@openhi/constructs 0.0.123 → 0.0.125

package/lib/index.d.mts

@@ -1133,7 +1133,11 @@ interface StaticHostingProps {
     readonly hostedZone?: IHostedZone;
     /**
      * Domain names to attach to the CloudFront distribution. Each name also
-     * gets an ARecord in `hostedZone`.
+     * gets an ARecord in `hostedZone`, except for wildcard entries
+     * (e.g. `*.dev.openhi.org`) which are added as CloudFront alternate
+     * domain names (so the cert covers them) but skipped by the ARecord
+     * loop — Route53 cannot create an `A` record at a wildcard apex, and
+     * per-host ARecords are created later by downstream stacks.
      */
     readonly domainNames?: ReadonlyArray<string>;
     /**
@@ -1216,6 +1220,12 @@ declare class StaticHosting extends Construct {
      * SSM parameter name for the CloudFront distribution ID.
      */
     static readonly SSM_PARAM_NAME_DISTRIBUTION_ID = "STATIC_HOSTING_DISTRIBUTION_ID";
+    /**
+     * Returns true when `domainName` begins with a wildcard label (`*.`),
+     * indicating it is an alt-name on the CloudFront cert but cannot be
+     * created as a Route53 ARecord.
+     */
+    private static isWildcardDomain;
     readonly bucket: IBucket;
     readonly distribution: Distribution;
     readonly viewerRequestHandler: NodejsFunction;

package/lib/index.d.ts

@@ -1770,7 +1770,11 @@ interface StaticHostingProps {
     readonly hostedZone?: IHostedZone;
     /**
      * Domain names to attach to the CloudFront distribution. Each name also
-     * gets an ARecord in `hostedZone`.
+     * gets an ARecord in `hostedZone`, except for wildcard entries
+     * (e.g. `*.dev.openhi.org`) which are added as CloudFront alternate
+     * domain names (so the cert covers them) but skipped by the ARecord
+     * loop — Route53 cannot create an `A` record at a wildcard apex, and
+     * per-host ARecords are created later by downstream stacks.
      */
     readonly domainNames?: ReadonlyArray<string>;
     /**
@@ -1853,6 +1857,12 @@ declare class StaticHosting extends Construct {
      * SSM parameter name for the CloudFront distribution ID.
      */
     static readonly SSM_PARAM_NAME_DISTRIBUTION_ID = "STATIC_HOSTING_DISTRIBUTION_ID";
+    /**
+     * Returns true when `domainName` begins with a wildcard label (`*.`),
+     * indicating it is an alt-name on the CloudFront cert but cannot be
+     * created as a Route53 ARecord.
+     */
+    private static isWildcardDomain;
     readonly bucket: IBucket;
     readonly distribution: Distribution;
     readonly viewerRequestHandler: NodejsFunction;

package/lib/index.js

@@ -2374,6 +2374,14 @@ var import_aws_s3 = require("aws-cdk-lib/aws-s3");
 var import_constructs9 = require("constructs");
 var STATIC_HOSTING_SERVICE_TYPE = "website";
 var _StaticHosting = class _StaticHosting extends import_constructs9.Construct {
+  /**
+   * Returns true when `domainName` begins with a wildcard label (`*.`),
+   * indicating it is an alt-name on the CloudFront cert but cannot be
+   * created as a Route53 ARecord.
+   */
+  static isWildcardDomain(domainName) {
+    return domainName.startsWith("*.");
+  }
   constructor(scope, id, props = {}) {
     super(scope, id);
     const stack = OpenHiService.of(scope);
@@ -2460,6 +2468,9 @@ var _StaticHosting = class _StaticHosting extends import_constructs9.Construct {
     });
     if (hasCustomDomain) {
       props.domainNames.forEach((domainName, index) => {
+        if (_StaticHosting.isWildcardDomain(domainName)) {
+          return;
+        }
         new import_aws_route532.ARecord(this, `dns-record-${index}`, {
           zone: props.hostedZone,
           recordName: domainName,