@jaypie/constructs 1.2.21 → 1.2.23

package/dist/cjs/__tests__/issue-158-shared-secrets.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cjs/index.cjs

@@ -1333,7 +1333,8 @@ class JaypieLambda extends constructs.Construct {
         // Get base environment with defaults
         const environment = jaypieLambdaEnv({ initialEnvironment });
         // Resolve secrets from mixed array (strings and JaypieEnvSecret instances)
-        const secrets = resolveSecrets(scope, secretsInput);
+        // Use Stack.of(this) to ensure secrets are shared at stack level across all constructs
+        const secrets = resolveSecrets(cdk.Stack.of(this), secretsInput);
         const codeAsset = typeof code === "string" ? lambda__namespace.Code.fromAsset(code) : code;
         // Create a working copy of layers
         const resolvedLayers = [...layers];
@@ -3242,7 +3243,8 @@ class JaypieNextJs extends constructs.Construct {
             : props?.nextjsPath || path__namespace.join(process.cwd(), "..", "nextjs");
         const paramsAndSecrets = resolveParamsAndSecrets();
         // Resolve secrets from mixed array (strings and JaypieEnvSecret instances)
-        const secrets = resolveSecrets(scope, props?.secrets);
+        // Use Stack.of(this) to ensure secrets are shared at stack level across all constructs
+        const secrets = resolveSecrets(cdk.Stack.of(this), props?.secrets);
         // Process secrets environment variables
         const secretsEnvironment = Object.entries(envSecrets).reduce((acc, [key, secret]) => ({
             ...acc,
@@ -3667,6 +3669,7 @@ class JaypieSsoPermissions extends constructs.Construct {
                             "cloudformation:*",
                             "cloudwatch:*",
                             "cost-optimization-hub:*",
+                            "dynamodb:*",
                             "ec2:*",
                             "iam:Get*",
                             "iam:List*",