_CONNECTION is not set");
  }

  return new Promise<CdkCustomResourceResponse>((resolve) => {
    setInterval(() => {
      try {

        const stdout = execSync(`prisma migrate deploy`, {
          env: {
            ...process.env,
            DATABASE_URL: process.env.DATABASE_URL,
          }
        });
        console.log(stdout.toString());
        resolve({
          PhysicalResourceId: physicalResourceId,
        });
      } catch (error) {
        console.error("Migration is failed %s, will be retry...", error);
      }
    }, 10 * 1000);
  });
};

FROM node:20 AS builder

WORKDIR /app
RUN npm init -y
RUN npm install -g typescript
RUN npm install --save-dev @types/node @types/aws-lambda
COPY migration.ts ./
RUN tsc migration.ts

FROM public.ecr.aws/lambda/nodejs:20

COPY --from=builder /app/migration.js ${LAMBDA_TASK_ROOT}/
COPY src/prisma ${LAMBDA_TASK_ROOT}/
RUN npm i -g prisma

CMD [ "migration.handler" ]

{
  ///省略
  ...
  "scripts": {
		// 追加
    "dev": "bunx dotenv -e ./lambda/src/.env.local bun run lambda/src/app.ts"
  },
  ...
}

BASIC_USERNAME=test
BASIC_PASSWORD=test

bun run dev

# Create: 新しいTodoを作成
curl -i -X POST "http://localhost:3000/api/todos" \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic <your-information>" \
  -d '{"userId": "user123", "title": "新しいタスク", "completed": false, "dueDate": "2023-12-31"}'
HTTP/1.1 201 Created
Content-Type: application/json
Date: Mon, 03 Feb 2025 08:29:18 GMT
Content-Length: 282

{"message":"Todo created successfully","todo":{"id":"01JK5EV8SYA8MSE2THNMS2HWXJ","userId":"user123","title":"新しいタスク","completed":false,"dueDate":"2023-12-31T00:00:00.000Z","description":null,"createdAt":"2025-02-03T08:29:19.038Z","updatedAt":"2025-02-03T08:29:19.038Z"}}

# Read
curl -i -X GET "http://localhost:3000/api/todos/user/user123" \
  -H "Authorization: Basic <your-information>"
HTTP/1.1 200 OK
Content-Type: application/json
Date: Mon, 03 Feb 2025 08:29:49 GMT
Content-Length: 237

[{"id":"01JK5EV8SYA8MSE2THNMS2HWXJ","userId":"user123","title":"新しいタスク","completed":false,"dueDate":"2023-12-31T00:00:00.000Z","description":null,"createdAt":"2025-02-03T08:29:19.038Z","updatedAt":"2025-02-03T08:29:19.038Z"}]   

# Update
curl -i -X PUT "http://localhost:3000/api/todos/01JK5EV8SYA8MSE2THNMS2HWXJ" \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic <your-information>" \
  -d '{"title": "更新されたタスク", "completed": true}'
HTTP/1.1 200 OK
Content-Type: application/json
Date: Mon, 03 Feb 2025 08:30:35 GMT
Content-Length: 240

{"id":"01JK5EV8SYA8MSE2THNMS2HWXJ","userId":"user123","title":"更新されたタスク","completed":true,"dueDate":"2023-12-31T00:00:00.000Z","description":null,"createdAt":"2025-02-03T08:29:19.038Z","updatedAt":"2025-02-03T08:30:36.144Z"}

# Delete
curl -i -X DELETE "http://localhost:3000/api/todos/01JK5EV8SYA8MSE2THNMS2HWXJ" \
  -H "Authorization: Basic <your-information>"
HTTP/1.1 200 OK
Content-Type: application/json
Date: Mon, 03 Feb 2025 08:31:29 GMT
Content-Length: 39

{"message":"Todo deleted successfully"}

# 認証エラー
curl -i -X GET "http://localhost:3000/api/todos/user/user123" \
  -H "Authorization: Basic test"
HTTP/1.1 401 Unauthorized
WWW-Authenticate: Basic realm="Secure Area"
content-type: application/octet-stream
Date: Sat, 01 Feb 2025 16:13:22 GMT
Content-Length: 12

Unauthorized

# 必須フィールドの欠落
curl -i -X POST "http://localhost:3000/api/todos" \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic <your-information>" \
  -d '{"title": "新しいタスク", "completed": false}'
HTTP/1.1 400 Bad Request
Content-Type: application/json
Date: Sat, 01 Feb 2025 16:13:54 GMT
Content-Length: 162

{"success":false,"error":{"issues":[{"code":"invalid_type","expected":"string","received":"undefined","path":["userId"],"message":"Required"}],"name":"ZodError"}}

BASIC_USERNAME=XXX
BASIC_PASSWORD=YYY
RDS_DATABASE_NAME=todo_db
RDS_USERNAME=ZZZ
RDS_PASSWORD=DDD

cdk deploy

 ✅  BlogSampleHonoRdsStack

✨  Deployment time: 903.1s

Outputs:
BlogSampleHonoRdsStack.ApiEndpoint = https://<your-endpoint>
Stack ARN:
arn:aws:cloudformation:ap-northeast-1:<your-account>:stack/BlogSampleHonoRdsStack/xxx

✨  Total time: 925.12s

# Create: 新しいTodoを作成
curl -i -X POST "https://your-endopoint/api/todos" \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic <your-information>" \
  -d '{"userId": "user123", "title": "新しいタスク", "completed": false, "dueDate": "2023-12-31"}'
HTTP/2 201 
content-type: application/json
content-length: 282
date: Mon, 03 Feb 2025 07:38:33 GMT
x-amzn-trace-id: Root=1-67a07278-034fea4b36f4d3f100add63f;Parent=35912d6a5ea32718;Sampled=0;Lineage=1:d9c01db3:0
x-amzn-requestid: 3caa63ab-8868-40f5-94ff-87c02707f0d8
x-amz-apigw-id: FZbS6Gc4tjMEZjQ=
x-cache: Miss from cloudfront
via: 1.1 77c20654dd474081d033f27ad1b56e1e.cloudfront.net (CloudFront)
x-amz-cf-pop: NRT51-C4
x-amz-cf-id: T6rcuZ3hzxTGK7qXqsi5H7TrC-Y7Wf-vO_qFWBW7cW2lbveiqc3qxQ==

{"message":"Todo created successfully","todo":{"id":"01JK5BYAQXSM6B74XX338WFBQH","userId":"user123","title":"新しいタスク","completed":false,"dueDate":"2023-12-31T00:00:00.000Z","description":null,"createdAt":"2025-02-03T07:38:33.596Z","updatedAt":"2025-02-03T07:38:33.596Z"}}

curl -i -X GET "https://your-endopoint/api/todos/user/user123" \
  -H "Authorization: Basic <your-information>"
HTTP/2 200 
content-type: application/json
content-length: 237
date: Mon, 03 Feb 2025 07:40:15 GMT
x-amzn-trace-id: Root=1-67a072de-7287eadb3ca4eeb039b54059;Parent=6e7ab73aca882002;Sampled=0;Lineage=1:d9c01db3:0
x-amzn-requestid: 619b11fc-89d2-44a4-95f7-13e6e23ff51e
x-amz-apigw-id: FZbi5EyztjMESmw=
x-cache: Miss from cloudfront
via: 1.1 70679ce15d5e20423e4b28a0e958e480.cloudfront.net (CloudFront)
x-amz-cf-pop: NRT57-P3
x-amz-cf-id: HfwXF8o9KYi5fEluITrUrNKSlOybB-pMTpOBF067emXTfAIt7N5U8Q==

[{"id":"01JK5BYAQXSM6B74XX338WFBQH","userId":"user123","title":"新しいタスク","completed":false,"dueDate":"2023-12-31T00:00:00.000Z","description":null,"createdAt":"2025-02-03T07:38:33.596Z","updatedAt":"2025-02-03T07:38:33.596Z"}]%