@btc-embedded/cdk-extensions 0.20.7 → 0.20.9

package/lib/constructs/api-keys/ApiKeyPreTokenHandler.js

@@ -0,0 +1,65 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyPreTokenHandler = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const custom_resources_1 = require("aws-cdk-lib/custom-resources");
+const constructs_1 = require("constructs");
+const pre_token_function_1 = require("./lambdas/pre-token-function");
+/**
+ * Component that provides pre-token lambda that enhances the Cognito access token.
+ */
+class ApiKeyPreTokenHandler extends constructs_1.Construct {
+    /**
+     * Create a new instance of the component.
+     * @param scope The scope to be used.
+     * @param id The ID used for the component instance.
+     * @param props The {@link ApiKeyPreTokenHandlerProps} required for creating the instance.
+     */
+    constructor(scope, id, props) {
+        super(scope, id);
+        const table = props.apiKeys.apiKeyTable;
+        const attributes = {
+            attributes: props.apiKeys.attributes,
+        };
+        const preTokenGenerationTrigger = new pre_token_function_1.PreTokenFunction(this, "PreTokenFunction", {
+            timeout: aws_cdk_lib_1.Duration.seconds(30),
+        });
+        preTokenGenerationTrigger.addEnvironment("DYNAMODB_TABLE_NAME", table.tableName);
+        preTokenGenerationTrigger.addEnvironment("ATTRIBUTES", JSON.stringify(attributes));
+        // Grant the Lambda function permission to be invoked by Cognito
+        preTokenGenerationTrigger.addPermission("CognitoInvokePermission", {
+            principal: new aws_iam_1.ServicePrincipal("cognito-idp.amazonaws.com"),
+            sourceArn: props.userPool.userPoolArn,
+        });
+        table.grantReadData(preTokenGenerationTrigger);
+        new custom_resources_1.AwsCustomResource(this, "UpdateUserPool", {
+            resourceType: "Custom::UpdateUserPool",
+            onCreate: {
+                region: aws_cdk_lib_1.Stack.of(scope).region,
+                service: "CognitoIdentityServiceProvider",
+                action: "updateUserPool",
+                parameters: {
+                    UserPoolId: props.userPool.userPoolId,
+                    LambdaConfig: {
+                        PreTokenGeneration: preTokenGenerationTrigger.functionArn,
+                        PreTokenGenerationConfig: {
+                            LambdaArn: preTokenGenerationTrigger.functionArn,
+                            LambdaVersion: "V3_0",
+                        },
+                    },
+                },
+                physicalResourceId: custom_resources_1.PhysicalResourceId.of(props.userPool.userPoolId),
+            },
+            policy: custom_resources_1.AwsCustomResourcePolicy.fromSdkCalls({
+                resources: custom_resources_1.AwsCustomResourcePolicy.ANY_RESOURCE,
+            }),
+        });
+    }
+}
+exports.ApiKeyPreTokenHandler = ApiKeyPreTokenHandler;
+_a = JSII_RTTI_SYMBOL_1;
+ApiKeyPreTokenHandler[_a] = { fqn: "@btc-embedded/cdk-extensions.ApiKeyPreTokenHandler", version: "0.20.9" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/ApiKeyStore.d.ts

@@ -0,0 +1,61 @@
+import { ITable, TableOptions } from "aws-cdk-lib/aws-dynamodb";
+import { Construct } from "constructs";
+/**
+ * Properties to instantiate the {@link ApiKeyStore} component.
+ */
+export interface ApiKeyStoreProps {
+    /**
+     * The attributes that are managed by the component.
+     */
+    readonly attributes: ApiKeyAttribute[];
+    /**
+     * Additional table options to overwrite the defaults for the created table.
+     */
+    readonly tableOptions?: TableOptions;
+}
+/**
+ * Representation of an attribute of an API key.
+ */
+export interface ApiKeyAttribute {
+    /**
+     * The name of the attribute.
+     */
+    readonly name: string;
+    /**
+     * The internal name of the attribute for the API, i.e. the name used for the
+     * DynamoDB table that holds the attribute values.
+     */
+    readonly apiName: string;
+    /**
+     * The internal name of the attribute for Cognito. If a custom attribute is used, it
+     * already has to exist in the user pool.
+     */
+    readonly cognitoName: string;
+    /**
+     * The default value for the attribute, if no value is provided.
+     */
+    readonly defaultValue?: string;
+}
+/**
+ * Component that provides the base constructs required for API Key management,
+ * namely the required DynamoDB table.
+ */
+export declare class ApiKeyStore extends Construct {
+    private attributeConfiguration;
+    private table;
+    /**
+     * Create a new instance of the component.
+     * @param scope The scope to be used.
+     * @param id The ID used for the component instance.
+     * @param props The {@link ApiKeyStoreProps} required for creating the instance.
+     */
+    constructor(scope: Construct, id: string, props: ApiKeyStoreProps);
+    /**
+     * Get the field configuration of the component.
+     */
+    get attributes(): ApiKeyAttribute[];
+    /**
+     * Get the table that is used to manage the API Keys.
+     */
+    get apiKeyTable(): ITable;
+}

package/lib/constructs/api-keys/ApiKeyStore.js

@@ -0,0 +1,46 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyStore = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_dynamodb_1 = require("aws-cdk-lib/aws-dynamodb");
+const constructs_1 = require("constructs");
+/**
+ * Component that provides the base constructs required for API Key management,
+ * namely the required DynamoDB table.
+ */
+class ApiKeyStore extends constructs_1.Construct {
+    /**
+     * Create a new instance of the component.
+     * @param scope The scope to be used.
+     * @param id The ID used for the component instance.
+     * @param props The {@link ApiKeyStoreProps} required for creating the instance.
+     */
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.table = new aws_dynamodb_1.Table(this, "Table", {
+            partitionKey: { name: "id", type: aws_dynamodb_1.AttributeType.STRING },
+            billingMode: aws_dynamodb_1.BillingMode.PAY_PER_REQUEST,
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+            ...props.tableOptions,
+        });
+        this.attributeConfiguration = props.attributes;
+    }
+    /**
+     * Get the field configuration of the component.
+     */
+    get attributes() {
+        return this.attributeConfiguration;
+    }
+    /**
+     * Get the table that is used to manage the API Keys.
+     */
+    get apiKeyTable() {
+        return this.table;
+    }
+}
+exports.ApiKeyStore = ApiKeyStore;
+_a = JSII_RTTI_SYMBOL_1;
+ApiKeyStore[_a] = { fqn: "@btc-embedded/cdk-extensions.ApiKeyStore", version: "0.20.9" };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQXBpS2V5U3RvcmUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvY29uc3RydWN0cy9hcGkta2V5cy9BcGlLZXlTdG9yZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLDZDQUE0QztBQUM1QywyREFNa0M7QUFDbEMsMkNBQXVDO0FBNEN2Qzs7O0dBR0c7QUFDSCxNQUFhLFdBQVksU0FBUSxzQkFBUztJQUl4Qzs7Ozs7T0FLRztJQUNILFlBQVksS0FBZ0IsRUFBRSxFQUFVLEVBQUUsS0FBdUI7UUFDL0QsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLENBQUMsQ0FBQztRQUVqQixJQUFJLENBQUMsS0FBSyxHQUFHLElBQUksb0JBQUssQ0FBQyxJQUFJLEVBQUUsT0FBTyxFQUFFO1lBQ3BDLFlBQVksRUFBRSxFQUFFLElBQUksRUFBRSxJQUFJLEVBQUUsSUFBSSxFQUFFLDRCQUFhLENBQUMsTUFBTSxFQUFFO1lBQ3hELFdBQVcsRUFBRSwwQkFBVyxDQUFDLGVBQWU7WUFDeEMsYUFBYSxFQUFFLDJCQUFhLENBQUMsT0FBTztZQUNwQyxHQUFHLEtBQUssQ0FBQyxZQUFZO1NBQ3RCLENBQUMsQ0FBQztRQUVILElBQUksQ0FBQyxzQkFBc0IsR0FBRyxLQUFLLENBQUMsVUFBVSxDQUFDO0lBQ2pELENBQUM7SUFFRDs7T0FFRztJQUNILElBQVcsVUFBVTtRQUNuQixPQUFPLElBQUksQ0FBQyxzQkFBc0IsQ0FBQztJQUNyQyxDQUFDO0lBRUQ7O09BRUc7SUFDSCxJQUFXLFdBQVc7UUFDcEIsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDO0lBQ3BCLENBQUM7O0FBbkNILGtDQW9DQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IFJlbW92YWxQb2xpY3kgfSBmcm9tIFwiYXdzLWNkay1saWJcIjtcbmltcG9ydCB7XG4gIEF0dHJpYnV0ZVR5cGUsXG4gIEJpbGxpbmdNb2RlLFxuICBJVGFibGUsXG4gIFRhYmxlLFxuICBUYWJsZU9wdGlvbnMsXG59IGZyb20gXCJhd3MtY2RrLWxpYi9hd3MtZHluYW1vZGJcIjtcbmltcG9ydCB7IENvbnN0cnVjdCB9IGZyb20gXCJjb25zdHJ1Y3RzXCI7XG5cbi8qKlxuICogUHJvcGVydGllcyB0byBpbnN0YW50aWF0ZSB0aGUge0BsaW5rIEFwaUtleVN0b3JlfSBjb21wb25lbnQuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgQXBpS2V5U3RvcmVQcm9wcyB7XG4gIC8qKlxuICAgKiBUaGUgYXR0cmlidXRlcyB0aGF0IGFyZSBtYW5hZ2VkIGJ5IHRoZSBjb21wb25lbnQuXG4gICAqL1xuICByZWFkb25seSBhdHRyaWJ1dGVzOiBBcGlLZXlBdHRyaWJ1dGVbXTtcblxuICAvKipcbiAgICogQWRkaXRpb25hbCB0YWJsZSBvcHRpb25zIHRvIG92ZXJ3cml0ZSB0aGUgZGVmYXVsdHMgZm9yIHRoZSBjcmVhdGVkIHRhYmxlLlxuICAgKi9cbiAgcmVhZG9ubHkgdGFibGVPcHRpb25zPzogVGFibGVPcHRpb25zO1xufVxuXG4vKipcbiAqIFJlcHJlc2VudGF0aW9uIG9mIGFuIGF0dHJpYnV0ZSBvZiBhbiBBUEkga2V5LlxuICovXG5leHBvcnQgaW50ZXJmYWNlIEFwaUtleUF0dHJpYnV0ZSB7XG4gIC8qKlxuICAgKiBUaGUgbmFtZSBvZiB0aGUgYXR0cmlidXRlLlxuICAgKi9cbiAgcmVhZG9ubHkgbmFtZTogc3RyaW5nO1xuXG4gIC8qKlxuICAgKiBUaGUgaW50ZXJuYWwgbmFtZSBvZiB0aGUgYXR0cmlidXRlIGZvciB0aGUgQVBJLCBpLmUuIHRoZSBuYW1lIHVzZWQgZm9yIHRoZVxuICAgKiBEeW5hbW9EQiB0YWJsZSB0aGF0IGhvbGRzIHRoZSBhdHRyaWJ1dGUgdmFsdWVzLlxuICAgKi9cbiAgcmVhZG9ubHkgYXBpTmFtZTogc3RyaW5nO1xuXG4gIC8qKlxuICAgKiBUaGUgaW50ZXJuYWwgbmFtZSBvZiB0aGUgYXR0cmlidXRlIGZvciBDb2duaXRvLiBJZiBhIGN1c3RvbSBhdHRyaWJ1dGUgaXMgdXNlZCwgaXRcbiAgICogYWxyZWFkeSBoYXMgdG8gZXhpc3QgaW4gdGhlIHVzZXIgcG9vbC5cbiAgICovXG4gIHJlYWRvbmx5IGNvZ25pdG9OYW1lOiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIFRoZSBkZWZhdWx0IHZhbHVlIGZvciB0aGUgYXR0cmlidXRlLCBpZiBubyB2YWx1ZSBpcyBwcm92aWRlZC5cbiAgICovXG4gIHJlYWRvbmx5IGRlZmF1bHRWYWx1ZT86IHN0cmluZztcbn1cblxuLyoqXG4gKiBDb21wb25lbnQgdGhhdCBwcm92aWRlcyB0aGUgYmFzZSBjb25zdHJ1Y3RzIHJlcXVpcmVkIGZvciBBUEkgS2V5IG1hbmFnZW1lbnQsXG4gKiBuYW1lbHkgdGhlIHJlcXVpcmVkIER5bmFtb0RCIHRhYmxlLlxuICovXG5leHBvcnQgY2xhc3MgQXBpS2V5U3RvcmUgZXh0ZW5kcyBDb25zdHJ1Y3Qge1xuICBwcml2YXRlIGF0dHJpYnV0ZUNvbmZpZ3VyYXRpb246IEFwaUtleUF0dHJpYnV0ZVtdO1xuICBwcml2YXRlIHRhYmxlOiBJVGFibGU7XG5cbiAgLyoqXG4gICAqIENyZWF0ZSBhIG5ldyBpbnN0YW5jZSBvZiB0aGUgY29tcG9uZW50LlxuICAgKiBAcGFyYW0gc2NvcGUgVGhlIHNjb3BlIHRvIGJlIHVzZWQuXG4gICAqIEBwYXJhbSBpZCBUaGUgSUQgdXNlZCBmb3IgdGhlIGNvbXBvbmVudCBpbnN0YW5jZS5cbiAgICogQHBhcmFtIHByb3BzIFRoZSB7QGxpbmsgQXBpS2V5U3RvcmVQcm9wc30gcmVxdWlyZWQgZm9yIGNyZWF0aW5nIHRoZSBpbnN0YW5jZS5cbiAgICovXG4gIGNvbnN0cnVjdG9yKHNjb3BlOiBDb25zdHJ1Y3QsIGlkOiBzdHJpbmcsIHByb3BzOiBBcGlLZXlTdG9yZVByb3BzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkKTtcblxuICAgIHRoaXMudGFibGUgPSBuZXcgVGFibGUodGhpcywgXCJUYWJsZVwiLCB7XG4gICAgICBwYXJ0aXRpb25LZXk6IHsgbmFtZTogXCJpZFwiLCB0eXBlOiBBdHRyaWJ1dGVUeXBlLlNUUklORyB9LFxuICAgICAgYmlsbGluZ01vZGU6IEJpbGxpbmdNb2RlLlBBWV9QRVJfUkVRVUVTVCxcbiAgICAgIHJlbW92YWxQb2xpY3k6IFJlbW92YWxQb2xpY3kuREVTVFJPWSxcbiAgICAgIC4uLnByb3BzLnRhYmxlT3B0aW9ucyxcbiAgICB9KTtcblxuICAgIHRoaXMuYXR0cmlidXRlQ29uZmlndXJhdGlvbiA9IHByb3BzLmF0dHJpYnV0ZXM7XG4gIH1cblxuICAvKipcbiAgICogR2V0IHRoZSBmaWVsZCBjb25maWd1cmF0aW9uIG9mIHRoZSBjb21wb25lbnQuXG4gICAqL1xuICBwdWJsaWMgZ2V0IGF0dHJpYnV0ZXMoKTogQXBpS2V5QXR0cmlidXRlW10ge1xuICAgIHJldHVybiB0aGlzLmF0dHJpYnV0ZUNvbmZpZ3VyYXRpb247XG4gIH1cblxuICAvKipcbiAgICogR2V0IHRoZSB0YWJsZSB0aGF0IGlzIHVzZWQgdG8gbWFuYWdlIHRoZSBBUEkgS2V5cy5cbiAgICovXG4gIHB1YmxpYyBnZXQgYXBpS2V5VGFibGUoKTogSVRhYmxlIHtcbiAgICByZXR1cm4gdGhpcy50YWJsZTtcbiAgfVxufVxuIl19

package/lib/constructs/api-keys/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./ApiKeyClientAuthorization";
+export * from "./ApiKeyManagement";
+export * from "./ApiKeyPreTokenHandler";
+export * from "./ApiKeyStore";

package/lib/constructs/api-keys/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ApiKeyClientAuthorization"), exports);
+__exportStar(require("./ApiKeyManagement"), exports);
+__exportStar(require("./ApiKeyPreTokenHandler"), exports);
+__exportStar(require("./ApiKeyStore"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/lambdas/api-client-authorization-function.d.ts

@@ -0,0 +1,18 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for ApiClientAuthorizationFunction
+ */
+export interface ApiClientAuthorizationFunctionProps extends lambda.FunctionOptions {
+    /**
+     * The Lambda runtime to use.
+     * @default - Latest Node.js runtime available in the deployment region
+     */
+    readonly runtime?: lambda.Runtime;
+}
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-client-authorization.
+ */
+export declare class ApiClientAuthorizationFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: ApiClientAuthorizationFunctionProps);
+}

package/lib/constructs/api-keys/lambdas/api-client-authorization-function.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiClientAuthorizationFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-client-authorization.
+ */
+class ApiClientAuthorizationFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/constructs/api-keys/lambdas/api-client-authorization.lambda.ts',
+            ...props,
+            runtime: props?.runtime ?? (0, aws_lambda_1.determineLatestNodeRuntime)(scope),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../../assets/constructs/api-keys/lambdas/api-client-authorization.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.ApiClientAuthorizationFunction = ApiClientAuthorizationFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/lambdas/api-client-authorization.lambda.d.ts

@@ -0,0 +1,2 @@
+import { APIGatewayProxyEventV2, APIGatewayProxyResultV2 } from "aws-lambda";
+export declare const handler: (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyResultV2>;

package/lib/constructs/api-keys/lambdas/api-client-authorization.lambda.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const logger_1 = require("@aws-lambda-powertools/logger");
+const secrets_1 = require("@aws-lambda-powertools/parameters/secrets");
+const zod_1 = require("zod");
+const logger = new logger_1.Logger({
+    serviceName: "api-client-authorization.lambda",
+    logLevel: logger_1.LogLevel.INFO,
+});
+const handler = async (event) => {
+    try {
+        const clientId = process.env.OIDC_CLIENT_ID;
+        const clientSecretArn = process.env.OIDC_CLIENT_SECRET_ARN;
+        const authority = process.env.OIDC_ISSUER_URL;
+        const scope = process.env.OIDC_SCOPE;
+        if (!clientId || !clientSecretArn || !authority || !scope) {
+            return {
+                statusCode: 500,
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({ error: "Internal configuration error." }),
+            };
+        }
+        const clientSecret = await (0, secrets_1.getSecret)(clientSecretArn);
+        const wellKnownUrl = `${authority}/.well-known/openid-configuration`;
+        const wellKnownResponse = await fetch(wellKnownUrl);
+        const OpenIdConfigSchema = zod_1.z.object({
+            token_endpoint: zod_1.z.string(),
+        });
+        const openidConfig = OpenIdConfigSchema.parse(await wellKnownResponse.json());
+        const tokenEndpoint = openidConfig.token_endpoint;
+        if (!tokenEndpoint) {
+            return {
+                statusCode: 500,
+                headers: {
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    error: "Token endpoint not found in OIDC configuration",
+                }),
+            };
+        }
+        const credentials = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+        if (!event.body) {
+            return {
+                statusCode: 400,
+                body: JSON.stringify({ error: "apiKey is required" }),
+            };
+        }
+        const apiKey = event.body;
+        logger.info(`Calling ${tokenEndpoint}`);
+        const response = await fetch(tokenEndpoint, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Authorization: `Basic ${credentials}`,
+            },
+            body: `grant_type=client_credentials&scope=${encodeURIComponent(scope)}` +
+                `&aws_client_metadata=${encodeURIComponent(JSON.stringify({ "api-key": apiKey }))}`,
+        });
+        const authenticationResponse = await response.json();
+        return {
+            statusCode: response.status,
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(authenticationResponse),
+        };
+    }
+    catch (error) {
+        logger.error("Error creating token:", error instanceof Error ? error : JSON.stringify(error));
+        return {
+            statusCode: 500,
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                error: "Failed to create token",
+            }),
+        };
+    }
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXBpLWNsaWVudC1hdXRob3JpemF0aW9uLmxhbWJkYS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9jb25zdHJ1Y3RzL2FwaS1rZXlzL2xhbWJkYXMvYXBpLWNsaWVudC1hdXRob3JpemF0aW9uLmxhbWJkYS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSwwREFBaUU7QUFDakUsdUVBQXNFO0FBRXRFLDZCQUF3QjtBQUV4QixNQUFNLE1BQU0sR0FBRyxJQUFJLGVBQU0sQ0FBQztJQUN4QixXQUFXLEVBQUUsaUNBQWlDO0lBQzlDLFFBQVEsRUFBRSxpQkFBUSxDQUFDLElBQUk7Q0FDeEIsQ0FBQyxDQUFDO0FBRUksTUFBTSxPQUFPLEdBQUcsS0FBSyxFQUMxQixLQUE2QixFQUNLLEVBQUU7SUFDcEMsSUFBSSxDQUFDO1FBQ0gsTUFBTSxRQUFRLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyxjQUFjLENBQUM7UUFDNUMsTUFBTSxlQUFlLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyxzQkFBc0IsQ0FBQztRQUMzRCxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLGVBQWUsQ0FBQztRQUM5QyxNQUFNLEtBQUssR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLFVBQVUsQ0FBQztRQUNyQyxJQUFJLENBQUMsUUFBUSxJQUFJLENBQUMsZUFBZSxJQUFJLENBQUMsU0FBUyxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7WUFDMUQsT0FBTztnQkFDTCxVQUFVLEVBQUUsR0FBRztnQkFDZixPQUFPLEVBQUU7b0JBQ1AsY0FBYyxFQUFFLGtCQUFrQjtpQkFDbkM7Z0JBQ0QsSUFBSSxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsRUFBRSxLQUFLLEVBQUUsK0JBQStCLEVBQUUsQ0FBQzthQUNqRSxDQUFDO1FBQ0osQ0FBQztRQUVELE1BQU0sWUFBWSxHQUFHLE1BQU0sSUFBQSxtQkFBUyxFQUFDLGVBQWUsQ0FBQyxDQUFDO1FBRXRELE1BQU0sWUFBWSxHQUFHLEdBQUcsU0FBUyxtQ0FBbUMsQ0FBQztRQUNyRSxNQUFNLGlCQUFpQixHQUFHLE1BQU0sS0FBSyxDQUFDLFlBQVksQ0FBQyxDQUFDO1FBQ3BELE1BQU0sa0JBQWtCLEdBQUcsT0FBQyxDQUFDLE1BQU0sQ0FBQztZQUNsQyxjQUFjLEVBQUUsT0FBQyxDQUFDLE1BQU0sRUFBRTtTQUMzQixDQUFDLENBQUM7UUFFSCxNQUFNLFlBQVksR0FBRyxrQkFBa0IsQ0FBQyxLQUFLLENBQzNDLE1BQU0saUJBQWlCLENBQUMsSUFBSSxFQUFFLENBQy9CLENBQUM7UUFDRixNQUFNLGFBQWEsR0FBRyxZQUFZLENBQUMsY0FBYyxDQUFDO1FBRWxELElBQUksQ0FBQyxhQUFhLEVBQUUsQ0FBQztZQUNuQixPQUFPO2dCQUNMLFVBQVUsRUFBRSxHQUFHO2dCQUNmLE9BQU8sRUFBRTtvQkFDUCxjQUFjLEVBQUUsa0JBQWtCO2lCQUNuQztnQkFDRCxJQUFJLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQztvQkFDbkIsS0FBSyxFQUFFLGdEQUFnRDtpQkFDeEQsQ0FBQzthQUNILENBQUM7UUFDSixDQUFDO1FBRUQsTUFBTSxXQUFXLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLFFBQVEsSUFBSSxZQUFZLEVBQUUsQ0FBQyxDQUFDLFFBQVEsQ0FDckUsUUFBUSxDQUNULENBQUM7UUFDRixJQUFJLENBQUMsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDO1lBQ2hCLE9BQU87Z0JBQ0wsVUFBVSxFQUFFLEdBQUc7Z0JBQ2YsSUFBSSxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsRUFBRSxLQUFLLEVBQUUsb0JBQW9CLEVBQUUsQ0FBQzthQUN0RCxDQUFDO1FBQ0osQ0FBQztRQUNELE1BQU0sTUFBTSxHQUFHLEtBQUssQ0FBQyxJQUFJLENBQUM7UUFFMUIsTUFBTSxDQUFDLElBQUksQ0FBQyxXQUFXLGFBQWEsRUFBRSxDQUFDLENBQUM7UUFFeEMsTUFBTSxRQUFRLEdBQUcsTUFBTSxLQUFLLENBQUMsYUFBYSxFQUFFO1lBQzFDLE1BQU0sRUFBRSxNQUFNO1lBQ2QsT0FBTyxFQUFFO2dCQUNQLGNBQWMsRUFBRSxtQ0FBbUM7Z0JBQ25ELGFBQWEsRUFBRSxTQUFTLFdBQVcsRUFBRTthQUN0QztZQUNELElBQUksRUFDRix1Q0FBdUMsa0JBQWtCLENBQUMsS0FBSyxDQUFDLEVBQUU7Z0JBQ2xFLHdCQUF3QixrQkFBa0IsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLEVBQUUsU0FBUyxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUMsRUFBRTtTQUN0RixDQUFDLENBQUM7UUFFSCxNQUFNLHNCQUFzQixHQUFHLE1BQU0sUUFBUSxDQUFDLElBQUksRUFBRSxDQUFDO1FBRXJELE9BQU87WUFDTCxVQUFVLEVBQUUsUUFBUSxDQUFDLE1BQU07WUFDM0IsT0FBTyxFQUFFO2dCQUNQLGNBQWMsRUFBRSxrQkFBa0I7YUFDbkM7WUFDRCxJQUFJLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQyxzQkFBc0IsQ0FBQztTQUM3QyxDQUFDO0lBQ0osQ0FBQztJQUFDLE9BQU8sS0FBYyxFQUFFLENBQUM7UUFDeEIsTUFBTSxDQUFDLEtBQUssQ0FDVix1QkFBdUIsRUFDdkIsS0FBSyxZQUFZLEtBQUssQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLEtBQUssQ0FBQyxDQUN2RCxDQUFDO1FBRUYsT0FBTztZQUNMLFVBQVUsRUFBRSxHQUFHO1lBQ2YsT0FBTyxFQUFFO2dCQUNQLGNBQWMsRUFBRSxrQkFBa0I7YUFDbkM7WUFDRCxJQUFJLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQztnQkFDbkIsS0FBSyxFQUFFLHdCQUF3QjthQUNoQyxDQUFDO1NBQ0gsQ0FBQztJQUNKLENBQUM7QUFDSCxDQUFDLENBQUM7QUE1RlcsUUFBQSxPQUFPLFdBNEZsQiIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IExvZ2dlciwgTG9nTGV2ZWwgfSBmcm9tIFwiQGF3cy1sYW1iZGEtcG93ZXJ0b29scy9sb2dnZXJcIjtcbmltcG9ydCB7IGdldFNlY3JldCB9IGZyb20gXCJAYXdzLWxhbWJkYS1wb3dlcnRvb2xzL3BhcmFtZXRlcnMvc2VjcmV0c1wiO1xuaW1wb3J0IHsgQVBJR2F0ZXdheVByb3h5RXZlbnRWMiwgQVBJR2F0ZXdheVByb3h5UmVzdWx0VjIgfSBmcm9tIFwiYXdzLWxhbWJkYVwiO1xuaW1wb3J0IHsgeiB9IGZyb20gXCJ6b2RcIjtcblxuY29uc3QgbG9nZ2VyID0gbmV3IExvZ2dlcih7XG4gIHNlcnZpY2VOYW1lOiBcImFwaS1jbGllbnQtYXV0aG9yaXphdGlvbi5sYW1iZGFcIixcbiAgbG9nTGV2ZWw6IExvZ0xldmVsLklORk8sXG59KTtcblxuZXhwb3J0IGNvbnN0IGhhbmRsZXIgPSBhc3luYyAoXG4gIGV2ZW50OiBBUElHYXRld2F5UHJveHlFdmVudFYyLFxuKTogUHJvbWlzZTxBUElHYXRld2F5UHJveHlSZXN1bHRWMj4gPT4ge1xuICB0cnkge1xuICAgIGNvbnN0IGNsaWVudElkID0gcHJvY2Vzcy5lbnYuT0lEQ19DTElFTlRfSUQ7XG4gICAgY29uc3QgY2xpZW50U2VjcmV0QXJuID0gcHJvY2Vzcy5lbnYuT0lEQ19DTElFTlRfU0VDUkVUX0FSTjtcbiAgICBjb25zdCBhdXRob3JpdHkgPSBwcm9jZXNzLmVudi5PSURDX0lTU1VFUl9VUkw7XG4gICAgY29uc3Qgc2NvcGUgPSBwcm9jZXNzLmVudi5PSURDX1NDT1BFO1xuICAgIGlmICghY2xpZW50SWQgfHwgIWNsaWVudFNlY3JldEFybiB8fCAhYXV0aG9yaXR5IHx8ICFzY29wZSkge1xuICAgICAgcmV0dXJuIHtcbiAgICAgICAgc3RhdHVzQ29kZTogNTAwLFxuICAgICAgICBoZWFkZXJzOiB7XG4gICAgICAgICAgXCJDb250ZW50LVR5cGVcIjogXCJhcHBsaWNhdGlvbi9qc29uXCIsXG4gICAgICAgIH0sXG4gICAgICAgIGJvZHk6IEpTT04uc3RyaW5naWZ5KHsgZXJyb3I6IFwiSW50ZXJuYWwgY29uZmlndXJhdGlvbiBlcnJvci5cIiB9KSxcbiAgICAgIH07XG4gICAgfVxuXG4gICAgY29uc3QgY2xpZW50U2VjcmV0ID0gYXdhaXQgZ2V0U2VjcmV0KGNsaWVudFNlY3JldEFybik7XG5cbiAgICBjb25zdCB3ZWxsS25vd25VcmwgPSBgJHthdXRob3JpdHl9Ly53ZWxsLWtub3duL29wZW5pZC1jb25maWd1cmF0aW9uYDtcbiAgICBjb25zdCB3ZWxsS25vd25SZXNwb25zZSA9IGF3YWl0IGZldGNoKHdlbGxLbm93blVybCk7XG4gICAgY29uc3QgT3BlbklkQ29uZmlnU2NoZW1hID0gei5vYmplY3Qoe1xuICAgICAgdG9rZW5fZW5kcG9pbnQ6IHouc3RyaW5nKCksXG4gICAgfSk7XG5cbiAgICBjb25zdCBvcGVuaWRDb25maWcgPSBPcGVuSWRDb25maWdTY2hlbWEucGFyc2UoXG4gICAgICBhd2FpdCB3ZWxsS25vd25SZXNwb25zZS5qc29uKCksXG4gICAgKTtcbiAgICBjb25zdCB0b2tlbkVuZHBvaW50ID0gb3BlbmlkQ29uZmlnLnRva2VuX2VuZHBvaW50O1xuXG4gICAgaWYgKCF0b2tlbkVuZHBvaW50KSB7XG4gICAgICByZXR1cm4ge1xuICAgICAgICBzdGF0dXNDb2RlOiA1MDAsXG4gICAgICAgIGhlYWRlcnM6IHtcbiAgICAgICAgICBcIkNvbnRlbnQtVHlwZVwiOiBcImFwcGxpY2F0aW9uL2pzb25cIixcbiAgICAgICAgfSxcbiAgICAgICAgYm9keTogSlNPTi5zdHJpbmdpZnkoe1xuICAgICAgICAgIGVycm9yOiBcIlRva2VuIGVuZHBvaW50IG5vdCBmb3VuZCBpbiBPSURDIGNvbmZpZ3VyYXRpb25cIixcbiAgICAgICAgfSksXG4gICAgICB9O1xuICAgIH1cblxuICAgIGNvbnN0IGNyZWRlbnRpYWxzID0gQnVmZmVyLmZyb20oYCR7Y2xpZW50SWR9OiR7Y2xpZW50U2VjcmV0fWApLnRvU3RyaW5nKFxuICAgICAgXCJiYXNlNjRcIixcbiAgICApO1xuICAgIGlmICghZXZlbnQuYm9keSkge1xuICAgICAgcmV0dXJuIHtcbiAgICAgICAgc3RhdHVzQ29kZTogNDAwLFxuICAgICAgICBib2R5OiBKU09OLnN0cmluZ2lmeSh7IGVycm9yOiBcImFwaUtleSBpcyByZXF1aXJlZFwiIH0pLFxuICAgICAgfTtcbiAgICB9XG4gICAgY29uc3QgYXBpS2V5ID0gZXZlbnQuYm9keTtcblxuICAgIGxvZ2dlci5pbmZvKGBDYWxsaW5nICR7dG9rZW5FbmRwb2ludH1gKTtcblxuICAgIGNvbnN0IHJlc3BvbnNlID0gYXdhaXQgZmV0Y2godG9rZW5FbmRwb2ludCwge1xuICAgICAgbWV0aG9kOiBcIlBPU1RcIixcbiAgICAgIGhlYWRlcnM6IHtcbiAgICAgICAgXCJDb250ZW50LVR5cGVcIjogXCJhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWRcIixcbiAgICAgICAgQXV0aG9yaXphdGlvbjogYEJhc2ljICR7Y3JlZGVudGlhbHN9YCxcbiAgICAgIH0sXG4gICAgICBib2R5OlxuICAgICAgICBgZ3JhbnRfdHlwZT1jbGllbnRfY3JlZGVudGlhbHMmc2NvcGU9JHtlbmNvZGVVUklDb21wb25lbnQoc2NvcGUpfWAgK1xuICAgICAgICBgJmF3c19jbGllbnRfbWV0YWRhdGE9JHtlbmNvZGVVUklDb21wb25lbnQoSlNPTi5zdHJpbmdpZnkoeyBcImFwaS1rZXlcIjogYXBpS2V5IH0pKX1gLFxuICAgIH0pO1xuXG4gICAgY29uc3QgYXV0aGVudGljYXRpb25SZXNwb25zZSA9IGF3YWl0IHJlc3BvbnNlLmpzb24oKTtcblxuICAgIHJldHVybiB7XG4gICAgICBzdGF0dXNDb2RlOiByZXNwb25zZS5zdGF0dXMsXG4gICAgICBoZWFkZXJzOiB7XG4gICAgICAgIFwiQ29udGVudC1UeXBlXCI6IFwiYXBwbGljYXRpb24vanNvblwiLFxuICAgICAgfSxcbiAgICAgIGJvZHk6IEpTT04uc3RyaW5naWZ5KGF1dGhlbnRpY2F0aW9uUmVzcG9uc2UpLFxuICAgIH07XG4gIH0gY2F0Y2ggKGVycm9yOiB1bmtub3duKSB7XG4gICAgbG9nZ2VyLmVycm9yKFxuICAgICAgXCJFcnJvciBjcmVhdGluZyB0b2tlbjpcIixcbiAgICAgIGVycm9yIGluc3RhbmNlb2YgRXJyb3IgPyBlcnJvciA6IEpTT04uc3RyaW5naWZ5KGVycm9yKSxcbiAgICApO1xuXG4gICAgcmV0dXJuIHtcbiAgICAgIHN0YXR1c0NvZGU6IDUwMCxcbiAgICAgIGhlYWRlcnM6IHtcbiAgICAgICAgXCJDb250ZW50LVR5cGVcIjogXCJhcHBsaWNhdGlvbi9qc29uXCIsXG4gICAgICB9LFxuICAgICAgYm9keTogSlNPTi5zdHJpbmdpZnkoe1xuICAgICAgICBlcnJvcjogXCJGYWlsZWQgdG8gY3JlYXRlIHRva2VuXCIsXG4gICAgICB9KSxcbiAgICB9O1xuICB9XG59O1xuIl19

package/lib/constructs/api-keys/lambdas/api-key-creation-function.d.ts

@@ -0,0 +1,18 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for ApiKeyCreationFunction
+ */
+export interface ApiKeyCreationFunctionProps extends lambda.FunctionOptions {
+    /**
+     * The Lambda runtime to use.
+     * @default - Latest Node.js runtime available in the deployment region
+     */
+    readonly runtime?: lambda.Runtime;
+}
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-key-creation.
+ */
+export declare class ApiKeyCreationFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: ApiKeyCreationFunctionProps);
+}

package/lib/constructs/api-keys/lambdas/api-key-creation-function.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyCreationFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-key-creation.
+ */
+class ApiKeyCreationFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/constructs/api-keys/lambdas/api-key-creation.lambda.ts',
+            ...props,
+            runtime: props?.runtime ?? (0, aws_lambda_1.determineLatestNodeRuntime)(scope),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../../assets/constructs/api-keys/lambdas/api-key-creation.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.ApiKeyCreationFunction = ApiKeyCreationFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/lambdas/api-key-creation.lambda.d.ts

@@ -0,0 +1,2 @@
+import { APIGatewayProxyEvent, APIGatewayProxyResult } from "aws-lambda";
+export declare const handler: (_event: APIGatewayProxyEvent) => Promise<APIGatewayProxyResult>;

package/lib/constructs/api-keys/lambdas/api-key-creation.lambda.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const crypto_1 = require("crypto");
+const logger_1 = require("@aws-lambda-powertools/logger");
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const lib_dynamodb_1 = require("@aws-sdk/lib-dynamodb");
+const logger = new logger_1.Logger({
+    serviceName: "api-key-creation.lambda",
+    logLevel: logger_1.LogLevel.INFO,
+});
+const client = new client_dynamodb_1.DynamoDBClient({});
+const docClient = lib_dynamodb_1.DynamoDBDocumentClient.from(client);
+const tableName = process.env.TABLE_NAME;
+const handler = async (_event) => {
+    try {
+        const id = (0, crypto_1.randomUUID)();
+        const createdAt = new Date().toISOString();
+        const item = {
+            id,
+            createdAt,
+        };
+        const command = new lib_dynamodb_1.PutCommand({
+            TableName: tableName,
+            Item: item,
+        });
+        await docClient.send(command);
+        return {
+            statusCode: 201,
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                id: id,
+                createdAt: createdAt,
+            }),
+        };
+    }
+    catch (error) {
+        logger.error("Error creating item:", error instanceof Error ? error : JSON.stringify(error));
+        return {
+            statusCode: 500,
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                error: "Failed to create item",
+            }),
+        };
+    }
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/lambdas/api-key-update-function.d.ts

@@ -0,0 +1,18 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { Construct } from 'constructs';
+/**
+ * Props for ApiKeyUpdateFunction
+ */
+export interface ApiKeyUpdateFunctionProps extends lambda.FunctionOptions {
+    /**
+     * The Lambda runtime to use.
+     * @default - Latest Node.js runtime available in the deployment region
+     */
+    readonly runtime?: lambda.Runtime;
+}
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-key-update.
+ */
+export declare class ApiKeyUpdateFunction extends lambda.Function {
+    constructor(scope: Construct, id: string, props?: ApiKeyUpdateFunctionProps);
+}

package/lib/constructs/api-keys/lambdas/api-key-update-function.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyUpdateFunction = void 0;
+// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
+/**
+ * An AWS Lambda function which executes src/constructs/api-keys/lambdas/api-key-update.
+ */
+class ApiKeyUpdateFunction extends lambda.Function {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            description: 'src/constructs/api-keys/lambdas/api-key-update.lambda.ts',
+            ...props,
+            runtime: props?.runtime ?? (0, aws_lambda_1.determineLatestNodeRuntime)(scope),
+            handler: 'index.handler',
+            code: lambda.Code.fromAsset(path.join(__dirname, '../../../../assets/constructs/api-keys/lambdas/api-key-update.lambda')),
+        });
+        this.addEnvironment('AWS_NODEJS_CONNECTION_REUSE_ENABLED', '1', { removeInEdge: true });
+    }
+}
+exports.ApiKeyUpdateFunction = ApiKeyUpdateFunction;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/constructs/api-keys/lambdas/api-key-update.lambda.d.ts

@@ -0,0 +1,2 @@
+import { APIGatewayProxyEvent, APIGatewayProxyResult } from "aws-lambda";
+export declare const handler: (event: APIGatewayProxyEvent) => Promise<APIGatewayProxyResult>;

package/lib/constructs/api-keys/lambdas/api-key-update.lambda.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const logger_1 = require("@aws-lambda-powertools/logger");
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const lib_dynamodb_1 = require("@aws-sdk/lib-dynamodb");
+const logger = new logger_1.Logger({
+    serviceName: "api-key-update.lambda",
+    logLevel: logger_1.LogLevel.INFO,
+});
+const client = new client_dynamodb_1.DynamoDBClient({});
+const docClient = lib_dynamodb_1.DynamoDBDocumentClient.from(client);
+const tableName = process.env.TABLE_NAME;
+const handler = async (event) => {
+    const attributeNames = process.env.ATTRIBUTE_NAMES.split(",");
+    try {
+        const headers = {
+            "Content-Type": "application/json",
+        };
+        const parsedUpdateFields = JSON.parse(event.body || "{}");
+        // Might be double quoted.
+        const updateFields = typeof parsedUpdateFields === "string"
+            ? JSON.parse(parsedUpdateFields)
+            : parsedUpdateFields;
+        if (!event.pathParameters || !event.pathParameters.id) {
+            return {
+                statusCode: 400,
+                body: JSON.stringify({ error: "apiKey is required" }),
+            };
+        }
+        const apiKey = event.pathParameters.id;
+        // Filter updates to only include valid field names
+        const validUpdates = {};
+        attributeNames.forEach((fieldName) => {
+            if (updateFields[fieldName] !== undefined) {
+                validUpdates[fieldName] = updateFields[fieldName];
+            }
+        });
+        if (Object.keys(validUpdates).length === 0) {
+            return {
+                statusCode: 200,
+                headers,
+                body: JSON.stringify({ message: "No fields updated" }),
+            };
+        }
+        // Build update expression
+        const updateExpression = `SET ${Object.keys(validUpdates)
+            .map((_key, index) => `#field${index} = :value${index}`)
+            .join(", ")}`;
+        const expressionAttributeNames = {};
+        const expressionAttributeValues = {};
+        Object.keys(validUpdates).forEach((key, index) => {
+            expressionAttributeNames[`#field${index}`] = key;
+            expressionAttributeValues[`:value${index}`] =
+                validUpdates[key].toString();
+        });
+        const command = new lib_dynamodb_1.UpdateCommand({
+            TableName: tableName,
+            Key: { id: apiKey },
+            UpdateExpression: updateExpression,
+            ExpressionAttributeNames: expressionAttributeNames,
+            ExpressionAttributeValues: expressionAttributeValues,
+            ReturnValues: "ALL_NEW",
+        });
+        await docClient.send(command);
+        return {
+            statusCode: 200,
+            body: JSON.stringify({ message: "Item updated successfully" }),
+        };
+    }
+    catch (error) {
+        logger.error("Updating the API key failed.", error instanceof Error ? error : JSON.stringify(error));
+        return {
+            statusCode: 500,
+            body: JSON.stringify({ error: "Internal server error" }),
+        };
+    }
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,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