@guardian/cdk 0.0.0-canary-20260805130549

package/lib/bin/index.js

@@ -0,0 +1,124 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const yargs_1 = __importDefault(require("yargs"));
+const constants_1 = require("../constants");
+const aws_credential_provider_1 = require("./aws-credential-provider");
+const account_readiness_1 = require("./commands/account-readiness");
+const aws_cdk_version_1 = require("./commands/aws-cdk-version");
+const new_project_1 = require("./commands/new-project");
+const Commands = {
+    AwsCdkVersion: "aws-cdk-version",
+    AccountReadiness: "account-readiness",
+    New: "new",
+};
+const parseCommandLineArguments = () => {
+    /*
+    The type of `yargs.argv` is `T | Promise<T>`.
+    To avoid creating custom type guards, use `Promise.resolve` which takes `T | PromiseLike<T>` and returns `Promise<T>`.
+    That is, use `Promise.resolve` to provide a single type.
+    See https://github.com/DefinitelyTyped/DefinitelyTyped/blob/7b2f0d45985538a40df96244481bfc6cd309c250/types/yargs/index.d.ts#L74
+     */
+    return Promise.resolve(yargs_1.default
+        .usage("$0 COMMAND [args]")
+        .command(Commands.AwsCdkVersion, "Print the version of AWS CDK libraries being used")
+        .command(Commands.AccountReadiness, "Perform checks on an AWS account to see if it is GuCDK ready", (yargs) => yargs
+        .option("profile", { type: "string", description: "AWS profile" })
+        .option("region", { type: "string", description: "AWS region", default: "eu-west-1" }))
+        .command(Commands.New, "Creates a new CDK project within a `cdk` directory at the root of the repository", (yargs) => yargs
+        .option("init", {
+        type: "boolean",
+        description: "Create the cdk directory before building the app and stack files (defaults to true)",
+        default: true,
+    })
+        .option("app", {
+        type: "string",
+        description: "The name of your application e.g. Amigo",
+        demandOption: true,
+    })
+        .option("stack", {
+        type: "string",
+        description: "The Guardian stack being used (as defined in your riff-raff.yaml). This will be applied as a tag to all of your resources.",
+        demandOption: true,
+    })
+        .option("yaml-template-location", {
+        type: "string",
+        description: "Path to the YAML CloudFormation template",
+    })
+        .option("stage", {
+        description: "The stage(s) for your stack. Can be specified multiple times, e.g. --stage CODE --stage PROD",
+        type: "array",
+        demandOption: true,
+    })
+        .option("region", {
+        description: "The region(s) for your stack. Can be specified multiple times, e.g. --region eu-west-1 --region us-east-1",
+        type: "array",
+        default: ["eu-west-1"],
+    })
+        .option("package-manager", {
+        description: "The Node package manager to use. Match this to the repository (package-lock.json = npm, yarn.lock = yarn). If the repository has neither file, and there is no strong convention in your team, we recommend npm.",
+        choices: ["npm", "yarn"],
+        demandOption: true,
+    }))
+        .version(`${constants_1.LibraryInfo.VERSION} (using aws-cdk ${constants_1.LibraryInfo.AWS_CDK_VERSION}, aws-cdk-lib ${constants_1.LibraryInfo.AWS_CDK_LIB_VERSION}, constructs ${constants_1.LibraryInfo.CONSTRUCTS_VERSION})`)
+        .demandCommand(1, "") // just print help
+        .help()
+        .alias("h", "help").argv);
+};
+parseCommandLineArguments()
+    .then((argv) => {
+    const command = argv._[0];
+    switch (command) {
+        case Commands.AwsCdkVersion: {
+            return (0, aws_cdk_version_1.awsCdkVersionCommand)();
+        }
+        case Commands.AccountReadiness: {
+            // TODO remove casting as yargs should be able to infer the type of the options
+            const profile = argv.profile;
+            const region = argv.region;
+            return (0, account_readiness_1.accountReadinessCommand)({ credentialProvider: (0, aws_credential_provider_1.awsCredentialProviderChain)(profile), region: region });
+        }
+        case Commands.New: {
+            // TODO remove casting as yargs should be able to infer the type of the options
+            const init = argv.init;
+            const app = argv.app;
+            const stack = argv.stack;
+            const yamlTemplateLocation = argv["yaml-template-location"];
+            const stage = argv.stage;
+            const regions = argv.region;
+            const packageManager = argv["package-manager"];
+            const stages = stage.map((_) => _.toUpperCase());
+            return (0, new_project_1.newCdkProject)({
+                init,
+                app,
+                stack,
+                yamlTemplateLocation,
+                stages,
+                regions,
+                packageManager: packageManager,
+            });
+        }
+        default:
+            throw new Error(`Unknown command: ${command ?? ""}`);
+    }
+})
+    .then((commandResponse) => {
+    if (typeof commandResponse === "number") {
+        process.exitCode = commandResponse;
+    }
+    else if (typeof commandResponse === "string") {
+        console.log(commandResponse);
+    }
+    else {
+        const responseWithVersionInfo = { "@guardian/cdk": { version: constants_1.LibraryInfo.VERSION }, ...commandResponse };
+        console.log(JSON.stringify(responseWithVersionInfo));
+    }
+})
+    .catch((err) => {
+    console.error(err);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/lib/bin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bin/index.ts"],"names":[],"mappings":";;;;;;AAEA,kDAA0B;AAC1B,4CAA2C;AAE3C,uEAAuE;AACvE,oEAAuE;AACvE,gEAAkE;AAElE,wDAAuD;AAEvD,MAAM,QAAQ,GAAG;IACf,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,mBAAmB;IACrC,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,MAAM,yBAAyB,GAAG,GAAG,EAAE;IACrC;;;;;OAKG;IACH,OAAO,OAAO,CAAC,OAAO,CACpB,eAAK;SACF,KAAK,CAAC,mBAAmB,CAAC;SAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,mDAAmD,CAAC;SACpF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,8DAA8D,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5G,KAAK;SACF,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;SACjE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CACzF;SACA,OAAO,CACN,QAAQ,CAAC,GAAG,EACZ,kFAAkF,EAClF,CAAC,KAAK,EAAE,EAAE,CACR,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qFAAqF;QAClG,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;QACtD,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,4HAA4H;QAC9H,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,wBAAwB,EAAE;QAChC,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,WAAW,EACT,8FAA8F;QAChG,IAAI,EAAE,OAAO;QACb,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,WAAW,EACT,2GAA2G;QAC7G,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,CAAC,WAAW,CAAC;KACvB,CAAC;SACD,MAAM,CAAC,iBAAiB,EAAE;QACzB,WAAW,EACT,kNAAkN;QACpN,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,IAAI;KACnB,CAAC,CACP;SACA,OAAO,CACN,GAAG,uBAAW,CAAC,OAAO,mBAAmB,uBAAW,CAAC,eAAe,iBAAiB,uBAAW,CAAC,mBAAmB,gBAAgB,uBAAW,CAAC,kBAAkB,GAAG,CACtK;SACA,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB;SACvC,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAC3B,CAAC;AACJ,CAAC,CAAC;AAEF,yBAAyB,EAAE;KACxB,IAAI,CAAC,CAAC,IAAI,EAAsB,EAAE;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5B,OAAO,IAAA,sCAAoB,GAAE,CAAC;QAChC,CAAC;QACD,KAAK,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC/B,+EAA+E;YAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;YACrC,OAAO,IAAA,2CAAuB,EAAC,EAAE,kBAAkB,EAAE,IAAA,oDAA0B,EAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,+EAA+E;YAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAe,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;YACnC,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,CAAuB,CAAC;YAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAiB,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAkB,CAAC;YACxC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAW,CAAC;YAEzD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAEjD,OAAO,IAAA,2BAAa,EAAC;gBACnB,IAAI;gBACJ,GAAG;gBACH,KAAK;gBACL,oBAAoB;gBACpB,MAAM;gBACN,OAAO;gBACP,cAAc,EAAE,cAAgC;aACjD,CAAC,CAAC;QACL,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;KACD,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE;IACxB,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,eAAe,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,uBAAuB,GAAG,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,uBAAW,CAAC,OAAO,EAAE,EAAE,GAAG,eAAe,EAAE,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n\nimport yargs from \"yargs\";\nimport { LibraryInfo } from \"../constants\";\nimport type { CliCommandResponse } from \"../types/cli\";\nimport { awsCredentialProviderChain } from \"./aws-credential-provider\";\nimport { accountReadinessCommand } from \"./commands/account-readiness\";\nimport { awsCdkVersionCommand } from \"./commands/aws-cdk-version\";\nimport type { PackageManager } from \"./commands/new-project\";\nimport { newCdkProject } from \"./commands/new-project\";\n\nconst Commands = {\n  AwsCdkVersion: \"aws-cdk-version\",\n  AccountReadiness: \"account-readiness\",\n  New: \"new\",\n};\n\nconst parseCommandLineArguments = () => {\n  /*\n  The type of `yargs.argv` is `T | Promise<T>`.\n  To avoid creating custom type guards, use `Promise.resolve` which takes `T | PromiseLike<T>` and returns `Promise<T>`.\n  That is, use `Promise.resolve` to provide a single type.\n  See https://github.com/DefinitelyTyped/DefinitelyTyped/blob/7b2f0d45985538a40df96244481bfc6cd309c250/types/yargs/index.d.ts#L74\n   */\n  return Promise.resolve(\n    yargs\n      .usage(\"$0 COMMAND [args]\")\n      .command(Commands.AwsCdkVersion, \"Print the version of AWS CDK libraries being used\")\n      .command(Commands.AccountReadiness, \"Perform checks on an AWS account to see if it is GuCDK ready\", (yargs) =>\n        yargs\n          .option(\"profile\", { type: \"string\", description: \"AWS profile\" })\n          .option(\"region\", { type: \"string\", description: \"AWS region\", default: \"eu-west-1\" }),\n      )\n      .command(\n        Commands.New,\n        \"Creates a new CDK project within a `cdk` directory at the root of the repository\",\n        (yargs) =>\n          yargs\n            .option(\"init\", {\n              type: \"boolean\",\n              description: \"Create the cdk directory before building the app and stack files (defaults to true)\",\n              default: true,\n            })\n            .option(\"app\", {\n              type: \"string\",\n              description: \"The name of your application e.g. Amigo\",\n              demandOption: true,\n            })\n            .option(\"stack\", {\n              type: \"string\",\n              description:\n                \"The Guardian stack being used (as defined in your riff-raff.yaml). This will be applied as a tag to all of your resources.\",\n              demandOption: true,\n            })\n            .option(\"yaml-template-location\", {\n              type: \"string\",\n              description: \"Path to the YAML CloudFormation template\",\n            })\n            .option(\"stage\", {\n              description:\n                \"The stage(s) for your stack. Can be specified multiple times, e.g. --stage CODE --stage PROD\",\n              type: \"array\",\n              demandOption: true,\n            })\n            .option(\"region\", {\n              description:\n                \"The region(s) for your stack. Can be specified multiple times, e.g. --region eu-west-1 --region us-east-1\",\n              type: \"array\",\n              default: [\"eu-west-1\"],\n            })\n            .option(\"package-manager\", {\n              description:\n                \"The Node package manager to use. Match this to the repository (package-lock.json = npm, yarn.lock = yarn). If the repository has neither file, and there is no strong convention in your team, we recommend npm.\",\n              choices: [\"npm\", \"yarn\"],\n              demandOption: true,\n            }),\n      )\n      .version(\n        `${LibraryInfo.VERSION} (using aws-cdk ${LibraryInfo.AWS_CDK_VERSION}, aws-cdk-lib ${LibraryInfo.AWS_CDK_LIB_VERSION}, constructs ${LibraryInfo.CONSTRUCTS_VERSION})`,\n      )\n      .demandCommand(1, \"\") // just print help\n      .help()\n      .alias(\"h\", \"help\").argv,\n  );\n};\n\nparseCommandLineArguments()\n  .then((argv): CliCommandResponse => {\n    const command = argv._[0];\n    switch (command) {\n      case Commands.AwsCdkVersion: {\n        return awsCdkVersionCommand();\n      }\n      case Commands.AccountReadiness: {\n        // TODO remove casting as yargs should be able to infer the type of the options\n        const profile = argv.profile as string;\n        const region = argv.region as string;\n        return accountReadinessCommand({ credentialProvider: awsCredentialProviderChain(profile), region: region });\n      }\n      case Commands.New: {\n        // TODO remove casting as yargs should be able to infer the type of the options\n        const init = argv.init as boolean;\n        const app = argv.app as string;\n        const stack = argv.stack as string;\n        const yamlTemplateLocation = argv[\"yaml-template-location\"] as string | undefined;\n        const stage = argv.stage as string[];\n        const regions = argv.region as string[];\n        const packageManager = argv[\"package-manager\"] as string;\n\n        const stages = stage.map((_) => _.toUpperCase());\n\n        return newCdkProject({\n          init,\n          app,\n          stack,\n          yamlTemplateLocation,\n          stages,\n          regions,\n          packageManager: packageManager as PackageManager,\n        });\n      }\n      default:\n        throw new Error(`Unknown command: ${command ?? \"\"}`);\n    }\n  })\n  .then((commandResponse) => {\n    if (typeof commandResponse === \"number\") {\n      process.exitCode = commandResponse;\n    } else if (typeof commandResponse === \"string\") {\n      console.log(commandResponse);\n    } else {\n      const responseWithVersionInfo = { \"@guardian/cdk\": { version: LibraryInfo.VERSION }, ...commandResponse };\n      console.log(JSON.stringify(responseWithVersionInfo));\n    }\n  })\n  .catch((err) => {\n    console.error(err);\n    process.exitCode = 1;\n  });\n"]}

package/lib/constants/__mocks__/library-info.d.ts

@@ -0,0 +1,6 @@
+export declare const LibraryInfo: {
+    VERSION: string;
+    AWS_CDK_VERSION: string;
+    CONSTRUCTS_VERSION: string;
+};
+//# sourceMappingURL=library-info.d.ts.map

package/lib/constants/__mocks__/library-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-info.d.ts","sourceRoot":"","sources":["../../../src/constants/__mocks__/library-info.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,WAAW;;;;CAIvB,CAAC"}

package/lib/constants/__mocks__/library-info.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LibraryInfo = void 0;
+const mockAwsCdkVersion = "0.0.1";
+const mockConstructsVersion = "0.0.1";
+exports.LibraryInfo = {
+    VERSION: "1.0.0",
+    AWS_CDK_VERSION: mockAwsCdkVersion,
+    CONSTRUCTS_VERSION: mockConstructsVersion,
+};
+//# sourceMappingURL=library-info.js.map

package/lib/constants/__mocks__/library-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-info.js","sourceRoot":"","sources":["../../../src/constants/__mocks__/library-info.ts"],"names":[],"mappings":";;;AAAA,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAEzB,QAAA,WAAW,GAAG;IACzB,OAAO,EAAE,OAAO;IAChB,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,qBAAqB;CAC1C,CAAC","sourcesContent":["const mockAwsCdkVersion = \"0.0.1\";\nconst mockConstructsVersion = \"0.0.1\";\n\nexport const LibraryInfo = {\n  VERSION: \"1.0.0\",\n  AWS_CDK_VERSION: mockAwsCdkVersion,\n  CONSTRUCTS_VERSION: mockConstructsVersion,\n};\n"]}

package/lib/constants/__mocks__/tracking-tag.d.ts

@@ -0,0 +1,5 @@
+export declare const TrackingTag: {
+    Key: string;
+    Value: string;
+};
+//# sourceMappingURL=tracking-tag.d.ts.map

package/lib/constants/__mocks__/tracking-tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking-tag.d.ts","sourceRoot":"","sources":["../../../src/constants/__mocks__/tracking-tag.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,WAAW;;;CAGvB,CAAC"}

package/lib/constants/__mocks__/tracking-tag.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrackingTag = void 0;
+const metadata_keys_1 = require("../metadata-keys");
+exports.TrackingTag = {
+    Key: metadata_keys_1.MetadataKeys.VERSION,
+    Value: "TEST",
+};
+//# sourceMappingURL=tracking-tag.js.map

package/lib/constants/__mocks__/tracking-tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking-tag.js","sourceRoot":"","sources":["../../../src/constants/__mocks__/tracking-tag.ts"],"names":[],"mappings":";;;AAAA,oDAAgD;AAEnC,QAAA,WAAW,GAAG;IACzB,GAAG,EAAE,4BAAY,CAAC,OAAO;IACzB,KAAK,EAAE,MAAM;CACd,CAAC","sourcesContent":["import { MetadataKeys } from \"../metadata-keys\";\n\nexport const TrackingTag = {\n  Key: MetadataKeys.VERSION,\n  Value: \"TEST\",\n};\n"]}

package/lib/constants/access.d.ts

@@ -0,0 +1,18 @@
+/**
+ * An enum representing different types of application access.
+ */
+export declare enum AccessScope {
+    /**
+     * For when you want your application to be accessible to the world (0.0.0.0/0).
+     */
+    PUBLIC = "Public",
+    /**
+     * For when you want to restrict your application's access to a list of CIDR ranges.
+     */
+    RESTRICTED = "Restricted",
+    /**
+     * For when you want to restrict your application's access to the VPC.
+     */
+    INTERNAL = "Internal"
+}
+//# sourceMappingURL=access.d.ts.map

package/lib/constants/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/constants/access.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,oBAAY,WAAW;IACrB;;OAEG;IACH,MAAM,WAAW;IAEjB;;OAEG;IACH,UAAU,eAAe;IAEzB;;OAEG;IACH,QAAQ,aAAa;CACtB"}

package/lib/constants/access.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessScope = void 0;
+/**
+ * An enum representing different types of application access.
+ */
+var AccessScope;
+(function (AccessScope) {
+    /**
+     * For when you want your application to be accessible to the world (0.0.0.0/0).
+     */
+    AccessScope["PUBLIC"] = "Public";
+    /**
+     * For when you want to restrict your application's access to a list of CIDR ranges.
+     */
+    AccessScope["RESTRICTED"] = "Restricted";
+    /**
+     * For when you want to restrict your application's access to the VPC.
+     */
+    AccessScope["INTERNAL"] = "Internal";
+})(AccessScope || (exports.AccessScope = AccessScope = {}));
+//# sourceMappingURL=access.js.map

package/lib/constants/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/constants/access.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,IAAY,WAeX;AAfD,WAAY,WAAW;IACrB;;OAEG;IACH,gCAAiB,CAAA;IAEjB;;OAEG;IACH,wCAAyB,CAAA;IAEzB;;OAEG;IACH,oCAAqB,CAAA;AACvB,CAAC,EAfW,WAAW,2BAAX,WAAW,QAetB","sourcesContent":["/**\n * An enum representing different types of application access.\n */\nexport enum AccessScope {\n  /**\n   * For when you want your application to be accessible to the world (0.0.0.0/0).\n   */\n  PUBLIC = \"Public\",\n\n  /**\n   * For when you want to restrict your application's access to a list of CIDR ranges.\n   */\n  RESTRICTED = \"Restricted\",\n\n  /**\n   * For when you want to restrict your application's access to the VPC.\n   */\n  INTERNAL = \"Internal\",\n}\n"]}

package/lib/constants/context-keys.d.ts

@@ -0,0 +1,7 @@
+/**
+ * A list of items we will read from the CDK context
+ */
+export declare const ContextKeys: {
+    REPOSITORY_URL: string;
+};
+//# sourceMappingURL=context-keys.d.ts.map

package/lib/constants/context-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-keys.d.ts","sourceRoot":"","sources":["../../src/constants/context-keys.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW;;CAEvB,CAAC"}

package/lib/constants/context-keys.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContextKeys = void 0;
+/**
+ * A list of items we will read from the CDK context
+ */
+exports.ContextKeys = {
+    REPOSITORY_URL: "repository_url",
+};
+//# sourceMappingURL=context-keys.js.map

package/lib/constants/context-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-keys.js","sourceRoot":"","sources":["../../src/constants/context-keys.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,cAAc,EAAE,gBAAgB;CACjC,CAAC","sourcesContent":["/**\n * A list of items we will read from the CDK context\n */\nexport const ContextKeys = {\n  REPOSITORY_URL: \"repository_url\",\n};\n"]}

package/lib/constants/fastly-aws-account-id.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Fastly's AWS account ID.
+ * This is needed by IAM roles assumed by Fastly in order to write into
+ * an S3 bucket or a Kinesis stream.
+ * See https://docs.fastly.com/en/guides/creating-an-aws-iam-role-for-fastly-logging
+ */
+export declare const FASTLY_AWS_ACCOUNT_ID = "717331877981";
+//# sourceMappingURL=fastly-aws-account-id.d.ts.map

package/lib/constants/fastly-aws-account-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastly-aws-account-id.d.ts","sourceRoot":"","sources":["../../src/constants/fastly-aws-account-id.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC"}

package/lib/constants/fastly-aws-account-id.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FASTLY_AWS_ACCOUNT_ID = void 0;
+/**
+ * Fastly's AWS account ID.
+ * This is needed by IAM roles assumed by Fastly in order to write into
+ * an S3 bucket or a Kinesis stream.
+ * See https://docs.fastly.com/en/guides/creating-an-aws-iam-role-for-fastly-logging
+ */
+exports.FASTLY_AWS_ACCOUNT_ID = "717331877981";
+//# sourceMappingURL=fastly-aws-account-id.js.map

package/lib/constants/fastly-aws-account-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastly-aws-account-id.js","sourceRoot":"","sources":["../../src/constants/fastly-aws-account-id.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,cAAc,CAAC","sourcesContent":["/**\n * Fastly's AWS account ID.\n * This is needed by IAM roles assumed by Fastly in order to write into\n * an S3 bucket or a Kinesis stream.\n * See https://docs.fastly.com/en/guides/creating-an-aws-iam-role-for-fastly-logging\n */\nexport const FASTLY_AWS_ACCOUNT_ID = \"717331877981\";\n"]}

package/lib/constants/index.d.ts

@@ -0,0 +1,9 @@
+export * from "./access";
+export * from "./context-keys";
+export * from "./library-info";
+export * from "./regex-pattern";
+export * from "./ssm-parameter-paths";
+export * from "./metadata-keys";
+export * from "./tracking-tag";
+export * from "./fastly-aws-account-id";
+//# sourceMappingURL=index.d.ts.map

package/lib/constants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC"}

package/lib/constants/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./access"), exports);
+__exportStar(require("./context-keys"), exports);
+__exportStar(require("./library-info"), exports);
+__exportStar(require("./regex-pattern"), exports);
+__exportStar(require("./ssm-parameter-paths"), exports);
+__exportStar(require("./metadata-keys"), exports);
+__exportStar(require("./tracking-tag"), exports);
+__exportStar(require("./fastly-aws-account-id"), exports);
+//# sourceMappingURL=index.js.map

package/lib/constants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,iDAA+B;AAC/B,iDAA+B;AAC/B,kDAAgC;AAChC,wDAAsC;AACtC,kDAAgC;AAChC,iDAA+B;AAC/B,0DAAwC","sourcesContent":["export * from \"./access\";\nexport * from \"./context-keys\";\nexport * from \"./library-info\";\nexport * from \"./regex-pattern\";\nexport * from \"./ssm-parameter-paths\";\nexport * from \"./metadata-keys\";\nexport * from \"./tracking-tag\";\nexport * from \"./fastly-aws-account-id\";\n"]}

package/lib/constants/library-info.d.ts

@@ -0,0 +1,28 @@
+export declare function getDevDependency(packageName: string): string | undefined;
+export declare function getDependency(packageName: string): string | undefined;
+export declare const LibraryInfo: {
+    /**
+     * The name of this package
+     */
+    NAME: string;
+    /**
+     * The current version of `@guardian/cdk`.
+     */
+    VERSION: string;
+    /**
+     * The version of the `aws-cdk` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    AWS_CDK_VERSION: string;
+    /**
+     * The version of the `aws-cdk-lib` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    AWS_CDK_LIB_VERSION: string;
+    /**
+     * The version of the `constructs` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    CONSTRUCTS_VERSION: string;
+};
+//# sourceMappingURL=library-info.d.ts.map

package/lib/constants/library-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-info.d.ts","sourceRoot":"","sources":["../../src/constants/library-info.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxE;AAED,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrE;AAED,eAAO,MAAM,WAAW;IACtB;;OAEG;;IAGH;;OAEG;;IAGH;;;OAGG;;IAGH;;;OAGG;;IAGH;;;OAGG;;CAEJ,CAAC"}

package/lib/constants/library-info.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LibraryInfo = void 0;
+exports.getDevDependency = getDevDependency;
+exports.getDependency = getDependency;
+const read_pkg_up_1 = __importDefault(require("read-pkg-up"));
+const valueOrUnknown = (value) => value ?? "unknown";
+const packageJson = read_pkg_up_1.default.sync({ cwd: __dirname })?.packageJson ?? {};
+const version = valueOrUnknown(packageJson.version);
+function getDevDependency(packageName) {
+    const { devDependencies = {} } = packageJson;
+    return devDependencies[packageName];
+}
+function getDependency(packageName) {
+    const { dependencies = {} } = packageJson;
+    return dependencies[packageName];
+}
+exports.LibraryInfo = {
+    /**
+     * The name of this package
+     */
+    NAME: "@guardian/cdk",
+    /**
+     * The current version of `@guardian/cdk`.
+     */
+    VERSION: version,
+    /**
+     * The version of the `aws-cdk` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    AWS_CDK_VERSION: valueOrUnknown(getDevDependency("aws-cdk")),
+    /**
+     * The version of the `aws-cdk-lib` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    AWS_CDK_LIB_VERSION: valueOrUnknown(getDevDependency("aws-cdk-lib")),
+    /**
+     * The version of the `constructs` library used by `@guardian/cdk`.
+     * You need to match this version exactly.
+     */
+    CONSTRUCTS_VERSION: valueOrUnknown(getDevDependency("constructs")),
+};
+//# sourceMappingURL=library-info.js.map

package/lib/constants/library-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-info.js","sourceRoot":"","sources":["../../src/constants/library-info.ts"],"names":[],"mappings":";;;;;;AASA,4CAGC;AAED,sCAGC;AAhBD,8DAAoC;AAEpC,MAAM,cAAc,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS,CAAC;AAEzE,MAAM,WAAW,GAAwC,qBAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;AAE/G,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AAEpD,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,MAAM,EAAE,eAAe,GAAG,EAAE,EAAE,GAAG,WAAW,CAAC;IAC7C,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,aAAa,CAAC,WAAmB;IAC/C,MAAM,EAAE,YAAY,GAAG,EAAE,EAAE,GAAG,WAAW,CAAC;IAC1C,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAEY,QAAA,WAAW,GAAG;IACzB;;OAEG;IACH,IAAI,EAAE,eAAe;IAErB;;OAEG;IACH,OAAO,EAAE,OAAO;IAEhB;;;OAGG;IACH,eAAe,EAAE,cAAc,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE5D;;;OAGG;IACH,mBAAmB,EAAE,cAAc,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAEpE;;;OAGG;IACH,kBAAkB,EAAE,cAAc,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;CACnE,CAAC","sourcesContent":["import type { NormalizedPackageJson, PackageJson } from \"read-pkg-up\";\nimport readPkgUp from \"read-pkg-up\";\n\nconst valueOrUnknown = (value: string | undefined) => value ?? \"unknown\";\n\nconst packageJson: PackageJson | NormalizedPackageJson = readPkgUp.sync({ cwd: __dirname })?.packageJson ?? {};\n\nconst version = valueOrUnknown(packageJson.version);\n\nexport function getDevDependency(packageName: string): string | undefined {\n  const { devDependencies = {} } = packageJson;\n  return devDependencies[packageName];\n}\n\nexport function getDependency(packageName: string): string | undefined {\n  const { dependencies = {} } = packageJson;\n  return dependencies[packageName];\n}\n\nexport const LibraryInfo = {\n  /**\n   * The name of this package\n   */\n  NAME: \"@guardian/cdk\",\n\n  /**\n   * The current version of `@guardian/cdk`.\n   */\n  VERSION: version,\n\n  /**\n   * The version of the `aws-cdk` library used by `@guardian/cdk`.\n   * You need to match this version exactly.\n   */\n  AWS_CDK_VERSION: valueOrUnknown(getDevDependency(\"aws-cdk\")),\n\n  /**\n   * The version of the `aws-cdk-lib` library used by `@guardian/cdk`.\n   * You need to match this version exactly.\n   */\n  AWS_CDK_LIB_VERSION: valueOrUnknown(getDevDependency(\"aws-cdk-lib\")),\n\n  /**\n   * The version of the `constructs` library used by `@guardian/cdk`.\n   * You need to match this version exactly.\n   */\n  CONSTRUCTS_VERSION: valueOrUnknown(getDevDependency(\"constructs\")),\n};\n"]}

package/lib/constants/metadata-keys.d.ts

@@ -0,0 +1,9 @@
+export declare const MetadataKeys: {
+    VERSION: string;
+    CONSTRUCTS_KEY: string;
+    REPOSITORY_NAME: string;
+    LOG_KINESIS_STREAM_NAME: string;
+    SYSTEMD_UNIT: string;
+    BUILD_IDENTIFIER: string;
+};
+//# sourceMappingURL=metadata-keys.d.ts.map

package/lib/constants/metadata-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-keys.d.ts","sourceRoot":"","sources":["../../src/constants/metadata-keys.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY;;;;;;;CAOxB,CAAC"}

package/lib/constants/metadata-keys.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MetadataKeys = void 0;
+exports.MetadataKeys = {
+    VERSION: "gu:cdk:version",
+    CONSTRUCTS_KEY: "gu:cdk:constructs",
+    REPOSITORY_NAME: "gu:repo",
+    LOG_KINESIS_STREAM_NAME: "LogKinesisStreamName",
+    SYSTEMD_UNIT: "SystemdUnit",
+    BUILD_IDENTIFIER: "gu:build-identifier",
+};
+//# sourceMappingURL=metadata-keys.js.map

package/lib/constants/metadata-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-keys.js","sourceRoot":"","sources":["../../src/constants/metadata-keys.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG;IAC1B,OAAO,EAAE,gBAAgB;IACzB,cAAc,EAAE,mBAAmB;IACnC,eAAe,EAAE,SAAS;IAC1B,uBAAuB,EAAE,sBAAsB;IAC/C,YAAY,EAAE,aAAa;IAC3B,gBAAgB,EAAE,qBAAqB;CACxC,CAAC","sourcesContent":["export const MetadataKeys = {\n  VERSION: \"gu:cdk:version\",\n  CONSTRUCTS_KEY: \"gu:cdk:constructs\",\n  REPOSITORY_NAME: \"gu:repo\",\n  LOG_KINESIS_STREAM_NAME: \"LogKinesisStreamName\",\n  SYSTEMD_UNIT: \"SystemdUnit\",\n  BUILD_IDENTIFIER: \"gu:build-identifier\",\n};\n"]}

package/lib/constants/regex-pattern.d.ts

@@ -0,0 +1,5 @@
+export declare const RegexPattern: {
+    ARN: string;
+    ACM_ARN: string;
+};
+//# sourceMappingURL=regex-pattern.d.ts.map

package/lib/constants/regex-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regex-pattern.d.ts","sourceRoot":"","sources":["../../src/constants/regex-pattern.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY;;;CAGxB,CAAC"}

package/lib/constants/regex-pattern.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegexPattern = void 0;
+const arnRegex = "arn:aws:[a-z0-9]*:[a-z0-9\\-]*:[0-9]{12}:.*";
+// TODO be more strict on region?
+const acmRegex = "arn:aws:acm:[0-9a-z\\-]+:[0-9]{12}:certificate/[0-9a-z\\-]+";
+exports.RegexPattern = {
+    ARN: arnRegex,
+    ACM_ARN: acmRegex,
+};
+//# sourceMappingURL=regex-pattern.js.map

package/lib/constants/regex-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regex-pattern.js","sourceRoot":"","sources":["../../src/constants/regex-pattern.ts"],"names":[],"mappings":";;;AAAA,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAE/D,iCAAiC;AACjC,MAAM,QAAQ,GAAG,6DAA6D,CAAC;AAElE,QAAA,YAAY,GAAG;IAC1B,GAAG,EAAE,QAAQ;IACb,OAAO,EAAE,QAAQ;CAClB,CAAC","sourcesContent":["const arnRegex = \"arn:aws:[a-z0-9]*:[a-z0-9\\\\-]*:[0-9]{12}:.*\";\n\n// TODO be more strict on region?\nconst acmRegex = \"arn:aws:acm:[0-9a-z\\\\-]+:[0-9]{12}:certificate/[0-9a-z\\\\-]+\";\n\nexport const RegexPattern = {\n  ARN: arnRegex,\n  ACM_ARN: acmRegex,\n};\n"]}

package/lib/constants/ssm-parameter-paths.d.ts

@@ -0,0 +1,24 @@
+export interface SsmParameterPath {
+    path: string;
+    description: string;
+    optional?: boolean;
+    namingPattern?: string;
+}
+interface NamedSsmParameterPaths {
+    Anghammarad: SsmParameterPath;
+    LoggingStreamName: SsmParameterPath;
+    DistributionBucket: SsmParameterPath;
+    AccessLoggingBucket: SsmParameterPath;
+    ConfigurationBucket: SsmParameterPath;
+    PrimaryVpcId: SsmParameterPath;
+    PrimaryVpcPrivateSubnets: SsmParameterPath;
+    PrimaryVpcPublicSubnets: SsmParameterPath;
+    FastlyCustomerId: SsmParameterPath;
+    OrganisationDistributionBucket: SsmParameterPath;
+    DeployToolsAccountId: SsmParameterPath;
+}
+export declare const VPC_SSM_PARAMETER_PREFIX = "/account/vpc";
+export declare const NAMED_SSM_PARAMETER_PATHS: NamedSsmParameterPaths;
+export declare const ALL_SSM_PARAMETER_PATHS: SsmParameterPath[];
+export {};
+//# sourceMappingURL=ssm-parameter-paths.d.ts.map

package/lib/constants/ssm-parameter-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-parameter-paths.d.ts","sourceRoot":"","sources":["../../src/constants/ssm-parameter-paths.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAInB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,sBAAsB;IAC9B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,mBAAmB,EAAE,gBAAgB,CAAC;IACtC,mBAAmB,EAAE,gBAAgB,CAAC;IACtC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,wBAAwB,EAAE,gBAAgB,CAAC;IAC3C,uBAAuB,EAAE,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,8BAA8B,EAAE,gBAAgB,CAAC;IACjD,oBAAoB,EAAE,gBAAgB,CAAC;CACxC;AAED,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AAEvD,eAAO,MAAM,yBAAyB,EAAE,sBAkDvC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,gBAAgB,EAE/B,CAAC"}

package/lib/constants/ssm-parameter-paths.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALL_SSM_PARAMETER_PATHS = exports.NAMED_SSM_PARAMETER_PATHS = exports.VPC_SSM_PARAMETER_PREFIX = void 0;
+exports.VPC_SSM_PARAMETER_PREFIX = "/account/vpc";
+exports.NAMED_SSM_PARAMETER_PATHS = {
+    Anghammarad: {
+        path: "/account/services/anghammarad.topic.arn",
+        description: "SSM parameter containing the ARN of the Anghammarad SNS topic",
+        optional: true,
+    },
+    LoggingStreamName: {
+        path: "/account/services/logging.stream.name",
+        description: "SSM parameter containing the Name (not ARN) on the kinesis stream",
+    },
+    DistributionBucket: {
+        path: "/account/services/artifact.bucket",
+        description: "SSM parameter containing the S3 bucket name holding distribution artifacts",
+        namingPattern: "com-gu-$account-artifacts",
+    },
+    AccessLoggingBucket: {
+        path: "/account/services/access-logging/bucket",
+        description: "S3 bucket to store your access logs",
+    },
+    ConfigurationBucket: {
+        path: "/account/services/private.config.bucket",
+        description: "SSM parameter containing the S3 bucket name holding the app's private configuration",
+        namingPattern: "com-gu-$account-configs",
+    },
+    PrimaryVpcId: {
+        path: `${exports.VPC_SSM_PARAMETER_PREFIX}/primary/id`,
+        description: "Virtual Private Cloud to run EC2 instances within. Should NOT be the account default VPC.",
+    },
+    PrimaryVpcPrivateSubnets: {
+        path: `${exports.VPC_SSM_PARAMETER_PREFIX}/primary/subnets/private`,
+        description: "A comma-separated list of private subnets",
+    },
+    PrimaryVpcPublicSubnets: {
+        path: `${exports.VPC_SSM_PARAMETER_PREFIX}/primary/subnets/public`,
+        description: "A comma-separated list of public subnets",
+    },
+    OrganisationDistributionBucket: {
+        path: "/organisation/services/artifact.bucket",
+        description: "SSM parameter containing the S3 bucket name holding organisation-level DevX artifacts",
+    },
+    FastlyCustomerId: {
+        path: "/account/external/fastly/customer.id",
+        description: "SSM parameter containing the Fastly Customer ID. Can be obtained from https://manage.fastly.com/account/company by an admin",
+        optional: true,
+    },
+    DeployToolsAccountId: {
+        path: "/organisation/accounts/deployTools",
+        description: "Account ID of the Deploy Tools account. Useful as some shared resources live here.",
+    },
+};
+exports.ALL_SSM_PARAMETER_PATHS = Object.values(exports.NAMED_SSM_PARAMETER_PATHS);
+//# sourceMappingURL=ssm-parameter-paths.js.map

package/lib/constants/ssm-parameter-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-parameter-paths.js","sourceRoot":"","sources":["../../src/constants/ssm-parameter-paths.ts"],"names":[],"mappings":";;;AAwBa,QAAA,wBAAwB,GAAG,cAAc,CAAC;AAE1C,QAAA,yBAAyB,GAA2B;IAC/D,WAAW,EAAE;QACX,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,+DAA+D;QAC5E,QAAQ,EAAE,IAAI;KACf;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,uCAAuC;QAC7C,WAAW,EAAE,mEAAmE;KACjF;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,4EAA4E;QACzF,aAAa,EAAE,2BAA2B;KAC3C;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,qCAAqC;KACnD;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,yBAAyB;KACzC;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,GAAG,gCAAwB,aAAa;QAC9C,WAAW,EAAE,2FAA2F;KACzG;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,GAAG,gCAAwB,0BAA0B;QAC3D,WAAW,EAAE,2CAA2C;KACzD;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,GAAG,gCAAwB,yBAAyB;QAC1D,WAAW,EAAE,0CAA0C;KACxD;IACD,8BAA8B,EAAE;QAC9B,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,uFAAuF;KACrG;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,6HAA6H;QAC/H,QAAQ,EAAE,IAAI;KACf;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,oFAAoF;KAClG;CACF,CAAC;AAEW,QAAA,uBAAuB,GAAuB,MAAM,CAAC,MAAM,CACtE,iCAAyB,CACJ,CAAC","sourcesContent":["export interface SsmParameterPath {\n  path: string;\n  description: string;\n  optional?: boolean;\n\n  // Recommended naming convention for target resource, such as an S3 bucket.\n  // $account is substituted as the account name.\n  namingPattern?: string;\n}\n\ninterface NamedSsmParameterPaths {\n  Anghammarad: SsmParameterPath;\n  LoggingStreamName: SsmParameterPath;\n  DistributionBucket: SsmParameterPath;\n  AccessLoggingBucket: SsmParameterPath;\n  ConfigurationBucket: SsmParameterPath;\n  PrimaryVpcId: SsmParameterPath;\n  PrimaryVpcPrivateSubnets: SsmParameterPath;\n  PrimaryVpcPublicSubnets: SsmParameterPath;\n  FastlyCustomerId: SsmParameterPath;\n  OrganisationDistributionBucket: SsmParameterPath;\n  DeployToolsAccountId: SsmParameterPath;\n}\n\nexport const VPC_SSM_PARAMETER_PREFIX = \"/account/vpc\";\n\nexport const NAMED_SSM_PARAMETER_PATHS: NamedSsmParameterPaths = {\n  Anghammarad: {\n    path: \"/account/services/anghammarad.topic.arn\",\n    description: \"SSM parameter containing the ARN of the Anghammarad SNS topic\",\n    optional: true,\n  },\n  LoggingStreamName: {\n    path: \"/account/services/logging.stream.name\",\n    description: \"SSM parameter containing the Name (not ARN) on the kinesis stream\",\n  },\n  DistributionBucket: {\n    path: \"/account/services/artifact.bucket\",\n    description: \"SSM parameter containing the S3 bucket name holding distribution artifacts\",\n    namingPattern: \"com-gu-$account-artifacts\",\n  },\n  AccessLoggingBucket: {\n    path: \"/account/services/access-logging/bucket\",\n    description: \"S3 bucket to store your access logs\",\n  },\n  ConfigurationBucket: {\n    path: \"/account/services/private.config.bucket\",\n    description: \"SSM parameter containing the S3 bucket name holding the app's private configuration\",\n    namingPattern: \"com-gu-$account-configs\",\n  },\n  PrimaryVpcId: {\n    path: `${VPC_SSM_PARAMETER_PREFIX}/primary/id`,\n    description: \"Virtual Private Cloud to run EC2 instances within. Should NOT be the account default VPC.\",\n  },\n  PrimaryVpcPrivateSubnets: {\n    path: `${VPC_SSM_PARAMETER_PREFIX}/primary/subnets/private`,\n    description: \"A comma-separated list of private subnets\",\n  },\n  PrimaryVpcPublicSubnets: {\n    path: `${VPC_SSM_PARAMETER_PREFIX}/primary/subnets/public`,\n    description: \"A comma-separated list of public subnets\",\n  },\n  OrganisationDistributionBucket: {\n    path: \"/organisation/services/artifact.bucket\",\n    description: \"SSM parameter containing the S3 bucket name holding organisation-level DevX artifacts\",\n  },\n  FastlyCustomerId: {\n    path: \"/account/external/fastly/customer.id\",\n    description:\n      \"SSM parameter containing the Fastly Customer ID. Can be obtained from https://manage.fastly.com/account/company by an admin\",\n    optional: true,\n  },\n  DeployToolsAccountId: {\n    path: \"/organisation/accounts/deployTools\",\n    description: \"Account ID of the Deploy Tools account. Useful as some shared resources live here.\",\n  },\n};\n\nexport const ALL_SSM_PARAMETER_PATHS: SsmParameterPath[] = Object.values(\n  NAMED_SSM_PARAMETER_PATHS,\n) as SsmParameterPath[];\n"]}

package/lib/constants/tracking-tag.d.ts

@@ -0,0 +1,5 @@
+export declare const TrackingTag: {
+    Key: string;
+    Value: string;
+};
+//# sourceMappingURL=tracking-tag.d.ts.map

package/lib/constants/tracking-tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking-tag.d.ts","sourceRoot":"","sources":["../../src/constants/tracking-tag.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,WAAW;;;CAGvB,CAAC"}

package/lib/constants/tracking-tag.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrackingTag = void 0;
+const library_info_1 = require("./library-info");
+const metadata_keys_1 = require("./metadata-keys");
+exports.TrackingTag = {
+    Key: metadata_keys_1.MetadataKeys.VERSION,
+    Value: library_info_1.LibraryInfo.VERSION,
+};
+//# sourceMappingURL=tracking-tag.js.map