Setting ENABLED_EXTENSIONS env variable does not propagate properly

[robertd]

It looks like that setting the ENABLED_EXTENSIONS env variable doesn't really enable/disable extensions at all.

transaction and bulk transaction extensions are still missing...

[hrodmn]

Hi @robertd thanks for the report. Can you share which version of eoapi-cdk you used to deploy this infrastructure stack?

It is not clear at all in the docs but to enable the transactions extensions in v6.2.2 of stac-fastapi-pgstac (the version that is bundled in the latest release of eoapi-cdk) you need to explicitly set the env var ENABLE_TRANSACTIONS_EXTENSIONS=TRUE:
https://github.com/stac-utils/stac-fastapi-pgstac/blob/b343902d243bd50048daaa27263488b8f72f82eb/stac_fastapi/pgstac/app.py#L89-L117

However this will add the transactions routes without any authentication which is hazardous because anyone who knows about your STAC API could add/delete data via those routes. To configure the transactions extensions with some authentication you must define a custom STAC API runtime and pass it to eoapi-cdk when you deploy the stack.

Here is one example of that:

• custom runtime: https://github.com/MAAP-Project/maap-eoapi/tree/main/cdk/runtimes/eoapi/stac/eoapi/stac
• snippet where the custom runtime gets provided to eoapi-cdk: https://github.com/MAAP-Project/maap-eoapi/blob/d029bdbcabf0d8abd7092fd7a55c43244810839e/cdk/pgstac_infra.py#L230-L238

The transactions extensions are not the only way to enable STAC loading capability with eoapi-cdk, though! We added the stac-loader construct which lets you post STAC collections/items as SNS messages or as file uploads to a bucket in S3 and the objects will get ingested into the pgstac database in queued batches. It works with AWS authentication so does not require any http route-level authentication setup. This is a fully event-driven pipeline and is designed to avoid bogging pgstac down with single-item ingestion operations.

• docs: https://developmentseed.org/eoapi-cdk/#stacloader-
• you can use a boto3 sns client to post messages to the SNS topic from a python script

Hopefully this helps you out. I want to add some capability to eoapi-cdk to make the transactions extensions safely deployable by default but haven't gotten around to it yet. If that feature would be of interest please let me know!