@rio-cloud/cdk-v2-constructs 6.12.0 → 6.12.1

package/docs/API.md

@@ -4616,7 +4616,7 @@ public readonly mainCodebuildProject: CodeBuildStep;
 
 A Construct which creates a default cloudfront distribution using a s3 bucket as origin.
 
-Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides basic security header.
+Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides CSP settings.
 
 #### Initializers <a name="Initializers" id="@rio-cloud/cdk-v2-constructs.RioCloudfrontDistribution.Initializer"></a>
 
@@ -9034,6 +9034,386 @@ The secret environment variables to pass to the container.
 
 ---
 
+### CspConfig <a name="CspConfig" id="@rio-cloud/cdk-v2-constructs.CspConfig"></a>
+
+#### Initializer <a name="Initializer" id="@rio-cloud/cdk-v2-constructs.CspConfig.Initializer"></a>
+
+```typescript
+import { CspConfig } from '@rio-cloud/cdk-v2-constructs'
+
+const cspConfig: CspConfig = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.configCat">configCat</a></code> | <code>boolean</code> | Include ConfigCat. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.customDirectives">customDirectives</a></code> | <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives">CspDirectives</a></code> | You can define custom values for any CSP directive with this. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.datadog">datadog</a></code> | <code>boolean</code> | Include Datadog. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.googleAnalytics">googleAnalytics</a></code> | <code>boolean</code> | Include Google Analytics / Google Tag manager. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.here">here</a></code> | <code>boolean</code> | Include Here Maps. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.logOutput">logOutput</a></code> | <code>boolean</code> | Prints the generated CSP to the console. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.sentry">sentry</a></code> | <code>boolean</code> | Include Sentry. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig.property.split">split</a></code> | <code>boolean</code> | Include Split.io. |
+
+---
+
+##### `configCat`<sup>Optional</sup> <a name="configCat" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.configCat"></a>
+
+```typescript
+public readonly configCat: boolean;
+```
+
+- *Type:* boolean
+
+Include ConfigCat.
+
+---
+
+##### `customDirectives`<sup>Optional</sup> <a name="customDirectives" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.customDirectives"></a>
+
+```typescript
+public readonly customDirectives: CspDirectives;
+```
+
+- *Type:* <a href="#@rio-cloud/cdk-v2-constructs.CspDirectives">CspDirectives</a>
+
+You can define custom values for any CSP directive with this.
+
+---
+
+##### `datadog`<sup>Optional</sup> <a name="datadog" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.datadog"></a>
+
+```typescript
+public readonly datadog: boolean;
+```
+
+- *Type:* boolean
+
+Include Datadog.
+
+---
+
+##### `googleAnalytics`<sup>Optional</sup> <a name="googleAnalytics" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.googleAnalytics"></a>
+
+```typescript
+public readonly googleAnalytics: boolean;
+```
+
+- *Type:* boolean
+
+Include Google Analytics / Google Tag manager.
+
+---
+
+##### `here`<sup>Optional</sup> <a name="here" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.here"></a>
+
+```typescript
+public readonly here: boolean;
+```
+
+- *Type:* boolean
+
+Include Here Maps.
+
+---
+
+##### `logOutput`<sup>Optional</sup> <a name="logOutput" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.logOutput"></a>
+
+```typescript
+public readonly logOutput: boolean;
+```
+
+- *Type:* boolean
+
+Prints the generated CSP to the console.
+
+---
+
+##### `sentry`<sup>Optional</sup> <a name="sentry" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.sentry"></a>
+
+```typescript
+public readonly sentry: boolean;
+```
+
+- *Type:* boolean
+
+Include Sentry.
+
+---
+
+##### `split`<sup>Optional</sup> <a name="split" id="@rio-cloud/cdk-v2-constructs.CspConfig.property.split"></a>
+
+```typescript
+public readonly split: boolean;
+```
+
+- *Type:* boolean
+
+Include Split.io.
+
+---
+
+### CspDirectives <a name="CspDirectives" id="@rio-cloud/cdk-v2-constructs.CspDirectives"></a>
+
+#### Initializer <a name="Initializer" id="@rio-cloud/cdk-v2-constructs.CspDirectives.Initializer"></a>
+
+```typescript
+import { CspDirectives } from '@rio-cloud/cdk-v2-constructs'
+
+const cspDirectives: CspDirectives = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.baseUri">baseUri</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.childSrc">childSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.connectSrc">connectSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.defaultSrc">defaultSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.fontSrc">fontSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.formAction">formAction</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.frameAncestors">frameAncestors</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.frameSrc">frameSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.imgSrc">imgSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.manifestSrc">manifestSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.mediaSrc">mediaSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.objectSrc">objectSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.reportTo">reportTo</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.sandbox">sandbox</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrc">scriptSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrcAttr">scriptSrcAttr</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrcElem">scriptSrcElem</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrc">styleSrc</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrcAttr">styleSrcAttr</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrcElem">styleSrcElem</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.upgradeInsecureRequests">upgradeInsecureRequests</a></code> | <code>string[]</code> | *No description.* |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.CspDirectives.property.workerSrc">workerSrc</a></code> | <code>string[]</code> | *No description.* |
+
+---
+
+##### `baseUri`<sup>Optional</sup> <a name="baseUri" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.baseUri"></a>
+
+```typescript
+public readonly baseUri: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `childSrc`<sup>Optional</sup> <a name="childSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.childSrc"></a>
+
+```typescript
+public readonly childSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `connectSrc`<sup>Optional</sup> <a name="connectSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.connectSrc"></a>
+
+```typescript
+public readonly connectSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `defaultSrc`<sup>Optional</sup> <a name="defaultSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.defaultSrc"></a>
+
+```typescript
+public readonly defaultSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `fontSrc`<sup>Optional</sup> <a name="fontSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.fontSrc"></a>
+
+```typescript
+public readonly fontSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `formAction`<sup>Optional</sup> <a name="formAction" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.formAction"></a>
+
+```typescript
+public readonly formAction: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `frameAncestors`<sup>Optional</sup> <a name="frameAncestors" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.frameAncestors"></a>
+
+```typescript
+public readonly frameAncestors: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `frameSrc`<sup>Optional</sup> <a name="frameSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.frameSrc"></a>
+
+```typescript
+public readonly frameSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `imgSrc`<sup>Optional</sup> <a name="imgSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.imgSrc"></a>
+
+```typescript
+public readonly imgSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `manifestSrc`<sup>Optional</sup> <a name="manifestSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.manifestSrc"></a>
+
+```typescript
+public readonly manifestSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `mediaSrc`<sup>Optional</sup> <a name="mediaSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.mediaSrc"></a>
+
+```typescript
+public readonly mediaSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `objectSrc`<sup>Optional</sup> <a name="objectSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.objectSrc"></a>
+
+```typescript
+public readonly objectSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `reportTo`<sup>Optional</sup> <a name="reportTo" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.reportTo"></a>
+
+```typescript
+public readonly reportTo: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `sandbox`<sup>Optional</sup> <a name="sandbox" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.sandbox"></a>
+
+```typescript
+public readonly sandbox: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `scriptSrc`<sup>Optional</sup> <a name="scriptSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrc"></a>
+
+```typescript
+public readonly scriptSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `scriptSrcAttr`<sup>Optional</sup> <a name="scriptSrcAttr" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrcAttr"></a>
+
+```typescript
+public readonly scriptSrcAttr: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `scriptSrcElem`<sup>Optional</sup> <a name="scriptSrcElem" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.scriptSrcElem"></a>
+
+```typescript
+public readonly scriptSrcElem: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `styleSrc`<sup>Optional</sup> <a name="styleSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrc"></a>
+
+```typescript
+public readonly styleSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `styleSrcAttr`<sup>Optional</sup> <a name="styleSrcAttr" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrcAttr"></a>
+
+```typescript
+public readonly styleSrcAttr: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `styleSrcElem`<sup>Optional</sup> <a name="styleSrcElem" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.styleSrcElem"></a>
+
+```typescript
+public readonly styleSrcElem: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `upgradeInsecureRequests`<sup>Optional</sup> <a name="upgradeInsecureRequests" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.upgradeInsecureRequests"></a>
+
+```typescript
+public readonly upgradeInsecureRequests: string[];
+```
+
+- *Type:* string[]
+
+---
+
+##### `workerSrc`<sup>Optional</sup> <a name="workerSrc" id="@rio-cloud/cdk-v2-constructs.CspDirectives.property.workerSrc"></a>
+
+```typescript
+public readonly workerSrc: string[];
+```
+
+- *Type:* string[]
+
+---
+
 ### DatadogDashboardProps <a name="DatadogDashboardProps" id="@rio-cloud/cdk-v2-constructs.datadogv2.DatadogDashboardProps"></a>
 
 #### Initializer <a name="Initializer" id="@rio-cloud/cdk-v2-constructs.datadogv2.DatadogDashboardProps.Initializer"></a>
@@ -14061,6 +14441,7 @@ const rioCloudfrontDistributionProps: RioCloudfrontDistributionProps = { ... }
 | --- | --- | --- |
 | <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.contentBucketName">contentBucketName</a></code> | <code>string</code> | The reference to the S3 bucket containing the files to serve. |
 | <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.contentSecurityPolicy">contentSecurityPolicy</a></code> | <code>string</code> | The content Security Policy to be sent as a header when delivering the bucket content. |
+| <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.cspConfig">cspConfig</a></code> | <code><a href="#@rio-cloud/cdk-v2-constructs.CspConfig">CspConfig</a></code> | Allows declaratively defining your desired CSP. |
 | <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.functionAssociations">functionAssociations</a></code> | <code>aws-cdk-lib.aws_cloudfront.FunctionAssociation[]</code> | The list of functions to be associated with the default behaviour of the distribution. |
 | <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | The hosted zone of the domain under which the content will be served. |
 | <code><a href="#@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.subDomain">subDomain</a></code> | <code>string</code> | The subdomain where the content should be served. |
@@ -14079,7 +14460,9 @@ The reference to the S3 bucket containing the files to serve.
 
 ---
 
-##### `contentSecurityPolicy`<sup>Optional</sup> <a name="contentSecurityPolicy" id="@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.contentSecurityPolicy"></a>
+##### ~~`contentSecurityPolicy`~~<sup>Optional</sup> <a name="contentSecurityPolicy" id="@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.contentSecurityPolicy"></a>
+
+- *Deprecated:* Please use the declarative CSP config instead. See {@link cspConfig }.
 
 ```typescript
 public readonly contentSecurityPolicy: string;
@@ -14089,12 +14472,27 @@ public readonly contentSecurityPolicy: string;
 
 The content Security Policy to be sent as a header when delivering the bucket content.
 
-If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog,
-as well as a hash to support google tagManger. The latter might need to be adapted if you change the minification of
+If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog, as
+well as a hash to support google tagManger. The latter might need to be adapted if you change the minification of
 the index.html, in which case you can provide your csp here.
 
 ---
 
+##### `cspConfig`<sup>Optional</sup> <a name="cspConfig" id="@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.cspConfig"></a>
+
+```typescript
+public readonly cspConfig: CspConfig;
+```
+
+- *Type:* <a href="#@rio-cloud/cdk-v2-constructs.CspConfig">CspConfig</a>
+
+Allows declaratively defining your desired CSP.
+
+The RIO defaults are always included, and you can choose which services you want to include (e.g. ConfigCat) or
+not. You can also provide custom directives / values using the "custom" key.
+
+---
+
 ##### `functionAssociations`<sup>Optional</sup> <a name="functionAssociations" id="@rio-cloud/cdk-v2-constructs.RioCloudfrontDistributionProps.property.functionAssociations"></a>
 
 ```typescript
@@ -14119,8 +14517,7 @@ public readonly hostedZone: IHostedZone;
 
 The hosted zone of the domain under which the content will be served.
 
-If not given, the default hosted Zone
-provided by RIO setup will be used.
+If not given, the default hosted Zone provided by RIO setup will be used.
 
 ---
 
@@ -14134,8 +14531,8 @@ public readonly subDomain: string;
 
 The subdomain where the content should be served.
 
-If not given, an empty string, i.e. no subDomain will be used.
-Instead, the name of the hosted zone will be used directly.
+If not given, an empty string, i.e. no subDomain will be used. Instead, the name of the hosted zone will be used
+directly.
 
 ---
 

package/docs/changelog.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
+## [6.12.1](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv6.12.0&sourceBranch=refs%2Ftags%2Fv6.12.1) (2024-10-29)
+
 ## [6.12.0](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv6.12.0-beta.0&sourceBranch=refs%2Ftags%2Fv6.12.0) (2024-10-22)
 
 ## [6.12.0-beta.0](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv6.11.0&sourceBranch=refs%2Ftags%2Fv6.12.0-beta.0) (2024-10-21)

package/lib/contributions/cop-frontend/cloudfront/contentSecurityPolicy.d.ts

@@ -0,0 +1,26 @@
+export interface CspDirectives {
+    readonly 'defaultSrc'?: string[];
+    readonly 'connectSrc'?: string[];
+    readonly 'fontSrc'?: string[];
+    readonly 'imgSrc'?: string[];
+    readonly 'manifestSrc'?: string[];
+    readonly 'mediaSrc'?: string[];
+    readonly 'objectSrc'?: string[];
+    readonly 'scriptSrc'?: string[];
+    readonly 'scriptSrcElem'?: string[];
+    readonly 'scriptSrcAttr'?: string[];
+    readonly 'styleSrc'?: string[];
+    readonly 'styleSrcElem'?: string[];
+    readonly 'styleSrcAttr'?: string[];
+    readonly 'workerSrc'?: string[];
+    readonly 'baseUri'?: string[];
+    readonly 'sandbox'?: string[];
+    readonly 'formAction'?: string[];
+    readonly 'frameAncestors'?: string[];
+    readonly 'frameSrc'?: string[];
+    readonly 'reportTo'?: string[];
+    readonly 'upgradeInsecureRequests'?: string[];
+    readonly 'childSrc'?: string[];
+}
+export declare const createCspFromDirectiveObjects: (directiveObjects: CspDirectives[]) => string;
+export declare const camelToDash: (str: string) => string;

package/lib/contributions/cop-frontend/cloudfront/contentSecurityPolicy.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.camelToDash = exports.createCspFromDirectiveObjects = void 0;
+const createCspFromDirectiveObjects = (directiveObjects) => {
+    const directiveMap = new Map();
+    for (const directiveObject of directiveObjects) {
+        for (const key of Object.keys(directiveObject)) {
+            const directiveName = key;
+            if (!directiveMap.has(directiveName)) {
+                directiveMap.set(directiveName, new Set());
+            }
+            for (const value of directiveObject[directiveName]) {
+                directiveMap.get(directiveName).add(value);
+            }
+        }
+    }
+    const output = [];
+    for (const directive of ORDERED_DIRECTIVE_NAMES) {
+        const values = directiveMap.get(directive);
+        if (values) {
+            output.push(`${(0, exports.camelToDash)(directive)} ${Array.from(values).join(' ')};`);
+        }
+    }
+    return output.join(' ').replace(/[\r\n\s]+/g, ' ').trim();
+};
+exports.createCspFromDirectiveObjects = createCspFromDirectiveObjects;
+const camelToDash = (str) => {
+    if (str != str.toLowerCase()) {
+        str = str.replace(/[A-Z]/g, m => '-' + m.toLowerCase());
+    }
+    return str;
+};
+exports.camelToDash = camelToDash;
+const ORDERED_DIRECTIVE_NAMES = [
+    'defaultSrc',
+    'connectSrc',
+    'fontSrc',
+    'imgSrc',
+    'manifestSrc',
+    'mediaSrc',
+    'objectSrc',
+    'scriptSrc',
+    'scriptSrcElem',
+    'scriptSrcAttr',
+    'styleSrc',
+    'styleSrcElem',
+    'styleSrcAttr',
+    'workerSrc',
+    'baseUri',
+    'sandbox',
+    'formAction',
+    'frameAncestors',
+    'frameSrc',
+    'reportTo',
+    'upgradeInsecureRequests',
+    'childSrc',
+];
+//# sourceMappingURL=data:application/json;base64,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

package/lib/contributions/cop-frontend/cloudfront/index.d.ts

@@ -1 +1,2 @@
 export * from './rio-cloudfront-distribution';
+export { CspDirectives, createCspFromDirectiveObjects } from './contentSecurityPolicy';

package/lib/contributions/cop-frontend/cloudfront/index.js

@@ -14,5 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCspFromDirectiveObjects = void 0;
 __exportStar(require("./rio-cloudfront-distribution"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvY29udHJpYnV0aW9ucy9jb3AtZnJvbnRlbmQvY2xvdWRmcm9udC9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsZ0VBQThDIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSAnLi9yaW8tY2xvdWRmcm9udC1kaXN0cmlidXRpb24nO1xuIl19
+var contentSecurityPolicy_1 = require("./contentSecurityPolicy");
+Object.defineProperty(exports, "createCspFromDirectiveObjects", { enumerable: true, get: function () { return contentSecurityPolicy_1.createCspFromDirectiveObjects; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvY29udHJpYnV0aW9ucy9jb3AtZnJvbnRlbmQvY2xvdWRmcm9udC9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLGdFQUE4QztBQUM5QyxpRUFBdUY7QUFBL0Qsc0lBQUEsNkJBQTZCLE9BQUEiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL3Jpby1jbG91ZGZyb250LWRpc3RyaWJ1dGlvbic7XG5leHBvcnQgeyBDc3BEaXJlY3RpdmVzLCBjcmVhdGVDc3BGcm9tRGlyZWN0aXZlT2JqZWN0cyB9IGZyb20gJy4vY29udGVudFNlY3VyaXR5UG9saWN5JztcbiJdfQ==