@cdklabs/cdk-appmod-catalog-blueprints 1.0.0

package/lib/utilities/tests/data-loader.test.js

@@ -0,0 +1,284 @@
+"use strict";
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const assertions_1 = require("aws-cdk-lib/assertions");
+const aws_ec2_1 = require("aws-cdk-lib/aws-ec2");
+const aws_rds_1 = require("aws-cdk-lib/aws-rds");
+const aws_secretsmanager_1 = require("aws-cdk-lib/aws-secretsmanager");
+const data_loader_1 = require("../data-loader");
+describe('DataLoader', () => {
+    let app;
+    let stack;
+    let vpc;
+    let cluster;
+    let secret;
+    let securityGroup;
+    let template;
+    // Use beforeAll instead of beforeEach to avoid recreating infrastructure
+    beforeAll(() => {
+        app = new aws_cdk_lib_1.App();
+        stack = new aws_cdk_lib_1.Stack(app, 'TestStack');
+        // Create VPC
+        vpc = new aws_ec2_1.Vpc(stack, 'TestVpc');
+        // Create security group for database access
+        securityGroup = new aws_ec2_1.SecurityGroup(stack, 'DatabaseSecurityGroup', {
+            vpc: vpc,
+            description: 'Security group for database access',
+        });
+        // Create database secret
+        secret = new aws_secretsmanager_1.Secret(stack, 'DatabaseSecret', {
+            generateSecretString: {
+                secretStringTemplate: JSON.stringify({ username: 'testuser' }),
+                generateStringKey: 'password',
+                excludeCharacters: '"@/\\',
+            },
+        });
+        // Create Aurora cluster
+        cluster = new aws_rds_1.DatabaseCluster(stack, 'TestCluster', {
+            engine: aws_rds_1.DatabaseClusterEngine.auroraPostgres({
+                version: aws_rds_1.AuroraPostgresEngineVersion.VER_13_7,
+            }),
+            credentials: {
+                username: 'testuser',
+                password: secret.secretValueFromJson('password'),
+            },
+            vpc,
+            writer: aws_rds_1.ClusterInstance.provisioned('writer', {
+                instanceType: aws_ec2_1.InstanceType.of(aws_ec2_1.InstanceClass.T3, aws_ec2_1.InstanceSize.MEDIUM),
+            }),
+        });
+        // Create all DataLoader instances first
+        new data_loader_1.DataLoader(stack, 'BasicDataLoader', {
+            databaseConfig: {
+                engine: data_loader_1.DatabaseEngine.POSTGRESQL,
+                cluster: cluster,
+                secret: secret,
+                databaseName: 'testdb',
+                vpc: vpc,
+                securityGroup: securityGroup,
+            },
+            fileInputs: [
+                {
+                    filePath: 's3://test-bucket/test-data.sql',
+                    fileType: data_loader_1.FileType.SQL,
+                },
+            ],
+        });
+        new data_loader_1.DataLoader(stack, 'MultiFileDataLoader', {
+            databaseConfig: {
+                engine: data_loader_1.DatabaseEngine.MYSQL,
+                cluster: cluster,
+                secret: secret,
+                databaseName: 'testdb',
+                vpc: vpc,
+                securityGroup: securityGroup,
+            },
+            fileInputs: [
+                {
+                    filePath: 's3://test-bucket/schema.sql',
+                    fileType: data_loader_1.FileType.SQL,
+                    executionOrder: 1,
+                },
+                {
+                    filePath: 's3://test-bucket/data.sql',
+                    fileType: data_loader_1.FileType.MYSQLDUMP,
+                    executionOrder: 2,
+                },
+            ],
+        });
+        new data_loader_1.DataLoader(stack, 'CustomDataLoader', {
+            databaseConfig: {
+                engine: data_loader_1.DatabaseEngine.POSTGRESQL,
+                cluster: cluster,
+                secret: secret,
+                databaseName: 'testdb',
+                vpc: vpc,
+                securityGroup: securityGroup,
+            },
+            fileInputs: [
+                {
+                    filePath: 's3://test-bucket/test-data.sql',
+                    fileType: data_loader_1.FileType.SQL,
+                },
+            ],
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.RETAIN,
+            memorySize: 2048,
+        });
+        // Generate template once after all constructs are created
+        template = assertions_1.Template.fromStack(stack);
+    });
+    describe('Basic functionality', () => {
+        test('creates DataLoader construct with minimal configuration', () => {
+            expect(stack.node.findChild('BasicDataLoader')).toBeDefined();
+        });
+        test('creates expected AWS resources', () => {
+            template.hasResourceProperties('AWS::S3::Bucket', {
+                BucketEncryption: {
+                    ServerSideEncryptionConfiguration: [
+                        {
+                            ServerSideEncryptionByDefault: {
+                                SSEAlgorithm: 'AES256',
+                            },
+                        },
+                    ],
+                },
+            });
+            template.hasResourceProperties('AWS::StepFunctions::StateMachine', {});
+            template.hasResourceProperties('AWS::Lambda::Function', {
+                Runtime: 'python3.11',
+                Handler: 'index.handler',
+            });
+        });
+        test('supports multiple file inputs with execution order', () => {
+            expect(stack.node.findChild('MultiFileDataLoader')).toBeDefined();
+        });
+        test('supports custom configuration options', () => {
+            expect(stack.node.findChild('CustomDataLoader')).toBeDefined();
+            template.hasResourceProperties('AWS::Lambda::Function', {
+                MemorySize: 2048,
+            });
+        });
+    });
+    describe('Validation', () => {
+        test('throws error when databaseConfig is missing', () => {
+            expect(() => {
+                new data_loader_1.DataLoader(stack, 'InvalidConfigDataLoader', {
+                    databaseConfig: undefined,
+                    fileInputs: [
+                        {
+                            filePath: 's3://test-bucket/test-data.sql',
+                            fileType: data_loader_1.FileType.SQL,
+                        },
+                    ],
+                });
+            }).toThrow('databaseConfig is required');
+        });
+        test('throws error when both cluster and instance are missing', () => {
+            expect(() => {
+                new data_loader_1.DataLoader(stack, 'NoClusterDataLoader', {
+                    databaseConfig: {
+                        engine: data_loader_1.DatabaseEngine.POSTGRESQL,
+                        secret: secret,
+                        databaseName: 'testdb',
+                        vpc: vpc,
+                        securityGroup: securityGroup,
+                    },
+                    fileInputs: [
+                        {
+                            filePath: 's3://test-bucket/test-data.sql',
+                            fileType: data_loader_1.FileType.SQL,
+                        },
+                    ],
+                });
+            }).toThrow('Either cluster or instance must be provided in databaseConfig');
+        });
+        test('throws error when fileInputs is empty', () => {
+            expect(() => {
+                new data_loader_1.DataLoader(stack, 'EmptyInputsDataLoader', {
+                    databaseConfig: {
+                        engine: data_loader_1.DatabaseEngine.POSTGRESQL,
+                        cluster: cluster,
+                        secret: secret,
+                        databaseName: 'testdb',
+                        vpc: vpc,
+                        securityGroup: securityGroup,
+                    },
+                    fileInputs: [],
+                });
+            }).toThrow('At least one file input is required');
+        });
+        test('throws error when MySQL engine is used with PostgreSQL dump', () => {
+            expect(() => {
+                new data_loader_1.DataLoader(stack, 'MySQLPgDumpDataLoader', {
+                    databaseConfig: {
+                        engine: data_loader_1.DatabaseEngine.MYSQL,
+                        cluster: cluster,
+                        secret: secret,
+                        databaseName: 'testdb',
+                        vpc: vpc,
+                        securityGroup: securityGroup,
+                    },
+                    fileInputs: [
+                        {
+                            filePath: 's3://test-bucket/test-data.sql',
+                            fileType: data_loader_1.FileType.PGDUMP,
+                        },
+                    ],
+                });
+            }).toThrow('PostgreSQL dump files cannot be used with MySQL databases');
+        });
+        test('throws error when PostgreSQL engine is used with MySQL dump', () => {
+            expect(() => {
+                new data_loader_1.DataLoader(stack, 'PostgreSQLMySQLDumpDataLoader', {
+                    databaseConfig: {
+                        engine: data_loader_1.DatabaseEngine.POSTGRESQL,
+                        cluster: cluster,
+                        secret: secret,
+                        databaseName: 'testdb',
+                        vpc: vpc,
+                        securityGroup: securityGroup,
+                    },
+                    fileInputs: [
+                        {
+                            filePath: 's3://test-bucket/test-data.sql',
+                            fileType: data_loader_1.FileType.MYSQLDUMP,
+                        },
+                    ],
+                });
+            }).toThrow('MySQL dump files cannot be used with PostgreSQL databases');
+        });
+    });
+    describe('Removal Policy', () => {
+        test('applies custom removal policy to resources', () => {
+            expect(stack.node.findChild('CustomDataLoader')).toBeDefined();
+            template.hasResource('AWS::S3::Bucket', {
+                DeletionPolicy: 'Retain',
+                UpdateReplacePolicy: 'Retain',
+            });
+        });
+        test('uses default DESTROY removal policy when not specified', () => {
+            expect(stack.node.findChild('BasicDataLoader')).toBeDefined();
+            template.hasResource('AWS::S3::Bucket', {
+                DeletionPolicy: 'Delete',
+                UpdateReplacePolicy: 'Delete',
+            });
+        });
+    });
+    describe('Security', () => {
+        test('creates resources with proper security configurations', () => {
+            template.hasResourceProperties('AWS::S3::Bucket', {
+                PublicAccessBlockConfiguration: {
+                    BlockPublicAcls: true,
+                    BlockPublicPolicy: true,
+                    IgnorePublicAcls: true,
+                    RestrictPublicBuckets: true,
+                },
+            });
+            template.hasResourceProperties('AWS::Lambda::Function', {
+                Handler: 'index.handler',
+                Runtime: 'python3.11',
+            });
+            const lambdaFunctions = template.findResources('AWS::Lambda::Function');
+            const hasVpcConfig = Object.values(lambdaFunctions).some((fn) => fn.Properties?.VpcConfig?.SubnetIds);
+            expect(hasVpcConfig).toBe(true);
+        });
+        test('grants appropriate IAM permissions', () => {
+            template.hasResourceProperties('AWS::IAM::Role', {
+                AssumeRolePolicyDocument: {
+                    Statement: [
+                        {
+                            Action: 'sts:AssumeRole',
+                            Effect: 'Allow',
+                            Principal: {
+                                Service: 'lambda.amazonaws.com',
+                            },
+                        },
+                    ],
+                },
+            });
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/lib/webapp/frontend-construct.d.ts

@@ -0,0 +1,136 @@
+import { RemovalPolicy } from 'aws-cdk-lib';
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { Distribution, ErrorResponse, PriceClass } from 'aws-cdk-lib/aws-cloudfront';
+import { IHostedZone } from 'aws-cdk-lib/aws-route53';
+import { Bucket } from 'aws-cdk-lib/aws-s3';
+import { Asset } from 'aws-cdk-lib/aws-s3-assets';
+import { BucketDeployment } from 'aws-cdk-lib/aws-s3-deployment';
+import { Construct } from 'constructs';
+/**
+ * Default CloudFront error responses for Single Page Applications
+ */
+export declare const DEFAULT_SPA_ERROR_RESPONSES: ErrorResponse[];
+/**
+ * Custom domain configuration for the frontend
+ */
+export interface CustomDomainConfig {
+    /** Domain name for the frontend (e.g., 'app.example.com') */
+    readonly domainName: string;
+    /** SSL certificate for the domain (required when domainName is provided) */
+    readonly certificate: ICertificate;
+    /** Optional hosted zone for automatic DNS record creation */
+    readonly hostedZone?: IHostedZone;
+}
+/**
+ * Additional CloudFront distribution properties
+ */
+export interface AdditionalDistributionProps {
+    /** Optional comment for the distribution */
+    readonly comment?: string;
+    /** Optional enabled flag for the distribution */
+    readonly enabled?: boolean;
+    /** Optional price class for the distribution */
+    readonly priceClass?: PriceClass;
+    /** Optional web ACL ID for the distribution */
+    readonly webAclId?: string;
+}
+/**
+ * Properties for the Frontend construct
+ */
+export interface FrontendProps {
+    /** Base directory of the frontend source code */
+    readonly sourceDirectory: string;
+    /** Directory where build artifacts are located after build command completes (defaults to '{sourceDirectory}/build') */
+    readonly buildOutputDirectory?: string;
+    /** Optional build command (defaults to 'npm run build') */
+    readonly buildCommand?: string;
+    /** Optional custom domain configuration */
+    readonly customDomain?: CustomDomainConfig;
+    /** Optional CloudFront error responses (defaults to SPA-friendly responses) */
+    readonly errorResponses?: ErrorResponse[];
+    /** Optional additional CloudFront distribution properties */
+    readonly distributionProps?: AdditionalDistributionProps;
+    /** Optional flag to skip the build process (useful for pre-built artifacts) */
+    readonly skipBuild?: boolean;
+    /** Optional removal policy for all resources (defaults to DESTROY) */
+    readonly removalPolicy?: RemovalPolicy;
+    /**
+     * Enable logging and tracing for all supporting resource
+     * @default false
+     */
+    readonly enableObservability?: boolean;
+}
+/**
+ * Frontend construct that deploys a frontend application to S3 and CloudFront
+ *
+ * This construct provides a complete solution for hosting static frontend applications
+ * with the following features:
+ * - S3 bucket for hosting static assets with security best practices
+ * - CloudFront distribution for global content delivery
+ * - Optional custom domain with SSL certificate
+ * - Automatic build process execution
+ * - SPA-friendly error handling by default
+ * - Security configurations
+ */
+export declare class Frontend extends Construct {
+    /** The S3 bucket hosting the frontend assets */
+    readonly bucket: Bucket;
+    /** The CloudFront distribution */
+    readonly distribution: Distribution;
+    /** The bucket deployment that uploads the frontend assets */
+    readonly bucketDeployment: BucketDeployment;
+    /** The custom domain name (if configured) */
+    readonly domainName?: string;
+    /** The Asset containing the frontend source code */
+    readonly asset?: Asset;
+    /**
+     * Creates a new Frontend
+     * @param scope The construct scope
+     * @param id The construct ID
+     * @param props The frontend properties
+     */
+    constructor(scope: Construct, id: string, props: FrontendProps);
+    /**
+     * Validates the construct properties
+     * @param props The frontend properties
+     * @private
+     */
+    private _validateProps;
+    /**
+     * Creates an Asset for the frontend source code with bundling
+     * @param props The frontend properties
+     * @returns The Asset containing the built frontend
+     * @private
+     */
+    private _createAsset;
+    /**
+     * Creates the CloudFront distribution
+     * @param props The frontend properties
+     * @param removalPolicy The removal policy to apply
+     * @returns The CloudFront distribution
+     * @private
+     */
+    private _createDistribution;
+    /**
+     * Sets up custom domain with Route53 record
+     * @param customDomain The custom domain configuration
+     * @param removalPolicy The removal policy to apply
+     * @private
+     */
+    private _setupCustomDomain;
+    /**
+     * Gets the URL of the frontend application
+     * @returns The frontend URL
+     */
+    url(): string;
+    /**
+     * Gets the CloudFront distribution domain name
+     * @returns The CloudFront domain name
+     */
+    distributionDomainName(): string;
+    /**
+     * Gets the S3 bucket name
+     * @returns The S3 bucket name
+     */
+    bucketName(): string;
+}