@lambda-kata/cdk 0.1.3-rc.8 → 0.1.3-rc.81

package/out/tsc/src/snapstart-construct.d.ts

@@ -0,0 +1,118 @@
+/**
+ * SnapStart Construct - CDK Custom Resource for SnapStart Activation
+ *
+ * This module provides a CDK construct that creates a Custom Resource
+ * to enable SnapStart on Lambda functions after deployment. The construct
+ * handles the asynchronous nature of SnapStart snapshot creation.
+ *
+ * @module snapstart-construct
+ */
+import { Construct } from 'constructs';
+import { CustomResource } from 'aws-cdk-lib';
+import { IFunction } from 'aws-cdk-lib/aws-lambda';
+/**
+ * Properties for the {@link SnapStartActivator} construct.
+ *
+ * @see {@link SnapStartActivator} for the construct that consumes these properties
+ */
+export interface SnapStartActivatorProps {
+    /**
+     * The Lambda function to enable SnapStart on.
+     * The construct will add a dependency so the Custom Resource runs after this function is created.
+     */
+    targetFunction: IFunction;
+    /**
+     * The alias name to create or update after publishing a SnapStart-enabled version.
+     * @default 'kata'
+     */
+    aliasName?: string;
+    /**
+     * Maximum time in seconds to wait for SnapStart snapshot creation.
+     * The Custom Resource handler timeout is set to this value plus a 60-second buffer.
+     * @default 180
+     */
+    snapshotTimeoutSeconds?: number;
+}
+/**
+ * CDK Construct that enables SnapStart on a Lambda function after deployment.
+ *
+ * Creates a CloudFormation Custom Resource backed by a Lambda handler that
+ * performs the full SnapStart activation cycle during stack deployment:
+ *
+ * 1. Waits for the target function to reach Active state
+ * 2. Enables SnapStart configuration (`ApplyOn: PublishedVersions`)
+ * 3. Publishes a new version (triggers snapshot creation)
+ * 4. Polls until the snapshot is ready (or timeout is reached)
+ * 5. Creates or updates an alias pointing to the new version — ALWAYS, regardless of snapshot outcome
+ *
+ * After deployment, the published version number and alias ARN are available
+ * as CloudFormation attributes via {@link versionRef} and {@link aliasArnRef}.
+ *
+ * @example
+ * ```typescript
+ * const myFunction = new lambda.Function(this, 'MyFunction', { ... });
+ *
+ * const snapStart = new SnapStartActivator(this, 'SnapStart', {
+ *   targetFunction: myFunction,
+ *   aliasName: 'kata',
+ *   snapshotTimeoutSeconds: 180,
+ * });
+ *
+ * // Reference outputs after deployment
+ * new CfnOutput(this, 'Version', { value: snapStart.versionRef });
+ * new CfnOutput(this, 'AliasArn', { value: snapStart.aliasArnRef });
+ * ```
+ *
+ * @see {@link SnapStartActivatorProps} for configuration options
+ */
+export declare class SnapStartActivator extends Construct {
+    /**
+     * The alias name that was created or updated (e.g. "kata").
+     *
+     * This is a static property set at synthesis time from {@link SnapStartActivatorProps.aliasName}.
+     */
+    readonly aliasName: string;
+    /**
+     * The Custom Resource that manages SnapStart activation during deployment.
+     *
+     * Use this to add additional dependencies or access CloudFormation attributes.
+     */
+    readonly resource: CustomResource;
+    /**
+     * The version number created by SnapStart activation (CloudFormation attribute).
+     *
+     * This value is resolved at deployment time when the Custom Resource handler
+     * publishes a new Lambda version. Use it in `CfnOutput` or other constructs
+     * that need to reference the published version.
+     */
+    readonly versionRef: string;
+    /**
+     * The alias ARN created by SnapStart activation (CloudFormation attribute).
+     *
+     * This value is resolved at deployment time when the Custom Resource handler
+     * creates or updates the alias. Use it in `CfnOutput` or other constructs
+     * that need to reference the alias.
+     */
+    readonly aliasArnRef: string;
+    constructor(scope: Construct, id: string, props: SnapStartActivatorProps);
+    /**
+     * Creates the Lambda function that handles Custom Resource events.
+     * Permissions are passed via initialPolicy to ensure they are part of the
+     * role creation (not a separate AWS::IAM::Policy resource), preventing
+     * IAM propagation race conditions.
+     */
+    private createProviderFunction;
+    /**
+     * Generates the inline handler code for the Custom Resource.
+     *
+     * This is a self-contained version of the snapstart-activator logic
+     * that can be deployed as inline Lambda code.
+     *
+     * Matches the proven deploy_lambda.py reference:
+     * - ONE publish, poll, ALWAYS create alias regardless of snapshot outcome
+     * - No retries on Failed state
+     * - On Update errors → return SUCCESS (prevent rollback deadlock)
+     * - On Create errors → throw (return FAILED)
+     */
+    private generateHandlerCode;
+}

package/out/tsc/src/sync-account-resolver.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Synchronous Account ID Resolution for Lambda Kata CDK Integration
+ *
+ * This module provides synchronous account ID resolution for use during
+ * CDK synthesis, which requires synchronous operations.
+ *
+ * Resolution strategies (in order of precedence):
+ * 1. CDK context value (explicit configuration)
+ * 2. Stack account (if not a token/unresolved)
+ * 3. Environment variables (AWS_ACCOUNT_ID, CDK_DEFAULT_ACCOUNT)
+ * 4. STS GetCallerIdentity via execSync (fallback)
+ *
+ * @module sync-account-resolver
+ */
+import { Construct } from 'constructs';
+/**
+ * Error thrown when account ID cannot be resolved through any strategy.
+ */
+export declare class SyncAccountResolutionError extends Error {
+    constructor(message: string);
+}
+/**
+ * Result of account ID resolution, including the source of the resolution.
+ */
+export interface SyncAccountResolutionResult {
+    accountId: string;
+    source: 'context' | 'stack' | 'env' | 'sts';
+}
+/**
+ * Options for synchronous account ID resolution.
+ */
+export interface SyncAccountResolverOptions {
+    /**
+     * Whether to skip the STS fallback (useful for testing).
+     * Default: false
+     */
+    skipStsFallback?: boolean;
+}
+/**
+ * Resolves the target AWS account ID synchronously.
+ *
+ * This function attempts to determine the AWS account ID using multiple
+ * strategies in order of precedence:
+ *
+ * 1. **CDK Context**: Checks for `aws:cdk:account` context value
+ * 2. **Stack Account**: Uses the Stack's account if it's not a token
+ * 3. **Environment Variables**: Checks AWS_ACCOUNT_ID, CDK_DEFAULT_ACCOUNT
+ * 4. **STS Fallback**: Calls AWS CLI sts get-caller-identity
+ *
+ * @param scope - The CDK construct scope to resolve the account for
+ * @param options - Optional configuration for resolution behavior
+ * @returns The AWS account ID (12-digit string)
+ * @throws SyncAccountResolutionError if account cannot be resolved
+ */
+export declare function resolveAccountIdSync(scope: Construct, options?: SyncAccountResolverOptions): string;
+/**
+ * Resolves the target AWS account ID synchronously with source information.
+ */
+export declare function resolveAccountIdSyncWithSource(scope: Construct, options?: SyncAccountResolverOptions): SyncAccountResolutionResult;
+/**
+ * Resolves the deployment region synchronously.
+ */
+export declare function resolveRegionSync(scope: Construct): string;

package/out/tsc/src/types.d.ts

@@ -41,10 +41,19 @@ export interface LicensingResponse {
      */
     entitled: boolean;
     /**
-     * Customer-specific Lambda Layer ARN containing the Lambda Kata runtime.
+     * Base Lambda Layer ARN (without version number).
      * Only present if the account is entitled.
+     * @deprecated Use layerVersionArn for attaching to Lambda functions
      */
     layerArn?: string;
+    /**
+     * Full Lambda Layer Version ARN (with version number).
+     * This is the ARN that should be used when attaching layers to Lambda functions.
+     * Only present if the account is entitled.
+     *
+     * @example "arn:aws:lambda:eu-central-1:113258654684:layer:lambda-kata-euc:1"
+     */
+    layerVersionArn?: string;
     /**
      * Human-readable status message
      */
@@ -67,6 +76,11 @@ export interface TransformationConfig {
      * This will be stored in the config layer.
      */
     originalHandler: string;
+    /**
+     * The original Node.js runtime (e.g., "nodejs20.x").
+     * Used to create the appropriate Node.js runtime layer.
+     */
+    originalRuntime?: string;
     /**
      * The target runtime for the transformed Lambda.
      * Always Runtime.PYTHON_3_12 for Lambda Kata.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lambda-kata/cdk",
-  "version": "0.1.3-rc.8",
+  "version": "0.1.3-rc.81",
   "description": "AWS CDK integration for Lambda Kata - Node.js Lambdas running via Lambda Kata runtime",
   "main": "out/dist/index.js",
   "types": "out/tsc/src/index.d.ts",
@@ -18,7 +18,7 @@
     "docs": "yarn run docs:md && yarn run docs:html",
     "docs:md": "typedoc --options ./docs/docs.config/typedoc.md.json",
     "docs:html": "typedoc --options ./docs/docs.config/typedoc.html.json",
-    "npm:publish": "npm publish --access public"
+    "npm:publish": "yarn run build && npm publish --access public"
   },
   "files": [
     "out/dist/**/*",
@@ -50,11 +50,14 @@
   },
   "peerDependencies": {
     "aws-cdk-lib": "^2.0.0",
-    "constructs": "^10.0.0"
+    "constructs": "^10.0.0",
+    "esbuild": "^0.23.0"
   },
   "dependencies": {
     "@aws-sdk/client-lambda": "^3.500.0",
+    "@aws-sdk/client-s3": "^3.500.0",
     "@aws-sdk/client-sts": "^3.500.0",
+    "@lambda-kata/licensing": "0.1.32",
     "dotenv": "^17.2.3",
     "reflect-metadata": "^0.2.2"
   },
@@ -73,5 +76,10 @@
     "ts-jest": "^29.1.2",
     "tsc-alias": "^1.8.16",
     "typescript": "^5.3.3"
+  },
+  "peerDependenciesMeta": {
+    "esbuild": {
+      "optional": true
+    }
   }
 }