@gradientedge/cdk-utils-aws 2.18.0 → 2.20.0

package/dist/src/construct/static-site/main.js

@@ -93,7 +93,13 @@ export class StaticSite extends CommonConstruct {
      * @summary Method to create a site bucket
      */
     createSiteBucket() {
-        this.siteBucket = this.s3Manager.createS3Bucket(`${this.id}-site`, this, this.props.siteBucket);
+        /* Pass the just-created siteLogBucket L2 so server-access logging is wired
+           via Ref instead of an imported bucket name — lets CDK attach the
+           log-delivery policy and clears the accessLogsPolicyNotAdded warning. */
+        this.siteBucket = this.s3Manager.createS3Bucket(`${this.id}-site`, this, {
+            ...this.props.siteBucket,
+            logBucket: this.siteLogBucket,
+        });
     }
     /**
      * @summary Method to create a site cloudfront function

package/dist/src/services/lambda/main.d.ts

@@ -2,9 +2,9 @@ import { experimental } from 'aws-cdk-lib/aws-cloudfront';
 import { ISecurityGroup, IVpc, SubnetSelection } from 'aws-cdk-lib/aws-ec2';
 import { IAccessPoint } from 'aws-cdk-lib/aws-efs';
 import { CfnRole, Role } from 'aws-cdk-lib/aws-iam';
-import { Alias, Architecture, AssetCode, DockerImageCode, DockerImageFunction, Function, ILayerVersion, IVersion, LayerVersion } from 'aws-cdk-lib/aws-lambda';
+import { Alias, Architecture, AssetCode, DockerImageCode, DockerImageFunction, ILayerVersion, IVersion, LayerVersion } from 'aws-cdk-lib/aws-lambda';
 import { CommonConstruct } from '../../common/index.js';
-import { LambdaAliasProps, LambdaEdgeProps, LambdaProps } from './types.js';
+import { FunctionWithAliases, LambdaAliasProps, LambdaEdgeProps, LambdaProps } from './types.js';
 /**
  * Provides operations on AWS Lambda
  * - A new instance of this class is injected into {@link CommonConstruct} constructor.
@@ -53,7 +53,7 @@ export declare class LambdaManager {
      * @param mountPath optional mount path for the EFS file system, defaults to '/mnt/msg'
      * @param vpcSubnets optional subnet selection when running in a VPC
      */
-    createLambdaFunction(id: string, scope: CommonConstruct, props: LambdaProps, role: Role | CfnRole, layers: ILayerVersion[], code: AssetCode, handler?: string, environment?: any, vpc?: IVpc, securityGroups?: ISecurityGroup[], accessPoint?: IAccessPoint, mountPath?: string, vpcSubnets?: SubnetSelection): Function;
+    createLambdaFunction(id: string, scope: CommonConstruct, props: LambdaProps, role: Role | CfnRole, layers: ILayerVersion[], code: AssetCode, handler?: string, environment?: any, vpc?: IVpc, securityGroups?: ISecurityGroup[], accessPoint?: IAccessPoint, mountPath?: string, vpcSubnets?: SubnetSelection): FunctionWithAliases;
     /**
      * @summary Method to provision a Lambda@Edge function
      * @param id scoped id of the resource

package/dist/src/services/lambda/main.js

@@ -122,11 +122,17 @@ export class LambdaManager {
             }));
         }
         /* Create aliases and optionally attach provisioned concurrency auto-scaling.
-           Provisioned concurrency requires an alias — it cannot be set on $LATEST. */
+           Provisioned concurrency requires an alias — it cannot be set on $LATEST.
+           The created Alias instances are also stashed on the returned function under
+           `.lambdaAliases` (keyed by aliasName) so downstream constructs can use them
+           directly instead of re-importing by ARN — which carries an UnclearLambdaEnvironment
+           warning and silently drops permissions when CDK can't statically prove same-env. */
         if (props.lambdaAliases && !_.isEmpty(props.lambdaAliases)) {
+            const aliasMap = {};
             props.lambdaAliases.forEach(alias => {
                 const aliasId = alias.id ?? `${id}-${alias.aliasName}`;
                 const functionAlias = this.createLambdaFunctionAlias(`${aliasId}`, scope, alias, lambdaFunction.currentVersion);
+                aliasMap[alias.aliasName] = functionAlias;
                 createCfnOutput(`${id}-${alias.aliasName}AliasArn`, scope, functionAlias.functionArn);
                 createCfnOutput(`${id}-${alias.aliasName}AliasName`, scope, functionAlias.aliasName);
                 if (alias.provisionedConcurrency) {
@@ -136,6 +142,7 @@ export class LambdaManager {
                     });
                 }
             });
+            lambdaFunction.lambdaAliases = aliasMap;
         }
         if (props.tags && !_.isEmpty(props.tags)) {
             _.forEach(props.tags, tag => {

package/dist/src/services/lambda/types.d.ts

@@ -1,7 +1,20 @@
-import { AliasProps, FunctionProps } from 'aws-cdk-lib/aws-lambda';
+import { Alias, AliasProps, Function, FunctionProps } from 'aws-cdk-lib/aws-lambda';
 import { SqsEventSourceProps } from 'aws-cdk-lib/aws-lambda-event-sources';
 import { TagProps } from '../../types/index.js';
 import { QueueProps } from '../simple-queue-service/index.js';
+/**
+ * A Function returned by {@link LambdaManager.createLambdaFunction} when the
+ * caller supplied {@link LambdaProps.lambdaAliases}. The aliases that were
+ * created are exposed under `lambdaAliases`, keyed by aliasName, so downstream
+ * constructs can pass them directly to integrations (e.g. ApiGateway's
+ * LambdaIntegration) instead of re-importing by ARN — which carries an
+ * UnclearLambdaEnvironment warning and silently drops the invoke permission
+ * when CDK can't statically prove same-env.
+ */
+/** @category Interface */
+export type FunctionWithAliases = Function & {
+    lambdaAliases?: Record<string, Alias>;
+};
 /**
  * Props for Lambda@Edge function, matching aws-cdk-lib experimental EdgeFunctionProps.
  * Inlined because aws-cdk-lib does not export this subpath via its package exports map.

package/dist/src/services/simple-storage-service/main.js

@@ -93,9 +93,14 @@ export class S3Manager {
             bucket = Bucket.fromBucketName(scope, `${id}`, S3Manager.determineBucketName(scope, props, props.bucketName));
         }
         else {
-            /* Optionally look up a separate bucket for server access logging */
-            let logBucket;
-            if (props.logBucketName) {
+            /* Resolve the server-access-logging destination bucket. When the caller
+               already owns the log bucket (e.g. created earlier in the same stack)
+               they should pass the IBucket instance via `logBucket` — CDK then attaches
+               the log-delivery policy directly and no `accessLogsPolicyNotAdded`
+               warning is raised. The `logBucketName` path remains for true imports
+               where only the name is known. */
+            let logBucket = props.logBucket;
+            if (!logBucket && props.logBucketName) {
                 logBucket = Bucket.fromBucketName(scope, `${id}-logs`, S3Manager.determineBucketName(scope, props, props.logBucketName));
             }
             bucket = new Bucket(scope, `${id}-bucket`, {

package/dist/src/services/simple-storage-service/types.d.ts

@@ -37,7 +37,19 @@ export interface S3BucketProps extends s3.BucketProps {
     existingBucket?: boolean;
     /** Lifecycle rules for objects in the bucket */
     lifecycleRules?: LifecycleRule[];
-    /** Name of an existing bucket to use for server access logging */
+    /**
+     * Bucket instance to use for server access logging. Pass this when the caller
+     * already owns the log destination bucket (e.g. created earlier in the same
+     * stack) — CDK can then add the log-delivery policy to it directly. Falls back
+     * to {@link logBucketName} when not provided.
+     */
+    logBucket?: s3.IBucket;
+    /**
+     * Name of an existing bucket to use for server access logging. When set, the
+     * bucket is imported by name — CDK cannot mutate its policy in that case,
+     * which surfaces an `accessLogsPolicyNotAdded` warning at synth. Prefer
+     * {@link logBucket} when the destination bucket is owned by the caller.
+     */
     logBucketName?: string;
     /** Tags to apply to the bucket */
     tags?: TagProps[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils-aws",
-  "version": "2.18.0",
+  "version": "2.20.0",
   "description": "AWS CDK utilities for @gradientedge/cdk-utils",
   "type": "module",
   "main": "dist/src/index.js",
@@ -14,12 +14,12 @@
     "dist/src/"
   ],
   "dependencies": {
-    "@aws-sdk/client-secrets-manager": "3.1060.0",
-    "@aws-sdk/credential-providers": "3.1060.0",
-    "@aws-sdk/types": "3.973.10",
+    "@aws-sdk/client-secrets-manager": "3.1064.0",
+    "@aws-sdk/credential-providers": "3.1064.0",
+    "@aws-sdk/types": "3.973.12",
     "@types/lodash": "4.17.24",
     "app-root-path": "3.1.0",
-    "aws-cdk-lib": "2.257.0",
+    "aws-cdk-lib": "2.258.1",
     "constructs": "10.6.0",
     "lodash": "4.18.1",
     "moment": "2.30.1",