@aws-mdaa/dataops-job-l3-construct 1.5.0 → 1.6.0

package/node_modules/@aws-mdaa/config/lib/ref-value-transformer.ts

@@ -0,0 +1,302 @@
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { MdaaStringParameter } from '@aws-mdaa/construct';
+import { Fn, Names, Stack } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+// nosemgrep
+import { IMdaaResourceNaming } from '@aws-mdaa/naming';
+import * as XRegExp from 'xregexp';
+import { ConfigurationElement } from './config';
+import { IMdaaConfigValueTransformer, TransformResult } from './transformer';
+import { IStringParameter } from 'aws-cdk-lib/aws-ssm';
+
+export interface AwsEnvironment {
+  readonly partition?: string;
+  readonly region?: string;
+  readonly account?: string;
+}
+
+export interface MdaaConfigRefValueTransformerProps {
+  readonly naming?: IMdaaResourceNaming;
+  readonly org: string;
+  readonly domain: string;
+  readonly env: string;
+  readonly module_name: string;
+  readonly scope?: Construct;
+  readonly context?: ConfigurationElement;
+  readonly awsEnvironment?: AwsEnvironment;
+}
+
+export class MdaaConfigRefValueTransformer implements IMdaaConfigValueTransformer {
+  protected props: MdaaConfigRefValueTransformerProps;
+
+  constructor(props: MdaaConfigRefValueTransformerProps) {
+    this.props = props;
+  }
+
+  public transformValue(value: string): TransformResult {
+    const refMatch = XRegExp.matchRecursive(value, '{{', '}}', 'g', {
+      unbalanced: 'skip',
+    });
+    if (refMatch.length > 0) {
+      return this.parseRef(value, refMatch) as TransformResult;
+    } else {
+      return value;
+    }
+  }
+
+  protected parseRef(value: string, refMatch: string[]): string | number | object {
+    const isNakedReference = this.isNakedReference(value, refMatch);
+
+    // Handle naked references that might return objects/arrays
+    if (isNakedReference) {
+      const nakedResult = this.handleNakedReference(refMatch[0]);
+      if (nakedResult !== undefined) {
+        return nakedResult;
+      }
+    }
+    // Substitute all references in the string
+    return this.substituteReferences(value, refMatch, isNakedReference);
+  }
+
+  private isNakedReference(value: string, refMatch: string[]): boolean {
+    return refMatch.length === 1 && value === `{{${refMatch[0]}}}`;
+  }
+
+  private handleNakedReference(ref: string) {
+    const refInner = this.transformValue(ref).toString();
+
+    if (refInner.startsWith('context:')) {
+      const resolvedValue = this.parseContext(refInner);
+      // If it's an object or array, return it directly
+      if (typeof resolvedValue === 'object' && resolvedValue !== null) {
+        return resolvedValue;
+      }
+    }
+
+    // For env_var refs, attempt to parse JSON arrays/objects so that
+    // env vars containing '["a","b"]' resolve to actual arrays rather than strings.
+    if (refInner.startsWith('env_var:')) {
+      const envValue = this.resolveEnvVar(refInner);
+      if (envValue && (envValue.startsWith('[') || envValue.startsWith('{'))) {
+        try {
+          const parsed = JSON.parse(envValue);
+          if (typeof parsed === 'object' && parsed !== null) {
+            return parsed;
+          }
+        } catch {
+          // Not valid JSON — fall through to string substitution
+        }
+      }
+    }
+
+    return undefined;
+  }
+
+  private substituteReferences(value: string, refMatch: string[], isNakedReference: boolean): string {
+    return refMatch.reduce((result, ref) => {
+      const refInner = this.transformValue(ref).toString();
+      const resolvedValue = this.resolveReference(refInner, isNakedReference);
+
+      if (resolvedValue === undefined) {
+        return result;
+      }
+
+      const stringValue = this.convertToString(resolvedValue);
+      return result.replace(`{{${ref}}}`, stringValue);
+    }, value);
+  }
+
+  private convertToString(value: unknown): string {
+    if (typeof value === 'string') {
+      return value;
+    }
+    if (typeof value === 'number' || typeof value === 'boolean') {
+      return String(value);
+    }
+    // For objects, use JSON.stringify as a safe fallback
+    return JSON.stringify(value);
+  }
+
+  private resolveReference(refInner: string, isNakedReference: boolean) {
+    const simpleRefMap = this.getSimpleRefMap();
+
+    if (simpleRefMap[refInner]) {
+      return simpleRefMap[refInner];
+    }
+
+    if (refInner.startsWith('context:')) {
+      return this.resolveContextReference(refInner, isNakedReference);
+    }
+
+    if (refInner.startsWith('env_var:')) {
+      return this.resolveEnvVar(refInner);
+    }
+
+    if (refInner.startsWith('ssm-org:')) {
+      return this.resolveSsmPartialPathReference(refInner);
+    }
+
+    if (refInner.startsWith('ssm-domain:')) {
+      return this.resolveSsmPartialPathReference(refInner);
+    }
+
+    if (refInner.startsWith('ssm-env:')) {
+      return this.resolveSsmPartialPathReference(refInner);
+    }
+
+    if (refInner.startsWith('resolve:ssm:')) {
+      return this.resolveDirectSsm(refInner);
+    }
+
+    if (refInner.startsWith('ref:')) {
+      return this.resolveRef(refInner);
+    }
+
+    return undefined;
+  }
+
+  private resolveRef(refInner: string): string {
+    const dummyStack = new Stack(undefined);
+    const withoutPrefix = refInner.replace(/^ref:/, '');
+    const parts = withoutPrefix.split(':');
+
+    // Remove leading slash if present from the path
+    const pathWithSlash = parts[0];
+    const path = pathWithSlash.startsWith('/') ? pathWithSlash.slice(1) : pathWithSlash;
+    const attr = parts[1]; // Will be undefined if no attribute specified
+
+    const logicalId = this.generateLogicalId(dummyStack, path);
+
+    if (attr) {
+      return Fn.getAtt(logicalId, attr).toString();
+    } else {
+      return Fn.ref(logicalId).toString();
+    }
+  }
+
+  private generateLogicalId(parentScope: Construct, path: string): string {
+    const pathComponents = path.split('/');
+    const construct = new Construct(parentScope, pathComponents[0]);
+    if (pathComponents.length == 1) {
+      return Names.nodeUniqueId(construct.node);
+    } else {
+      return this.generateLogicalId(construct, pathComponents.slice(1).join('/'));
+    }
+  }
+
+  private getSimpleRefMap(): { [key: string]: string | undefined } {
+    const scopeStack = this.props.scope ? Stack.of(this.props.scope) : undefined;
+    return {
+      org: this.props.org,
+      env: this.props.env,
+      domain: this.props.domain,
+      module_name: this.props.module_name,
+      partition: this.props.awsEnvironment?.partition ?? scopeStack?.partition,
+      region: this.props.awsEnvironment?.region ?? scopeStack?.region,
+      account: this.props.awsEnvironment?.account ?? scopeStack?.account,
+    };
+  }
+
+  private resolveContextReference(refInner: string, isNakedReference: boolean) {
+    const resolvedValue = this.parseContext(refInner);
+
+    // If the resolved value is an object or array, and we're not in a naked reference
+    if (typeof resolvedValue === 'object' && resolvedValue !== null && !isNakedReference) {
+      throw new Error('Cannot embed array or object context value in string');
+    }
+
+    return resolvedValue;
+  }
+
+  private resolveEnvVar(refInner: string): string | undefined {
+    const envVar = refInner.replace(/^env_var:/, '');
+    return process.env[envVar];
+  }
+
+  private extractSsmValue(refInner: string, prefix: string): string {
+    const extracted = refInner.replace(new RegExp(String.raw`^${prefix}:\s*`), '');
+    // Remove leading slash to prevent double slashes in the path
+    return extracted.startsWith('/') ? extracted.slice(1) : extracted;
+  }
+
+  private resolveSsmPartialPathReference(refInner: string): string {
+    if (!this.props.naming) {
+      throw new Error(`Unable to resolve ${refInner} ssm param outside of a naming context`);
+    }
+
+    if (refInner.startsWith('ssm-org:')) {
+      const ssmPath = this.props.naming.ssmOrgPath(this.extractSsmValue(refInner, 'ssm-org'));
+      return `{{resolve:ssm:${ssmPath}}}`;
+    }
+
+    if (refInner.startsWith('ssm-domain:')) {
+      const ssmPath = this.props.naming.ssmDomainPath(this.extractSsmValue(refInner, 'ssm-domain'));
+      return `{{resolve:ssm:${ssmPath}}}`;
+    }
+
+    if (refInner.startsWith('ssm-env:')) {
+      const ssmPath = this.props.naming.ssmEnvPath(this.extractSsmValue(refInner, 'ssm-env'));
+      return `{{resolve:ssm:${ssmPath}}}`;
+    }
+
+    return refInner;
+  }
+
+  private resolveDirectSsm(refInner: string): string {
+    if (!this.props.scope) {
+      throw new Error('Unable to resolve ssm param outside of a Construct');
+    }
+
+    const ssmPath = refInner.replace(/^resolve:ssm:/, '');
+    console.log(`Resolving SSM: ${ssmPath}`);
+    return this.getSsmValue(ssmPath);
+  }
+
+  private getSsmValue(ssmPath: string): string {
+    if (!this.props.scope) {
+      throw new Error('Unable to resolve ssm param outside of a Construct');
+    }
+    //Handle full arn-based SSM paths (for referencing RAM shared SSM params from other accounts)
+    if (ssmPath.startsWith('arn:')) {
+      const stack = Stack.of(this.props.scope);
+      const exists = stack.node.tryFindChild(ssmPath) as IStringParameter;
+      if (exists) {
+        return exists.stringValue;
+      }
+      return MdaaStringParameter.fromStringParameterArn(Stack.of(this.props.scope), ssmPath, ssmPath).stringValue;
+    }
+    return this.props.scope.node.tryGetContext('@mdaaLookupSSMValues')
+      ? MdaaStringParameter.valueFromLookup(Stack.of(this.props.scope), ssmPath)
+      : MdaaStringParameter.valueForStringParameter(Stack.of(this.props.scope), ssmPath);
+  }
+
+  private parseContext(refInner: string) {
+    const refInnerContext = refInner.replace(/^context:/, '');
+    const scopeContextValue = this.props.scope?.node.tryGetContext(refInnerContext);
+    const scopeInnerContextValue = this.props.context ? this.props.context[refInnerContext] : undefined;
+    const contextValue = scopeContextValue ?? scopeInnerContextValue;
+    if (!contextValue) {
+      throw new Error(`Failed to resolve context: ${refInnerContext}`);
+    }
+    if (typeof contextValue === 'string') {
+      // Check if the value is encoded with quotes (from CLI encoding)
+      if (contextValue.startsWith('"') && contextValue.endsWith('"')) {
+        // Remove outer quotes
+        const unquoted = contextValue.slice(1, -1);
+
+        if (unquoted.startsWith('obj:')) {
+          // Parse object: "obj:{...}" -> {...}
+          return JSON.parse(unquoted.replace(/^obj:/, '')) as ConfigurationElement;
+        } else if (unquoted.startsWith('list:')) {
+          // Parse array: "list:[...]" -> [...]
+          return JSON.parse(unquoted.replace(/^list:/, '')) as unknown[];
+        }
+      }
+    }
+    return contextValue;
+  }
+}

package/node_modules/@aws-mdaa/config/lib/ssm-ref-transformer.d.ts

@@ -0,0 +1,8 @@
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { IMdaaConfigValueTransformer } from '.';
+export declare class MdaaConfigSSMValueTransformer implements IMdaaConfigValueTransformer {
+    transformValue(value: string, contextPath: string): string;
+}

package/node_modules/@aws-mdaa/config/lib/ssm-ref-transformer.js

@@ -0,0 +1,22 @@
+"use strict";
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MdaaConfigSSMValueTransformer = void 0;
+class MdaaConfigSSMValueTransformer {
+    transformValue(value, contextPath) {
+        const ignorePaths = ['policyDocument/Statement/Action'];
+        if (value.startsWith('ssm:') &&
+            ignorePaths.every(ignorePath => !contextPath.toLowerCase().endsWith(ignorePath.toLowerCase()))) {
+            const paramName = value.replace(/^ssm:\s*/, '');
+            return `{{resolve:ssm:${paramName}}}`;
+        }
+        else {
+            return value;
+        }
+    }
+}
+exports.MdaaConfigSSMValueTransformer = MdaaConfigSSMValueTransformer;
+//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-mdaa/config/lib/ssm-ref-transformer.ts

@@ -0,0 +1,21 @@
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { IMdaaConfigValueTransformer } from '.';
+
+export class MdaaConfigSSMValueTransformer implements IMdaaConfigValueTransformer {
+  public transformValue(value: string, contextPath: string): string {
+    const ignorePaths = ['policyDocument/Statement/Action'];
+    if (
+      value.startsWith('ssm:') &&
+      ignorePaths.every(ignorePath => !contextPath.toLowerCase().endsWith(ignorePath.toLowerCase()))
+    ) {
+      const paramName = value.replace(/^ssm:\s*/, '');
+      return `{{resolve:ssm:${paramName}}}`;
+    } else {
+      return value;
+    }
+  }
+}

package/node_modules/@aws-mdaa/config/lib/transformer.d.ts

@@ -0,0 +1,35 @@
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ConfigurationElement } from './config';
+export type TransformResult = string | number;
+export interface IMdaaConfigValueTransformer {
+    transformValue(value: string, contextPath?: string): TransformResult;
+}
+export interface IMdaaConfigTransformer {
+    transformConfig(config: ConfigurationElement): ConfigurationElement;
+}
+/**
+ * A utility class which executs transformer functions against MDAA Configs.
+ */
+export declare class MdaaConfigTransformer implements IMdaaConfigTransformer {
+    private readonly valueTransformer;
+    private readonly keyTransformer?;
+    constructor(valueTransformer: IMdaaConfigValueTransformer, keyTransformer?: IMdaaConfigValueTransformer);
+    transformConfig(config: ConfigurationElement): ConfigurationElement;
+    /**
+     * A recursive function which applies a transformation function to all config values.
+     * @param contextPath
+     * @param resolvedConfig The config object being transformed
+     * @returns A config object with the transformation function applied to all config values.
+     */
+    transformConfigObject(contextPath: string, resolvedConfig: ConfigurationElement): ConfigurationElement;
+    /**
+     * A helper function for transformConfigObject for use with Arrays.
+     * @param contextPath
+     * @param resolvedConfig (Required) - The config object being transformed
+     * @returns A config object with the transformation function applied to all config values.
+     */
+    transformConfigArray(contextPath: string, resolvedConfig: unknown[]): unknown[];
+}

package/node_modules/@aws-mdaa/config/lib/transformer.js

@@ -0,0 +1,66 @@
+"use strict";
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MdaaConfigTransformer = void 0;
+/**
+ * A utility class which executs transformer functions against MDAA Configs.
+ */
+class MdaaConfigTransformer {
+    constructor(valueTransformer, keyTransformer) {
+        this.valueTransformer = valueTransformer;
+        this.keyTransformer = keyTransformer;
+    }
+    transformConfig(config) {
+        return this.transformConfigObject('/', config);
+    }
+    /**
+     * A recursive function which applies a transformation function to all config values.
+     * @param contextPath
+     * @param resolvedConfig The config object being transformed
+     * @returns A config object with the transformation function applied to all config values.
+     */
+    transformConfigObject(contextPath, resolvedConfig) {
+        const transformedConfig = {};
+        for (const key in resolvedConfig) {
+            const value = resolvedConfig[key];
+            const transformedKey = this.keyTransformer
+                ? this.keyTransformer.transformValue(key, contextPath + '/' + key)
+                : key;
+            if (typeof value === 'string')
+                transformedConfig[transformedKey] = this.valueTransformer.transformValue(value, contextPath + '/' + key);
+            else if (Array.isArray(value))
+                transformedConfig[transformedKey] = this.transformConfigArray(contextPath + '/' + key, value);
+            else if (typeof value === 'object' && value !== null) {
+                transformedConfig[transformedKey] = this.transformConfigObject(contextPath + '/' + key, value);
+            }
+            else
+                transformedConfig[transformedKey] = value;
+        }
+        return transformedConfig;
+    }
+    /**
+     * A helper function for transformConfigObject for use with Arrays.
+     * @param contextPath
+     * @param resolvedConfig (Required) - The config object being transformed
+     * @returns A config object with the transformation function applied to all config values.
+     */
+    transformConfigArray(contextPath, resolvedConfig) {
+        const transformedConfig = [];
+        resolvedConfig.forEach(value => {
+            if (typeof value === 'string')
+                transformedConfig.push(this.valueTransformer.transformValue(value, contextPath));
+            else if (Array.isArray(value))
+                transformedConfig.push(this.transformConfigArray(contextPath, value));
+            else if (typeof value === 'object' && value !== null)
+                transformedConfig.push(this.transformConfigObject(contextPath, value));
+            else
+                transformedConfig.push(value);
+        });
+        return transformedConfig;
+    }
+}
+exports.MdaaConfigTransformer = MdaaConfigTransformer;
+//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-mdaa/config/lib/transformer.ts

@@ -0,0 +1,74 @@
+/*!
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { ConfigurationElement } from './config';
+
+export type TransformResult = string | number;
+
+export interface IMdaaConfigValueTransformer {
+  transformValue(value: string, contextPath?: string): TransformResult;
+}
+
+export interface IMdaaConfigTransformer {
+  transformConfig(config: ConfigurationElement): ConfigurationElement;
+}
+
+/**
+ * A utility class which executs transformer functions against MDAA Configs.
+ */
+export class MdaaConfigTransformer implements IMdaaConfigTransformer {
+  private readonly valueTransformer: IMdaaConfigValueTransformer;
+  private readonly keyTransformer?: IMdaaConfigValueTransformer;
+  constructor(valueTransformer: IMdaaConfigValueTransformer, keyTransformer?: IMdaaConfigValueTransformer) {
+    this.valueTransformer = valueTransformer;
+    this.keyTransformer = keyTransformer;
+  }
+  public transformConfig(config: ConfigurationElement): ConfigurationElement {
+    return this.transformConfigObject('/', config);
+  }
+  /**
+   * A recursive function which applies a transformation function to all config values.
+   * @param contextPath
+   * @param resolvedConfig The config object being transformed
+   * @returns A config object with the transformation function applied to all config values.
+   */
+  public transformConfigObject(contextPath: string, resolvedConfig: ConfigurationElement): ConfigurationElement {
+    const transformedConfig: ConfigurationElement = {};
+    for (const key in resolvedConfig) {
+      const value = resolvedConfig[key];
+      const transformedKey = this.keyTransformer
+        ? this.keyTransformer.transformValue(key, contextPath + '/' + key)
+        : key;
+      if (typeof value === 'string')
+        transformedConfig[transformedKey] = this.valueTransformer.transformValue(value, contextPath + '/' + key);
+      else if (Array.isArray(value))
+        transformedConfig[transformedKey] = this.transformConfigArray(contextPath + '/' + key, value);
+      else if (typeof value === 'object' && value !== null) {
+        transformedConfig[transformedKey] = this.transformConfigObject(
+          contextPath + '/' + key,
+          value as ConfigurationElement,
+        );
+      } else transformedConfig[transformedKey] = value;
+    }
+    return transformedConfig;
+  }
+  /**
+   * A helper function for transformConfigObject for use with Arrays.
+   * @param contextPath
+   * @param resolvedConfig (Required) - The config object being transformed
+   * @returns A config object with the transformation function applied to all config values.
+   */
+  public transformConfigArray(contextPath: string, resolvedConfig: unknown[]): unknown[] {
+    const transformedConfig: ConfigurationElement | unknown[] = [];
+    resolvedConfig.forEach(value => {
+      if (typeof value === 'string') transformedConfig.push(this.valueTransformer.transformValue(value, contextPath));
+      else if (Array.isArray(value)) transformedConfig.push(this.transformConfigArray(contextPath, value as unknown[]));
+      else if (typeof value === 'object' && value !== null)
+        transformedConfig.push(this.transformConfigObject(contextPath, value as ConfigurationElement));
+      else transformedConfig.push(value);
+    });
+    return transformedConfig;
+  }
+}

package/node_modules/@aws-mdaa/config/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@aws-mdaa/config",
+  "description": "MDAA config utility",
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com/solutions"
+  },
+  "version": "1.6.0",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/modern-data-architecture-accelerator"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest --passWithNoTests --coverage",
+    "lint": "eslint --max-warnings 0 -c ../../../eslint.config.mjs",
+    "test:package-docs": "../../../scripts/generate_docs/test_package_docs.sh"
+  },
+  "devDependencies": {
+    "@types/jest": "29.5.14",
+    "@types/node": "22.9.0",
+    "@types/prettier": "2.6.0",
+    "constructs": "10.0.96",
+    "jest": "29.7.0",
+    "ts-jest": "29.4.9",
+    "ts-node": "10.9.2",
+    "typescript": "5.9.3",
+    "typescript-json-schema": "0.67.4"
+  },
+  "dependencies": {
+    "@aws-mdaa/construct": "1.6.0",
+    "@aws-mdaa/naming": "1.6.0",
+    "aws-cdk-lib": "2.220.0",
+    "constructs": "10.0.96",
+    "xregexp": "5.1.1"
+  },
+  "gitHead": "8b49a2b371014baec046605ffdbfe38951099c31"
+}