@quadnix/octo-aws-cdk 0.2.0 → 0.2.1

package/dist/resources/cloudfront-distribution/cloudfront-policy.schema.js

@@ -0,0 +1,467 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Schema, Validate } from '@quadnix/octo';
+const CLOUDFRONT_CORS_METHODS = ['ALL', 'DELETE', 'GET', 'HEAD', 'OPTIONS', 'PATCH', 'POST', 'PUT'];
+const CLOUDFRONT_FRAME_OPTIONS = ['DENY', 'SAMEORIGIN'];
+/**
+ * @internal
+ */
+export const CLOUDFRONT_MANAGED_CACHE_POLICIES = [
+    'Managed-CachingDisabled',
+    'Managed-CachingOptimized',
+    'Managed-CachingOptimizedForUncompressedObjects',
+    'UseOriginCacheControlHeaders',
+    'UseOriginCacheControlHeaders-QueryStrings',
+];
+/**
+ * @internal
+ */
+export const CLOUDFRONT_MANAGED_ORIGIN_REQUEST_POLICIES = [
+    'Managed-AllViewer',
+    'Managed-AllViewerAndCloudFrontHeaders-2022-06',
+    'Managed-AllViewerExceptHostHeader',
+    'Managed-CORS-CustomOrigin',
+    'Managed-CORS-S3Origin',
+    'Managed-HostHeaderOnly',
+    'Managed-UserAgentRefererHeaders',
+];
+/**
+ * @internal
+ */
+export const CLOUDFRONT_MANAGED_RESPONSE_HEADERS_POLICIES = [
+    'Managed-CORS-and-SecurityHeadersPolicy',
+    'Managed-CORS-With-Preflight',
+    'Managed-CORS-with-preflight-and-SecurityHeadersPolicy',
+    'Managed-SecurityHeadersPolicy',
+    'Managed-SimpleCORS',
+];
+const CLOUDFRONT_REFERRER_POLICIES = [
+    'no-referrer',
+    'no-referrer-when-downgrade',
+    'origin',
+    'origin-when-cross-origin',
+    'same-origin',
+    'strict-origin',
+    'strict-origin-when-cross-origin',
+    'unsafe-url',
+];
+/**
+ * A cache policy this distribution declares, referenced by a behavior under
+ * `{ kind: 'custom', name }`. It decides the cache key - what makes two requests different objects -
+ * and how long an object stays cached.
+ *
+ * Everything in the cache key also reaches the origin. With all three TTLs at `0`, nothing is cached.
+ * [AWS: cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cache-key-understand-cache-policy.html).
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontCachePolicySchema {
+    constructor() {
+        /**
+         * Which cookies are part of the cache key. See {@link ICloudFrontValueSelection}.
+         */
+        this.cookies = Schema({ kind: 'none' });
+        /**
+         * How long an object stays cached when the origin sent neither `Cache-Control` nor `Expires`, in
+         * seconds.
+         */
+        this.defaultTtl = Schema(86400);
+        /**
+         * Whether CloudFront caches a brotli-compressed copy for viewers that accept one. A behavior's
+         * `compress` serves brotli only when this is `true`.
+         */
+        this.enableBrotli = Schema(true);
+        /**
+         * Whether CloudFront caches a gzip-compressed copy for viewers that accept one. A behavior's
+         * `compress` serves gzip only when this is `true`.
+         */
+        this.enableGzip = Schema(true);
+        /**
+         * Which request headers are part of the cache key. See {@link ICloudFrontValueSelection}.
+         */
+        this.headers = Schema({ kind: 'none' });
+        /**
+         * The longest an object stays cached when the origin's `Cache-Control` or `Expires` asks for
+         * longer, in seconds.
+         */
+        this.maxTtl = Schema(31536000);
+        /**
+         * The shortest an object stays cached, in seconds. Above `0`, it holds even when the origin sends
+         * `no-cache`, `no-store`, or `private`.
+         */
+        this.minTtl = Schema(1);
+        /**
+         * How a behavior names this policy. It is also the policy's name in AWS, which must be unique
+         * across the account.
+         */
+        this.name = Schema();
+        /**
+         * Which query strings are part of the cache key. Their order matters too: `?a=1&b=2` and
+         * `?b=2&a=1` are cached apart. See {@link ICloudFrontValueSelection}.
+         */
+        this.queryStrings = Schema({ kind: 'none' });
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList' ? value.values.length > 0 : ['all', 'none'].includes(value.kind),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "cookies", void 0);
+__decorate([
+    Validate({ options: { minLength: 0 } }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "defaultTtl", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList' ? value.values.length > 0 : value.kind === 'none',
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "headers", void 0);
+__decorate([
+    Validate({ options: { minLength: 0 } }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "maxTtl", void 0);
+__decorate([
+    Validate({ options: { minLength: 0 } }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "minTtl", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "name", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList' ? value.values.length > 0 : ['all', 'none'].includes(value.kind),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCachePolicySchema.prototype, "queryStrings", void 0);
+/**
+ * An origin request policy this distribution declares, referenced by a behavior under
+ * `{ kind: 'custom', name }`.
+ *
+ * It decides what reaches the origin beyond what the cache policy already sends, without adding it
+ * to the cache key, e.g. forward the viewer's `Authorization` header without every distinct token
+ * becoming its own cache entry.
+ * [AWS: origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-request-understand-origin-request-policy.html).
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontOriginRequestPolicySchema {
+    constructor() {
+        /**
+         * Which cookies reach the origin. See {@link ICloudFrontValueSelection}.
+         */
+        this.cookies = Schema({ kind: 'none' });
+        /**
+         * Which request headers reach the origin. See {@link ICloudFrontValueSelection}.
+         */
+        this.headers = Schema({ kind: 'none' });
+        /**
+         * How a behavior names this policy. It is also the policy's name in AWS, which must be unique
+         * across the account.
+         */
+        this.name = Schema();
+        /**
+         * Which query strings reach the origin. See {@link ICloudFrontValueSelection}.
+         */
+        this.queryStrings = Schema({ kind: 'none' });
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList' ? value.values.length > 0 : ['all', 'none'].includes(value.kind),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontOriginRequestPolicySchema.prototype, "cookies", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList'
+                ? value.values.length > 0
+                : ['all', 'allViewerAndWhitelistCloudFront', 'none'].includes(value.kind),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontOriginRequestPolicySchema.prototype, "headers", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontOriginRequestPolicySchema.prototype, "name", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => [value],
+        options: {
+            custom: (value) => value.kind === 'allowList' ? value.values.length > 0 : ['all', 'none'].includes(value.kind),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontOriginRequestPolicySchema.prototype, "queryStrings", void 0);
+/**
+ * The CORS headers a response headers policy adds, which let a page on another origin call this
+ * distribution from a browser. They replace any CORS headers the origin sent.
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontCorsSchema {
+    constructor() {
+        /**
+         * Whether to send `Access-Control-Allow-Credentials: true`, which lets the calling page send
+         * cookies and `Authorization`, and read the response. A browser refuses such a response when the
+         * allowed origin is `*`, so name the origins in `allowOrigins`.
+         */
+        this.allowCredentials = Schema();
+        /**
+         * The request headers the calling page may send, e.g. `['Content-Type', 'Authorization']`.
+         * A name may use `*` for any run of characters, e.g. `x-app-*`. `*` alone allows every header
+         * except `Authorization`, which must be named. Header names are not case-sensitive.
+         */
+        this.allowHeaders = Schema();
+        /**
+         * The methods the calling page may use. See {@link ICloudFrontCorsMethod}.
+         */
+        this.allowMethods = Schema();
+        /**
+         * The origins allowed to call, each a scheme, a host, and a port when it is not the default, e.g.
+         * `https://app.example.com`. Write them in lowercase, as browsers send them.
+         * * `*` allows every origin.
+         * * `*` may stand for the leftmost subdomains, e.g. `https://*.example.com`, which matches
+         * `https://www.example.com` and `https://a.b.example.com`, but not `https://example.com`.
+         * * `*` may stand for port digits, e.g. `https://example.com:*`.
+         * * An origin without a scheme, e.g. `example.com`, matches both `http` and `https`.
+         */
+        this.allowOrigins = Schema();
+        /**
+         * How long a browser may reuse the answer to a preflight request, in seconds. Browsers cap it:
+         * Chrome at `7200`, Firefox at `86400`.
+         */
+        this.maxAgeSeconds = Schema();
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCorsSchema.prototype, "allowHeaders", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { custom: (value) => CLOUDFRONT_CORS_METHODS.includes(value) },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCorsSchema.prototype, "allowMethods", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontCorsSchema.prototype, "allowOrigins", void 0);
+__decorate([
+    Validate({ options: { minLength: 0 } }),
+    __metadata("design:type", Object)
+], CloudFrontCorsSchema.prototype, "maxAgeSeconds", void 0);
+/**
+ * A header a response headers policy adds to every response.
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontCustomHeaderSchema {
+    constructor() {
+        /**
+         * The header's name, e.g. `Permissions-Policy`. Not case-sensitive.
+         */
+        this.header = Schema();
+        /**
+         * Whether this value replaces one the origin sent under the same name. `false` keeps the
+         * origin's value, and adds this one only to responses that have none.
+         */
+        this.override = Schema();
+        /**
+         * The header's value, verbatim, e.g. `camera=(), microphone=()`. Whether its case matters is up
+         * to the header.
+         */
+        this.value = Schema();
+    }
+}
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomHeaderSchema.prototype, "header", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomHeaderSchema.prototype, "value", void 0);
+/**
+ * The security headers a response headers policy adds. A `null` field adds nothing for that header.
+ * Every header set here replaces one the origin sent under the same name.
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontSecurityHeadersSchema {
+    constructor() {
+        /**
+         * The value of `Content-Security-Policy`, verbatim, e.g.
+         * `default-src 'self'; img-src 'self' https://images.example.com`. At most 1783 characters.
+         */
+        this.contentSecurityPolicy = Schema(null);
+        /**
+         * Whether to send `X-Content-Type-Options`, which stops a browser from treating a response as a
+         * content type other than the one it declares.
+         */
+        this.contentTypeOptions = Schema(true);
+        /**
+         * The value of `X-Frame-Options`. See {@link ICloudFrontFrameOption}.
+         */
+        this.frameOptions = Schema('SAMEORIGIN');
+        /**
+         * The value of `Referrer-Policy`. See {@link ICloudFrontReferrerPolicy}.
+         */
+        this.referrerPolicy = Schema(null);
+        /**
+         * The `max-age` of `Strict-Transport-Security`: how long a browser keeps using HTTPS for this host,
+         * in seconds. The header also covers every host below this one, and cannot be
+         * added to the lists of HTTPS-only hosts that browsers ship with.
+         */
+        this.strictTransportSecurityMaxAge = Schema(31536000);
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => (value ? [value] : []),
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontSecurityHeadersSchema.prototype, "contentSecurityPolicy", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => (value ? [value] : []),
+        options: { custom: (value) => CLOUDFRONT_FRAME_OPTIONS.includes(value) },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontSecurityHeadersSchema.prototype, "frameOptions", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => (value ? [value] : []),
+        options: {
+            custom: (value) => CLOUDFRONT_REFERRER_POLICIES.includes(value),
+        },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontSecurityHeadersSchema.prototype, "referrerPolicy", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value === null || value === undefined ? [] : [value],
+        options: { minLength: 0 },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontSecurityHeadersSchema.prototype, "strictTransportSecurityMaxAge", void 0);
+/**
+ * A response headers policy this distribution declares, referenced by a behavior under
+ * `{ kind: 'custom', name }`. It changes the headers of every response on the way to the viewer,
+ * whether it came from the cache or the origin.
+ *
+ * CloudFront removes `removeHeaders` first, then adds everything else, so a header both removed and
+ * added is sent with this policy's value.
+ * [AWS: response headers policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html).
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontResponseHeadersPolicySchema {
+    constructor() {
+        /**
+         * The CORS headers to add. See {@link CloudFrontCorsSchema}.
+         */
+        this.cors = Schema(null);
+        /**
+         * Headers to add that have no field of their own, e.g. `Permissions-Policy`.
+         * See {@link CloudFrontCustomHeaderSchema}.
+         */
+        this.customHeaders = Schema([]);
+        /**
+         * How a behavior names this policy. It is also the policy's name in AWS, which must be unique
+         * across the account.
+         */
+        this.name = Schema();
+        /**
+         * Names of headers to strip from the origin's response, e.g. `['Server', 'X-Powered-By']`. Not
+         * case-sensitive. With `Server` or `Date` removed, CloudFront sends its own instead.
+         *
+         * AWS refuses connection-level headers and CloudFront's own, such as `Connection`,
+         * `Content-Length`, `Transfer-Encoding`, `Via`, and any header starting `X-Amz-Cf-` or `X-Edge-`.
+         * [The full list](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#remove-headers-disallowed).
+         */
+        this.removeHeaders = Schema([]);
+        /**
+         * The security headers to add. See {@link CloudFrontSecurityHeadersSchema}.
+         */
+        this.securityHeaders = Schema(null);
+    }
+}
+__decorate([
+    Validate({
+        destruct: (value) => (value ? [value] : []),
+        options: { isSchema: { schema: CloudFrontCorsSchema } },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontResponseHeadersPolicySchema.prototype, "cors", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { isSchema: { schema: CloudFrontCustomHeaderSchema } },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontResponseHeadersPolicySchema.prototype, "customHeaders", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontResponseHeadersPolicySchema.prototype, "name", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value,
+        options: { minLength: 1 },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontResponseHeadersPolicySchema.prototype, "removeHeaders", void 0);
+__decorate([
+    Validate({
+        destruct: (value) => value ? [value] : [],
+        options: { isSchema: { schema: CloudFrontSecurityHeadersSchema } },
+    }),
+    __metadata("design:type", Object)
+], CloudFrontResponseHeadersPolicySchema.prototype, "securityHeaders", void 0);
+//# sourceMappingURL=cloudfront-policy.schema.js.map

package/dist/resources/cloudfront-distribution/cloudfront-policy.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront-policy.schema.js","sourceRoot":"","sources":["../../../src/resources/cloudfront-distribution/cloudfront-policy.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAQ7G,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,YAAY,CAAU,CAAC;AAUjE;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,yBAAyB;IACzB,0BAA0B;IAC1B,gDAAgD;IAChD,8BAA8B;IAC9B,2CAA2C;CACnC,CAAC;AAkBX;;GAEG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,mBAAmB;IACnB,+CAA+C;IAC/C,mCAAmC;IACnC,2BAA2B;IAC3B,uBAAuB;IACvB,wBAAwB;IACxB,iCAAiC;CACzB,CAAC;AAoBX;;GAEG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG;IAC1D,wCAAwC;IACxC,6BAA6B;IAC7B,uDAAuD;IACvD,+BAA+B;IAC/B,oBAAoB;CACZ,CAAC;AAoBX,MAAM,4BAA4B,GAAG;IACnC,aAAa;IACb,4BAA4B;IAC5B,QAAQ;IACR,0BAA0B;IAC1B,aAAa;IACb,eAAe;IACf,iCAAiC;IACjC,YAAY;CACJ,CAAC;AA+CX;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IAAxC;QACE;;WAEG;QAQH,YAAO,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D;;;WAGG;QAEH,eAAU,GAAI,MAAM,CAAS,KAAK,CAAC,CAAC;QAEpC;;;WAGG;QACH,iBAAY,GAAI,MAAM,CAAU,IAAI,CAAC,CAAC;QAEtC;;;WAGG;QACH,eAAU,GAAI,MAAM,CAAU,IAAI,CAAC,CAAC;QAEpC;;WAEG;QAQH,YAAO,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D;;;WAGG;QAEH,WAAM,GAAI,MAAM,CAAS,QAAQ,CAAC,CAAC;QAEnC;;;WAGG;QAEH,WAAM,GAAI,MAAM,CAAS,CAAC,CAAC,CAAC;QAE5B;;;WAGG;QAEH,SAAI,GAAG,MAAM,EAAU,CAAC;QAExB;;;WAGG;QAQH,iBAAY,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;CAAA;AAlEC;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA6C,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QAClG,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9F;KACF,CAAC;;4DAC6D;AAO/D;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;+DACJ;AAwBpC;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA6C,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QAClG,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;SAC/E;KACF,CAAC;;4DAC6D;AAO/D;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;2DACL;AAOnC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;2DACZ;AAO5B;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;yDAChB;AAaxB;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAkD,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QACvG,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9F;KACF,CAAC;;iEACkE;AAGtE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mCAAmC;IAAhD;QACE;;WAEG;QAQH,YAAO,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D;;WAEG;QAUH,YAAO,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/D;;;WAGG;QAEH,SAAI,GAAG,MAAM,EAAU,CAAC;QAExB;;WAEG;QAQH,iBAAY,GAAI,MAAM,CAA4B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;CAAA;AAlCC;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAqD,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QAC1G,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9F;KACF,CAAC;;oEAC6D;AAc/D;IATC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAqD,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QAC1G,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW;gBACxB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,CAAC,KAAK,EAAE,iCAAiC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9E;KACF,CAAC;;oEAC6D;AAO/D;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;iEAChB;AAYxB;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA0D,EAA+B,EAAE,CAAC,CAAC,KAAM,CAAC;QAC/G,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAgC,EAAW,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9F;KACF,CAAC;;yEACkE;AAGtE;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAAjC;QACE;;;;WAIG;QACH,qBAAgB,GAAG,MAAM,EAAW,CAAC;QAErC;;;;WAIG;QAKH,iBAAY,GAAG,MAAM,EAAY,CAAC;QAElC;;WAEG;QAKH,iBAAY,GAAG,MAAM,EAA2B,CAAC;QAEjD;;;;;;;;WAQG;QAKH,iBAAY,GAAG,MAAM,EAAY,CAAC;QAElC;;;WAGG;QAEH,kBAAa,GAAG,MAAM,EAAU,CAAC;IACnC,CAAC;CAAA;AAhCC;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA2C,EAAY,EAAE,CAAC,KAAK;QAC1E,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;0DACgC;AASlC;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA2C,EAAY,EAAE,CAAC,KAAK;QAC1E,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,KAAa,EAAW,EAAE,CAAE,uBAA6C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;KAChH,CAAC;;0DAC+C;AAejD;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA2C,EAAY,EAAE,CAAC,KAAK;QAC1E,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;0DACgC;AAOlC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;2DACP;AAGnC;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAAzC;QACE;;WAEG;QAEH,WAAM,GAAG,MAAM,EAAU,CAAC;QAE1B;;;WAGG;QACH,aAAQ,GAAG,MAAM,EAAW,CAAC;QAE7B;;;WAGG;QAEH,UAAK,GAAG,MAAM,EAAU,CAAC;IAC3B,CAAC;CAAA;AAdC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;4DACd;AAa1B;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;2DACf;AAG3B;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAA5C;QACE;;;WAGG;QAKH,0BAAqB,GAAI,MAAM,CAAgB,IAAI,CAAC,CAAC;QAErD;;;WAGG;QACH,uBAAkB,GAAI,MAAM,CAAU,IAAI,CAAC,CAAC;QAE5C;;WAEG;QAKH,iBAAY,GAAI,MAAM,CAAgC,YAAY,CAAC,CAAC;QAEpE;;WAEG;QAOH,mBAAc,GAAI,MAAM,CAAmC,IAAI,CAAC,CAAC;QAEjE;;;;WAIG;QAMH,kCAA6B,GAAI,MAAM,CAAgB,QAAQ,CAAC,CAAC;IACnE,CAAC;CAAA;AAvCC;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA+D,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;8EACmD;AAerD;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAsD,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,KAAa,EAAW,EAAE,CAAE,wBAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;KACjH,CAAC;;qEACkE;AAWpE;IANC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAwD,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,KAAa,EAAW,EAAE,CAAE,4BAAkD,CAAC,QAAQ,CAAC,KAAK,CAAC;SACxG;KACF,CAAC;;uEAC+D;AAYjE;IALC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAuE,EAAY,EAAE,CAC9F,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;sFAC+D;AAGnE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qCAAqC;IAAlD;QACE;;WAEG;QAKH,SAAI,GAAI,MAAM,CAA8B,IAAI,CAAC,CAAC;QAElD;;;WAGG;QAKH,kBAAa,GAAI,MAAM,CAAiC,EAAE,CAAC,CAAC;QAE5D;;;WAGG;QAEH,SAAI,GAAG,MAAM,EAAU,CAAC;QAExB;;;;;;;WAOG;QAKH,kBAAa,GAAI,MAAM,CAAW,EAAE,CAAC,CAAC;QAEtC;;WAEG;QAMH,oBAAe,GAAI,MAAM,CAAyC,IAAI,CAAC,CAAC;IAC1E,CAAC;CAAA;AA1CC;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAoD,EAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE;KACxD,CAAC;;mEACgD;AAUlD;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA6D,EAAkC,EAAE,CAAC,KAAM;QACnH,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE;KAChE,CAAC;;4EAC0D;AAO5D;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;mEAChB;AAcxB;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA6D,EAAY,EAAE,CAAC,KAAM;QAC7F,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;4EACoC;AAUtC;IALC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA+D,EAAqC,EAAE,CAC/G,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE;KACnE,CAAC;;8EACsE"}

package/dist/resources/cloudfront-distribution/cloudfront-response.schema.d.ts

@@ -0,0 +1,29 @@
+/**
+ * What the viewer gets when the origin answers with a status code CloudFront was told to handle.
+ *
+ * The same field set expresses opposite intents. A single-page app maps `403` and `404` to a `200`
+ * carrying `/index.html` with a short TTL, so the client-side router can take over; a content site
+ * maps them to a real `404` carrying an error page.
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export declare class CloudFrontCustomErrorResponseSchema {
+    /**
+     * How long CloudFront caches this error before asking the origin again, in seconds.
+     */
+    errorCachingMinTtl?: number | undefined;
+    /**
+     * The status code the origin answered with.
+     */
+    errorCode: number;
+    /**
+     * The status code the viewer sees.
+     */
+    responseCode: number;
+    /**
+     * The object served in place of the error, e.g. `/index.html`.
+     */
+    responsePagePath: string;
+}

package/dist/resources/cloudfront-distribution/cloudfront-response.schema.js

@@ -0,0 +1,58 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Schema, Validate } from '@quadnix/octo';
+/**
+ * What the viewer gets when the origin answers with a status code CloudFront was told to handle.
+ *
+ * The same field set expresses opposite intents. A single-page app maps `403` and `404` to a `200`
+ * carrying `/index.html` with a short TTL, so the client-side router can take over; a content site
+ * maps them to a real `404` carrying an error page.
+ *
+ * @group Resources/CloudFrontDistribution
+ *
+ * @hideconstructor
+ */
+export class CloudFrontCustomErrorResponseSchema {
+    constructor() {
+        /**
+         * How long CloudFront caches this error before asking the origin again, in seconds.
+         */
+        this.errorCachingMinTtl = Schema(10);
+        /**
+         * The status code the origin answered with.
+         */
+        this.errorCode = Schema();
+        /**
+         * The status code the viewer sees.
+         */
+        this.responseCode = Schema();
+        /**
+         * The object served in place of the error, e.g. `/index.html`.
+         */
+        this.responsePagePath = Schema();
+    }
+}
+__decorate([
+    Validate({ options: { minLength: 0 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomErrorResponseSchema.prototype, "errorCachingMinTtl", void 0);
+__decorate([
+    Validate({ options: { maxLength: 599, minLength: 100 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomErrorResponseSchema.prototype, "errorCode", void 0);
+__decorate([
+    Validate({ options: { maxLength: 599, minLength: 100 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomErrorResponseSchema.prototype, "responseCode", void 0);
+__decorate([
+    Validate({ options: { minLength: 1 } }),
+    __metadata("design:type", Object)
+], CloudFrontCustomErrorResponseSchema.prototype, "responsePagePath", void 0);
+//# sourceMappingURL=cloudfront-response.schema.js.map

package/dist/resources/cloudfront-distribution/cloudfront-response.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront-response.schema.js","sourceRoot":"","sources":["../../../src/resources/cloudfront-distribution/cloudfront-response.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,mCAAmC;IAAhD;QACE;;WAEG;QAEH,uBAAkB,GAAI,MAAM,CAAS,EAAE,CAAC,CAAC;QAEzC;;WAEG;QAEH,cAAS,GAAG,MAAM,EAAU,CAAC;QAE7B;;WAEG;QAEH,iBAAY,GAAG,MAAM,EAAU,CAAC;QAEhC;;WAEG;QAEH,qBAAgB,GAAG,MAAM,EAAU,CAAC;IACtC,CAAC;CAAA;AAnBC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;+EACC;AAMzC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;;sEAC7B;AAM7B;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;;yEAC1B;AAMhC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;6EACJ"}