@jaypie/constructs 1.2.44 → 1.2.46

package/dist/esm/JaypieDistribution.d.ts

@@ -9,6 +9,15 @@ import * as wafv2 from "aws-cdk-lib/aws-wafv2";
 import { Construct } from "constructs";
 import { HostConfig } from "./helpers";
 export interface JaypieWafConfig {
+    /**
+     * Unique name for this distribution's WAF resources. Required when passing a
+     * WAF config object. Injected into the WebACL name and WAF log bucket name
+     * so multiple JaypieDistribution instances can coexist in the same
+     * account/env without S3/WAFv2 name collisions.
+     *
+     * Pass `waf: true` (or omit) to retain the legacy, non-namespaced names.
+     */
+    name: string;
     /**
      * Whether WAF is enabled
      * @default true

package/dist/esm/index.js

@@ -929,6 +929,13 @@ class JaypieEnvSecret extends Construct {
         else {
             exportName = cleanName$1(exportParam);
         }
+        if (!consumer &&
+            envKey &&
+            !process.env[envKey] &&
+            value === undefined &&
+            !generateSecretString) {
+            throw new ConfigurationError(`JaypieEnvSecret(${id}): envKey "${envKey}" is empty in process.env and no value or generateSecretString was provided`);
+        }
         if (consumer) {
             const secretName = Fn.importValue(exportName);
             this._secret = secretsmanager.Secret.fromSecretNameV2(this, id, secretName);
@@ -2653,14 +2660,17 @@ class JaypieDistribution extends Construct {
                         sampledRequestsEnabled: true,
                     },
                 });
+                const webAclName = wafConfig.name
+                    ? constructEnvName(`${wafConfig.name}-WebAcl`)
+                    : constructEnvName("WebAcl");
                 const webAcl = new wafv2.CfnWebACL(this, "WebAcl", {
                     defaultAction: { allow: {} },
-                    name: constructEnvName("WebAcl"),
+                    name: webAclName,
                     rules,
                     scope: "CLOUDFRONT",
                     visibilityConfig: {
                         cloudWatchMetricsEnabled: true,
-                        metricName: constructEnvName("WebAcl"),
+                        metricName: webAclName,
                         sampledRequestsEnabled: true,
                     },
                 });
@@ -2676,8 +2686,14 @@ class JaypieDistribution extends Construct {
             let wafLogBucket;
             if (wafLogBucketProp === true) {
                 // Create inline WAF logging bucket with Datadog forwarding
-                const createdBucket = new s3.Bucket(this, constructEnvName("WafLogBucket"), {
-                    bucketName: `aws-waf-logs-${constructEnvName("waf").toLowerCase()}`,
+                const wafLogBucketId = wafConfig.name
+                    ? constructEnvName(`${wafConfig.name}-WafLogBucket`)
+                    : constructEnvName("WafLogBucket");
+                const wafLogBucketName = wafConfig.name
+                    ? `aws-waf-logs-${constructEnvName(`${wafConfig.name}-waf`).toLowerCase()}`
+                    : `aws-waf-logs-${constructEnvName("waf").toLowerCase()}`;
+                const createdBucket = new s3.Bucket(this, wafLogBucketId, {
+                    bucketName: wafLogBucketName,
                     lifecycleRules: [
                         {
                             expiration: Duration.days(90),