@composurecdk/route53 0.6.0 → 0.8.0

package/dist/commonjs/health-check-alarm-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-builder.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAgB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,cAAc,CACnD,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;AAsBF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,EACrD,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;IACnD,YAAY,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;CAClD,GACL,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAevB;AAED,cAAM,uBAAwB,YAAW,SAAS,CAAC,6BAA6B,CAAC;;IAC/E,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAM;IAIlD;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,wBAAwB,CAAC,GAAG,IAAI;IAKpE;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAKnD,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,6BAA6B;CAejC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,6BAA6B,IAAI,wBAAwB,CAIxE"}

package/dist/commonjs/health-check-alarm-builder.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildHealthCheckAlarms = buildHealthCheckAlarms;
+exports.createHealthCheckAlarmBuilder = createHealthCheckAlarmBuilder;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const core_1 = require("@composurecdk/core");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const health_check_alarms_js_1 = require("./health-check-alarms.js");
+/**
+ * Route 53 health-check metrics are emitted in `us-east-1` only. CloudWatch
+ * alarms are regional, so alarms created in any other region will never
+ * receive data. Warn (don't error) when alarms are being created outside
+ * `us-east-1`, unless the region is an unresolved token (env-agnostic stack
+ * — user knows best).
+ */
+function warnIfNotUsEast1(scope) {
+    const region = aws_cdk_lib_1.Stack.of(scope).region;
+    if (aws_cdk_lib_1.Token.isUnresolved(region))
+        return;
+    if (region === "us-east-1")
+        return;
+    aws_cdk_lib_1.Annotations.of(scope).addWarningV2("@composurecdk/route53:alarm-region", `Route 53 health-check metrics are emitted in us-east-1 only, but this stack is ` +
+        `deployed in "${region}". CloudWatch alarms created here will not fire. Deploy the ` +
+        `stack in us-east-1, or use createHealthCheckAlarmBuilder() routed to a ` +
+        `us-east-1 stack via compose().withStacks().`);
+}
+/**
+ * Shared alarm-assembly used by both {@link createHealthCheckBuilder} (in its
+ * own stack) and {@link createHealthCheckAlarmBuilder} (typically in a
+ * separate `us-east-1` stack). Materialises the recommended health-check
+ * alarm and any user-supplied custom alarms, emits the region warning if the
+ * resulting scope is not in `us-east-1`, and creates the alarm constructs.
+ *
+ * @internal
+ */
+function buildHealthCheckAlarms(scope, id, target, options = {}) {
+    const recommended = options.recommendedAlarms;
+    const recommendedDefs = recommended === false || recommended?.enabled === false
+        ? []
+        : (0, health_check_alarms_js_1.resolveHealthCheckAlarmDefinitions)(target.healthCheck, recommended);
+    const customAlarmDefs = options.customAlarms?.map((b) => b.resolve(target.healthCheck)) ?? [];
+    const allAlarmDefs = [...recommendedDefs, ...customAlarmDefs];
+    if (allAlarmDefs.length > 0) {
+        warnIfNotUsEast1(scope);
+    }
+    return (0, cloudwatch_1.createAlarms)(scope, id, allAlarmDefs);
+}
+class HealthCheckAlarmBuilder {
+    props = {};
+    #healthCheck;
+    #customAlarms = [];
+    /**
+     * Sets the health check to alarm on. Pass the result of
+     * {@link createHealthCheckBuilder} (or a {@link Ref} to it). The builder
+     * reads the health check from the result.
+     *
+     * Pair with `compose().withStacks()` to route this component into a
+     * `us-east-1` stack while the health check itself lives elsewhere — set
+     * `crossRegionReferences: true` on both stacks so CDK can wire the
+     * `HealthCheckId` reference automatically.
+     */
+    healthCheck(healthCheck) {
+        this.#healthCheck = healthCheck;
+        return this;
+    }
+    /**
+     * Adds a custom alarm against the health check. The configure callback
+     * receives a fresh {@link AlarmDefinitionBuilder} pre-set with the alarm's
+     * key; configure metric, threshold, comparison and any other options.
+     *
+     * The created alarm is materialised in this builder's stack — useful for
+     * cross-region setups where you want all health-check alarms to live with
+     * the recommended ones.
+     */
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new cloudwatch_1.AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    /** @internal — see ADR-0005. */
+    [core_1.COPY_STATE](target) {
+        target.#healthCheck = this.#healthCheck;
+        target.#customAlarms.push(...this.#customAlarms);
+    }
+    build(scope, id, context) {
+        if (!this.#healthCheck) {
+            throw new Error(`HealthCheckAlarmBuilder "${id}" requires a health check. ` +
+                `Call .healthCheck() with a HealthCheckBuilderResult or a Ref to one.`);
+        }
+        const target = (0, core_1.resolve)(this.#healthCheck, context ?? {});
+        return {
+            alarms: buildHealthCheckAlarms(scope, id, target, {
+                recommendedAlarms: this.props.recommendedAlarms,
+                customAlarms: this.#customAlarms,
+            }),
+        };
+    }
+}
+/**
+ * Creates a new {@link IHealthCheckAlarmBuilder} for materialising Route 53
+ * health-check alarms in a stack separate from the health check itself.
+ *
+ * The recommended use is multi-region deployments: the health check lives in
+ * the application's stack (in any region — Route 53 health checks are
+ * global), and the alarms must live in a `us-east-1` stack so they can read
+ * the metrics Route 53 emits there.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     api: createHealthCheckBuilder()
+ *       .type(HealthCheckType.HTTPS)
+ *       .fqdn("api.example.com")
+ *       .recommendedAlarms(false),                  // suppress alarms in the api's own stack
+ *
+ *     apiAlarms: createHealthCheckAlarmBuilder()
+ *       .healthCheck(ref<HealthCheckBuilderResult>("api"))
+ *       .recommendedAlarms({ healthCheckStatus: { evaluationPeriods: 2 } }),
+ *   },
+ *   { api: [], apiAlarms: ["api"] },
+ * )
+ *   .withStacks({
+ *     api:       appStack,         // any region — health checks are global
+ *     apiAlarms: monitoringStack,  // us-east-1 — where AWS/Route53 metrics live
+ *   })
+ *   .build(app, "App");
+ * ```
+ *
+ * Set `crossRegionReferences: true` on both stacks so CDK can export the
+ * `HealthCheckId` from the app stack and import it in the alarm stack.
+ */
+function createHealthCheckAlarmBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(HealthCheckAlarmBuilder);
+}
+//# sourceMappingURL=health-check-alarm-builder.js.map

package/dist/commonjs/health-check-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-builder.js","sourceRoot":"","sources":["../../src/health-check-alarm-builder.ts"],"names":[],"mappings":";;AA8FA,wDAuBC;AAsGD,sEAIC;AA7ND,6CAAwD;AAExD,6CAA0F;AAC1F,iEAAkF;AAElF,yDAAgF;AAEhF,qEAA8E;AAwD9E;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,MAAM,GAAG,mBAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,mBAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO;IACnC,yBAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,oCAAoC,EACpC,iFAAiF;QAC/E,gBAAgB,MAAM,8DAA8D;QACpF,yEAAyE;QACzE,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CACpC,KAAiB,EACjB,EAAU,EACV,MAAqD,EACrD,UAGI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC9C,MAAM,eAAe,GACnB,WAAW,KAAK,KAAK,IAAI,WAAW,EAAE,OAAO,KAAK,KAAK;QACrD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAA,2DAAkC,EAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1E,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;IAE9D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,IAAA,yBAAY,EAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,uBAAuB;IAC3B,KAAK,GAA0C,EAAE,CAAC;IAClD,YAAY,CAAwC;IAC3C,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,mCAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,iBAAU,CAAC,CAAC,MAA+B;QAC1C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,6BAA6B;gBACzD,sEAAsE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE;gBAChD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAC/C,YAAY,EAAE,IAAI,CAAC,aAAa;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAgB,6BAA6B;IAC3C,OAAO,IAAA,8BAAa,EAClB,uBAAuB,CACxB,CAAC;AACJ,CAAC"}

package/dist/commonjs/health-check-alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-config.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACzC"}

package/dist/commonjs/health-check-alarm-config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=health-check-alarm-config.js.map

package/dist/commonjs/health-check-alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-config.js","sourceRoot":"","sources":["../../src/health-check-alarm-config.ts"],"names":[],"mappings":""}

package/dist/commonjs/health-check-alarm-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-defaults.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,wBAAwB;IAChC,OAAO,EAAE,IAAI,CAAC;IACd,iBAAiB,EAAE,mBAAmB,CAAC;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,wBAmBzC,CAAC"}

package/dist/commonjs/health-check-alarm-defaults.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HEALTH_CHECK_ALARM_DEFAULTS = void 0;
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+/**
+ * AWS-recommended default alarm configuration for Route 53 health checks.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+ */
+exports.HEALTH_CHECK_ALARM_DEFAULTS = {
+    enabled: true,
+    /**
+     * Alarm when `HealthCheckStatus < 1` for one consecutive 1-minute period.
+     * The metric is 0 (unhealthy) or 1 (healthy) per Route 53 checker, so the
+     * `Minimum` statistic surfaces "at least one checker reports unhealthy."
+     *
+     * `treatMissingData: breaching` matches AWS's recommendation — missing
+     * datapoints are treated as unhealthy. This guards against situations
+     * where the metric stops emitting (e.g. health check deletion) while the
+     * downstream system still depends on it.
+     */
+    healthCheckStatus: {
+        threshold: 1,
+        evaluationPeriods: 1,
+        datapointsToAlarm: 1,
+        treatMissingData: aws_cloudwatch_1.TreatMissingData.BREACHING,
+    },
+};
+//# sourceMappingURL=health-check-alarm-defaults.js.map

package/dist/commonjs/health-check-alarm-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-defaults.js","sourceRoot":"","sources":["../../src/health-check-alarm-defaults.ts"],"names":[],"mappings":";;;AAAA,+DAA8D;AAQ9D;;;;GAIG;AACU,QAAA,2BAA2B,GAA6B;IACnE,OAAO,EAAE,IAAI;IAEb;;;;;;;;;OASG;IACH,iBAAiB,EAAE;QACjB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,iCAAgB,CAAC,SAAS;KAC7C;CACF,CAAC"}

package/dist/commonjs/health-check-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarms.d.ts","sourceRoot":"","sources":["../../src/health-check-alarms.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAK7E;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,YAAY,EACzB,MAAM,EAAE,sBAAsB,GAAG,SAAS,GACzC,eAAe,EAAE,CA8BnB"}

package/dist/commonjs/health-check-alarms.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveHealthCheckAlarmDefinitions = resolveHealthCheckAlarmDefinitions;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const health_check_alarm_defaults_js_1 = require("./health-check-alarm-defaults.js");
+const METRIC_PERIOD = aws_cdk_lib_1.Duration.minutes(1);
+/**
+ * Resolves the recommended alarm configuration into fully-resolved
+ * {@link AlarmDefinition}s for a Route 53 health check.
+ *
+ * Period and statistic are fixed at the AWS-recommended values
+ * (1 minute, Minimum) and not exposed as configuration knobs — they are
+ * load-bearing for the recommended semantics ("the worst checker reading
+ * per minute"). Threshold, evaluation periods, datapoints, and missing-data
+ * behaviour remain user-configurable via {@link HealthCheckAlarmConfig}.
+ */
+function resolveHealthCheckAlarmDefinitions(healthCheck, config) {
+    if (config?.enabled === false)
+        return [];
+    const definitions = [];
+    if (config?.healthCheckStatus !== false) {
+        const cfg = (0, cloudwatch_1.resolveAlarmConfig)(config?.healthCheckStatus, health_check_alarm_defaults_js_1.HEALTH_CHECK_ALARM_DEFAULTS.healthCheckStatus);
+        definitions.push({
+            key: "healthCheckStatus",
+            alarmName: cfg.alarmName,
+            metric: new aws_cloudwatch_1.Metric({
+                namespace: "AWS/Route53",
+                metricName: "HealthCheckStatus",
+                dimensionsMap: { HealthCheckId: healthCheck.healthCheckId },
+                statistic: aws_cloudwatch_1.Stats.MINIMUM,
+                period: METRIC_PERIOD,
+            }),
+            threshold: cfg.threshold,
+            comparisonOperator: aws_cloudwatch_1.ComparisonOperator.LESS_THAN_THRESHOLD,
+            evaluationPeriods: cfg.evaluationPeriods,
+            datapointsToAlarm: cfg.datapointsToAlarm,
+            treatMissingData: cfg.treatMissingData,
+            description: `Route 53 health check is reporting unhealthy. Threshold: HealthCheckStatus < ${String(cfg.threshold)} (Minimum, 1 minute).`,
+        });
+    }
+    return definitions;
+}
+//# sourceMappingURL=health-check-alarms.js.map

package/dist/commonjs/health-check-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarms.js","sourceRoot":"","sources":["../../src/health-check-alarms.ts"],"names":[],"mappings":";;AAoBA,gFAiCC;AArDD,6CAAuC;AACvC,+DAA+E;AAG/E,yDAA8D;AAE9D,qFAA+E;AAE/E,MAAM,aAAa,GAAG,sBAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE1C;;;;;;;;;GASG;AACH,SAAgB,kCAAkC,CAChD,WAAyB,EACzB,MAA0C;IAE1C,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,IAAI,MAAM,EAAE,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAA,+BAAkB,EAC5B,MAAM,EAAE,iBAAiB,EACzB,4DAA2B,CAAC,iBAAiB,CAC9C,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,mBAAmB;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,uBAAM,CAAC;gBACjB,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,mBAAmB;gBAC/B,aAAa,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE;gBAC3D,SAAS,EAAE,sBAAK,CAAC,OAAO;gBACxB,MAAM,EAAE,aAAa;aACtB,CAAC;YACF,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,mCAAkB,CAAC,mBAAmB;YAC1D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,gFAAgF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB;SAC1I,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/{health-check-builder.d.ts → commonjs/health-check-builder.d.ts}

@@ -1,7 +1,8 @@
 import { HealthCheck, type HealthCheckProps, type IHealthCheck } from "aws-cdk-lib/aws-route53";
 import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
 import { type IConstruct } from "constructs";
-import { type IBuilder, type Lifecycle } from "@composurecdk/core";
+import { COPY_STATE, type Lifecycle } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
 import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
 import type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
 /**
@@ -73,11 +74,13 @@ export interface HealthCheckBuilderResult {
  *   .resourcePath("/health");
  * ```
  */
-export type IHealthCheckBuilder = IBuilder<HealthCheckBuilderProps, HealthCheckBuilder>;
+export type IHealthCheckBuilder = ITaggedBuilder<HealthCheckBuilderProps, HealthCheckBuilder>;
 declare class HealthCheckBuilder implements Lifecycle<HealthCheckBuilderResult> {
     #private;
     props: Partial<HealthCheckBuilderProps>;
     addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<IHealthCheck>) => AlarmDefinitionBuilder<IHealthCheck>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: HealthCheckBuilder): void;
     build(scope: IConstruct, id: string): HealthCheckBuilderResult;
 }
 /**

package/dist/commonjs/health-check-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-builder.d.ts","sourceRoot":"","sources":["../../src/health-check-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAI7E;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,gBAAgB;IAC/D;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,WAAW,EAAE,WAAW,CAAC;IAEzB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAE9F,cAAM,kBAAmB,YAAW,SAAS,CAAC,wBAAwB,CAAC;;IACrE,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAM;IAG7C,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAI9C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,wBAAwB;CA4B/D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,mBAAmB,CAE9D"}

package/dist/commonjs/health-check-builder.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createHealthCheckBuilder = createHealthCheckBuilder;
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const core_1 = require("@composurecdk/core");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const health_check_alarm_builder_js_1 = require("./health-check-alarm-builder.js");
+const defaults_js_1 = require("./defaults.js");
+class HealthCheckBuilder {
+    props = {};
+    #customAlarms = [];
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new cloudwatch_1.AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    /** @internal — see ADR-0005. */
+    [core_1.COPY_STATE](target) {
+        target.#customAlarms.push(...this.#customAlarms);
+    }
+    build(scope, id) {
+        const { recommendedAlarms, ...rest } = this.props;
+        if (!rest.type) {
+            throw new Error(`HealthCheckBuilder "${id}" requires a type. Call .type() with a HealthCheckType value.`);
+        }
+        const mergedProps = {
+            ...defaults_js_1.HEALTH_CHECK_DEFAULTS,
+            ...rest,
+        };
+        const healthCheck = new aws_route53_1.HealthCheck(scope, id, mergedProps);
+        const alarms = (0, health_check_alarm_builder_js_1.buildHealthCheckAlarms)(scope, id, { healthCheck }, {
+            recommendedAlarms,
+            customAlarms: this.#customAlarms,
+        });
+        return { healthCheck, alarms };
+    }
+}
+/**
+ * Creates a new {@link IHealthCheckBuilder} for configuring a Route 53
+ * health check.
+ *
+ * @returns A fluent builder for a Route 53 health check.
+ *
+ * @example
+ * ```ts
+ * const hc = createHealthCheckBuilder()
+ *   .type(HealthCheckType.HTTPS)
+ *   .fqdn("api.example.com");
+ *
+ * const result = hc.build(stack, "ApiHealthCheck");
+ * ```
+ */
+function createHealthCheckBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(HealthCheckBuilder);
+}
+//# sourceMappingURL=health-check-builder.js.map

package/dist/commonjs/health-check-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-builder.js","sourceRoot":"","sources":["../../src/health-check-builder.ts"],"names":[],"mappings":";;AAoJA,4DAEC;AAtJD,yDAAgG;AAGhG,6CAAgE;AAChE,iEAAkF;AAClF,yDAAkE;AAElE,mFAAyE;AACzE,+CAAsD;AA4EtD,MAAM,kBAAkB;IACtB,KAAK,GAAqC,EAAE,CAAC;IACpC,aAAa,GAA2C,EAAE,CAAC;IAEpE,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,mCAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,iBAAU,CAAC,CAAC,MAA0B;QACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAElD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,+DAA+D,CACzF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,mCAAqB;YACxB,GAAG,IAAI;SACY,CAAC;QAEtB,MAAM,WAAW,GAAG,IAAI,yBAAW,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,IAAA,sDAAsB,EACnC,KAAK,EACL,EAAE,EACF,EAAE,WAAW,EAAE,EACf;YACE,iBAAiB;YACjB,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CACF,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,wBAAwB;IACtC,OAAO,IAAA,8BAAa,EAA8C,kBAAkB,CAAC,CAAC;AACxF,CAAC"}

package/dist/{hosted-zone-builder.d.ts → commonjs/hosted-zone-builder.d.ts}

@@ -1,16 +1,26 @@
 import { PublicHostedZone, type PublicHostedZoneProps } from "aws-cdk-lib/aws-route53";
+import { type LogGroup } from "aws-cdk-lib/aws-logs";
 import { type IConstruct } from "constructs";
-import { type IBuilder, type Lifecycle } from "@composurecdk/core";
+import { type Lifecycle } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { type QueryLoggingConfig } from "./query-logging.js";
 /**
  * Configuration properties for the Route53 public hosted zone builder.
  *
- * Aliases the CDK {@link PublicHostedZoneProps} so every zone property is
- * available as a fluent setter on the builder. No additional builder-specific
- * options are defined today — query logging requires a pre-configured log
- * group (see {@link PublicHostedZoneProps.queryLogsLogGroupArn | queryLogsLogGroupArn})
- * which the user supplies directly.
+ * Hides the CDK `queryLogsLogGroupArn` field in favour of {@link queryLogging}
+ * — a discriminated config that supports a `false` opt-out, a user-supplied
+ * pre-existing log group ARN, or a customizable auto-managed `LogGroup`
+ * provisioned alongside the hosted zone.
  */
-export type HostedZoneBuilderProps = PublicHostedZoneProps;
+export interface HostedZoneBuilderProps extends Omit<PublicHostedZoneProps, "queryLogsLogGroupArn"> {
+    /**
+     * See {@link QueryLoggingConfig}. Defaults to an auto-managed CloudWatch
+     * log group and a single shared resource policy granting Route 53 write
+     * access — the secure path is the easy path. Set to `false` to opt out, or
+     * to `{ logGroupArn }` to bring your own log group.
+     */
+    queryLogging?: QueryLoggingConfig;
+}
 /**
  * The build output of an {@link IHostedZoneBuilder}. Contains the CDK
  * constructs created during {@link Lifecycle.build}, keyed by role.
@@ -18,6 +28,15 @@ export type HostedZoneBuilderProps = PublicHostedZoneProps;
 export interface HostedZoneBuilderResult {
     /** The Route53 public hosted zone construct created by the builder. */
     hostedZone: PublicHostedZone;
+    /**
+     * The CloudWatch log group auto-created for DNS query logging, or
+     * `undefined` when query logging was disabled or the user supplied their
+     * own log group ARN. The shared `AWS::Logs::ResourcePolicy` is
+     * intentionally not exposed: it is stack-scoped, shared across every
+     * hosted zone in the stack, and not safe to mutate from a single
+     * builder's result.
+     */
+    queryLogGroup?: LogGroup;
 }
 /**
  * A fluent builder for configuring and creating a Route53 public hosted zone.
@@ -28,7 +47,8 @@ export interface HostedZoneBuilderResult {
  *
  * The builder implements {@link Lifecycle}, so it can be used directly as a
  * component in a {@link compose | composed system}. When built, it creates a
- * public hosted zone with the configured properties and returns a
+ * public hosted zone with the configured properties — including the
+ * auto-managed DNS query-log group and shared resource policy — and returns a
  * {@link HostedZoneBuilderResult}.
  *
  * @example
@@ -38,7 +58,7 @@ export interface HostedZoneBuilderResult {
  *   .comment("Primary customer-facing domain");
  * ```
  */
-export type IHostedZoneBuilder = IBuilder<HostedZoneBuilderProps, HostedZoneBuilder>;
+export type IHostedZoneBuilder = ITaggedBuilder<HostedZoneBuilderProps, HostedZoneBuilder>;
 declare class HostedZoneBuilder implements Lifecycle<HostedZoneBuilderResult> {
     props: Partial<HostedZoneBuilderProps>;
     build(scope: IConstruct, id: string): HostedZoneBuilderResult;

package/dist/commonjs/hosted-zone-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-zone-builder.d.ts","sourceRoot":"","sources":["../../src/hosted-zone-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAClD,qBAAqB,EACrB,sBAAsB,CACvB;IACC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,UAAU,EAAE,gBAAgB,CAAC;IAC7B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE3F,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB;CA8B9D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAE5D"}

package/dist/commonjs/hosted-zone-builder.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createHostedZoneBuilder = createHostedZoneBuilder;
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const defaults_js_1 = require("./defaults.js");
+const query_logging_js_1 = require("./query-logging.js");
+class HostedZoneBuilder {
+    props = {};
+    build(scope, id) {
+        if (!this.props.zoneName) {
+            throw new Error(`HostedZoneBuilder "${id}" requires a zoneName. ` +
+                `Call .zoneName() with a fully-qualified domain.`);
+        }
+        const { queryLogging, ...zoneProps } = {
+            ...defaults_js_1.HOSTED_ZONE_DEFAULTS,
+            ...this.props,
+        };
+        const { queryLogGroup, queryLogsLogGroupArn, policy } = (0, query_logging_js_1.resolveQueryLogging)(scope, id, this.props.zoneName, queryLogging);
+        const hostedZone = new aws_route53_1.PublicHostedZone(scope, id, {
+            ...zoneProps,
+            zoneName: this.props.zoneName,
+            queryLogsLogGroupArn,
+        });
+        if (policy)
+            hostedZone.node.addDependency(policy);
+        return { hostedZone, queryLogGroup };
+    }
+}
+/**
+ * Creates a new {@link IHostedZoneBuilder} for configuring a Route53 public
+ * hosted zone.
+ *
+ * This is the entry point for defining a public hosted zone component. The
+ * returned builder exposes every {@link HostedZoneBuilderProps} property as a
+ * fluent setter/getter and implements {@link Lifecycle} for use with
+ * {@link compose}.
+ *
+ * @returns A fluent builder for a Route53 public hosted zone.
+ *
+ * @example
+ * ```ts
+ * const zone = createHostedZoneBuilder().zoneName("example.com");
+ *
+ * // Use standalone:
+ * const result = zone.build(stack, "SiteZone");
+ *
+ * // Or compose into a system:
+ * const system = compose(
+ *   { zone, cert: createCertificateBuilder()
+ *       .domainName("example.com")
+ *       .validationZone(ref("zone", (r: HostedZoneBuilderResult) => r.hostedZone)) },
+ *   { zone: [], cert: ["zone"] },
+ * );
+ * ```
+ */
+function createHostedZoneBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(HostedZoneBuilder);
+}
+//# sourceMappingURL=hosted-zone-builder.js.map

package/dist/commonjs/hosted-zone-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-zone-builder.js","sourceRoot":"","sources":["../../src/hosted-zone-builder.ts"],"names":[],"mappings":";;AAmIA,0DAEC;AArID,yDAAuF;AAIvF,iEAAkF;AAClF,+CAAqD;AACrD,yDAAkF;AA+DlF,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IAE5C,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,yBAAyB;gBAC/C,iDAAiD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,GAAG;YACrC,GAAG,kCAAoB;YACvB,GAAG,IAAI,CAAC,KAAK;SACd,CAAC;QAEF,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,IAAA,sCAAmB,EACzE,KAAK,EACL,EAAE,EACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EACnB,YAAY,CACb,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,8BAAgB,CAAC,KAAK,EAAE,EAAE,EAAE;YACjD,GAAG,SAAS;YACZ,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,oBAAoB;SACrB,CAAC,CAAC;QAEH,IAAI,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,uBAAuB;IACrC,OAAO,IAAA,8BAAa,EAA4C,iBAAiB,CAAC,CAAC;AACrF,CAAC"}

package/dist/commonjs/https-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-record-builder.d.ts","sourceRoot":"","sources":["../../src/https-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,QAAQ,CAAC;IACxF,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC/B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;GAOG;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAExF,cAAM,kBAAmB,YAAW,SAAS,CAAC,wBAAwB,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAM;IAE7C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,wBAAwB;CAiCjG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,mBAAmB,CAG9D"}

package/dist/commonjs/https-record-builder.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createHttpsRecordBuilder = createHttpsRecordBuilder;
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const core_1 = require("@composurecdk/core");
+const defaults_js_1 = require("./defaults.js");
+class HttpsRecordBuilder {
+    props = {};
+    build(scope, id, context) {
+        const { zone, target, values, ...rest } = this.props;
+        if (!zone) {
+            throw new Error(`HttpsRecordBuilder "${id}" requires a zone. Call .zone() with an IHostedZone.`);
+        }
+        if (values?.length === 0) {
+            throw new Error(`HttpsRecordBuilder "${id}" requires non-empty values. ` +
+                `Call .values() with one or more HttpsRecordValue entries, or use .target() instead.`);
+        }
+        const hasValues = values !== undefined;
+        if (hasValues === (target !== undefined)) {
+            throw new Error(`HttpsRecordBuilder "${id}" requires exactly one of .values() or .target(), not both.`);
+        }
+        const resolvedTarget = target ? (0, core_1.resolve)(target, context) : undefined;
+        const isAlias = resolvedTarget?.aliasTarget !== undefined;
+        const mergedProps = {
+            ...(isAlias ? {} : defaults_js_1.HTTPS_RECORD_DEFAULTS),
+            ...rest,
+            ...(hasValues ? { values } : {}),
+            ...(resolvedTarget ? { target: resolvedTarget } : {}),
+            zone: (0, core_1.resolve)(zone, context),
+        };
+        const record = new aws_route53_1.HttpsRecord(scope, id, mergedProps);
+        return { record };
+    }
+}
+/**
+ * Creates a new {@link IHttpsRecordBuilder} for configuring a Route53 HTTPS
+ * record.
+ *
+ * @returns A fluent builder for a Route53 HTTPS record.
+ */
+function createHttpsRecordBuilder() {
+    // eslint-disable-next-line composurecdk/builder-must-be-tagged -- AWS::Route53::RecordSet has no Tags property
+    return (0, core_1.Builder)(HttpsRecordBuilder);
+}
+//# sourceMappingURL=https-record-builder.js.map

package/dist/commonjs/https-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-record-builder.js","sourceRoot":"","sources":["../../src/https-record-builder.ts"],"names":[],"mappings":";;AA6FA,4DAGC;AAhGD,yDAKiC;AAEjC,6CAM4B;AAC5B,+CAAsD;AAmCtD,MAAM,kBAAkB;IACtB,KAAK,GAAqC,EAAE,CAAC;IAE7C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,sDAAsD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,+BAA+B;gBACtD,qFAAqF,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC;QACvC,IAAI,SAAS,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,6DAA6D,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,OAAO,GAAG,cAAc,EAAE,WAAW,KAAK,SAAS,CAAC;QAC1D,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAqB,CAAC;YACzC,GAAG,IAAI;YACP,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,EAAE,IAAA,cAAO,EAAC,IAAI,EAAE,OAAO,CAAC;SACT,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,yBAAW,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB;IACtC,+GAA+G;IAC/G,OAAO,IAAA,cAAO,EAA8C,kBAAkB,CAAC,CAAC;AAClF,CAAC"}

package/dist/{index.d.ts → commonjs/index.d.ts}

@@ -1,4 +1,5 @@
 export { createHostedZoneBuilder, type HostedZoneBuilderProps, type HostedZoneBuilderResult, type IHostedZoneBuilder, } from "./hosted-zone-builder.js";
+export { type QueryLoggingConfig } from "./query-logging.js";
 export { createARecordBuilder, type ARecordBuilderProps, type ARecordBuilderResult, type IARecordBuilder, } from "./a-record-builder.js";
 export { createAaaaRecordBuilder, type AaaaRecordBuilderProps, type AaaaRecordBuilderResult, type IAaaaRecordBuilder, } from "./aaaa-record-builder.js";
 export { createCnameRecordBuilder, type CnameRecordBuilderProps, type CnameRecordBuilderResult, type ICnameRecordBuilder, } from "./cname-record-builder.js";
@@ -15,5 +16,5 @@ export { createHealthCheckAlarmBuilder, type HealthCheckAlarmBuilderProps, type
 export type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
 export { HEALTH_CHECK_ALARM_DEFAULTS } from "./health-check-alarm-defaults.js";
 export { cloudfrontAliasTarget, apiGatewayAliasTarget, apiGatewayDomainAliasTarget, } from "./alias-targets.js";
-export { HOSTED_ZONE_DEFAULTS, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, HEALTH_CHECK_DEFAULTS, } from "./defaults.js";
+export { HOSTED_ZONE_DEFAULTS, QUERY_LOGGING_LOG_GROUP_NAME_PREFIX, QUERY_LOGGING_RESOURCE_POLICY_NAME, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, HEALTH_CHECK_DEFAULTS, } from "./defaults.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/commonjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,mCAAmC,EACnC,kCAAkC,EAClC,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC"}

package/dist/commonjs/index.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HEALTH_CHECK_DEFAULTS = exports.SVCB_RECORD_DEFAULTS = exports.HTTPS_RECORD_DEFAULTS = exports.DS_RECORD_DEFAULTS = exports.NS_RECORD_DEFAULTS = exports.CAA_RECORD_DEFAULTS = exports.SRV_RECORD_DEFAULTS = exports.MX_RECORD_DEFAULTS = exports.TXT_RECORD_DEFAULTS = exports.CNAME_RECORD_DEFAULTS = exports.AAAA_RECORD_DEFAULTS = exports.A_RECORD_DEFAULTS = exports.QUERY_LOGGING_RESOURCE_POLICY_NAME = exports.QUERY_LOGGING_LOG_GROUP_NAME_PREFIX = exports.HOSTED_ZONE_DEFAULTS = exports.apiGatewayDomainAliasTarget = exports.apiGatewayAliasTarget = exports.cloudfrontAliasTarget = exports.HEALTH_CHECK_ALARM_DEFAULTS = exports.createHealthCheckAlarmBuilder = exports.createHealthCheckBuilder = exports.createSvcbRecordBuilder = exports.createHttpsRecordBuilder = exports.createDsRecordBuilder = exports.createNsRecordBuilder = exports.createCaaRecordBuilder = exports.createSrvRecordBuilder = exports.createMxRecordBuilder = exports.createTxtRecordBuilder = exports.createCnameRecordBuilder = exports.createAaaaRecordBuilder = exports.createARecordBuilder = exports.createHostedZoneBuilder = void 0;
+var hosted_zone_builder_js_1 = require("./hosted-zone-builder.js");
+Object.defineProperty(exports, "createHostedZoneBuilder", { enumerable: true, get: function () { return hosted_zone_builder_js_1.createHostedZoneBuilder; } });
+var a_record_builder_js_1 = require("./a-record-builder.js");
+Object.defineProperty(exports, "createARecordBuilder", { enumerable: true, get: function () { return a_record_builder_js_1.createARecordBuilder; } });
+var aaaa_record_builder_js_1 = require("./aaaa-record-builder.js");
+Object.defineProperty(exports, "createAaaaRecordBuilder", { enumerable: true, get: function () { return aaaa_record_builder_js_1.createAaaaRecordBuilder; } });
+var cname_record_builder_js_1 = require("./cname-record-builder.js");
+Object.defineProperty(exports, "createCnameRecordBuilder", { enumerable: true, get: function () { return cname_record_builder_js_1.createCnameRecordBuilder; } });
+var txt_record_builder_js_1 = require("./txt-record-builder.js");
+Object.defineProperty(exports, "createTxtRecordBuilder", { enumerable: true, get: function () { return txt_record_builder_js_1.createTxtRecordBuilder; } });
+var mx_record_builder_js_1 = require("./mx-record-builder.js");
+Object.defineProperty(exports, "createMxRecordBuilder", { enumerable: true, get: function () { return mx_record_builder_js_1.createMxRecordBuilder; } });
+var srv_record_builder_js_1 = require("./srv-record-builder.js");
+Object.defineProperty(exports, "createSrvRecordBuilder", { enumerable: true, get: function () { return srv_record_builder_js_1.createSrvRecordBuilder; } });
+var caa_record_builder_js_1 = require("./caa-record-builder.js");
+Object.defineProperty(exports, "createCaaRecordBuilder", { enumerable: true, get: function () { return caa_record_builder_js_1.createCaaRecordBuilder; } });
+var ns_record_builder_js_1 = require("./ns-record-builder.js");
+Object.defineProperty(exports, "createNsRecordBuilder", { enumerable: true, get: function () { return ns_record_builder_js_1.createNsRecordBuilder; } });
+var ds_record_builder_js_1 = require("./ds-record-builder.js");
+Object.defineProperty(exports, "createDsRecordBuilder", { enumerable: true, get: function () { return ds_record_builder_js_1.createDsRecordBuilder; } });
+var https_record_builder_js_1 = require("./https-record-builder.js");
+Object.defineProperty(exports, "createHttpsRecordBuilder", { enumerable: true, get: function () { return https_record_builder_js_1.createHttpsRecordBuilder; } });
+var svcb_record_builder_js_1 = require("./svcb-record-builder.js");
+Object.defineProperty(exports, "createSvcbRecordBuilder", { enumerable: true, get: function () { return svcb_record_builder_js_1.createSvcbRecordBuilder; } });
+var health_check_builder_js_1 = require("./health-check-builder.js");
+Object.defineProperty(exports, "createHealthCheckBuilder", { enumerable: true, get: function () { return health_check_builder_js_1.createHealthCheckBuilder; } });
+var health_check_alarm_builder_js_1 = require("./health-check-alarm-builder.js");
+Object.defineProperty(exports, "createHealthCheckAlarmBuilder", { enumerable: true, get: function () { return health_check_alarm_builder_js_1.createHealthCheckAlarmBuilder; } });
+var health_check_alarm_defaults_js_1 = require("./health-check-alarm-defaults.js");
+Object.defineProperty(exports, "HEALTH_CHECK_ALARM_DEFAULTS", { enumerable: true, get: function () { return health_check_alarm_defaults_js_1.HEALTH_CHECK_ALARM_DEFAULTS; } });
+var alias_targets_js_1 = require("./alias-targets.js");
+Object.defineProperty(exports, "cloudfrontAliasTarget", { enumerable: true, get: function () { return alias_targets_js_1.cloudfrontAliasTarget; } });
+Object.defineProperty(exports, "apiGatewayAliasTarget", { enumerable: true, get: function () { return alias_targets_js_1.apiGatewayAliasTarget; } });
+Object.defineProperty(exports, "apiGatewayDomainAliasTarget", { enumerable: true, get: function () { return alias_targets_js_1.apiGatewayDomainAliasTarget; } });
+var defaults_js_1 = require("./defaults.js");
+Object.defineProperty(exports, "HOSTED_ZONE_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.HOSTED_ZONE_DEFAULTS; } });
+Object.defineProperty(exports, "QUERY_LOGGING_LOG_GROUP_NAME_PREFIX", { enumerable: true, get: function () { return defaults_js_1.QUERY_LOGGING_LOG_GROUP_NAME_PREFIX; } });
+Object.defineProperty(exports, "QUERY_LOGGING_RESOURCE_POLICY_NAME", { enumerable: true, get: function () { return defaults_js_1.QUERY_LOGGING_RESOURCE_POLICY_NAME; } });
+Object.defineProperty(exports, "A_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.A_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "AAAA_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.AAAA_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "CNAME_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.CNAME_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "TXT_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.TXT_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "MX_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.MX_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "SRV_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.SRV_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "CAA_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.CAA_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "NS_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.NS_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "DS_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.DS_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "HTTPS_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.HTTPS_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "SVCB_RECORD_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.SVCB_RECORD_DEFAULTS; } });
+Object.defineProperty(exports, "HEALTH_CHECK_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.HEALTH_CHECK_DEFAULTS; } });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,mEAKkC;AAJhC,iIAAA,uBAAuB,OAAA;AAMzB,6DAK+B;AAJ7B,2HAAA,oBAAoB,OAAA;AAKtB,mEAKkC;AAJhC,iIAAA,uBAAuB,OAAA;AAKzB,qEAKmC;AAJjC,mIAAA,wBAAwB,OAAA;AAK1B,iEAKiC;AAJ/B,+HAAA,sBAAsB,OAAA;AAKxB,+DAKgC;AAJ9B,6HAAA,qBAAqB,OAAA;AAKvB,iEAKiC;AAJ/B,+HAAA,sBAAsB,OAAA;AAKxB,iEAKiC;AAJ/B,+HAAA,sBAAsB,OAAA;AAKxB,+DAKgC;AAJ9B,6HAAA,qBAAqB,OAAA;AAKvB,+DAKgC;AAJ9B,6HAAA,qBAAqB,OAAA;AAKvB,qEAKmC;AAJjC,mIAAA,wBAAwB,OAAA;AAK1B,mEAKkC;AAJhC,iIAAA,uBAAuB,OAAA;AAKzB,qEAKmC;AAJjC,mIAAA,wBAAwB,OAAA;AAK1B,iFAKyC;AAJvC,8IAAA,6BAA6B,OAAA;AAM/B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,uDAI4B;AAH1B,yHAAA,qBAAqB,OAAA;AACrB,yHAAA,qBAAqB,OAAA;AACrB,+HAAA,2BAA2B,OAAA;AAE7B,6CAgBuB;AAfrB,mHAAA,oBAAoB,OAAA;AACpB,kIAAA,mCAAmC,OAAA;AACnC,iIAAA,kCAAkC,OAAA;AAClC,gHAAA,iBAAiB,OAAA;AACjB,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA;AACrB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,kHAAA,mBAAmB,OAAA;AACnB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAClB,iHAAA,kBAAkB,OAAA;AAClB,oHAAA,qBAAqB,OAAA;AACrB,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA"}