@gradientedge/cdk-utils 8.64.0 → 8.66.0

package/dist/src/lib/construct/site-with-ecs-backend/main.d.ts

@@ -37,6 +37,7 @@ export declare class SiteWithEcsBackend extends CommonConstruct {
     id: string;
     siteHostedZone: route53.IHostedZone;
     siteCertificate: certificateManager.ICertificate;
+    siteRegionalCertificate: certificateManager.ICertificate;
     siteEcsPolicy: iam.PolicyDocument;
     siteEcsRole: iam.Role;
     siteEcsEnvironment: {

package/dist/src/lib/construct/site-with-ecs-backend/main.js

@@ -58,6 +58,7 @@ class SiteWithEcsBackend extends common_1.CommonConstruct {
     /* site resources */
     siteHostedZone;
     siteCertificate;
+    siteRegionalCertificate;
     siteEcsPolicy;
     siteEcsRole;
     siteEcsEnvironment;
@@ -131,6 +132,7 @@ class SiteWithEcsBackend extends common_1.CommonConstruct {
             this.props.siteCertificate.certificateArn = this.ssmManager.readStringParameterFromRegion(`${this.id}-certificate-parameter`, this, this.props.siteCertificate.certificateSsmName, this.props.siteCertificate.certificateRegion);
         }
         this.siteCertificate = this.acmManager.resolveCertificate(`${this.id}-certificate`, this, this.props.siteCertificate);
+        this.siteRegionalCertificate = this.acmManager.resolveCertificate(`${this.id}-regional-certificate`, this, this.props.siteRegionalCertificate, this.siteHostedZone);
     }
     /**
      * @summary Method to resolve secrets from SecretsManager
@@ -230,6 +232,7 @@ class SiteWithEcsBackend extends common_1.CommonConstruct {
             serviceName: `${this.id}-${this.props.stage}`,
             cpu: this.props.siteTask.cpu,
             loadBalancerName: `${this.id}-${this.props.stage}`,
+            certificate: this.siteRegionalCertificate,
             domainName: this.siteInternalDomainName,
             domainZone: this.siteHostedZone,
             listenerPort: this.props.siteTask.listenerPort,
@@ -237,6 +240,7 @@ class SiteWithEcsBackend extends common_1.CommonConstruct {
             healthCheckGracePeriod: cdk.Duration.seconds(60),
             assignPublicIp: true,
             minHealthyPercent: this.props.siteTask.minHealthyPercent,
+            maxHealthyPercent: this.props.siteTask.maxHealthyPercent,
             taskDefinition: this.props.siteTask.taskDefinition,
             taskImageOptions: {
                 enableLogging: true,
@@ -339,7 +343,7 @@ class SiteWithEcsBackend extends common_1.CommonConstruct {
     createSiteOrigin() {
         this.siteOrigin = new origins.HttpOrigin(this.siteEcsLoadBalancer.loadBalancerDnsName, {
             httpPort: this.props.siteTask.listenerPort,
-            protocolPolicy: cloudfront.OriginProtocolPolicy.HTTP_ONLY,
+            protocolPolicy: cloudfront.OriginProtocolPolicy.HTTPS_ONLY,
         });
     }
     /**

package/dist/src/lib/manager/aws/efs-manager.js

@@ -70,7 +70,8 @@ class EfsManager {
     createFileSystem(id, scope, props, vpc, accessPointOptions, securityGroup, vpcSubnets) {
         if (!props)
             throw `EFS props undefined for ${id}`;
-        const fileSystem = new efs.FileSystem(scope, `${id}`, {
+        const fileSystemId = props.provisionNewOnDeployment ? `${id}-${new Date().getMilliseconds()}` : `${id}`;
+        const fileSystem = new efs.FileSystem(scope, `${fileSystemId}`, {
             ...props,
             vpc,
             securityGroup,

package/dist/src/lib/types/aws/index.d.ts

@@ -69,6 +69,7 @@ export interface SiteWithEcsBackendProps extends CommonStackProps {
     siteCacheInvalidationDockerFilePath?: string;
     siteHealthCheck: HealthCheck;
     siteCertificate: AcmProps;
+    siteRegionalCertificate: AcmProps;
     siteCluster: EcsClusterProps;
     siteDistribution: DistributionProps;
     siteCloudfrontFunctionProps?: CloudfrontFunctionProps;
@@ -603,6 +604,7 @@ export interface LogQueryWidgetProps extends watch.LogQueryWidgetProps {
  * @subcategory Properties
  */
 export interface EfsFileSystemProps extends efs.FileSystemProps {
+    provisionNewOnDeployment?: boolean;
     rootDirectory?: string;
     transitEncryption?: string;
     transitEncryptionPort?: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils",
-  "version": "8.64.0",
+  "version": "8.66.0",
   "description": "Utilities for AWS CDK provisioning",
   "main": "dist/index.js",
   "engines": {
@@ -47,12 +47,12 @@
   },
   "dependencies": {
     "@aws-sdk/client-secrets-manager": "^3.338.0",
-    "@types/lodash": "^4.14.194",
-    "@types/node": "^20.2.3",
+    "@types/lodash": "^4.14.195",
+    "@types/node": "^20.2.4",
     "@types/uuid": "^9.0.1",
     "app-root-path": "^3.1.0",
-    "aws-cdk-lib": "^2.80.0",
-    "constructs": "^10.2.31",
+    "aws-cdk-lib": "^2.81.0",
+    "constructs": "^10.2.33",
     "lodash": "^4.17.21",
     "moment": "^2.29.4",
     "nconf": "^0.12.0",
@@ -67,7 +67,7 @@
     "@types/jest": "^29.5.1",
     "@typescript-eslint/eslint-plugin": "^5.59.7",
     "@typescript-eslint/parser": "^5.59.7",
-    "aws-cdk": "^2.80.0",
+    "aws-cdk": "^2.81.0",
     "better-docs": "^2.7.2",
     "codecov": "^3.8.3",
     "commitizen": "^4.3.0",

package/src/lib/construct/site-with-ecs-backend/main.ts

@@ -43,6 +43,7 @@ export class SiteWithEcsBackend extends CommonConstruct {
   /* site resources */
   siteHostedZone: route53.IHostedZone
   siteCertificate: certificateManager.ICertificate
+  siteRegionalCertificate: certificateManager.ICertificate
   siteEcsPolicy: iam.PolicyDocument
   siteEcsRole: iam.Role
   siteEcsEnvironment: { [key: string]: string }
@@ -136,6 +137,13 @@ export class SiteWithEcsBackend extends CommonConstruct {
       this,
       this.props.siteCertificate
     )
+
+    this.siteRegionalCertificate = this.acmManager.resolveCertificate(
+      `${this.id}-regional-certificate`,
+      this,
+      this.props.siteRegionalCertificate,
+      this.siteHostedZone
+    )
   }
 
   /**
@@ -253,6 +261,7 @@ export class SiteWithEcsBackend extends CommonConstruct {
       serviceName: `${this.id}-${this.props.stage}`,
       cpu: this.props.siteTask.cpu,
       loadBalancerName: `${this.id}-${this.props.stage}`,
+      certificate: this.siteRegionalCertificate,
       domainName: this.siteInternalDomainName,
       domainZone: this.siteHostedZone,
       listenerPort: this.props.siteTask.listenerPort,
@@ -260,6 +269,7 @@ export class SiteWithEcsBackend extends CommonConstruct {
       healthCheckGracePeriod: cdk.Duration.seconds(60),
       assignPublicIp: true,
       minHealthyPercent: this.props.siteTask.minHealthyPercent,
+      maxHealthyPercent: this.props.siteTask.maxHealthyPercent,
       taskDefinition: this.props.siteTask.taskDefinition,
       taskImageOptions: {
         enableLogging: true,
@@ -385,7 +395,7 @@ export class SiteWithEcsBackend extends CommonConstruct {
   protected createSiteOrigin() {
     this.siteOrigin = new origins.HttpOrigin(this.siteEcsLoadBalancer.loadBalancerDnsName, {
       httpPort: this.props.siteTask.listenerPort,
-      protocolPolicy: cloudfront.OriginProtocolPolicy.HTTP_ONLY,
+      protocolPolicy: cloudfront.OriginProtocolPolicy.HTTPS_ONLY,
     })
   }
 

package/src/lib/manager/aws/efs-manager.ts

@@ -58,7 +58,8 @@ export class EfsManager {
   ) {
     if (!props) throw `EFS props undefined for ${id}`
 
-    const fileSystem = new efs.FileSystem(scope, `${id}`, {
+    const fileSystemId = props.provisionNewOnDeployment ? `${id}-${new Date().getMilliseconds()}` : `${id}`
+    const fileSystem = new efs.FileSystem(scope, `${fileSystemId}`, {
       ...props,
       vpc,
       securityGroup,

package/src/lib/types/aws/index.ts

@@ -72,6 +72,7 @@ export interface SiteWithEcsBackendProps extends CommonStackProps {
   siteCacheInvalidationDockerFilePath?: string
   siteHealthCheck: HealthCheck
   siteCertificate: AcmProps
+  siteRegionalCertificate: AcmProps
   siteCluster: EcsClusterProps
   siteDistribution: DistributionProps
   siteCloudfrontFunctionProps?: CloudfrontFunctionProps
@@ -641,6 +642,7 @@ export interface LogQueryWidgetProps extends watch.LogQueryWidgetProps {
  * @subcategory Properties
  */
 export interface EfsFileSystemProps extends efs.FileSystemProps {
+  provisionNewOnDeployment?: boolean
   rootDirectory?: string
   transitEncryption?: string
   transitEncryptionPort?: number