@composurecdk/xray 0.10.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jason Duffett
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,22 @@
+# @composurecdk/xray
+
+AWS X-Ray for [ComposureCDK](../../README.md). It enables [CloudWatch Transaction Search](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Transaction-Search.html), which sends X-Ray spans to CloudWatch Logs so they can be searched and analysed. Amazon Bedrock AgentCore online evaluation needs it.
+
+```ts
+import { createTransactionSearchBuilder } from "@composurecdk/xray";
+
+createTransactionSearchBuilder().build(stack, "TransactionSearch");
+```
+
+Transaction Search is one setting for the whole account and Region, so build it in exactly one stack:
+
+- If it is already on, the deploy fails with `AlreadyExists` and rolls back. If it was enabled by hand, turn it off first with `aws xray update-trace-segment-destination --destination XRay`.
+- Deploying waits several minutes for it to become active.
+- Destroying the stack turns it off, including for other stacks that rely on it.
+
+The builder creates:
+
+- the `AWS::XRay::TransactionSearchConfig`, indexing 1% of spans as trace summaries by default. Raise it with `.indexingPercentage(...)`.
+- a CloudWatch Logs resource policy that lets X-Ray write to `aws/spans` and `/aws/application-signals/data`. The policy is conditioned on this account's `aws:SourceAccount` and `aws:SourceArn`.
+
+Spans are billed at CloudWatch Logs ingestion rates. See [CloudWatch pricing](https://aws.amazon.com/cloudwatch/pricing/).

package/dist/commonjs/defaults.d.ts

@@ -0,0 +1,7 @@
+import type { CfnTransactionSearchConfigProps } from "aws-cdk-lib/aws-xray";
+/**
+ * Defaults applied by {@link createTransactionSearchBuilder}. Each can be
+ * overridden through the builder.
+ */
+export declare const TRANSACTION_SEARCH_DEFAULTS: Partial<CfnTransactionSearchConfigProps>;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/commonjs/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,+BAA+B,CAOhF,CAAC"}

package/dist/commonjs/defaults.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRANSACTION_SEARCH_DEFAULTS = void 0;
+/**
+ * Defaults applied by {@link createTransactionSearchBuilder}. Each can be
+ * overridden through the builder.
+ */
+exports.TRANSACTION_SEARCH_DEFAULTS = {
+    /**
+     * Index 1% of spans as trace summaries: free, and AWS's default. Every span
+     * is still ingested and searchable.
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+     */
+    indexingPercentage: 1,
+};
+//# sourceMappingURL=defaults.js.map

package/dist/commonjs/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACU,QAAA,2BAA2B,GAA6C;IACnF;;;;OAIG;IACH,kBAAkB,EAAE,CAAC;CACtB,CAAC"}

package/dist/commonjs/index.d.ts

@@ -0,0 +1,3 @@
+export { TRANSACTION_SEARCH_DEFAULTS } from "./defaults.js";
+export { createTransactionSearchBuilder, type ITransactionSearchBuilder, type TransactionSearchBuilderProps, type TransactionSearchBuilderResult, } from "./transaction-search-builder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/commonjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,8BAA8B,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,GACpC,MAAM,iCAAiC,CAAC"}

package/dist/commonjs/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTransactionSearchBuilder = exports.TRANSACTION_SEARCH_DEFAULTS = void 0;
+var defaults_js_1 = require("./defaults.js");
+Object.defineProperty(exports, "TRANSACTION_SEARCH_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.TRANSACTION_SEARCH_DEFAULTS; } });
+var transaction_search_builder_js_1 = require("./transaction-search-builder.js");
+Object.defineProperty(exports, "createTransactionSearchBuilder", { enumerable: true, get: function () { return transaction_search_builder_js_1.createTransactionSearchBuilder; } });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,6CAA4D;AAAnD,0HAAA,2BAA2B,OAAA;AACpC,iFAKyC;AAJvC,+IAAA,8BAA8B,OAAA"}

package/dist/commonjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/commonjs/transaction-search-builder.d.ts

@@ -0,0 +1,36 @@
+import { ResourcePolicy } from "aws-cdk-lib/aws-logs";
+import { CfnTransactionSearchConfig, type CfnTransactionSearchConfigProps } from "aws-cdk-lib/aws-xray";
+import type { IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle } from "@composurecdk/core";
+/** Configuration properties for {@link createTransactionSearchBuilder}. */
+export type TransactionSearchBuilderProps = CfnTransactionSearchConfigProps;
+/** The build output of an {@link ITransactionSearchBuilder}. */
+export interface TransactionSearchBuilderResult {
+    transactionSearch: CfnTransactionSearchConfig;
+    /** Lets X-Ray write spans to CloudWatch Logs. */
+    resourcePolicy: ResourcePolicy;
+}
+/**
+ * A fluent builder that enables CloudWatch Transaction Search.
+ *
+ * @see {@link createTransactionSearchBuilder}
+ */
+export type ITransactionSearchBuilder = IBuilder<TransactionSearchBuilderProps, TransactionSearchBuilder>;
+declare class TransactionSearchBuilder implements Lifecycle<TransactionSearchBuilderResult> {
+    props: Partial<TransactionSearchBuilderProps>;
+    build(scope: IConstruct, id: string): TransactionSearchBuilderResult;
+}
+/**
+ * Creates a builder that enables CloudWatch Transaction Search for the account
+ * and Region. Build it in exactly one stack.
+ *
+ * @example
+ * ```ts
+ * createTransactionSearchBuilder().build(stack, "TransactionSearch");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+ */
+export declare function createTransactionSearchBuilder(): ITransactionSearchBuilder;
+export {};
+//# sourceMappingURL=transaction-search-builder.d.ts.map

package/dist/commonjs/transaction-search-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-search-builder.d.ts","sourceRoot":"","sources":["../../src/transaction-search-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,0BAA0B,EAC1B,KAAK,+BAA+B,EACrC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAW,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG5E,2EAA2E;AAC3E,MAAM,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE5E,gEAAgE;AAChE,MAAM,WAAW,8BAA8B;IAC7C,iBAAiB,EAAE,0BAA0B,CAAC;IAC9C,iDAAiD;IACjD,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;GAIG;AAEH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,6BAA6B,EAC7B,wBAAwB,CACzB,CAAC;AAKF,cAAM,wBAAyB,YAAW,SAAS,CAAC,8BAA8B,CAAC;IACjF,KAAK,EAAE,OAAO,CAAC,6BAA6B,CAAC,CAAM;IAEnD,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,8BAA8B;CAoCrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,IAAI,yBAAyB,CAG1E"}

package/dist/commonjs/transaction-search-builder.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTransactionSearchBuilder = createTransactionSearchBuilder;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_logs_1 = require("aws-cdk-lib/aws-logs");
+const aws_xray_1 = require("aws-cdk-lib/aws-xray");
+const core_1 = require("@composurecdk/core");
+const defaults_js_1 = require("./defaults.js");
+/** The log groups Transaction Search writes to. */
+const SPAN_LOG_GROUPS = ["aws/spans", "/aws/application-signals/data"];
+class TransactionSearchBuilder {
+    props = {};
+    build(scope, id) {
+        const stack = aws_cdk_lib_1.Stack.of(scope);
+        const resourcePolicy = new aws_logs_1.ResourcePolicy(scope, `${id}LogsPolicy`, {
+            policyStatements: [
+                new aws_iam_1.PolicyStatement({
+                    sid: "TransactionSearchXRayAccess",
+                    principals: [new aws_iam_1.ServicePrincipal("xray.amazonaws.com")],
+                    actions: ["logs:PutLogEvents"],
+                    resources: SPAN_LOG_GROUPS.map((name) => stack.formatArn({
+                        service: "logs",
+                        resource: "log-group",
+                        resourceName: `${name}:*`,
+                        arnFormat: aws_cdk_lib_1.ArnFormat.COLON_RESOURCE_NAME,
+                    })),
+                    conditions: {
+                        ArnLike: {
+                            "aws:SourceArn": stack.formatArn({
+                                service: "xray",
+                                resource: "*",
+                                arnFormat: aws_cdk_lib_1.ArnFormat.NO_RESOURCE_NAME,
+                            }),
+                        },
+                        StringEquals: { "aws:SourceAccount": stack.account },
+                    },
+                }),
+            ],
+        });
+        const transactionSearch = new aws_xray_1.CfnTransactionSearchConfig(scope, id, {
+            ...defaults_js_1.TRANSACTION_SEARCH_DEFAULTS,
+            ...this.props,
+        });
+        transactionSearch.node.addDependency(resourcePolicy);
+        return { transactionSearch, resourcePolicy };
+    }
+}
+/**
+ * Creates a builder that enables CloudWatch Transaction Search for the account
+ * and Region. Build it in exactly one stack.
+ *
+ * @example
+ * ```ts
+ * createTransactionSearchBuilder().build(stack, "TransactionSearch");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+ */
+function createTransactionSearchBuilder() {
+    // eslint-disable-next-line composurecdk/builder-must-be-tagged -- AWS::XRay::TransactionSearchConfig has no Tags property
+    return (0, core_1.Builder)(TransactionSearchBuilder);
+}
+//# sourceMappingURL=transaction-search-builder.js.map

package/dist/commonjs/transaction-search-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-search-builder.js","sourceRoot":"","sources":["../../src/transaction-search-builder.ts"],"names":[],"mappings":";;AAuFA,wEAGC;AA1FD,6CAA+C;AAC/C,iDAAwE;AACxE,mDAAsD;AACtD,mDAG8B;AAE9B,6CAA4E;AAC5E,+CAA4D;AAuB5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;AAEvE,MAAM,wBAAwB;IAC5B,KAAK,GAA2C,EAAE,CAAC;IAEnD,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,MAAM,KAAK,GAAG,mBAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,cAAc,GAAG,IAAI,yBAAc,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YAClE,gBAAgB,EAAE;gBAChB,IAAI,yBAAe,CAAC;oBAClB,GAAG,EAAE,6BAA6B;oBAClC,UAAU,EAAE,CAAC,IAAI,0BAAgB,CAAC,oBAAoB,CAAC,CAAC;oBACxD,OAAO,EAAE,CAAC,mBAAmB,CAAC;oBAC9B,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,KAAK,CAAC,SAAS,CAAC;wBACd,OAAO,EAAE,MAAM;wBACf,QAAQ,EAAE,WAAW;wBACrB,YAAY,EAAE,GAAG,IAAI,IAAI;wBACzB,SAAS,EAAE,uBAAS,CAAC,mBAAmB;qBACzC,CAAC,CACH;oBACD,UAAU,EAAE;wBACV,OAAO,EAAE;4BACP,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC;gCAC/B,OAAO,EAAE,MAAM;gCACf,QAAQ,EAAE,GAAG;gCACb,SAAS,EAAE,uBAAS,CAAC,gBAAgB;6BACtC,CAAC;yBACH;wBACD,YAAY,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE;qBACrD;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,IAAI,qCAA0B,CAAC,KAAK,EAAE,EAAE,EAAE;YAClE,GAAG,yCAA2B;YAC9B,GAAG,IAAI,CAAC,KAAK;SACd,CAAC,CAAC;QACH,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACrD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,SAAgB,8BAA8B;IAC5C,0HAA0H;IAC1H,OAAO,IAAA,cAAO,EAA0D,wBAAwB,CAAC,CAAC;AACpG,CAAC"}

package/dist/esm/defaults.d.ts

@@ -0,0 +1,7 @@
+import type { CfnTransactionSearchConfigProps } from "aws-cdk-lib/aws-xray";
+/**
+ * Defaults applied by {@link createTransactionSearchBuilder}. Each can be
+ * overridden through the builder.
+ */
+export declare const TRANSACTION_SEARCH_DEFAULTS: Partial<CfnTransactionSearchConfigProps>;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/esm/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,+BAA+B,CAOhF,CAAC"}

package/dist/esm/defaults.js

@@ -0,0 +1,13 @@
+/**
+ * Defaults applied by {@link createTransactionSearchBuilder}. Each can be
+ * overridden through the builder.
+ */
+export const TRANSACTION_SEARCH_DEFAULTS = {
+    /**
+     * Index 1% of spans as trace summaries: free, and AWS's default. Every span
+     * is still ingested and searchable.
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+     */
+    indexingPercentage: 1,
+};
+//# sourceMappingURL=defaults.js.map

package/dist/esm/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA6C;IACnF;;;;OAIG;IACH,kBAAkB,EAAE,CAAC;CACtB,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,3 @@
+export { TRANSACTION_SEARCH_DEFAULTS } from "./defaults.js";
+export { createTransactionSearchBuilder, type ITransactionSearchBuilder, type TransactionSearchBuilderProps, type TransactionSearchBuilderResult, } from "./transaction-search-builder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,8BAA8B,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,GACpC,MAAM,iCAAiC,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,3 @@
+export { TRANSACTION_SEARCH_DEFAULTS } from "./defaults.js";
+export { createTransactionSearchBuilder, } from "./transaction-search-builder.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,8BAA8B,GAI/B,MAAM,iCAAiC,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/dist/esm/transaction-search-builder.d.ts

@@ -0,0 +1,36 @@
+import { ResourcePolicy } from "aws-cdk-lib/aws-logs";
+import { CfnTransactionSearchConfig, type CfnTransactionSearchConfigProps } from "aws-cdk-lib/aws-xray";
+import type { IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle } from "@composurecdk/core";
+/** Configuration properties for {@link createTransactionSearchBuilder}. */
+export type TransactionSearchBuilderProps = CfnTransactionSearchConfigProps;
+/** The build output of an {@link ITransactionSearchBuilder}. */
+export interface TransactionSearchBuilderResult {
+    transactionSearch: CfnTransactionSearchConfig;
+    /** Lets X-Ray write spans to CloudWatch Logs. */
+    resourcePolicy: ResourcePolicy;
+}
+/**
+ * A fluent builder that enables CloudWatch Transaction Search.
+ *
+ * @see {@link createTransactionSearchBuilder}
+ */
+export type ITransactionSearchBuilder = IBuilder<TransactionSearchBuilderProps, TransactionSearchBuilder>;
+declare class TransactionSearchBuilder implements Lifecycle<TransactionSearchBuilderResult> {
+    props: Partial<TransactionSearchBuilderProps>;
+    build(scope: IConstruct, id: string): TransactionSearchBuilderResult;
+}
+/**
+ * Creates a builder that enables CloudWatch Transaction Search for the account
+ * and Region. Build it in exactly one stack.
+ *
+ * @example
+ * ```ts
+ * createTransactionSearchBuilder().build(stack, "TransactionSearch");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+ */
+export declare function createTransactionSearchBuilder(): ITransactionSearchBuilder;
+export {};
+//# sourceMappingURL=transaction-search-builder.d.ts.map

package/dist/esm/transaction-search-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-search-builder.d.ts","sourceRoot":"","sources":["../../src/transaction-search-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,0BAA0B,EAC1B,KAAK,+BAA+B,EACrC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAW,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG5E,2EAA2E;AAC3E,MAAM,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE5E,gEAAgE;AAChE,MAAM,WAAW,8BAA8B;IAC7C,iBAAiB,EAAE,0BAA0B,CAAC;IAC9C,iDAAiD;IACjD,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;GAIG;AAEH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,6BAA6B,EAC7B,wBAAwB,CACzB,CAAC;AAKF,cAAM,wBAAyB,YAAW,SAAS,CAAC,8BAA8B,CAAC;IACjF,KAAK,EAAE,OAAO,CAAC,6BAA6B,CAAC,CAAM;IAEnD,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,8BAA8B;CAoCrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,IAAI,yBAAyB,CAG1E"}

package/dist/esm/transaction-search-builder.js

@@ -0,0 +1,61 @@
+import { ArnFormat, Stack } from "aws-cdk-lib";
+import { PolicyStatement, ServicePrincipal } from "aws-cdk-lib/aws-iam";
+import { ResourcePolicy } from "aws-cdk-lib/aws-logs";
+import { CfnTransactionSearchConfig, } from "aws-cdk-lib/aws-xray";
+import { Builder } from "@composurecdk/core";
+import { TRANSACTION_SEARCH_DEFAULTS } from "./defaults.js";
+/** The log groups Transaction Search writes to. */
+const SPAN_LOG_GROUPS = ["aws/spans", "/aws/application-signals/data"];
+class TransactionSearchBuilder {
+    props = {};
+    build(scope, id) {
+        const stack = Stack.of(scope);
+        const resourcePolicy = new ResourcePolicy(scope, `${id}LogsPolicy`, {
+            policyStatements: [
+                new PolicyStatement({
+                    sid: "TransactionSearchXRayAccess",
+                    principals: [new ServicePrincipal("xray.amazonaws.com")],
+                    actions: ["logs:PutLogEvents"],
+                    resources: SPAN_LOG_GROUPS.map((name) => stack.formatArn({
+                        service: "logs",
+                        resource: "log-group",
+                        resourceName: `${name}:*`,
+                        arnFormat: ArnFormat.COLON_RESOURCE_NAME,
+                    })),
+                    conditions: {
+                        ArnLike: {
+                            "aws:SourceArn": stack.formatArn({
+                                service: "xray",
+                                resource: "*",
+                                arnFormat: ArnFormat.NO_RESOURCE_NAME,
+                            }),
+                        },
+                        StringEquals: { "aws:SourceAccount": stack.account },
+                    },
+                }),
+            ],
+        });
+        const transactionSearch = new CfnTransactionSearchConfig(scope, id, {
+            ...TRANSACTION_SEARCH_DEFAULTS,
+            ...this.props,
+        });
+        transactionSearch.node.addDependency(resourcePolicy);
+        return { transactionSearch, resourcePolicy };
+    }
+}
+/**
+ * Creates a builder that enables CloudWatch Transaction Search for the account
+ * and Region. Build it in exactly one stack.
+ *
+ * @example
+ * ```ts
+ * createTransactionSearchBuilder().build(stack, "TransactionSearch");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html
+ */
+export function createTransactionSearchBuilder() {
+    // eslint-disable-next-line composurecdk/builder-must-be-tagged -- AWS::XRay::TransactionSearchConfig has no Tags property
+    return Builder(TransactionSearchBuilder);
+}
+//# sourceMappingURL=transaction-search-builder.js.map

package/dist/esm/transaction-search-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-search-builder.js","sourceRoot":"","sources":["../../src/transaction-search-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,OAAO,EAAiC,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAuB5D,mDAAmD;AACnD,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;AAEvE,MAAM,wBAAwB;IAC5B,KAAK,GAA2C,EAAE,CAAC;IAEnD,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YAClE,gBAAgB,EAAE;gBAChB,IAAI,eAAe,CAAC;oBAClB,GAAG,EAAE,6BAA6B;oBAClC,UAAU,EAAE,CAAC,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;oBACxD,OAAO,EAAE,CAAC,mBAAmB,CAAC;oBAC9B,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,KAAK,CAAC,SAAS,CAAC;wBACd,OAAO,EAAE,MAAM;wBACf,QAAQ,EAAE,WAAW;wBACrB,YAAY,EAAE,GAAG,IAAI,IAAI;wBACzB,SAAS,EAAE,SAAS,CAAC,mBAAmB;qBACzC,CAAC,CACH;oBACD,UAAU,EAAE;wBACV,OAAO,EAAE;4BACP,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC;gCAC/B,OAAO,EAAE,MAAM;gCACf,QAAQ,EAAE,GAAG;gCACb,SAAS,EAAE,SAAS,CAAC,gBAAgB;6BACtC,CAAC;yBACH;wBACD,YAAY,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE;qBACrD;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,IAAI,0BAA0B,CAAC,KAAK,EAAE,EAAE,EAAE;YAClE,GAAG,2BAA2B;YAC9B,GAAG,IAAI,CAAC,KAAK;SACd,CAAC,CAAC;QACH,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACrD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B;IAC5C,0HAA0H;IAC1H,OAAO,OAAO,CAA0D,wBAAwB,CAAC,CAAC;AACpG,CAAC"}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@composurecdk/xray",
+  "version": "0.10.2",
+  "description": "Composable AWS X-Ray: account-level CloudWatch Transaction Search",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/laazyj/composureCDK.git",
+    "directory": "packages/xray"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "aws",
+    "cdk",
+    "aws-cdk",
+    "infrastructure-as-code",
+    "iac",
+    "composurecdk",
+    "xray",
+    "tracing",
+    "observability",
+    "transaction-search"
+  ],
+  "author": "Jason Duffett (https://github.com/laazyj)",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "tshy": {
+    "exports": {
+      "./package.json": "./package.json",
+      ".": "./src/index.ts"
+    }
+  },
+  "peerDependencies": {
+    "@composurecdk/core": "^0.10.0",
+    "aws-cdk-lib": "^2.183.0",
+    "constructs": "^10.0.0"
+  },
+  "devDependencies": {
+    "@composurecdk/cdk-testing": "*",
+    "@types/node": "^26.6.1",
+    "aws-cdk-lib": "^2.269.0",
+    "constructs": "^10.8.1",
+    "typescript": "^6.0.3",
+    "vitest": "^5.0.0"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "import": {
+        "types": "./dist/esm/index.d.ts",
+        "default": "./dist/esm/index.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/index.d.ts",
+        "default": "./dist/commonjs/index.js"
+      }
+    }
+  },
+  "main": "./dist/commonjs/index.js",
+  "types": "./dist/commonjs/index.d.ts",
+  "module": "./dist/esm/index.js",
+  "nx": {
+    "tags": [
+      "scope:lib"
+    ]
+  }
+}