@aws-solutions-constructs/aws-cloudfront-s3 2.47.0 → 2.48.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/.eslintignore +2 -2
  2. package/.jsii +60 -23
  3. package/README.md +7 -6
  4. package/lib/index.d.ts +1 -0
  5. package/lib/index.js +70 -8
  6. package/package.json +5 -3
  7. package/test/integ.cfts3-bucket-encrypted-with-cmk-provided-as-existingbucket.expected.json +958 -0
  8. package/test/integ.cfts3-bucket-encrypted-with-cmk-provided-as-existingbucket.js +44 -0
  9. package/test/integ.cfts3-bucket-encrypted-with-managed-key-provided-as-existingbucket.expected.json +592 -0
  10. package/test/integ.cfts3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js +39 -0
  11. package/test/integ.cfts3-bucket-with-http-origin.d.ts +13 -0
  12. package/test/integ.cfts3-bucket-with-http-origin.expected.json +559 -0
  13. package/test/integ.cfts3-bucket-with-http-origin.js +44 -0
  14. package/test/integ.cfts3-cmk-encryption.expected.json +527 -0
  15. package/test/integ.cfts3-cmk-provided-as-bucket-prop.d.ts +13 -0
  16. package/test/integ.cfts3-cmk-provided-as-bucket-prop.expected.json +958 -0
  17. package/test/integ.cfts3-cmk-provided-as-bucket-prop.js +41 -0
  18. package/test/integ.cfts3-custom-headers.expected.json +307 -27
  19. package/test/integ.cfts3-custom-headers.js +6 -2
  20. package/test/integ.cfts3-custom-originPath.expected.json +307 -27
  21. package/test/integ.cfts3-custom-originPath.js +6 -2
  22. package/test/integ.cfts3-customCloudFrontLoggingBucket.expected.json +54 -23
  23. package/test/integ.cfts3-customLoggingBuckets.d.ts +13 -0
  24. package/test/{integ.cfts3-customLoggingBucket.expected.json → integ.cfts3-customLoggingBuckets.expected.json} +285 -31
  25. package/test/integ.cfts3-customLoggingBuckets.js +58 -0
  26. package/test/integ.cfts3-existing-bucket.expected.json +493 -80
  27. package/test/integ.cfts3-existing-bucket.js +2 -2
  28. package/test/integ.cfts3-no-arguments.expected.json +430 -27
  29. package/test/integ.cfts3-no-arguments.js +5 -2
  30. package/test/integ.cfts3-no-security-headers.expected.json +307 -27
  31. package/test/integ.cfts3-no-security-headers.js +5 -1
  32. package/test/test.cloudfront-s3.test.js +149 -28
  33. package/test/integ.cfts3-customCloudFrontLoggingBucket.js +0 -39
  34. package/test/integ.cfts3-customLoggingBucket.js +0 -42
  35. /package/test/{integ.cfts3-customCloudFrontLoggingBucket.d.ts → integ.cfts3-bucket-encrypted-with-cmk-provided-as-existingbucket.d.ts} +0 -0
  36. /package/test/{integ.cfts3-customLoggingBucket.d.ts → integ.cfts3-bucket-encrypted-with-managed-key-provided-as-existingbucket.d.ts} +0 -0
@@ -0,0 +1,13 @@
1
+ /**
2
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
5
+ * with the License. A copy of the License is located at
6
+ *
7
+ * http://www.apache.org/licenses/LICENSE-2.0
8
+ *
9
+ * or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
10
+ * OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
11
+ * and limitations under the License.
12
+ */
13
+ export {};
@@ -0,0 +1,559 @@
1
+ {
2
+ "Description": "Integration Test for aws-cloudfront-s3",
3
+ "Resources": {
4
+ "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64": {
5
+ "Type": "AWS::S3::Bucket",
6
+ "Properties": {
7
+ "BucketEncryption": {
8
+ "ServerSideEncryptionConfiguration": [
9
+ {
10
+ "ServerSideEncryptionByDefault": {
11
+ "SSEAlgorithm": "AES256"
12
+ }
13
+ }
14
+ ]
15
+ },
16
+ "PublicAccessBlockConfiguration": {
17
+ "BlockPublicAcls": true,
18
+ "BlockPublicPolicy": true,
19
+ "IgnorePublicAcls": true,
20
+ "RestrictPublicBuckets": true
21
+ },
22
+ "VersioningConfiguration": {
23
+ "Status": "Enabled"
24
+ }
25
+ },
26
+ "UpdateReplacePolicy": "Retain",
27
+ "DeletionPolicy": "Retain",
28
+ "Metadata": {
29
+ "cfn_nag": {
30
+ "rules_to_suppress": [
31
+ {
32
+ "id": "W35",
33
+ "reason": "This S3 bucket is used as the access logging bucket for another bucket"
34
+ }
35
+ ]
36
+ }
37
+ }
38
+ },
39
+ "testcloudfronts3legacyhttporiginS3LoggingBucketPolicyEC439975": {
40
+ "Type": "AWS::S3::BucketPolicy",
41
+ "Properties": {
42
+ "Bucket": {
43
+ "Ref": "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64"
44
+ },
45
+ "PolicyDocument": {
46
+ "Statement": [
47
+ {
48
+ "Action": "s3:*",
49
+ "Condition": {
50
+ "Bool": {
51
+ "aws:SecureTransport": "false"
52
+ }
53
+ },
54
+ "Effect": "Deny",
55
+ "Principal": {
56
+ "AWS": "*"
57
+ },
58
+ "Resource": [
59
+ {
60
+ "Fn::GetAtt": [
61
+ "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64",
62
+ "Arn"
63
+ ]
64
+ },
65
+ {
66
+ "Fn::Join": [
67
+ "",
68
+ [
69
+ {
70
+ "Fn::GetAtt": [
71
+ "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64",
72
+ "Arn"
73
+ ]
74
+ },
75
+ "/*"
76
+ ]
77
+ ]
78
+ }
79
+ ]
80
+ },
81
+ {
82
+ "Action": "s3:PutObject",
83
+ "Condition": {
84
+ "ArnLike": {
85
+ "aws:SourceArn": {
86
+ "Fn::GetAtt": [
87
+ "testcloudfronts3legacyhttporiginS3Bucket9C7276CA",
88
+ "Arn"
89
+ ]
90
+ }
91
+ },
92
+ "StringEquals": {
93
+ "aws:SourceAccount": {
94
+ "Ref": "AWS::AccountId"
95
+ }
96
+ }
97
+ },
98
+ "Effect": "Allow",
99
+ "Principal": {
100
+ "Service": "logging.s3.amazonaws.com"
101
+ },
102
+ "Resource": {
103
+ "Fn::Join": [
104
+ "",
105
+ [
106
+ {
107
+ "Fn::GetAtt": [
108
+ "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64",
109
+ "Arn"
110
+ ]
111
+ },
112
+ "/*"
113
+ ]
114
+ ]
115
+ }
116
+ }
117
+ ],
118
+ "Version": "2012-10-17"
119
+ }
120
+ }
121
+ },
122
+ "testcloudfronts3legacyhttporiginS3Bucket9C7276CA": {
123
+ "Type": "AWS::S3::Bucket",
124
+ "Properties": {
125
+ "BucketEncryption": {
126
+ "ServerSideEncryptionConfiguration": [
127
+ {
128
+ "ServerSideEncryptionByDefault": {
129
+ "SSEAlgorithm": "AES256"
130
+ }
131
+ }
132
+ ]
133
+ },
134
+ "LifecycleConfiguration": {
135
+ "Rules": [
136
+ {
137
+ "NoncurrentVersionTransitions": [
138
+ {
139
+ "StorageClass": "GLACIER",
140
+ "TransitionInDays": 90
141
+ }
142
+ ],
143
+ "Status": "Enabled"
144
+ }
145
+ ]
146
+ },
147
+ "LoggingConfiguration": {
148
+ "DestinationBucketName": {
149
+ "Ref": "testcloudfronts3legacyhttporiginS3LoggingBucketA3DB7D64"
150
+ }
151
+ },
152
+ "PublicAccessBlockConfiguration": {
153
+ "BlockPublicAcls": false,
154
+ "BlockPublicPolicy": false,
155
+ "IgnorePublicAcls": false,
156
+ "RestrictPublicBuckets": false
157
+ },
158
+ "VersioningConfiguration": {
159
+ "Status": "Enabled"
160
+ },
161
+ "WebsiteConfiguration": {
162
+ "IndexDocument": "index.html"
163
+ }
164
+ },
165
+ "UpdateReplacePolicy": "Retain",
166
+ "DeletionPolicy": "Retain"
167
+ },
168
+ "testcloudfronts3legacyhttporiginS3BucketPolicy7529C63D": {
169
+ "Type": "AWS::S3::BucketPolicy",
170
+ "Properties": {
171
+ "Bucket": {
172
+ "Ref": "testcloudfronts3legacyhttporiginS3Bucket9C7276CA"
173
+ },
174
+ "PolicyDocument": {
175
+ "Statement": [
176
+ {
177
+ "Action": "s3:GetObject",
178
+ "Effect": "Allow",
179
+ "Principal": {
180
+ "AWS": "*"
181
+ },
182
+ "Resource": {
183
+ "Fn::Join": [
184
+ "",
185
+ [
186
+ {
187
+ "Fn::GetAtt": [
188
+ "testcloudfronts3legacyhttporiginS3Bucket9C7276CA",
189
+ "Arn"
190
+ ]
191
+ },
192
+ "/*"
193
+ ]
194
+ ]
195
+ }
196
+ },
197
+ {
198
+ "Action": "s3:GetObject",
199
+ "Condition": {
200
+ "StringEquals": {
201
+ "AWS:SourceArn": {
202
+ "Fn::Join": [
203
+ "",
204
+ [
205
+ "arn:aws:cloudfront::",
206
+ {
207
+ "Ref": "AWS::AccountId"
208
+ },
209
+ ":distribution/",
210
+ {
211
+ "Ref": "testcloudfronts3legacyhttporiginCloudFrontDistributionAF04EDAB"
212
+ }
213
+ ]
214
+ ]
215
+ }
216
+ }
217
+ },
218
+ "Effect": "Allow",
219
+ "Principal": {
220
+ "Service": "cloudfront.amazonaws.com"
221
+ },
222
+ "Resource": {
223
+ "Fn::Join": [
224
+ "",
225
+ [
226
+ {
227
+ "Fn::GetAtt": [
228
+ "testcloudfronts3legacyhttporiginS3Bucket9C7276CA",
229
+ "Arn"
230
+ ]
231
+ },
232
+ "/*"
233
+ ]
234
+ ]
235
+ }
236
+ }
237
+ ],
238
+ "Version": "2012-10-17"
239
+ }
240
+ },
241
+ "Metadata": {
242
+ "cfn_nag": {
243
+ "rules_to_suppress": [
244
+ {
245
+ "id": "F16",
246
+ "reason": "Public website bucket policy requires a wildcard principal"
247
+ }
248
+ ]
249
+ }
250
+ }
251
+ },
252
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5": {
253
+ "Type": "AWS::S3::Bucket",
254
+ "Properties": {
255
+ "BucketEncryption": {
256
+ "ServerSideEncryptionConfiguration": [
257
+ {
258
+ "ServerSideEncryptionByDefault": {
259
+ "SSEAlgorithm": "AES256"
260
+ }
261
+ }
262
+ ]
263
+ },
264
+ "OwnershipControls": {
265
+ "Rules": [
266
+ {
267
+ "ObjectOwnership": "ObjectWriter"
268
+ }
269
+ ]
270
+ },
271
+ "PublicAccessBlockConfiguration": {
272
+ "BlockPublicAcls": true,
273
+ "BlockPublicPolicy": true,
274
+ "IgnorePublicAcls": true,
275
+ "RestrictPublicBuckets": true
276
+ },
277
+ "VersioningConfiguration": {
278
+ "Status": "Enabled"
279
+ }
280
+ },
281
+ "UpdateReplacePolicy": "Retain",
282
+ "DeletionPolicy": "Retain",
283
+ "Metadata": {
284
+ "cfn_nag": {
285
+ "rules_to_suppress": [
286
+ {
287
+ "id": "W35",
288
+ "reason": "This S3 bucket is used as the access logging bucket for another bucket"
289
+ }
290
+ ]
291
+ }
292
+ }
293
+ },
294
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLogPolicyD1441BF6": {
295
+ "Type": "AWS::S3::BucketPolicy",
296
+ "Properties": {
297
+ "Bucket": {
298
+ "Ref": "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5"
299
+ },
300
+ "PolicyDocument": {
301
+ "Statement": [
302
+ {
303
+ "Action": "s3:*",
304
+ "Condition": {
305
+ "Bool": {
306
+ "aws:SecureTransport": "false"
307
+ }
308
+ },
309
+ "Effect": "Deny",
310
+ "Principal": {
311
+ "AWS": "*"
312
+ },
313
+ "Resource": [
314
+ {
315
+ "Fn::GetAtt": [
316
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5",
317
+ "Arn"
318
+ ]
319
+ },
320
+ {
321
+ "Fn::Join": [
322
+ "",
323
+ [
324
+ {
325
+ "Fn::GetAtt": [
326
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5",
327
+ "Arn"
328
+ ]
329
+ },
330
+ "/*"
331
+ ]
332
+ ]
333
+ }
334
+ ]
335
+ },
336
+ {
337
+ "Action": "s3:PutObject",
338
+ "Condition": {
339
+ "ArnLike": {
340
+ "aws:SourceArn": {
341
+ "Fn::GetAtt": [
342
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE",
343
+ "Arn"
344
+ ]
345
+ }
346
+ },
347
+ "StringEquals": {
348
+ "aws:SourceAccount": {
349
+ "Ref": "AWS::AccountId"
350
+ }
351
+ }
352
+ },
353
+ "Effect": "Allow",
354
+ "Principal": {
355
+ "Service": "logging.s3.amazonaws.com"
356
+ },
357
+ "Resource": {
358
+ "Fn::Join": [
359
+ "",
360
+ [
361
+ {
362
+ "Fn::GetAtt": [
363
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5",
364
+ "Arn"
365
+ ]
366
+ },
367
+ "/*"
368
+ ]
369
+ ]
370
+ }
371
+ }
372
+ ],
373
+ "Version": "2012-10-17"
374
+ }
375
+ }
376
+ },
377
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE": {
378
+ "Type": "AWS::S3::Bucket",
379
+ "Properties": {
380
+ "AccessControl": "LogDeliveryWrite",
381
+ "BucketEncryption": {
382
+ "ServerSideEncryptionConfiguration": [
383
+ {
384
+ "ServerSideEncryptionByDefault": {
385
+ "SSEAlgorithm": "AES256"
386
+ }
387
+ }
388
+ ]
389
+ },
390
+ "LoggingConfiguration": {
391
+ "DestinationBucketName": {
392
+ "Ref": "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketAccessLog3AE680E5"
393
+ }
394
+ },
395
+ "OwnershipControls": {
396
+ "Rules": [
397
+ {
398
+ "ObjectOwnership": "ObjectWriter"
399
+ }
400
+ ]
401
+ },
402
+ "PublicAccessBlockConfiguration": {
403
+ "BlockPublicAcls": true,
404
+ "BlockPublicPolicy": true,
405
+ "IgnorePublicAcls": true,
406
+ "RestrictPublicBuckets": true
407
+ },
408
+ "VersioningConfiguration": {
409
+ "Status": "Enabled"
410
+ }
411
+ },
412
+ "UpdateReplacePolicy": "Retain",
413
+ "DeletionPolicy": "Retain"
414
+ },
415
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketPolicyF48109AD": {
416
+ "Type": "AWS::S3::BucketPolicy",
417
+ "Properties": {
418
+ "Bucket": {
419
+ "Ref": "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE"
420
+ },
421
+ "PolicyDocument": {
422
+ "Statement": [
423
+ {
424
+ "Action": "s3:*",
425
+ "Condition": {
426
+ "Bool": {
427
+ "aws:SecureTransport": "false"
428
+ }
429
+ },
430
+ "Effect": "Deny",
431
+ "Principal": {
432
+ "AWS": "*"
433
+ },
434
+ "Resource": [
435
+ {
436
+ "Fn::GetAtt": [
437
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE",
438
+ "Arn"
439
+ ]
440
+ },
441
+ {
442
+ "Fn::Join": [
443
+ "",
444
+ [
445
+ {
446
+ "Fn::GetAtt": [
447
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE",
448
+ "Arn"
449
+ ]
450
+ },
451
+ "/*"
452
+ ]
453
+ ]
454
+ }
455
+ ]
456
+ }
457
+ ],
458
+ "Version": "2012-10-17"
459
+ }
460
+ }
461
+ },
462
+ "testcloudfronts3legacyhttporiginCloudFrontDistributionAF04EDAB": {
463
+ "Type": "AWS::CloudFront::Distribution",
464
+ "Properties": {
465
+ "DistributionConfig": {
466
+ "DefaultCacheBehavior": {
467
+ "CachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6",
468
+ "Compress": true,
469
+ "TargetOriginId": "cfts3bucketwithhttporigintestcloudfronts3legacyhttporiginCloudFrontDistributionOrigin15A81BB36",
470
+ "ViewerProtocolPolicy": "redirect-to-https"
471
+ },
472
+ "DefaultRootObject": "index.html",
473
+ "Enabled": true,
474
+ "HttpVersion": "http2",
475
+ "IPV6Enabled": true,
476
+ "Logging": {
477
+ "Bucket": {
478
+ "Fn::GetAtt": [
479
+ "testcloudfronts3legacyhttporiginCloudfrontLoggingBucketC643C2EE",
480
+ "RegionalDomainName"
481
+ ]
482
+ }
483
+ },
484
+ "Origins": [
485
+ {
486
+ "CustomOriginConfig": {
487
+ "OriginProtocolPolicy": "http-only",
488
+ "OriginSSLProtocols": [
489
+ "TLSv1.2"
490
+ ]
491
+ },
492
+ "DomainName": {
493
+ "Fn::Select": [
494
+ 2,
495
+ {
496
+ "Fn::Split": [
497
+ "/",
498
+ {
499
+ "Fn::GetAtt": [
500
+ "testcloudfronts3legacyhttporiginS3Bucket9C7276CA",
501
+ "WebsiteURL"
502
+ ]
503
+ }
504
+ ]
505
+ }
506
+ ]
507
+ },
508
+ "Id": "cfts3bucketwithhttporigintestcloudfronts3legacyhttporiginCloudFrontDistributionOrigin15A81BB36"
509
+ }
510
+ ]
511
+ }
512
+ },
513
+ "Metadata": {
514
+ "cfn_nag": {
515
+ "rules_to_suppress": [
516
+ {
517
+ "id": "W70",
518
+ "reason": "Since the distribution uses the CloudFront domain name, CloudFront automatically sets the security policy to TLSv1 regardless of the value of MinimumProtocolVersion"
519
+ }
520
+ ]
521
+ }
522
+ }
523
+ }
524
+ },
525
+ "Parameters": {
526
+ "BootstrapVersion": {
527
+ "Type": "AWS::SSM::Parameter::Value<String>",
528
+ "Default": "/cdk-bootstrap/hnb659fds/version",
529
+ "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
530
+ }
531
+ },
532
+ "Rules": {
533
+ "CheckBootstrapVersion": {
534
+ "Assertions": [
535
+ {
536
+ "Assert": {
537
+ "Fn::Not": [
538
+ {
539
+ "Fn::Contains": [
540
+ [
541
+ "1",
542
+ "2",
543
+ "3",
544
+ "4",
545
+ "5"
546
+ ],
547
+ {
548
+ "Ref": "BootstrapVersion"
549
+ }
550
+ ]
551
+ }
552
+ ]
553
+ },
554
+ "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
555
+ }
556
+ ]
557
+ }
558
+ }
559
+ }
@@ -0,0 +1,44 @@
1
+ "use strict";
2
+ /**
3
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
4
+ *
5
+ * Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
6
+ * with the License. A copy of the License is located at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
11
+ * OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
12
+ * and limitations under the License.
13
+ */
14
+ Object.defineProperty(exports, "__esModule", { value: true });
15
+ // Imports
16
+ const aws_cdk_lib_1 = require("aws-cdk-lib");
17
+ const lib_1 = require("../lib");
18
+ const core_1 = require("@aws-solutions-constructs/core");
19
+ // Setup
20
+ const app = new aws_cdk_lib_1.App();
21
+ const stack = new aws_cdk_lib_1.Stack(app, core_1.generateIntegStackName(__filename));
22
+ stack.node.setContext("@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy", true);
23
+ stack.templateOptions.description = 'Integration Test for aws-cloudfront-s3';
24
+ // Definitions
25
+ const blockPublicAccess = false;
26
+ const testProps = {
27
+ bucketProps: {
28
+ enforceSSL: false,
29
+ publicReadAccess: true,
30
+ blockPublicAccess: {
31
+ blockPublicAcls: blockPublicAccess,
32
+ restrictPublicBuckets: blockPublicAccess,
33
+ blockPublicPolicy: blockPublicAccess,
34
+ ignorePublicAcls: blockPublicAccess
35
+ },
36
+ websiteIndexDocument: "index.html"
37
+ },
38
+ insertHttpSecurityHeaders: false
39
+ };
40
+ new lib_1.CloudFrontToS3(stack, 'test-cloudfront-s3-legacy-http-origin', testProps);
41
+ core_1.suppressAutoDeleteHandlerWarnings(stack);
42
+ // Synth
43
+ app.synth();
44
+ //# sourceMappingURL=data:application/json;base64,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