@openhi/constructs 0.0.119 → 0.0.121

package/lib/index.js

@@ -1698,6 +1698,17 @@ var DataStoreHistoricalArchive = class extends import_constructs4.Construct {
       autoDeleteObjects: props.removalPolicy === import_aws_cdk_lib6.RemovalPolicy.DESTROY,
       versioned: false
     }) : void 0;
+    if (putEventsFailureDlqBucket) {
+      const appName = OpenHiService.of(this).appName;
+      import_aws_cdk_lib6.Tags.of(putEventsFailureDlqBucket).add(
+        openHiTagKey(appName, "resource-role"),
+        "dead-letter-queue"
+      );
+      import_aws_cdk_lib6.Tags.of(putEventsFailureDlqBucket).add(
+        openHiTagKey(appName, "pipeline"),
+        "data-replication"
+      );
+    }
     this.putEventsFailureDlqBucket = putEventsFailureDlqBucket;
     this.transformFunction = new import_aws_lambda_nodejs4.NodejsFunction(this, "FirehoseTransform", {
       entry: resolveHandlerEntry4(__dirname),
@@ -2178,6 +2189,7 @@ var DataStorePostgresReplica = class extends import_constructs6.Construct {
     this.databaseName = props.databaseName ?? DEFAULT_DATABASE_NAME;
     this.schemaName = getPostgresReplicaSchemaName(props.branchHash);
     const region = import_aws_cdk_lib9.Stack.of(this).region;
+    const ownsVpc = props.vpc === void 0;
     this.vpc = props.vpc ?? new ec2.Vpc(this, "Vpc", {
       availabilityZones: [`${region}a`, `${region}b`],
       natGateways: 0,
@@ -2189,6 +2201,14 @@ var DataStorePostgresReplica = class extends import_constructs6.Construct {
         }
       ]
     });
+    if (ownsVpc) {
+      new ec2.InterfaceVpcEndpoint(this, "SecretsManagerEndpoint", {
+        vpc: this.vpc,
+        service: ec2.InterfaceVpcEndpointAwsService.SECRETS_MANAGER,
+        subnets: { subnetType: ec2.SubnetType.PRIVATE_ISOLATED },
+        privateDnsEnabled: true
+      });
+    }
     this.cluster = new rds.DatabaseCluster(this, "Cluster", {
       clusterIdentifier: `openhi-dstore-pg-${props.stackHash}`,
       engine: rds.DatabaseClusterEngine.auroraPostgres({