@gradientedge/cdk-utils 10.7.0 → 10.8.0

package/dist/src/lib/azure/construct/event-handler/main.js

@@ -0,0 +1,139 @@
+import { Provider } from '@pulumi/azure-native';
+import { getTopicOutput } from '@pulumi/azure-native/eventgrid/index.js';
+import { AzureFunctionApp } from '../function-app/index.js';
+export class AzureEventHandler extends AzureFunctionApp {
+    props;
+    eventGridEventSubscription;
+    eventGridTopic;
+    serviceBus;
+    constructor(id, props) {
+        super(id, props);
+        this.props = props;
+        this.id = id;
+    }
+    initResources() {
+        this.createResourceGroup();
+        this.resolveCommonLogAnalyticsWorkspace();
+        this.resolveApplicationInsights();
+        this.createEventGridSubscriptionDlqStorageAccount();
+        this.createEventGridSubscriptionDlqStorageContainer();
+        this.createServiceBusNamespace();
+        this.createServiceBusQueue();
+        this.createEventGrid();
+        this.createEventGridEventSubscription();
+        this.createServiceBusDiagnosticLog();
+        this.enableMalwareScanningOnDataStorageAccount();
+        super.initResources();
+    }
+    createEventGridSubscriptionDlqStorageAccount() {
+        this.eventGridEventSubscription.dlqStorageAccount = this.storageManager.createStorageAccount(`${this.id}-eventgrid-subscription-dlq-storage-account`, this, {
+            ...this.props.eventGridSubscription.dlqStorageAccount,
+            resourceGroupName: this.resourceGroup.name,
+            location: this.resourceGroup.location,
+        });
+    }
+    createEventGridSubscriptionDlqStorageContainer() {
+        this.eventGridEventSubscription.dlqStorageContainer = this.storageManager.createStorageContainer(`${this.id}-eventgrid-subscription-dlq-container`, this, {
+            ...this.props.eventGridSubscription.dlqStorageContainer,
+            accountName: this.eventGridEventSubscription.dlqStorageAccount.name,
+            containerName: 'eventgrid-subscription-dlq-container',
+            resourceGroupName: this.resourceGroup.name,
+        });
+    }
+    createServiceBusNamespace() {
+        this.serviceBus.namespace = this.serviceBusManager.createServiceBusNamespace(this.id, this, {
+            ...this.props.serviceBus.namespace,
+            namespaceName: this.props.serviceBus.namespace.namespaceName ?? this.id,
+            resourceGroupName: this.resourceGroup.name,
+        }, { ignoreChanges: ['location'] });
+        this.registerOutputs({
+            serviceBusNamespaceId: this.serviceBus.namespace.id,
+        });
+    }
+    createServiceBusQueue() {
+        this.serviceBus.queue = this.serviceBusManager.createServiceBusQueue(this.id, this, {
+            ...this.props.serviceBus.queue,
+            queueName: this.props.serviceBus.queue.queueName ?? this.id,
+            namespaceName: this.serviceBus.namespace.name,
+        });
+        this.registerOutputs({
+            serviceBusQueueId: this.serviceBus.queue.id,
+            serviceBusQueueName: this.serviceBus.queue.name,
+        });
+    }
+    createEventGrid() {
+        if (!this.props.eventGridTopic.useExistingTopic) {
+            this.eventGridTopic = this.eventgridManager.createEventgridTopic(this.id, this, {
+                ...this.props.eventGridTopic,
+                topicName: this.props.eventGridTopic.topicName ?? this.id,
+                location: this.resourceGroup.location,
+                resourceGroupName: this.resourceGroup.name,
+            }, { protect: true, ignoreChanges: ['location'] });
+            return;
+        }
+        const existingSubscriptionId = this.props.eventGridTopic.existingSubscriptionId;
+        const existingTopicName = this.props.eventGridTopic.existingTopicName;
+        const existingResourceGroupName = this.props.eventGridTopic.existingResourceGroupName;
+        let provider;
+        if (existingSubscriptionId) {
+            provider = new Provider(`${this.id}-${existingSubscriptionId}`, {
+                subscriptionId: existingSubscriptionId,
+            });
+        }
+        if (existingResourceGroupName && existingTopicName) {
+            this.eventGridTopic = getTopicOutput({
+                topicName: existingTopicName,
+                resourceGroupName: existingResourceGroupName,
+            }, { provider });
+        }
+    }
+    createEventGridEventSubscription() {
+        this.eventGridEventSubscription.eventSubscription = this.eventgridManager.createEventgridSubscription(this.id, this, {
+            ...this.props.eventGridEventSubscription,
+            eventSubscriptionName: this.props.eventGridEventSubscription.eventSubscriptionName ?? this.id,
+            scope: this.eventGridTopic.id,
+            destination: {
+                endpointType: 'ServiceBusQueue',
+                resourceId: this.serviceBus.queue.id,
+            },
+            deadLetterDestination: {
+                blobContainerName: this.eventGridEventSubscription.dlqStorageContainer.name,
+                endpointType: 'StorageBlob',
+                resourceId: this.eventGridEventSubscription.dlqStorageAccount.id,
+            },
+        }, { dependsOn: [this.eventGridTopic] });
+    }
+    createServiceBusDiagnosticLog() {
+        this.monitorManager.createMonitorDiagnosticSettings(this.id, this, {
+            name: `${this.props.stackName}-servicebus`,
+            resourceUri: this.serviceBus.namespace.id,
+            workspaceId: this.commonLogAnalyticsWorkspace.id,
+            logAnalyticsDestinationType: 'Dedicated',
+            logs: [
+                {
+                    categoryGroup: 'allLogs',
+                    enabled: true,
+                },
+            ],
+            metrics: [
+                {
+                    category: 'AllMetrics',
+                    enabled: true,
+                },
+            ],
+        });
+    }
+    enableMalwareScanningOnDataStorageAccount() {
+        if (!this.props.defender)
+            return;
+        this.securityCentermanager.createDefenderForStorage(`${this.id}-data-storage-defender`, this, {
+            ...this.props.defender,
+            resourceId: this.dataStorageAccount.id,
+            properties: {
+                malwareScanning: {
+                    scanResultsEventGridTopicResourceId: this.eventGridTopic.id,
+                },
+            },
+        });
+    }
+}

package/dist/src/lib/azure/construct/event-handler/types.d.ts

@@ -0,0 +1,35 @@
+import { EventSubscription } from '@pulumi/azure-native/eventgrid/index.js';
+import { Namespace, Queue } from '@pulumi/azure-native/servicebus/index.js';
+import { BlobContainer, StorageAccount } from '@pulumi/azure-native/storage/index.js';
+import { DefenderForStorageProps, EventgridEventSubscriptionProps, EventgridTopicProps, ServiceBusNamespaceProps, ServiceBusQueueProps, StorageAccountProps, StorageContainerProps } from '../../services/index.js';
+import { AzureFunctionAppProps } from '../function-app/index.js';
+export interface EventHandlerEventGridSubscriptionProps {
+    dlqStorageAccount: StorageAccountProps;
+    dlqStorageContainer: StorageContainerProps;
+}
+export interface EventHandlerEventGridSubscription {
+    dlqStorageAccount: StorageAccount;
+    dlqStorageContainer: BlobContainer;
+    eventSubscription: EventSubscription;
+}
+export interface EventHandlerServiceBusProps {
+    namespace: ServiceBusNamespaceProps;
+    queue: ServiceBusQueueProps;
+}
+export interface EventHandlerServiceBus {
+    namespace: Namespace;
+    queue: Queue;
+}
+export interface EventHandlerEventGridTopicProps extends EventgridTopicProps {
+    useExistingTopic: boolean;
+    existingSubscriptionId?: string;
+    existingTopicName?: string;
+    existingResourceGroupName?: string;
+}
+export interface AzureEventHandlerProps extends AzureFunctionAppProps {
+    defender?: DefenderForStorageProps;
+    eventGridEventSubscription: EventgridEventSubscriptionProps;
+    eventGridSubscription: EventHandlerEventGridSubscriptionProps;
+    eventGridTopic: EventHandlerEventGridTopicProps;
+    serviceBus: EventHandlerServiceBusProps;
+}

package/dist/src/lib/azure/construct/event-handler/types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/lib/azure/construct/function-app/index.d.ts

@@ -0,0 +1,2 @@
+export * from './main.js';
+export * from './types.js';

package/dist/src/lib/azure/construct/function-app/index.js

@@ -0,0 +1,2 @@
+export * from './main.js';
+export * from './types.js';

package/dist/src/lib/azure/construct/function-app/main.d.ts

@@ -0,0 +1,51 @@
+import * as archive from '@pulumi/archive';
+import { ConfigurationStore, GetConfigurationStoreResult } from '@pulumi/azure-native/appconfiguration/index.js';
+import { GetComponentResult } from '@pulumi/azure-native/applicationinsights/index.js';
+import { Dashboard } from '@pulumi/azure-native/portal/index.js';
+import { BlobContainer, StorageAccount } from '@pulumi/azure-native/storage/index.js';
+import { AppServicePlan, WebApp } from '@pulumi/azure-native/web/index.js';
+import { Output, ResourceOptions } from '@pulumi/pulumi';
+import { CommonAzureConstruct } from '../../common/index.js';
+import { AzureFunctionAppProps } from './types.js';
+export declare class AzureFunctionApp extends CommonAzureConstruct {
+    props: AzureFunctionAppProps;
+    app: WebApp;
+    appServicePlan: AppServicePlan;
+    appEnvironmentVariables: Record<string, any>;
+    appStorageAccount: StorageAccount;
+    appDeploymentStorageContainer: BlobContainer;
+    appStorageContainer: BlobContainer;
+    appConfig: ConfigurationStore | Output<GetConfigurationStoreResult>;
+    appCodeArchiveFile: Output<archive.GetFileResult>;
+    appConfigHash: string;
+    appKeyVaultsByResourceGroup: Map<string, Set<string>>;
+    appConnectionStrings: any[];
+    appConfigPrefix?: string;
+    appConfigurationsParsedConfig: any;
+    appConfigurationsOriginalParsedConfig: any;
+    dataStorageAccount: StorageAccount;
+    dataStorageContainer: BlobContainer;
+    applicationInsights: Output<GetComponentResult>;
+    functionDashboard: Dashboard;
+    constructor(id: string, props: AzureFunctionAppProps);
+    initResources(): void;
+    protected resolveApplicationInsights(): void;
+    protected createAppServicePlan(): void;
+    protected createdParsedAppConfigurations(): void;
+    protected createAppConfiguration(): void;
+    protected createAppConfigurations(): void;
+    protected createStorageAccount(): void;
+    protected createStorageDeploymentContainer(): void;
+    protected createStorageContainer(): void;
+    protected createDataStorageAccount(): void;
+    protected createDataStorageContainer(): void;
+    protected generateStorageContainerSas(): void;
+    protected createFunctionHosts(): void;
+    protected createCodePackage(): void;
+    protected createFunctionAppSiteConfig(): void;
+    protected createFunctionApp(resourceOptions?: ResourceOptions): void;
+    protected getFunctionAppPrincipalId(): Output<string>;
+    protected createRoleAssignments(): void;
+    protected dashboardVariables(): Record<string, any>;
+    protected createFunctionDashboard(): void;
+}

package/dist/src/lib/azure/construct/function-app/main.js

@@ -0,0 +1,297 @@
+import * as archive from '@pulumi/archive';
+import { getConfigurationStoreOutput, } from '@pulumi/azure-native/appconfiguration/index.js';
+import { getComponentOutput } from '@pulumi/azure-native/applicationinsights/index.js';
+import { SkuFamily, SkuName } from '@pulumi/azure-native/keyvault/index.js';
+import { listStorageAccountKeysOutput } from '@pulumi/azure-native/storage/index.js';
+import { AuthenticationType, FunctionsDeploymentStorageType, } from '@pulumi/azure-native/web/index.js';
+import * as pulumi from '@pulumi/pulumi';
+import fs from 'fs';
+import _ from 'lodash';
+import * as path from 'path';
+import { CommonAzureConstruct } from '../../common/index.js';
+import { CosmosRoleDefinition } from '../../services/cosmosdb/constants.js';
+import { AzureAppConfigurationManager, RoleDefinitionId } from '../../services/index.js';
+export class AzureFunctionApp extends CommonAzureConstruct {
+    props;
+    app;
+    appServicePlan;
+    appEnvironmentVariables = {};
+    appStorageAccount;
+    appDeploymentStorageContainer;
+    appStorageContainer;
+    appConfig;
+    appCodeArchiveFile;
+    appConfigHash;
+    appKeyVaultsByResourceGroup;
+    appConnectionStrings;
+    appConfigPrefix;
+    appConfigurationsParsedConfig;
+    appConfigurationsOriginalParsedConfig;
+    dataStorageAccount;
+    dataStorageContainer;
+    applicationInsights;
+    functionDashboard;
+    constructor(id, props) {
+        super(id, props);
+        this.props = props;
+        this.id = id;
+    }
+    initResources() {
+        this.createResourceGroup();
+        this.resolveCommonLogAnalyticsWorkspace();
+        this.resolveApplicationInsights();
+        this.createAppServicePlan();
+        this.createdParsedAppConfigurations();
+        this.createAppConfiguration();
+        this.createAppConfigurations();
+        this.createStorageAccount();
+        this.createStorageDeploymentContainer();
+        this.createStorageContainer();
+        this.createDataStorageAccount();
+        this.createDataStorageContainer();
+        this.generateStorageContainerSas();
+        this.createFunctionHosts();
+        this.createCodePackage();
+        this.createFunctionAppSiteConfig();
+        this.createFunctionApp();
+        this.createRoleAssignments();
+        this.createFunctionDashboard();
+    }
+    resolveApplicationInsights() {
+        if (!this.props.commonApplicationInsights || !this.props.commonApplicationInsights.resourceName)
+            return;
+        this.applicationInsights = getComponentOutput({
+            resourceName: this.props.commonApplicationInsights.resourceName,
+            resourceGroupName: this.props.commonApplicationInsights.resourceGroupName,
+        });
+    }
+    createAppServicePlan() {
+        this.appServicePlan = this.appServiceManager.createAppServicePlan(`${this.id}-app-service-plan`, this, {
+            ...this.props.functionApp.servicePlan,
+            name: this.id,
+            resourceGroupName: this.resourceGroup.name,
+            location: this.resourceGroup.location,
+        });
+    }
+    createdParsedAppConfigurations() { }
+    createAppConfiguration() {
+        if (this.props.functionApp.appConfiguration) {
+            this.appConfig = this.appConfigurationManager.createConfigurationStore(`${this.id}-app-configuration`, this, {
+                ...this.props.functionApp.appConfiguration,
+                resourceGroupName: this.resourceGroup.name,
+                location: this.resourceGroup.location,
+            });
+        }
+        else if (!this.props.useConfigOverride) {
+            this.appConfig = getConfigurationStoreOutput({
+                configStoreName: this.props.existingConfigStoreName,
+                resourceGroupName: this.props.existingConfigStoreResourceGroupName,
+            });
+        }
+        this.appConfigPrefix = _.camelCase(this.id);
+    }
+    createAppConfigurations() { }
+    createStorageAccount() {
+        this.appStorageAccount = this.storageManager.createStorageAccount(`${this.id}-storage-account`, this, {
+            ...this.props.functionApp.storageAccount,
+            location: this.resourceGroup.location,
+            resourceGroupName: this.resourceGroup.name,
+        });
+    }
+    createStorageDeploymentContainer() {
+        this.appDeploymentStorageContainer = this.storageManager.createStorageContainer(`${this.id}-storage-deployment-container`, this, {
+            ...this.props.functionApp.deploymentStorageContainer,
+            accountName: this.appStorageAccount.name,
+            resourceGroupName: this.resourceGroup.name,
+        });
+    }
+    createStorageContainer() {
+        if (!this.props.functionApp.storageContainer)
+            return;
+        this.appStorageContainer = this.storageManager.createStorageContainer(`${this.id}-storage-container`, this, {
+            ...this.props.functionApp.storageContainer,
+            accountName: this.appStorageAccount.name,
+            resourceGroupName: this.resourceGroup.name,
+        });
+        this.appEnvironmentVariables = {
+            ...this.appEnvironmentVariables,
+            AZURE_STORAGE_ACCOUNT_NAME: this.appStorageAccount.name,
+        };
+    }
+    createDataStorageAccount() {
+        if (!this.props.dataStorageAccount)
+            return;
+        this.dataStorageAccount = this.storageManager.createStorageAccount(`${this.id}-data-storage-account`, this, {
+            ...this.props.dataStorageAccount,
+            resourceGroupName: this.resourceGroup.name,
+            location: this.resourceGroup.location,
+        });
+        this.appEnvironmentVariables = {
+            ...this.appEnvironmentVariables,
+            AZURE_STORAGE_ACCOUNT_NAME: this.dataStorageAccount.name,
+        };
+    }
+    createDataStorageContainer() {
+        if (!this.props.dataStorageContainer)
+            return;
+        this.dataStorageContainer = this.storageManager.createStorageContainer(`${this.id}-data-storage-container`, this, {
+            ...this.props.dataStorageContainer,
+            accountName: this.dataStorageAccount.name,
+            resourceGroupName: this.resourceGroup.name,
+        });
+    }
+    generateStorageContainerSas() {
+        if (!this.props.dataStorageContainerSas)
+            return;
+        const sasToken = this.storageManager.generateContainerSasToken(`${this.id}-storage-container`, this, this.props.dataStorageContainerSas, this.dataStorageAccount);
+        const keyVault = this.keyVaultManager.createKeyVault(`${this.id}`, this, {
+            vaultName: this.props.dataKeyVaultName,
+            location: this.resourceGroup.location,
+            resourceGroupName: this.resourceGroup.name,
+            properties: {
+                sku: {
+                    name: SkuName.Standard,
+                    family: SkuFamily.A,
+                },
+                tenantId: this.props.tenantId ?? '',
+            },
+        }, { ignoreChanges: ['location'] });
+        this.monitorManager.createMonitorDiagnosticSettings(`${this.id}-${this.props.dataKeyVaultName}`, this, {
+            name: `${this.props.dataKeyVaultName}-keyvault`,
+            resourceUri: keyVault.id,
+            workspaceId: this.commonLogAnalyticsWorkspace.id,
+            logAnalyticsDestinationType: 'Dedicated',
+            logs: [
+                {
+                    categoryGroup: 'allLogs',
+                    enabled: true,
+                },
+            ],
+            metrics: [
+                {
+                    category: 'AllMetrics',
+                    enabled: true,
+                },
+            ],
+        });
+        this.keyVaultManager.createKeyVaultSecret(`${this.id}-sas-token-secret`, this, {
+            vaultName: keyVault.name,
+            secretName: this.props.dataKeyVaultSecretName,
+            resourceGroupName: this.resourceGroup.name,
+            properties: {
+                value: sasToken,
+            },
+        });
+    }
+    createFunctionHosts() {
+        const currentDirectory = path.resolve();
+        const hostsJsonFile = `${currentDirectory}/${this.props.functionApp.deploySource}/host.json`;
+        if (!fs.existsSync(hostsJsonFile))
+            return;
+        const sourceHostsConfig = JSON.parse(fs.readFileSync(hostsJsonFile).toString('utf-8'));
+        const hostsConfig = _.merge(sourceHostsConfig, this.props.hostsConfiguration, this.props.functionApp.hostsConfiguration);
+        fs.writeFileSync(hostsJsonFile, JSON.stringify(hostsConfig, null, 2));
+    }
+    createCodePackage() {
+        const currentDirectory = path.resolve();
+        this.appCodeArchiveFile = archive.getFileOutput({
+            type: 'zip',
+            sourceDir: `${currentDirectory}/${this.props.functionApp.deploySource}`,
+            outputPath: `${currentDirectory}/${this.props.functionApp.deploySource}/${this.props.functionApp.packageName}`,
+            excludes: ['*.zip'],
+        });
+    }
+    createFunctionAppSiteConfig() { }
+    createFunctionApp(resourceOptions) {
+        this.app = this.functionManager.createFunctionAppFlexConsumption(`${this.id}-function-app-flex`, this, {
+            ...this.props.functionApp,
+            name: this.props.functionApp.app.name ?? this.id,
+            serverFarmId: this.appServicePlan.id,
+            resourceGroupName: this.resourceGroup.name,
+            functionAppConfig: {
+                deployment: {
+                    storage: {
+                        type: FunctionsDeploymentStorageType.BlobContainer,
+                        value: pulumi.interpolate `${this.appStorageAccount.primaryEndpoints.apply(e => e?.blob)}${this.appDeploymentStorageContainer.name}`,
+                        authentication: {
+                            type: AuthenticationType.StorageAccountConnectionString,
+                            storageAccountConnectionStringName: 'AzureWebJobsStorage',
+                        },
+                    },
+                },
+            },
+            siteConfig: {
+                appSettings: [
+                    ..._.map(this.appEnvironmentVariables, (value, name) => ({ name, value })),
+                    {
+                        name: 'APPLICATIONINSIGHTS_CONNECTION_STRING',
+                        value: this.applicationInsights.connectionString,
+                    },
+                    {
+                        name: 'APPINSIGHTS_INSTRUMENTATIONKEY',
+                        value: this.applicationInsights.instrumentationKey,
+                    },
+                    {
+                        name: 'AzureWebJobsStorage',
+                        value: pulumi.interpolate `DefaultEndpointsProtocol=https;AccountName=${this.appStorageAccount.name};AccountKey=${listStorageAccountKeysOutput({
+                            resourceGroupName: this.resourceGroup.name,
+                            accountName: this.appStorageAccount.name,
+                        }).keys[0].value};EndpointSuffix=core.windows.net`,
+                    },
+                ],
+                connectionStrings: Object.fromEntries(this.appConnectionStrings.map(cs => [cs.name, { type: cs.type, value: cs.value }])),
+            },
+            httpsOnly: this.props.functionApp.app.httpsOnly ?? true,
+        }, { ...resourceOptions });
+    }
+    getFunctionAppPrincipalId() {
+        return this.app.identity.apply(identity => (identity?.principalId ? identity.principalId : ''));
+    }
+    createRoleAssignments() {
+        if (this.props.dataStorageAccount) {
+            this.authorisationManager.grantRoleAssignmentToStorageAccount(`${this.id}-data`, this, this.dataStorageAccount.id, this.getFunctionAppPrincipalId(), RoleDefinitionId.STORAGE_BLOB_DATA_CONTRIBUTOR);
+        }
+        this.authorisationManager.grantRoleAssignmentToStorageAccount(this.id, this, this.appStorageAccount.id, this.getFunctionAppPrincipalId(), RoleDefinitionId.STORAGE_BLOB_DATA_CONTRIBUTOR);
+        if (!this.props.useConfigOverride) {
+            this.authorisationManager.grantRoleAssignmentToApplicationConfiguration(this.id, this, this.appConfig.id, this.getFunctionAppPrincipalId(), RoleDefinitionId.APP_CONFIGURATION_DATA_READER);
+        }
+        if (this.appConfigurationsParsedConfig &&
+            AzureAppConfigurationManager.hasCosmosDependencies(this.appConfigurationsParsedConfig)) {
+            this.cosmosDbManager.grantSqlRoleDefinitionToAccount(this.id, this, this.props.existingCosmosAccountName, this.props.existingCosmosAccountResourceGroupName, this.getFunctionAppPrincipalId(), [CosmosRoleDefinition.CONTRIBUTOR, CosmosRoleDefinition.READER]);
+        }
+        if (this.appKeyVaultsByResourceGroup && this.appKeyVaultsByResourceGroup.size > 0) {
+            this.appKeyVaultsByResourceGroup.forEach((keyVaultNames, resourceGroup) => {
+                keyVaultNames.forEach(keyVaultName => {
+                    this.authorisationManager.grantRoleAssignmentToKeyVault(this.id, this, keyVaultName, resourceGroup, this.getFunctionAppPrincipalId(), RoleDefinitionId.KEY_VAULT_SECRETS_USER);
+                });
+            });
+        }
+        if (AzureAppConfigurationManager.hasEventGridTargets(this.appConfigurationsParsedConfig)) {
+            this.authorisationManager.grantRoleAssignmentToEventgridTopic(this.id, this, this.props.existingTopicName, this.props.existingTopicResourceGroupName, this.getFunctionAppPrincipalId(), RoleDefinitionId.EVENTGRID_DATA_SENDER);
+        }
+    }
+    dashboardVariables() {
+        return {
+            displayName: this.props.functionApp.dashboard.displayName,
+            name: this.id,
+            subscriptionId: this.props.subscriptionId,
+            functionAppName: this.app.name,
+            functionAppResourceGroupName: this.resourceGroup.name,
+            insightsAppName: this.applicationInsights.name,
+            insightsAppResourceGroupName: this.props.commonLogAnalyticsWorkspace?.resourceGroupName,
+        };
+    }
+    createFunctionDashboard() {
+        if (!this.props.functionApp.dashboard?.enabled)
+            return;
+        this.functionDashboard = this.portalManager.createDashBoard(`${this.id}-dsh`, this, {
+            displayName: this.props.functionApp.dashboard.displayName,
+            location: this.props.locationConfig?.[this.props.location].name,
+            dashboardName: this.id,
+            resourceGroupName: this.resourceGroup.name,
+            variables: this.dashboardVariables(),
+            panes: this.props.functionApp.dashboard.panes,
+            properties: this.appConfigurationsOriginalParsedConfig.appConfig,
+        });
+    }
+}

package/dist/src/lib/azure/construct/function-app/types.d.ts

@@ -0,0 +1,33 @@
+import { AppConfigurationProps, CommonAzureStackProps, ContainerSasTokenProps, FunctionAppFlexConsumptionProps, PortalDashboardProps, ServicePlanProps, StorageAccountProps, StorageContainerProps } from '../../index.js';
+export interface OtelProps {
+    otelTracesSamplerArg: string;
+}
+export interface FunctionAppProperties {
+    app: FunctionAppFlexConsumptionProps;
+    appConfiguration: AppConfigurationProps;
+    dashboard: PortalDashboardProps;
+    deploymentStorageContainer: StorageContainerProps;
+    deploySource: string;
+    hostsConfiguration?: string;
+    packageName: string;
+    servicePlan: ServicePlanProps;
+    storageAccount: StorageAccountProps;
+    storageContainer: StorageContainerProps;
+    timerTriggerCronExpression: string;
+}
+export interface AzureFunctionAppProps extends CommonAzureStackProps {
+    existingTopicName: string;
+    existingTopicResourceGroupName: string;
+    existingCosmosAccountResourceGroupName: string;
+    existingCosmosAccountName: string;
+    hostsConfiguration: any;
+    existingConfigStoreResourceGroupName: string;
+    existingConfigStoreName: string;
+    functionApp: FunctionAppProperties;
+    useConfigOverride?: boolean;
+    dataStorageContainer: StorageContainerProps;
+    dataStorageAccount: StorageAccountProps;
+    dataStorageContainerSas: ContainerSasTokenProps;
+    dataKeyVaultName: string;
+    dataKeyVaultSecretName: string;
+}

package/dist/src/lib/azure/construct/function-app/types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/lib/azure/construct/index.d.ts

@@ -0,0 +1,6 @@
+export * from './event-handler/index.js';
+export * from './function-app/index.js';
+export * from './rest-api-function/index.js';
+export * from './rest-api-with-cache/index.js';
+export * from './rest-api/index.js';
+export * from './site-with-webapp/index.js';

package/dist/src/lib/azure/construct/index.js

@@ -0,0 +1,6 @@
+export * from './event-handler/index.js';
+export * from './function-app/index.js';
+export * from './rest-api-function/index.js';
+export * from './rest-api-with-cache/index.js';
+export * from './rest-api/index.js';
+export * from './site-with-webapp/index.js';

package/dist/src/lib/azure/construct/rest-api/index.d.ts

@@ -0,0 +1,2 @@
+export * from './main.js';
+export * from './types.js';

package/dist/src/lib/azure/construct/rest-api/index.js

@@ -0,0 +1,2 @@
+export * from './main.js';
+export * from './types.js';

package/dist/src/lib/azure/construct/rest-api/main.d.ts

@@ -0,0 +1,20 @@
+import { GetComponentResult } from '@pulumi/azure-native/applicationinsights/index.js';
+import { Output } from '@pulumi/pulumi';
+import { CommonAzureConstruct } from '../../common/index.js';
+import { AzureApi, AzureRestApiProps } from './types.js';
+export declare class AzureRestApi extends CommonAzureConstruct {
+    props: AzureRestApiProps;
+    api: AzureApi;
+    applicationInsights: Output<GetComponentResult>;
+    constructor(id: string, props: AzureRestApiProps);
+    initResources(): void;
+    protected resolveApiKeyVault(): void;
+    protected resolveApplicationInsights(): void;
+    protected createApiManagement(): void;
+    protected createNamespaceSecretRole(): void;
+    protected createNamespaceSecret(): void;
+    protected createSubscriptionKeySecret(): void;
+    protected createApiManagementLogger(): void;
+    protected createApiDiagnostic(): void;
+    protected createDiagnosticLog(): void;
+}