@aws-solutions-constructs/aws-lambda-secretsmanager 2.79.1 → 2.80.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/.jsii +4 -43
  2. package/lib/index.js +1 -1
  3. package/package.json +6 -6
  4. package/test/integ.lamsec-deployFunctionWithExistingVpc.js.snapshot/lamsec-deployFunctionWithExistingVpc.assets.json +2 -2
  5. package/test/integ.lamsec-deployFunctionWithExistingVpc.js.snapshot/lamsec-deployFunctionWithExistingVpc.template.json +4 -4
  6. package/test/integ.lamsec-deployFunctionWithExistingVpc.js.snapshot/manifest.json +468 -2
  7. package/test/integ.lamsec-deployFunctionWithExistingVpc.js.snapshot/tree.json +391 -76
  8. package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/lamsec-deployFunctionWithVpc.assets.json +2 -2
  9. package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/lamsec-deployFunctionWithVpc.template.json +4 -4
  10. package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/manifest.json +396 -2
  11. package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/tree.json +327 -56
package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/lamsec-deployFunctionWithVpc.assets.json CHANGED
@@ -27,7 +27,7 @@
27
27
  }
28
28
  }
29
29
  },
30
- "554469df7dc68c62e314d2e15a5e504cc7c5cf9ff30ea51202e7acf77d24962e": {
30
+ "b1391eec87063e920e122d85a76ea0f1e4e8563af8009f804e8668c6f5cd3864": {
31
31
  "source": {
32
32
  "path": "lamsec-deployFunctionWithVpc.template.json",
33
33
  "packaging": "file"
@@ -35,7 +35,7 @@
35
35
  "destinations": {
36
36
  "current_account-current_region": {
37
37
  "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
38
- "objectKey": "554469df7dc68c62e314d2e15a5e504cc7c5cf9ff30ea51202e7acf77d24962e.json",
38
+ "objectKey": "b1391eec87063e920e122d85a76ea0f1e4e8563af8009f804e8668c6f5cd3864.json",
39
39
  "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
40
40
  }
41
41
  }
package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/lamsec-deployFunctionWithVpc.template.json CHANGED
@@ -772,10 +772,10 @@
772
772
  "value": "nodejs20.x"
773
773
  },
774
774
  "cn-north-1": {
775
- "value": "nodejs18.x"
775
+ "value": "nodejs20.x"
776
776
  },
777
777
  "cn-northwest-1": {
778
- "value": "nodejs18.x"
778
+ "value": "nodejs20.x"
779
779
  },
780
780
  "eu-central-1": {
781
781
  "value": "nodejs20.x"
@@ -826,10 +826,10 @@
826
826
  "value": "nodejs20.x"
827
827
  },
828
828
  "us-gov-east-1": {
829
- "value": "nodejs18.x"
829
+ "value": "nodejs20.x"
830
830
  },
831
831
  "us-gov-west-1": {
832
- "value": "nodejs18.x"
832
+ "value": "nodejs20.x"
833
833
  },
834
834
  "us-iso-east-1": {
835
835
  "value": "nodejs18.x"
package/test/integ.lamsec-deployFunctionWithVpc.js.snapshot/manifest.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "39.0.0",
2
+ "version": "40.0.0",
3
3
  "artifacts": {
4
4
  "lamsecdeployFunctionWithVpcIntegDefaultTestDeployAssert66148FF5.assets": {
5
5
  "type": "cdk:asset-manifest",
@@ -66,7 +66,7 @@
66
66
  "validateOnSynth": false,
67
67
  "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
68
68
  "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
69
- "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/554469df7dc68c62e314d2e15a5e504cc7c5cf9ff30ea51202e7acf77d24962e.json",
69
+ "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/b1391eec87063e920e122d85a76ea0f1e4e8563af8009f804e8668c6f5cd3864.json",
70
70
  "requiresBootstrapStackVersion": 6,
71
71
  "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
72
72
  "additionalDependencies": [
@@ -82,42 +82,249 @@
82
82
  "lamsec-deployFunctionWithVpc.assets"
83
83
  ],
84
84
  "metadata": {
85
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunctionServiceRole": [
86
+ {
87
+ "type": "aws:cdk:analytics:construct",
88
+ "data": {
89
+ "assumedBy": {
90
+ "principalAccount": "*",
91
+ "assumeRoleAction": "*"
92
+ },
93
+ "inlinePolicies": "*"
94
+ }
95
+ },
96
+ {
97
+ "type": "aws:cdk:analytics:method",
98
+ "data": {
99
+ "addToPolicy": [
100
+ {}
101
+ ]
102
+ }
103
+ },
104
+ {
105
+ "type": "aws:cdk:analytics:method",
106
+ "data": {
107
+ "addToPrincipalPolicy": [
108
+ {}
109
+ ]
110
+ }
111
+ },
112
+ {
113
+ "type": "aws:cdk:analytics:method",
114
+ "data": {
115
+ "attachInlinePolicy": [
116
+ "*"
117
+ ]
118
+ }
119
+ },
120
+ {
121
+ "type": "aws:cdk:analytics:method",
122
+ "data": {
123
+ "attachInlinePolicy": [
124
+ "*"
125
+ ]
126
+ }
127
+ },
128
+ {
129
+ "type": "aws:cdk:analytics:method",
130
+ "data": {
131
+ "addToPrincipalPolicy": [
132
+ {}
133
+ ]
134
+ }
135
+ },
136
+ {
137
+ "type": "aws:cdk:analytics:method",
138
+ "data": {
139
+ "addToPrincipalPolicy": [
140
+ {}
141
+ ]
142
+ }
143
+ }
144
+ ],
145
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunctionServiceRole/ImportLambdaFunctionServiceRole": [
146
+ {
147
+ "type": "aws:cdk:analytics:construct",
148
+ "data": "*"
149
+ }
150
+ ],
85
151
  "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunctionServiceRole/Resource": [
86
152
  {
87
153
  "type": "aws:cdk:logicalId",
88
154
  "data": "testlambdasecretsmanagerLambdaFunctionServiceRole92CE007F"
89
155
  }
90
156
  ],
157
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunctionServiceRole/DefaultPolicy": [
158
+ {
159
+ "type": "aws:cdk:analytics:construct",
160
+ "data": "*"
161
+ },
162
+ {
163
+ "type": "aws:cdk:analytics:method",
164
+ "data": {
165
+ "attachToRole": [
166
+ "*"
167
+ ]
168
+ }
169
+ },
170
+ {
171
+ "type": "aws:cdk:analytics:method",
172
+ "data": {
173
+ "attachToRole": [
174
+ "*"
175
+ ]
176
+ }
177
+ },
178
+ {
179
+ "type": "aws:cdk:analytics:method",
180
+ "data": {
181
+ "addStatements": [
182
+ {}
183
+ ]
184
+ }
185
+ },
186
+ {
187
+ "type": "aws:cdk:analytics:method",
188
+ "data": {
189
+ "addStatements": [
190
+ {}
191
+ ]
192
+ }
193
+ },
194
+ {
195
+ "type": "aws:cdk:analytics:method",
196
+ "data": {
197
+ "addStatements": [
198
+ {}
199
+ ]
200
+ }
201
+ }
202
+ ],
91
203
  "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunctionServiceRole/DefaultPolicy/Resource": [
92
204
  {
93
205
  "type": "aws:cdk:logicalId",
94
206
  "data": "testlambdasecretsmanagerLambdaFunctionServiceRoleDefaultPolicyF24BF460"
95
207
  }
96
208
  ],
209
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/ReplaceDefaultSecurityGroup-security-group": [
210
+ {
211
+ "type": "aws:cdk:analytics:construct",
212
+ "data": {
213
+ "vpc": "*",
214
+ "allowAllOutbound": true
215
+ }
216
+ }
217
+ ],
97
218
  "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/ReplaceDefaultSecurityGroup-security-group/Resource": [
98
219
  {
99
220
  "type": "aws:cdk:logicalId",
100
221
  "data": "testlambdasecretsmanagerReplaceDefaultSecurityGroupsecuritygroupF837FD37"
101
222
  }
102
223
  ],
224
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunction": [
225
+ {
226
+ "type": "aws:cdk:analytics:construct",
227
+ "data": {
228
+ "role": "*",
229
+ "tracing": "Active",
230
+ "runtime": "*",
231
+ "handler": "*",
232
+ "code": "*",
233
+ "securityGroups": [
234
+ "*"
235
+ ],
236
+ "vpc": "*"
237
+ }
238
+ },
239
+ {
240
+ "type": "aws:cdk:analytics:method",
241
+ "data": {
242
+ "addEnvironment": [
243
+ "*",
244
+ "*",
245
+ {
246
+ "removeInEdge": true
247
+ }
248
+ ]
249
+ }
250
+ },
251
+ {
252
+ "type": "aws:cdk:analytics:method",
253
+ "data": {
254
+ "addEnvironment": [
255
+ "*",
256
+ "*"
257
+ ]
258
+ }
259
+ }
260
+ ],
103
261
  "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/LambdaFunction/Resource": [
104
262
  {
105
263
  "type": "aws:cdk:logicalId",
106
264
  "data": "testlambdasecretsmanagerLambdaFunction130E7301"
107
265
  }
108
266
  ],
267
+ "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/secret": [
268
+ {
269
+ "type": "aws:cdk:analytics:construct",
270
+ "data": {
271
+ "removalPolicy": "destroy"
272
+ }
273
+ }
274
+ ],
109
275
  "/lamsec-deployFunctionWithVpc/test-lambda-secretsmanager/secret/Resource": [
110
276
  {
111
277
  "type": "aws:cdk:logicalId",
112
278
  "data": "testlambdasecretsmanagersecret4C99E6BF"
113
279
  }
114
280
  ],
281
+ "/lamsec-deployFunctionWithVpc/Vpc": [
282
+ {
283
+ "type": "aws:cdk:analytics:construct",
284
+ "data": {
285
+ "natGateways": "*",
286
+ "subnetConfiguration": [
287
+ {
288
+ "cidrMask": "*",
289
+ "name": "*",
290
+ "subnetType": "Isolated"
291
+ }
292
+ ],
293
+ "enableDnsHostnames": true,
294
+ "enableDnsSupport": true
295
+ }
296
+ }
297
+ ],
115
298
  "/lamsec-deployFunctionWithVpc/Vpc/Resource": [
116
299
  {
117
300
  "type": "aws:cdk:logicalId",
118
301
  "data": "Vpc8378EB38"
119
302
  }
120
303
  ],
304
+ "/lamsec-deployFunctionWithVpc/Vpc/isolatedSubnet1": [
305
+ {
306
+ "type": "aws:cdk:analytics:construct",
307
+ "data": {
308
+ "availabilityZone": "*",
309
+ "vpcId": "*",
310
+ "cidrBlock": "*",
311
+ "mapPublicIpOnLaunch": false,
312
+ "ipv6CidrBlock": "*",
313
+ "assignIpv6AddressOnCreation": "*"
314
+ }
315
+ },
316
+ {
317
+ "type": "aws:cdk:analytics:construct",
318
+ "data": {
319
+ "availabilityZone": "*",
320
+ "vpcId": "*",
321
+ "cidrBlock": "*",
322
+ "mapPublicIpOnLaunch": false,
323
+ "ipv6CidrBlock": "*",
324
+ "assignIpv6AddressOnCreation": "*"
325
+ }
326
+ }
327
+ ],
121
328
  "/lamsec-deployFunctionWithVpc/Vpc/isolatedSubnet1/Subnet": [
122
329
  {
123
330
  "type": "aws:cdk:logicalId",
@@ -136,6 +343,30 @@
136
343
  "data": "VpcisolatedSubnet1RouteTableAssociationD259E31A"
137
344
  }
138
345
  ],
346
+ "/lamsec-deployFunctionWithVpc/Vpc/isolatedSubnet2": [
347
+ {
348
+ "type": "aws:cdk:analytics:construct",
349
+ "data": {
350
+ "availabilityZone": "*",
351
+ "vpcId": "*",
352
+ "cidrBlock": "*",
353
+ "mapPublicIpOnLaunch": false,
354
+ "ipv6CidrBlock": "*",
355
+ "assignIpv6AddressOnCreation": "*"
356
+ }
357
+ },
358
+ {
359
+ "type": "aws:cdk:analytics:construct",
360
+ "data": {
361
+ "availabilityZone": "*",
362
+ "vpcId": "*",
363
+ "cidrBlock": "*",
364
+ "mapPublicIpOnLaunch": false,
365
+ "ipv6CidrBlock": "*",
366
+ "assignIpv6AddressOnCreation": "*"
367
+ }
368
+ }
369
+ ],
139
370
  "/lamsec-deployFunctionWithVpc/Vpc/isolatedSubnet2/Subnet": [
140
371
  {
141
372
  "type": "aws:cdk:logicalId",
@@ -154,24 +385,132 @@
154
385
  "data": "VpcisolatedSubnet2RouteTableAssociation25A4716F"
155
386
  }
156
387
  ],
388
+ "/lamsec-deployFunctionWithVpc/Vpc/RestrictDefaultSecurityGroupCustomResource": [
389
+ {
390
+ "type": "aws:cdk:analytics:construct",
391
+ "data": "*"
392
+ }
393
+ ],
157
394
  "/lamsec-deployFunctionWithVpc/Vpc/RestrictDefaultSecurityGroupCustomResource/Default": [
158
395
  {
159
396
  "type": "aws:cdk:logicalId",
160
397
  "data": "VpcRestrictDefaultSecurityGroupCustomResourceC73DA2BE"
161
398
  }
162
399
  ],
400
+ "/lamsec-deployFunctionWithVpc/Vpc/FlowLog": [
401
+ {
402
+ "type": "aws:cdk:analytics:construct",
403
+ "data": {
404
+ "resourceType": "*"
405
+ }
406
+ }
407
+ ],
408
+ "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/IAMRole": [
409
+ {
410
+ "type": "aws:cdk:analytics:construct",
411
+ "data": {
412
+ "roleName": "*",
413
+ "assumedBy": {
414
+ "principalAccount": "*",
415
+ "assumeRoleAction": "*"
416
+ }
417
+ }
418
+ },
419
+ {
420
+ "type": "aws:cdk:analytics:method",
421
+ "data": {
422
+ "addToPrincipalPolicy": [
423
+ {}
424
+ ]
425
+ }
426
+ },
427
+ {
428
+ "type": "aws:cdk:analytics:method",
429
+ "data": {
430
+ "attachInlinePolicy": [
431
+ "*"
432
+ ]
433
+ }
434
+ },
435
+ {
436
+ "type": "aws:cdk:analytics:method",
437
+ "data": {
438
+ "attachInlinePolicy": [
439
+ "*"
440
+ ]
441
+ }
442
+ },
443
+ {
444
+ "type": "aws:cdk:analytics:method",
445
+ "data": {
446
+ "addToPrincipalPolicy": [
447
+ {}
448
+ ]
449
+ }
450
+ }
451
+ ],
452
+ "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/IAMRole/ImportIAMRole": [
453
+ {
454
+ "type": "aws:cdk:analytics:construct",
455
+ "data": "*"
456
+ }
457
+ ],
163
458
  "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/IAMRole/Resource": [
164
459
  {
165
460
  "type": "aws:cdk:logicalId",
166
461
  "data": "VpcFlowLogIAMRole6A475D41"
167
462
  }
168
463
  ],
464
+ "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/IAMRole/DefaultPolicy": [
465
+ {
466
+ "type": "aws:cdk:analytics:construct",
467
+ "data": "*"
468
+ },
469
+ {
470
+ "type": "aws:cdk:analytics:method",
471
+ "data": {
472
+ "attachToRole": [
473
+ "*"
474
+ ]
475
+ }
476
+ },
477
+ {
478
+ "type": "aws:cdk:analytics:method",
479
+ "data": {
480
+ "attachToRole": [
481
+ "*"
482
+ ]
483
+ }
484
+ },
485
+ {
486
+ "type": "aws:cdk:analytics:method",
487
+ "data": {
488
+ "addStatements": [
489
+ {}
490
+ ]
491
+ }
492
+ },
493
+ {
494
+ "type": "aws:cdk:analytics:method",
495
+ "data": {
496
+ "addStatements": [
497
+ {}
498
+ ]
499
+ }
500
+ }
501
+ ],
169
502
  "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/IAMRole/DefaultPolicy/Resource": [
170
503
  {
171
504
  "type": "aws:cdk:logicalId",
172
505
  "data": "VpcFlowLogIAMRoleDefaultPolicy406FB995"
173
506
  }
174
507
  ],
508
+ "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/LogGroup": [
509
+ {
510
+ "type": "aws:cdk:analytics:construct",
511
+ "data": "*"
512
+ }
513
+ ],
175
514
  "/lamsec-deployFunctionWithVpc/Vpc/FlowLog/LogGroup/Resource": [
176
515
  {
177
516
  "type": "aws:cdk:logicalId",
@@ -184,6 +523,22 @@
184
523
  "data": "VpcFlowLog8FF33A73"
185
524
  }
186
525
  ],
526
+ "/lamsec-deployFunctionWithVpc/Vpc/SECRETS_MANAGER": [
527
+ {
528
+ "type": "aws:cdk:analytics:construct",
529
+ "data": {
530
+ "vpc": "*",
531
+ "service": {
532
+ "privateDnsDefault": true,
533
+ "name": "*",
534
+ "port": "*"
535
+ },
536
+ "securityGroups": [
537
+ "*"
538
+ ]
539
+ }
540
+ }
541
+ ],
187
542
  "/lamsec-deployFunctionWithVpc/Vpc/SECRETS_MANAGER/Resource": [
188
543
  {
189
544
  "type": "aws:cdk:logicalId",
@@ -214,6 +569,45 @@
214
569
  "data": "CustomVpcRestrictDefaultSGCustomResourceProviderHandlerDC833E5E"
215
570
  }
216
571
  ],
572
+ "/lamsec-deployFunctionWithVpc/lamsec-deployFunctionWithVpc-SECRETS_MANAGER-security-group": [
573
+ {
574
+ "type": "aws:cdk:analytics:construct",
575
+ "data": {
576
+ "vpc": "*",
577
+ "allowAllOutbound": true
578
+ }
579
+ },
580
+ {
581
+ "type": "aws:cdk:analytics:method",
582
+ "data": {
583
+ "addIngressRule": [
584
+ {
585
+ "canInlineRule": true,
586
+ "connections": "*",
587
+ "uniqueId": "*"
588
+ },
589
+ {},
590
+ "*",
591
+ "*"
592
+ ]
593
+ }
594
+ },
595
+ {
596
+ "type": "aws:cdk:analytics:method",
597
+ "data": {
598
+ "addIngressRule": [
599
+ {
600
+ "canInlineRule": true,
601
+ "connections": "*",
602
+ "uniqueId": "*"
603
+ },
604
+ {},
605
+ "*",
606
+ false
607
+ ]
608
+ }
609
+ }
610
+ ],
217
611
  "/lamsec-deployFunctionWithVpc/lamsec-deployFunctionWithVpc-SECRETS_MANAGER-security-group/Resource": [
218
612
  {
219
613
  "type": "aws:cdk:logicalId",