@gradientedge/cdk-utils 10.8.0 → 11.0.0

package/src/lib/aws/construct/site-with-ecs-backend/main.ts

@@ -1,587 +0,0 @@
-import { Duration } from 'aws-cdk-lib'
-import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager'
-import {
-  CachePolicy,
-  Distribution,
-  FunctionAssociation,
-  FunctionEventType,
-  IFunction,
-  OriginProtocolPolicy,
-  OriginRequestPolicy,
-  ResponseHeadersPolicy,
-} from 'aws-cdk-lib/aws-cloudfront'
-import { HttpOrigin } from 'aws-cdk-lib/aws-cloudfront-origins'
-import { IVpc } from 'aws-cdk-lib/aws-ec2'
-import {
-  AssetImage,
-  Cluster,
-  ContainerImage,
-  FargateService,
-  FargateTaskDefinition,
-  LogDriver,
-} from 'aws-cdk-lib/aws-ecs'
-import { ApplicationLoadBalancedFargateService } from 'aws-cdk-lib/aws-ecs-patterns'
-import { FileSystem } from 'aws-cdk-lib/aws-efs'
-import {
-  ApplicationListener,
-  ApplicationLoadBalancer,
-  ApplicationTargetGroup,
-} from 'aws-cdk-lib/aws-elasticloadbalancingv2'
-import { PolicyDocument, PolicyStatement, Role } from 'aws-cdk-lib/aws-iam'
-import { LogGroup } from 'aws-cdk-lib/aws-logs'
-import { IHostedZone } from 'aws-cdk-lib/aws-route53'
-import { IBucket } from 'aws-cdk-lib/aws-s3'
-import { Construct } from 'constructs'
-import _ from 'lodash'
-import { CommonConstruct } from '../../common/index.js'
-import { SiteCachePolicyProps, SiteResponseHeadersPolicyProps, SiteWithEcsBackendProps } from './types.js'
-
-/**
- * @classdesc Provides a construct to create and deploy a site hosted with an clustered ECS/ELB backend
- * @example
- * import { SiteWithEcsBackend, SiteWithEcsBackendProps } '@gradientedge/cdk-utils'
- * import { Construct } from 'constructs'
- *
- * class CustomConstruct extends SiteWithEcsBackend {
- *   constructor(parent: Construct, id: string, props: SiteWithEcsBackendProps) {
- *     super(parent, id, props)
- *     this.props = props
- *     this.id = id
- *     this.initResources()
- *   }
- * }
- */
-export class SiteWithEcsBackend extends CommonConstruct {
-  /* site properties */
-  props: SiteWithEcsBackendProps
-  id: string
-
-  /* site resources */
-  siteHostedZone: IHostedZone
-  siteCertificate: ICertificate
-  siteRegionalCertificate: ICertificate
-  siteEcsPolicy: PolicyDocument
-  siteEcsRole: Role
-  siteEcsEnvironment: { [key: string]: string }
-  siteVpc: IVpc
-  siteSecrets: any
-  siteEcsCluster: Cluster
-  siteEcsLogGroup: LogGroup
-  siteEcsBuildArgs: any = {}
-  siteEcsContainerImage: AssetImage
-  siteEcsService: FargateService
-  siteEcsTaskDefinition: FargateTaskDefinition
-  siteEcsListener: ApplicationListener
-  siteEcsLoadBalancer: ApplicationLoadBalancer
-  siteEcsTargetGroup: ApplicationTargetGroup
-  siteFileSystem: FileSystem
-  siteLogBucket: IBucket
-  siteOrigin: HttpOrigin
-  siteDistribution: Distribution
-  siteInternalDomainName: string
-  siteExternalDomainName: string
-  siteDomainNames: string[]
-  siteCloudfrontFunction: IFunction
-  siteFunctionAssociations: FunctionAssociation[]
-  siteOriginRequestPolicy: OriginRequestPolicy
-  siteOriginResponseHeadersPolicy?: ResponseHeadersPolicy
-  siteCachePolicy: CachePolicy
-
-  constructor(parent: Construct, id: string, props: SiteWithEcsBackendProps) {
-    super(parent, id, props)
-
-    this.props = props
-    this.id = id
-  }
-
-  /**
-   * @summary Initialise and provision resources
-   */
-  public initResources() {
-    this.resolveHostedZone()
-    this.resolveCertificate()
-    this.resolveSiteSecrets()
-    this.resolveSiteDomainNames()
-    this.createSiteLogBucket()
-    this.createVpc()
-    this.createEcsPolicy()
-    this.createEcsRole()
-    this.createEcsEnvironment()
-    this.createEcsCluster()
-    this.createEcsLogGroup()
-    this.createEcsBuildArgs()
-    this.createEcsContainerImage()
-    this.createEcsService()
-    this.createSiteOriginCachePolicy()
-    this.createSiteOriginRequestPolicy()
-    this.createSiteOriginResponseHeadersPolicy()
-    this.createSiteOrigin()
-    this.createSiteCloudfrontFunction()
-    this.resolveSiteFunctionAssociations()
-    this.createDistribution()
-    this.createNetworkMappings()
-    this.invalidateDistributionCache()
-  }
-
-  /**
-   * @summary Method to resolve a hosted zone based on domain attributes
-   */
-  protected resolveHostedZone() {
-    this.siteHostedZone = this.route53Manager.withHostedZoneFromFullyQualifiedDomainName(
-      `${this.id}-hosted-zone`,
-      this,
-      this.props.useExistingHostedZone
-    )
-  }
-
-  /**
-   * @summary Method to resolve a certificate based on attributes
-   */
-  protected resolveCertificate() {
-    this.resolveGlobalCertificate()
-    this.resolveRegionalCertificate()
-  }
-
-  protected resolveGlobalCertificate() {
-    if (
-      this.props.siteCertificate.useExistingCertificate &&
-      this.props.siteCertificate.certificateSsmName &&
-      this.props.siteCertificate.certificateRegion
-    ) {
-      this.props.siteCertificate.certificateArn = this.ssmManager.readStringParameterFromRegion(
-        `${this.id}-certificate-parameter`,
-        this,
-        this.props.siteCertificate.certificateSsmName,
-        this.props.siteCertificate.certificateRegion
-      )
-    }
-    this.siteCertificate = this.acmManager.resolveCertificate(
-      `${this.id}-certificate`,
-      this,
-      this.props.siteCertificate
-    )
-  }
-
-  protected resolveRegionalCertificate() {
-    if (
-      this.props.siteRegionalCertificate.useExistingCertificate &&
-      this.props.siteRegionalCertificate.certificateSsmName &&
-      this.props.siteRegionalCertificate.certificateRegion
-    ) {
-      this.props.siteRegionalCertificate.certificateArn = this.ssmManager.readStringParameterFromRegion(
-        `${this.id}-regional-certificate-parameter`,
-        this,
-        this.props.siteRegionalCertificate.certificateSsmName,
-        this.props.siteRegionalCertificate.certificateRegion
-      )
-    }
-    this.siteRegionalCertificate = this.acmManager.resolveCertificate(
-      `${this.id}-regional-certificate`,
-      this,
-      this.props.siteRegionalCertificate,
-      this.siteHostedZone
-    )
-  }
-
-  /**
-   * @summary Method to resolve secrets from SecretsManager
-   * - To be implemented in the overriding method in the implementation class
-   */
-  protected resolveSiteSecrets() {}
-
-  /**
-   * @summary Method to resolve site domain names
-   */
-  protected resolveSiteDomainNames() {
-    /* the internal domain name used by ELB */
-    this.siteInternalDomainName =
-      this.isProductionStage() || this.props.skipStageForARecords
-        ? `${this.props.siteSubDomain}-internal.${this.fullyQualifiedDomainName}`
-        : `${this.props.siteSubDomain}-internal-${this.props.stage}.${this.fullyQualifiedDomainName}`
-
-    /* the external domain name exposed to CloudFront */
-    this.siteExternalDomainName =
-      this.isProductionStage() || this.props.skipStageForARecords
-        ? `${this.props.siteSubDomain}.${this.fullyQualifiedDomainName}`
-        : `${this.props.siteSubDomain}-${this.props.stage}.${this.fullyQualifiedDomainName}`
-
-    this.siteDomainNames = [this.siteExternalDomainName]
-  }
-
-  /**
-   * Create VPC
-   */
-  protected createVpc() {
-    if (this.props.useExistingVpc) {
-      this.siteVpc = this.vpcManager.retrieveCommonVpc(`${this.id}-vpc`, this, this.props.siteVpc.vpcName)
-    } else {
-      this.siteVpc = this.vpcManager.createCommonVpc(
-        `${this.id}-vpc`,
-        this,
-        this.props.siteVpc,
-        this.props.siteVpc.vpcName
-      )
-    }
-  }
-
-  /**
-   * @summary Method to create iam policy for ECS Task
-   */
-  protected createEcsPolicy() {
-    this.siteEcsPolicy = new PolicyDocument({
-      statements: [this.iamManager.statementForCreateAnyLogStream()],
-    })
-  }
-
-  /**
-   * @summary Method to create iam role for ECS Task
-   */
-  protected createEcsRole() {
-    this.siteEcsRole = this.iamManager.createRoleForEcsExecution(`${this.id}-ecs-role`, this, this.siteEcsPolicy)
-  }
-
-  /**
-   * @summary Method to create environment variables used by ECS task
-   */
-  protected createEcsEnvironment() {
-    this.siteEcsEnvironment = {
-      LOG_LEVEL: this.props.logLevel,
-      NODE_ENV: this.props.nodeEnv,
-      TZ: this.props.timezone,
-    }
-  }
-
-  /**
-   * Method to create an ECS cluster
-   */
-  protected createEcsCluster() {
-    this.siteEcsCluster = this.ecsManager.createEcsCluster(
-      `${this.id}-cluster`,
-      this,
-      this.props.siteCluster,
-      this.siteVpc
-    )
-  }
-
-  /**
-   * Method to create log group used by ECS task
-   */
-  protected createEcsLogGroup() {
-    this.siteEcsLogGroup = this.logManager.createLogGroup(`${this.id}-ecs-log-group`, this, this.props.siteLog)
-  }
-
-  /**
-   * Method to create docker build arguments for ECS Image step
-   */
-  protected createEcsBuildArgs() {
-    this.siteEcsBuildArgs = {}
-  }
-
-  /**
-   * Method to create container image for ECS task
-   */
-  protected createEcsContainerImage() {
-    this.siteEcsContainerImage = ContainerImage.fromAsset(this.props.siteEcsContainerImagePath, {
-      buildArgs: this.siteEcsBuildArgs,
-    })
-  }
-
-  /**
-   * Method to create Application Load balanced ECS Fargate Service
-   */
-  protected createEcsService() {
-    const fargateService = new ApplicationLoadBalancedFargateService(this, `${this.id}-ecs-service`, {
-      assignPublicIp: true,
-      certificate: this.siteRegionalCertificate,
-      cluster: this.siteEcsCluster,
-      cpu: this.props.siteTask.cpu,
-      desiredCount: this.props.siteTask.desiredCount,
-      domainName: this.siteInternalDomainName,
-      domainZone: this.siteHostedZone,
-      enableECSManagedTags: true,
-      healthCheckGracePeriod: Duration.seconds(60),
-      listenerPort: this.props.siteTask.listenerPort,
-      loadBalancerName: this.resourceNameFormatter.format(this.props.siteTask.loadBalancerName ?? this.id),
-      maxHealthyPercent: this.props.siteTask.maxHealthyPercent,
-      memoryLimitMiB: this.props.siteTask.memoryLimitMiB,
-      minHealthyPercent: this.props.siteTask.minHealthyPercent,
-      serviceName: this.resourceNameFormatter.format(this.props.siteTask.serviceName ?? this.id),
-      taskDefinition: this.props.siteTask.taskDefinition,
-      taskImageOptions: {
-        containerPort: this.props.siteTask.taskImageOptions?.containerPort,
-        enableLogging: true,
-        environment: this.siteEcsEnvironment,
-        executionRole: this.siteEcsRole,
-        image: this.siteEcsContainerImage,
-        logDriver: LogDriver.awsLogs({
-          logGroup: this.siteEcsLogGroup,
-          logRetention: this.props.siteTask.logging?.logRetention,
-          multilinePattern: this.props.siteTask.logging?.multilinePattern,
-          streamPrefix: `${this.id}-${this.props.stage}/ecs`,
-        }),
-        secrets: this.siteSecrets,
-        taskRole: this.siteEcsRole,
-      },
-    })
-
-    if (this.props.siteHealthCheck) {
-      fargateService.targetGroup.configureHealthCheck({
-        enabled: this.props.siteHealthCheck.enabled ?? true,
-        healthyGrpcCodes: this.props.siteHealthCheck.healthyGrpcCodes,
-        healthyHttpCodes: this.props.siteHealthCheck.healthyHttpCodes,
-        healthyThresholdCount: this.props.siteHealthCheck.healthyThresholdCount,
-        interval: Duration.seconds(this.props.siteHealthCheck.intervalInSecs),
-        path: this.props.siteHealthCheck.path ?? '/',
-        port: this.props.siteHealthCheck.port,
-        protocol: this.props.siteHealthCheck.protocol,
-        timeout: Duration.seconds(this.props.siteHealthCheck.timeoutInSecs),
-        unhealthyThresholdCount: this.props.siteHealthCheck.unhealthyThresholdCount,
-      })
-    }
-
-    this.siteEcsService = fargateService.service
-    this.siteEcsTaskDefinition = fargateService.taskDefinition
-    this.siteEcsListener = fargateService.listener
-    this.siteEcsLoadBalancer = fargateService.loadBalancer
-    this.siteEcsTargetGroup = fargateService.targetGroup
-
-    fargateService.loadBalancer.logAccessLogs(this.siteLogBucket, 'alb')
-
-    if (this.props.siteTask.siteScaling) {
-      const scalableTaskCount = this.siteEcsService.autoScaleTaskCount({
-        maxCapacity: this.props.siteTask.siteScaling.maxCapacity ?? 4,
-        minCapacity: this.props.siteTask.siteScaling.minCapacity,
-      })
-
-      if (this.props.siteTask.siteScaling.scaleOnCpuUtilization) {
-        scalableTaskCount.scaleOnCpuUtilization(`${this.id}-cpu-scaling`, {
-          targetUtilizationPercent: this.props.siteTask.siteScaling.scaleOnCpuUtilization ?? 50,
-        })
-      }
-
-      if (this.props.siteTask.siteScaling.scaleOnMemoryUtilization) {
-        scalableTaskCount.scaleOnMemoryUtilization(`${this.id}-mem-scaling`, {
-          targetUtilizationPercent: this.props.siteTask.siteScaling.scaleOnMemoryUtilization ?? 50,
-        })
-      }
-
-      if (this.props.siteTask.siteScaling.scaleOnRequestsPerTarget) {
-        scalableTaskCount.scaleOnRequestCount(`${this.id}-req-count`, {
-          requestsPerTarget: this.props.siteTask.siteScaling.scaleOnRequestsPerTarget ?? 10000,
-          targetGroup: this.siteEcsTargetGroup,
-        })
-      }
-
-      if (this.props.siteTask.siteScaling.scaleOnSchedule) {
-        scalableTaskCount.scaleOnSchedule(`${this.id}-schedule`, this.props.siteTask.siteScaling.scaleOnSchedule)
-      }
-    }
-
-    /* if enabled, add efs with access point and mount */
-    if (this.props.siteFileSystem) {
-      this.siteFileSystem = this.efsManager.createFileSystem(
-        `${this.id}-fs`,
-        this,
-        this.props.siteFileSystem,
-        this.siteVpc,
-        this.props.siteFileSystemAccessPoints
-      )
-
-      /* allow access to/from EFS from Fargate ECS service */
-      this.siteFileSystem.connections.allowDefaultPortFrom(this.siteEcsService.connections)
-      this.siteFileSystem.connections.allowDefaultPortTo(this.siteEcsService.connections)
-
-      /* add EFS permissions to ECS Role */
-      this.siteEcsRole.addToPolicy(
-        new PolicyStatement(this.iamManager.statementForWriteEfs([this.siteFileSystem.fileSystemArn]))
-      )
-
-      /* add the efs volume to ecs task definition */
-      this.siteEcsTaskDefinition.addVolume({
-        efsVolumeConfiguration: {
-          authorizationConfig: this.props.siteFileSystem.authorizationConfig,
-          fileSystemId: this.siteFileSystem.fileSystemId,
-          rootDirectory: this.props.siteFileSystem.rootDirectory,
-          transitEncryption: this.props.siteFileSystem.transitEncryption,
-          transitEncryptionPort: this.props.siteFileSystem.transitEncryptionPort,
-        },
-        name: this.resourceNameFormatter.format(this.props.siteFileSystem?.fileSystemName ?? this.id),
-      })
-
-      if (this.props.siteTask.mountPoints && !_.isEmpty(this.props.siteTask.mountPoints)) {
-        _.forEach(this.props.siteTask.mountPoints, mountPoint => {
-          this.siteEcsTaskDefinition.defaultContainer?.addMountPoints({
-            containerPath: mountPoint.containerPath,
-            readOnly: mountPoint.readOnly,
-            sourceVolume: this.resourceNameFormatter.format(this.props.siteFileSystem?.fileSystemName ?? this.id),
-          })
-        })
-      }
-    }
-
-    this.addCfnOutput(`${this.id}-loadBalancerArn`, this.siteEcsLoadBalancer.loadBalancerArn ?? '')
-    this.addCfnOutput(`${this.id}-loadBalancerName`, this.siteEcsLoadBalancer.loadBalancerName ?? '')
-    this.addCfnOutput(`${this.id}-loadBalancerFullName`, this.siteEcsLoadBalancer.loadBalancerFullName ?? '')
-    this.addCfnOutput(`${this.id}-loadBalancerDnsName`, this.siteEcsLoadBalancer.loadBalancerDnsName ?? '')
-  }
-
-  /**
-   * Method to create log bucket for site distribution
-   */
-  protected createSiteLogBucket() {
-    this.siteLogBucket = this.s3Manager.createS3Bucket(`${this.id}-site-logs`, this, this.props.siteLogBucket)
-  }
-
-  protected createSiteCachePolicy(id: string, siteCachePolicy: SiteCachePolicyProps) {
-    if (!siteCachePolicy.cachePolicyName) throw `SiteCachePolicy cachePolicyName undefined for ${id}`
-
-    return new CachePolicy(this, `${id}`, {
-      cachePolicyName: this.resourceNameFormatter.format(siteCachePolicy.cachePolicyName),
-      comment: `Policy for ${this.id}-distribution - ${this.props.stage} stage`,
-      cookieBehavior: siteCachePolicy.cookieBehavior,
-      enableAcceptEncodingBrotli: siteCachePolicy.enableAcceptEncodingBrotli,
-      enableAcceptEncodingGzip: siteCachePolicy.enableAcceptEncodingGzip,
-      headerBehavior: siteCachePolicy.headerBehavior,
-      maxTtl: Duration.seconds(siteCachePolicy.maxTtlInSeconds),
-      minTtl: Duration.seconds(siteCachePolicy.minTtlInSeconds),
-      queryStringBehavior: siteCachePolicy.queryStringBehavior,
-    })
-  }
-
-  protected createSiteOriginCachePolicy() {
-    if (!this.props.siteCachePolicy) return
-    this.siteCachePolicy = this.createSiteCachePolicy(`${this.id}-site-cache-policy`, this.props.siteCachePolicy)
-    _.assign(this.props.siteDistribution.defaultBehavior, {
-      cachePolicy: this.siteCachePolicy,
-    })
-  }
-
-  protected createSiteOriginRequestPolicy() {
-    if (!this.props.siteOriginRequestPolicy) return
-    if (!this.props.siteOriginRequestPolicy.originRequestPolicyName)
-      throw `SiteOriginRequestPolicy originRequestPolicyName undefined for ${this.id}`
-
-    this.siteOriginRequestPolicy = new OriginRequestPolicy(this, `${this.id}-sorp`, {
-      comment: `Request Policy for ${this.id}-distribution - ${this.props.stage} stage`,
-      cookieBehavior: this.props.siteOriginRequestPolicy.cookieBehavior,
-      headerBehavior: this.props.siteOriginRequestPolicy.headerBehavior,
-      originRequestPolicyName: this.resourceNameFormatter.format(
-        this.props.siteOriginRequestPolicy.originRequestPolicyName
-      ),
-      queryStringBehavior: this.props.siteOriginRequestPolicy.queryStringBehavior,
-    })
-
-    _.assign(this.props.siteDistribution.defaultBehavior, {
-      originRequestPolicy: this.siteOriginRequestPolicy,
-    })
-  }
-
-  protected createResponseHeaderPolicy(props: SiteResponseHeadersPolicyProps) {
-    if (!props) return undefined
-    if (!props.responseHeadersPolicyName)
-      throw `SiteResponseHeadersPolicy responseHeadersPolicyName undefined for ${this.id}`
-
-    return new ResponseHeadersPolicy(this, `${this.id}-${props.type}-srhp`, {
-      ...props,
-      comment: `Response Header Policy for ${props.type} for ${this.id}-distribution - ${this.props.stage} stage`,
-      responseHeadersPolicyName: this.resourceNameFormatter.format(props.responseHeadersPolicyName),
-      securityHeadersBehavior: {
-        ...props.securityHeadersBehavior,
-        strictTransportSecurity: {
-          ...props.securityHeadersBehavior?.strictTransportSecurity,
-          accessControlMaxAge: Duration.seconds(
-            props.securityHeadersBehavior?.strictTransportSecurity?.accessControlMaxAgeInSeconds
-          ),
-        },
-      },
-    })
-  }
-
-  protected createSiteOriginResponseHeadersPolicy() {
-    if (!this.props.siteOriginResponseHeadersPolicy) return
-    this.siteOriginResponseHeadersPolicy = this.createResponseHeaderPolicy(this.props.siteOriginResponseHeadersPolicy)
-    _.assign(this.props.siteDistribution.defaultBehavior, {
-      responseHeadersPolicy: this.siteOriginResponseHeadersPolicy,
-    })
-  }
-
-  protected createSiteOrigin() {
-    this.siteOrigin = new HttpOrigin(this.siteInternalDomainName, {
-      httpPort: this.props.siteTask.listenerPort,
-      originId: `${this.id}-server`,
-      protocolPolicy: OriginProtocolPolicy.HTTPS_ONLY,
-    })
-  }
-
-  /**
-   * @summary Method to create a site cloudfront function
-   */
-  protected createSiteCloudfrontFunction() {
-    if (this.props.siteCloudfrontFunctionProps) {
-      this.siteCloudfrontFunction = this.cloudFrontManager.createCloudfrontFunction(
-        `${this.id}-function`,
-        this,
-        this.props.siteCloudfrontFunctionProps
-      )
-    }
-  }
-
-  /**
-   * @summary Method to create a site cloudfront function associations
-   */
-  protected resolveSiteFunctionAssociations() {
-    if (this.props.siteCloudfrontFunctionProps) {
-      this.siteFunctionAssociations = [
-        {
-          eventType: FunctionEventType.VIEWER_REQUEST,
-          function: this.siteCloudfrontFunction,
-        },
-      ]
-    }
-  }
-
-  /**
-   * Method to create Site distribution
-   */
-  protected createDistribution() {
-    this.siteDistribution = this.cloudFrontManager.createDistributionWithHttpOrigin(
-      `${this.id}-distribution`,
-      this,
-      this.props.siteDistribution,
-      this.siteOrigin,
-      this.siteDomainNames,
-      this.siteLogBucket,
-      this.siteCertificate,
-      this.siteFunctionAssociations,
-      this.props.siteDistribution.defaultBehavior.responseHeadersPolicy
-    )
-  }
-
-  /**
-   * Method to create Route53 records for distribution
-   */
-  protected createNetworkMappings() {
-    this.route53Manager.createCloudFrontTargetARecord(
-      `${this.id}-a-record`,
-      this,
-      this.siteDistribution,
-      this.siteHostedZone,
-      this.props.siteRecordName,
-      this.props.skipStageForARecords
-    )
-  }
-
-  /**
-   * Method to invalidation the cloudfront distribution cache after a deployment
-   */
-  protected invalidateDistributionCache() {
-    if (this.props.siteCacheInvalidationDockerFilePath) {
-      this.cloudFrontManager.invalidateCache(
-        `${this.id}-cache-invalidation`,
-        this,
-        this.props.siteCacheInvalidationDockerFilePath,
-        this.siteDistribution.distributionId
-      )
-    }
-  }
-}

package/src/lib/aws/construct/site-with-ecs-backend/types.ts

@@ -1,71 +0,0 @@
-import { CommonStackProps } from '../../common/index.js'
-import {
-  AcmProps,
-  CloudfrontFunctionProps,
-  DistributionProps,
-  EcsApplicationLoadBalancedFargateServiceProps,
-  EcsClusterProps,
-  EfsAccessPointOptions,
-  EfsFileSystemProps,
-  HealthCheck,
-  LogProps,
-  S3BucketProps,
-} from '../../services/index.js'
-import { VpcProps } from 'aws-cdk-lib/aws-ec2'
-import {
-  OriginRequestPolicyProps,
-  ResponseHeadersStrictTransportSecurity,
-  ResponseSecurityHeadersBehavior,
-  ResponseHeadersPolicyProps,
-  CachePolicyProps,
-} from 'aws-cdk-lib/aws-cloudfront'
-import { SiteResponseHeaderPolicyType } from './constants.js'
-
-/**
- */
-export interface SiteWithEcsBackendProps extends CommonStackProps {
-  logLevel: string
-  nodeEnv: string
-  siteCacheInvalidationDockerFilePath?: string
-  siteCertificate: AcmProps
-  siteCloudfrontFunctionProps?: CloudfrontFunctionProps
-  siteCluster: EcsClusterProps
-  siteDistribution: DistributionProps
-  siteEcsContainerImagePath: string
-  siteFileSystem?: EfsFileSystemProps
-  siteFileSystemAccessPoints?: EfsAccessPointOptions[]
-  siteFunctionFilePath?: string
-  siteHealthCheck: HealthCheck
-  siteLog: LogProps
-  siteLogBucket: S3BucketProps
-  siteCachePolicy?: SiteCachePolicyProps
-  siteOriginRequestPolicy: OriginRequestPolicyProps
-  siteOriginResponseHeadersPolicy: SiteResponseHeadersPolicyProps
-  siteRecordName?: string
-  siteRegionalCertificate: AcmProps
-  siteSubDomain: string
-  siteTask: EcsApplicationLoadBalancedFargateServiceProps
-  siteVpc: VpcProps
-  timezone: string
-  useExistingHostedZone: boolean
-  useExistingVpc: boolean
-}
-
-export interface SiteResponseHeadersStrictTransportSecurity extends ResponseHeadersStrictTransportSecurity {
-  accessControlMaxAgeInSeconds: number
-}
-
-export interface SiteSecurityHeadersBehavior extends ResponseSecurityHeadersBehavior {
-  strictTransportSecurity: SiteResponseHeadersStrictTransportSecurity
-}
-
-export interface SiteResponseHeadersPolicyProps extends ResponseHeadersPolicyProps {
-  securityHeadersBehavior: SiteSecurityHeadersBehavior
-  type: SiteResponseHeaderPolicyType
-}
-
-export interface SiteCachePolicyProps extends CachePolicyProps {
-  defaultTtlInSeconds: number
-  minTtlInSeconds: number
-  maxTtlInSeconds: number
-}

package/src/lib/aws/construct/site-with-lambda-backend/constants.ts

@@ -1,6 +0,0 @@
-export enum SiteWithLambdaBackendResponseHeaderPolicyType {
-  ORIGIN = 'origin',
-  STATIC = 'static',
-}
-
-export const LAMBDA_ALIAS_NAME_CURRENT = 'latest'

package/src/lib/aws/construct/site-with-lambda-backend/index.ts

@@ -1,3 +0,0 @@
-export * from './constants.js'
-export * from './main.js'
-export * from './types.js'