@gradientedge/cdk-utils 8.139.0 → 8.141.0

package/dist/src/lib/cloudflare/services/firewall/main.d.ts

@@ -0,0 +1,30 @@
+import { FirewallRule } from '@cdktf/provider-cloudflare/lib/firewall-rule';
+import { CommonCloudflareConstruct } from '../../common';
+import { FirewallRuleProps } from './types';
+/**
+ * @classdesc Provides operations on Cloudflare Firewall Rules
+ * - A new instance of this class is injected into {@link CommonCloudflareConstruct} constructor.
+ * - If a custom construct extends {@link CommonCloudflareConstruct}, an instance is available within the context.
+ * @example
+ * ```
+ * import { CommonCloudflareConstruct, CommonCloudflareConstruct } from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends CommonCloudflareConstruct {
+ *   constructor(parent: Construct, id: string, props: CommonCloudflareStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.firewallManager.createApiShield('MyFirewallRule', this, props)
+ *   }
+ * }
+ * ```
+ */
+export declare class CloudflareFirewallManager {
+    /**
+     * @summary Method to create a new Cloudflare Firewall Rule
+     * @param id scoped id of the resource
+     * @param scope scope in which this resource is defined
+     * @param props firewall rule properties
+     * @see [CDKTF Firewall Rule Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/firewallRule.typescript.md}
+     */
+    createFirewallRule(id: string, scope: CommonCloudflareConstruct, props: FirewallRuleProps): FirewallRule;
+}

package/dist/src/lib/cloudflare/services/firewall/main.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudflareFirewallManager = void 0;
+const firewall_rule_1 = require("@cdktf/provider-cloudflare/lib/firewall-rule");
+const utils_1 = require("../../utils");
+/**
+ * @classdesc Provides operations on Cloudflare Firewall Rules
+ * - A new instance of this class is injected into {@link CommonCloudflareConstruct} constructor.
+ * - If a custom construct extends {@link CommonCloudflareConstruct}, an instance is available within the context.
+ * @example
+ * ```
+ * import { CommonCloudflareConstruct, CommonCloudflareConstruct } from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends CommonCloudflareConstruct {
+ *   constructor(parent: Construct, id: string, props: CommonCloudflareStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.firewallManager.createApiShield('MyFirewallRule', this, props)
+ *   }
+ * }
+ * ```
+ */
+class CloudflareFirewallManager {
+    /**
+     * @summary Method to create a new Cloudflare Firewall Rule
+     * @param id scoped id of the resource
+     * @param scope scope in which this resource is defined
+     * @param props firewall rule properties
+     * @see [CDKTF Firewall Rule Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/firewallRule.typescript.md}
+     */
+    createFirewallRule(id, scope, props) {
+        if (!props)
+            throw `Props undefined for ${id}`;
+        const zoneId = props.zoneId
+            ? props.zoneId
+            : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id;
+        const firewallRule = new firewall_rule_1.FirewallRule(scope, `${id}`, {
+            ...props,
+            zoneId,
+        });
+        (0, utils_1.createCloudflareTfOutput)(`${id}-firewallRuleFriendlyUniqueId`, scope, firewallRule.friendlyUniqueId);
+        (0, utils_1.createCloudflareTfOutput)(`${id}-firewallRuleId`, scope, firewallRule.id);
+        return firewallRule;
+    }
+}
+exports.CloudflareFirewallManager = CloudflareFirewallManager;

package/dist/src/lib/cloudflare/services/firewall/types.d.ts

@@ -0,0 +1,3 @@
+import { FirewallRuleConfig } from '@cdktf/provider-cloudflare/lib/firewall-rule';
+export interface FirewallRuleProps extends FirewallRuleConfig {
+}

package/dist/src/lib/cloudflare/services/firewall/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/lib/cloudflare/services/index.d.ts

@@ -1,3 +1,6 @@
+export * from './access';
 export * from './api-shield';
+export * from './filter';
+export * from './firewall';
 export * from './worker';
 export * from './zone';

package/dist/src/lib/cloudflare/services/index.js

@@ -14,6 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./access"), exports);
 __exportStar(require("./api-shield"), exports);
+__exportStar(require("./filter"), exports);
+__exportStar(require("./firewall"), exports);
 __exportStar(require("./worker"), exports);
 __exportStar(require("./zone"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils",
-  "version": "8.139.0",
+  "version": "8.141.0",
   "description": "Utilities for AWS CDK provisioning",
   "main": "dist/index.js",
   "engines": {

package/src/lib/cloudflare/common/construct.ts

@@ -2,14 +2,24 @@ import { CloudflareProvider } from '@cdktf/provider-cloudflare/lib/provider'
 import { TerraformStack } from 'cdktf'
 import { Construct } from 'constructs'
 import { isDevStage, isPrdStage, isTestStage, isUatStage } from '../../common'
-import { CloudflareApiShieldManager, CloudflareWorkerManager, CloudflareZoneManager } from '../services'
+import {
+  CloudflareAccessManager,
+  CloudflareApiShieldManager,
+  CloudflareFilterManager,
+  CloudflareFirewallManager,
+  CloudflareWorkerManager,
+  CloudflareZoneManager,
+} from '../services'
 import { CommonCloudflareStackProps } from './types'
 
 export class CommonCloudflareConstruct extends TerraformStack {
   declare props: CommonCloudflareStackProps
   id: string
   fullyQualifiedDomainName: string
+  accessManager: CloudflareAccessManager
   apiShieldManager: CloudflareApiShieldManager
+  filterManager: CloudflareFilterManager
+  firewallManager: CloudflareFirewallManager
   workerManager: CloudflareWorkerManager
   zoneManager: CloudflareZoneManager
 
@@ -18,7 +28,10 @@ export class CommonCloudflareConstruct extends TerraformStack {
     this.props = props
     this.id = id
 
+    this.accessManager = new CloudflareAccessManager()
     this.apiShieldManager = new CloudflareApiShieldManager()
+    this.filterManager = new CloudflareFilterManager()
+    this.firewallManager = new CloudflareFirewallManager()
     this.zoneManager = new CloudflareZoneManager()
     this.workerManager = new CloudflareWorkerManager()
 

package/src/lib/cloudflare/services/access/index.ts

@@ -0,0 +1,2 @@
+export * from './main'
+export * from './types'

package/src/lib/cloudflare/services/access/main.ts

@@ -0,0 +1,346 @@
+import { AccessApplication } from '@cdktf/provider-cloudflare/lib/access-application'
+import { AccessCaCertificate } from '@cdktf/provider-cloudflare/lib/access-ca-certificate'
+import { AccessCustomPage } from '@cdktf/provider-cloudflare/lib/access-custom-page'
+import { AccessGroup } from '@cdktf/provider-cloudflare/lib/access-group'
+import { AccessIdentityProvider } from '@cdktf/provider-cloudflare/lib/access-identity-provider'
+import { AccessMutualTlsCertificate } from '@cdktf/provider-cloudflare/lib/access-mutual-tls-certificate'
+import { CommonCloudflareConstruct } from '../../common'
+import { createCloudflareTfOutput } from '../../utils'
+import {
+  AccessApplicationProps,
+  AccessCaCertificateProps,
+  AccessCustomPageProps,
+  AccessGroupProps,
+  AccessIdentityProviderProps,
+  AccessMutualTlsCertificateProps,
+  AccessOrganizationProps,
+  AccessPolicyProps,
+  AccessRuleProps,
+  AccessServiceTokenProps,
+  AccessTagProps,
+} from './types'
+import { AccessOrganization } from '@cdktf/provider-cloudflare/lib/access-organization'
+import { AccessPolicy } from '@cdktf/provider-cloudflare/lib/access-policy'
+import { AccessRule } from '@cdktf/provider-cloudflare/lib/access-rule'
+import { AccessServiceToken } from '@cdktf/provider-cloudflare/lib/access-service-token'
+import { AccessTag } from '@cdktf/provider-cloudflare/lib/access-tag'
+
+/**
+ * @classdesc Provides operations on Cloudflare Access
+ * - A new instance of this class is injected into {@link CommonCloudflareConstruct} constructor.
+ * - If a custom construct extends {@link CommonCloudflareConstruct}, an instance is available within the context.
+ * @example
+ * ```
+ * import { CommonCloudflareConstruct, CommonCloudflareConstruct } from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends CommonCloudflareConstruct {
+ *   constructor(parent: Construct, id: string, props: CommonCloudflareStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.accessManager.createApiShield('MyAppAccess', this, props)
+ *   }
+ * }
+ * ```
+ */
+export class CloudflareAccessManager {
+  /**
+   * @summary Method to create a new Cloudflare Application Access
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access application properties
+   * @see [CDKTF Access Application Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessApplication.typescript.md}
+   */
+  public createAccessApplication(id: string, scope: CommonCloudflareConstruct, props: AccessApplicationProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessApplication = new AccessApplication(scope, `${id}`, {
+      ...props,
+      domain: `${props.domain}-${scope.props.domainName}`,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessApplicationFriendlyUniqueId`, scope, accessApplication.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessApplicationId`, scope, accessApplication.id)
+
+    return accessApplication
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access CA Certificate
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access ca certificate properties
+   * @see [CDKTF Access Ca Certificate Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessCaCertificate.typescript.md}
+   */
+  public createAccessCaCertificate(id: string, scope: CommonCloudflareConstruct, props: AccessCaCertificateProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessCaCertificate = new AccessCaCertificate(scope, `${id}`, {
+      ...props,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessCaCertificateFriendlyUniqueId`, scope, accessCaCertificate.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessCaCertificateId`, scope, accessCaCertificate.id)
+
+    return accessCaCertificate
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Custom Page
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access custom page properties
+   * @see [CDKTF Access Custom Page Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessCustomPage.typescript.md}
+   */
+  public createAccessCustomPage(id: string, scope: CommonCloudflareConstruct, props: AccessCustomPageProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessCustomPage = new AccessCustomPage(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessCustomPageFriendlyUniqueId`, scope, accessCustomPage.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessCustomPageId`, scope, accessCustomPage.id)
+
+    return accessCustomPage
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Group
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access group properties
+   * @see [CDKTF Access Group Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessGroup.typescript.md}
+   */
+  public createAccessGroup(id: string, scope: CommonCloudflareConstruct, props: AccessGroupProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessGroup = new AccessGroup(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessGroupFriendlyUniqueId`, scope, accessGroup.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessGroupId`, scope, accessGroup.id)
+
+    return accessGroup
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Identity Provider
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access identity provider properties
+   * @see [CDKTF Access Identity Provider Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessIdentityProvider.typescript.md}
+   */
+  public createAccessIdentityProvider(
+    id: string,
+    scope: CommonCloudflareConstruct,
+    props: AccessIdentityProviderProps
+  ) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessIdentityProvider = new AccessIdentityProvider(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(
+      `${id}-accessIdentityProviderFriendlyUniqueId`,
+      scope,
+      accessIdentityProvider.friendlyUniqueId
+    )
+    createCloudflareTfOutput(`${id}-accessIdentityProviderId`, scope, accessIdentityProvider.id)
+
+    return accessIdentityProvider
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Mutual Tls Certificate
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access mutual tls certificate properties
+   * @see [CDKTF Access Mutual Tls Certificate Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessMutualTlsCertificate.typescript.md}
+   */
+  public createAccessMutualTlsCertificate(
+    id: string,
+    scope: CommonCloudflareConstruct,
+    props: AccessMutualTlsCertificateProps
+  ) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessMutualTlsCertificate = new AccessMutualTlsCertificate(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(
+      `${id}-accessMutualTlsCertificateFriendlyUniqueId`,
+      scope,
+      accessMutualTlsCertificate.friendlyUniqueId
+    )
+    createCloudflareTfOutput(`${id}-accessMutualTlsCertificateId`, scope, accessMutualTlsCertificate.id)
+
+    return accessMutualTlsCertificate
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Organisation
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access organisation properties
+   * @see [CDKTF Access Organisation Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessOrganization.typescript.md}
+   */
+  public createAccessOrganization(id: string, scope: CommonCloudflareConstruct, props: AccessOrganizationProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessOrganization = new AccessOrganization(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessOrganizationFriendlyUniqueId`, scope, accessOrganization.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessOrganizationId`, scope, accessOrganization.id)
+
+    return accessOrganization
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Policy
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access policy properties
+   * @see [CDKTF Access Policy Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessPolicy.typescript.md}
+   */
+  public createAccessPolicy(id: string, scope: CommonCloudflareConstruct, props: AccessPolicyProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessPolicy = new AccessPolicy(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessPolicyFriendlyUniqueId`, scope, accessPolicy.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessPolicyId`, scope, accessPolicy.id)
+
+    return accessPolicy
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Rule
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access rule properties
+   * @see [CDKTF Access Rule Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessRule.typescript.md}
+   */
+  public createAccessRule(id: string, scope: CommonCloudflareConstruct, props: AccessRuleProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessRule = new AccessRule(scope, `${id}`, {
+      ...props,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessRuleFriendlyUniqueId`, scope, accessRule.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessRuleId`, scope, accessRule.id)
+
+    return accessRule
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Service Token
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access service token properties
+   * @see [CDKTF Access Service Token Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessServiceToken.typescript.md}
+   */
+  public createAccessServiceToken(id: string, scope: CommonCloudflareConstruct, props: AccessServiceTokenProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessServiceToken = new AccessServiceToken(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessServiceTokenFriendlyUniqueId`, scope, accessServiceToken.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessServiceTokenId`, scope, accessServiceToken.id)
+
+    return accessServiceToken
+  }
+
+  /**
+   * @summary Method to create a new Cloudflare Application Access Tag
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props access tag properties
+   * @see [CDKTF Access Tag Token Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/accessTag.typescript.md}
+   */
+  public createAccessTag(id: string, scope: CommonCloudflareConstruct, props: AccessTagProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const accessTag = new AccessTag(scope, `${id}`, {
+      ...props,
+      name: `${props.name}-${scope.props.stage}`,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-accessTagFriendlyUniqueId`, scope, accessTag.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-accessTagId`, scope, accessTag.id)
+
+    return accessTag
+  }
+}

package/src/lib/cloudflare/services/access/types.ts

@@ -0,0 +1,23 @@
+import { AccessApplicationConfig } from '@cdktf/provider-cloudflare/lib/access-application'
+import { AccessCaCertificateConfig } from '@cdktf/provider-cloudflare/lib/access-ca-certificate'
+import { AccessCustomPageConfig } from '@cdktf/provider-cloudflare/lib/access-custom-page'
+import { AccessGroupConfig } from '@cdktf/provider-cloudflare/lib/access-group'
+import { AccessIdentityProviderConfig } from '@cdktf/provider-cloudflare/lib/access-identity-provider'
+import { AccessMutualTlsCertificateConfig } from '@cdktf/provider-cloudflare/lib/access-mutual-tls-certificate'
+import { AccessOrganizationConfig } from '@cdktf/provider-cloudflare/lib/access-organization'
+import { AccessPolicyConfig } from '@cdktf/provider-cloudflare/lib/access-policy'
+import { AccessRuleConfig } from '@cdktf/provider-cloudflare/lib/access-rule'
+import { AccessServiceTokenConfig } from '@cdktf/provider-cloudflare/lib/access-service-token'
+import { AccessTagConfig } from '@cdktf/provider-cloudflare/lib/access-tag'
+
+export interface AccessApplicationProps extends AccessApplicationConfig {}
+export interface AccessCaCertificateProps extends AccessCaCertificateConfig {}
+export interface AccessCustomPageProps extends AccessCustomPageConfig {}
+export interface AccessGroupProps extends AccessGroupConfig {}
+export interface AccessIdentityProviderProps extends AccessIdentityProviderConfig {}
+export interface AccessMutualTlsCertificateProps extends AccessMutualTlsCertificateConfig {}
+export interface AccessOrganizationProps extends AccessOrganizationConfig {}
+export interface AccessPolicyProps extends AccessPolicyConfig {}
+export interface AccessRuleProps extends AccessRuleConfig {}
+export interface AccessServiceTokenProps extends AccessServiceTokenConfig {}
+export interface AccessTagProps extends AccessTagConfig {}

package/src/lib/cloudflare/services/filter/index.ts

@@ -0,0 +1,2 @@
+export * from './main'
+export * from './types'

package/src/lib/cloudflare/services/filter/main.ts

@@ -0,0 +1,48 @@
+import { Filter } from '@cdktf/provider-cloudflare/lib/filter'
+import { CommonCloudflareConstruct } from '../../common'
+import { createCloudflareTfOutput } from '../../utils'
+import { FilterProps } from './types'
+
+/**
+ * @classdesc Provides operations on Cloudflare Filters
+ * - A new instance of this class is injected into {@link CommonCloudflareConstruct} constructor.
+ * - If a custom construct extends {@link CommonCloudflareConstruct}, an instance is available within the context.
+ * @example
+ * ```
+ * import { CommonCloudflareConstruct, CommonCloudflareConstruct } from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends CommonCloudflareConstruct {
+ *   constructor(parent: Construct, id: string, props: CommonCloudflareStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.filterManager.createApiShield('MyFilter', this, props)
+ *   }
+ * }
+ * ```
+ */
+export class CloudflareFilterManager {
+  /**
+   * @summary Method to create a new Cloudflare Filter
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props filter properties
+   * @see [CDKTF Filter Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/filter.typescript.md}
+   */
+  public createApiShield(id: string, scope: CommonCloudflareConstruct, props: FilterProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const filter = new Filter(scope, `${id}`, {
+      ...props,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-filterFriendlyUniqueId`, scope, filter.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-filterId`, scope, filter.id)
+
+    return filter
+  }
+}

package/src/lib/cloudflare/services/filter/types.ts

@@ -0,0 +1,3 @@
+import { FilterConfig } from '@cdktf/provider-cloudflare/lib/filter'
+
+export interface FilterProps extends FilterConfig {}

package/src/lib/cloudflare/services/firewall/index.ts

@@ -0,0 +1,2 @@
+export * from './main'
+export * from './types'

package/src/lib/cloudflare/services/firewall/main.ts

@@ -0,0 +1,48 @@
+import { FirewallRule } from '@cdktf/provider-cloudflare/lib/firewall-rule'
+import { CommonCloudflareConstruct } from '../../common'
+import { createCloudflareTfOutput } from '../../utils'
+import { FirewallRuleProps } from './types'
+
+/**
+ * @classdesc Provides operations on Cloudflare Firewall Rules
+ * - A new instance of this class is injected into {@link CommonCloudflareConstruct} constructor.
+ * - If a custom construct extends {@link CommonCloudflareConstruct}, an instance is available within the context.
+ * @example
+ * ```
+ * import { CommonCloudflareConstruct, CommonCloudflareConstruct } from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends CommonCloudflareConstruct {
+ *   constructor(parent: Construct, id: string, props: CommonCloudflareStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.firewallManager.createApiShield('MyFirewallRule', this, props)
+ *   }
+ * }
+ * ```
+ */
+export class CloudflareFirewallManager {
+  /**
+   * @summary Method to create a new Cloudflare Firewall Rule
+   * @param id scoped id of the resource
+   * @param scope scope in which this resource is defined
+   * @param props firewall rule properties
+   * @see [CDKTF Firewall Rule Module]{@link https://github.com/cdktf/cdktf-provider-cloudflare/blob/main/docs/firewallRule.typescript.md}
+   */
+  public createFirewallRule(id: string, scope: CommonCloudflareConstruct, props: FirewallRuleProps) {
+    if (!props) throw `Props undefined for ${id}`
+
+    const zoneId = props.zoneId
+      ? props.zoneId
+      : scope.zoneManager.resolveZone(`${id}-data-zone`, scope, { name: scope.props.domainName })?.id
+
+    const firewallRule = new FirewallRule(scope, `${id}`, {
+      ...props,
+      zoneId,
+    })
+
+    createCloudflareTfOutput(`${id}-firewallRuleFriendlyUniqueId`, scope, firewallRule.friendlyUniqueId)
+    createCloudflareTfOutput(`${id}-firewallRuleId`, scope, firewallRule.id)
+
+    return firewallRule
+  }
+}

package/src/lib/cloudflare/services/firewall/types.ts

@@ -0,0 +1,3 @@
+import { FirewallRuleConfig } from '@cdktf/provider-cloudflare/lib/firewall-rule'
+
+export interface FirewallRuleProps extends FirewallRuleConfig {}

package/src/lib/cloudflare/services/index.ts

@@ -1,3 +1,6 @@
+export * from './access'
 export * from './api-shield'
+export * from './filter'
+export * from './firewall'
 export * from './worker'
 export * from './zone'