npm - @bitblit/ratchet-epsilon-deployment - Versions diffs - 4.0.420-alpha → 4.0.421-alpha - Mend

@bitblit/ratchet-epsilon-deployment 4.0.420-alpha → 4.0.421-alpha

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (42) hide show

package/lib/build/index.d.ts ADDED Viewed

	@@ -0,0 +1 @@
1	+ export * from './ratchet-epsilon-deployment-info.js';

package/lib/build/index.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export * from './ratchet-epsilon-deployment-info.js';
2	+ //# sourceMappingURL=index.js.map

package/lib/build/index.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/build/index.ts"],"names":[],"mappings":"AAIA,cAAc,sCAAsC,CAAC"}

package/lib/build/ratchet-epsilon-deployment-info.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+import { BuildInformation } from '@bitblit/ratchet-common/build/build-information';
+export declare class RatchetEpsilonDeploymentInfo {
+    private constructor();
+    static buildInformation(): BuildInformation;
+}

package/lib/build/ratchet-epsilon-deployment-info.js ADDED Viewed

@@ -0,0 +1,15 @@
+export class RatchetEpsilonDeploymentInfo {
+    constructor() { }
+    static buildInformation() {
+        const val = {
+            version: 'LOCAL-SNAPSHOT',
+            hash: 'LOCAL-HASH',
+            branch: 'LOCAL-BRANCH',
+            tag: 'LOCAL-TAG',
+            timeBuiltISO: 'LOCAL-TIME-ISO',
+            notes: 'LOCAL-NOTES',
+        };
+        return val;
+    }
+}
+//# sourceMappingURL=ratchet-epsilon-deployment-info.js.map

package/lib/build/ratchet-epsilon-deployment-info.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"ratchet-epsilon-deployment-info.js","sourceRoot":"","sources":["../../src/build/ratchet-epsilon-deployment-info.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,4BAA4B;IAGvC,gBAAuB,CAAC;IAEjB,MAAM,CAAC,gBAAgB;QAC5B,MAAM,GAAG,GAAqB;YAC5B,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,cAAc;YACtB,GAAG,EAAE,WAAW;YAChB,YAAY,EAAE,gBAAgB;YAC9B,KAAK,EAAE,aAAa;SACrB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/lib/deployment/cdk/bucket-and-source-configuration.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+import { IBucket } from 'aws-cdk-lib/aws-s3';
+import { SourceConfiguration } from 'aws-cdk-lib/aws-cloudfront';
+export interface BucketAndSourceConfiguration {
+    bucket: IBucket;
+    sourceConfig: SourceConfiguration;
+}

package/lib/deployment/cdk/bucket-and-source-configuration.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=bucket-and-source-configuration.js.map

package/lib/deployment/cdk/bucket-and-source-configuration.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"bucket-and-source-configuration.js","sourceRoot":"","sources":["../../../src/deployment/cdk/bucket-and-source-configuration.ts"],"names":[],"mappings":""}

package/lib/deployment/cdk/epsilon-api-stack-feature.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+export declare enum EpsilonApiStackFeature {
+    WebLambda = "WebLambda",
+    BackgroundLambda = "BackgroundLambda",
+    AwsBatchHandler = "AwsBatchHandler"
+}

package/lib/deployment/cdk/epsilon-api-stack-feature.js ADDED Viewed

@@ -0,0 +1,7 @@
+export var EpsilonApiStackFeature;
+(function (EpsilonApiStackFeature) {
+    EpsilonApiStackFeature["WebLambda"] = "WebLambda";
+    EpsilonApiStackFeature["BackgroundLambda"] = "BackgroundLambda";
+    EpsilonApiStackFeature["AwsBatchHandler"] = "AwsBatchHandler";
+})(EpsilonApiStackFeature || (EpsilonApiStackFeature = {}));
+//# sourceMappingURL=epsilon-api-stack-feature.js.map

package/lib/deployment/cdk/epsilon-api-stack-feature.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"epsilon-api-stack-feature.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-api-stack-feature.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,iDAAuB,CAAA;IACvB,+DAAqC,CAAA;IACrC,6DAAmC,CAAA;AACrC,CAAC,EAJW,sBAAsB,KAAtB,sBAAsB,QAIjC"}

package/lib/deployment/cdk/epsilon-api-stack-props.d.ts ADDED Viewed

@@ -0,0 +1,19 @@
+import { StackProps } from 'aws-cdk-lib';
+import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
+import { EpsilonApiStackFeature } from './epsilon-api-stack-feature.js';
+export interface EpsilonApiStackProps extends StackProps {
+    batchInstancesEc2KeyPairName?: string;
+    additionalPolicyStatements: PolicyStatement[];
+    disabledFeatures?: EpsilonApiStackFeature[];
+    dockerFileFolder: string;
+    dockerFileName: string;
+    lambdaSecurityGroupIds: string[];
+    vpcSubnetIds: string[];
+    vpcId: string;
+    extraEnvironmentalVars?: Record<string, string>;
+    webLambdaPingMinutes?: number;
+    webMemorySizeMb?: number;
+    backgroundMemorySizeMb?: number;
+    webTimeoutSeconds?: number;
+    backgroundTimeoutSeconds?: number;
+}

package/lib/deployment/cdk/epsilon-api-stack-props.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=epsilon-api-stack-props.js.map

package/lib/deployment/cdk/epsilon-api-stack-props.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"epsilon-api-stack-props.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-api-stack-props.ts"],"names":[],"mappings":""}

package/lib/deployment/cdk/epsilon-api-stack.d.ts ADDED Viewed

@@ -0,0 +1,9 @@
+import { Stack } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+import { EpsilonApiStackProps } from './epsilon-api-stack-props.js';
+export declare class EpsilonApiStack extends Stack {
+    private webHandler;
+    private backgroundHandler;
+    apiDomain: string;
+    constructor(scope: Construct, id: string, props?: EpsilonApiStackProps);
+}

package/lib/deployment/cdk/epsilon-api-stack.js ADDED Viewed

@@ -0,0 +1,184 @@
+import { Duration, Lazy, Size, Stack } from 'aws-cdk-lib';
+import { DockerImageCode, DockerImageFunction, FunctionUrlAuthType, HttpMethod } from 'aws-cdk-lib/aws-lambda';
+import { ManagedPolicy, PolicyDocument, Role, ServicePrincipal } from 'aws-cdk-lib/aws-iam';
+import { Topic } from 'aws-cdk-lib/aws-sns';
+import { Queue } from 'aws-cdk-lib/aws-sqs';
+import { LambdaSubscription } from 'aws-cdk-lib/aws-sns-subscriptions';
+import { Rule, Schedule } from 'aws-cdk-lib/aws-events';
+import { LambdaFunction } from 'aws-cdk-lib/aws-events-targets';
+import { DockerImageAsset } from 'aws-cdk-lib/aws-ecr-assets';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { EpsilonStackUtil } from './epsilon-stack-util.js';
+import { RatchetEpsilonDeploymentInfo } from '../../build/ratchet-epsilon-deployment-info.js';
+import { EcsFargateContainerDefinition, EcsJobDefinition, FargateComputeEnvironment, JobQueue, } from 'aws-cdk-lib/aws-batch';
+import { SecurityGroup, Vpc } from 'aws-cdk-lib/aws-ec2';
+import { ContainerImage } from 'aws-cdk-lib/aws-ecs';
+import { EpsilonApiStackFeature } from './epsilon-api-stack-feature.js';
+export class EpsilonApiStack extends Stack {
+    webHandler;
+    backgroundHandler;
+    apiDomain;
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        const disabledFeatures = props?.disabledFeatures || [];
+        const dockerImageAsset = new DockerImageAsset(this, id + 'DockerImage', {
+            directory: props.dockerFileFolder,
+            file: props.dockerFileName,
+        });
+        const dockerImageCode = DockerImageCode.fromImageAsset(props.dockerFileFolder, { file: props.dockerFileName });
+        const notificationTopic = new Topic(this, id + 'WorkNotificationTopic');
+        const workQueue = new Queue(this, id + 'WorkQueue', {
+            fifo: true,
+            retentionPeriod: Duration.hours(8),
+            visibilityTimeout: Duration.minutes(5),
+            contentBasedDeduplication: true,
+            ...props,
+        });
+        const interApiGenericEventTopic = new Topic(this, id + 'InterApiTopic');
+        const epsilonEnv = {
+            EPSILON_AWS_REGION: StringRatchet.safeString(Stack.of(this).region),
+            EPSILON_AWS_AVAILABILITY_ZONES: StringRatchet.safeString(JSON.stringify(Stack.of(this).availabilityZones)),
+            EPSILON_BACKGROUND_SQS_QUEUE_URL: StringRatchet.safeString(workQueue.queueUrl),
+            EPSILON_BACKGROUND_SNS_TOPIC_ARN: StringRatchet.safeString(notificationTopic.topicArn),
+            EPSILON_INTER_API_EVENT_TOPIC_ARN: StringRatchet.safeString(interApiGenericEventTopic.topicArn),
+            EPSILON_LIB_BUILD_HASH: StringRatchet.safeString(RatchetEpsilonDeploymentInfo.buildInformation().hash),
+            EPSILON_LIB_BUILD_TIME: StringRatchet.safeString(RatchetEpsilonDeploymentInfo.buildInformation().timeBuiltISO),
+            EPSILON_LIB_BUILD_BRANCH_OR_TAG: StringRatchet.safeString(RatchetEpsilonDeploymentInfo.buildInformation().branch || RatchetEpsilonDeploymentInfo.buildInformation().tag),
+            EPSILON_LIB_BUILD_VERSION: StringRatchet.safeString(RatchetEpsilonDeploymentInfo.buildInformation().version),
+        };
+        const env = Object.assign({}, props.extraEnvironmentalVars || {}, epsilonEnv);
+        if (!disabledFeatures.includes(EpsilonApiStackFeature.AwsBatchHandler)) {
+            const executionRole = new Role(this, id + 'BatchExecutionRole', {
+                assumedBy: new ServicePrincipal('ecs-tasks.amazonaws.com'),
+                managedPolicies: [ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaVPCAccessExecutionRole')],
+                inlinePolicies: {
+                    root: new PolicyDocument({
+                        statements: EpsilonStackUtil.ECS_POLICY_STATEMENTS,
+                    }),
+                },
+            });
+            const jobRole = new Role(this, id + 'BatchJobRole', {
+                assumedBy: new ServicePrincipal('ecs-tasks.amazonaws.com'),
+                managedPolicies: [ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaVPCAccessExecutionRole')],
+                inlinePolicies: {
+                    root: new PolicyDocument({
+                        statements: EpsilonStackUtil.createDefaultPolicyStatementList(props, workQueue, notificationTopic, interApiGenericEventTopic),
+                    }),
+                },
+            });
+            const compEnvProps = {
+                vpc: Vpc.fromLookup(this, `Vpc`, { vpcId: props.vpcId }),
+                computeEnvironmentName: id + 'ComputeEnv',
+                enabled: true,
+                maxvCpus: 16,
+                replaceComputeEnvironment: false,
+                securityGroups: props.lambdaSecurityGroupIds.map((sgId, index) => SecurityGroup.fromSecurityGroupId(this, `SecurityGroup${index}`, `sg-${sgId}`)),
+                serviceRole: Role.fromRoleArn(this, `${id}ServiceRole`, 'arn:aws:iam::' + props.env.account + ':role/AWSBatchServiceRole'),
+                spot: false,
+                terminateOnUpdate: false,
+                updateTimeout: Duration.hours(4),
+                updateToLatestImageVersion: true,
+            };
+            const compEnv = new FargateComputeEnvironment(this, id + 'ComputeEnv', compEnvProps);
+            const batchJobQueueProps = {
+                computeEnvironments: [{ order: 1, computeEnvironment: compEnv }],
+                enabled: true,
+                jobQueueName: id + 'BatchJobQueue',
+                priority: 10,
+                schedulingPolicy: undefined,
+            };
+            const batchJobQueue = new JobQueue(this, id + 'BatchJobQueue', batchJobQueueProps);
+            const batchEnvVars = EpsilonStackUtil.toEnvironmentVariables([
+                env,
+                props.extraEnvironmentalVars || {},
+                {
+                    EPSILON_RUNNING_IN_AWS_BATCH: true,
+                },
+            ]);
+            const containerDef = {
+                cpu: 4,
+                image: ContainerImage.fromRegistry(dockerImageAsset.imageUri),
+                memory: Size.mebibytes(8192),
+                assignPublicIp: true,
+                command: ['Ref::taskName', 'Ref::taskDataBase64', 'Ref::traceId', 'Ref::traceDepth', 'Ref::taskMetaDataBase64'],
+                environment: batchEnvVars,
+                executionRole: executionRole,
+                jobRole: jobRole,
+                readonlyRootFilesystem: false,
+                volumes: [],
+            };
+            const fargateContainerDefinitionDef = new EcsFargateContainerDefinition(this, `${id}FargateContainerDefinition`, containerDef);
+            const jobProps = {
+                jobDefinitionName: id + 'JobDefinition',
+                retryAttempts: 3,
+                retryStrategies: undefined,
+                schedulingPriority: undefined,
+                timeout: undefined,
+                container: fargateContainerDefinitionDef,
+            };
+            const jobDef = new EcsJobDefinition(this, id + 'JobDefinition', jobProps);
+            env['EPSILON_AWS_BATCH_JOB_DEFINITION_ARN'] = jobDef.jobDefinitionArn;
+            env['EPSILON_AWS_BATCH_JOB_QUEUE_ARN'] = batchJobQueue.jobQueueArn;
+        }
+        const lambdaRole = new Role(this, 'customRole', {
+            roleName: id + 'LambdaCustomRole',
+            assumedBy: new ServicePrincipal('lambda.amazonaws.com'),
+            managedPolicies: [ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaVPCAccessExecutionRole')],
+            inlinePolicies: {
+                root: new PolicyDocument({
+                    statements: EpsilonStackUtil.createDefaultPolicyStatementList(props, workQueue, notificationTopic, interApiGenericEventTopic),
+                }),
+            },
+        });
+        if (!disabledFeatures.includes(EpsilonApiStackFeature.WebLambda)) {
+            this.webHandler = new DockerImageFunction(this, id + 'Web', {
+                retryAttempts: 2,
+                memorySize: props.webMemorySizeMb || 128,
+                ephemeralStorageSize: Size.mebibytes(512),
+                timeout: Duration.seconds(props.webTimeoutSeconds || 20),
+                code: dockerImageCode,
+                role: lambdaRole,
+                environment: env,
+            });
+            if (props?.webLambdaPingMinutes && props.webLambdaPingMinutes > 0) {
+                const rule = new Rule(this, id + 'WebKeepaliveRule', {
+                    schedule: Schedule.rate(Duration.minutes(Math.ceil(props.webLambdaPingMinutes))),
+                });
+                rule.addTarget(new LambdaFunction(this.webHandler));
+            }
+            const fnUrl = this.webHandler.addFunctionUrl({
+                authType: FunctionUrlAuthType.NONE,
+                cors: {
+                    allowedOrigins: ['*'],
+                    allowedHeaders: ['Content-Type', 'X-Amz-Date', 'Authorization', 'X-Api-Key'],
+                    allowedMethods: [HttpMethod.ALL],
+                    allowCredentials: true,
+                },
+            });
+            this.apiDomain = Lazy.uncachedString({
+                produce: (context) => {
+                    const resolved = context.resolve(fnUrl.url);
+                    return { 'Fn::Select': [2, { 'Fn::Split': ['/', resolved] }] };
+                },
+            });
+        }
+        if (!disabledFeatures.includes(EpsilonApiStackFeature.BackgroundLambda)) {
+            this.backgroundHandler = new DockerImageFunction(this, id + 'Background', {
+                retryAttempts: 2,
+                memorySize: props.backgroundMemorySizeMb || 3000,
+                ephemeralStorageSize: Size.mebibytes(512),
+                timeout: Duration.seconds(props.backgroundTimeoutSeconds || 900),
+                code: dockerImageCode,
+                role: lambdaRole,
+                environment: env,
+            });
+            notificationTopic.addSubscription(new LambdaSubscription(this.backgroundHandler));
+            interApiGenericEventTopic.addSubscription(new LambdaSubscription(this.backgroundHandler));
+            const rule = new Rule(this, id + 'CronRule', {
+                schedule: Schedule.rate(Duration.minutes(1)),
+            });
+            rule.addTarget(new LambdaFunction(this.backgroundHandler));
+        }
+    }
+}
+//# sourceMappingURL=epsilon-api-stack.js.map

package/lib/deployment/cdk/epsilon-api-stack.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"epsilon-api-stack.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-api-stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAe,mBAAmB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC5H,OAAO,EAAE,aAAa,EAAE,cAAc,EAAmB,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7G,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EACL,6BAA6B,EAE7B,gBAAgB,EAEhB,yBAAyB,EAEzB,QAAQ,GAET,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAChC,UAAU,CAAsB;IAChC,iBAAiB,CAAsB;IAExC,SAAS,CAAS;IAEzB,YAAY,KAAgB,EAAE,EAAU,EAAE,KAA4B;QACpE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,MAAM,gBAAgB,GAA6B,KAAK,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAGjF,MAAM,gBAAgB,GAAqB,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,aAAa,EAAE;YACxF,SAAS,EAAE,KAAK,CAAC,gBAAgB;YACjC,IAAI,EAAE,KAAK,CAAC,cAAc;SAC3B,CAAC,CAAC;QACH,MAAM,eAAe,GAAoB,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAEhI,MAAM,iBAAiB,GAAU,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,uBAAuB,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAU,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,WAAW,EAAE;YACzD,IAAI,EAAE,IAAI;YACV,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAClC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,yBAAyB,EAAE,IAAI;YAC/B,GAAG,KAAK;SACT,CAAC,CAAC;QAEH,MAAM,yBAAyB,GAAU,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC;QAE/E,MAAM,UAAU,GAA2B;YACzC,kBAAkB,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACnE,8BAA8B,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC1G,gCAAgC,EAAE,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9E,gCAAgC,EAAE,aAAa,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YACtF,iCAAiC,EAAE,aAAa,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YAC/F,sBAAsB,EAAE,aAAa,CAAC,UAAU,CAAC,4BAA4B,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC;YACtG,sBAAsB,EAAE,aAAa,CAAC,UAAU,CAAC,4BAA4B,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC;YAC9G,+BAA+B,EAAE,aAAa,CAAC,UAAU,CACvD,4BAA4B,CAAC,gBAAgB,EAAE,CAAC,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAC9G;YACD,yBAAyB,EAAE,aAAa,CAAC,UAAU,CAAC,4BAA4B,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC;SAC7G,CAAC;QACF,MAAM,GAAG,GAA2B,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,sBAAsB,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;QAEtG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAE,CAAC;YAGvE,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,oBAAoB,EAAE;gBAC9D,SAAS,EAAE,IAAI,gBAAgB,CAAC,yBAAyB,CAAC;gBAC1D,eAAe,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,8CAA8C,CAAC,CAAC;gBACzG,cAAc,EAAE;oBACd,IAAI,EAAE,IAAI,cAAc,CAAC;wBACvB,UAAU,EAAE,gBAAgB,CAAC,qBAAqB;qBACnD,CAAC;iBACH;aACF,CAAC,CAAC;YAGH,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,cAAc,EAAE;gBAClD,SAAS,EAAE,IAAI,gBAAgB,CAAC,yBAAyB,CAAC;gBAC1D,eAAe,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,8CAA8C,CAAC,CAAC;gBACzG,cAAc,EAAE;oBACd,IAAI,EAAE,IAAI,cAAc,CAAC;wBACvB,UAAU,EAAE,gBAAgB,CAAC,gCAAgC,CAAC,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;qBAC9H,CAAC;iBACH;aACF,CAAC,CAAC;YAQH,MAAM,YAAY,GAAmC;gBACnD,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACxD,sBAAsB,EAAE,EAAE,GAAG,YAAY;gBACzC,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,EAAE;gBACZ,yBAAyB,EAAE,KAAK;gBAChC,cAAc,EAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/D,aAAa,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,KAAK,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAC/E;gBACD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,2BAA2B,CAAC;gBAC1H,IAAI,EAAE,KAAK;gBACX,iBAAiB,EAAE,KAAK;gBACxB,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChC,0BAA0B,EAAE,IAAI;aAEjC,CAAC;YAEF,MAAM,OAAO,GAA8B,IAAI,yBAAyB,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE,YAAY,CAAC,CAAC;YAEhH,MAAM,kBAAkB,GAAkB;gBACxC,mBAAmB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;gBAChE,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,EAAE,GAAG,eAAe;gBAClC,QAAQ,EAAE,EAAE;gBACZ,gBAAgB,EAAE,SAAS;aAC5B,CAAC;YAEF,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAEnF,MAAM,YAAY,GAAwB,gBAAgB,CAAC,sBAAsB,CAAC;gBAChF,GAAG;gBACH,KAAK,CAAC,sBAAsB,IAAI,EAAE;gBAClC;oBACE,4BAA4B,EAAE,IAAI;iBACnC;aACF,CAAC,CAAC;YAEH,MAAM,YAAY,GAAuC;gBACvD,GAAG,EAAE,CAAC;gBACN,KAAK,EAAE,cAAc,CAAC,YAAY,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAC7D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC5B,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,CAAC,eAAe,EAAE,qBAAqB,EAAE,cAAc,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;gBAC/G,WAAW,EAAE,YAAY;gBACzB,aAAa,EAAE,aAAa;gBAE5B,OAAO,EAAE,OAAO;gBAEhB,sBAAsB,EAAE,KAAK;gBAG7B,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,MAAM,6BAA6B,GAAG,IAAI,6BAA6B,CAAC,IAAI,EAAE,GAAG,EAAE,4BAA4B,EAAE,YAAY,CAAC,CAAC;YAE/H,MAAM,QAAQ,GAA0B;gBACtC,iBAAiB,EAAE,EAAE,GAAG,eAAe;gBACvC,aAAa,EAAE,CAAC;gBAChB,eAAe,EAAE,SAAS;gBAC1B,kBAAkB,EAAE,SAAS;gBAC7B,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,6BAA6B;aACzC,CAAC;YAEF,MAAM,MAAM,GAAqB,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,eAAe,EAAE,QAAQ,CAAC,CAAC;YAG5F,GAAG,CAAC,sCAAsC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACtE,GAAG,CAAC,iCAAiC,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC;QACrE,CAAC;QAGD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC9C,QAAQ,EAAE,EAAE,GAAG,kBAAkB;YACjC,SAAS,EAAE,IAAI,gBAAgB,CAAC,sBAAsB,CAAC;YACvD,eAAe,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,8CAA8C,CAAC,CAAC;YACzG,cAAc,EAAE;gBACd,IAAI,EAAE,IAAI,cAAc,CAAC;oBACvB,UAAU,EAAE,gBAAgB,CAAC,gCAAgC,CAAC,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;iBAC9H,CAAC;aACH;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE;gBAE1D,aAAa,EAAE,CAAC;gBAEhB,UAAU,EAAE,KAAK,CAAC,eAAe,IAAI,GAAG;gBACxC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACxD,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,GAAG;aACjB,CAAC,CAAC;YAEH,IAAI,KAAK,EAAE,oBAAoB,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;gBAElE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,kBAAkB,EAAE;oBACnD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;iBACjF,CAAC,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,KAAK,GAAgB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;gBACxD,QAAQ,EAAE,mBAAmB,CAAC,IAAI;gBAClC,IAAI,EAAE;oBACJ,cAAc,EAAE,CAAC,GAAG,CAAC;oBACrB,cAAc,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,CAAC;oBAC5E,cAAc,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;oBAChC,gBAAgB,EAAE,IAAI;iBACvB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC;gBACnC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;oBACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC5C,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAS,CAAC;gBACxE,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,iBAAiB,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE;gBAExE,aAAa,EAAE,CAAC;gBAEhB,UAAU,EAAE,KAAK,CAAC,sBAAsB,IAAI,IAAI;gBAChD,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,IAAI,GAAG,CAAC;gBAChE,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,GAAG;aACjB,CAAC,CAAC;YAEH,iBAAiB,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAClF,yBAAyB,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAG1F,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE;gBAC3C,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aAC7C,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/lib/deployment/cdk/epsilon-lambda-to-cloudfront-path-mapping.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+export interface EpsilonLambdaToCloudfrontPathMapping {
+    apiDomainName: string;
+    pathPattern: string;
+}

package/lib/deployment/cdk/epsilon-lambda-to-cloudfront-path-mapping.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=epsilon-lambda-to-cloudfront-path-mapping.js.map

package/lib/deployment/cdk/epsilon-lambda-to-cloudfront-path-mapping.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"epsilon-lambda-to-cloudfront-path-mapping.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-lambda-to-cloudfront-path-mapping.ts"],"names":[],"mappings":""}

package/lib/deployment/cdk/epsilon-stack-util.d.ts ADDED Viewed

@@ -0,0 +1,14 @@
+import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
+import { Topic } from 'aws-cdk-lib/aws-sns';
+import { Queue } from 'aws-cdk-lib/aws-sqs';
+import { EpsilonApiStackProps } from './epsilon-api-stack-props.js';
+export declare class EpsilonStackUtil {
+    private constructor();
+    static toEnvironmentVariables(input: Record<string, any>[]): Record<string, string>;
+    static createDefaultPolicyStatementList(props: EpsilonApiStackProps, backgroundLambdaSqs: Queue, backgroundLambdaSns: Topic, interApiSns: Topic): PolicyStatement[];
+    static readonly ALLOW_ECS: PolicyStatement;
+    static readonly ALLOW_ECR: PolicyStatement;
+    static readonly ALLOW_RESTRICTED_LOGS: PolicyStatement;
+    static readonly ALLOW_FARGATE_SECRET_READING: PolicyStatement[];
+    static readonly ECS_POLICY_STATEMENTS: PolicyStatement[];
+}

package/lib/deployment/cdk/epsilon-stack-util.js ADDED Viewed

@@ -0,0 +1,99 @@
+import { Logger } from '@bitblit/ratchet-common/logger/logger';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { Effect, PolicyStatement } from 'aws-cdk-lib/aws-iam';
+export class EpsilonStackUtil {
+    constructor() { }
+    static toEnvironmentVariables(input) {
+        const rval = {};
+        input.forEach((inval) => {
+            Object.keys(inval).forEach((k) => {
+                rval[k] = StringRatchet.safeString(inval[k]);
+            });
+        });
+        return rval;
+    }
+    static createDefaultPolicyStatementList(props, backgroundLambdaSqs, backgroundLambdaSns, interApiSns) {
+        const rval = (props.additionalPolicyStatements || []).concat([
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['logs:CreateLogGroup', 'logs:CreateLogStream', 'logs:PutLogEvents'],
+                resources: ['arn:aws:logs:*:*:*'],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['ses:SendEmail', 'ses:SendRawEmail'],
+                resources: ['arn:aws:ses:*'],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['sqs:*'],
+                resources: [backgroundLambdaSqs.queueArn],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['sns:*'],
+                resources: [backgroundLambdaSns.topicArn, interApiSns.topicArn],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['batch:*'],
+                resources: ['*'],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['ec2:DescribeSecurityGroups'],
+                resources: ['*'],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['ec2:DescribeSubnets'],
+                resources: ['*'],
+            }),
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: ['ec2:DescribeVpcs'],
+                resources: ['*'],
+            }),
+        ]);
+        Logger.info('Created policy statement list: %j', rval);
+        return rval;
+    }
+    static ALLOW_ECS = new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ['ecs:*'],
+        resources: ['*'],
+    });
+    static ALLOW_ECR = new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ['ecr:BatchCheckLayerAvailability', 'ecr:BatchGetImage', 'ecr:GetDownloadUrlForLayer', 'ecr:GetAuthorizationToken'],
+        resources: ['*'],
+    });
+    static ALLOW_RESTRICTED_LOGS = new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ['logs:CreateLogStream', 'logs:PutLogEvents', 'logs:DescribeLogStreams', 'logs:CreateLogGroup'],
+        resources: ['*'],
+    });
+    static ALLOW_FARGATE_SECRET_READING = [
+        new PolicyStatement({
+            effect: Effect.ALLOW,
+            actions: ['ssm:GetParameters'],
+            resources: ['*'],
+        }),
+        new PolicyStatement({
+            effect: Effect.ALLOW,
+            actions: ['secretsmanager:GetSecretValue'],
+            resources: ['*'],
+        }),
+        new PolicyStatement({
+            effect: Effect.ALLOW,
+            actions: ['kms:Decrypt'],
+            resources: ['*'],
+        }),
+    ];
+    static ECS_POLICY_STATEMENTS = [
+        EpsilonStackUtil.ALLOW_ECS,
+        EpsilonStackUtil.ALLOW_ECR,
+        EpsilonStackUtil.ALLOW_RESTRICTED_LOGS,
+    ].concat(EpsilonStackUtil.ALLOW_FARGATE_SECRET_READING);
+}
+//# sourceMappingURL=epsilon-stack-util.js.map

package/lib/deployment/cdk/epsilon-stack-util.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"epsilon-stack-util.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-stack-util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAK9D,MAAM,OAAO,gBAAgB;IAG3B,gBAAuB,CAAC;IAEjB,MAAM,CAAC,sBAAsB,CAAC,KAA4B;QAC/D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/B,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,gCAAgC,CAC5C,KAA2B,EAC3B,mBAA0B,EAC1B,mBAA0B,EAC1B,WAAkB;QAElB,MAAM,IAAI,GAAsB,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC9E,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,qBAAqB,EAAE,sBAAsB,EAAE,mBAAmB,CAAC;gBAC7E,SAAS,EAAE,CAAC,oBAAoB,CAAC;aAClC,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBAC9C,SAAS,EAAE,CAAC,eAAe,CAAC;aAC7B,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,OAAO,CAAC;gBAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC;aAC1C,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,OAAO,CAAC;gBAClB,SAAS,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC;aAChE,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,4BAA4B,CAAC;gBACvC,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,qBAAqB,CAAC;gBAChC,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC;YACF,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,CAAC,kBAAkB,CAAC;gBAC7B,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAU,SAAS,GAAoB,IAAI,eAAe,CAAC;QACtE,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,SAAS,EAAE,CAAC,GAAG,CAAC;KACjB,CAAC,CAAC;IAEI,MAAM,CAAU,SAAS,GAAoB,IAAI,eAAe,CAAC;QACtE,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,OAAO,EAAE,CAAC,iCAAiC,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,2BAA2B,CAAC;QAC5H,SAAS,EAAE,CAAC,GAAG,CAAC;KACjB,CAAC,CAAC;IAEI,MAAM,CAAU,qBAAqB,GAAoB,IAAI,eAAe,CAAC;QAClF,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,OAAO,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,qBAAqB,CAAC;QACxG,SAAS,EAAE,CAAC,GAAG,CAAC;KACjB,CAAC,CAAC;IAGI,MAAM,CAAU,4BAA4B,GAAsB;QACvE,IAAI,eAAe,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC;QACF,IAAI,eAAe,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC,+BAA+B,CAAC;YAC1C,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC;QACF,IAAI,eAAe,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC;KACH,CAAC;IAEK,MAAM,CAAU,qBAAqB,GAAsB;QAChE,gBAAgB,CAAC,SAAS;QAC1B,gBAAgB,CAAC,SAAS;QAC1B,gBAAgB,CAAC,qBAAqB;KACvC,CAAC,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CAAC"}

package/lib/deployment/cdk/epsilon-website-cache-behavior.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+export declare enum EpsilonWebsiteCacheBehavior {
+    Default = "Default",
+    NoCache = "NoCache",
+    Custom = "Custom"
+}

package/lib/deployment/cdk/epsilon-website-cache-behavior.js ADDED Viewed

@@ -0,0 +1,7 @@
+export var EpsilonWebsiteCacheBehavior;
+(function (EpsilonWebsiteCacheBehavior) {
+    EpsilonWebsiteCacheBehavior["Default"] = "Default";
+    EpsilonWebsiteCacheBehavior["NoCache"] = "NoCache";
+    EpsilonWebsiteCacheBehavior["Custom"] = "Custom";
+})(EpsilonWebsiteCacheBehavior || (EpsilonWebsiteCacheBehavior = {}));
+//# sourceMappingURL=epsilon-website-cache-behavior.js.map

package/lib/deployment/cdk/epsilon-website-cache-behavior.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"epsilon-website-cache-behavior.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-website-cache-behavior.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACrC,kDAAmB,CAAA;IACnB,kDAAmB,CAAA;IACnB,gDAAiB,CAAA;AACnB,CAAC,EAJW,2BAA2B,KAA3B,2BAA2B,QAItC"}

package/lib/deployment/cdk/epsilon-website-stack-props.d.ts ADDED Viewed

@@ -0,0 +1,21 @@
+import { StackProps } from 'aws-cdk-lib';
+import { SimpleAdditionalS3WebsiteMapping } from './simple-additional-s3-website-mapping.js';
+import { EpsilonLambdaToCloudfrontPathMapping } from './epsilon-lambda-to-cloudfront-path-mapping.js';
+import { Behavior } from 'aws-cdk-lib/aws-cloudfront';
+import { EpsilonWebsiteCacheBehavior } from './epsilon-website-cache-behavior.js';
+export interface EpsilonWebsiteStackProps extends StackProps {
+    targetBucketName: string;
+    cloudFrontHttpsCertificateArn: string;
+    cloudFrontDomainNames: string[];
+    apiMappings: EpsilonLambdaToCloudfrontPathMapping[];
+    pathsToAssets: string[];
+    route53Handling: EpsilonWebsiteStackPropsRoute53Handling;
+    simpleAdditionalMappings?: SimpleAdditionalS3WebsiteMapping[];
+    websiteCacheBehavior?: EpsilonWebsiteCacheBehavior;
+    websiteBehaviorOverride?: Behavior[];
+}
+export declare const EpsilonWebsiteStackPropsRoute53Handling: {
+    Update: string;
+    DoNotUpdate: string;
+};
+export type EpsilonWebsiteStackPropsRoute53Handling = (typeof EpsilonWebsiteStackPropsRoute53Handling)[keyof typeof EpsilonWebsiteStackPropsRoute53Handling];

package/lib/deployment/cdk/epsilon-website-stack-props.js ADDED Viewed

@@ -0,0 +1,5 @@
+export const EpsilonWebsiteStackPropsRoute53Handling = {
+    Update: 'Update',
+    DoNotUpdate: 'DoNotUpdate',
+};
+//# sourceMappingURL=epsilon-website-stack-props.js.map

package/lib/deployment/cdk/epsilon-website-stack-props.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"epsilon-website-stack-props.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-website-stack-props.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;CAC3B,CAAC"}

package/lib/deployment/cdk/epsilon-website-stack.d.ts ADDED Viewed

@@ -0,0 +1,7 @@
+import { Stack } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+import { EpsilonWebsiteStackProps } from './epsilon-website-stack-props.js';
+export declare class EpsilonWebsiteStack extends Stack {
+    constructor(scope: Construct, id: string, props?: EpsilonWebsiteStackProps);
+    static extractApexDomain(domainName: string): string;
+}

package/lib/deployment/cdk/epsilon-website-stack.js ADDED Viewed

@@ -0,0 +1,183 @@
+import { Bucket, BucketEncryption } from 'aws-cdk-lib/aws-s3';
+import { Duration, Stack } from 'aws-cdk-lib';
+import path from 'path';
+import { CloudFrontAllowedCachedMethods, CloudFrontAllowedMethods, CloudFrontWebDistribution, HttpVersion, OriginAccessIdentity, OriginProtocolPolicy, PriceClass, ViewerProtocolPolicy, } from 'aws-cdk-lib/aws-cloudfront';
+import { HostedZone, RecordSet, RecordType } from 'aws-cdk-lib/aws-route53';
+import { CloudFrontTarget } from 'aws-cdk-lib/aws-route53-targets';
+import { BucketDeployment, Source } from 'aws-cdk-lib/aws-s3-deployment';
+import { EpsilonWebsiteStackPropsRoute53Handling } from './epsilon-website-stack-props.js';
+import { ErrorRatchet } from '@bitblit/ratchet-common/lang/error-ratchet';
+import { StringRatchet } from '@bitblit/ratchet-common/lang/string-ratchet';
+import { EpsilonWebsiteCacheBehavior } from './epsilon-website-cache-behavior.js';
+export class EpsilonWebsiteStack extends Stack {
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        const originAccessId = new OriginAccessIdentity(this, id + 'OriginAccessId');
+        const websiteBucket = new Bucket(this, id + 'DeployBucket', {
+            bucketName: props.targetBucketName,
+            versioned: false,
+            publicReadAccess: false,
+            encryption: BucketEncryption.S3_MANAGED,
+        });
+        const extraBucketAndSource = (props.simpleAdditionalMappings || []).map((eb) => {
+            const nextBucket = Bucket.fromBucketAttributes(this, eb.bucketName + 'ImportedBucket', {
+                bucketName: eb.bucketName,
+            });
+            const nextBS = {
+                bucket: nextBucket,
+                sourceConfig: {
+                    s3OriginSource: {
+                        s3BucketSource: nextBucket,
+                        originAccessIdentity: originAccessId,
+                    },
+                    behaviors: [
+                        {
+                            pathPattern: eb.pathPattern,
+                            isDefaultBehavior: false,
+                            compress: true,
+                            defaultTtl: Duration.seconds(1),
+                            minTtl: Duration.seconds(1),
+                            maxTtl: Duration.seconds(1),
+                            forwardedValues: {
+                                queryString: false,
+                            },
+                        },
+                    ],
+                },
+            };
+            return nextBS;
+        });
+        if (props.websiteCacheBehavior === EpsilonWebsiteCacheBehavior.Custom && !props?.websiteBehaviorOverride?.length) {
+            throw ErrorRatchet.fErr('Custom cache behavior selected but no custom provided');
+        }
+        if (props.websiteCacheBehavior !== EpsilonWebsiteCacheBehavior.Custom && props?.websiteBehaviorOverride?.length) {
+            throw ErrorRatchet.fErr('Custom cache behavior not selected but custom provided');
+        }
+        let websiteBehaviors;
+        switch (props.websiteCacheBehavior) {
+            case EpsilonWebsiteCacheBehavior.NoCache:
+                websiteBehaviors = [
+                    {
+                        isDefaultBehavior: true,
+                        compress: true,
+                        defaultTtl: Duration.seconds(0),
+                        minTtl: Duration.seconds(0),
+                        maxTtl: Duration.seconds(0),
+                        forwardedValues: {
+                            queryString: false,
+                        },
+                    },
+                ];
+                break;
+            case EpsilonWebsiteCacheBehavior.Custom:
+                websiteBehaviors = props.websiteBehaviorOverride;
+                break;
+            default:
+                websiteBehaviors = [
+                    {
+                        isDefaultBehavior: true,
+                        compress: true,
+                        defaultTtl: Duration.seconds(1),
+                        minTtl: Duration.seconds(1),
+                        maxTtl: Duration.seconds(1),
+                        forwardedValues: {
+                            queryString: false,
+                        },
+                    },
+                ];
+                break;
+        }
+        const assetSource = {
+            s3OriginSource: {
+                s3BucketSource: websiteBucket,
+                originAccessIdentity: originAccessId,
+            },
+            behaviors: websiteBehaviors,
+        };
+        const apiSources = (props.apiMappings || []).map((s) => {
+            const next = {
+                customOriginSource: {
+                    domainName: s.apiDomainName,
+                    originProtocolPolicy: OriginProtocolPolicy.HTTPS_ONLY,
+                },
+                behaviors: [
+                    {
+                        compress: true,
+                        forwardedValues: {
+                            queryString: true,
+                            cookies: {
+                                forward: 'whitelist',
+                                whitelistedNames: ['idToken'],
+                            },
+                            headers: ['Accept', 'Referer', 'Authorization', 'Content-Type'],
+                        },
+                        pathPattern: s.pathPattern,
+                        defaultTtl: Duration.seconds(0),
+                        maxTtl: Duration.seconds(0),
+                        minTtl: Duration.seconds(0),
+                        allowedMethods: CloudFrontAllowedMethods.ALL,
+                        cachedMethods: CloudFrontAllowedCachedMethods.GET_HEAD,
+                    },
+                ],
+            };
+            return next;
+        });
+        const distributionProps = {
+            httpVersion: HttpVersion.HTTP2,
+            defaultRootObject: 'index.html',
+            originConfigs: [assetSource, ...apiSources, ...extraBucketAndSource.map((s) => s.sourceConfig)],
+            errorConfigurations: [
+                {
+                    errorCode: 404,
+                    errorCachingMinTtl: 300,
+                    responseCode: 200,
+                    responsePagePath: '/index.html',
+                },
+                {
+                    errorCode: 403,
+                    errorCachingMinTtl: 300,
+                    responseCode: 200,
+                    responsePagePath: '/index.html',
+                },
+            ],
+            priceClass: PriceClass.PRICE_CLASS_ALL,
+            viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+            viewerCertificate: {
+                aliases: props.cloudFrontDomainNames,
+                props: {
+                    acmCertificateArn: props.cloudFrontHttpsCertificateArn,
+                    sslSupportMethod: 'sni-only',
+                },
+            },
+        };
+        const cloudfrontDistro = new CloudFrontWebDistribution(this, id + 'CloudfrontDistro', distributionProps);
+        if (props?.route53Handling === EpsilonWebsiteStackPropsRoute53Handling.Update) {
+            if (props?.cloudFrontDomainNames?.length) {
+                for (let i = 0; i < props.cloudFrontDomainNames.length; i++) {
+                    const domain = new RecordSet(this, id + 'DomainName-' + props.cloudFrontDomainNames[i], {
+                        recordType: RecordType.A,
+                        recordName: props.cloudFrontDomainNames[i],
+                        target: {
+                            aliasTarget: new CloudFrontTarget(cloudfrontDistro),
+                        },
+                        zone: HostedZone.fromLookup(this, id, { domainName: EpsilonWebsiteStack.extractApexDomain(props.cloudFrontDomainNames[i]) }),
+                    });
+                }
+            }
+        }
+        new BucketDeployment(this, id + 'SiteDeploy', {
+            sources: props.pathsToAssets.map((inPath) => Source.asset(path.resolve(inPath))),
+            destinationBucket: websiteBucket,
+            distribution: cloudfrontDistro,
+            distributionPaths: ['/*'],
+        });
+    }
+    static extractApexDomain(domainName) {
+        const pieces = StringRatchet.trimToEmpty(domainName).split('.');
+        if (pieces.length < 2) {
+            ErrorRatchet.throwFormattedErr('Not a valid domain name : %s', domainName);
+        }
+        return pieces[pieces.length - 2] + '.' + pieces[pieces.length - 1];
+    }
+}
+//# sourceMappingURL=epsilon-website-stack.js.map

package/lib/deployment/cdk/epsilon-website-stack.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"epsilon-website-stack.js","sourceRoot":"","sources":["../../../src/deployment/cdk/epsilon-website-stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAEL,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EAEzB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,UAAU,EAEV,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAA4B,uCAAuC,EAAE,MAAM,kCAAkC,CAAC;AACrH,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,KAAgB,EAAE,EAAU,EAAE,KAAgC;QACxE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,MAAM,cAAc,GAAyB,IAAI,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAEnG,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,cAAc,EAAE;YAC1D,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAGlC,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,KAAK;YACvB,UAAU,EAAE,gBAAgB,CAAC,UAAU;SA2BxC,CAAC,CAAC;QAGH,MAAM,oBAAoB,GAAmC,CAAC,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7G,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,GAAG,gBAAgB,EAAE;gBACrF,UAAU,EAAE,EAAE,CAAC,UAAU;aAC1B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAiC;gBAC3C,MAAM,EAAE,UAAU;gBAClB,YAAY,EAAE;oBACZ,cAAc,EAAE;wBACd,cAAc,EAAE,UAAU;wBAC1B,oBAAoB,EAAE,cAAc;qBACrC;oBACD,SAAS,EAAE;wBACT;4BACE,WAAW,EAAE,EAAE,CAAC,WAAW;4BAC3B,iBAAiB,EAAE,KAAK;4BACxB,QAAQ,EAAE,IAAI;4BAEd,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;4BAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;4BAC3B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;4BAC3B,eAAe,EAAE;gCACf,WAAW,EAAE,KAAK;6BACnB;yBACF;qBACF;iBACF;aACF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAKH,IAAI,KAAK,CAAC,oBAAoB,KAAK,2BAA2B,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;YACjH,MAAM,YAAY,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,2BAA2B,CAAC,MAAM,IAAI,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;YAChH,MAAM,YAAY,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,gBAA4B,CAAC;QACjC,QAAQ,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAEnC,KAAK,2BAA2B,CAAC,OAAO;gBACtC,gBAAgB,GAAG;oBACjB;wBACE,iBAAiB,EAAE,IAAI;wBACvB,QAAQ,EAAE,IAAI;wBACd,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,eAAe,EAAE;4BACf,WAAW,EAAE,KAAK;yBACnB;qBACF;iBACF,CAAC;gBACF,MAAM;YACR,KAAK,2BAA2B,CAAC,MAAM;gBACrC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;gBACjD,MAAM;YACR;gBACE,gBAAgB,GAAG;oBACjB;wBACE,iBAAiB,EAAE,IAAI;wBACvB,QAAQ,EAAE,IAAI;wBACd,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,eAAe,EAAE;4BACf,WAAW,EAAE,KAAK;yBACnB;qBACF;iBACF,CAAC;gBACF,MAAM;QACV,CAAC;QAED,MAAM,WAAW,GAAwB;YACvC,cAAc,EAAE;gBACd,cAAc,EAAE,aAAa;gBAC7B,oBAAoB,EAAE,cAAc;aACrC;YACD,SAAS,EAAE,gBAAgB;SAC5B,CAAC;QAGF,MAAM,UAAU,GAA0B,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5E,MAAM,IAAI,GAAwB;gBAChC,kBAAkB,EAAE;oBAClB,UAAU,EAAE,CAAC,CAAC,aAAa;oBAC3B,oBAAoB,EAAE,oBAAoB,CAAC,UAAU;iBACtD;gBAED,SAAS,EAAE;oBACT;wBACE,QAAQ,EAAE,IAAI;wBACd,eAAe,EAAE;4BACf,WAAW,EAAE,IAAI;4BACjB,OAAO,EAAE;gCACP,OAAO,EAAE,WAAW;gCACpB,gBAAgB,EAAE,CAAC,SAAS,CAAC;6BAC9B;4BACD,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,CAAC;yBAChE;wBACD,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC3B,cAAc,EAAE,wBAAwB,CAAC,GAAG;wBAC5C,aAAa,EAAE,8BAA8B,CAAC,QAAQ;qBACvD;iBACF;aACF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAmC;YACxD,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,iBAAiB,EAAE,YAAY;YAC/B,aAAa,EAAE,CAAC,WAAW,EAAE,GAAG,UAAU,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC/F,mBAAmB,EAAE;gBACnB;oBACE,SAAS,EAAE,GAAG;oBACd,kBAAkB,EAAE,GAAG;oBACvB,YAAY,EAAE,GAAG;oBACjB,gBAAgB,EAAE,aAAa;iBAChC;gBACD;oBACE,SAAS,EAAE,GAAG;oBACd,kBAAkB,EAAE,GAAG;oBACvB,YAAY,EAAE,GAAG;oBACjB,gBAAgB,EAAE,aAAa;iBAChC;aACF;YACD,UAAU,EAAE,UAAU,CAAC,eAAe;YACtC,oBAAoB,EAAE,oBAAoB,CAAC,iBAAiB;YAC5D,iBAAiB,EAAE;gBACjB,OAAO,EAAE,KAAK,CAAC,qBAAqB;gBACpC,KAAK,EAAE;oBACL,iBAAiB,EAAE,KAAK,CAAC,6BAA6B;oBACtD,gBAAgB,EAAE,UAAU;iBAC7B;aACF;SACF,CAAC;QAEF,MAAM,gBAAgB,GAA8B,IAAI,yBAAyB,CAAC,IAAI,EAAE,EAAE,GAAG,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;QAGpI,IAAI,KAAK,EAAE,eAAe,KAAK,uCAAuC,CAAC,MAAM,EAAE,CAAC;YAC9E,IAAI,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;gBACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,aAAa,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;wBACtF,UAAU,EAAE,UAAU,CAAC,CAAC;wBACxB,UAAU,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;wBAC1C,MAAM,EAAE;4BACN,WAAW,EAAE,IAAI,gBAAgB,CAAC,gBAAgB,CAAC;yBACpD;wBACD,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7H,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAGD,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,iBAAiB,EAAE,aAAa;YAChC,YAAY,EAAE,gBAAgB;YAC9B,iBAAiB,EAAE,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAAC,UAAkB;QAChD,MAAM,MAAM,GAAa,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,YAAY,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;CACF"}

package/lib/deployment/cdk/simple-additional-s3-website-mapping.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+export interface SimpleAdditionalS3WebsiteMapping {
+    bucketName: string;
+    pathPattern: string;
+}

package/lib/deployment/cdk/simple-additional-s3-website-mapping.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=simple-additional-s3-website-mapping.js.map

package/lib/deployment/cdk/simple-additional-s3-website-mapping.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"simple-additional-s3-website-mapping.js","sourceRoot":"","sources":["../../../src/deployment/cdk/simple-additional-s3-website-mapping.ts"],"names":[],"mappings":""}

package/lib/deployment/index.d.ts ADDED Viewed

@@ -0,0 +1,10 @@
+export * from './cdk/bucket-and-source-configuration.js';
+export * from './cdk/epsilon-api-stack-feature.js';
+export * from './cdk/epsilon-api-stack-props.js';
+export * from './cdk/epsilon-api-stack.js';
+export * from './cdk/epsilon-lambda-to-cloudfront-path-mapping.js';
+export * from './cdk/epsilon-stack-util.js';
+export * from './cdk/epsilon-website-cache-behavior.js';
+export * from './cdk/epsilon-website-stack-props.js';
+export * from './cdk/epsilon-website-stack.js';
+export * from './cdk/simple-additional-s3-website-mapping.js';

package/lib/deployment/index.js ADDED Viewed

@@ -0,0 +1,11 @@
+export * from './cdk/bucket-and-source-configuration.js';
+export * from './cdk/epsilon-api-stack-feature.js';
+export * from './cdk/epsilon-api-stack-props.js';
+export * from './cdk/epsilon-api-stack.js';
+export * from './cdk/epsilon-lambda-to-cloudfront-path-mapping.js';
+export * from './cdk/epsilon-stack-util.js';
+export * from './cdk/epsilon-website-cache-behavior.js';
+export * from './cdk/epsilon-website-stack-props.js';
+export * from './cdk/epsilon-website-stack.js';
+export * from './cdk/simple-additional-s3-website-mapping.js';
+//# sourceMappingURL=index.js.map

package/lib/deployment/index.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":"AAIA,cAAc,0CAA0C,CAAC;AACzD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oDAAoD,CAAC;AACnE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+CAA+C,CAAC"}

package/package.json CHANGED Viewed

@@ -1,19 +1,18 @@
 {
   "name": "@bitblit/ratchet-epsilon-deployment",
-  "version": "4.0.420-alpha",
+  "version": "4.0.421-alpha",
   "description": "Epsilon CDK extensions to simplify deployment",
   "sideEffects": false,
   "type": "module",
-  "module": "./lib/index.mjs",
-  "types": "./lib/types.d.ts",
   "files": [
     "lib/**",
     "bin/**"
   ],
   "exports": {
-    ".": {
-      "types": "./lib/types.d.ts",
-      "import": "./lib/index.mjs"
+    "./package.json": "./package.json",
+    "./*": {
+      "import": "./lib/*.js",
+      "types": "./lib/*.d.ts"
     }
   },
   "contributors": [
@@ -51,15 +50,15 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@bitblit/ratchet-aws": "4.0.420-alpha",
-    "@bitblit/ratchet-common": "4.0.420-alpha",
-    "@bitblit/ratchet-epsilon-common": "4.0.420-alpha",
-    "aws-cdk-lib": "2.146.0",
+    "@bitblit/ratchet-aws": "4.0.421-alpha",
+    "@bitblit/ratchet-common": "4.0.421-alpha",
+    "@bitblit/ratchet-epsilon-common": "4.0.421-alpha",
+    "aws-cdk-lib": "2.151.0",
     "constructs": "10.3.0"
   },
   "peerDependencies": {
-    "@bitblit/ratchet-common": "4.0.420-alpha",
-    "aws-cdk-lib": "^2.146.0",
+    "@bitblit/ratchet-common": "4.0.421-alpha",
+    "aws-cdk-lib": "^2.151.0",
     "constructs": "^10.3.0"
   }
 }

package/lib/index.mjs DELETED Viewed

	@@ -1,2 +0,0 @@
1	- import{Stack as e,Duration as t,Size as o,Lazy as s}from"aws-cdk-lib";import{DockerImageCode as a,DockerImageFunction as i,FunctionUrlAuthType as r,HttpMethod as n}from"aws-cdk-lib/aws-lambda";import{PolicyStatement as c,Effect as m,Role as l,ServicePrincipal as d,ManagedPolicy as u,PolicyDocument as f}from"aws-cdk-lib/aws-iam";import{Topic as p}from"aws-cdk-lib/aws-sns";import{Queue as b}from"aws-cdk-lib/aws-sqs";import{LambdaSubscription as h}from"aws-cdk-lib/aws-sns-subscriptions";import{Rule as w,Schedule as L}from"aws-cdk-lib/aws-events";import{LambdaFunction as A}from"aws-cdk-lib/aws-events-targets";import{DockerImageAsset as S}from"aws-cdk-lib/aws-ecr-assets";import{StringRatchet as g,Logger as E,ErrorRatchet as C}from"@bitblit/ratchet-common";import{FargateComputeEnvironment as N,JobQueue as O,EcsFargateContainerDefinition as _,EcsJobDefinition as T}from"aws-cdk-lib/aws-batch";import{Vpc as I,SecurityGroup as v}from"aws-cdk-lib/aws-ec2";import{ContainerImage as k}from"aws-cdk-lib/aws-ecs";import{Bucket as y,BucketEncryption as P}from"aws-cdk-lib/aws-s3";import B from"path";import{OriginAccessIdentity as D,OriginProtocolPolicy as R,CloudFrontAllowedMethods as W,CloudFrontAllowedCachedMethods as H,HttpVersion as G,PriceClass as M,ViewerProtocolPolicy as F,CloudFrontWebDistribution as x}from"aws-cdk-lib/aws-cloudfront";import{RecordSet as U,RecordType as V,HostedZone as z}from"aws-cdk-lib/aws-route53";import{CloudFrontTarget as j}from"aws-cdk-lib/aws-route53-targets";import{BucketDeployment as q,Source as J}from"aws-cdk-lib/aws-s3-deployment";class Q{constructor(){}static buildInformation(){return{version:"420",hash:"4470745cd9544530657f21b58e096ebea701451a",branch:"alpha-2024-07-30-6",tag:"alpha-2024-07-30-6",timeBuiltISO:"2024-07-30T23:41:38-0700",notes:"No notes"}}}var K,Y;!function(e){e.WebLambda="WebLambda",e.BackgroundLambda="BackgroundLambda",e.AwsBatchHandler="AwsBatchHandler"}(K\|\|(K={}));class ${constructor(){}static toEnvironmentVariables(e){const t={};return e.forEach((e=>{Object.keys(e).forEach((o=>{t[o]=g.safeString(e[o])}))})),t}static createDefaultPolicyStatementList(e,t,o,s){const a=(e.additionalPolicyStatements\|\|[]).concat([new c({effect:m.ALLOW,actions:["logs:CreateLogGroup","logs:CreateLogStream","logs:PutLogEvents"],resources:["arn:aws:logs:::"]}),new c({effect:m.ALLOW,actions:["ses:SendEmail","ses:SendRawEmail"],resources:["arn:aws:ses:"]}),new c({effect:m.ALLOW,actions:["sqs:"],resources:[t.queueArn]}),new c({effect:m.ALLOW,actions:["sns:"],resources:[o.topicArn,s.topicArn]}),new c({effect:m.ALLOW,actions:["batch:"],resources:[""]}),new c({effect:m.ALLOW,actions:["ec2:DescribeSecurityGroups"],resources:[""]}),new c({effect:m.ALLOW,actions:["ec2:DescribeSubnets"],resources:[""]}),new c({effect:m.ALLOW,actions:["ec2:DescribeVpcs"],resources:[""]})]);return E.info("Created policy statement list: %j",a),a}static ALLOW_ECS=new c({effect:m.ALLOW,actions:["ecs:"],resources:[""]});static ALLOW_ECR=new c({effect:m.ALLOW,actions:["ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:GetAuthorizationToken"],resources:[""]});static ALLOW_RESTRICTED_LOGS=new c({effect:m.ALLOW,actions:["logs:CreateLogStream","logs:PutLogEvents","logs:DescribeLogStreams","logs:CreateLogGroup"],resources:[""]});static ALLOW_FARGATE_SECRET_READING=[new c({effect:m.ALLOW,actions:["ssm:GetParameters"],resources:[""]}),new c({effect:m.ALLOW,actions:["secretsmanager:GetSecretValue"],resources:[""]}),new c({effect:m.ALLOW,actions:["kms:Decrypt"],resources:[""]})];static ECS_POLICY_STATEMENTS=[$.ALLOW_ECS,$.ALLOW_ECR,$.ALLOW_RESTRICTED_LOGS].concat($.ALLOW_FARGATE_SECRET_READING)}class X extends e{webHandler;backgroundHandler;apiDomain;constructor(c,m,E){super(c,m,E);const C=E?.disabledFeatures\|\|[],y=new S(this,m+"DockerImage",{directory:E.dockerFileFolder,file:E.dockerFileName}),P=a.fromImageAsset(E.dockerFileFolder,{file:E.dockerFileName}),B=new p(this,m+"WorkNotificationTopic"),D=new b(this,m+"WorkQueue",{fifo:!0,retentionPeriod:t.hours(8),visibilityTimeout:t.minutes(5),contentBasedDeduplication:!0,...E}),R=new p(this,m+"InterApiTopic"),W={EPSILON_AWS_REGION:g.safeString(e.of(this).region),EPSILON_AWS_AVAILABILITY_ZONES:g.safeString(JSON.stringify(e.of(this).availabilityZones)),EPSILON_BACKGROUND_SQS_QUEUE_URL:g.safeString(D.queueUrl),EPSILON_BACKGROUND_SNS_TOPIC_ARN:g.safeString(B.topicArn),EPSILON_INTER_API_EVENT_TOPIC_ARN:g.safeString(R.topicArn),EPSILON_LIB_BUILD_HASH:g.safeString(Q.buildInformation().hash),EPSILON_LIB_BUILD_TIME:g.safeString(Q.buildInformation().timeBuiltISO),EPSILON_LIB_BUILD_BRANCH_OR_TAG:g.safeString(Q.buildInformation().branch\|\|Q.buildInformation().tag),EPSILON_LIB_BUILD_VERSION:g.safeString(Q.buildInformation().version)},H=Object.assign({},E.extraEnvironmentalVars\|\|{},W);if(!C.includes(K.AwsBatchHandler)){const e=new l(this,m+"BatchExecutionRole",{assumedBy:new d("ecs-tasks.amazonaws.com"),managedPolicies:[u.fromAwsManagedPolicyName("service-role/AWSLambdaVPCAccessExecutionRole")],inlinePolicies:{root:new f({statements:$.ECS_POLICY_STATEMENTS})}}),s=new l(this,m+"BatchJobRole",{assumedBy:new d("ecs-tasks.amazonaws.com"),managedPolicies:[u.fromAwsManagedPolicyName("service-role/AWSLambdaVPCAccessExecutionRole")],inlinePolicies:{root:new f({statements:$.createDefaultPolicyStatementList(E,D,B,R)})}}),a={vpc:I.fromLookup(this,"Vpc",{vpcId:E.vpcId}),computeEnvironmentName:m+"ComputeEnv",enabled:!0,maxvCpus:16,replaceComputeEnvironment:!1,securityGroups:E.lambdaSecurityGroupIds.map(((e,t)=>v.fromSecurityGroupId(this,`SecurityGroup${t}`,`sg-${e}`))),serviceRole:l.fromRoleArn(this,`${m}ServiceRole`,"arn:aws:iam::"+E.env.account+":role/AWSBatchServiceRole"),spot:!1,terminateOnUpdate:!1,updateTimeout:t.hours(4),updateToLatestImageVersion:!0},i=new N(this,m+"ComputeEnv",a),r=new O(this,m+"BatchJobQueue",{computeEnvironments:[{order:1,computeEnvironment:i}],enabled:!0,jobQueueName:m+"BatchJobQueue",priority:10,schedulingPolicy:void 0}),n=$.toEnvironmentVariables([H,E.extraEnvironmentalVars\|\|{},{EPSILON_RUNNING_IN_AWS_BATCH:!0}]),c={cpu:4,image:k.fromRegistry(y.imageUri),memory:o.mebibytes(8192),assignPublicIp:!0,command:["Ref::taskName","Ref::taskDataBase64","Ref::traceId","Ref::traceDepth","Ref::taskMetaDataBase64"],environment:n,executionRole:e,jobRole:s,readonlyRootFilesystem:!1,volumes:[]},p=new _(this,`${m}FargateContainerDefinition`,c),b=new T(this,m+"JobDefinition",{jobDefinitionName:m+"JobDefinition",retryAttempts:3,retryStrategies:void 0,schedulingPriority:void 0,timeout:void 0,container:p});H.EPSILON_AWS_BATCH_JOB_DEFINITION_ARN=b.jobDefinitionArn,H.EPSILON_AWS_BATCH_JOB_QUEUE_ARN=r.jobQueueArn}const G=new l(this,"customRole",{roleName:m+"LambdaCustomRole",assumedBy:new d("lambda.amazonaws.com"),managedPolicies:[u.fromAwsManagedPolicyName("service-role/AWSLambdaVPCAccessExecutionRole")],inlinePolicies:{root:new f({statements:$.createDefaultPolicyStatementList(E,D,B,R)})}});if(!C.includes(K.WebLambda)){if(this.webHandler=new i(this,m+"Web",{retryAttempts:2,memorySize:E.webMemorySizeMb\|\|128,ephemeralStorageSize:o.mebibytes(512),timeout:t.seconds(E.webTimeoutSeconds\|\|20),code:P,role:G,environment:H}),E?.webLambdaPingMinutes&&E.webLambdaPingMinutes>0){new w(this,m+"WebKeepaliveRule",{schedule:L.rate(t.minutes(Math.ceil(E.webLambdaPingMinutes)))}).addTarget(new A(this.webHandler))}const e=this.webHandler.addFunctionUrl({authType:r.NONE,cors:{allowedOrigins:[""],allowedHeaders:["Content-Type","X-Amz-Date","Authorization","X-Api-Key"],allowedMethods:[n.ALL],allowCredentials:!0}});this.apiDomain=s.uncachedString({produce:t=>({"Fn::Select":[2,{"Fn::Split":["/",t.resolve(e.url)]}]})})}if(!C.includes(K.BackgroundLambda)){this.backgroundHandler=new i(this,m+"Background",{retryAttempts:2,memorySize:E.backgroundMemorySizeMb\|\|3e3,ephemeralStorageSize:o.mebibytes(512),timeout:t.seconds(E.backgroundTimeoutSeconds\|\|900),code:P,role:G,environment:H}),B.addSubscription(new h(this.backgroundHandler)),R.addSubscription(new h(this.backgroundHandler));new w(this,m+"CronRule",{schedule:L.rate(t.minutes(1))}).addTarget(new A(this.backgroundHandler))}}}!function(e){e.Default="Default",e.NoCache="NoCache",e.Custom="Custom"}(Y\|\|(Y={}));const Z={Update:"Update",DoNotUpdate:"DoNotUpdate"};class ee extends e{constructor(e,o,s){super(e,o,s);const a=new D(this,o+"OriginAccessId"),i=new y(this,o+"DeployBucket",{bucketName:s.targetBucketName,versioned:!1,publicReadAccess:!1,encryption:P.S3_MANAGED}),r=(s.simpleAdditionalMappings\|\|[]).map((e=>{const o=y.fromBucketAttributes(this,e.bucketName+"ImportedBucket",{bucketName:e.bucketName});return{bucket:o,sourceConfig:{s3OriginSource:{s3BucketSource:o,originAccessIdentity:a},behaviors:[{pathPattern:e.pathPattern,isDefaultBehavior:!1,compress:!0,defaultTtl:t.seconds(1),minTtl:t.seconds(1),maxTtl:t.seconds(1),forwardedValues:{queryString:!1}}]}}}));if(s.websiteCacheBehavior===Y.Custom&&!s?.websiteBehaviorOverride?.length)throw C.fErr("Custom cache behavior selected but no custom provided");if(s.websiteCacheBehavior!==Y.Custom&&s?.websiteBehaviorOverride?.length)throw C.fErr("Custom cache behavior not selected but custom provided");let n;switch(s.websiteCacheBehavior){case Y.NoCache:n=[{isDefaultBehavior:!0,compress:!0,defaultTtl:t.seconds(0),minTtl:t.seconds(0),maxTtl:t.seconds(0),forwardedValues:{queryString:!1}}];break;case Y.Custom:n=s.websiteBehaviorOverride;break;default:n=[{isDefaultBehavior:!0,compress:!0,defaultTtl:t.seconds(1),minTtl:t.seconds(1),maxTtl:t.seconds(1),forwardedValues:{queryString:!1}}]}const c={s3OriginSource:{s3BucketSource:i,originAccessIdentity:a},behaviors:n},m=(s.apiMappings\|\|[]).map((e=>({customOriginSource:{domainName:e.apiDomainName,originProtocolPolicy:R.HTTPS_ONLY},behaviors:[{compress:!0,forwardedValues:{queryString:!0,cookies:{forward:"whitelist",whitelistedNames:["idToken"]},headers:["Accept","Referer","Authorization","Content-Type"]},pathPattern:e.pathPattern,defaultTtl:t.seconds(0),maxTtl:t.seconds(0),minTtl:t.seconds(0),allowedMethods:W.ALL,cachedMethods:H.GET_HEAD}]}))),l={httpVersion:G.HTTP2,defaultRootObject:"index.html",originConfigs:[c,...m,...r.map((e=>e.sourceConfig))],errorConfigurations:[{errorCode:404,errorCachingMinTtl:300,responseCode:200,responsePagePath:"/index.html"},{errorCode:403,errorCachingMinTtl:300,responseCode:200,responsePagePath:"/index.html"}],priceClass:M.PRICE_CLASS_ALL,viewerProtocolPolicy:F.REDIRECT_TO_HTTPS,viewerCertificate:{aliases:s.cloudFrontDomainNames,props:{acmCertificateArn:s.cloudFrontHttpsCertificateArn,sslSupportMethod:"sni-only"}}},d=new x(this,o+"CloudfrontDistro",l);if(s?.route53Handling===Z.Update&&s?.cloudFrontDomainNames?.length)for(let e=0;e<s.cloudFrontDomainNames.length;e++)new U(this,o+"DomainName-"+s.cloudFrontDomainNames[e],{recordType:V.A,recordName:s.cloudFrontDomainNames[e],target:{aliasTarget:new j(d)},zone:z.fromLookup(this,o,{domainName:ee.extractApexDomain(s.cloudFrontDomainNames[e])})});new q(this,o+"SiteDeploy",{sources:s.pathsToAssets.map((e=>J.asset(B.resolve(e)))),destinationBucket:i,distribution:d,distributionPaths:["/"]})}static extractApexDomain(e){const t=g.trimToEmpty(e).split(".");return t.length<2&&C.throwFormattedErr("Not a valid domain name : %s",e),t[t.length-2]+"."+t[t.length-1]}}export{X as EpsilonApiStack,K as EpsilonApiStackFeature,$ as EpsilonStackUtil,Y as EpsilonWebsiteCacheBehavior,ee as EpsilonWebsiteStack,Z as EpsilonWebsiteStackPropsRoute53Handling,Q as RatchetEpsilonDeploymentInfo};
2	- //# sourceMappingURL=index.mjs.map

package/lib/types.d.ts DELETED Viewed

@@ -1,101 +0,0 @@
-import { BuildInformation } from '@bitblit/ratchet-common';
-import { IBucket } from 'aws-cdk-lib/aws-s3';
-import { SourceConfiguration, Behavior } from 'aws-cdk-lib/aws-cloudfront';
-import { StackProps, Stack } from 'aws-cdk-lib';
-import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
-import { Construct } from 'constructs';
-import { Topic } from 'aws-cdk-lib/aws-sns';
-import { Queue } from 'aws-cdk-lib/aws-sqs';
-declare class RatchetEpsilonDeploymentInfo {
-    private constructor();
-    static buildInformation(): BuildInformation;
-}
-interface BucketAndSourceConfiguration {
-    bucket: IBucket;
-    sourceConfig: SourceConfiguration;
-}
-declare enum EpsilonApiStackFeature {
-    WebLambda = "WebLambda",
-    BackgroundLambda = "BackgroundLambda",
-    AwsBatchHandler = "AwsBatchHandler"
-}
-interface EpsilonApiStackProps extends StackProps {
-    batchInstancesEc2KeyPairName?: string;
-    additionalPolicyStatements: PolicyStatement[];
-    disabledFeatures?: EpsilonApiStackFeature[];
-    dockerFileFolder: string;
-    dockerFileName: string;
-    lambdaSecurityGroupIds: string[];
-    vpcSubnetIds: string[];
-    vpcId: string;
-    extraEnvironmentalVars?: Record<string, string>;
-    webLambdaPingMinutes?: number;
-    webMemorySizeMb?: number;
-    backgroundMemorySizeMb?: number;
-    webTimeoutSeconds?: number;
-    backgroundTimeoutSeconds?: number;
-}
-declare class EpsilonApiStack extends Stack {
-    private webHandler;
-    private backgroundHandler;
-    apiDomain: string;
-    constructor(scope: Construct, id: string, props?: EpsilonApiStackProps);
-}
-interface EpsilonLambdaToCloudfrontPathMapping {
-    apiDomainName: string;
-    pathPattern: string;
-}
-declare class EpsilonStackUtil {
-    private constructor();
-    static toEnvironmentVariables(input: Record<string, any>[]): {
-        [key: string]: string;
-    };
-    static createDefaultPolicyStatementList(props: EpsilonApiStackProps, backgroundLambdaSqs: Queue, backgroundLambdaSns: Topic, interApiSns: Topic): PolicyStatement[];
-    static readonly ALLOW_ECS: PolicyStatement;
-    static readonly ALLOW_ECR: PolicyStatement;
-    static readonly ALLOW_RESTRICTED_LOGS: PolicyStatement;
-    static readonly ALLOW_FARGATE_SECRET_READING: PolicyStatement[];
-    static readonly ECS_POLICY_STATEMENTS: PolicyStatement[];
-}
-declare enum EpsilonWebsiteCacheBehavior {
-    Default = "Default",
-    NoCache = "NoCache",
-    Custom = "Custom"
-}
-interface SimpleAdditionalS3WebsiteMapping {
-    bucketName: string;
-    pathPattern: string;
-}
-interface EpsilonWebsiteStackProps extends StackProps {
-    targetBucketName: string;
-    cloudFrontHttpsCertificateArn: string;
-    cloudFrontDomainNames: string[];
-    apiMappings: EpsilonLambdaToCloudfrontPathMapping[];
-    pathsToAssets: string[];
-    route53Handling: EpsilonWebsiteStackPropsRoute53Handling;
-    simpleAdditionalMappings?: SimpleAdditionalS3WebsiteMapping[];
-    websiteCacheBehavior?: EpsilonWebsiteCacheBehavior;
-    websiteBehaviorOverride?: Behavior[];
-}
-declare const EpsilonWebsiteStackPropsRoute53Handling: {
-    Update: string;
-    DoNotUpdate: string;
-};
-type EpsilonWebsiteStackPropsRoute53Handling = (typeof EpsilonWebsiteStackPropsRoute53Handling)[keyof typeof EpsilonWebsiteStackPropsRoute53Handling];
-declare class EpsilonWebsiteStack extends Stack {
-    constructor(scope: Construct, id: string, props?: EpsilonWebsiteStackProps);
-    static extractApexDomain(domainName: string): string;
-}
-export { type BucketAndSourceConfiguration, EpsilonApiStack, EpsilonApiStackFeature, type EpsilonApiStackProps, type EpsilonLambdaToCloudfrontPathMapping, EpsilonStackUtil, EpsilonWebsiteCacheBehavior, EpsilonWebsiteStack, type EpsilonWebsiteStackProps, EpsilonWebsiteStackPropsRoute53Handling, RatchetEpsilonDeploymentInfo, type SimpleAdditionalS3WebsiteMapping };