@quadnix/octo-aws-cdk 0.1.0 → 0.2.0

package/dist/resources/cloudfront-distribution/cloudfront-distribution.resource.d.ts

@@ -0,0 +1,97 @@
+import { ATerraformResource, type BaseResourceSchema, Diff, type MatchingResource, type TerraformModuleScope } from '@quadnix/octo';
+import { CloudFrontDistributionSchema } from './index.schema.js';
+/**
+ * @internal
+ */
+export declare class CloudFrontDistribution extends ATerraformResource<CloudFrontDistributionSchema, CloudFrontDistribution> {
+    parents: MatchingResource<BaseResourceSchema>[];
+    properties: CloudFrontDistributionSchema['properties'];
+    response: CloudFrontDistributionSchema['response'];
+    /**
+     * @internal
+     */
+    constructor(resourceId: string, properties: CloudFrontDistributionSchema['properties'], parents?: MatchingResource<BaseResourceSchema>[]);
+    /**
+     * A name AWS will accept, that still says which thing it belongs to.
+     *
+     * A distribution's name and an origin's are each free-form, so their join is what overflows a
+     * limit neither of them knew about. Cutting the tail off alone would let two origins collide, so
+     * what is cut is replaced by a digest of the whole name: two names that differ anywhere still
+     * differ here, and the same name always renders the same way.
+     *
+     * @internal
+     */
+    private static boundedName;
+    /**
+     * How a policy reference is looked up once every policy has been emitted.
+     *
+     * @internal
+     */
+    private static policyKey;
+    /**
+     * Nothing about a distribution is force-new. Origins, behaviors, aliases, the certificate, the WAF
+     * association - AWS edits all of them in place on a live distribution, so every change is an
+     * update. What is left is identity, and the distribution's name is already in the resource id, so
+     * only the account can move a distribution to being a different one.
+     *
+     * @internal
+     */
+    diffProperties(previous: CloudFrontDistribution): Promise<Diff[]>;
+    /**
+     * @internal
+     */
+    toHCL(terraform: TerraformModuleScope): Promise<void>;
+    /**
+     * Every managed policy a behavior names, paired with the slot it fills.
+     *
+     * @internal
+     */
+    private collectManagedPolicyReferences;
+    /**
+     * The behavior claiming everything no other behavior did.
+     *
+     * @internal
+     */
+    private getDefaultBehavior;
+    /**
+     * The behaviors matched, in order, before the default one.
+     *
+     * @internal
+     */
+    private getOrderedBehaviors;
+    /**
+     * @internal
+     */
+    private renderBehavior;
+    /**
+     * @internal
+     */
+    private renderOrigin;
+    /**
+     * One origin access control per S3 origin. It is what lets the distribution sign its requests to
+     * a bucket that admits nothing else.
+     *
+     * @internal
+     */
+    private renderOriginAccessControls;
+    /**
+     * Emits every policy the behaviors reach for, and returns the id expression each reference
+     * resolves to.
+     *
+     * A managed policy is read by name through a `data` block, so the id AWS assigns is never written
+     * down here. A custom policy is created, and only the behaviors of this distribution can name it.
+     *
+     * @internal
+     */
+    private renderPolicies;
+    /**
+     * Everything a distribution says about itself that terraform would only reject later, or that AWS
+     * would accept and then serve wrongly.
+     *
+     * @internal
+     * @throws If ids collide or do not resolve, if an alias has no certificate to serve it, if a
+     * certificate or web ACL is not one CloudFront can read, or if a CloudFront Function is bound to
+     * an event it cannot run on.
+     */
+    private validateReferences;
+}