@openhi/constructs 0.0.119 → 0.0.121

package/lib/index.mjs

@@ -814,7 +814,7 @@ var PreTokenGenerationLambda = class extends Construct3 {
 // src/components/dynamodb/data-store-historical-archive.ts
 import fs4 from "fs";
 import path4 from "path";
-import { Duration, RemovalPolicy as RemovalPolicy2, Size } from "aws-cdk-lib";
+import { Duration, RemovalPolicy as RemovalPolicy2, Size, Tags as Tags3 } from "aws-cdk-lib";
 import * as kinesisfirehose from "aws-cdk-lib/aws-kinesisfirehose";
 import { Runtime as Runtime4 } from "aws-cdk-lib/aws-lambda";
 import { NodejsFunction as NodejsFunction4 } from "aws-cdk-lib/aws-lambda-nodejs";
@@ -847,6 +847,17 @@ var DataStoreHistoricalArchive = class extends Construct4 {
       autoDeleteObjects: props.removalPolicy === RemovalPolicy2.DESTROY,
       versioned: false
     }) : void 0;
+    if (putEventsFailureDlqBucket) {
+      const appName = OpenHiService.of(this).appName;
+      Tags3.of(putEventsFailureDlqBucket).add(
+        openHiTagKey(appName, "resource-role"),
+        "dead-letter-queue"
+      );
+      Tags3.of(putEventsFailureDlqBucket).add(
+        openHiTagKey(appName, "pipeline"),
+        "data-replication"
+      );
+    }
     this.putEventsFailureDlqBucket = putEventsFailureDlqBucket;
     this.transformFunction = new NodejsFunction4(this, "FirehoseTransform", {
       entry: resolveHandlerEntry4(__dirname),
@@ -1332,6 +1343,7 @@ var DataStorePostgresReplica = class extends Construct6 {
     this.databaseName = props.databaseName ?? DEFAULT_DATABASE_NAME;
     this.schemaName = getPostgresReplicaSchemaName(props.branchHash);
     const region = Stack3.of(this).region;
+    const ownsVpc = props.vpc === void 0;
     this.vpc = props.vpc ?? new ec2.Vpc(this, "Vpc", {
       availabilityZones: [`${region}a`, `${region}b`],
       natGateways: 0,
@@ -1343,6 +1355,14 @@ var DataStorePostgresReplica = class extends Construct6 {
         }
       ]
     });
+    if (ownsVpc) {
+      new ec2.InterfaceVpcEndpoint(this, "SecretsManagerEndpoint", {
+        vpc: this.vpc,
+        service: ec2.InterfaceVpcEndpointAwsService.SECRETS_MANAGER,
+        subnets: { subnetType: ec2.SubnetType.PRIVATE_ISOLATED },
+        privateDnsEnabled: true
+      });
+    }
     this.cluster = new rds.DatabaseCluster(this, "Cluster", {
       clusterIdentifier: `openhi-dstore-pg-${props.stackHash}`,
       engine: rds.DatabaseClusterEngine.auroraPostgres({