@jaypie/constructs 1.2.52 → 1.2.53

package/dist/esm/JaypieWebDeploymentBucket.d.ts

@@ -1,4 +1,4 @@
-import { RemovalPolicy } from "aws-cdk-lib";
+import { CfnOutput, RemovalPolicy } from "aws-cdk-lib";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
 import { AddToResourcePolicyResult, PolicyStatement } from "aws-cdk-lib/aws-iam";
@@ -123,6 +123,23 @@ export declare class JaypieWebDeploymentBucket extends Construct implements s3.I
     readonly wafLogBucket?: s3.IBucket;
     readonly webAcl?: wafv2.CfnWebACL;
     constructor(scope: Construct, id: string, props?: JaypieWebDeploymentBucketProps);
+    /**
+     * Emit stack-level CfnOutputs with stable, hash-free logical IDs so they can
+     * be read directly from `cdk-outputs.json` without prefix-matching. Skips
+     * outputs whose underlying resource is absent.
+     *
+     * Logical IDs (with optional `prefix`):
+     * - `${prefix}DestinationBucketName`
+     * - `${prefix}DestinationBucketDeployRoleArn` (when a deploy role exists)
+     * - `${prefix}DistributionId` (when a distribution exists)
+     * - `${prefix}CertificateArn` (when a certificate exists)
+     *
+     * @returns map of created outputs keyed by their logical ID
+     */
+    exportOutputs(options?: {
+        prefix?: string;
+        scope?: Construct;
+    }): Record<string, CfnOutput>;
     private resolveWafConfig;
     private isExportNameObject;
     private resolveLogBucket;

package/dist/esm/helpers/__tests__/constructWafLogBucketName.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/helpers/constructWafLogBucketName.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Build a WAF log bucket name shaped like
+ * `aws-waf-logs-${env}-${key}-${name}-waf-${nonce}` (or `-waf-` only when
+ * `name` is empty). The `aws-waf-logs-` prefix is required by AWS WAF, and
+ * `-${PROJECT_NONCE}` is preserved verbatim for uniqueness; the middle is
+ * truncated when needed to fit S3's 63-char limit.
+ */
+export declare function constructWafLogBucketName(name?: string): string;

package/dist/esm/helpers/index.d.ts

@@ -2,6 +2,7 @@ export { addDatadogLayers } from "./addDatadogLayers";
 export { constructEnvName } from "./constructEnvName";
 export { constructStackName } from "./constructStackName";
 export { constructTagger } from "./constructTagger";
+export { constructWafLogBucketName } from "./constructWafLogBucketName";
 export { envHostname, HostConfig } from "./envHostname";
 export { extendDatadogRole, ExtendDatadogRoleOptions, } from "./extendDatadogRole";
 export { clearAllCertificateCaches, clearCertificateCache, resolveCertificate, ResolveCertificateOptions, } from "./resolveCertificate";

package/dist/esm/index.js

@@ -365,6 +365,29 @@ function constructTagger(construct, { name } = {}) {
     return true;
 }
 
+const AWS_WAF_LOGS_PREFIX = "aws-waf-logs-";
+const S3_BUCKET_NAME_MAX_LENGTH = 63;
+/**
+ * Build a WAF log bucket name shaped like
+ * `aws-waf-logs-${env}-${key}-${name}-waf-${nonce}` (or `-waf-` only when
+ * `name` is empty). The `aws-waf-logs-` prefix is required by AWS WAF, and
+ * `-${PROJECT_NONCE}` is preserved verbatim for uniqueness; the middle is
+ * truncated when needed to fit S3's 63-char limit.
+ */
+function constructWafLogBucketName(name) {
+    const nonce = (process.env.PROJECT_NONCE ?? "cfe2").toLowerCase();
+    const nonceSuffix = `-${nonce}`;
+    const innerName = name ? `${name}-waf` : "waf";
+    const middle = constructEnvName(innerName)
+        .toLowerCase()
+        .slice(0, -nonceSuffix.length);
+    const maxMiddleLength = S3_BUCKET_NAME_MAX_LENGTH - AWS_WAF_LOGS_PREFIX.length - nonceSuffix.length;
+    const truncated = middle.length > maxMiddleLength
+        ? middle.slice(0, maxMiddleLength).replace(/-+$/, "")
+        : middle;
+    return `${AWS_WAF_LOGS_PREFIX}${truncated}${nonceSuffix}`;
+}
+
 function envHostname({ component, domain, env, subdomain, } = {}) {
     const resolvedDomain = domain || process.env.CDK_ENV_DOMAIN || process.env.CDK_ENV_HOSTED_ZONE;
     if (!resolvedDomain) {
@@ -2729,9 +2752,7 @@ class JaypieDistribution extends Construct {
                 const wafLogBucketId = wafConfig.name
                     ? constructEnvName(`${wafConfig.name}-WafLogBucket`)
                     : constructEnvName("WafLogBucket");
-                const wafLogBucketName = wafConfig.name
-                    ? `aws-waf-logs-${constructEnvName(`${wafConfig.name}-waf`).toLowerCase()}`
-                    : `aws-waf-logs-${constructEnvName("waf").toLowerCase()}`;
+                const wafLogBucketName = constructWafLogBucketName(wafConfig.name);
                 const createdBucket = new s3.Bucket(this, wafLogBucketId, {
                     bucketName: wafLogBucketName,
                     lifecycleRules: [
@@ -4586,7 +4607,7 @@ class JaypieWebDeploymentBucket extends Construct {
                 let wafLogBucket;
                 if (wafLogBucketProp === true) {
                     const wafLogBucketId = constructEnvName(`${wafConfig.name}-WafLogBucket`);
-                    const wafLogBucketName = `aws-waf-logs-${constructEnvName(`${wafConfig.name}-waf`).toLowerCase()}`;
+                    const wafLogBucketName = constructWafLogBucketName(wafConfig.name);
                     const createdBucket = new s3.Bucket(this, wafLogBucketId, {
                         bucketName: wafLogBucketName,
                         lifecycleRules: [
@@ -4625,6 +4646,41 @@ class JaypieWebDeploymentBucket extends Construct {
             }
         }
     }
+    /**
+     * Emit stack-level CfnOutputs with stable, hash-free logical IDs so they can
+     * be read directly from `cdk-outputs.json` without prefix-matching. Skips
+     * outputs whose underlying resource is absent.
+     *
+     * Logical IDs (with optional `prefix`):
+     * - `${prefix}DestinationBucketName`
+     * - `${prefix}DestinationBucketDeployRoleArn` (when a deploy role exists)
+     * - `${prefix}DistributionId` (when a distribution exists)
+     * - `${prefix}CertificateArn` (when a certificate exists)
+     *
+     * @returns map of created outputs keyed by their logical ID
+     */
+    exportOutputs(options = {}) {
+        const { prefix = "", scope = Stack.of(this) } = options;
+        const outputs = {};
+        const create = (id, value) => {
+            const logicalId = `${prefix}${id}`;
+            const output = new CfnOutput(scope, `${logicalId}Export`, { value });
+            output.overrideLogicalId(logicalId);
+            outputs[logicalId] = output;
+            return output;
+        };
+        create("DestinationBucketName", this.bucket.bucketName);
+        if (this.deployRoleArn) {
+            create("DestinationBucketDeployRoleArn", this.deployRoleArn);
+        }
+        if (this.distribution) {
+            create("DistributionId", this.distribution.distributionId);
+        }
+        if (this.certificate) {
+            create("CertificateArn", this.certificate.certificateArn);
+        }
+        return outputs;
+    }
     resolveWafConfig(wafProp, defaultName) {
         if (wafProp === false)
             return undefined;
@@ -5160,5 +5216,5 @@ class JaypieWebSocketTable extends Construct {
     }
 }
 
-export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieCertificate, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDistribution, JaypieDnsRecord, JaypieDynamoDb, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMigration, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieStaticWebBucket, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, JaypieWebSocket, JaypieWebSocketLambda, JaypieWebSocketTable, addDatadogLayers, clearAllCertificateCaches, clearAllSecretsCaches, clearCertificateCache, clearSecretsCache, constructEnvName, constructStackName, constructTagger, ensureRoute53QueryLoggingPolicy, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveCertificate, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveEnvironment, resolveHostedZone, resolveParamsAndSecrets, resolveSecrets };
+export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieCertificate, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDistribution, JaypieDnsRecord, JaypieDynamoDb, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMigration, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieStaticWebBucket, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, JaypieWebSocket, JaypieWebSocketLambda, JaypieWebSocketTable, addDatadogLayers, clearAllCertificateCaches, clearAllSecretsCaches, clearCertificateCache, clearSecretsCache, constructEnvName, constructStackName, constructTagger, constructWafLogBucketName, ensureRoute53QueryLoggingPolicy, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveCertificate, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveEnvironment, resolveHostedZone, resolveParamsAndSecrets, resolveSecrets };
 //# sourceMappingURL=index.js.map