@gradientedge/cdk-utils 9.5.0 → 9.5.1

package/dist/src/lib/cloudflare/construct/worker-site/main.d.ts

@@ -40,4 +40,11 @@ export declare class CloudflareWorkerSite extends CommonCloudflareConstruct {
     protected resolveEnvironmentVariables(): void;
     protected createWorker(): void;
     protected createWorkerDomain(): void;
+    /**
+     * @summary Resolve secrets from AWS Secrets Manager
+     * @param secretName the secret name
+     * @param secretKey the secret key
+     * @returns the secret value
+     */
+    protected resolveSecretFromAWS(secretName: string, secretKey: string): any;
 }

package/dist/src/lib/cloudflare/construct/worker-site/main.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CloudflareWorkerSite = void 0;
+const data_aws_secretsmanager_secret_1 = require("@cdktf/provider-aws/lib/data-aws-secretsmanager-secret");
+const data_aws_secretsmanager_secret_version_1 = require("@cdktf/provider-aws/lib/data-aws-secretsmanager-secret-version");
 const cdktf_1 = require("cdktf");
 const common_1 = require("../../common");
 /**
@@ -76,5 +78,23 @@ class CloudflareWorkerSite extends common_1.CommonCloudflareConstruct {
             service: this.siteWorkerScript.name,
         });
     }
+    /**
+     * @summary Resolve secrets from AWS Secrets Manager
+     * @param secretName the secret name
+     * @param secretKey the secret key
+     * @returns the secret value
+     */
+    resolveSecretFromAWS(secretName, secretKey) {
+        if (!this.awsProvider)
+            return;
+        const secret = new data_aws_secretsmanager_secret_1.DataAwsSecretsmanagerSecret(this, `${this.id}-${secretName}-${secretKey}`, { name: secretName });
+        const secretVersion = new data_aws_secretsmanager_secret_version_1.DataAwsSecretsmanagerSecretVersion(this, `${this.id}-${secretName}-${secretKey}-ver`, {
+            provider: this.awsProvider,
+            secretId: secret.id,
+        });
+        if (!secretVersion)
+            throw new Error(`Unable to resolve secret:${secretName}`);
+        return cdktf_1.Fn.lookup(cdktf_1.Fn.jsondecode(secretVersion.secretString), secretKey);
+    }
 }
 exports.CloudflareWorkerSite = CloudflareWorkerSite;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils",
-  "version": "9.5.0",
+  "version": "9.5.1",
   "description": "Utilities for AWS CDK provisioning",
   "main": "dist/index.js",
   "engines": {

package/src/lib/cloudflare/construct/worker-site/main.ts

@@ -1,3 +1,5 @@
+import { DataAwsSecretsmanagerSecret } from '@cdktf/provider-aws/lib/data-aws-secretsmanager-secret'
+import { DataAwsSecretsmanagerSecretVersion } from '@cdktf/provider-aws/lib/data-aws-secretsmanager-secret-version'
 import { DataCloudflareZone } from '@cdktf/provider-cloudflare/lib/data-cloudflare-zone'
 import {
   WorkerScript,
@@ -91,4 +93,21 @@ export class CloudflareWorkerSite extends CommonCloudflareConstruct {
       service: this.siteWorkerScript.name,
     })
   }
+
+  /**
+   * @summary Resolve secrets from AWS Secrets Manager
+   * @param secretName the secret name
+   * @param secretKey the secret key
+   * @returns the secret value
+   */
+  protected resolveSecretFromAWS(secretName: string, secretKey: string) {
+    if (!this.awsProvider) return
+    const secret = new DataAwsSecretsmanagerSecret(this, `${this.id}-${secretName}-${secretKey}`, { name: secretName })
+    const secretVersion = new DataAwsSecretsmanagerSecretVersion(this, `${this.id}-${secretName}-${secretKey}-ver`, {
+      provider: this.awsProvider,
+      secretId: secret.id,
+    })
+    if (!secretVersion) throw new Error(`Unable to resolve secret:${secretName}`)
+    return Fn.lookup(Fn.jsondecode(secretVersion.secretString), secretKey)
+  }
 }