@composurecdk/s3 0.1.2 → 0.1.3

package/dist/bucket-deployment-builder.d.ts

@@ -1,30 +1,29 @@
-import { BucketDeployment, type BucketDeploymentProps, type ISource } from "aws-cdk-lib/aws-s3-deployment";
+import { BucketDeployment } from "aws-cdk-lib/aws-s3-deployment";
 import { type IBucket } from "aws-cdk-lib/aws-s3";
 import { type IDistribution } from "aws-cdk-lib/aws-cloudfront";
+import type { LogGroup } from "aws-cdk-lib/aws-logs";
 import { type IConstruct } from "constructs";
 import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
-/**
- * Configuration properties for the S3 bucket deployment builder.
- *
- * Extends the CDK {@link BucketDeploymentProps} but replaces
- * `destinationBucket` and `distribution` with builder-managed fields that
- * support {@link Resolvable} for cross-component wiring via {@link ref}.
- *
- * `sources` is set via the builder's fluent API rather than the constructor.
- */
-export interface BucketDeploymentBuilderProps extends Omit<BucketDeploymentProps, "sources" | "destinationBucket" | "distribution"> {
-    /**
-     * The sources from which to deploy content. Typically created with
-     * `Source.asset("./path")` or `Source.data("key", "content")`.
-     */
-    sources?: ISource[];
-}
+import { type BucketDeploymentBuilderProps } from "./bucket-deployment-props.js";
 /**
  * The build output of a {@link IBucketDeploymentBuilder}.
  */
 export interface BucketDeploymentBuilderResult {
     /** The CDK BucketDeployment construct created by the builder. */
     deployment: BucketDeployment;
+    /**
+     * The CloudWatch LogGroup created for the deployment's backing Lambda,
+     * or `undefined` if the user provided their own via the `logGroup`
+     * property.
+     *
+     * By default the builder creates a managed LogGroup using
+     * {@link createLogGroupBuilder} with well-architected defaults (retention
+     * policy, removal policy). This prevents the backing Lambda from
+     * creating an auto-managed log group with infinite retention.
+     *
+     * @see https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps.html#loggroup
+     */
+    logGroup?: LogGroup;
 }
 /**
  * A fluent builder for configuring and creating an S3 BucketDeployment.

package/dist/bucket-deployment-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bucket-deployment-builder.d.ts","sourceRoot":"","sources":["../src/bucket-deployment-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EACb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;;;;GAQG;AACH,MAAM,WAAW,4BACf,SAAQ,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,mBAAmB,GAAG,cAAc,CAAC;IACrF;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iEAAiE;IACjE,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAC7C,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;AAEF,cAAM,uBAAwB,YAAW,SAAS,CAAC,6BAA6B,CAAC;IAC/E,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAM;IAClD,OAAO,CAAC,kBAAkB,CAAC,CAAsB;IACjD,OAAO,CAAC,aAAa,CAAC,CAA4B;IAElD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI;IAKpD;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI;IAK3D,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,6BAA6B;CA8CjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,6BAA6B,IAAI,wBAAwB,CAExE"}
+{"version":3,"file":"bucket-deployment-builder.d.ts","sourceRoot":"","sources":["../src/bucket-deployment-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA8B,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,KAAK,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iEAAiE;IACjE,UAAU,EAAE,gBAAgB,CAAC;IAE7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAC7C,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;AAEF,cAAM,uBAAwB,YAAW,SAAS,CAAC,6BAA6B,CAAC;IAC/E,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAM;IAClD,OAAO,CAAC,kBAAkB,CAAC,CAAsB;IACjD,OAAO,CAAC,aAAa,CAAC,CAA4B;IAElD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI;IAKpD;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI;IAK3D,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,6BAA6B;CAiDjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,6BAA6B,IAAI,wBAAwB,CAExE"}

package/dist/bucket-deployment-builder.js

@@ -1,6 +1,7 @@
-import { BucketDeployment, } from "aws-cdk-lib/aws-s3-deployment";
+import { BucketDeployment } from "aws-cdk-lib/aws-s3-deployment";
 import { Builder, resolve, } from "@composurecdk/core";
-import { BUCKET_DEPLOYMENT_DEFAULTS } from "./bucket-deployment-defaults.js";
+import { createLogGroupBuilder } from "@composurecdk/logs";
+import { effectiveDefaults } from "./bucket-deployment-defaults.js";
 class BucketDeploymentBuilder {
     props = {};
     _destinationBucket;
@@ -46,17 +47,18 @@ class BucketDeploymentBuilder {
             throw new Error(`BucketDeploymentBuilder "${id}" requires at least one source. ` +
                 `Call .sources() with an array of ISource.`);
         }
-        const resolvedDistribution = this._distribution
-            ? resolve(this._distribution, ctx)
-            : undefined;
-        // Only apply distributionPaths default when a distribution is present;
-        // CDK throws if distributionPaths is set without a distribution.
-        const { distributionPaths: _distPaths, ...defaultsWithoutPaths } = BUCKET_DEPLOYMENT_DEFAULTS;
-        const effectiveDefaults = resolvedDistribution
-            ? BUCKET_DEPLOYMENT_DEFAULTS
-            : defaultsWithoutPaths;
+        const resolvedDistribution = this._distribution ? resolve(this._distribution, ctx) : undefined;
+        // Auto-create a managed LogGroup for the deployment's backing Lambda
+        // unless the user supplied their own, matching the Lambda builder pattern.
+        let logGroup;
+        let logGroupProps = {};
+        if (!deployProps.logGroup) {
+            logGroup = createLogGroupBuilder().build(scope, `${id}LogGroup`).logGroup;
+            logGroupProps = { logGroup };
+        }
         const mergedProps = {
-            ...effectiveDefaults,
+            ...effectiveDefaults(!!resolvedDistribution),
+            ...logGroupProps,
             ...deployProps,
             ...(resolvedDistribution ? { distribution: resolvedDistribution } : {}),
             sources,
@@ -64,6 +66,7 @@ class BucketDeploymentBuilder {
         };
         return {
             deployment: new BucketDeployment(scope, id, mergedProps),
+            logGroup,
         };
     }
 }

package/dist/bucket-deployment-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"bucket-deployment-builder.js","sourceRoot":"","sources":["../src/bucket-deployment-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAGjB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAuD7E,MAAM,uBAAuB;IAC3B,KAAK,GAA0C,EAAE,CAAC;IAC1C,kBAAkB,CAAuB;IACzC,aAAa,CAA6B;IAElD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,MAA2B;QAC3C,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAuC;QAClD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB;YAC5C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,mCAAmC;gBAC/D,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAE/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,kCAAkC;gBAC9D,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,aAAa;YAC7C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC;YAClC,CAAC,CAAC,SAAS,CAAC;QAEd,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,oBAAoB,EAAE,GAAG,0BAA0B,CAAC;QAC9F,MAAM,iBAAiB,GAAG,oBAAoB;YAC5C,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,oBAAoB,CAAC;QAEzB,MAAM,WAAW,GAAG;YAClB,GAAG,iBAAiB;YACpB,GAAG,WAAW;YACd,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO;YACP,iBAAiB,EAAE,cAAc;SACT,CAAC;QAE3B,OAAO;YACL,UAAU,EAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,OAAO,CAAwD,uBAAuB,CAAC,CAAC;AACjG,CAAC"}
+{"version":3,"file":"bucket-deployment-builder.js","sourceRoot":"","sources":["../src/bucket-deployment-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA8B,MAAM,+BAA+B,CAAC;AAK7F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAoDpE,MAAM,uBAAuB;IAC3B,KAAK,GAA0C,EAAE,CAAC;IAC1C,kBAAkB,CAAuB;IACzC,aAAa,CAA6B;IAElD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,MAA2B;QAC3C,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAuC;QAClD,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB;YAC5C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,mCAAmC;gBAC/D,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAE/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,kCAAkC;gBAC9D,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/F,qEAAqE;QACrE,2EAA2E;QAC3E,IAAI,QAA8B,CAAC;QACnC,IAAI,aAAa,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,QAAQ,GAAG,qBAAqB,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC;YAC1E,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC5C,GAAG,aAAa;YAChB,GAAG,WAAW;YACd,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO;YACP,iBAAiB,EAAE,cAAc;SACT,CAAC;QAE3B,OAAO;YACL,UAAU,EAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC;YACxD,QAAQ;SACT,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,OAAO,CAAwD,uBAAuB,CAAC,CAAC;AACjG,CAAC"}

package/dist/bucket-deployment-defaults.d.ts

@@ -1,8 +1,51 @@
-import type { BucketDeploymentBuilderProps } from "./bucket-deployment-builder.js";
+import type { BucketDeploymentBuilderProps } from "./bucket-deployment-props.js";
 /**
- * Sensible defaults applied to every S3 BucketDeployment built with
- * {@link createBucketDeploymentBuilder}. Each property can be individually
- * overridden via the builder's fluent API.
+ * Secure, AWS-recommended defaults applied to every S3 BucketDeployment
+ * built with {@link createBucketDeploymentBuilder}. Each property can be
+ * individually overridden via the builder's fluent API.
  */
-export declare const BUCKET_DEPLOYMENT_DEFAULTS: Partial<BucketDeploymentBuilderProps>;
+export declare const BUCKET_DEPLOYMENT_DEFAULTS: {
+    sources?: import("aws-cdk-lib/aws-s3-deployment").ISource[];
+    accessControl?: import("aws-cdk-lib/aws-s3").BucketAccessControl;
+    destinationKeyPrefix?: string;
+    extract?: boolean;
+    exclude?: string[];
+    include?: string[];
+    prune?: boolean;
+    retainOnDelete?: boolean;
+    distributionPaths?: string[];
+    waitForDistributionInvalidation?: boolean;
+    logRetention?: import("aws-cdk-lib/aws-logs").RetentionDays;
+    logGroup?: import("aws-cdk-lib/aws-logs").ILogGroupRef;
+    memoryLimit?: number;
+    ephemeralStorageSize?: import("aws-cdk-lib").Size;
+    useEfs?: boolean;
+    role?: import("aws-cdk-lib/aws-iam").IRole;
+    metadata?: {
+        [key: string]: string;
+    };
+    cacheControl?: import("aws-cdk-lib/aws-s3-deployment").CacheControl[];
+    contentDisposition?: string;
+    contentEncoding?: string;
+    contentLanguage?: string;
+    contentType?: string;
+    expires?: import("aws-cdk-lib").Expiration;
+    serverSideEncryption?: import("aws-cdk-lib/aws-s3-deployment").ServerSideEncryption;
+    storageClass?: import("aws-cdk-lib/aws-s3-deployment").StorageClass;
+    websiteRedirectLocation?: string;
+    serverSideEncryptionAwsKmsKeyId?: string;
+    serverSideEncryptionCustomerAlgorithm?: string;
+    vpc?: import("aws-cdk-lib/aws-ec2").IVpc;
+    vpcSubnets?: import("aws-cdk-lib/aws-ec2").SubnetSelection;
+    signContent?: boolean;
+    outputObjectKeys?: boolean;
+    securityGroups?: import("aws-cdk-lib/aws-ec2").ISecurityGroup[];
+};
+/**
+ * Returns the appropriate defaults based on whether a CloudFront
+ * distribution is present. CDK throws if `distributionPaths` is set
+ * without a distribution, so distribution-specific defaults are only
+ * included when applicable.
+ */
+export declare function effectiveDefaults(hasDistribution: boolean): Partial<BucketDeploymentBuilderProps>;
 //# sourceMappingURL=bucket-deployment-defaults.d.ts.map

package/dist/bucket-deployment-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bucket-deployment-defaults.d.ts","sourceRoot":"","sources":["../src/bucket-deployment-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAEnF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,OAAO,CAAC,4BAA4B,CAc5E,CAAC"}
+{"version":3,"file":"bucket-deployment-defaults.d.ts","sourceRoot":"","sources":["../src/bucket-deployment-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAmDjF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGtC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAEjG"}

package/dist/bucket-deployment-defaults.js

@@ -1,20 +1,64 @@
 /**
- * Sensible defaults applied to every S3 BucketDeployment built with
- * {@link createBucketDeploymentBuilder}. Each property can be individually
- * overridden via the builder's fluent API.
+ * Defaults that apply regardless of whether a CloudFront distribution is
+ * present. Split from distribution-specific defaults so the builder can
+ * merge without runtime filtering.
  */
-export const BUCKET_DEPLOYMENT_DEFAULTS = {
-    /**
-     * Invalidate all paths by default so that deployed content is immediately
-     * visible through CloudFront.
-     * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html
-     */
-    distributionPaths: ["/*"],
+const BASE_DEFAULTS = {
     /**
      * Remove files from the destination bucket that are not present in the
-     * source, keeping the bucket in sync with the deployed assets.
-     * @see https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps.html#prune
+     * source, keeping the bucket in sync with the deployed assets and
+     * preventing stale content from being served.
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/operational-excellence-pillar/ops_evolve_ops_learned_from_experience.html
      */
     prune: true,
+    /**
+     * Allocate 256 MiB to the deployment Lambda. The CDK default of 128 MiB
+     * is insufficient for deployments with more than a handful of files and
+     * can cause silent failures or timeouts.
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/rel_withstand_component_failures_avoid_hard_coded_limits.html
+     * @see https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3_deployment-readme.html#memory-limit
+     */
+    memoryLimit: 256,
+    /**
+     * Do not retain deployed files when the stack is deleted. This aligns
+     * with `prune: true` semantics — the deployment keeps the bucket in
+     * sync with the source, so retaining stale files on deletion is
+     * inconsistent. The destination bucket's own removal policy governs
+     * whether the bucket itself is retained.
+     * @see https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps.html#retainondelete
+     */
+    retainOnDelete: false,
+};
+/**
+ * Defaults that only apply when a CloudFront distribution is configured.
+ * CDK throws if `distributionPaths` is set without a distribution.
+ */
+const DISTRIBUTION_DEFAULTS = {
+    /**
+     * Invalidate all paths by default so that deployed content is immediately
+     * visible through CloudFront. Uses a wildcard path which counts as a
+     * single invalidation path. For deployments that only change a subset of
+     * files, override with specific paths to reduce origin fetches.
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/rel_withstand_component_failures_static_stability.html
+     */
+    distributionPaths: ["/*"],
 };
+/**
+ * Secure, AWS-recommended defaults applied to every S3 BucketDeployment
+ * built with {@link createBucketDeploymentBuilder}. Each property can be
+ * individually overridden via the builder's fluent API.
+ */
+export const BUCKET_DEPLOYMENT_DEFAULTS = {
+    ...BASE_DEFAULTS,
+    ...DISTRIBUTION_DEFAULTS,
+};
+/**
+ * Returns the appropriate defaults based on whether a CloudFront
+ * distribution is present. CDK throws if `distributionPaths` is set
+ * without a distribution, so distribution-specific defaults are only
+ * included when applicable.
+ */
+export function effectiveDefaults(hasDistribution) {
+    return hasDistribution ? { ...BASE_DEFAULTS, ...DISTRIBUTION_DEFAULTS } : BASE_DEFAULTS;
+}
 //# sourceMappingURL=bucket-deployment-defaults.js.map

package/dist/bucket-deployment-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"bucket-deployment-defaults.js","sourceRoot":"","sources":["../src/bucket-deployment-defaults.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA0C;IAC/E;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,IAAI,CAAC;IAEzB;;;;OAIG;IACH,KAAK,EAAE,IAAI;CACZ,CAAC"}
+{"version":3,"file":"bucket-deployment-defaults.js","sourceRoot":"","sources":["../src/bucket-deployment-defaults.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,aAAa,GAA0C;IAC3D;;;;;OAKG;IACH,KAAK,EAAE,IAAI;IAEX;;;;;;OAMG;IACH,WAAW,EAAE,GAAG;IAEhB;;;;;;;OAOG;IACH,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,qBAAqB,GAA0C;IACnE;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,IAAI,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,GAAG,aAAa;IAChB,GAAG,qBAAqB;CACzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,eAAwB;IACxD,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;AAC1F,CAAC"}

package/dist/bucket-deployment-props.d.ts

@@ -0,0 +1,18 @@
+import type { BucketDeploymentProps, ISource } from "aws-cdk-lib/aws-s3-deployment";
+/**
+ * Configuration properties for the S3 bucket deployment builder.
+ *
+ * Extends the CDK {@link BucketDeploymentProps} but replaces
+ * `destinationBucket` and `distribution` with builder-managed fields that
+ * support {@link Resolvable} for cross-component wiring via {@link ref}.
+ *
+ * `sources` is set via the builder's fluent API rather than the constructor.
+ */
+export interface BucketDeploymentBuilderProps extends Omit<BucketDeploymentProps, "sources" | "destinationBucket" | "distribution"> {
+    /**
+     * The sources from which to deploy content. Typically created with
+     * `Source.asset("./path")` or `Source.data("key", "content")`.
+     */
+    sources?: ISource[];
+}
+//# sourceMappingURL=bucket-deployment-props.d.ts.map

package/dist/bucket-deployment-props.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-deployment-props.d.ts","sourceRoot":"","sources":["../src/bucket-deployment-props.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA6B,SAAQ,IAAI,CACxD,qBAAqB,EACrB,SAAS,GAAG,mBAAmB,GAAG,cAAc,CACjD;IACC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;CACrB"}

package/dist/bucket-deployment-props.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bucket-deployment-props.js.map

package/dist/bucket-deployment-props.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-deployment-props.js","sourceRoot":"","sources":["../src/bucket-deployment-props.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -1,3 +1,5 @@
 export { createBucketBuilder, type BucketBuilderResult, type IBucketBuilder, } from "./bucket-builder.js";
 export { BUCKET_DEFAULTS } from "./defaults.js";
+export { createBucketDeploymentBuilder, type BucketDeploymentBuilderResult, type IBucketDeploymentBuilder, } from "./bucket-deployment-builder.js";
+export { BUCKET_DEPLOYMENT_DEFAULTS } from "./bucket-deployment-defaults.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -1,3 +1,5 @@
 export { createBucketBuilder, } from "./bucket-builder.js";
 export { BUCKET_DEFAULTS } from "./defaults.js";
+export { createBucketDeploymentBuilder, } from "./bucket-deployment-builder.js";
+export { BUCKET_DEPLOYMENT_DEFAULTS } from "./bucket-deployment-defaults.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,6BAA6B,GAG9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@composurecdk/s3",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Composable S3 bucket builder with well-architected defaults",
   "repository": {
     "type": "git",
@@ -36,6 +36,7 @@
   "type": "module",
   "peerDependencies": {
     "@composurecdk/core": "^0.1.0",
+    "@composurecdk/logs": "^0.1.0",
     "aws-cdk-lib": "^2.0.0",
     "constructs": "^10.0.0"
   },