feat(fsx): add L2 construct for DataRepositoryAssociation

[gingeekrishna]

Summary

Fixes #34649

Adds DataRepositoryAssociation, an L2 construct for AWS::FSx::DataRepositoryAssociation. This links an S3 bucket to a path on an FSx for Lustre file system so data can be automatically imported from S3 into the file system and automatically exported from the file system back to S3.

Before this change, users had to reach for CfnDataRepositoryAssociation directly, with no type safety or validation on event types, path format, or chunk size ranges.

Changes

New file: data-repository-association.ts

• DataRepositoryEventType enum — NEW | CHANGED | DELETED
• S3AutoImportPolicy / S3AutoExportPolicy interfaces with typed events arrays
• S3DataRepositoryConfiguration grouping both policies
• DataRepositoryAssociationProps with fileSystem, bucket, fileSystemPath, optional bucketPrefix, s3, importedFileChunkSizeMiB, batchImportMetaDataOnCreate, removalPolicy
• DataRepositoryAssociation L2 class with:
  • Validates fileSystemPath starts with /
  • Validates importedFileChunkSizeMiB is 1–512,000
  • Validates event arrays are non-empty
  • Builds dataRepositoryPath from bucket + optional bucketPrefix
  • Calls bucket.grantReadWrite(fsx.amazonaws.com) automatically

Updated: index.ts — exports new construct

New file: data-repository-association.test.ts — 12 unit tests covering happy path, prefix handling, policy configuration, bucket policy grant, and all validation errors

Example usage

const bucket = new s3.Bucket(this, 'DataBucket');
const fileSystem = new fsx.LustreFileSystem(this, 'FileSystem', {
  lustreConfiguration: { deploymentType: fsx.LustreDeploymentType.SCRATCH_2 },
  storageCapacityGiB: 1200,
  vpc,
  vpcSubnet,
  fileSystemTypeVersion: fsx.FileSystemTypeVersion.V_2_15,
});

new fsx.DataRepositoryAssociation(this, 'DRA', {
  fileSystem,
  fileSystemPath: '/data',
  bucket,
  s3: {
    autoImportPolicy: { events: [fsx.DataRepositoryEventType.NEW, fsx.DataRepositoryEventType.CHANGED] },
    autoExportPolicy: { events: [fsx.DataRepositoryEventType.NEW, fsx.DataRepositoryEventType.CHANGED, fsx.DataRepositoryEventType.DELETED] },
  },
});

Test plan

• 12 new unit tests — all pass
• Validates fileSystemPath format
• Validates importedFileChunkSizeMiB range
• Validates non-empty event arrays
• Confirms bucket policy is created granting fsx.amazonaws.com access
• Confirms DataRepositoryPath is built correctly with and without bucketPrefix

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a new FSx for Lustre L2 construct to model AWS::FSx::DataRepositoryAssociation, including validation logic and unit tests.

Changes:

• Introduces DataRepositoryAssociation L2 with props for S3 association, auto import/export policies, and validation.
• Exports the new construct from the FSx module index.
• Adds unit tests covering required properties, S3 path behavior, policy rendering, and input validation.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.

File	Description
packages/aws-cdk-lib/aws-fsx/lib/data-repository-association.ts	Implements the new DataRepositoryAssociation L2 construct with validation and S3 bucket permissions.
packages/aws-cdk-lib/aws-fsx/lib/index.ts	Re-exports data-repository-association from the FSx module.
packages/aws-cdk-lib/aws-fsx/test/data-repository-association.test.ts	Adds unit tests validating CloudFormation output and constructor validation behavior.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[aws-cdk-automation]

The pull request linter fails with the following errors:

❌ Features must contain a change to an integration test file and the resulting snapshot.

If you believe this pull request should receive an exemption, please comment and provide a justification. A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed, add Clarification Request to a comment.

✅ A exemption request has been requested. Please wait for a maintainer's review.

[gingeekrishna]

Addressed all four Copilot review comments:

1. Leading-slash stripping — changed replace(/^\//, '') to replace(/^\/+/, '') so multiple leading slashes in bucketPrefix are all removed.

2. CloudFormation ordering — captured the return value of grantReadWrite and called resource.node.addDependency(grant) to ensure the bucket policy exists before CloudFormation creates the DRA.

3. Missing test for max path length — added a test asserting that a fileSystemPath longer than 4096 characters throws.

4. S3 config simplification — removed the intermediate re-wrapping object; props.s3 is now passed directly to CfnDataRepositoryAssociation since S3AutoImportPolicy/S3AutoExportPolicy are structurally compatible with the L1 property types.

Also updated the README with a full DataRepositoryAssociation usage example, compatibility notes (supported deployment types / file system versions), and guidance on when to prefer DRA over the legacy importPath/exportPath approach.

---

Exemption Request

Requesting an exemption for the integration test requirement. FSx for Lustre file systems take 5–10 minutes to provision and incur significant cost per run, making them impractical for automated integration tests in CI. The existing LustreFileSystem L2 construct also has no integration test for the same reason. Unit tests cover all CloudFormation output, validation logic, and the bucket policy dependency.