Amazon QLDB

Amazon QLDB (Quantum Ledger Database) is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log.

Package Information

• Package: com.pulumi.aws.qldb
• Common Resources: Ledger, Stream

Key Resources

Ledger

Creates an Amazon QLDB ledger.

import com.pulumi.aws.qldb.Ledger;
import com.pulumi.aws.qldb.LedgerArgs;

var ledger = new Ledger("my-ledger", LedgerArgs.builder()
    .name("my-ledger")
    .permissionsMode("ALLOW_ALL")
    .deletionProtection(false)
    .tags(Map.of(
        "Environment", "production"
    ))
    .build());

Stream

Creates a stream for a QLDB ledger to Amazon Kinesis Data Streams.

import com.pulumi.aws.qldb.Stream;
import com.pulumi.aws.qldb.StreamArgs;
import com.pulumi.aws.qldb.inputs.StreamKinesisConfigurationArgs;

var stream = new Stream("ledger-stream", StreamArgs.builder()
    .ledgerName(ledger.name())
    .streamName("my-stream")
    .inclusiveStartTime("2023-01-01T00:00:00Z")
    .roleArn(role.arn())
    .kinesisConfiguration(StreamKinesisConfigurationArgs.builder()
        .streamArn(kinesisStream.arn())
        .aggregationEnabled(true)
        .build())
    .build());

Common Patterns

Create Ledger with Encryption

var ledger = new Ledger("encrypted-ledger", LedgerArgs.builder()
    .name("encrypted-ledger")
    .permissionsMode("STANDARD")
    .kmsKey(kmsKey.arn())
    .deletionProtection(true)
    .build());

Query Ledger Information

import com.pulumi.aws.qldb.QldbFunctions;
import com.pulumi.aws.qldb.inputs.GetLedgerArgs;

var ledgerData = QldbFunctions.getLedger(GetLedgerArgs.builder()
    .name("my-ledger")
    .build());

Key Properties

Ledger Properties

• name - Name of the ledger
• permissionsMode - Permissions mode (ALLOW_ALL or STANDARD)
• deletionProtection - Enable deletion protection
• kmsKey - KMS key ARN for encryption
• tags - Resource tags

Output Properties

• id - Ledger ID
• arn - ARN of the ledger
• state - Current state of the ledger

Use Cases

• Immutable Records: Maintain cryptographically verifiable audit trails
• Financial Systems: Track financial transactions with complete history
• Supply Chain: Record product provenance and movement
• Healthcare: Maintain immutable patient records
• Regulatory Compliance: Provide auditable transaction logs

Related Services

• DynamoDB - NoSQL database for flexible data models
• RDS - Relational database service
• Neptune - Graph database
• DocumentDB - Document database