@ndlib/ndlib-cdk2 1.0.28 → 1.0.30

package/README.md

@@ -362,9 +362,9 @@ new SourceWatcher(stack, 'TestProject', {
 NOTE: `webhookResourceStackName` refers to a stack which will manage contains the backend for a CustomResource webhook. Prior to using this construct, an instance of [ndlib/aws-github-webhook](https://github.com/ndlib/aws-github-webhook) should be deployed to the AWS account. One stack can be used for any number of SourceWatcher constructs.
 
 
-## EC2 server with access to RDS
+## EC2 server with access rules
 
-The EC2withDatabase construct builds an EC2 server similar to those used in a large number of our services. The basic concept is to build the server with security group access to an AWS RDS database server. The server is built within an existing VPC. Parameters allow for AMI ID, instance type, root disk storage, IP address, networking, and security group rules for the server upon build. The server is created with the OS only; further configuration will need to be performed, often using ansible.
+The EC2withDatabase construct builds an EC2 server. The basic concept is to build the server with security group access to, possibly, several AWS RDS database servers. The server is built within an existing VPC. Parameters allow for AMI ID, instance type, root disk storage, networking, and security group rules for the server upon build. The server is created with the OS only; further configuration will need to be performed, often using ansible.
 
 Example usage:
 
@@ -380,29 +380,56 @@ new EC2withDatabase (app, 'StackName', {
   env: { account: 'AccountID', region: 'us-east-1' },
   amiId: "Valid AMI Id",
   availabilityZones: [ "us-east-1c" ],
+  backup: 'True',
   instanceClass: ec2.InstanceClass.T3A,
   instanceSize: ec2.InstanceSize.MEDIUM,
   instanceName: "InstanceName",
   keyName: "libnd",
   privateIpAddress: "IPAddress",
-  publicSubnetIds:  [ "ValidSubnet in VPC" ],
+  publicSubnetIds:  [ "ValidSubnet in VPC that matches up with AvailabilityZone" ],
   domainName: "Local domain name",
-  cnameList: [ Array of cnames/additional IPs to be added ],
+  CnameList: [ Array of cnames/additional IPs to be added ],
   volumeSize: Number (in GB),
   vpcId: "Valid VPC ID",
-  sg_ingress_db: 'Security Group of database for access',
-  sg_ingress_db_port: PortNumber,
-  sg_ingress_rules: [
+  SGDBAccessRules: [
+    {
+      "database": "sg-088a1b9d4918effb3",       // Security groups that provide access to an RDS database
+      "port": 3306,                             // Can be multiple or none at all
+      "description": "MySQL access from jumpbox"
+    },
+  ],
+  SGIngressRules: [
       {
-      "ipv4": "10.32.0.0/11",
-      "port": 22,
+      "ipv4": "10.32.0.0/11",                   // Additional access rules to allow connection to the server
+      "port": 22,                               // Can be multiple or none at all
       "description": "SSH access from campus"
       },
   ],
 });
 ```
 
-
+## RDS Build - Postgres
+
+Creates a Postgres Serverless V2 database cluster with one writer instance. Several pieces of information must be sent in to the build procedure. This first pass was created specifically for DEC and may change over time.
+
+ new PostgresRDSConstruct(this, `rds-peered-postgres-dec-${props.namespace}`, {
+      availabilityZones: vpc.availabilityZones,                // Must be passed in; must align with subnets
+      dbClusterIdentifier: 'whatever-you-want-the-name-to-be,  // Name of the database cluster
+      dbFullVersion: AuroraPostgresEngineVersion.VER_16_4,     // Can be any valid version of Postgres
+      pgVersion: AuroraPostgresEngineVersion.VER_16_4,         // Gives option of parameter group to be different
+      rdsPostgresSecret: `whatever-you-want-secret-name`,      // Secret with Postgres user password created
+      privateSubnetIds: this.vpc.privateSubnets.map(subnet => subnet.subnetId),  // Must be passed in
+      SGIngressRules: [                                        // Additional rules for database access; can be empty
+        {
+          "ipv4": "10.58.250.75/32",
+          "port": 5432,
+          "description": "Postgres access to conductor server"
+        },
+       ],
+      useVpcId: this.vpc.vpcId,
+      // env: props.env,
+    })
+    Tags.of(this.PostgresDatabase).add('Backup', 'True')        // The RDS should be tagged for backup 
 
 ## Slack Integration
 

package/lib/ec2s/ec2-with-database.d.ts

@@ -1,6 +1,12 @@
-import { aws_ec2, Stack, StackProps } from 'aws-cdk-lib';
+import { Stack, StackProps } from 'aws-cdk-lib';
+import { InstanceClass, InstanceSize } from 'aws-cdk-lib/aws-ec2';
 import { Construct } from 'constructs';
-export interface IIngress_Rule {
+export interface AccessRule {
+    readonly database: string;
+    readonly port: number;
+    readonly description: string;
+}
+export interface IIngressRule {
     readonly ipv4: string;
     readonly port: number;
     readonly description: string;
@@ -8,17 +14,16 @@ export interface IIngress_Rule {
 export interface ServiceStackProps extends StackProps {
     readonly amiId: string;
     readonly availabilityZones: string[];
-    readonly instanceClass: aws_ec2.InstanceClass;
-    readonly instanceSize: aws_ec2.InstanceSize;
+    readonly backup?: string;
+    readonly instanceClass: InstanceClass;
+    readonly instanceSize: InstanceSize;
     readonly instanceName: string;
     readonly keyName: string;
-    readonly privateIpAddress: string;
     readonly publicSubnetIds: string[];
     readonly volumeSize: number;
     readonly vpcId: string;
-    readonly sg_ingress_rules: IIngress_Rule[];
-    readonly sg_ingress_db: string;
-    readonly sg_ingress_db_port: number;
+    readonly SGIngressRules?: IIngressRule[];
+    readonly SGDBAccessRules?: AccessRule[];
     readonly domainName: string;
     readonly privateDomainName: string;
     readonly CnameList: string[];

package/lib/ec2s/ec2-with-database.js

@@ -4,11 +4,24 @@ exports.EC2withDatabase = void 0;
 const aws_cdk_lib_1 = require("aws-cdk-lib");
 const aws_cdk_lib_2 = require("aws-cdk-lib");
 const ssm = require("aws-cdk-lib/aws-ssm");
+const aws_kms_1 = require("aws-cdk-lib/aws-kms");
 const aws_route53_1 = require("aws-cdk-lib/aws-route53");
 class EC2withDatabase extends aws_cdk_lib_1.Stack {
     constructor(scope, id, props) {
+        var _a, _b, _c;
         super(scope, id, props);
-        // Determine the VPC from the availability zones and subnets passed in
+        /*
+        *  Security Group setup and usage are optional parameters
+        *  SGDBAccessRules = RDS database Access group rules (can be multiple)
+        *  SGIngressRules = Ingress rules for additional access (can be multiple)
+        */
+        props = {
+            ...props,
+            backup: (_a = props.backup) !== null && _a !== void 0 ? _a : 'False',
+            SGDBAccessRules: (_b = props.SGDBAccessRules) !== null && _b !== void 0 ? _b : [],
+            SGIngressRules: (_c = props.SGIngressRules) !== null && _c !== void 0 ? _c : [],
+        };
+        // Determine the VPC from the availability zone and subnet passed in. These are expected to align within the VPC
         const vpc = aws_cdk_lib_1.aws_ec2.Vpc.fromVpcAttributes(this, 'Vpc', {
             vpcId: props.vpcId,
             availabilityZones: props.availabilityZones,
@@ -18,23 +31,39 @@ class EC2withDatabase extends aws_cdk_lib_1.Stack {
         const linux_build = aws_cdk_lib_1.aws_ec2.MachineImage.genericLinux({
             'us-east-1': props.amiId,
         });
-        // Need to look up the role name and then get the ARN value
+        // Need to look up the basic role name and then get the ARN value
         const basic_role = ssm.StringParameter.valueFromLookup(this, '/esu/ec2/basic_role_name');
         const roleName = `arn:aws:iam::${this.account}:${basic_role}`;
         const ec2role = aws_cdk_lib_1.aws_iam.Role.fromRoleArn(this, 'Role', roleName);
-        // Create a security group for this specific server using rules passed in
+        /*
+         * Create a security group for this specific server and then add the SGIngressRules passed in
+        */
         const ec2SecurityGroup = new aws_cdk_lib_1.aws_ec2.SecurityGroup(this, props.instanceName, {
             description: 'Security Group for $(props.instanceName)',
             allowAllOutbound: true,
             vpc: vpc,
         });
-        // Add connections from the new security group to the RDS which will be used by this server    
-        const db_connect_SG = aws_cdk_lib_1.aws_ec2.SecurityGroup.fromSecurityGroupId(this, 'SG', props.sg_ingress_db);
-        ec2SecurityGroup.connections.allowFrom(db_connect_SG, aws_cdk_lib_1.aws_ec2.Port.tcp(props.sg_ingress_db_port), 'Database SG Access');
-        ec2SecurityGroup.connections.allowTo(db_connect_SG, aws_cdk_lib_1.aws_ec2.Port.tcp(props.sg_ingress_db_port), 'Database SG Access');
-        props.sg_ingress_rules.forEach((rule) => {
-            ec2SecurityGroup.addIngressRule(aws_cdk_lib_1.aws_ec2.Peer.ipv4(rule.ipv4), aws_cdk_lib_1.aws_ec2.Port.tcp(rule.port), rule.description);
+        if (props.SGIngressRules) {
+            props.SGIngressRules.forEach((rule) => {
+                ec2SecurityGroup.addIngressRule(aws_cdk_lib_1.aws_ec2.Peer.ipv4(rule.ipv4), aws_cdk_lib_1.aws_ec2.Port.tcp(rule.port), rule.description);
+            });
+        }
+        // Create a key to allow volume and instance to be backed up
+        const backupKey = new aws_kms_1.Key(this, 'BackupKey', {
+            enableKeyRotation: true,
+            alias: props.instanceName,
         });
+        /*
+         * Add connections from the new security group to the RDS which will be used by this server using
+         * SGDBAccessRules passed in
+        */
+        if (props.SGDBAccessRules) {
+            props.SGDBAccessRules.forEach((rule) => {
+                const db_connect_SG = aws_cdk_lib_1.aws_ec2.SecurityGroup.fromSecurityGroupId(this, `SGAccess${rule.database}`, rule.database);
+                ec2SecurityGroup.connections.allowFrom(db_connect_SG, aws_cdk_lib_1.aws_ec2.Port.tcp(rule.port), rule.description);
+                ec2SecurityGroup.connections.allowTo(db_connect_SG, aws_cdk_lib_1.aws_ec2.Port.tcp(rule.port), rule.description);
+            });
+        }
         // With all of the information gathered, as well as values passed in, create the server
         const ec2_server = new aws_cdk_lib_1.aws_ec2.Instance(this, 'ec2-server', {
             blockDevices: [{
@@ -43,6 +72,7 @@ class EC2withDatabase extends aws_cdk_lib_1.Stack {
                         ebsDevice: {
                             volumeSize: props.volumeSize,
                             encrypted: true,
+                            kmsKey: backupKey,
                         },
                     },
                 }],
@@ -50,24 +80,33 @@ class EC2withDatabase extends aws_cdk_lib_1.Stack {
             role: ec2role,
             securityGroup: ec2SecurityGroup,
             machineImage: linux_build,
-            // keyName: props.keyName, // deprecated, replaced with keyPair below.
+            propagateTagsToVolumeOnCreation: true,
             keyPair: aws_cdk_lib_1.aws_ec2.KeyPair.fromKeyPairName(this, 'KeyPair', props.keyName),
             instanceType: aws_cdk_lib_1.aws_ec2.InstanceType.of(props.instanceClass, props.instanceSize),
             instanceName: props.instanceName,
-            privateIpAddress: props.privateIpAddress,
         });
         // Add an Elastic IP Address to the server
         const IPAddr = new aws_cdk_lib_1.aws_ec2.CfnEIP(this, 'Ip', {
             instanceId: ec2_server.instanceId,
         });
-        // Then tag the EIP
+        // Tag the server and the EIP with the instance name and FQDN
+        const FQDN = `${props.instanceName}.${props.domainName}`;
+        const schedule = '*'; // Initially the schedule is always up
+        const service = props.instanceName; // Initially the service is the instance name
+        // Then tag the EIP and the server
         aws_cdk_lib_1.Tags.of(IPAddr).add('Name', props.instanceName);
+        aws_cdk_lib_1.Tags.of(ec2_server).add('FQDN', FQDN);
+        aws_cdk_lib_1.Tags.of(ec2_server).add('Schedule', schedule);
+        aws_cdk_lib_1.Tags.of(ec2_server).add('Service', service);
+        if (props.backup) {
+            aws_cdk_lib_1.Tags.of(ec2_server).add('Backup', props.backup);
+        }
         // Create DNS for libnd.nd.edu connection
         const privateZoneId = ssm.StringParameter.fromStringParameterAttributes(this, 'PrivateZoneId', {
             parameterName: `/all/dns/${props.keyName}/private/zoneId`,
         }).stringValue;
         new aws_route53_1.ARecord(this, 'PrivateARec', {
-            target: aws_route53_1.RecordTarget.fromIpAddresses(props.privateIpAddress),
+            target: aws_route53_1.RecordTarget.fromIpAddresses(ec2_server.instancePrivateIp),
             recordName: props.instanceName,
             zone: aws_route53_1.HostedZone.fromHostedZoneAttributes(this, 'PrivateHostedZone', {
                 hostedZoneId: privateZoneId,
@@ -109,7 +148,7 @@ class EC2withDatabase extends aws_cdk_lib_1.Stack {
                 parameterName: `/all/dns/${props.domainName}/${direction}/zoneId`,
             }).stringValue;
             new aws_route53_1.ARecord(this, `${direction}ServiceARec`, {
-                target: aws_route53_1.RecordTarget.fromIpAddresses(props.privateIpAddress),
+                target: aws_route53_1.RecordTarget.fromIpAddresses(ec2_server.instancePrivateIp),
                 recordName: props.instanceName,
                 zone: aws_route53_1.HostedZone.fromHostedZoneAttributes(this, `${direction}ImportedHostedZone`, {
                     hostedZoneId: hostedZoneId,
@@ -120,7 +159,7 @@ class EC2withDatabase extends aws_cdk_lib_1.Stack {
             if (props.CnameList.length != 0) {
                 props.CnameList.forEach(cname => {
                     new aws_route53_1.ARecord(this, `${direction}${cname}`, {
-                        target: aws_route53_1.RecordTarget.fromIpAddresses(props.privateIpAddress),
+                        target: aws_route53_1.RecordTarget.fromIpAddresses(ec2_server.instancePrivateIp),
                         recordName: cname,
                         zone: aws_route53_1.HostedZone.fromHostedZoneAttributes(this, `${direction}${cname}HostedZone`, {
                             hostedZoneId: hostedZoneId,

package/lib/index.d.ts

@@ -9,6 +9,7 @@ export * from './metrics';
 export * from './newman-runner';
 export * from './pipeline-notifications';
 export * from './pipeline-s3-sync';
+export * from './rds/postgres-stack';
 export * from './slack-integration';
 export * from './slack-pipeline-status-notifications';
 export * from './slos/alarms';

package/lib/index.js

@@ -25,6 +25,7 @@ __exportStar(require("./metrics"), exports);
 __exportStar(require("./newman-runner"), exports);
 __exportStar(require("./pipeline-notifications"), exports);
 __exportStar(require("./pipeline-s3-sync"), exports);
+__exportStar(require("./rds/postgres-stack"), exports);
 __exportStar(require("./slack-integration"), exports);
 __exportStar(require("./slack-pipeline-status-notifications"), exports);
 __exportStar(require("./slos/alarms"), exports);

package/lib/rds/postgres-stack.d.ts

@@ -0,0 +1,27 @@
+import { AuroraPostgresEngineVersion } from 'aws-cdk-lib/aws-rds';
+import { Construct } from 'constructs';
+export interface PGIIngress_Rule {
+    readonly ipv4: string;
+    readonly port: number;
+    readonly description: string;
+}
+export interface IClusterEngine {
+    readonly engineType: string;
+    readonly engineVersion: string;
+}
+export interface PostgresServiceConstructProps {
+    readonly availabilityZones: string[];
+    readonly dbClusterIdentifier: string;
+    readonly dbFullVersion: AuroraPostgresEngineVersion;
+    readonly pgVersion: AuroraPostgresEngineVersion;
+    readonly maxACU?: number;
+    readonly minACU?: number;
+    readonly privateSubnetIds: string[];
+    readonly rdsPostgresSecret: string;
+    readonly SGIngressRules?: PGIIngress_Rule[];
+    readonly useVpcId: string;
+}
+export declare class PostgresRDSConstruct extends Construct {
+    readonly accessSGID: string;
+    constructor(scope: Construct, id: string, props: PostgresServiceConstructProps);
+}

package/lib/rds/postgres-stack.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PostgresRDSConstruct = void 0;
+const secretsmanager = require("aws-cdk-lib/aws-secretsmanager");
+const aws_rds_1 = require("aws-cdk-lib/aws-rds");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_ec2_1 = require("aws-cdk-lib/aws-ec2");
+const constructs_1 = require("constructs");
+;
+class PostgresRDSConstruct extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        var _a, _b, _c;
+        super(scope, id);
+        const stackName = aws_cdk_lib_1.Stack.of(this).stackName;
+        /*
+        * maxACU, minACU, and SGIngressRules are optional parameters
+        */
+        props = {
+            ...props,
+            maxACU: (_a = props.maxACU) !== null && _a !== void 0 ? _a : 8, // default to 8 ACU
+            minACU: (_b = props.minACU) !== null && _b !== void 0 ? _b : 0, // default to 0 ACU is now possible
+            SGIngressRules: (_c = props.SGIngressRules) !== null && _c !== void 0 ? _c : [],
+        };
+        const vpc = aws_ec2_1.Vpc.fromVpcAttributes(this, 'Vpc', {
+            vpcId: props.useVpcId,
+            availabilityZones: props.availabilityZones,
+            privateSubnetIds: props.privateSubnetIds,
+        });
+        // Create a secret for the RDS credentials
+        const rdsSecret = new secretsmanager.Secret(this, 'RdsSecret', {
+            secretName: props.rdsPostgresSecret,
+            description: 'RDS Postgres User for current DEC foundation',
+            generateSecretString: {
+                secretStringTemplate: JSON.stringify({ username: 'postgres' }),
+                generateStringKey: 'password',
+                excludeCharacters: '"@/\\',
+            },
+        });
+        const parameterGroupDescription = `Parameter Group for ${props.dbClusterIdentifier}`;
+        let auroraParameters = {};
+        auroraParameters['timezone'] = 'US/Eastern';
+        auroraParameters['idle_session_timeout'] = '60000'; // 1 minute idle timeout for any given session
+        const libParameterGroup = new aws_rds_1.ParameterGroup(this, 'LibParameterGroup', {
+            engine: aws_rds_1.DatabaseClusterEngine.auroraPostgres({
+                version: props.pgVersion,
+            }),
+            description: parameterGroupDescription,
+            parameters: auroraParameters,
+        });
+        const baseSGname = `${props.dbClusterIdentifier}-Base`;
+        const accessSGname = `${props.dbClusterIdentifier}-Access`;
+        const baseId = `${props.dbClusterIdentifier}-base`;
+        const accessId = `${props.dbClusterIdentifier}-access`;
+        const baseSG = new aws_ec2_1.SecurityGroup(this, baseId, {
+            vpc: vpc,
+            securityGroupName: baseSGname,
+            description: 'Base Security Group',
+        });
+        const accessSG = new aws_ec2_1.SecurityGroup(this, accessId, {
+            vpc: vpc,
+            securityGroupName: accessSGname,
+            description: 'Access Security Group',
+        });
+        accessSG.connections.allowFrom(baseSG, aws_ec2_1.Port.tcp(5432), 'Postgres to Base SG');
+        baseSG.connections.allowFrom(accessSG, aws_ec2_1.Port.tcp(5432), 'Postgres to Access SG');
+        const externalSGname = `${props.dbClusterIdentifier}-External`;
+        const externalId = `${props.dbClusterIdentifier}-external`;
+        const externalSG = new aws_ec2_1.SecurityGroup(this, externalId, {
+            vpc: vpc,
+            securityGroupName: externalSGname,
+            description: 'Outside access Security Group',
+            allowAllOutbound: true,
+        });
+        if (props.SGIngressRules) {
+            props.SGIngressRules.forEach((rule) => {
+                externalSG.addIngressRule(aws_ec2_1.Peer.ipv4(rule.ipv4), aws_ec2_1.Port.tcp(rule.port), rule.description);
+            });
+        }
+        const dbCluster = new aws_rds_1.DatabaseCluster(this, 'peered-DBCluster', {
+            clusterIdentifier: props.dbClusterIdentifier,
+            instanceIdentifierBase: props.dbClusterIdentifier,
+            credentials: aws_rds_1.Credentials.fromSecret(rdsSecret),
+            engine: aws_rds_1.DatabaseClusterEngine.auroraPostgres({ version: props.dbFullVersion }),
+            securityGroups: [baseSG, accessSG, externalSG],
+            serverlessV2MinCapacity: props.minACU,
+            serverlessV2MaxCapacity: props.maxACU,
+            storageEncrypted: true,
+            parameterGroup: libParameterGroup,
+            vpc: vpc,
+            storageType: aws_rds_1.DBClusterStorageType.AURORA_IOPT1,
+            deletionProtection: true,
+            writer: aws_rds_1.ClusterInstance.serverlessV2('writer'),
+            vpcSubnets: vpc.selectSubnets({
+                subnetType: aws_ec2_1.SubnetType.PRIVATE_WITH_EGRESS,
+            }),
+            port: 5432,
+        });
+        this.accessSGID = accessSG.securityGroupId;
+        new aws_cdk_lib_1.CfnOutput(this, 'DatabaseEndpoint', {
+            description: 'The connection endpoint for the database server',
+            value: dbCluster.clusterEndpoint.hostname,
+            exportName: `${id}:DatabaseEndpoint`,
+        });
+        new aws_cdk_lib_1.CfnOutput(this, 'AccessSecurityGroup', {
+            description: 'The Access Security Group for the instance',
+            value: accessSG.securityGroupId,
+            exportName: `${id}:AccessSecurityGroup`,
+        });
+        new aws_cdk_lib_1.CfnOutput(this, 'ExternalSecurityGroup', {
+            description: 'The External Security Group for the instance',
+            value: externalSG.securityGroupId,
+            exportName: `${id}:ExternalSecurityGroup`,
+        });
+    }
+}
+exports.PostgresRDSConstruct = PostgresRDSConstruct;
+module.exports = { PostgresRDSConstruct };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ndlib/ndlib-cdk2",
-  "version": "1.0.28",
+  "version": "1.0.30",
   "description": "Reusable CDK2 modules used within Hesburgh Libraries of Notre Dame",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -13,7 +13,7 @@
     "generate-changelog": "github-changes -n ${npm_package_version} -o ndlib -r ndlib-cdk2 --only-pulls --use-commit-body",
     "prepare": "npm run build",
     "prepublishOnly": "npm test && npm run format && npm run lint",
-    "preversion": "npm test && npm run format && npm run lint",
+    "preversion": "npm test && npm run lint",
     "version": "npm run generate-changelog && npm run format && git add CHANGELOG.md && git checkout -B bump-$npm_package_version && git add -A src",
     "postversion": "git push --set-upstream origin bump-$npm_package_version && git push --tags",
     "watch": "tsc-watch"
@@ -41,30 +41,30 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.9.0",
-    "@typescript-eslint/eslint-plugin": "^8.14.0",
-    "@typescript-eslint/parser": "^8.14.0",
+    "@types/node": "^22.10.0",
+    "@typescript-eslint/eslint-plugin": "^8.16.0",
+    "@typescript-eslint/parser": "^8.16.0",
     "aws-sdk-client-mock": "^4.1.0",
-    "eslint": "^9.14.0",
+    "eslint": "^9.15.0",
     "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-jest": "^28.9.0",
-    "eslint-plugin-n": "^17.13.2",
+    "eslint-plugin-n": "^17.14.0",
     "eslint-plugin-node": "^11.1.0",
-    "eslint-plugin-promise": "^7.1.0",
+    "eslint-plugin-promise": "^7.2.1",
     "github-changes": "^2.0.3",
     "jest": "^29.7.0",
     "jest-mock": "^29.7.0",
-    "prettier": "^3.3.3",
+    "prettier": "^3.4.1",
     "subpackage": "^1.1.0",
     "ts-jest": "^29.2.5",
     "tsc-watch": "^6.2.1",
-    "typescript": "^5.6.3"
+    "typescript": "^5.7.2"
   },
   "files": [
     "lib/**/*"
   ],
   "dependencies": {
-    "aws-cdk-lib": "^2.167.1",
+    "aws-cdk-lib": "^2.171.0",
     "constructs": "^10.4.2",
     "node-fetch": "^3.3.2"
   },

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-crypto/crc32/CHANGELOG.md

@@ -1,76 +0,0 @@
-# Change Log
-
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
-
-# [3.0.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v2.0.2...v3.0.0) (2023-01-12)
-
-- feat!: replace Hash implementations with Checksum interface (#492) ([da43dc0](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/da43dc0fdf669d9ebb5bfb1b1f7c79e46c4aaae1)), closes [#492](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/492)
-
-### BREAKING CHANGES
-
-- All classes that implemented `Hash` now implement `Checksum`.
-
-## [2.0.2](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v2.0.1...v2.0.2) (2022-09-07)
-
-### Bug Fixes
-
-- **#337:** update @aws-sdk/types ([#373](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/373)) ([b26a811](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/b26a811a392f5209c7ec7e57251500d4d78f97ff)), closes [#337](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/337)
-
-## [2.0.1](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v2.0.0...v2.0.1) (2021-12-09)
-
-**Note:** Version bump only for package @aws-crypto/crc32
-
-# [2.0.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v1.2.2...v2.0.0) (2021-10-25)
-
-**Note:** Version bump only for package @aws-crypto/crc32
-
-## [1.2.2](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v1.2.1...v1.2.2) (2021-10-12)
-
-### Bug Fixes
-
-- **crc32c:** ie11 does not support Array.from ([#221](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/221)) ([5f49547](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/5f495472ab8988cf203e0f2a70a51f7e1fcd7e60))
-
-## [1.2.1](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v1.2.0...v1.2.1) (2021-09-17)
-
-**Note:** Version bump only for package @aws-crypto/crc32
-
-# [1.2.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/v1.1.1...v1.2.0) (2021-09-17)
-
-### Features
-
-- Add AwsCrc32 Hash ([f5d7e81](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/f5d7e815fcbe0f8da1edb855fea3bd33eb1edc15))
-
-# [1.1.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/@aws-crypto/crc32@1.0.0...@aws-crypto/crc32@1.1.0) (2021-08-11)
-
-### Features
-
-- Create CRC-32C implementation ([#201](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/201)) ([e43c7ec](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/e43c7ecd30d6499fa696f5839ecc30502a34b8b6))
-
-# [1.0.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/@aws-crypto/crc32@1.0.0-alpha.0...@aws-crypto/crc32@1.0.0) (2020-10-22)
-
-**Note:** Version bump only for package @aws-crypto/crc32
-
-# [1.0.0-alpha.0](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/@aws-crypto/crc32@0.1.0-preview.4...@aws-crypto/crc32@1.0.0-alpha.0) (2020-02-07)
-
-**Note:** Version bump only for package @aws-crypto/crc32
-
-# [0.1.0-preview.4](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/@aws-crypto/crc32@0.1.0-preview.2...@aws-crypto/crc32@0.1.0-preview.4) (2020-01-16)
-
-### Bug Fixes
-
-- Changed package.json files to point to the right Git repo ([#9](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/9)) ([028245d](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/028245d72e642ca98d82226afb300eb154503c4a)), closes [#8](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/8)
-- lerna version maintains package-lock ([#14](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/14)) ([2ef29e1](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/2ef29e13779703a5c9b32e93d18918fcb33b7272)), closes [#13](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/13)
-
-# [0.1.0-preview.3](https://github.com/aws/aws-sdk-js-crypto-helpers/compare/@aws-crypto/crc32@0.1.0-preview.2...@aws-crypto/crc32@0.1.0-preview.3) (2019-11-15)
-
-### Bug Fixes
-
-- Changed package.json files to point to the right Git repo ([#9](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/9)) ([028245d](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/028245d72e642ca98d82226afb300eb154503c4a)), closes [#8](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/8)
-- lerna version maintains package-lock ([#14](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/14)) ([2ef29e1](https://github.com/aws/aws-sdk-js-crypto-helpers/commit/2ef29e13779703a5c9b32e93d18918fcb33b7272)), closes [#13](https://github.com/aws/aws-sdk-js-crypto-helpers/issues/13)
-
-# [0.1.0-preview.2](https://github.com/aws/aws-javascript-crypto-helpers/compare/@aws-crypto/crc32@0.1.0-preview.1...@aws-crypto/crc32@0.1.0-preview.2) (2019-10-30)
-
-### Bug Fixes
-
-- remove /src/ from .npmignore (for sourcemaps) ([#5](https://github.com/aws/aws-javascript-crypto-helpers/issues/5)) ([ec52056](https://github.com/aws/aws-javascript-crypto-helpers/commit/ec52056))