@jaypie/constructs 1.1.62-rc.1 → 1.1.62-rc.3

package/dist/cjs/JaypieDistribution.d.ts

@@ -3,6 +3,8 @@ import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
 import * as lambda from "aws-cdk-lib/aws-lambda";
 import * as route53 from "aws-cdk-lib/aws-route53";
+import * as s3 from "aws-cdk-lib/aws-s3";
+import { LambdaDestination } from "aws-cdk-lib/aws-s3-notifications";
 import { Construct } from "constructs";
 export interface JaypieDistributionProps extends Omit<cloudfront.DistributionProps, "certificate" | "defaultBehavior"> {
     /**
@@ -14,6 +16,14 @@ export interface JaypieDistributionProps extends Omit<cloudfront.DistributionPro
      * Override default behavior (optional if handler is provided)
      */
     defaultBehavior?: cloudfront.BehaviorOptions;
+    /**
+     * Log destination configuration for CloudFront access logs
+     * - LambdaDestination: Use a specific Lambda destination for S3 notifications
+     * - true: Use Datadog forwarder for S3 notifications (default)
+     * - false: Disable logging entirely
+     * @default true
+     */
+    destination?: LambdaDestination | boolean;
     /**
      * The origin handler - can be an IOrigin, IFunctionUrl, or IFunction
      * If IFunction, a FunctionUrl will be created with auth NONE
@@ -49,6 +59,7 @@ export declare class JaypieDistribution extends Construct implements cloudfront.
     readonly domainName: string;
     readonly functionUrl?: lambda.FunctionUrl;
     readonly host?: string;
+    readonly logBucket?: s3.IBucket;
     constructor(scope: Construct, id: string, props: JaypieDistributionProps);
     private isIOrigin;
     private isIFunctionUrl;

package/dist/cjs/index.cjs

@@ -1666,7 +1666,7 @@ class JaypieDatadogForwarder extends constructs.Construct {
 class JaypieDistribution extends constructs.Construct {
     constructor(scope, id, props) {
         super(scope, id);
-        const { certificate: certificateProp = true, handler, host: propsHost, invokeMode = lambda__namespace.InvokeMode.BUFFERED, roleTag = CDK$2.ROLE.API, zone: propsZone, defaultBehavior: propsDefaultBehavior, ...distributionProps } = props;
+        const { certificate: certificateProp = true, defaultBehavior: propsDefaultBehavior, destination: destinationProp = true, handler, host: propsHost, invokeMode = lambda__namespace.InvokeMode.BUFFERED, roleTag = CDK$2.ROLE.API, zone: propsZone, ...distributionProps } = props;
         // Validate environment variables
         if (process.env.CDK_ENV_API_SUBDOMAIN &&
             !isValidSubdomain(process.env.CDK_ENV_API_SUBDOMAIN)) {
@@ -1732,9 +1732,10 @@ class JaypieDistribution extends constructs.Construct {
         }
         else if (origin) {
             defaultBehavior = {
+                allowedMethods: cloudfront__namespace.AllowedMethods.ALLOW_ALL,
                 cachePolicy: cloudfront__namespace.CachePolicy.CACHING_DISABLED,
                 origin,
-                originRequestPolicy: cloudfront__namespace.OriginRequestPolicy.ALL_VIEWER,
+                originRequestPolicy: cloudfront__namespace.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER,
                 viewerProtocolPolicy: cloudfront__namespace.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
             };
         }
@@ -1759,6 +1760,33 @@ class JaypieDistribution extends constructs.Construct {
             }
             this.certificate = certificateToUse;
         }
+        // Create log bucket if logging is enabled
+        let logBucket;
+        if (destinationProp !== false) {
+            logBucket = new s3__namespace.Bucket(this, constructEnvName("LogBucket"), {
+                objectOwnership: s3__namespace.ObjectOwnership.OBJECT_WRITER,
+                removalPolicy: cdk.RemovalPolicy.DESTROY,
+                autoDeleteObjects: true,
+                lifecycleRules: [
+                    {
+                        expiration: cdk.Duration.days(90),
+                        transitions: [
+                            {
+                                storageClass: s3__namespace.StorageClass.INFREQUENT_ACCESS,
+                                transitionAfter: cdk.Duration.days(30),
+                            },
+                        ],
+                    },
+                ],
+            });
+            cdk.Tags.of(logBucket).add(CDK$2.TAG.ROLE, CDK$2.ROLE.STORAGE);
+            // Add S3 notification to Datadog forwarder
+            const lambdaDestination = destinationProp === true
+                ? new s3n.LambdaDestination(resolveDatadogForwarderFunction(this))
+                : destinationProp;
+            logBucket.addEventNotification(s3__namespace.EventType.OBJECT_CREATED, lambdaDestination);
+            this.logBucket = logBucket;
+        }
         // Create the CloudFront distribution
         this.distribution = new cloudfront__namespace.Distribution(this, constructEnvName("Distribution"), {
             defaultBehavior,
@@ -1768,6 +1796,13 @@ class JaypieDistribution extends constructs.Construct {
                     domainNames: [host],
                 }
                 : {}),
+            ...(logBucket
+                ? {
+                    enableLogging: true,
+                    logBucket,
+                    logFilePrefix: "cloudfront-logs/",
+                }
+                : {}),
             ...distributionProps,
         });
         cdk.Tags.of(this.distribution).add(CDK$2.TAG.ROLE, roleTag);
@@ -1775,14 +1810,20 @@ class JaypieDistribution extends constructs.Construct {
         this.distributionDomainName = this.distribution.distributionDomainName;
         this.distributionId = this.distribution.distributionId;
         this.domainName = this.distribution.domainName;
-        // Create DNS record if we have host and zone
+        // Create DNS records if we have host and zone
         if (host && hostedZone) {
-            const record = new route53__namespace.ARecord(this, "AliasRecord", {
+            const aRecord = new route53__namespace.ARecord(this, "AliasRecord", {
                 recordName: host,
                 target: route53__namespace.RecordTarget.fromAlias(new route53Targets__namespace.CloudFrontTarget(this.distribution)),
                 zone: hostedZone,
             });
-            cdk.Tags.of(record).add(CDK$2.TAG.ROLE, CDK$2.ROLE.NETWORKING);
+            cdk.Tags.of(aRecord).add(CDK$2.TAG.ROLE, CDK$2.ROLE.NETWORKING);
+            const aaaaRecord = new route53__namespace.AaaaRecord(this, "AaaaAliasRecord", {
+                recordName: host,
+                target: route53__namespace.RecordTarget.fromAlias(new route53Targets__namespace.CloudFrontTarget(this.distribution)),
+                zone: hostedZone,
+            });
+            cdk.Tags.of(aaaaRecord).add(CDK$2.TAG.ROLE, CDK$2.ROLE.NETWORKING);
         }
     }
     // Type guards for handler types