@jaypie/constructs 1.2.30 → 1.2.32

package/dist/esm/JaypieEnvSecret.d.ts

@@ -10,6 +10,7 @@ export interface JaypieEnvSecretProps {
     export?: string;
     generateSecretString?: secretsmanager.SecretStringGenerator;
     provider?: boolean;
+    removalPolicy?: boolean | RemovalPolicy;
     roleTag?: string;
     vendorTag?: string;
     value?: string;

package/dist/esm/index.js

@@ -1,5 +1,5 @@
 import * as cdk from 'aws-cdk-lib';
-import { Tags, Stack, Fn, CfnOutput, SecretValue, Duration, RemovalPolicy, CfnStack } from 'aws-cdk-lib';
+import { Tags, Stack, Fn, CfnOutput, SecretValue, RemovalPolicy, Duration, CfnStack } from 'aws-cdk-lib';
 import * as s3 from 'aws-cdk-lib/aws-s3';
 import { Bucket, StorageClass, BucketAccessControl, EventType } from 'aws-cdk-lib/aws-s3';
 import { Construct } from 'constructs';
@@ -911,7 +911,7 @@ class JaypieEnvSecret extends Construct {
             process.env[idOrEnvKey] !== "";
         const id = treatAsEnvKey ? `EnvSecret_${idOrEnvKey}` : idOrEnvKey;
         super(scope, id);
-        const { consumer = checkEnvIsConsumer$1(), envKey: envKeyProp, export: exportParam, generateSecretString, provider = checkEnvIsProvider$1(), roleTag, vendorTag, value, } = props || {};
+        const { consumer = checkEnvIsConsumer$1(), envKey: envKeyProp, export: exportParam, generateSecretString, provider = checkEnvIsProvider$1(), removalPolicy, roleTag, vendorTag, value, } = props || {};
         const envKey = treatAsEnvKey ? idOrEnvKey : envKeyProp;
         this._envKey = envKey;
         let exportName;
@@ -938,6 +938,14 @@ class JaypieEnvSecret extends Construct {
                     : undefined,
             };
             this._secret = new secretsmanager.Secret(this, id, secretProps);
+            if (removalPolicy !== undefined) {
+                const policy = typeof removalPolicy === "boolean"
+                    ? removalPolicy
+                        ? RemovalPolicy.RETAIN
+                        : RemovalPolicy.DESTROY
+                    : removalPolicy;
+                this._secret.applyRemovalPolicy(policy);
+            }
             if (roleTag) {
                 Tags.of(this._secret).add(CDK$2.TAG.ROLE, roleTag);
             }
@@ -2427,6 +2435,16 @@ class JaypieDistribution extends Construct {
             resolvedResponseHeadersPolicy = new cloudfront.ResponseHeadersPolicy(this, "SecurityHeaders", {
                 customHeadersBehavior: {
                     customHeaders: [
+                        {
+                            header: "Cache-Control",
+                            override: true,
+                            value: "no-store, no-cache, must-revalidate, proxy-revalidate",
+                        },
+                        {
+                            header: "Cross-Origin-Embedder-Policy",
+                            override: true,
+                            value: "unsafe-none",
+                        },
                         {
                             header: "Cross-Origin-Opener-Policy",
                             override: true,