@openhi/constructs 0.0.25 → 0.0.27

package/lib/index.d.mts

@@ -11,6 +11,8 @@ import { Table, TableProps, ITable } from 'aws-cdk-lib/aws-dynamodb';
 import { EventBus, EventBusProps, IEventBus } from 'aws-cdk-lib/aws-events';
 import { HostedZone, HostedZoneProps, IHostedZone, HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
 import { StringParameterProps, StringParameter } from 'aws-cdk-lib/aws-ssm';
+import { Distribution, DistributionProps } from 'aws-cdk-lib/aws-cloudfront';
+import { IBucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { IFunction } from 'aws-cdk-lib/aws-lambda';
 import { Duration } from 'aws-cdk-lib/core';
 
@@ -584,6 +586,50 @@ declare class DiscoverableStringParameter extends StringParameter {
     constructor(scope: Construct, id: string, props: DiscoverableStringParameterProps);
 }
 
+/**
+ * Service type for the website service. Used in SSM parameter paths and by
+ * OpenHiWebsiteService for fromConstruct() lookups.
+ */
+declare const STATIC_HOSTING_SERVICE_TYPE = "website";
+/**
+ * Props for the StaticHosting construct.
+ */
+interface StaticHostingProps {
+    /**
+     * Optional S3 bucket props. Bucket name must not be set statically.
+     */
+    readonly bucketProps?: Omit<BucketProps, "bucketName">;
+    /**
+     * Optional CloudFront distribution props. Do not enable invalidation.
+     * Default TTL is 10 seconds via a custom cache policy.
+     */
+    readonly distributionProps?: Omit<DistributionProps, "defaultBehavior" | "defaultRootObject">;
+    /**
+     * Service type for SSM parameter paths.
+     * @default STATIC_HOSTING_SERVICE_TYPE ("website")
+     */
+    readonly serviceType?: string;
+}
+/**
+ * Static hosting: S3 bucket (private) + CloudFront distribution with Origin
+ * Access Control (OAC). Stores bucket ARN and distribution ARN in SSM via
+ * DiscoverableStringParameter for cross-stack lookup. No cache invalidation;
+ * default TTL 10 seconds.
+ */
+declare class StaticHosting extends Construct {
+    /**
+     * SSM parameter name for the S3 bucket ARN.
+     */
+    static readonly SSM_PARAM_NAME_BUCKET_ARN = "STATIC_HOSTING_BUCKET_ARN";
+    /**
+     * SSM parameter name for the CloudFront distribution ARN.
+     */
+    static readonly SSM_PARAM_NAME_DISTRIBUTION_ARN = "STATIC_HOSTING_DISTRIBUTION_ARN";
+    readonly bucket: IBucket;
+    readonly distribution: Distribution;
+    constructor(scope: Construct, id: string, props?: StaticHostingProps);
+}
+
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/services/open-hi-auth-service.md
  */
@@ -907,4 +953,4 @@ declare class OpenHiGraphqlService extends OpenHiService {
     protected createRootGraphqlApi(): RootGraphqlApi;
 }
 
-export { type BuildParameterNameProps, ChildHostedZone, type ChildHostedZoneProps, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, type RestApiCorsOptions, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, RootWildcardCertificate, getDynamoDbDataStoreTableName };
+export { type BuildParameterNameProps, ChildHostedZone, type ChildHostedZoneProps, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, type DiscoverableStringParameterProps, DynamoDbDataStore, type DynamoDbDataStoreProps, OpenHiApp, type OpenHiAppProps, OpenHiAuthService, type OpenHiAuthServiceProps, OpenHiDataService, type OpenHiDataServiceProps, OpenHiEnvironment, type OpenHiEnvironmentProps, OpenHiGlobalService, type OpenHiGlobalServiceProps, OpenHiGraphqlService, type OpenHiGraphqlServiceProps, OpenHiRestApiService, type OpenHiRestApiServiceProps, OpenHiService, type OpenHiServiceProps, type OpenHiServiceType, OpenHiStage, type OpenHiStageProps, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, type RestApiCorsOptions, RootGraphqlApi, type RootGraphqlApiProps, RootHostedZone, RootHttpApi, RootWildcardCertificate, STATIC_HOSTING_SERVICE_TYPE, StaticHosting, type StaticHostingProps, getDynamoDbDataStoreTableName };

package/lib/index.d.ts

@@ -10,6 +10,8 @@ import { Table, TableProps, ITable } from 'aws-cdk-lib/aws-dynamodb';
 import { EventBus, EventBusProps, IEventBus } from 'aws-cdk-lib/aws-events';
 import { HostedZone, HostedZoneProps, IHostedZone, HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
 import { StringParameterProps, StringParameter } from 'aws-cdk-lib/aws-ssm';
+import { Distribution, DistributionProps } from 'aws-cdk-lib/aws-cloudfront';
+import { IBucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { IFunction } from 'aws-cdk-lib/aws-lambda';
 import { Duration } from 'aws-cdk-lib/core';
 
@@ -664,6 +666,50 @@ declare class DiscoverableStringParameter extends StringParameter {
     constructor(scope: Construct, id: string, props: DiscoverableStringParameterProps);
 }
 
+/**
+ * Service type for the website service. Used in SSM parameter paths and by
+ * OpenHiWebsiteService for fromConstruct() lookups.
+ */
+declare const STATIC_HOSTING_SERVICE_TYPE = "website";
+/**
+ * Props for the StaticHosting construct.
+ */
+interface StaticHostingProps {
+    /**
+     * Optional S3 bucket props. Bucket name must not be set statically.
+     */
+    readonly bucketProps?: Omit<BucketProps, "bucketName">;
+    /**
+     * Optional CloudFront distribution props. Do not enable invalidation.
+     * Default TTL is 10 seconds via a custom cache policy.
+     */
+    readonly distributionProps?: Omit<DistributionProps, "defaultBehavior" | "defaultRootObject">;
+    /**
+     * Service type for SSM parameter paths.
+     * @default STATIC_HOSTING_SERVICE_TYPE ("website")
+     */
+    readonly serviceType?: string;
+}
+/**
+ * Static hosting: S3 bucket (private) + CloudFront distribution with Origin
+ * Access Control (OAC). Stores bucket ARN and distribution ARN in SSM via
+ * DiscoverableStringParameter for cross-stack lookup. No cache invalidation;
+ * default TTL 10 seconds.
+ */
+declare class StaticHosting extends Construct {
+    /**
+     * SSM parameter name for the S3 bucket ARN.
+     */
+    static readonly SSM_PARAM_NAME_BUCKET_ARN = "STATIC_HOSTING_BUCKET_ARN";
+    /**
+     * SSM parameter name for the CloudFront distribution ARN.
+     */
+    static readonly SSM_PARAM_NAME_DISTRIBUTION_ARN = "STATIC_HOSTING_DISTRIBUTION_ARN";
+    readonly bucket: IBucket;
+    readonly distribution: Distribution;
+    constructor(scope: Construct, id: string, props?: StaticHostingProps);
+}
+
 /**
  * @see sites/www-docs/content/packages/@openhi/constructs/services/open-hi-auth-service.md
  */
@@ -987,5 +1033,5 @@ declare class OpenHiGraphqlService extends OpenHiService {
     protected createRootGraphqlApi(): RootGraphqlApi;
 }
 
-export { ChildHostedZone, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, DynamoDbDataStore, OpenHiApp, OpenHiAuthService, OpenHiDataService, OpenHiEnvironment, OpenHiGlobalService, OpenHiGraphqlService, OpenHiRestApiService, OpenHiService, OpenHiStage, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, RootGraphqlApi, RootHostedZone, RootHttpApi, RootWildcardCertificate, getDynamoDbDataStoreTableName };
-export type { BuildParameterNameProps, ChildHostedZoneProps, DiscoverableStringParameterProps, DynamoDbDataStoreProps, OpenHiAppProps, OpenHiAuthServiceProps, OpenHiDataServiceProps, OpenHiEnvironmentProps, OpenHiGlobalServiceProps, OpenHiGraphqlServiceProps, OpenHiRestApiServiceProps, OpenHiServiceProps, OpenHiServiceType, OpenHiStageProps, RestApiCorsOptions, RootGraphqlApiProps };
+export { ChildHostedZone, CognitoUserPool, CognitoUserPoolClient, CognitoUserPoolDomain, CognitoUserPoolKmsKey, DataEventBus, DiscoverableStringParameter, DynamoDbDataStore, OpenHiApp, OpenHiAuthService, OpenHiDataService, OpenHiEnvironment, OpenHiGlobalService, OpenHiGraphqlService, OpenHiRestApiService, OpenHiService, OpenHiStage, OpsEventBus, PreTokenGenerationLambda, REST_API_BASE_URL_SSM_NAME, RootGraphqlApi, RootHostedZone, RootHttpApi, RootWildcardCertificate, STATIC_HOSTING_SERVICE_TYPE, StaticHosting, getDynamoDbDataStoreTableName };
+export type { BuildParameterNameProps, ChildHostedZoneProps, DiscoverableStringParameterProps, DynamoDbDataStoreProps, OpenHiAppProps, OpenHiAuthServiceProps, OpenHiDataServiceProps, OpenHiEnvironmentProps, OpenHiGlobalServiceProps, OpenHiGraphqlServiceProps, OpenHiRestApiServiceProps, OpenHiServiceProps, OpenHiServiceType, OpenHiStageProps, RestApiCorsOptions, RootGraphqlApiProps, StaticHostingProps };

package/lib/index.js

@@ -117,6 +117,8 @@ __export(src_exports, {
   RootHostedZone: () => RootHostedZone,
   RootHttpApi: () => RootHttpApi,
   RootWildcardCertificate: () => RootWildcardCertificate,
+  STATIC_HOSTING_SERVICE_TYPE: () => STATIC_HOSTING_SERVICE_TYPE,
+  StaticHosting: () => StaticHosting,
   getDynamoDbDataStoreTableName: () => getDynamoDbDataStoreTableName
 });
 module.exports = __toCommonJS(src_exports);
@@ -838,6 +840,64 @@ var import_constructs2 = require("constructs");
 var RootHostedZone = class extends import_constructs2.Construct {
 };
 
+// src/components/static-hosting/static-hosting.ts
+var import_aws_cloudfront = require("aws-cdk-lib/aws-cloudfront");
+var import_aws_cloudfront_origins = require("aws-cdk-lib/aws-cloudfront-origins");
+var import_aws_s3 = require("aws-cdk-lib/aws-s3");
+var import_core = require("aws-cdk-lib/core");
+var import_constructs3 = require("constructs");
+var STATIC_HOSTING_SERVICE_TYPE = "website";
+var _StaticHosting = class _StaticHosting extends import_constructs3.Construct {
+  constructor(scope, id, props = {}) {
+    super(scope, id);
+    const stack = OpenHiService.of(scope);
+    const serviceType = props.serviceType ?? STATIC_HOSTING_SERVICE_TYPE;
+    this.bucket = new import_aws_s3.Bucket(this, "bucket", {
+      blockPublicAccess: {
+        blockPublicAcls: true,
+        blockPublicPolicy: true,
+        ignorePublicAcls: true,
+        restrictPublicBuckets: true
+      },
+      ...props.bucketProps
+    });
+    const origin = import_aws_cloudfront_origins.S3BucketOrigin.withOriginAccessControl(this.bucket);
+    const cachePolicy = new import_aws_cloudfront.CachePolicy(this, "cache-policy", {
+      cachePolicyName: `static-hosting-10s-${stack.branchHash}`,
+      comment: "Low TTL (10s) for static hosting; no invalidation",
+      defaultTtl: import_core.Duration.seconds(10),
+      minTtl: import_core.Duration.seconds(0),
+      maxTtl: import_core.Duration.seconds(10)
+    });
+    this.distribution = new import_aws_cloudfront.Distribution(this, "distribution", {
+      defaultBehavior: {
+        origin,
+        cachePolicy
+      },
+      ...props.distributionProps
+    });
+    new DiscoverableStringParameter(this, "bucket-arn-param", {
+      ssmParamName: _StaticHosting.SSM_PARAM_NAME_BUCKET_ARN,
+      serviceType,
+      stringValue: this.bucket.bucketArn
+    });
+    new DiscoverableStringParameter(this, "distribution-arn-param", {
+      ssmParamName: _StaticHosting.SSM_PARAM_NAME_DISTRIBUTION_ARN,
+      serviceType,
+      stringValue: this.distribution.distributionArn
+    });
+  }
+};
+/**
+ * SSM parameter name for the S3 bucket ARN.
+ */
+_StaticHosting.SSM_PARAM_NAME_BUCKET_ARN = "STATIC_HOSTING_BUCKET_ARN";
+/**
+ * SSM parameter name for the CloudFront distribution ARN.
+ */
+_StaticHosting.SSM_PARAM_NAME_DISTRIBUTION_ARN = "STATIC_HOSTING_DISTRIBUTION_ARN";
+var StaticHosting = _StaticHosting;
+
 // src/services/open-hi-auth-service.ts
 var import_aws_cognito4 = require("aws-cdk-lib/aws-cognito");
 var import_aws_kms2 = require("aws-cdk-lib/aws-kms");
@@ -1093,7 +1153,7 @@ var import_aws_apigatewayv2_integrations = require("aws-cdk-lib/aws-apigatewayv2
 var import_aws_iam = require("aws-cdk-lib/aws-iam");
 var import_aws_route533 = require("aws-cdk-lib/aws-route53");
 var import_aws_route53_targets = require("aws-cdk-lib/aws-route53-targets");
-var import_core = require("aws-cdk-lib/core");
+var import_core2 = require("aws-cdk-lib/core");
 
 // src/services/open-hi-data-service.ts
 var import_aws_dynamodb2 = require("aws-cdk-lib/aws-dynamodb");
@@ -1165,7 +1225,7 @@ var import_node_fs2 = __toESM(require("fs"));
 var import_node_path2 = __toESM(require("path"));
 var import_aws_lambda2 = require("aws-cdk-lib/aws-lambda");
 var import_aws_lambda_nodejs2 = require("aws-cdk-lib/aws-lambda-nodejs");
-var import_constructs3 = require("constructs");
+var import_constructs4 = require("constructs");
 var HANDLER_NAME2 = "rest-api-lambda.handler.js";
 function resolveHandlerEntry2(dirname) {
   const sameDir = import_node_path2.default.join(dirname, HANDLER_NAME2);
@@ -1175,7 +1235,7 @@ function resolveHandlerEntry2(dirname) {
   const fromLib = import_node_path2.default.join(dirname, "..", "..", "..", "lib", HANDLER_NAME2);
   return fromLib;
 }
-var RestApiLambda = class extends import_constructs3.Construct {
+var RestApiLambda = class extends import_constructs4.Construct {
   constructor(scope, props) {
     super(scope, "rest-api-lambda");
     this.lambda = new import_aws_lambda_nodejs2.NodejsFunction(this, "handler", {
@@ -1401,7 +1461,7 @@ var _OpenHiRestApiService = class _OpenHiRestApiService extends OpenHiService {
         "Authorization"
       ],
       allowCredentials: cors.allowCredentials ?? true,
-      maxAge: cors.maxAge ?? import_core.Duration.days(1)
+      maxAge: cors.maxAge ?? import_core2.Duration.days(1)
     } : void 0;
     const rootHttpApi = new RootHttpApi(this, {
       defaultDomainMapping: {
@@ -1484,6 +1544,8 @@ var OpenHiGraphqlService = _OpenHiGraphqlService;
   RootHostedZone,
   RootHttpApi,
   RootWildcardCertificate,
+  STATIC_HOSTING_SERVICE_TYPE,
+  StaticHosting,
   getDynamoDbDataStoreTableName
 });
 //# sourceMappingURL=index.js.map