@medplum/cdk 2.1.13 → 2.1.14

package/dist/esm/package.json

@@ -0,0 +1 @@
+{"type": "module"}

package/dist/types/backend.d.ts

@@ -0,0 +1,48 @@
+import { MedplumInfraConfig } from '@medplum/core';
+import { aws_ec2 as ec2, aws_ecs as ecs, aws_elasticache as elasticache, aws_elasticloadbalancingv2 as elbv2, aws_iam as iam, aws_logs as logs, aws_rds as rds, aws_route53 as route53, aws_secretsmanager as secretsmanager, aws_ssm as ssm, aws_wafv2 as wafv2 } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+/**
+ * Based on: https://github.com/aws-samples/http-api-aws-fargate-cdk/blob/master/cdk/singleAccount/lib/fargate-vpclink-stack.ts
+ *
+ * RDS config: https://docs.aws.amazon.com/cdk/api/latest/docs/aws-rds-readme.html
+ */
+export declare class BackEnd extends Construct {
+    vpc: ec2.IVpc;
+    botLambdaRole: iam.IRole;
+    rdsSecretsArn?: string;
+    rdsCluster?: rds.DatabaseCluster;
+    redisSubnetGroup: elasticache.CfnSubnetGroup;
+    redisSecurityGroup: ec2.SecurityGroup;
+    redisPassword: secretsmanager.ISecret;
+    redisCluster: elasticache.CfnReplicationGroup;
+    redisSecrets: secretsmanager.ISecret;
+    ecsCluster: ecs.Cluster;
+    taskRolePolicies: iam.PolicyDocument;
+    taskRole: iam.Role;
+    taskDefinition: ecs.FargateTaskDefinition;
+    logGroup: logs.ILogGroup;
+    logDriver: ecs.AwsLogDriver;
+    serviceContainer: ecs.ContainerDefinition;
+    fargateSecurityGroup: ec2.SecurityGroup;
+    fargateService: ecs.FargateService;
+    targetGroup: elbv2.ApplicationTargetGroup;
+    loadBalancer: elbv2.ApplicationLoadBalancer;
+    waf: wafv2.CfnWebACL;
+    wafAssociation: wafv2.CfnWebACLAssociation;
+    dnsRecord?: route53.ARecord;
+    regionParameter: ssm.StringParameter;
+    databaseSecretsParameter: ssm.StringParameter;
+    redisSecretsParameter: ssm.StringParameter;
+    botLambdaRoleParameter: ssm.StringParameter;
+    constructor(scope: Construct, config: MedplumInfraConfig);
+    /**
+     * Returns a container image for the given image name.
+     * If the image name is an ECR image, then the image will be pulled from ECR.
+     * Otherwise, the image name is assumed to be a Docker Hub image.
+     * @param config - The config settings (account number and region).
+     * @param imageName - The image name.
+     * @returns The container image.
+     */
+    private getContainerImage;
+}
+//# sourceMappingURL=backend.d.ts.map

package/dist/types/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAGL,OAAO,IAAI,GAAG,EACd,OAAO,IAAI,GAAG,EACd,eAAe,IAAI,WAAW,EAC9B,0BAA0B,IAAI,KAAK,EACnC,OAAO,IAAI,GAAG,EACd,QAAQ,IAAI,IAAI,EAChB,OAAO,IAAI,GAAG,EACd,WAAW,IAAI,OAAO,EAEtB,kBAAkB,IAAI,cAAc,EACpC,OAAO,IAAI,GAAG,EAEd,SAAS,IAAI,KAAK,EACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC;;;;GAIG;AACH,qBAAa,OAAQ,SAAQ,SAAS;IACpC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;IACd,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;IACjC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC;IAC7C,kBAAkB,EAAE,GAAG,CAAC,aAAa,CAAC;IACtC,aAAa,EAAE,cAAc,CAAC,OAAO,CAAC;IACtC,YAAY,EAAE,WAAW,CAAC,mBAAmB,CAAC;IAC9C,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC;IACrC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC;IACxB,gBAAgB,EAAE,GAAG,CAAC,cAAc,CAAC;IACrC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC;IACnB,cAAc,EAAE,GAAG,CAAC,qBAAqB,CAAC;IAC1C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;IACzB,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC;IAC5B,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,CAAC;IAC1C,oBAAoB,EAAE,GAAG,CAAC,aAAa,CAAC;IACxC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC;IACnC,WAAW,EAAE,KAAK,CAAC,sBAAsB,CAAC;IAC1C,YAAY,EAAE,KAAK,CAAC,uBAAuB,CAAC;IAC5C,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;IACrB,cAAc,EAAE,KAAK,CAAC,oBAAoB,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;IAC5B,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC;IACrC,wBAAwB,EAAE,GAAG,CAAC,eAAe,CAAC;IAC9C,qBAAqB,EAAE,GAAG,CAAC,eAAe,CAAC;IAC3C,sBAAsB,EAAE,GAAG,CAAC,eAAe,CAAC;gBAEhC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB;IAmZxD;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;CAqB1B"}

package/dist/types/cloudtrail.d.ts

@@ -0,0 +1,12 @@
+import { MedplumInfraConfig } from '@medplum/core';
+import { aws_cloudtrail as cloudtrail, aws_logs as logs, aws_sns as sns } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+export declare class CloudTrailAlarms extends Construct {
+    config: MedplumInfraConfig;
+    logGroup?: logs.ILogGroup;
+    cloudTrail?: cloudtrail.Trail;
+    alarmTopic?: sns.ITopic;
+    constructor(scope: Construct, config: MedplumInfraConfig);
+    createMetricAlarm(name: string, filterPattern: string): void;
+}
+//# sourceMappingURL=cloudtrail.d.ts.map

package/dist/types/cloudtrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudtrail.d.ts","sourceRoot":"","sources":["../../src/cloudtrail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,cAAc,IAAI,UAAU,EAG5B,QAAQ,IAAI,IAAI,EAChB,OAAO,IAAI,GAAG,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;IAC1B,UAAU,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC;IAC9B,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;gBAEZ,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB;IA2FxD,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;CA0B7D"}

package/dist/types/config.d.ts

@@ -0,0 +1,18 @@
+import { ExternalSecret, ExternalSecretPrimitive, ExternalSecretPrimitiveType, MedplumInfraConfig, MedplumSourceInfraConfig } from '@medplum/core';
+export declare class InfraConfigNormalizer {
+    private config;
+    private clients;
+    constructor(config: MedplumSourceInfraConfig);
+    fetchParameterStoreSecret(key: string): Promise<string>;
+    fetchExternalSecret(externalSecret: ExternalSecret): Promise<ExternalSecretPrimitive>;
+    normalizeInfraConfigArray(currentVal: any[]): Promise<ExternalSecretPrimitive[] | Record<string, any>[]>;
+    normalizeValueForKey(obj: Record<string, any>, key: string): Promise<void>;
+    normalizeObjectInInfraConfig(obj: Record<string, any>): Promise<Record<string, any>>;
+    normalizeConfig(): Promise<MedplumInfraConfig>;
+}
+export declare function normalizeFetchedValue(key: string, rawValue: ExternalSecretPrimitive, expectedType: ExternalSecretPrimitiveType): ExternalSecretPrimitive;
+export declare function isExternalSecretLike(obj: Record<string, any>): obj is ExternalSecret;
+export declare function isExternalSecret(obj: Record<string, any>): obj is ExternalSecret;
+export declare function assertValidExternalSecret(obj: Record<string, any>): asserts obj is ExternalSecret;
+export declare function normalizeInfraConfig(config: MedplumSourceInfraConfig): Promise<MedplumInfraConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EAIzB,MAAM,eAAe,CAAC;AAKvB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,OAAO,CAAqB;gBACxB,MAAM,EAAE,wBAAwB;IAYtC,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BvD,mBAAmB,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAiBrF,yBAAyB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,uBAAuB,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IA0BxG,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB1E,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IASpF,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAGrD;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,uBAAuB,EACjC,YAAY,EAAE,2BAA2B,GACxC,uBAAuB,CAiCzB;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,cAAc,CAOpF;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,cAAc,CAOhF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,CAMjG;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAExG"}

package/dist/types/frontend.d.ts

@@ -0,0 +1,21 @@
+import { MedplumInfraConfig } from '@medplum/core';
+import { aws_cloudfront as cloudfront, aws_iam as iam, aws_route53 as route53, aws_s3 as s3, aws_wafv2 as wafv2 } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+/**
+ * Static app infrastructure, which deploys app content to an S3 bucket.
+ *
+ * The app redirects from HTTP to HTTPS, using a CloudFront distribution,
+ * Route53 alias record, and ACM certificate.
+ */
+export declare class FrontEnd extends Construct {
+    appBucket: s3.IBucket;
+    responseHeadersPolicy?: cloudfront.IResponseHeadersPolicy;
+    waf?: wafv2.CfnWebACL;
+    apiOriginCachePolicy?: cloudfront.ICachePolicy;
+    originAccessIdentity?: cloudfront.OriginAccessIdentity;
+    originAccessPolicyStatement?: iam.PolicyStatement;
+    distribution?: cloudfront.IDistribution;
+    dnsRecord?: route53.IRecordSet;
+    constructor(parent: Construct, config: MedplumInfraConfig, region: string);
+}
+//# sourceMappingURL=frontend.d.ts.map

package/dist/types/frontend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend.d.ts","sourceRoot":"","sources":["../../src/frontend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAEL,cAAc,IAAI,UAAU,EAE5B,OAAO,IAAI,GAAG,EAGd,WAAW,IAAI,OAAO,EACtB,MAAM,IAAI,EAAE,EAEZ,SAAS,IAAI,KAAK,EACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,SAAS;IACrC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC;IACtB,qBAAqB,CAAC,EAAE,UAAU,CAAC,sBAAsB,CAAC;IAC1D,GAAG,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IACtB,oBAAoB,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC;IAC/C,oBAAoB,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC;IACvD,2BAA2B,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;IAClD,YAAY,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;gBAEnB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM;CA0J1E"}

package/dist/types/index.d.ts

@@ -0,0 +1,8 @@
+export * from './backend';
+export * from './cloudtrail';
+export * from './frontend';
+export * from './stack';
+export * from './storage';
+export * from './waf';
+export declare function main(context?: Record<string, string>): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,OAAO,CAAC;AAEtB,wBAAgB,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAuB3D"}

package/dist/types/oai.d.ts

@@ -0,0 +1,19 @@
+import { aws_cloudfront as cloudfront, aws_iam as iam, aws_s3 as s3 } from 'aws-cdk-lib';
+/**
+ * Grants S3 bucket read access to the CloudFront Origin Access Identity (OAI).
+ *
+ * Under normal circumstances, where CDK creates both the S3 bucket and the OAI,
+ * you can achieve this same behavior by simply calling:
+ *
+ *     bucket.grantRead(identity);
+ *
+ * However, if importing an S3 bucket via `s3.Bucket.fromBucketAttributes()`, that does not work.
+ *
+ * See: https://stackoverflow.com/a/60917015
+ *
+ * @param bucket - The S3 bucket.
+ * @param identity - The CloudFront Origin Access Identity.
+ * @returns The policy statement.
+ */
+export declare function grantBucketAccessToOriginAccessIdentity(bucket: s3.IBucket, identity: cloudfront.OriginAccessIdentity): iam.PolicyStatement;
+//# sourceMappingURL=oai.d.ts.map

package/dist/types/oai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oai.d.ts","sourceRoot":"","sources":["../../src/oai.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,IAAI,UAAU,EAAE,OAAO,IAAI,GAAG,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,aAAa,CAAC;AAEzF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,EAAE,CAAC,OAAO,EAClB,QAAQ,EAAE,UAAU,CAAC,oBAAoB,GACxC,GAAG,CAAC,eAAe,CAUrB"}

package/dist/types/stack.d.ts

@@ -0,0 +1,25 @@
+import { MedplumInfraConfig } from '@medplum/core';
+import { App, Stack } from 'aws-cdk-lib';
+import { BackEnd } from './backend';
+import { CloudTrailAlarms } from './cloudtrail';
+import { FrontEnd } from './frontend';
+import { Storage } from './storage';
+export declare class MedplumStack {
+    primaryStack: MedplumPrimaryStack;
+    globalStack?: MedplumGlobalStack;
+    constructor(scope: App, config: MedplumInfraConfig);
+}
+export declare class MedplumPrimaryStack extends Stack {
+    backEnd: BackEnd;
+    frontEnd: FrontEnd;
+    storage: Storage;
+    cloudTrail: CloudTrailAlarms;
+    constructor(scope: App, config: MedplumInfraConfig);
+}
+export declare class MedplumGlobalStack extends Stack {
+    frontEnd: FrontEnd;
+    storage: Storage;
+    cloudTrail: CloudTrailAlarms;
+    constructor(scope: App, config: MedplumInfraConfig);
+}
+//# sourceMappingURL=stack.d.ts.map

package/dist/types/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../../src/stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAQ,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,qBAAa,YAAY;IACvB,YAAY,EAAE,mBAAmB,CAAC;IAClC,WAAW,CAAC,EAAE,kBAAkB,CAAC;gBAErB,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB;CAWnD;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,gBAAgB,CAAC;gBAEjB,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB;CAcnD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,gBAAgB,CAAC;gBAEjB,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB;CAanD"}

package/dist/types/storage.d.ts

@@ -0,0 +1,18 @@
+import { MedplumInfraConfig } from '@medplum/core';
+import { aws_cloudfront as cloudfront, aws_iam as iam, aws_route53 as route53, aws_s3 as s3, aws_wafv2 as wafv2 } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+/**
+ * Binary storage bucket and CloudFront distribution.
+ */
+export declare class Storage extends Construct {
+    storageBucket: s3.IBucket;
+    keyGroup?: cloudfront.IKeyGroup;
+    responseHeadersPolicy?: cloudfront.IResponseHeadersPolicy;
+    waf?: wafv2.CfnWebACL;
+    originAccessIdentity?: cloudfront.OriginAccessIdentity;
+    originAccessPolicyStatement?: iam.PolicyStatement;
+    distribution?: cloudfront.IDistribution;
+    dnsRecord?: route53.IRecordSet;
+    constructor(parent: Construct, config: MedplumInfraConfig, region: string);
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/types/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAEL,cAAc,IAAI,UAAU,EAE5B,OAAO,IAAI,GAAG,EAEd,WAAW,IAAI,OAAO,EACtB,MAAM,IAAI,EAAE,EAEZ,SAAS,IAAI,KAAK,EACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC;;GAEG;AACH,qBAAa,OAAQ,SAAQ,SAAS;IACpC,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC;IAChC,qBAAqB,CAAC,EAAE,UAAU,CAAC,sBAAsB,CAAC;IAC1D,GAAG,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IACtB,oBAAoB,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC;IACvD,2BAA2B,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;IAClD,YAAY,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;gBAEnB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM;CA8H1E"}

package/dist/types/waf.d.ts

@@ -0,0 +1,3 @@
+import { aws_wafv2 as wafv2 } from 'aws-cdk-lib';
+export declare const awsManagedRules: wafv2.CfnWebACL.RuleProperty[];
+//# sourceMappingURL=waf.d.ts.map

package/dist/types/waf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waf.d.ts","sourceRoot":"","sources":["../../src/waf.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,IAAI,KAAK,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY,EAqHzD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@medplum/cdk",
-  "version": "2.1.13",
+  "version": "2.1.14",
   "description": "Medplum CDK Infra as Code",
   "homepage": "https://www.medplum.com/",
   "repository": {