@gemeentenijmegen/webapp 1.1.12 → 1.1.14

package/node_modules/@aws-solutions-constructs/core/lib/step-function-helper.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
+ *  with the License. A copy of the License is located at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
+ *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
+ *  and limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.idPlaceholder = void 0;
+exports.buildStateMachine = buildStateMachine;
+exports.buildStepFunctionCWAlarms = buildStepFunctionCWAlarms;
+exports.CheckStateMachineProps = CheckStateMachineProps;
+const cdk = require("aws-cdk-lib");
+const smDefaults = require("./step-function-defaults");
+const sfn = require("aws-cdk-lib/aws-stepfunctions");
+const utils_1 = require("./utils");
+const cloudwatch = require("aws-cdk-lib/aws-cloudwatch");
+const cloudwatch_log_group_helper_1 = require("./cloudwatch-log-group-helper");
+/*
+ * the id parameter was added to buildStateMachine() long after the original implementation,
+ * this value can be used for the new parameter and ensure behavior is the same.
+ * (if we just require an id, the state machine name will be changed and it will be a
+ * destructive change)
+ */
+exports.idPlaceholder = undefined;
+/**
+ * @internal This is an internal core function and should not be called directly by Solutions Constructs clients.
+ *
+ * Builds and returns a StateMachine.
+ * @param scope - the construct to which the StateMachine should be attached to.
+ * @param stateMachineProps - user-specified properties to override the default properties.
+ */
+function buildStateMachine(scope, id, props) {
+    let logGroup;
+    let consolidatedStateMachineProps;
+    // If they sent a logGroup in stateMachineProps
+    if (props.stateMachineProps.logs?.destination) {
+        // In CDK v2.235.0+, logs.destination is ILogGroupRef, but we need ILogGroup
+        // We need to verify it's actually an ILogGroup (has the full interface)
+        const destination = props.stateMachineProps.logs.destination;
+        // Type guard: Check if destination has ILogGroup methods
+        if ('addMetricFilter' in destination && 'grantWrite' in destination) {
+            logGroup = destination;
+        }
+        else {
+            throw new Error('The provided log group destination must be a full ILogGroup (not just ILogGroupRef). ' +
+                'Please provide a LogGroup created with new LogGroup() or LogGroup.fromLogGroupArn().');
+        }
+        consolidatedStateMachineProps = props.stateMachineProps;
+    }
+    else {
+        // Three possibilities
+        // 1) logGroupProps not provided - create logGroupProps with just logGroupName
+        // 2) logGroupProps provided with no logGroupName - override logGroupProps.logGroupName
+        // 3) logGroupProps provided with logGroupName - pass unaltered logGroupProps
+        let consolidatedLogGroupProps = props.logGroupProps;
+        if (!consolidatedLogGroupProps) {
+            consolidatedLogGroupProps = {};
+        }
+        if (!consolidatedLogGroupProps?.logGroupName) {
+            const logGroupPrefix = '/aws/vendedlogs/states/constructs/';
+            const nameParts = [
+                cdk.Stack.of(scope).stackName, // Name of the stack
+                id ?? scope.node.id, // Use the ID from client if provided, otherwise use the construct ID
+                'StateMachineLog' // Literal string for log group name portion
+            ];
+            const logGroupName = (0, utils_1.generatePhysicalLogGroupName)(logGroupPrefix, nameParts);
+            consolidatedLogGroupProps = (0, utils_1.overrideProps)(consolidatedLogGroupProps, { logGroupName });
+        }
+        // Create new Cloudwatch log group for Step function State Machine
+        logGroup = (0, cloudwatch_log_group_helper_1.buildLogGroup)(scope, `StateMachineLogGroup${(id ?? '')}`, consolidatedLogGroupProps);
+        // Override the defaults with the user provided props
+        consolidatedStateMachineProps = (0, utils_1.overrideProps)(smDefaults.DefaultStateMachineProps(logGroup), props.stateMachineProps);
+    }
+    // Override the Cloudwatch permissions to make it more fine grained
+    const newStateMachine = new sfn.StateMachine(scope, `StateMachine${(id ?? '')}`, consolidatedStateMachineProps);
+    // If the client did not pass a role we got the default role and will trim the privileges
+    if (!props.stateMachineProps.role) {
+        const role = newStateMachine.node.findChild('Role');
+        const cfnDefaultPolicy = role.node.findChild('DefaultPolicy').node.defaultChild;
+        // Override Cfn Nag warning W12: IAM policy should not allow * resource
+        (0, utils_1.addCfnSuppressRules)(cfnDefaultPolicy, [
+            {
+                id: 'W12',
+                reason: `These are CDK defaults. The 'LogDelivery' actions do not support resource-level authorizations. Any logging is done by State Machine code`
+            }
+        ]);
+    }
+    const createCloudWatchAlarms = (props.createCloudWatchAlarms === undefined || props.createCloudWatchAlarms);
+    const cloudWatchAlarms = createCloudWatchAlarms ? buildStepFunctionCWAlarms(scope, props.cloudWatchAlarmsPrefix, newStateMachine) : undefined;
+    return {
+        stateMachine: newStateMachine,
+        logGroup,
+        cloudWatchAlarms
+    };
+}
+/**
+ * @internal This is an internal core function and should not be called directly by Solutions Constructs clients.
+ */
+function buildStepFunctionCWAlarms(scope, id, sm) {
+    // Setup CW Alarms for State Machine
+    const alarms = new Array();
+    const prefix = id ?? "";
+    // Sum of number of executions that failed is >= 1 for 5 minutes, 1 consecutive time
+    alarms.push(new cloudwatch.Alarm(scope, `${prefix}ExecutionFailedAlarm`, {
+        metric: sm.metricFailed({
+            statistic: 'Sum',
+            period: cdk.Duration.seconds(300),
+        }),
+        threshold: 1,
+        evaluationPeriods: 1,
+        comparisonOperator: cloudwatch.ComparisonOperator.GREATER_THAN_OR_EQUAL_TO_THRESHOLD,
+        alarmDescription: 'Alarm for the number of executions that failed exceeded the threshold of 1. '
+    }));
+    // Sum of number of executions that failed maximum is >= 1 for 5 minute, 1 consecutive time
+    alarms.push(new cloudwatch.Alarm(scope, `${prefix}ExecutionThrottledAlarm`, {
+        metric: sm.metricThrottled({
+            statistic: 'Sum',
+            period: cdk.Duration.seconds(300),
+        }),
+        threshold: 1,
+        evaluationPeriods: 1,
+        comparisonOperator: cloudwatch.ComparisonOperator.GREATER_THAN_OR_EQUAL_TO_THRESHOLD,
+        alarmDescription: 'Alarm for the number of executions that throttled exceeded the threshold of 1. '
+    }));
+    // Number of executions that aborted maximum is >= 1 for 5 minute, 1 consecutive time
+    alarms.push(new cloudwatch.Alarm(scope, `${prefix}ExecutionAbortedAlarm`, {
+        metric: sm.metricAborted({
+            statistic: 'Maximum',
+            period: cdk.Duration.seconds(300),
+        }),
+        threshold: 1,
+        evaluationPeriods: 1,
+        comparisonOperator: cloudwatch.ComparisonOperator.GREATER_THAN_OR_EQUAL_TO_THRESHOLD,
+        alarmDescription: 'Alarm for the number of executions that aborted exceeded the threshold of 1. '
+    }));
+    return alarms;
+}
+function CheckStateMachineProps(propsObject) {
+    let errorMessages = '';
+    let errorFound = false;
+    if ((propsObject.createCloudWatchAlarms === false) && propsObject.cloudWatchAlarmsPrefix) {
+        errorMessages += 'Error - cloudWatchAlarmsPrefix is invalid when createCloudWatchAlarms is false\n';
+        errorFound = true;
+    }
+    if ((propsObject.existingStateMachineObj) &&
+        (propsObject.stateMachineProps ||
+            (propsObject.createCloudWatchAlarms !== undefined) ||
+            propsObject.cloudWatchAlarmsPrefix ||
+            propsObject.logGroupProps)) {
+        errorMessages += 'ERROR - If existingStateMachine is provided, no other state machine props are allowed\n';
+        errorFound = true;
+    }
+    if (errorFound) {
+        throw new Error(errorMessages);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-solutions-constructs/core/lib/textract-helper.d.ts

@@ -0,0 +1,63 @@
+/**
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
+ *  with the License. A copy of the License is located at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
+ *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
+ *  and limitations under the License.
+ */
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import { Construct } from 'constructs';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as kms from 'aws-cdk-lib/aws-kms';
+import * as sns from 'aws-cdk-lib/aws-sns';
+export interface TextractProps {
+    readonly asyncJobs?: boolean;
+    readonly existingSourceBucketObj?: s3.IBucket;
+    readonly sourceBucketProps?: s3.BucketProps;
+    readonly existingDestinationBucketObj?: s3.IBucket;
+    readonly destinationBucketProps?: s3.BucketProps;
+    readonly useSameBucket?: boolean;
+    readonly createCustomerManagedOutputBucket?: boolean;
+    readonly sourceLoggingBucketProps?: s3.BucketProps;
+    readonly destinationLoggingBucketProps?: s3.BucketProps;
+    readonly logSourceS3AccessLogs?: boolean;
+    readonly logDestinationS3AccessLogs?: boolean;
+    readonly sourceBucketEnvironmentVariableName?: string;
+    readonly destinationBucketEnvironmentVariableName?: string;
+    readonly dataAccessRoleArnEnvironmentVariableName?: string;
+    readonly snsNotificationTopicArnEnvironmentVariableName?: string;
+    readonly existingNotificationTopicObj?: sns.Topic;
+    readonly existingNotificationTopicEncryptionKey?: kms.Key;
+    readonly notificationTopicProps?: sns.TopicProps;
+    readonly enableNotificationTopicEncryptionWithCustomerManagedKey?: boolean;
+    readonly notificationTopicEncryptionKey?: kms.Key;
+    readonly notificationTopicEncryptionKeyProps?: kms.KeyProps;
+}
+export interface TextractBucketDetails {
+    readonly bucket?: s3.Bucket;
+    readonly bucketInterface: s3.IBucket;
+    readonly loggingBucket?: s3.Bucket;
+}
+export interface TextractConfiguration {
+    readonly textractRole?: iam.Role;
+    readonly lambdaIamActionsRequired: string[];
+    readonly sourceBucket?: TextractBucketDetails;
+    readonly destinationBucket?: TextractBucketDetails;
+    readonly snsNotificationTopic?: sns.Topic;
+    readonly notificationTopicEncryptionKey?: kms.Key;
+}
+export declare function ConfigureTextractSupport(scope: Construct, id: string, props: TextractProps): TextractConfiguration;
+export declare function CheckTextractProps(props: TextractProps): void;
+export interface TextractSnsProps {
+    readonly notificationTopicProps?: sns.TopicProps;
+    readonly existingNotificationTopicObj?: sns.Topic;
+    readonly existingNotificationTopicObject?: sns.Topic;
+    readonly notificationTopicEncryptionKey?: kms.Key;
+    readonly notificationTopicEncryptionKeyProps?: kms.KeyProps;
+}
+export declare function CheckTextractSnsProps(propsObject: TextractSnsProps | any): void;

package/node_modules/@aws-solutions-constructs/core/lib/textract-helper.js

@@ -0,0 +1,220 @@
+"use strict";
+/**
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
+ *  with the License. A copy of the License is located at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
+ *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
+ *  and limitations under the License.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigureTextractSupport = ConfigureTextractSupport;
+exports.CheckTextractProps = CheckTextractProps;
+exports.CheckTextractSnsProps = CheckTextractSnsProps;
+const iam = require("aws-cdk-lib/aws-iam");
+const s3_bucket_helper_1 = require("./s3-bucket-helper");
+const sns_helper_1 = require("./sns-helper");
+const utils_1 = require("./utils");
+const syncPermissions = [
+    'textract:DetectDocumentText',
+    'textract:AnalyzeDocument',
+    'textract:AnalyzeExpense',
+    'textract:AnalyzeID'
+];
+const asyncPermissions = [
+    'textract:StartDocumentTextDetection',
+    'textract:GetDocumentTextDetection',
+    'textract:StartDocumentAnalysis',
+    'textract:GetDocumentAnalysis',
+    'textract:StartExpenseAnalysis',
+    'textract:GetExpenseAnalysis',
+    'textract:StartLendingAnalysis',
+    'textract:GetLendingAnalysis'
+];
+function ConfigureTextractSupport(scope, id, props) {
+    let configuration = {
+        lambdaIamActionsRequired: [...syncPermissions],
+    };
+    if (props.asyncJobs) {
+        const buildTopicResponse = (0, sns_helper_1.buildTopic)(scope, id, {
+            existingTopicObj: props.existingNotificationTopicObj,
+            existingTopicEncryptionKey: props.existingNotificationTopicEncryptionKey,
+            topicProps: props.notificationTopicProps,
+            enableEncryptionWithCustomerManagedKey: props.enableNotificationTopicEncryptionWithCustomerManagedKey,
+            encryptionKey: props.notificationTopicEncryptionKey,
+            encryptionKeyProps: props.notificationTopicEncryptionKeyProps
+        });
+        // Setup notification topic
+        configuration = (0, utils_1.overrideProps)(configuration, {
+            snsNotificationTopic: buildTopicResponse.topic,
+        });
+        if (buildTopicResponse.key) {
+            configuration = (0, utils_1.overrideProps)(configuration, { notificationTopicEncryptionKey: buildTopicResponse.key });
+        }
+        // Setup source S3 Bucket
+        if (props.existingSourceBucketObj) {
+            configuration = (0, utils_1.overrideProps)(configuration, {
+                sourceBucket: {
+                    bucketInterface: props.existingSourceBucketObj
+                }
+            }, false);
+        }
+        else {
+            const buildSourceBucketResponse = (0, s3_bucket_helper_1.buildS3Bucket)(scope, {
+                bucketProps: props.sourceBucketProps,
+                loggingBucketProps: props.sourceLoggingBucketProps,
+                logS3AccessLogs: props.logSourceS3AccessLogs
+            }, `${id}-source-bucket`);
+            configuration = (0, utils_1.overrideProps)(configuration, {
+                sourceBucket: {
+                    bucket: buildSourceBucketResponse.bucket,
+                    loggingBucket: buildSourceBucketResponse.loggingBucket,
+                    bucketInterface: buildSourceBucketResponse.bucket,
+                }
+            }, false);
+        }
+        if (props.createCustomerManagedOutputBucket !== false) {
+            // Setup destination S3 Bucket
+            if (props.useSameBucket) {
+                configuration = (0, utils_1.overrideProps)(configuration, {
+                    destinationBucket: {
+                        bucketInterface: configuration.sourceBucket?.bucketInterface,
+                        bucket: configuration.sourceBucket?.bucket,
+                        loggingBucket: configuration.sourceBucket?.loggingBucket,
+                    }
+                }, false);
+            }
+            else {
+                if (props.existingDestinationBucketObj) {
+                    configuration = (0, utils_1.overrideProps)(configuration, {
+                        destinationBucket: {
+                            bucketInterface: props.existingDestinationBucketObj
+                        }
+                    }, false);
+                }
+                else {
+                    const buildDestinationBucketResponse = (0, s3_bucket_helper_1.buildS3Bucket)(scope, {
+                        bucketProps: props.destinationBucketProps,
+                        loggingBucketProps: props.destinationLoggingBucketProps,
+                        logS3AccessLogs: props.logDestinationS3AccessLogs
+                    }, `${id}-destination-bucket`);
+                    configuration = (0, utils_1.overrideProps)(configuration, {
+                        destinationBucket: {
+                            bucket: buildDestinationBucketResponse.bucket,
+                            loggingBucket: buildDestinationBucketResponse.loggingBucket,
+                            bucketInterface: buildDestinationBucketResponse.bucket,
+                        }
+                    }, false);
+                }
+            }
+        }
+        // Set up role that is sent to the Textract service
+        const textractServiceRole = new iam.Role(scope, `${id}-textract-service-role`, {
+            assumedBy: new iam.ServicePrincipal('textract.amazonaws.com'),
+        });
+        configuration.snsNotificationTopic.grantPublish(textractServiceRole);
+        configuration = (0, utils_1.overrideProps)(configuration, {
+            textractRole: textractServiceRole
+        }, false);
+        // Give the Lambda function additional permissions
+        asyncPermissions.forEach((permission) => {
+            configuration.lambdaIamActionsRequired.push(permission);
+        });
+    }
+    return configuration;
+}
+function CheckTextractProps(props) {
+    let errorMessages = '';
+    let errorFound = false;
+    if (props.asyncJobs) {
+        // Check source bucket props
+        const sourceS3Props = {
+            existingBucketObj: props.existingSourceBucketObj,
+            bucketProps: props.sourceBucketProps,
+            loggingBucketProps: props.sourceLoggingBucketProps,
+            logS3AccessLogs: props.logSourceS3AccessLogs
+        };
+        (0, s3_bucket_helper_1.CheckS3Props)(sourceS3Props);
+        // Check destination bucket props (only if not using same bucket)
+        if (!props.useSameBucket) {
+            const destinationS3Props = {
+                existingBucketObj: props.existingDestinationBucketObj,
+                bucketProps: props.destinationBucketProps,
+                loggingBucketProps: props.destinationLoggingBucketProps,
+                logS3AccessLogs: props.logDestinationS3AccessLogs
+            };
+            (0, s3_bucket_helper_1.CheckS3Props)(destinationS3Props);
+        }
+        // Check SNS topic props
+        CheckTextractSnsProps(props);
+    }
+    // If asyncJobs is false, no S3 bucket props should be provided
+    if (!props.asyncJobs) {
+        if (props.existingSourceBucketObj || props.sourceBucketProps ||
+            props.existingDestinationBucketObj || props.destinationBucketProps ||
+            props.sourceLoggingBucketProps || props.destinationLoggingBucketProps ||
+            props.logSourceS3AccessLogs !== undefined || props.logDestinationS3AccessLogs !== undefined ||
+            props.sourceBucketEnvironmentVariableName || props.destinationBucketEnvironmentVariableName ||
+            props.dataAccessRoleArnEnvironmentVariableName || props.useSameBucket) {
+            errorMessages += 'S3 bucket properties can only be provided when asyncJobs is true\n';
+            errorFound = true;
+        }
+        // Check SNS topic props separately for clearer error message
+        if (props.existingNotificationTopicObj || props.notificationTopicProps || props.existingNotificationTopicEncryptionKey ||
+            props.enableNotificationTopicEncryptionWithCustomerManagedKey !== undefined || props.notificationTopicEncryptionKey ||
+            props.notificationTopicEncryptionKeyProps) {
+            errorMessages += 'SNS topic properties can only be provided when asyncJobs is true';
+            errorFound = true;
+        }
+    }
+    // If useSameBucket is true, no destination bucket props should be provided
+    if (props.useSameBucket) {
+        if (props.existingDestinationBucketObj || props.destinationBucketProps ||
+            props.destinationLoggingBucketProps || props.logDestinationS3AccessLogs !== undefined) {
+            errorMessages += 'Destination bucket properties cannot be provided when useSameBucket is true\n';
+            errorFound = true;
+        }
+    }
+    // If createCustomerManagedOutputBucket is explicitly false, no output bucket properties should be provided
+    if (props.createCustomerManagedOutputBucket === false) {
+        if (props.existingDestinationBucketObj || props.destinationBucketProps ||
+            props.destinationLoggingBucketProps || props.logDestinationS3AccessLogs !== undefined ||
+            props.useSameBucket) {
+            errorMessages += 'Output bucket properties cannot be provided when createCustomerManagedOutputBucket is false';
+            errorFound = true;
+        }
+    }
+    if (errorFound) {
+        throw new Error(errorMessages);
+    }
+}
+function CheckTextractSnsProps(propsObject) {
+    let errorMessages = '';
+    let errorFound = false;
+    // FargateToSns used TopicObject instead of TopicObj - to fix would be a breaking change, so we
+    // must look for both here.
+    if (propsObject.notificationTopicProps && (propsObject.existingNotificationTopicObj || propsObject.existingNotificationTopicObject)) {
+        errorMessages += 'Error - Either provide notificationTopicProps or existingNotificationTopicObj, but not both.\n';
+        errorFound = true;
+    }
+    if (propsObject.notificationTopicProps?.masterKey && propsObject.notificationTopicEncryptionKey) {
+        errorMessages += 'Error - Either provide notificationTopicProps.masterKey or notificationTopicEncryptionKey, but not both.\n';
+        errorFound = true;
+    }
+    if (propsObject.notificationTopicProps?.masterKey && propsObject.notificationTopicEncryptionKeyProps) {
+        errorMessages += 'Error - Either provide notificationTopicProps.masterKey or notificationTopicEncryptionKeyProps, but not both.\n';
+        errorFound = true;
+    }
+    if (propsObject.notificationTopicEncryptionKey && propsObject.notificationTopicEncryptionKeyProps) {
+        errorMessages += 'Error - Either provide notificationTopicEncryptionKey or notificationTopicEncryptionKeyProps, but not both.\n';
+        errorFound = true;
+    }
+    if (errorFound) {
+        throw new Error(errorMessages);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-solutions-constructs/core/lib/translate-helper.d.ts

@@ -0,0 +1,43 @@
+/**
+ *  Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance
+ *  with the License. A copy of the License is located at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  or in the 'license' file accompanying this file. This file is distributed on an 'AS IS' BASIS, WITHOUT WARRANTIES
+ *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
+ *  and limitations under the License.
+ */
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import { Construct } from 'constructs';
+import * as iam from 'aws-cdk-lib/aws-iam';
+export interface TranslateProps {
+    readonly asyncJobs?: boolean;
+    readonly existingSourceBucketObj?: s3.IBucket;
+    readonly sourceBucketProps?: s3.BucketProps;
+    readonly existingDestinationBucketObj?: s3.IBucket;
+    readonly destinationBucketProps?: s3.BucketProps;
+    readonly useSameBucket?: boolean;
+    readonly sourceLoggingBucketProps?: s3.BucketProps;
+    readonly destinationLoggingBucketProps?: s3.BucketProps;
+    readonly logSourceS3AccessLogs?: boolean;
+    readonly logDestinationS3AccessLogs?: boolean;
+    readonly sourceBucketEnvironmentVariableName?: string;
+    readonly destinationBucketEnvironmentVariableName?: string;
+    readonly dataAccessRoleArnEnvironmentVariableName?: string;
+}
+export interface TranslateConfiguration {
+    readonly translateRole?: iam.Role;
+    readonly lambdaIamActionsRequired: string[];
+    readonly sourceBucket?: BucketDetails;
+    readonly destinationBucket?: BucketDetails;
+}
+export interface BucketDetails {
+    readonly bucket?: s3.Bucket;
+    readonly bucketInterface: s3.IBucket;
+    readonly loggingBucket?: s3.Bucket;
+}
+export declare function ConfigureTranslateSupport(scope: Construct, id: string, props: TranslateProps): TranslateConfiguration;
+export declare function CheckTranslateProps(props: TranslateProps): void;