@friggframework/devtools 2.0.0--canary.428.4dfa677.0 → 2.0.0--canary.428.95f8e10.0

package/infrastructure/aws-discovery.js

@@ -388,27 +388,44 @@ class AWSDiscovery {
                     }
                 ]
             });
-            
+
             const response = await this.ec2Client.send(command);
-            
+
             if (response.NatGateways && response.NatGateways.length > 0) {
-                // Find a NAT Gateway tagged for Frigg first
-                const friggNatGateway = response.NatGateways.find(nat => 
-                    nat.Tags && nat.Tags.some(tag => 
+                // Check each NAT Gateway to ensure it's in a public subnet
+                for (const natGateway of response.NatGateways) {
+                    const subnetId = natGateway.SubnetId;
+                    const isPrivate = await this.isSubnetPrivate(subnetId);
+
+                    if (isPrivate) {
+                        console.warn(`WARNING: NAT Gateway ${natGateway.NatGatewayId} is in private subnet ${subnetId} - this will not work!`);
+                        console.warn('NAT Gateways MUST be placed in public subnets with Internet Gateway routes');
+                        console.warn('Skipping this misconfigured NAT Gateway...');
+                        continue; // Skip this NAT Gateway
+                    }
+
+                    // Check if it's a Frigg-tagged NAT Gateway
+                    const isFriggNat = natGateway.Tags && natGateway.Tags.some(tag =>
                         tag.Key === 'Name' && tag.Value.includes('frigg')
-                    )
-                );
-                
-                if (friggNatGateway) {
-                    console.log(`Found existing Frigg NAT Gateway: ${friggNatGateway.NatGatewayId}`);
-                    return friggNatGateway;
+                    );
+
+                    if (isFriggNat) {
+                        console.log(`Found existing Frigg NAT Gateway in public subnet: ${natGateway.NatGatewayId}`);
+                        return natGateway;
+                    }
+
+                    // Keep track of first valid NAT Gateway as fallback
+                    console.log(`Found existing NAT Gateway in public subnet: ${natGateway.NatGatewayId}`);
+                    return natGateway; // Return first NAT Gateway that's in a public subnet
                 }
-                
-                // Return first available NAT Gateway if no Frigg-specific one found
-                console.log(`Found existing NAT Gateway: ${response.NatGateways[0].NatGatewayId}`);
-                return response.NatGateways[0];
+
+                // All NAT Gateways are in private subnets - don't use any of them
+                console.error(`ERROR: Found ${response.NatGateways.length} NAT Gateway(s) but all are in private subnets!`);
+                console.error('These NAT Gateways will not provide internet connectivity');
+                console.error('A new NAT Gateway will be created in a public subnet');
+                return null; // Return null to trigger creation of new NAT Gateway
             }
-            
+
             return null;
         } catch (error) {
             console.warn('Error finding existing NAT Gateway:', error.message);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@friggframework/devtools",
   "prettier": "@friggframework/prettier-config",
-  "version": "2.0.0--canary.428.4dfa677.0",
+  "version": "2.0.0--canary.428.95f8e10.0",
   "dependencies": {
     "@aws-sdk/client-ec2": "^3.835.0",
     "@aws-sdk/client-kms": "^3.835.0",
@@ -9,8 +9,8 @@
     "@babel/eslint-parser": "^7.18.9",
     "@babel/parser": "^7.25.3",
     "@babel/traverse": "^7.25.3",
-    "@friggframework/schemas": "2.0.0--canary.428.4dfa677.0",
-    "@friggframework/test": "2.0.0--canary.428.4dfa677.0",
+    "@friggframework/schemas": "2.0.0--canary.428.95f8e10.0",
+    "@friggframework/test": "2.0.0--canary.428.95f8e10.0",
     "@hapi/boom": "^10.0.1",
     "@inquirer/prompts": "^5.3.8",
     "axios": "^1.7.2",
@@ -32,8 +32,8 @@
     "serverless-http": "^2.7.0"
   },
   "devDependencies": {
-    "@friggframework/eslint-config": "2.0.0--canary.428.4dfa677.0",
-    "@friggframework/prettier-config": "2.0.0--canary.428.4dfa677.0",
+    "@friggframework/eslint-config": "2.0.0--canary.428.95f8e10.0",
+    "@friggframework/prettier-config": "2.0.0--canary.428.95f8e10.0",
     "jest": "^30.1.3",
     "prettier": "^2.7.1",
     "serverless": "3.39.0",
@@ -66,5 +66,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "4dfa6772d058ce8bb7a6ecc6313c070d57e4bc23"
+  "gitHead": "95f8e103995bc1c11331a44e49b232dfdd2e5604"
 }