@jaypie/constructs 1.1.61 → 1.1.62-rc.1

package/dist/cjs/index.d.ts

@@ -5,6 +5,7 @@ export { JaypieAppStack } from "./JaypieAppStack";
 export { JaypieBucketQueuedLambda } from "./JaypieBucketQueuedLambda";
 export { JaypieDatadogBucket, JaypieDatadogBucketProps, } from "./JaypieDatadogBucket";
 export { JaypieDatadogForwarder, JaypieDatadogForwarderProps, } from "./JaypieDatadogForwarder";
+export { JaypieDistribution, JaypieDistributionProps, } from "./JaypieDistribution";
 export { JaypieDatadogSecret } from "./JaypieDatadogSecret";
 export { JaypieDnsRecord, JaypieDnsRecordProps } from "./JaypieDnsRecord";
 export { JaypieEnvSecret } from "./JaypieEnvSecret";

package/dist/esm/JaypieDistribution.d.ts

@@ -0,0 +1,65 @@
+import { RemovalPolicy, Stack } from "aws-cdk-lib";
+import * as acm from "aws-cdk-lib/aws-certificatemanager";
+import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
+import * as lambda from "aws-cdk-lib/aws-lambda";
+import * as route53 from "aws-cdk-lib/aws-route53";
+import { Construct } from "constructs";
+export interface JaypieDistributionProps extends Omit<cloudfront.DistributionProps, "certificate" | "defaultBehavior"> {
+    /**
+     * SSL certificate for the CloudFront distribution
+     * @default true (creates a new certificate)
+     */
+    certificate?: boolean | acm.ICertificate;
+    /**
+     * Override default behavior (optional if handler is provided)
+     */
+    defaultBehavior?: cloudfront.BehaviorOptions;
+    /**
+     * The origin handler - can be an IOrigin, IFunctionUrl, or IFunction
+     * If IFunction, a FunctionUrl will be created with auth NONE
+     */
+    handler?: cloudfront.IOrigin | lambda.IFunctionUrl | lambda.IFunction;
+    /**
+     * The domain name for the distribution
+     * @default mergeDomain(CDK_ENV_API_SUBDOMAIN, CDK_ENV_API_HOSTED_ZONE || CDK_ENV_HOSTED_ZONE)
+     */
+    host?: string;
+    /**
+     * Invoke mode for Lambda Function URLs
+     * @default InvokeMode.BUFFERED
+     */
+    invokeMode?: lambda.InvokeMode;
+    /**
+     * Role tag for tagging resources
+     * @default CDK.ROLE.HOSTING
+     */
+    roleTag?: string;
+    /**
+     * The hosted zone for DNS records
+     * @default CDK_ENV_API_HOSTED_ZONE || CDK_ENV_HOSTED_ZONE
+     */
+    zone?: string | route53.IHostedZone;
+}
+export declare class JaypieDistribution extends Construct implements cloudfront.IDistribution {
+    readonly certificate?: acm.ICertificate;
+    readonly distribution: cloudfront.Distribution;
+    readonly distributionArn: string;
+    readonly distributionDomainName: string;
+    readonly distributionId: string;
+    readonly domainName: string;
+    readonly functionUrl?: lambda.FunctionUrl;
+    readonly host?: string;
+    constructor(scope: Construct, id: string, props: JaypieDistributionProps);
+    private isIOrigin;
+    private isIFunctionUrl;
+    private isIFunction;
+    get env(): {
+        account: string;
+        region: string;
+    };
+    get stack(): Stack;
+    applyRemovalPolicy(policy: RemovalPolicy): void;
+    grant(identity: import("aws-cdk-lib/aws-iam").IGrantable, ...actions: string[]): import("aws-cdk-lib/aws-iam").Grant;
+    grantCreateInvalidation(identity: import("aws-cdk-lib/aws-iam").IGrantable): import("aws-cdk-lib/aws-iam").Grant;
+    get distributionRef(): cloudfront.DistributionReference;
+}

package/dist/esm/JaypieLambda.d.ts

@@ -1,9 +1,10 @@
 import { Construct } from "constructs";
 import { Duration, Stack, RemovalPolicy } from "aws-cdk-lib";
 import * as lambda from "aws-cdk-lib/aws-lambda";
-import * as iam from "aws-cdk-lib/aws-iam";
 import * as cloudwatch from "aws-cdk-lib/aws-cloudwatch";
 import * as ec2 from "aws-cdk-lib/aws-ec2";
+import * as iam from "aws-cdk-lib/aws-iam";
+import * as logs from "aws-cdk-lib/aws-logs";
 import * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
 import { JaypieEnvSecret } from "./JaypieEnvSecret.js";
 export interface JaypieLambdaProps {
@@ -27,9 +28,8 @@ export interface JaypieLambdaProps {
     handler: string;
     initialPolicy?: iam.PolicyStatement[];
     layers?: lambda.ILayerVersion[];
-    logRetention?: number;
-    logRetentionRole?: iam.IRole;
-    logRetentionRetryOptions?: lambda.LogRetentionRetryOptions;
+    logGroup?: logs.ILogGroup;
+    logRetention?: logs.RetentionDays | number;
     maxEventAge?: Duration;
     memorySize?: number;
     paramsAndSecrets?: lambda.ParamsAndSecretsLayerVersion | boolean;

package/dist/esm/__tests__/JaypieDistribution.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/index.d.ts

@@ -5,6 +5,7 @@ export { JaypieAppStack } from "./JaypieAppStack";
 export { JaypieBucketQueuedLambda } from "./JaypieBucketQueuedLambda";
 export { JaypieDatadogBucket, JaypieDatadogBucketProps, } from "./JaypieDatadogBucket";
 export { JaypieDatadogForwarder, JaypieDatadogForwarderProps, } from "./JaypieDatadogForwarder";
+export { JaypieDistribution, JaypieDistributionProps, } from "./JaypieDistribution";
 export { JaypieDatadogSecret } from "./JaypieDatadogSecret";
 export { JaypieDnsRecord, JaypieDnsRecordProps } from "./JaypieDnsRecord";
 export { JaypieEnvSecret } from "./JaypieEnvSecret";

package/dist/esm/index.js

@@ -18,16 +18,17 @@ import * as s3n from 'aws-cdk-lib/aws-s3-notifications';
 import { LambdaDestination } from 'aws-cdk-lib/aws-s3-notifications';
 import * as sqs from 'aws-cdk-lib/aws-sqs';
 import * as lambdaEventSources from 'aws-cdk-lib/aws-lambda-event-sources';
+import * as logs from 'aws-cdk-lib/aws-logs';
+import { LogGroup, RetentionDays, FilterPattern } from 'aws-cdk-lib/aws-logs';
 import { Rule, RuleTargetInput } from 'aws-cdk-lib/aws-events';
 import { LambdaFunction } from 'aws-cdk-lib/aws-events-targets';
-import { LogGroup, RetentionDays, FilterPattern } from 'aws-cdk-lib/aws-logs';
+import * as cloudfront from 'aws-cdk-lib/aws-cloudfront';
+import * as origins from 'aws-cdk-lib/aws-cloudfront-origins';
 import { Nextjs } from 'cdk-nextjs-standalone';
 import * as path from 'path';
 import { Trail, ReadWriteType } from 'aws-cdk-lib/aws-cloudtrail';
 import { CfnPermissionSet, CfnAssignment } from 'aws-cdk-lib/aws-sso';
 import { CfnApplication } from 'aws-cdk-lib/aws-sam';
-import * as cloudfront from 'aws-cdk-lib/aws-cloudfront';
-import * as origins from 'aws-cdk-lib/aws-cloudfront-origins';
 
 const CDK$2 = {
     ACCOUNT: {
@@ -869,7 +870,7 @@ class JaypieAppStack extends JaypieStack {
 class JaypieLambda extends Construct {
     constructor(scope, id, props) {
         super(scope, id);
-        const { allowAllOutbound, allowPublicSubnet, architecture = lambda.Architecture.X86_64, code, datadogApiKeyArn, deadLetterQueue, deadLetterQueueEnabled, deadLetterTopic, description, environment: initialEnvironment = {}, envSecrets = {}, ephemeralStorageSize, filesystem, handler = "index.handler", initialPolicy, layers = [], logRetention = CDK$2.LAMBDA.LOG_RETENTION, logRetentionRole, logRetentionRetryOptions, maxEventAge, memorySize = CDK$2.LAMBDA.MEMORY_SIZE, paramsAndSecrets, paramsAndSecretsOptions, profiling, profilingGroup, provisionedConcurrentExecutions, reservedConcurrentExecutions, retryAttempts, roleTag = CDK$2.ROLE.PROCESSING, runtime = lambda.Runtime.NODEJS_22_X, runtimeManagementMode, secrets = [], securityGroups, timeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), tracing, vendorTag, vpc, vpcSubnets, } = props;
+        const { allowAllOutbound, allowPublicSubnet, architecture = lambda.Architecture.X86_64, code, datadogApiKeyArn, deadLetterQueue, deadLetterQueueEnabled, deadLetterTopic, description, environment: initialEnvironment = {}, envSecrets = {}, ephemeralStorageSize, filesystem, handler = "index.handler", initialPolicy, layers = [], logGroup, logRetention = CDK$2.LAMBDA.LOG_RETENTION, maxEventAge, memorySize = CDK$2.LAMBDA.MEMORY_SIZE, paramsAndSecrets, paramsAndSecretsOptions, profiling, profilingGroup, provisionedConcurrentExecutions, reservedConcurrentExecutions, retryAttempts, roleTag = CDK$2.ROLE.PROCESSING, runtime = lambda.Runtime.NODEJS_22_X, runtimeManagementMode, secrets = [], securityGroups, timeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), tracing, vendorTag, vpc, vpcSubnets, } = props;
         // Get base environment with defaults
         const environment = jaypieLambdaEnv({ initialEnvironment });
         const codeAsset = typeof code === "string" ? lambda.Code.fromAsset(code) : code;
@@ -895,6 +896,12 @@ class JaypieLambda extends Construct {
             paramsAndSecrets,
             options: paramsAndSecretsOptions,
         });
+        // Create LogGroup if not provided
+        const resolvedLogGroup = logGroup ??
+            new logs.LogGroup(this, "LogGroup", {
+                retention: logRetention,
+                removalPolicy: RemovalPolicy.DESTROY,
+            });
         // Create Lambda Function
         this._lambda = new lambda.Function(this, "Function", {
             allowAllOutbound,
@@ -915,9 +922,7 @@ class JaypieLambda extends Construct {
             handler,
             initialPolicy,
             layers: resolvedLayers,
-            logRetention,
-            logRetentionRole,
-            logRetentionRetryOptions,
+            logGroup: resolvedLogGroup,
             maxEventAge,
             memorySize,
             paramsAndSecrets: resolvedParamsAndSecrets,
@@ -1088,7 +1093,7 @@ class JaypieLambda extends Construct {
 class JaypieQueuedLambda extends Construct {
     constructor(scope, id, props) {
         super(scope, id);
-        const { allowAllOutbound, allowPublicSubnet, architecture, batchSize = 1, code, datadogApiKeyArn, deadLetterQueue, deadLetterQueueEnabled, deadLetterTopic, description, environment = {}, envSecrets = {}, ephemeralStorageSize, fifo = true, filesystem, handler = "index.handler", initialPolicy, layers = [], logRetention = CDK$2.LAMBDA.LOG_RETENTION, logRetentionRole, logRetentionRetryOptions, maxEventAge, memorySize = CDK$2.LAMBDA.MEMORY_SIZE, paramsAndSecrets, paramsAndSecretsOptions, profiling, profilingGroup, provisionedConcurrentExecutions, reservedConcurrentExecutions, retryAttempts, roleTag, runtime = lambda.Runtime.NODEJS_22_X, runtimeManagementMode, secrets = [], securityGroups, timeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), tracing, vendorTag, visibilityTimeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), vpc, vpcSubnets, } = props;
+        const { allowAllOutbound, allowPublicSubnet, architecture, batchSize = 1, code, datadogApiKeyArn, deadLetterQueue, deadLetterQueueEnabled, deadLetterTopic, description, environment = {}, envSecrets = {}, ephemeralStorageSize, fifo = true, filesystem, handler = "index.handler", initialPolicy, layers = [], logGroup, logRetention = CDK$2.LAMBDA.LOG_RETENTION, maxEventAge, memorySize = CDK$2.LAMBDA.MEMORY_SIZE, paramsAndSecrets, paramsAndSecretsOptions, profiling, profilingGroup, provisionedConcurrentExecutions, reservedConcurrentExecutions, retryAttempts, roleTag, runtime = lambda.Runtime.NODEJS_22_X, runtimeManagementMode, secrets = [], securityGroups, timeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), tracing, vendorTag, visibilityTimeout = Duration.seconds(CDK$2.DURATION.LAMBDA_WORKER), vpc, vpcSubnets, } = props;
         // Create SQS Queue
         this._queue = new sqs.Queue(this, "Queue", {
             fifo,
@@ -1123,9 +1128,8 @@ class JaypieQueuedLambda extends Construct {
             handler,
             initialPolicy,
             layers,
+            logGroup,
             logRetention,
-            logRetentionRole,
-            logRetentionRetryOptions,
             maxEventAge,
             memorySize,
             paramsAndSecrets,
@@ -1628,6 +1632,178 @@ class JaypieDatadogForwarder extends Construct {
     }
 }
 
+class JaypieDistribution extends Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const { certificate: certificateProp = true, handler, host: propsHost, invokeMode = lambda.InvokeMode.BUFFERED, roleTag = CDK$2.ROLE.API, zone: propsZone, defaultBehavior: propsDefaultBehavior, ...distributionProps } = props;
+        // Validate environment variables
+        if (process.env.CDK_ENV_API_SUBDOMAIN &&
+            !isValidSubdomain(process.env.CDK_ENV_API_SUBDOMAIN)) {
+            throw new Error("CDK_ENV_API_SUBDOMAIN is not a valid subdomain");
+        }
+        if (process.env.CDK_ENV_API_HOSTED_ZONE &&
+            !isValidHostname$1(process.env.CDK_ENV_API_HOSTED_ZONE)) {
+            throw new Error("CDK_ENV_API_HOSTED_ZONE is not a valid hostname");
+        }
+        if (process.env.CDK_ENV_HOSTED_ZONE &&
+            !isValidHostname$1(process.env.CDK_ENV_HOSTED_ZONE)) {
+            throw new Error("CDK_ENV_HOSTED_ZONE is not a valid hostname");
+        }
+        // Determine host from props or environment
+        let host = propsHost;
+        if (!host) {
+            try {
+                if (process.env.CDK_ENV_API_HOST_NAME) {
+                    host = process.env.CDK_ENV_API_HOST_NAME;
+                }
+                else if (process.env.CDK_ENV_API_SUBDOMAIN) {
+                    host = mergeDomain(process.env.CDK_ENV_API_SUBDOMAIN, process.env.CDK_ENV_API_HOSTED_ZONE ||
+                        process.env.CDK_ENV_HOSTED_ZONE ||
+                        "");
+                }
+            }
+            catch {
+                host = undefined;
+            }
+        }
+        if (host && !isValidHostname$1(host)) {
+            throw new Error("Host is not a valid hostname");
+        }
+        this.host = host;
+        // Determine zone from props or environment
+        const zone = propsZone || process.env.CDK_ENV_HOSTED_ZONE;
+        // Resolve the origin from handler
+        // Check order matters: IFunctionUrl before IOrigin (FunctionUrl also has bind method)
+        // IFunction before IFunctionUrl (IFunction doesn't have functionUrlId)
+        let origin;
+        if (handler) {
+            if (this.isIFunction(handler)) {
+                // Create FunctionUrl for the Lambda function
+                const functionUrl = new lambda.FunctionUrl(this, "FunctionUrl", {
+                    function: handler,
+                    authType: lambda.FunctionUrlAuthType.NONE,
+                    invokeMode,
+                });
+                this.functionUrl = functionUrl;
+                origin = new origins.FunctionUrlOrigin(functionUrl);
+            }
+            else if (this.isIFunctionUrl(handler)) {
+                origin = new origins.FunctionUrlOrigin(handler);
+            }
+            else if (this.isIOrigin(handler)) {
+                origin = handler;
+            }
+        }
+        // Build default behavior
+        let defaultBehavior;
+        if (propsDefaultBehavior) {
+            defaultBehavior = propsDefaultBehavior;
+        }
+        else if (origin) {
+            defaultBehavior = {
+                cachePolicy: cloudfront.CachePolicy.CACHING_DISABLED,
+                origin,
+                originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER,
+                viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+            };
+        }
+        else {
+            throw new Error("Either handler or defaultBehavior must be provided to JaypieDistribution");
+        }
+        // Resolve hosted zone and certificate
+        // Only resolve zone when we need it (for certificate or DNS)
+        let hostedZone;
+        let certificateToUse;
+        if (host && zone && certificateProp !== false) {
+            hostedZone = resolveHostedZone(this, { zone });
+            if (certificateProp === true) {
+                certificateToUse = new acm.Certificate(this, constructEnvName("Certificate"), {
+                    domainName: host,
+                    validation: acm.CertificateValidation.fromDns(hostedZone),
+                });
+                Tags.of(certificateToUse).add(CDK$2.TAG.ROLE, roleTag);
+            }
+            else if (typeof certificateProp === "object") {
+                certificateToUse = certificateProp;
+            }
+            this.certificate = certificateToUse;
+        }
+        // Create the CloudFront distribution
+        this.distribution = new cloudfront.Distribution(this, constructEnvName("Distribution"), {
+            defaultBehavior,
+            ...(host && certificateToUse
+                ? {
+                    certificate: certificateToUse,
+                    domainNames: [host],
+                }
+                : {}),
+            ...distributionProps,
+        });
+        Tags.of(this.distribution).add(CDK$2.TAG.ROLE, roleTag);
+        this.distributionArn = `arn:aws:cloudfront::${Stack.of(this).account}:distribution/${this.distribution.distributionId}`;
+        this.distributionDomainName = this.distribution.distributionDomainName;
+        this.distributionId = this.distribution.distributionId;
+        this.domainName = this.distribution.domainName;
+        // Create DNS record if we have host and zone
+        if (host && hostedZone) {
+            const record = new route53.ARecord(this, "AliasRecord", {
+                recordName: host,
+                target: route53.RecordTarget.fromAlias(new route53Targets.CloudFrontTarget(this.distribution)),
+                zone: hostedZone,
+            });
+            Tags.of(record).add(CDK$2.TAG.ROLE, CDK$2.ROLE.NETWORKING);
+        }
+    }
+    // Type guards for handler types
+    isIOrigin(handler) {
+        return (typeof handler === "object" &&
+            handler !== null &&
+            "bind" in handler &&
+            typeof handler.bind === "function");
+    }
+    isIFunctionUrl(handler) {
+        // FunctionUrl has 'url' property which is the function URL string
+        // IFunction does not have 'url' property
+        return (typeof handler === "object" &&
+            handler !== null &&
+            "url" in handler &&
+            "functionArn" in handler);
+    }
+    isIFunction(handler) {
+        // IFunction has functionArn and functionName but NOT 'url'
+        // (FunctionUrl also has functionArn but also has 'url')
+        return (typeof handler === "object" &&
+            handler !== null &&
+            "functionArn" in handler &&
+            "functionName" in handler &&
+            !("url" in handler));
+    }
+    // Implement IDistribution interface
+    get env() {
+        return {
+            account: Stack.of(this).account,
+            region: Stack.of(this).region,
+        };
+    }
+    get stack() {
+        return this.distribution.stack;
+    }
+    applyRemovalPolicy(policy) {
+        this.distribution.applyRemovalPolicy(policy);
+    }
+    grant(identity, ...actions) {
+        return this.distribution.grant(identity, ...actions);
+    }
+    grantCreateInvalidation(identity) {
+        return this.distribution.grantCreateInvalidation(identity);
+    }
+    get distributionRef() {
+        return {
+            distributionId: this.distribution.distributionId,
+        };
+    }
+}
+
 // It is a consumer if the environment is ephemeral
 function checkEnvIsConsumer(env = process.env) {
     return (env.PROJECT_ENV === CDK$2.ENV.PERSONAL ||
@@ -2769,7 +2945,7 @@ class JaypieWebDeploymentBucket extends Construct {
         this.bucket = new s3.Bucket(this, "DestinationBucket", {
             accessControl: s3.BucketAccessControl.BUCKET_OWNER_FULL_CONTROL,
             autoDeleteObjects: true,
-            blockPublicAccess: s3.BlockPublicAccess.BLOCK_ACLS,
+            blockPublicAccess: s3.BlockPublicAccess.BLOCK_ACLS_ONLY,
             bucketName: props.name || constructEnvName("web"),
             publicReadAccess: true,
             removalPolicy: RemovalPolicy.DESTROY,
@@ -2822,11 +2998,14 @@ class JaypieWebDeploymentBucket extends Construct {
                 actions: ["s3:ListBucket"],
                 resources: [this.bucket.bucketArn],
             }));
-            // Allow the role to deploy CDK apps
+            // Allow the role to describe the current stack
+            const stack = Stack.of(this);
             bucketDeployRole.addToPolicy(new PolicyStatement({
                 actions: ["cloudformation:DescribeStacks"],
                 effect: Effect.ALLOW,
-                resources: ["*"], // TODO: restrict to this stack
+                resources: [
+                    `arn:aws:cloudformation:${stack.region}:${stack.account}:stack/${stack.stackName}/*`,
+                ],
             }));
             this.deployRoleArn = bucketDeployRole.roleArn;
             // Output the deploy role ARN
@@ -2859,7 +3038,7 @@ class JaypieWebDeploymentBucket extends Construct {
             this.distribution = new cloudfront.Distribution(this, "Distribution", {
                 defaultBehavior: {
                     cachePolicy: cloudfront.CachePolicy.CACHING_DISABLED,
-                    origin: new origins.S3Origin(this.bucket),
+                    origin: new origins.S3StaticWebsiteOrigin(this.bucket),
                     viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
                 },
                 certificate: this.certificate,
@@ -2868,7 +3047,7 @@ class JaypieWebDeploymentBucket extends Construct {
             Tags.of(this.distribution).add(CDK$2.TAG.ROLE, roleTag);
             // If this is production, enable caching on everything but index.html
             if (isProductionEnv()) {
-                this.distribution.addBehavior("/*", new origins.S3Origin(this.bucket), {
+                this.distribution.addBehavior("/*", new origins.S3StaticWebsiteOrigin(this.bucket), {
                     viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
                     cachePolicy: cloudfront.CachePolicy.CACHING_OPTIMIZED,
                 });
@@ -2981,5 +3160,5 @@ class JaypieWebDeploymentBucket extends Construct {
     }
 }
 
-export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDnsRecord, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, addDatadogLayers, constructEnvName, constructStackName, constructTagger, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveHostedZone, resolveParamsAndSecrets };
+export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDistribution, JaypieDnsRecord, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, addDatadogLayers, constructEnvName, constructStackName, constructTagger, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveHostedZone, resolveParamsAndSecrets };
 //# sourceMappingURL=index.js.map