@rio-cloud/cdk-v2-constructs 6.12.0 → 6.12.1

package/lib/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.d.ts

@@ -1,44 +1,78 @@
 import * as cloudfront from 'aws-cdk-lib/aws-cloudfront';
 import * as route53 from 'aws-cdk-lib/aws-route53';
 import { Construct } from 'constructs';
+import { CspDirectives } from './contentSecurityPolicy';
 /**
- * Properties for defining a RioCloudfrontDistribution
+ * @deprecated Please switch to the declarative CSP config. This function will be removed in the future.
  */
+export declare const createRioDefaultCSP: (additionalScriptSources?: string) => string;
+/** Properties for defining a RioCloudfrontDistribution. */
 export interface RioCloudfrontDistributionProps {
-    /**
-       * The reference to the S3 bucket containing the files to serve
-       */
+    /** The reference to the S3 bucket containing the files to serve. */
     readonly contentBucketName: string;
     /**
-       * The subdomain where the content should be served. If not given, an empty string, i.e. no subDomain will be used.
-       * Instead, the name of the hosted zone will be used directly.
+       * The subdomain where the content should be served.
+       *
+       * If not given, an empty string, i.e. no subDomain will be used. Instead, the name of the hosted zone will be used
+       * directly.
        */
     readonly subDomain?: string;
     /**
-       * The hosted zone of the domain under which the content will be served. If not given, the default hosted Zone
-       * provided by RIO setup will be used.
+       * The hosted zone of the domain under which the content will be served.
+       *
+       * If not given, the default hosted Zone provided by RIO setup will be used.
        */
     readonly hostedZone?: route53.IHostedZone;
     /**
        * The content Security Policy to be sent as a header when delivering the bucket content.
-       * If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog,
-       * as well as a hash to support google tagManger. The latter might need to be adapted if you change the minification of
+       *
+       * If not set, a rio Default will be used. The default should cover connections to split.io, sentry and datadog, as
+       * well as a hash to support google tagManger. The latter might need to be adapted if you change the minification of
        * the index.html, in which case you can provide your csp here.
+       *
+       * @deprecated Please use the declarative CSP config instead. See {@link cspConfig}.
        */
     readonly contentSecurityPolicy?: string;
     /**
-     * The list of functions to be associated with the default behaviour of the distribution.
-     * If not given, no functions will be assigned.
-     */
+       * Allows declaratively defining your desired CSP.
+       *
+       * The RIO defaults are always included, and you can choose which services you want to include (e.g. ConfigCat) or
+       * not. You can also provide custom directives / values using the "custom" key.
+       */
+    readonly cspConfig?: CspConfig;
+    /**
+       * The list of functions to be associated with the default behaviour of the distribution.
+       *
+       * If not given, no functions will be assigned.
+       */
     readonly functionAssociations?: cloudfront.FunctionAssociation[];
 }
-export declare const createRioDefaultCSP: (additionalScriptSources?: string) => string;
+export interface CspConfig {
+    /** Include Google Analytics / Google Tag manager. */
+    readonly googleAnalytics?: boolean;
+    /** Include Sentry. */
+    readonly sentry?: boolean;
+    /** Include Split.io. */
+    readonly split?: boolean;
+    /** Include Datadog. */
+    readonly datadog?: boolean;
+    /** Include ConfigCat. */
+    readonly configCat?: boolean;
+    /** Include Here Maps. */
+    readonly here?: boolean;
+    /** Prints the generated CSP to the console. */
+    readonly logOutput?: boolean;
+    /** You can define custom values for any CSP directive with this. */
+    readonly customDirectives?: CspDirectives;
+}
 /**
  * A Construct which creates a default cloudfront distribution using a s3 bucket as origin.
- * Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides basic security header.
  *
+ * Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides CSP settings.
  */
 export declare class RioCloudfrontDistribution extends Construct {
     readonly distribution: cloudfront.IDistribution;
     constructor(scope: Construct, id: string, props: RioCloudfrontDistributionProps);
+    private generateCsp;
 }
+export declare const createCspFromConfig: (cspConfig?: CspConfig) => string;

package/lib/contributions/cop-frontend/cloudfront/rio-cloudfront-distribution.js

@@ -1,7 +1,7 @@
 "use strict";
 var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RioCloudfrontDistribution = exports.createRioDefaultCSP = void 0;
+exports.createCspFromConfig = exports.RioCloudfrontDistribution = exports.createRioDefaultCSP = void 0;
 const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 const path = require("path");
 const aws_cdk_lib_1 = require("aws-cdk-lib");
@@ -13,15 +13,20 @@ const route53 = require("aws-cdk-lib/aws-route53");
 const targets = require("aws-cdk-lib/aws-route53-targets");
 const s3 = require("aws-cdk-lib/aws-s3");
 const constructs_1 = require("constructs");
+const contentSecurityPolicy_1 = require("./contentSecurityPolicy");
 const rio_claidometer_1 = require("../../../rio-claidometer");
 const rio_landing_zone_1 = require("../../../rio-landing-zone");
+// region Legacy CSP function
 const alwaysAllowedCSPSources = "'self' https://*.rio.cloud https://rio.cloud";
 // The hash in script src is for the google tagManager script included in the index.html
+/**
+ * @deprecated Please switch to the declarative CSP config. This function will be removed in the future.
+ */
 const createRioDefaultCSP = (additionalScriptSources) => `
        default-src ${alwaysAllowedCSPSources};
-       connect-src ${alwaysAllowedCSPSources} https://*.sentry.io https://sentry.io https://sdk.split.io https://*.datadoghq.eu https://*.browser-intake-datadoghq.eu https://cdn-eu.configcat.com https://browser-intake-datadoghq.eu;
+       connect-src ${alwaysAllowedCSPSources} https://*.sentry.io https://sentry.io https://sdk.split.io https://*.datadoghq.eu https://*.browser-intake-datadoghq.eu https://browser-intake-datadoghq.eu https://cdn-eu.configcat.com;
        font-src ${alwaysAllowedCSPSources} data:;
-       img-src ${alwaysAllowedCSPSources} www.googletagmanager.com data:;
+       img-src ${alwaysAllowedCSPSources} data: www.googletagmanager.com;
        object-src 'none';
        script-src ${alwaysAllowedCSPSources} https://www.googletagmanager.com
         'sha256-HDWAgfTeMAguT8wFw7+92Y7i4Eo/6RUQQuA3TW9JxbA='
@@ -30,15 +35,15 @@ const createRioDefaultCSP = (additionalScriptSources) => `
        base-uri 'self';
        form-action ${alwaysAllowedCSPSources};
        frame-ancestors ${alwaysAllowedCSPSources};
-       frame-src 'self' ${alwaysAllowedCSPSources};
+       frame-src ${alwaysAllowedCSPSources};
        `
     .replace(/[\r\n\s]+/g, ' ')
     .trim();
 exports.createRioDefaultCSP = createRioDefaultCSP;
 /**
  * A Construct which creates a default cloudfront distribution using a s3 bucket as origin.
- * Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides basic security header.
  *
+ * Intended for delivery of html documents. It sets some defaults a recommended by AWS and provides CSP settings.
  */
 class RioCloudfrontDistribution extends constructs_1.Construct {
     constructor(scope, id, props) {
@@ -46,8 +51,7 @@ class RioCloudfrontDistribution extends constructs_1.Construct {
         const hostedZone = props.hostedZone ?? rio_landing_zone_1.RioLandingZone.getDefaultHostedZone(this);
         const subDomain = props.subDomain ?? '';
         const domainName = props.subDomain === undefined ? hostedZone.zoneName : subDomain + '.' + hostedZone.zoneName;
-        const defaultContentSecurityPolicy = (0, exports.createRioDefaultCSP)();
-        const contentSecurityPolicy = props.contentSecurityPolicy ?? defaultContentSecurityPolicy;
+        const contentSecurityPolicy = this.generateCsp(props);
         const certificate = new acm.DnsValidatedCertificate(this, 'CloudfrontDistributionCertificate', {
             domainName: domainName,
             hostedZone: hostedZone,
@@ -63,20 +67,10 @@ class RioCloudfrontDistribution extends constructs_1.Construct {
             removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
             autoDeleteObjects: true,
             lifecycleRules: [
-                {
-                    id: 'ExpiresObjects',
-                    expiration: aws_cdk_lib_1.Duration.days(90),
-                    noncurrentVersionExpiration: aws_cdk_lib_1.Duration.days(30),
-                },
+                { id: 'ExpiresObjects', expiration: aws_cdk_lib_1.Duration.days(90), noncurrentVersionExpiration: aws_cdk_lib_1.Duration.days(30) },
             ],
             enforceSSL: true,
-            cors: [
-                {
-                    allowedMethods: [s3.HttpMethods.GET],
-                    allowedOrigins: ['*'],
-                    allowedHeaders: ['*'],
-                },
-            ],
+            cors: [{ allowedMethods: [s3.HttpMethods.GET], allowedOrigins: ['*'], allowedHeaders: ['*'] }],
         });
         bucket.grantRead(new iam.CanonicalUserPrincipal(originAccessIdentity.cloudFrontOriginAccessIdentityS3CanonicalUserId), '*');
         const responseHeadersPolicy = new cloudfront.ResponseHeadersPolicy(this, 'ResponseHeadersPolicy', {
@@ -90,26 +84,15 @@ class RioCloudfrontDistribution extends constructs_1.Construct {
                 originOverride: true,
             },
             securityHeadersBehavior: {
-                contentSecurityPolicy: {
-                    contentSecurityPolicy: contentSecurityPolicy,
-                    override: true,
-                },
+                contentSecurityPolicy: { contentSecurityPolicy: contentSecurityPolicy, override: true },
                 contentTypeOptions: { override: true },
                 frameOptions: { frameOption: cloudfront.HeadersFrameOption.DENY, override: true },
                 referrerPolicy: {
                     referrerPolicy: cloudfront.HeadersReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN,
                     override: true,
                 },
-                strictTransportSecurity: {
-                    accessControlMaxAge: aws_cdk_lib_1.Duration.days(365),
-                    includeSubdomains: true,
-                    override: true,
-                },
-                xssProtection: {
-                    protection: true,
-                    modeBlock: true,
-                    override: true,
-                },
+                strictTransportSecurity: { accessControlMaxAge: aws_cdk_lib_1.Duration.days(365), includeSubdomains: true, override: true },
+                xssProtection: { protection: true, modeBlock: true, override: true },
             },
         });
         this.distribution = new cloudfront.Distribution(this, 'Distribution', {
@@ -128,18 +111,8 @@ class RioCloudfrontDistribution extends constructs_1.Construct {
             defaultRootObject: 'index.html',
             minimumProtocolVersion: cloudfront.SecurityPolicyProtocol.TLS_V1_2_2018,
             errorResponses: [
-                {
-                    httpStatus: 404,
-                    responseHttpStatus: 200,
-                    responsePagePath: '/index.html',
-                    ttl: aws_cdk_lib_1.Duration.minutes(5),
-                },
-                {
-                    httpStatus: 403,
-                    responseHttpStatus: 200,
-                    responsePagePath: '/index.html',
-                    ttl: aws_cdk_lib_1.Duration.minutes(5),
-                },
+                { httpStatus: 404, responseHttpStatus: 200, responsePagePath: '/index.html', ttl: aws_cdk_lib_1.Duration.minutes(5) },
+                { httpStatus: 403, responseHttpStatus: 200, responsePagePath: '/index.html', ttl: aws_cdk_lib_1.Duration.minutes(5) },
             ],
         });
         new route53.RecordSet(this, 'RecordSet', {
@@ -153,11 +126,84 @@ class RioCloudfrontDistribution extends constructs_1.Construct {
             product: rio_claidometer_1.ClaidometerProduct.CDK_CONTRIBUTION,
             packageName,
             feature,
-            version: '0.0.4',
+            version: '0.0.5',
         });
     }
+    generateCsp({ cspConfig, contentSecurityPolicy }) {
+        if (contentSecurityPolicy) {
+            console.warn('[RioCloudFrontDistribution] You are using the deprecated "contentSecurityPolicy" property. Please update to the declarative "cspConfig". It will even save you a ton of code, trust me :)');
+            return contentSecurityPolicy;
+        }
+        if (!cspConfig) {
+            console.info('[RioCloudFrontDistribution] You did not provide a "cspConfig". The default CSP will be generated.');
+        }
+        const generatedConfig = (0, exports.createCspFromConfig)(cspConfig);
+        if (cspConfig?.logOutput) {
+            console.log(`[RioCloudFrontDistribution] Generated CSP:\n${generatedConfig}`);
+        }
+        return generatedConfig;
+    }
 }
 exports.RioCloudfrontDistribution = RioCloudfrontDistribution;
 _a = JSII_RTTI_SYMBOL_1;
 RioCloudfrontDistribution[_a] = { fqn: "@rio-cloud/cdk-v2-constructs.RioCloudfrontDistribution", version: "0.0.0" };
-//# sourceMappingURL=data:application/json;base64,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
+const createCspFromConfig = (cspConfig = DEFAULT_CSP_CONFIG) => {
+    const { googleAnalytics, sentry, split, datadog, configCat, here, customDirectives } = cspConfig;
+    const directiveObjects = [overallDefaults];
+    googleAnalytics && directiveObjects.push(googleAnalyticsDirectives);
+    sentry && directiveObjects.push(sentryDirectives);
+    split && directiveObjects.push(splitDirectives);
+    datadog && directiveObjects.push(datadogDirectives);
+    configCat && directiveObjects.push(configCatDirectives);
+    here && directiveObjects.push(hereDirectives);
+    customDirectives && directiveObjects.push(customDirectives);
+    return (0, contentSecurityPolicy_1.createCspFromDirectiveObjects)(directiveObjects);
+};
+exports.createCspFromConfig = createCspFromConfig;
+const DEFAULT_CSP_CONFIG = {
+    googleAnalytics: true,
+    sentry: true,
+    split: true,
+    datadog: true,
+    configCat: true,
+    here: false,
+};
+const RIO_AND_SELF = ["'self'", 'https://*.rio.cloud', 'https://rio.cloud'];
+const overallDefaults = {
+    defaultSrc: RIO_AND_SELF,
+    connectSrc: RIO_AND_SELF,
+    fontSrc: [...RIO_AND_SELF, 'data:'],
+    imgSrc: [...RIO_AND_SELF, 'data:'],
+    objectSrc: ["'none'"],
+    scriptSrc: RIO_AND_SELF,
+    styleSrc: [...RIO_AND_SELF, "'unsafe-inline'"],
+    baseUri: ["'self'"],
+    formAction: RIO_AND_SELF,
+    frameAncestors: RIO_AND_SELF,
+    frameSrc: RIO_AND_SELF,
+};
+const googleAnalyticsDirectives = {
+    imgSrc: ['www.googletagmanager.com'],
+    scriptSrc: ['https://www.googletagmanager.com', "'sha256-HDWAgfTeMAguT8wFw7+92Y7i4Eo/6RUQQuA3TW9JxbA='"],
+};
+const sentryDirectives = {
+    connectSrc: ['https://*.sentry.io', 'https://sentry.io'],
+};
+const splitDirectives = {
+    connectSrc: ['https://sdk.split.io'],
+};
+const datadogDirectives = {
+    connectSrc: ['https://*.datadoghq.eu', 'https://*.browser-intake-datadoghq.eu', 'https://browser-intake-datadoghq.eu'],
+};
+const configCatDirectives = {
+    connectSrc: ['https://cdn-eu.configcat.com'],
+};
+const hereDirectives = {
+    defaultSrc: ['*.js.api.here.com'],
+    connectSrc: ['https://*.hereapi.com', 'https://*.api.here.com'],
+    fontSrc: ['https://js.api.here.com'],
+    imgSrc: ['js.api.here.com'],
+    scriptSrc: ['https://*.hereapi.com https://*.api.here.com'],
+    styleSrc: ['*.here.com'],
+};
+//# sourceMappingURL=data:application/json;base64,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