@mstuercke/pulumi-modules 0.0.1

package/src/websocket/WebsocketApi.ts

@@ -0,0 +1,219 @@
+import {type CustomResourceOptions, type Input, type Output, Resource} from '@pulumi/pulumi'
+import {
+  Api,
+  ApiMapping,
+  Deployment,
+  DomainName,
+  Integration,
+  IntegrationResponse,
+  Route,
+  Stage,
+} from '@pulumi/aws/apigatewayv2'
+import {Policy, Role} from '@pulumi/aws/iam'
+import {Record} from '@pulumi/aws/route53'
+import type {NodeLambdaFunction} from '../lambda'
+
+export interface WebsocketApiArgs {
+  name: string
+  lambdaFunction: NodeLambdaFunction
+  routeThrottling?: {
+    rateLimit?: number
+    burstLimit?: number
+  }
+  stageName?: string
+  domain: {
+    zoneId: Input<string>
+    fullName: Input<string>
+    euCentral1CertificateArn: Input<string>
+  }
+  projectId: string
+}
+
+export class WebsocketApi extends Resource {
+  id: Output<string>
+  url: string
+
+  constructor(id: string, args: WebsocketApiArgs, opts?: CustomResourceOptions) {
+    super('mstuercke:websocket:WebsocketApi', id, false, undefined, opts)
+
+    const {name, lambdaFunction, routeThrottling, stageName = 'v1', domain, projectId} = args
+
+    const api = new Api(
+      'api',
+      {
+        name,
+        protocolType: 'WEBSOCKET',
+        routeSelectionExpression: '\\$default',
+        tags: {
+          project: projectId,
+        },
+      },
+      {parent: this},
+    )
+
+    const executeLambdaPolicy = new Policy(
+      'execute-lambda',
+      {
+        name: `${name}-execute-lambda`,
+        path: '/',
+        policy: {
+          Version: '2012-10-17',
+          Statement: [
+            {
+              Action: 'lambda:InvokeFunction',
+              Effect: 'Allow',
+              Resource: lambdaFunction.arn,
+            },
+          ],
+        },
+        tags: {
+          project: projectId,
+        },
+      },
+      {parent: api},
+    )
+
+    const wsApiRole = new Role(
+      'role',
+      {
+        name: `${name}-role`,
+        assumeRolePolicy: JSON.stringify({
+          Version: '2012-10-17',
+          Statement: [
+            {
+              Effect: 'Allow',
+              Action: 'sts:AssumeRole',
+              Principal: {Service: 'apigateway.amazonaws.com'},
+            },
+          ],
+        }),
+        tags: {
+          project: projectId,
+        },
+        managedPolicyArns: [executeLambdaPolicy.arn],
+      },
+      {parent: api},
+    )
+
+    const wsLambdaIntegration = new Integration(
+      'lambda-integration',
+      {
+        apiId: api.id,
+        integrationType: 'AWS_PROXY',
+        integrationUri: lambdaFunction.invokeArn,
+        credentialsArn: wsApiRole.arn,
+        contentHandlingStrategy: 'CONVERT_TO_TEXT',
+        passthroughBehavior: 'WHEN_NO_MATCH',
+      },
+      {parent: this},
+    )
+    new IntegrationResponse(
+      'lambda-integration-response',
+      {
+        apiId: api.id,
+        integrationId: wsLambdaIntegration.id,
+        integrationResponseKey: '/200/',
+      },
+      {parent: wsLambdaIntegration},
+    )
+
+    const routes: Route[] = []
+    const routeKeys = ['$connect', '$default', '$disconnect']
+    for (const routeKey of routeKeys) {
+      const route = new Route(
+        `${routeKey}-route`,
+        {
+          apiId: api.id,
+          routeKey: routeKey,
+          target: wsLambdaIntegration.id.apply((id) => `integrations/${id}`),
+          authorizationType: 'NONE',
+        },
+        {parent: wsLambdaIntegration},
+      )
+      routes.push(route)
+    }
+
+    const deployment = new Deployment(
+      'deployment',
+      {
+        apiId: api.id,
+      },
+      {
+        dependsOn: [wsLambdaIntegration, ...routes],
+        parent: api,
+      },
+    )
+
+    const stage = new Stage(
+      'stage',
+      {
+        apiId: api.id,
+        name: stageName,
+        deploymentId: deployment.id,
+        defaultRouteSettings: {
+          throttlingRateLimit: routeThrottling?.rateLimit ?? 100,
+          throttlingBurstLimit: routeThrottling?.burstLimit ?? 100,
+        },
+        tags: {
+          project: projectId,
+        },
+      },
+      {parent: deployment},
+    )
+
+    const domainName = new DomainName(
+      'domain',
+      {
+        domainName: domain.fullName,
+        domainNameConfiguration: {
+          certificateArn: domain.euCentral1CertificateArn,
+          endpointType: 'REGIONAL',
+          securityPolicy: 'TLS_1_2',
+        },
+      },
+      {parent: api},
+    )
+
+    new Record(
+      'redirect',
+      {
+        zoneId: domain.zoneId,
+        name: domain.fullName,
+        type: 'A',
+        aliases: [
+          {
+            zoneId: domainName.domainNameConfiguration.hostedZoneId,
+            name: domainName.domainNameConfiguration.targetDomainName,
+            evaluateTargetHealth: true,
+          },
+        ],
+        allowOverwrite: true,
+      },
+      {parent: api},
+    )
+
+    new ApiMapping(
+      'root',
+      {
+        apiId: api.id,
+        domainName: domainName.id,
+        stage: stage.name,
+      },
+      {parent: api},
+    )
+
+    new ApiMapping(
+      'stage',
+      {
+        apiId: api.id,
+        domainName: domainName.id,
+        stage: stage.name,
+        apiMappingKey: stage.name,
+      },
+      {parent: api},
+    )
+
+    this.id = api.id
+    this.url = `wss://${domain.fullName}/`
+  }
+}

package/src/websocket/index.ts

@@ -0,0 +1,7 @@
+import {WebsocketApi} from './WebsocketApi'
+
+export * from './WebsocketApi'
+
+export const websocket = {
+  WebsocketApi,
+}