@certenza/aws-cdk-infrastructure-commons 2.4.3 → 2.5.0

package/dist/src/apigateway.d.ts

@@ -49,4 +49,11 @@ declare const createHttpApiGatewayLambdaEndpoint: (method: "POST" | "GET" | "PUT
  * @returns The HTTP API Gateway SQS endpoint
  */
 declare const createHttpApiGatewaySQSEndpoint: (method: "POST" | "GET" | "PUT" | "DELETE" | "PATCH" | "OPTIONS" | "HEAD", path: string, queue: sqs.IQueue, api: apigatewayv2.HttpApi) => apigatewayv2.IHttpRoute[];
-export { createApiGateway, createHttpApiGateway, createHttpApiGatewayLambdaEndpoint, createHttpApiGatewaySQSEndpoint, getApiGatewayDomainName, };
+/**
+ * Associates a WAF to a REST API Gateway
+ * @param scope - The scope of the construct
+ * @param api - The REST API Gateway to associate the WAF to
+ * @param webACLArn - The ARN of the WAF to associate
+ */
+declare const associateWebACLToRestApiGateway: (scope: Construct, api: apigateway.RestApi, webACLArn: string) => void;
+export { createApiGateway, createHttpApiGateway, createHttpApiGatewayLambdaEndpoint, createHttpApiGatewaySQSEndpoint, getApiGatewayDomainName, associateWebACLToRestApiGateway, };

package/dist/src/apigateway.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getApiGatewayDomainName = exports.createHttpApiGatewaySQSEndpoint = exports.createHttpApiGatewayLambdaEndpoint = exports.createHttpApiGateway = exports.createApiGateway = void 0;
+exports.associateWebACLToRestApiGateway = exports.getApiGatewayDomainName = exports.createHttpApiGatewaySQSEndpoint = exports.createHttpApiGatewayLambdaEndpoint = exports.createHttpApiGateway = exports.createApiGateway = void 0;
 const apigateway = __importStar(require("aws-cdk-lib/aws-apigateway"));
 const apigatewayv2 = __importStar(require("aws-cdk-lib/aws-apigatewayv2"));
 const apigatewayv2_integrations = __importStar(require("aws-cdk-lib/aws-apigatewayv2-integrations"));
@@ -41,6 +41,7 @@ const logs = __importStar(require("aws-cdk-lib/aws-logs"));
 const route53 = __importStar(require("aws-cdk-lib/aws-route53"));
 const route53targets = __importStar(require("aws-cdk-lib/aws-route53-targets"));
 const aws_apigatewayv2_authorizers_1 = require("aws-cdk-lib/aws-apigatewayv2-authorizers");
+const wafv2 = __importStar(require("aws-cdk-lib/aws-wafv2"));
 const iam = __importStar(require("aws-cdk-lib/aws-iam"));
 const cdk = __importStar(require("aws-cdk-lib"));
 const acm_1 = require("./acm");
@@ -215,11 +216,35 @@ const createHttpApiGatewaySQSEndpoint = (method, path, queue, api) => {
         integration: new apigatewayv2_integrations.HttpSqsIntegration(`${method}-${sanitizedPath}`, {
             queue: queue,
             // Configure parameter mapping to use the entire request body as the message body
-            // By default, it expects $request.body.MessageBody, but we want to send the whole body
-            parameterMapping: apigatewayv2.ParameterMapping.fromObject({
-                MessageBody: apigatewayv2.MappingValue.custom("$request.body"),
-            }),
+            // and set the QueueUrl. Both are required for SQS-SendMessage operation
+            // Using the same approach as the default implementation
+            parameterMapping: new apigatewayv2.ParameterMapping()
+                .custom("QueueUrl", queue.queueUrl)
+                .custom("MessageBody", "$request.body"),
         }),
     });
 };
 exports.createHttpApiGatewaySQSEndpoint = createHttpApiGatewaySQSEndpoint;
+/**
+ * Associates a WAF to a REST API Gateway
+ * @param scope - The scope of the construct
+ * @param api - The REST API Gateway to associate the WAF to
+ * @param webACLArn - The ARN of the WAF to associate
+ */
+const associateWebACLToRestApiGateway = (scope, api, webACLArn) => {
+    // Construct the stage ARN
+    // Format: arn:aws:apigateway:{region}::/restapis/{api-id}/stages/{stage-name}
+    const stageArn = cdk.Fn.join("", [
+        `arn:aws:apigateway:us-east-1::/restapis/`,
+        api.restApiId,
+        `/stages/prod`,
+    ]);
+    // Create the WAF association
+    const association = new wafv2.CfnWebACLAssociation(scope, `${api.restApiName}WAFAssociation`, {
+        webAclArn: webACLArn,
+        resourceArn: stageArn,
+    });
+    // Add dependency to the stage to ensure it exists before association
+    association.node.addDependency(api.deploymentStage);
+};
+exports.associateWebACLToRestApiGateway = associateWebACLToRestApiGateway;

package/dist/src/lambda.js

@@ -42,6 +42,7 @@ const lambda = __importStar(require("aws-cdk-lib/aws-lambda"));
 const nodejs = __importStar(require("aws-cdk-lib/aws-lambda-nodejs"));
 const logs = __importStar(require("aws-cdk-lib/aws-logs"));
 const apigateway = __importStar(require("aws-cdk-lib/aws-apigateway"));
+const secretsmanager_1 = require("./secretsmanager");
 /**
  * Creates a lambda function with the given parameters
  * @param scope - The scope of the lambda function
@@ -59,6 +60,11 @@ const createLambdaFunction = (scope, functionName, environment, props = {}) => {
     const environmentVariables = props.environmentVariables ?? {};
     // Define the options of the lambda function
     const options = props.options ?? {};
+    // Get the internal api token from secrets manager
+    const internalApiToken = (0, secretsmanager_1.getSecret)(scope, `Internal-API-Token`, "Internal-API-Token");
+    const internalApiTokenValue = internalApiToken
+        .secretValueFromJson("token")
+        .toString();
     // Create the lambda function
     const lambdaFunction = new nodejs.NodejsFunction(scope, id, {
         entry: `src/lambdas/${functionName}/handler.ts`,
@@ -70,6 +76,7 @@ const createLambdaFunction = (scope, functionName, environment, props = {}) => {
         timeout: cdk.Duration.seconds(30),
         environment: {
             ENVIRONMENT: environment,
+            INTERNAL_API_TOKEN: internalApiTokenValue,
             NODE_ENV: environment === "production" ? "production" : "development",
             ...environmentVariables,
         },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@certenza/aws-cdk-infrastructure-commons",
-    "version": "2.4.3",
+    "version": "2.5.0",
     "description": "Common infrastructure reusable utilities and resources for Certenza projects",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
@@ -40,11 +40,11 @@
     },
     "homepage": "https://github.com/certenza/aws-cdk-infrastructure-commons#readme",
     "dependencies": {
-        "aws-cdk-lib": "^2.233.0"
+        "aws-cdk-lib": "^2.235.0"
     },
     "devDependencies": {
         "@types/node": "^24.0.0",
-        "prettier": "^3.7.4",
+        "prettier": "^3.8.0",
         "rimraf": "^6.1.2",
         "typescript": "^5.9.3"
     },