@medplum/cdk 2.1.17 → 2.1.19

package/src/index.test.ts

@@ -1,539 +0,0 @@
-import { unlinkSync, writeFileSync } from 'fs';
-import { resolve } from 'path';
-import { main } from './index';
-
-describe('Infra', () => {
-  beforeEach(() => {
-    console.log = jest.fn();
-  });
-
-  test('Missing config', () => {
-    expect(() => main()).not.toThrow();
-  });
-
-  test('Synth stack', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.test.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'unittest',
-        stackName: 'MedplumUnitTestStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        loadBalancerLoggingEnabled: true,
-        loadBalancerLoggingBucket: 'medplum-logs-us-east-1',
-        loadBalancerLoggingPrefix: 'elb',
-        clamscanEnabled: true,
-        clamscanLoggingBucket: 'medplum-logs-us-east-1',
-        clamscanLoggingPrefix: 'clamscan',
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Multi region stack', () => {
-    const filename = resolve('./medplum.multiregion.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'multiregion',
-        stackName: 'MedplumMultiRegionStack',
-        accountNumber: '647991932601',
-        region: 'ap-southeast-1',
-        domainName: 'ap-southeast-1.medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        loadBalancerLoggingEnabled: true,
-        loadBalancerLoggingBucket: 'medplum-logs-us-east-1',
-        loadBalancerLoggingPrefix: 'elb',
-        clamscanEnabled: true,
-        clamscanLoggingBucket: 'medplum-logs-us-east-1',
-        clamscanLoggingPrefix: 'clamscan',
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('ECR image', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.customvpc.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'customvpc',
-        stackName: 'MedplumCustomVpcStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        rdsInstanceType: 't3.micro',
-        desiredServerCount: 1,
-        serverImage: '647991932601.dkr.ecr.us-east-1.amazonaws.com/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Custom VPC', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.customvpc.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'customvpc',
-        stackName: 'MedplumCustomVpcStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        vpcId: 'vpc-0fc3a4d0600000000',
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:latest',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Custom RDS instance type', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.customRdsInstanceType.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'customRdsInstanceType',
-        stackName: 'MedplumCustomRdsInstanceTypeStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        rdsInstanceType: 't3.micro',
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:latest',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Custom RDS secrets', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.customRdsSecrets.config.json');
-    const rdsSecretsArn = 'arn:aws:secretsmanager:s-east-1:647991932601:secret:SecretName-6RandomCharacters';
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'customRdsSecrets',
-        stackName: 'MedplumCustomRdsSecretsStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsSecretsArn,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:latest',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Skip DNS', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.skipDns.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'skipDns',
-        stackName: 'MedplumSkipDnsStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:latest',
-        serverMemory: 512,
-        serverCpu: 256,
-        skipDns: true,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Add DataDog container', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.datadog.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'datadog',
-        stackName: 'MedplumDataDogStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:latest',
-        serverMemory: 512,
-        serverCpu: 256,
-        additionalContainers: [
-          {
-            name: 'datadog-agent',
-            image: 'datadog/agent:latest',
-            environment: {
-              DD_SITE: 'datadoghq.com',
-              DD_API_KEY: 'YOUR_DATADOG_API_KEY',
-            },
-          },
-        ],
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('API in private subnet', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.test.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'unittest',
-        stackName: 'MedplumUnitTestStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        apiInternetFacing: false,
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        loadBalancerLoggingEnabled: true,
-        loadBalancerLoggingBucket: 'medplum-logs-us-east-1',
-        loadBalancerLoggingPrefix: 'elb',
-        clamscanEnabled: true,
-        clamscanLoggingBucket: 'medplum-logs-us-east-1',
-        clamscanLoggingPrefix: 'clamscan',
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Disable app-api proxy', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.test.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'unittest',
-        stackName: 'MedplumUnitTestStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        appApiProxy: false,
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        loadBalancerLoggingEnabled: true,
-        loadBalancerLoggingBucket: 'medplum-logs-us-east-1',
-        loadBalancerLoggingPrefix: 'elb',
-        clamscanEnabled: true,
-        clamscanLoggingBucket: 'medplum-logs-us-east-1',
-        clamscanLoggingPrefix: 'clamscan',
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Custom cacheNodeType', () => {
-    // Create a temp config file
-    const filename = resolve('./medplum.cacheNodeType.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'unittest',
-        stackName: 'MedplumCacheNodeTypeStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        appApiProxy: false,
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        cacheNodeType: 'cache.m4.2xlarge',
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        loadBalancerLoggingEnabled: true,
-        loadBalancerLoggingBucket: 'medplum-logs-us-east-1',
-        loadBalancerLoggingPrefix: 'elb',
-        clamscanEnabled: true,
-        clamscanLoggingBucket: 'medplum-logs-us-east-1',
-        clamscanLoggingPrefix: 'clamscan',
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('RDS reader instance', () => {
-    const filename = resolve('./medplum.reader.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'unittest',
-        stackName: 'MedplumReaderStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 2,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('Existing signing key', () => {
-    const filename = resolve('./medplum.signingKey.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'signingKey',
-        stackName: 'MedplumSigningKeyStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        signingKeyId: 'K1234',
-        maxAzs: 2,
-        rdsInstances: 2,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-
-  test('CloudTrail alarms', () => {
-    const filename = resolve('./medplum.cloudtrail.config.json');
-    writeFileSync(
-      filename,
-      JSON.stringify({
-        name: 'cloudtrail',
-        stackName: 'MedplumCloudTrailStack',
-        accountNumber: '647991932601',
-        region: 'us-east-1',
-        domainName: 'medplum.com',
-        apiPort: 8103,
-        apiDomainName: 'api.medplum.com',
-        apiSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/08bf1daf-3a2b-4cbe-91a0-739b4364a1ec',
-        appDomainName: 'app.medplum.com',
-        appSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/fd21b628-b2c0-4a5d-b4f5-b5c9a6d63b1a',
-        storageBucketName: 'medplum-storage',
-        storageDomainName: 'storage.medplum.com',
-        storageSslCertArn: 'arn:aws:acm:us-east-1:647991932601:certificate/19d85245-0a1d-4bf5-9789-23082b1a15fc',
-        storagePublicKey: '-----BEGIN PUBLIC KEY-----\n-----END PUBLIC KEY-----',
-        maxAzs: 2,
-        rdsInstances: 1,
-        desiredServerCount: 1,
-        serverImage: 'medplum/medplum-server:staging',
-        serverMemory: 512,
-        serverCpu: 256,
-        cloudTrailAlarms: {
-          logGroupName: 'cloudtrail-logs',
-          logGroupCreate: true,
-          snsTopicName: 'cloudtrail-alarms',
-        },
-      }),
-      { encoding: 'utf-8' }
-    );
-
-    expect(() => main({ config: filename })).not.toThrow();
-    unlinkSync(filename);
-  });
-});

package/src/index.ts

@@ -1,42 +0,0 @@
-import { MedplumSourceInfraConfig } from '@medplum/core';
-import { App } from 'aws-cdk-lib';
-import { readFileSync } from 'fs';
-import { resolve } from 'path';
-import { normalizeInfraConfig } from './config';
-import { MedplumStack } from './stack';
-
-export * from './backend';
-export * from './cloudtrail';
-export * from './frontend';
-export * from './stack';
-export * from './storage';
-export * from './waf';
-
-export function main(context?: Record<string, string>): void {
-  const app = new App({ context });
-
-  const configFileName = app.node.tryGetContext('config');
-  if (!configFileName) {
-    console.log('Missing "config" context variable');
-    console.log('Usage: cdk deploy -c config=my-config.json');
-    return;
-  }
-
-  const config = JSON.parse(readFileSync(resolve(configFileName), 'utf-8')) as MedplumSourceInfraConfig;
-
-  normalizeInfraConfig(config)
-    .then((normalizedConfig) => {
-      const stack = new MedplumStack(app, normalizedConfig);
-      console.log('Stack', stack.primaryStack.stackId);
-
-      app.synth();
-    })
-    .catch((err) => {
-      console.error(err);
-      process.exit(1);
-    });
-}
-
-if (require.main === module) {
-  main();
-}

package/src/oai.ts

@@ -1,32 +0,0 @@
-import { aws_cloudfront as cloudfront, aws_iam as iam, aws_s3 as s3 } from 'aws-cdk-lib';
-
-/**
- * Grants S3 bucket read access to the CloudFront Origin Access Identity (OAI).
- *
- * Under normal circumstances, where CDK creates both the S3 bucket and the OAI,
- * you can achieve this same behavior by simply calling:
- *
- *     bucket.grantRead(identity);
- *
- * However, if importing an S3 bucket via `s3.Bucket.fromBucketAttributes()`, that does not work.
- *
- * See: https://stackoverflow.com/a/60917015
- *
- * @param bucket - The S3 bucket.
- * @param identity - The CloudFront Origin Access Identity.
- * @returns The policy statement.
- */
-export function grantBucketAccessToOriginAccessIdentity(
-  bucket: s3.IBucket,
-  identity: cloudfront.OriginAccessIdentity
-): iam.PolicyStatement {
-  const policyStatement = new iam.PolicyStatement();
-  policyStatement.addActions('s3:GetObject*');
-  policyStatement.addActions('s3:GetBucket*');
-  policyStatement.addActions('s3:List*');
-  policyStatement.addResources(bucket.bucketArn);
-  policyStatement.addResources(`${bucket.bucketArn}/*`);
-  policyStatement.addCanonicalUserPrincipal(identity.cloudFrontOriginAccessIdentityS3CanonicalUserId);
-  bucket.addToResourcePolicy(policyStatement);
-  return policyStatement;
-}

package/src/stack.ts

@@ -1,65 +0,0 @@
-import { MedplumInfraConfig } from '@medplum/core';
-import { App, Stack, Tags } from 'aws-cdk-lib';
-import { BackEnd } from './backend';
-import { CloudTrailAlarms } from './cloudtrail';
-import { FrontEnd } from './frontend';
-import { Storage } from './storage';
-
-export class MedplumStack {
-  primaryStack: MedplumPrimaryStack;
-  globalStack?: MedplumGlobalStack;
-
-  constructor(scope: App, config: MedplumInfraConfig) {
-    this.primaryStack = new MedplumPrimaryStack(scope, config);
-
-    if (config.region !== 'us-east-1') {
-      // Some resources must be created in us-east-1
-      // For example, CloudFront distributions and ACM certificates
-      // If the primary region is not us-east-1, create these resources in us-east-1
-      this.globalStack = new MedplumGlobalStack(scope, config);
-      this.globalStack.addDependency(this.primaryStack);
-    }
-  }
-}
-
-export class MedplumPrimaryStack extends Stack {
-  backEnd: BackEnd;
-  frontEnd: FrontEnd;
-  storage: Storage;
-  cloudTrail: CloudTrailAlarms;
-
-  constructor(scope: App, config: MedplumInfraConfig) {
-    super(scope, config.stackName, {
-      env: {
-        region: config.region,
-        account: config.accountNumber,
-      },
-    });
-    Tags.of(this).add('medplum:environment', config.name);
-
-    this.backEnd = new BackEnd(this, config);
-    this.frontEnd = new FrontEnd(this, config, config.region);
-    this.storage = new Storage(this, config, config.region);
-    this.cloudTrail = new CloudTrailAlarms(this, config);
-  }
-}
-
-export class MedplumGlobalStack extends Stack {
-  frontEnd: FrontEnd;
-  storage: Storage;
-  cloudTrail: CloudTrailAlarms;
-
-  constructor(scope: App, config: MedplumInfraConfig) {
-    super(scope, config.stackName + '-us-east-1', {
-      env: {
-        region: 'us-east-1',
-        account: config.accountNumber,
-      },
-    });
-    Tags.of(this).add('medplum:environment', config.name);
-
-    this.frontEnd = new FrontEnd(this, config, 'us-east-1');
-    this.storage = new Storage(this, config, 'us-east-1');
-    this.cloudTrail = new CloudTrailAlarms(this, config);
-  }
-}