@microsoft/terraform-cdk-constructs 0.0.3-pre.7 → 1.2.0

package/lib/azure-keyvault/lib/key.js

@@ -1,69 +0,0 @@
-"use strict";
-var _a;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Key = void 0;
-const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
-const key_vault_key_1 = require("@cdktf/provider-azurerm/lib/key-vault-key");
-const constructs_1 = require("constructs");
-class Key extends constructs_1.Construct {
-    /**
-     * Constructs a new Key resource in Azure Key Vault.
-     *
-     * This class is responsible for the creation and management of a cryptographic key stored in Azure Key Vault.
-     * The key can be used for a variety of cryptographic operations, such as encryption, decryption, signing, or
-     * verifying signatures, depending on the permissions granted. It supports different key types and configurations,
-     * allowing for customization to meet specific security requirements.
-     *
-     * @param scope - The scope in which to define this construct, usually representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the Key.
-     * @param props - The properties for creating the key as defined in KeyProps. These properties include:
-     *                - `name`: Required. The name of the key as it will appear in Azure Key Vault.
-     *                - `keyVaultId`: Required. The ID of the Azure Key Vault where the key will be created.
-     *                - `keyType`: Required. The type of cryptographic key to create (e.g., RSA, EC).
-     *                - `keySize`: Optional. The size of the key, typically specified for RSA keys.
-     *                - `keyOpts`: Optional. Additional options or attributes related to the key's capabilities such as encrypt, decrypt, wrapKey, unwrapKey.
-     *                - `rotationPolicy`: Optional. The policy settings for rotating the key automatically.
-     *                - `expires`: Optional. The expiration date of the key in UTC format (YYYY-MM-DDTHH:MM:SSZ).
-     *                - `accessPolicies`: Required. Access policies defining who can access this key within the Key Vault.
-     *
-     * Example usage:
-     * ```typescript
-     * new Key(this, 'myKey', {
-     *   name: 'encryptionKey',
-     *   keyVaultId: myKeyVault,
-     *   keyType: 'RSA',
-     *   keySize: 2048,
-     *   keyOpts: ['encrypt', 'decrypt', 'sign', 'verify'],
-     *   rotationPolicy: {
-     *     expiryTime: 'P90D'
-     *   },
-     *   expires: '2030-01-01T00:00:00Z',
-     *   accessPolicies: [{ userId: 'user123', permissions: ['get', 'list', 'update'] }]
-     * });
-     * ```
-     */
-    constructor(scope, id, props) {
-        super(scope, id);
-        const key = new key_vault_key_1.KeyVaultKey(this, "AzureKeyVaultKey", {
-            name: props.name,
-            keyVaultId: props.keyVaultId.id,
-            keyType: props.keyType,
-            keySize: props.keySize,
-            keyOpts: props.keyOpts,
-            rotationPolicy: props.rotationPolicy,
-            expirationDate: props.expires,
-        });
-        this.vaultKey = key;
-        // Accumulate all the fqdn values
-        const dependencies = [];
-        for (const policy of props.accessPolicies) {
-            dependencies.push(policy.fqdn);
-        }
-        // Add dependency on all access policies
-        key.addOverride("depends_on", dependencies);
-    }
-}
-exports.Key = Key;
-_a = JSII_RTTI_SYMBOL_1;
-Key[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.Key", version: "0.0.3-pre.7" };
-//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-keyvault/lib/policy.d.ts

@@ -1,76 +0,0 @@
-import { Construct } from "constructs";
-import { Vault } from "./vault";
-export interface AccessPolicyProps {
-    /**
-     * The Azure Key Vault instance or its identifier.
-     */
-    readonly keyVaultId: Vault;
-    /**
-     * The Azure Active Directory tenant ID where the Key Vault is hosted.
-     * This is typically the directory ID of your Azure AD.
-     */
-    readonly tenantId: string;
-    /**
-     * The Azure Active Directory object ID for which the policy will be applied.
-     * This can be a user, group, or service principal.
-     */
-    readonly objectId: string;
-    /**
-     * The permissions to secrets stored in the Key Vault.
-     * Possible values might include: 'get', 'list', 'set', 'delete', etc.
-     * If not provided, no secret permissions are set.
-     */
-    readonly secretPermissions?: string[];
-    /**
-     * The permissions to certificates stored in the Key Vault.
-     * Possible values might include: 'get', 'list', 'create', 'update', etc.
-     * If not provided, no certificate permissions are set.
-     */
-    readonly certificatePermissions?: string[];
-    /**
-     * The permissions to keys stored in the Key Vault.
-     * Possible values might include: 'get', 'list', 'create', 'sign', etc.
-     * If not provided, no key permissions are set.
-     */
-    readonly keyPermissions?: string[];
-    /**
-     * The permissions to storage accounts linked to the Key Vault.
-     * Possible values might include: 'get', 'list', 'delete', 'set', etc.
-     * If not provided, no storage permissions are set.
-     */
-    readonly storagePermissions?: string[];
-}
-export declare class AccessPolicy extends Construct {
-    readonly fqdn: string;
-    /**
-     * Constructs a new Access Policy for Azure Key Vault.
-     *
-     * This class is responsible for setting up access policies that define what operations an Azure AD identity
-     * can perform on the keys, secrets, certificates, and storage accounts within a specified Azure Key Vault.
-     *
-     * @param scope - The scope in which to define this construct, usually representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the access policy.
-     * @param props - The properties for creating the access policy as defined in AccessPolicyProps. These include:
-     *                - `keyVaultId`: The Azure Key Vault identifier where the policy will be set.
-     *                - `tenantId`: The tenant ID of the Azure AD tenant where the Key Vault is hosted.
-     *                - `objectId`: The object ID of the Azure AD identity (user, group, or service principal).
-     *                - `secretPermissions`: Optional list of permissions to secrets within the Key Vault.
-     *                - `certificatePermissions`: Optional list of permissions to certificates within the Key Vault.
-     *                - `keyPermissions`: Optional list of permissions to keys within the Key Vault.
-     *                - `storagePermissions`: Optional list of permissions to storage accounts linked to the Key Vault.
-     *
-     * Example usage:
-     * ```typescript
-     * new AccessPolicy(this, 'MyAccessPolicy', {
-     *   keyVaultId: myKeyVault,
-     *   tenantId: 'my-tenant-id',
-     *   objectId: 'user-object-id',
-     *   keyPermissions: ['get', 'list', 'update'],
-     *   secretPermissions: ['get'],
-     *   certificatePermissions: ['get', 'list'],
-     *   storagePermissions: ['get', 'list']
-     * });
-     * ```
-     */
-    constructor(scope: Construct, id: string, props: AccessPolicyProps);
-}

package/lib/azure-keyvault/lib/policy.js

@@ -1,56 +0,0 @@
-"use strict";
-var _a;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AccessPolicy = void 0;
-const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
-const key_vault_access_policy_1 = require("@cdktf/provider-azurerm/lib/key-vault-access-policy");
-const constructs_1 = require("constructs");
-class AccessPolicy extends constructs_1.Construct {
-    /**
-     * Constructs a new Access Policy for Azure Key Vault.
-     *
-     * This class is responsible for setting up access policies that define what operations an Azure AD identity
-     * can perform on the keys, secrets, certificates, and storage accounts within a specified Azure Key Vault.
-     *
-     * @param scope - The scope in which to define this construct, usually representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the access policy.
-     * @param props - The properties for creating the access policy as defined in AccessPolicyProps. These include:
-     *                - `keyVaultId`: The Azure Key Vault identifier where the policy will be set.
-     *                - `tenantId`: The tenant ID of the Azure AD tenant where the Key Vault is hosted.
-     *                - `objectId`: The object ID of the Azure AD identity (user, group, or service principal).
-     *                - `secretPermissions`: Optional list of permissions to secrets within the Key Vault.
-     *                - `certificatePermissions`: Optional list of permissions to certificates within the Key Vault.
-     *                - `keyPermissions`: Optional list of permissions to keys within the Key Vault.
-     *                - `storagePermissions`: Optional list of permissions to storage accounts linked to the Key Vault.
-     *
-     * Example usage:
-     * ```typescript
-     * new AccessPolicy(this, 'MyAccessPolicy', {
-     *   keyVaultId: myKeyVault,
-     *   tenantId: 'my-tenant-id',
-     *   objectId: 'user-object-id',
-     *   keyPermissions: ['get', 'list', 'update'],
-     *   secretPermissions: ['get'],
-     *   certificatePermissions: ['get', 'list'],
-     *   storagePermissions: ['get', 'list']
-     * });
-     * ```
-     */
-    constructor(scope, id, props) {
-        super(scope, id);
-        const policy = new key_vault_access_policy_1.KeyVaultAccessPolicyA(this, "policy", {
-            keyVaultId: props.keyVaultId.id,
-            tenantId: props.tenantId,
-            objectId: props.objectId,
-            secretPermissions: props.secretPermissions,
-            certificatePermissions: props.certificatePermissions,
-            keyPermissions: props.keyPermissions,
-            storagePermissions: props.storagePermissions,
-        });
-        this.fqdn = "azurerm_key_vault_access_policy." + policy.friendlyUniqueId;
-    }
-}
-exports.AccessPolicy = AccessPolicy;
-_a = JSII_RTTI_SYMBOL_1;
-AccessPolicy[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.AccessPolicy", version: "0.0.3-pre.7" };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicG9saWN5LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2F6dXJlLWtleXZhdWx0L2xpYi9wb2xpY3kudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFBQSxpR0FBNEY7QUFDNUYsMkNBQXVDO0FBa0R2QyxNQUFhLFlBQWEsU0FBUSxzQkFBUztJQUd6Qzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7T0E2Qkc7SUFDSCxZQUFZLEtBQWdCLEVBQUUsRUFBVSxFQUFFLEtBQXdCO1FBQ2hFLEtBQUssQ0FBQyxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUM7UUFFakIsTUFBTSxNQUFNLEdBQUcsSUFBSSwrQ0FBcUIsQ0FBQyxJQUFJLEVBQUUsUUFBUSxFQUFFO1lBQ3ZELFVBQVUsRUFBRSxLQUFLLENBQUMsVUFBVSxDQUFDLEVBQUU7WUFDL0IsUUFBUSxFQUFFLEtBQUssQ0FBQyxRQUFRO1lBQ3hCLFFBQVEsRUFBRSxLQUFLLENBQUMsUUFBUTtZQUN4QixpQkFBaUIsRUFBRSxLQUFLLENBQUMsaUJBQWlCO1lBQzFDLHNCQUFzQixFQUFFLEtBQUssQ0FBQyxzQkFBc0I7WUFDcEQsY0FBYyxFQUFFLEtBQUssQ0FBQyxjQUFjO1lBQ3BDLGtCQUFrQixFQUFFLEtBQUssQ0FBQyxrQkFBa0I7U0FDN0MsQ0FBQyxDQUFDO1FBRUgsSUFBSSxDQUFDLElBQUksR0FBRyxrQ0FBa0MsR0FBRyxNQUFNLENBQUMsZ0JBQWdCLENBQUM7SUFDM0UsQ0FBQzs7QUEvQ0gsb0NBZ0RDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgS2V5VmF1bHRBY2Nlc3NQb2xpY3lBIH0gZnJvbSBcIkBjZGt0Zi9wcm92aWRlci1henVyZXJtL2xpYi9rZXktdmF1bHQtYWNjZXNzLXBvbGljeVwiO1xuaW1wb3J0IHsgQ29uc3RydWN0IH0gZnJvbSBcImNvbnN0cnVjdHNcIjtcbmltcG9ydCB7IFZhdWx0IH0gZnJvbSBcIi4vdmF1bHRcIjtcblxuZXhwb3J0IGludGVyZmFjZSBBY2Nlc3NQb2xpY3lQcm9wcyB7XG4gIC8qKlxuICAgKiBUaGUgQXp1cmUgS2V5IFZhdWx0IGluc3RhbmNlIG9yIGl0cyBpZGVudGlmaWVyLlxuICAgKi9cbiAgcmVhZG9ubHkga2V5VmF1bHRJZDogVmF1bHQ7XG5cbiAgLyoqXG4gICAqIFRoZSBBenVyZSBBY3RpdmUgRGlyZWN0b3J5IHRlbmFudCBJRCB3aGVyZSB0aGUgS2V5IFZhdWx0IGlzIGhvc3RlZC5cbiAgICogVGhpcyBpcyB0eXBpY2FsbHkgdGhlIGRpcmVjdG9yeSBJRCBvZiB5b3VyIEF6dXJlIEFELlxuICAgKi9cbiAgcmVhZG9ubHkgdGVuYW50SWQ6IHN0cmluZztcblxuICAvKipcbiAgICogVGhlIEF6dXJlIEFjdGl2ZSBEaXJlY3Rvcnkgb2JqZWN0IElEIGZvciB3aGljaCB0aGUgcG9saWN5IHdpbGwgYmUgYXBwbGllZC5cbiAgICogVGhpcyBjYW4gYmUgYSB1c2VyLCBncm91cCwgb3Igc2VydmljZSBwcmluY2lwYWwuXG4gICAqL1xuICByZWFkb25seSBvYmplY3RJZDogc3RyaW5nO1xuXG4gIC8qKlxuICAgKiBUaGUgcGVybWlzc2lvbnMgdG8gc2VjcmV0cyBzdG9yZWQgaW4gdGhlIEtleSBWYXVsdC5cbiAgICogUG9zc2libGUgdmFsdWVzIG1pZ2h0IGluY2x1ZGU6ICdnZXQnLCAnbGlzdCcsICdzZXQnLCAnZGVsZXRlJywgZXRjLlxuICAgKiBJZiBub3QgcHJvdmlkZWQsIG5vIHNlY3JldCBwZXJtaXNzaW9ucyBhcmUgc2V0LlxuICAgKi9cbiAgcmVhZG9ubHkgc2VjcmV0UGVybWlzc2lvbnM/OiBzdHJpbmdbXTtcblxuICAvKipcbiAgICogVGhlIHBlcm1pc3Npb25zIHRvIGNlcnRpZmljYXRlcyBzdG9yZWQgaW4gdGhlIEtleSBWYXVsdC5cbiAgICogUG9zc2libGUgdmFsdWVzIG1pZ2h0IGluY2x1ZGU6ICdnZXQnLCAnbGlzdCcsICdjcmVhdGUnLCAndXBkYXRlJywgZXRjLlxuICAgKiBJZiBub3QgcHJvdmlkZWQsIG5vIGNlcnRpZmljYXRlIHBlcm1pc3Npb25zIGFyZSBzZXQuXG4gICAqL1xuICByZWFkb25seSBjZXJ0aWZpY2F0ZVBlcm1pc3Npb25zPzogc3RyaW5nW107XG5cbiAgLyoqXG4gICAqIFRoZSBwZXJtaXNzaW9ucyB0byBrZXlzIHN0b3JlZCBpbiB0aGUgS2V5IFZhdWx0LlxuICAgKiBQb3NzaWJsZSB2YWx1ZXMgbWlnaHQgaW5jbHVkZTogJ2dldCcsICdsaXN0JywgJ2NyZWF0ZScsICdzaWduJywgZXRjLlxuICAgKiBJZiBub3QgcHJvdmlkZWQsIG5vIGtleSBwZXJtaXNzaW9ucyBhcmUgc2V0LlxuICAgKi9cbiAgcmVhZG9ubHkga2V5UGVybWlzc2lvbnM/OiBzdHJpbmdbXTtcblxuICAvKipcbiAgICogVGhlIHBlcm1pc3Npb25zIHRvIHN0b3JhZ2UgYWNjb3VudHMgbGlua2VkIHRvIHRoZSBLZXkgVmF1bHQuXG4gICAqIFBvc3NpYmxlIHZhbHVlcyBtaWdodCBpbmNsdWRlOiAnZ2V0JywgJ2xpc3QnLCAnZGVsZXRlJywgJ3NldCcsIGV0Yy5cbiAgICogSWYgbm90IHByb3ZpZGVkLCBubyBzdG9yYWdlIHBlcm1pc3Npb25zIGFyZSBzZXQuXG4gICAqL1xuICByZWFkb25seSBzdG9yYWdlUGVybWlzc2lvbnM/OiBzdHJpbmdbXTtcbn1cblxuZXhwb3J0IGNsYXNzIEFjY2Vzc1BvbGljeSBleHRlbmRzIENvbnN0cnVjdCB7XG4gIHB1YmxpYyByZWFkb25seSBmcWRuOiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIENvbnN0cnVjdHMgYSBuZXcgQWNjZXNzIFBvbGljeSBmb3IgQXp1cmUgS2V5IFZhdWx0LlxuICAgKlxuICAgKiBUaGlzIGNsYXNzIGlzIHJlc3BvbnNpYmxlIGZvciBzZXR0aW5nIHVwIGFjY2VzcyBwb2xpY2llcyB0aGF0IGRlZmluZSB3aGF0IG9wZXJhdGlvbnMgYW4gQXp1cmUgQUQgaWRlbnRpdHlcbiAgICogY2FuIHBlcmZvcm0gb24gdGhlIGtleXMsIHNlY3JldHMsIGNlcnRpZmljYXRlcywgYW5kIHN0b3JhZ2UgYWNjb3VudHMgd2l0aGluIGEgc3BlY2lmaWVkIEF6dXJlIEtleSBWYXVsdC5cbiAgICpcbiAgICogQHBhcmFtIHNjb3BlIC0gVGhlIHNjb3BlIGluIHdoaWNoIHRvIGRlZmluZSB0aGlzIGNvbnN0cnVjdCwgdXN1YWxseSByZXByZXNlbnRpbmcgdGhlIENsb3VkIERldmVsb3BtZW50IEtpdCAoQ0RLKSBzdGFjay5cbiAgICogQHBhcmFtIGlkIC0gVGhlIHVuaXF1ZSBpZGVudGlmaWVyIGZvciB0aGlzIGluc3RhbmNlIG9mIHRoZSBhY2Nlc3MgcG9saWN5LlxuICAgKiBAcGFyYW0gcHJvcHMgLSBUaGUgcHJvcGVydGllcyBmb3IgY3JlYXRpbmcgdGhlIGFjY2VzcyBwb2xpY3kgYXMgZGVmaW5lZCBpbiBBY2Nlc3NQb2xpY3lQcm9wcy4gVGhlc2UgaW5jbHVkZTpcbiAgICogICAgICAgICAgICAgICAgLSBga2V5VmF1bHRJZGA6IFRoZSBBenVyZSBLZXkgVmF1bHQgaWRlbnRpZmllciB3aGVyZSB0aGUgcG9saWN5IHdpbGwgYmUgc2V0LlxuICAgKiAgICAgICAgICAgICAgICAtIGB0ZW5hbnRJZGA6IFRoZSB0ZW5hbnQgSUQgb2YgdGhlIEF6dXJlIEFEIHRlbmFudCB3aGVyZSB0aGUgS2V5IFZhdWx0IGlzIGhvc3RlZC5cbiAgICogICAgICAgICAgICAgICAgLSBgb2JqZWN0SWRgOiBUaGUgb2JqZWN0IElEIG9mIHRoZSBBenVyZSBBRCBpZGVudGl0eSAodXNlciwgZ3JvdXAsIG9yIHNlcnZpY2UgcHJpbmNpcGFsKS5cbiAgICogICAgICAgICAgICAgICAgLSBgc2VjcmV0UGVybWlzc2lvbnNgOiBPcHRpb25hbCBsaXN0IG9mIHBlcm1pc3Npb25zIHRvIHNlY3JldHMgd2l0aGluIHRoZSBLZXkgVmF1bHQuXG4gICAqICAgICAgICAgICAgICAgIC0gYGNlcnRpZmljYXRlUGVybWlzc2lvbnNgOiBPcHRpb25hbCBsaXN0IG9mIHBlcm1pc3Npb25zIHRvIGNlcnRpZmljYXRlcyB3aXRoaW4gdGhlIEtleSBWYXVsdC5cbiAgICogICAgICAgICAgICAgICAgLSBga2V5UGVybWlzc2lvbnNgOiBPcHRpb25hbCBsaXN0IG9mIHBlcm1pc3Npb25zIHRvIGtleXMgd2l0aGluIHRoZSBLZXkgVmF1bHQuXG4gICAqICAgICAgICAgICAgICAgIC0gYHN0b3JhZ2VQZXJtaXNzaW9uc2A6IE9wdGlvbmFsIGxpc3Qgb2YgcGVybWlzc2lvbnMgdG8gc3RvcmFnZSBhY2NvdW50cyBsaW5rZWQgdG8gdGhlIEtleSBWYXVsdC5cbiAgICpcbiAgICogRXhhbXBsZSB1c2FnZTpcbiAgICogYGBgdHlwZXNjcmlwdFxuICAgKiBuZXcgQWNjZXNzUG9saWN5KHRoaXMsICdNeUFjY2Vzc1BvbGljeScsIHtcbiAgICogICBrZXlWYXVsdElkOiBteUtleVZhdWx0LFxuICAgKiAgIHRlbmFudElkOiAnbXktdGVuYW50LWlkJyxcbiAgICogICBvYmplY3RJZDogJ3VzZXItb2JqZWN0LWlkJyxcbiAgICogICBrZXlQZXJtaXNzaW9uczogWydnZXQnLCAnbGlzdCcsICd1cGRhdGUnXSxcbiAgICogICBzZWNyZXRQZXJtaXNzaW9uczogWydnZXQnXSxcbiAgICogICBjZXJ0aWZpY2F0ZVBlcm1pc3Npb25zOiBbJ2dldCcsICdsaXN0J10sXG4gICAqICAgc3RvcmFnZVBlcm1pc3Npb25zOiBbJ2dldCcsICdsaXN0J11cbiAgICogfSk7XG4gICAqIGBgYFxuICAgKi9cbiAgY29uc3RydWN0b3Ioc2NvcGU6IENvbnN0cnVjdCwgaWQ6IHN0cmluZywgcHJvcHM6IEFjY2Vzc1BvbGljeVByb3BzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkKTtcblxuICAgIGNvbnN0IHBvbGljeSA9IG5ldyBLZXlWYXVsdEFjY2Vzc1BvbGljeUEodGhpcywgXCJwb2xpY3lcIiwge1xuICAgICAga2V5VmF1bHRJZDogcHJvcHMua2V5VmF1bHRJZC5pZCxcbiAgICAgIHRlbmFudElkOiBwcm9wcy50ZW5hbnRJZCxcbiAgICAgIG9iamVjdElkOiBwcm9wcy5vYmplY3RJZCxcbiAgICAgIHNlY3JldFBlcm1pc3Npb25zOiBwcm9wcy5zZWNyZXRQZXJtaXNzaW9ucyxcbiAgICAgIGNlcnRpZmljYXRlUGVybWlzc2lvbnM6IHByb3BzLmNlcnRpZmljYXRlUGVybWlzc2lvbnMsXG4gICAgICBrZXlQZXJtaXNzaW9uczogcHJvcHMua2V5UGVybWlzc2lvbnMsXG4gICAgICBzdG9yYWdlUGVybWlzc2lvbnM6IHByb3BzLnN0b3JhZ2VQZXJtaXNzaW9ucyxcbiAgICB9KTtcblxuICAgIHRoaXMuZnFkbiA9IFwiYXp1cmVybV9rZXlfdmF1bHRfYWNjZXNzX3BvbGljeS5cIiArIHBvbGljeS5mcmllbmRseVVuaXF1ZUlkO1xuICB9XG59XG4iXX0=

package/lib/azure-keyvault/lib/secret.d.ts

@@ -1,70 +0,0 @@
-import { Construct } from "constructs";
-import { AccessPolicy } from "./policy";
-import { Vault } from "./vault";
-/**
- * Properties for defining an Azure Key Vault Secret.
- */
-export interface SecretProps {
-    /**
-     * The Key Vault instance where the secret will be stored.
-     */
-    readonly keyVaultId: Vault;
-    /**
-     * The name of the secret. This name should be unique within the Key Vault instance.
-     */
-    readonly name: string;
-    /**
-     * The value of the secret. This could be any string, including tokens or passwords.
-     */
-    readonly value: string;
-    /**
-     * Optional expiration date for the secret. This should be in an appropriate date string format.
-     * If provided, the secret will become invalid after this date.
-     */
-    readonly expirationDate?: string;
-    /**
-     * Optional content type for the secret. This can be used to describe the type of information
-     * the secret contains, or how it can be used.
-     */
-    readonly contentType?: string;
-    /**
-     * A list of access policies that dictate which identities have what kind of access to the secret.
-     * Each policy should detail the permissions and the identity it applies to.
-     */
-    readonly accessPolicies: AccessPolicy[];
-}
-export declare class Secret extends Construct {
-    secretId: string;
-    /**
-     * Constructs a new Azure Key Vault Secret within a specified Key Vault.
-     *
-     * This class facilitates the creation and management of a secret, allowing sensitive information to be stored securely
-     * and accessed as needed while maintaining confidentiality and control through defined access policies.
-     *
-     * @param scope - The scope in which to define this construct, typically representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the secret.
-     * @param props - The properties for creating the secret as defined in SecretProps. These include:
-     *                - `keyVaultId`: The ID of the Key Vault in which to store the secret.
-     *                - `name`: The name of the secret.
-     *                - `value`: The confidential data to be stored as the secret.
-     *                - `expirationDate`: Optional. The expiration date of the secret.
-     *                - `contentType`: Optional. A label hinting at the content type of the secret's value.
-     *                - `accessPolicies`: Access policies that dictate permissions for the secret.
-     *
-     * Example usage:
-     * ```typescript
-     * new Secret(this, 'mySecret', {
-     *   keyVaultId: myKeyVault,
-     *   name: 'dbPassword',
-     *   value: 'p@ssw0rd!',
-     *   expirationDate: '2030-01-01T00:00:00Z',
-     *   contentType: 'password',
-     *   accessPolicies: [{
-     *     objectId: '12345-user-object-id',
-     *     permissions: ['get', 'list']
-     *   }]
-     * });
-     * ```
-     */
-    constructor(scope: Construct, id: string, props: SecretProps);
-}

package/lib/azure-keyvault/lib/secret.js

@@ -1,64 +0,0 @@
-"use strict";
-var _a;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Secret = void 0;
-const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
-const key_vault_secret_1 = require("@cdktf/provider-azurerm/lib/key-vault-secret");
-const constructs_1 = require("constructs");
-class Secret extends constructs_1.Construct {
-    /**
-     * Constructs a new Azure Key Vault Secret within a specified Key Vault.
-     *
-     * This class facilitates the creation and management of a secret, allowing sensitive information to be stored securely
-     * and accessed as needed while maintaining confidentiality and control through defined access policies.
-     *
-     * @param scope - The scope in which to define this construct, typically representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the secret.
-     * @param props - The properties for creating the secret as defined in SecretProps. These include:
-     *                - `keyVaultId`: The ID of the Key Vault in which to store the secret.
-     *                - `name`: The name of the secret.
-     *                - `value`: The confidential data to be stored as the secret.
-     *                - `expirationDate`: Optional. The expiration date of the secret.
-     *                - `contentType`: Optional. A label hinting at the content type of the secret's value.
-     *                - `accessPolicies`: Access policies that dictate permissions for the secret.
-     *
-     * Example usage:
-     * ```typescript
-     * new Secret(this, 'mySecret', {
-     *   keyVaultId: myKeyVault,
-     *   name: 'dbPassword',
-     *   value: 'p@ssw0rd!',
-     *   expirationDate: '2030-01-01T00:00:00Z',
-     *   contentType: 'password',
-     *   accessPolicies: [{
-     *     objectId: '12345-user-object-id',
-     *     permissions: ['get', 'list']
-     *   }]
-     * });
-     * ```
-     */
-    constructor(scope, id, props) {
-        super(scope, id);
-        // Logic to add the secret to the provided keyVault instance
-        // For example:
-        const secret = new key_vault_secret_1.KeyVaultSecret(this, props.name, {
-            keyVaultId: props.keyVaultId.id,
-            name: props.name,
-            value: props.value,
-            contentType: props.contentType,
-            expirationDate: props.expirationDate,
-        });
-        this.secretId = secret.id;
-        // Accumulate all the fqdn values
-        const dependencies = [];
-        for (const policy of props.accessPolicies) {
-            dependencies.push(policy.fqdn);
-        }
-        // Add dependency on all access policies
-        secret.addOverride("depends_on", dependencies);
-    }
-}
-exports.Secret = Secret;
-_a = JSII_RTTI_SYMBOL_1;
-Secret[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.Secret", version: "0.0.3-pre.7" };
-//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-keyvault/lib/vault.d.ts

@@ -1,282 +0,0 @@
-import { KeyVault, KeyVaultNetworkAcls } from "@cdktf/provider-azurerm/lib/key-vault";
-import { KeyVaultCertificate } from "@cdktf/provider-azurerm/lib/key-vault-certificate";
-import { KeyVaultKey } from "@cdktf/provider-azurerm/lib/key-vault-key";
-import { ResourceGroup } from "@cdktf/provider-azurerm/lib/resource-group";
-import { Construct } from "constructs";
-import { AzureResource } from "../../core-azure/lib";
-export interface VaultProps {
-    /**
-     * The name of the Key Vault.
-     */
-    readonly name: string;
-    /**
-     * The Azure Region to deploy the Key Vault.
-     */
-    readonly location: string;
-    /**
-     * The name of the Azure Resource Group.
-     */
-    readonly resourceGroup: ResourceGroup;
-    /**
-     * The tags to assign to the Key Vault.
-     */
-    readonly tags?: {
-        [key: string]: string;
-    };
-    /**
-     * The tags to assign to the Key Vault.
-     */
-    readonly sku?: string;
-    /**
-     * The Name of the SKU used for this Key Vault. Possible values are standard and premium.
-     */
-    readonly tenantId: string;
-    /**
-     * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
-     */
-    readonly networkAcls?: KeyVaultNetworkAcls;
-    /**
-     * A map of IP network ACL rules. The key is the IP or IP range in CIDR notation.
-     * The value is a description of that IP range.
-     */
-    readonly purgeProtection?: boolean;
-    /**
-     *  Specifies whether protection against purge is enabled for this Key Vault.
-     * Setting this property to true activates protection against deletion of any active key, secret or certificate in the vault. The setting is effective only if soft delete is also enabled. The default value is false.
-     * Once activated, the property cannot be reverted to false.
-     */
-    readonly softDeleteRetentionDays?: number;
-}
-/**
- * Options for granting custom access permissions in Azure Key Vault.
- */
-export interface GrantCustomAccessOptions {
-    /**
-     * Optional: A list of permissions to grant for secrets in the Key Vault.
-     * Example permissions include 'get', 'list', 'set', 'delete', etc.
-     */
-    readonly secretPermissions?: string[];
-    /**
-     * Optional: A list of permissions to grant for certificates in the Key Vault.
-     * Example permissions include 'get', 'list', 'create', 'delete', etc.
-     */
-    readonly certificatePermissions?: string[];
-    /**
-     * Optional: A list of permissions to grant for keys in the Key Vault.
-     * Example permissions include 'encrypt', 'decrypt', 'wrapKey', 'unwrapKey', etc.
-     */
-    readonly keyPermissions?: string[];
-    /**
-     * Optional: A list of permissions to grant for storage accounts in the Key Vault.
-     * Example permissions include 'get', 'list', 'delete', 'set', 'update', etc.
-     */
-    readonly storagePermissions?: string[];
-}
-export declare class Vault extends AzureResource {
-    readonly props: VaultProps;
-    keyVault: KeyVault;
-    resourceGroup: ResourceGroup;
-    id: string;
-    private accessPolicies;
-    /**
-     * Constructs a new Azure Key Vault resource.
-     *
-     * This class creates and configures an Azure Key Vault, a secure store for managing secrets, keys, certificates, and other sensitive data.
-     * It supports advanced configurations such as access policies, network rules, and data retention policies.
-     *
-     * @param scope - The scope in which to define this construct, usually representing the Cloud Development Kit (CDK) stack.
-     * @param id - The unique identifier for this instance of the Key Vault.
-     * @param props - The properties for creating the Key Vault as defined in VaultProps. These include settings for location, SKU, tenant ID, etc.
-     *
-     * Example usage:
-     * ```typescript
-     * new Vault(this, 'MyKeyVault', {
-     *   name: 'mySecureVault',
-     *   location: 'East US',
-     *   resourceGroup: myResourceGroup,
-     *   sku: 'premium',
-     *   tenantId: 'my-tenant-id',
-     *   softDeleteRetentionDays: 90,
-     *   purgeProtection: true,
-     *   tags: {
-     *     project: 'My Application'
-     *   }
-     * });
-     * ```
-     */
-    constructor(scope: Construct, id: string, props: VaultProps);
-    /**
-     * Grants read-only access to secrets stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive read access to secrets.
-     */
-    grantSecretReaderAccess(azureAdGroupId: string): void;
-    /**
-     * Grants administrative access to secrets stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive administrative access to secrets.
-     */
-    grantSecretAdminAccess(azureAdGroupId: string): void;
-    /**
-     * Grants administrative access to certificates stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive administrative access to certificates.
-     */
-    grantCertAdminAccess(azureAdGroupId: string): void;
-    /**
-     * Grants read-only access to certificates stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive read access to certificates.
-     */
-    grantCertReaderAccess(azureAdGroupId: string): void;
-    /**
-     * Grants administrative access to keys stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive administrative access to keys.
-     */
-    grantKeyAdminAccess(azureAdGroupId: string): void;
-    /**
-     * Grants read-only access to keys stored in the Key Vault to a specified Azure AD group.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive read access to keys.
-     */
-    grantKeyReaderAccess(azureAdGroupId: string): void;
-    /**
-     * Grants custom access based on specified options to an Azure AD group in the Key Vault.
-     *
-     * @param azureAdGroupId - The Azure Active Directory group ID that will receive the custom access.
-     * @param options - Custom access options specifying various permissions for secrets, keys, certificates, and storage.
-     */
-    grantCustomAccess(azureAdGroupId: string, options: GrantCustomAccessOptions): void;
-    /**
-     * Creates a new secret within the Azure Key Vault.
-     *
-     * This method facilitates the storage of sensitive information in the form of a secret within the Key Vault.
-     * Secrets are protected items such as passwords, database connection strings, or any other piece of information
-     * that needs to be securely stored and accessed. This method allows setting additional properties such as
-     * expiration date and content type for better management and compliance.
-     *
-     * @param keyVaultSecretName - The unique name for the secret within the Key Vault.
-     * @param secretValue - The sensitive information or data that needs to be securely stored as a secret.
-     * @param expirationDate - Optional. The expiration date of the secret in ISO 8601 format (YYYY-MM-DD or YYYY-MM-DDTHH:MM:SSZ).
-     *                         If provided, the secret will no longer be valid after this date.
-     * @param contentType - Optional. A description of the type of information the secret contains (e.g., 'password', 'connectionString').
-     *                      This can be used by applications to handle the secret appropriately.
-     *
-     * Example usage:
-     * ```typescript
-     * vault.addSecret(
-     *   'myDatabasePassword',
-     *   'p@ssw0rd123!',
-     *   '2030-01-01',
-     *   'databasePassword'
-     * );
-     * ```
-     * This method does not return a value. It creates a secret within the Key Vault with the specified properties.
-     */
-    addSecret(keyVaultSecretName: string, secretValue: string, expirationDate?: string, contentType?: string): void;
-    /**
-     * Creates an RSA cryptographic key within the Azure Key Vault.
-     *
-     * This method facilitates the creation of an RSA key, which is useful for a variety of cryptographic operations such as
-     * encryption, decryption, digital signature verification, and more. The RSA key created by this method is configurable
-     * with an optional expiration date and a default key size of 2048 bits. The key operations allowed include decryption,
-     * encryption, signing, verifying signatures, and key wrapping/unwrapping.
-     *
-     * @param keyVaultKeyName - The unique name for the RSA key within the Key Vault.
-     * @param expirationDate - Optional. The expiration date of the key in ISO 8601 format (YYYY-MM-DD or YYYY-MM-DDTHH:MM:SSZ).
-     *                         If provided, the key will no longer be valid after this date.
-     * @returns A KeyVaultKey object representing the newly created RSA key within the vault.
-     *
-     * Example usage:
-     * ```typescript
-     * const rsaKey = vault.addRSAKey(
-     *   'myRSAKey',
-     *   '2030-01-01'
-     * );
-     * ```
-     * This method returns the created KeyVaultKey object, allowing further operations or references to the key.
-     */
-    addRSAKey(keyVaultKeyName: string, expirationDate?: string): KeyVaultKey;
-    /**
-     * Creates a cryptographic key within the Azure Key Vault.
-     *
-     * This method allows the creation of a cryptographic key of specified type and size within the Key Vault. The key can be
-     * configured with specific operations it can perform, such as encryption, decryption, signing, etc. An optional expiration
-     * date can also be set to control the key's lifecycle. This method is flexible, supporting various key types and sizes,
-     * making it suitable for a wide range of cryptographic needs.
-     *
-     * @param keyVaultKeyName - The unique name for the cryptographic key within the Key Vault.
-     * @param keyType - The type of cryptographic key to create (e.g., 'RSA', 'EC', 'oct-HSM').
-     * @param keySize - The size of the cryptographic key in bits (e.g., 2048, 3072, 4096 for RSA).
-     * @param keyOpts - A list of cryptographic operations that the key is allowed to perform. Possible values might include
-     *                  'encrypt', 'decrypt', 'sign', 'verify', 'wrapKey', 'unwrapKey'.
-     * @param expirationDate - Optional. The expiration date of the key in ISO 8601 format (YYYY-MM-DD or YYYY-MM-DDTHH:MM:SSZ).
-     *                         If provided, the key will no longer be valid after this date, aligning with best practices for key management.
-     * @returns A KeyVaultKey object representing the newly created cryptographic key within the vault.
-     *
-     * Example usage:
-     * ```typescript
-     * const myKey = vault.addKey(
-     *   'myKey',
-     *   'RSA',
-     *   2048,
-     *   ['encrypt', 'decrypt', 'sign', 'verify'],
-     *   '2030-12-31'
-     * );
-     * ```
-     * This method returns the created KeyVaultKey object, enabling immediate use within the application for cryptographic operations.
-     */
-    addKey(keyVaultKeyName: string, keyType: string, keySize: number, keyOpts: string[], expirationDate?: string): KeyVaultKey;
-    /**
-     * Creates a self-signed certificate within the Azure Key Vault.
-     *
-     * This method facilitates the creation of a self-signed certificate, which is a digital certificate that is signed by
-     * its own creator rather than a trusted authority. Self-signed certificates can be useful for testing, internal
-     * communications, or any scenario where public trust is not required. The method allows specifying subject details,
-     * DNS names for the certificate, and managing its lifecycle with action types and expiry.
-     *
-     * @param certName - The unique name for the certificate within the Key Vault.
-     * @param subject - The subject name of the certificate, typically formatted as an X.500 Distinguished Name (e.g., "CN=example.com").
-     * @param dnsNames - An array of DNS names that should be associated with this certificate. This is useful for certificates
-     *                   that need to be valid for multiple hostnames.
-     * @param actionType - Optional. Specifies the action to be performed with the certificate, such as 'create' or 'renew'.
-     * @param daysBeforeExpiry - Optional. Number of days before expiry when an action should be taken, useful for auto-renewal scenarios.
-     * @returns A KeyVaultCertificate object representing the newly created self-signed certificate.
-     *
-     * Example usage:
-     * ```typescript
-     * const myCertificate = vault.addSelfSignedCert(
-     *   'myCert',
-     *   'CN=mydomain.com',
-     *   ['mydomain.com', 'www.mydomain.com'],
-     *   'create',
-     *   30
-     * );
-     * ```
-     * This method returns the KeyVaultCertificate object, enabling it to be used immediately within the application or stored for future use.
-     */
-    addSelfSignedCert(certName: string, subject: string, dnsNames: string[], actionType?: string, daysBeforeExpiry?: number): KeyVaultCertificate;
-    /**
-     * Adds a certificate issuer to the Azure Key Vault.
-     *
-     * This method configures a certificate issuer within the Key Vault, allowing the Key Vault to issue certificates
-     * through external providers. Configuring an issuer is essential for enabling automated certificate management
-     * processes, such as issuance and renewal, directly through the Key Vault with a specified Certificate Authority (CA).
-     *
-     * @param name - The unique name for the certificate issuer within the Key Vault.
-     * @param provider - The name of the external provider that will issue the certificates, such as 'DigiCert' or 'GlobalSign'.
-     *
-     * Example usage:
-     * ```typescript
-     * vault.addCertIssuer(
-     *   'myCertIssuer',
-     *   'DigiCert'
-     * );
-     * ```
-     * This method configures a certificate issuer but does not return any value. The issuer details, including provider name
-     * and any necessary credentials (managed externally or through additional method parameters), are set up in the Key Vault
-     * for future certificate operations.
-     */
-    addCertIssuer(name: string, provider: string): void;
-}