@rio-cloud/cdk-v2-constructs 9.0.0-alpha.2 → 9.0.0-alpha.3

package/.jsii

@@ -10,10 +10,12 @@
   "bundled": {
     "@aws-lambda-powertools/logger": "^2.10.0",
     "@aws-lambda-powertools/parameters": "^2.10.0",
+    "@aws-sdk/client-acm": "^3.1036.0",
     "@aws-sdk/client-cloudformation": "^3.1036.0",
     "@aws-sdk/client-codedeploy": "^3.1036.0",
     "@aws-sdk/client-ecs": "3.1036.0",
     "@aws-sdk/client-organizations": "^3.1036.0",
+    "@aws-sdk/client-route-53": "^3.1036.0",
     "@aws-sdk/client-s3": "^3.1036.0",
     "@aws-sdk/client-secrets-manager": "^3.1036.0",
     "@aws-sdk/client-ssm": "^3.1036.0",
@@ -9885,49 +9887,49 @@
     "@rio-cloud/cdk-v2-constructs.datadog": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 4
+        "line": 5
       },
       "symbolId": "src/datadog/index:"
     },
     "@rio-cloud/cdk-v2-constructs.datadogv2": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 5
+        "line": 6
       },
       "symbolId": "src/datadogv2/index:"
     },
     "@rio-cloud/cdk-v2-constructs.ecr": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 6
+        "line": 7
       },
       "symbolId": "src/ecr/index:"
     },
     "@rio-cloud/cdk-v2-constructs.fargate": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 7
+        "line": 8
       },
       "symbolId": "src/fargate/index:"
     },
     "@rio-cloud/cdk-v2-constructs.kafka": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 12
+        "line": 13
       },
       "symbolId": "src/kafka/index:"
     },
     "@rio-cloud/cdk-v2-constructs.ses": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 19
+        "line": 20
       },
       "symbolId": "src/ses/index:"
     },
     "@rio-cloud/cdk-v2-constructs.watchfulv2": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 22
+        "line": 23
       },
       "symbolId": "src/watchfulv2/index:"
     }
@@ -10803,6 +10805,119 @@
       "name": "ClassifyPipelineType",
       "symbolId": "src/pipeline/rio-pipeline-type:ClassifyPipelineType"
     },
+    "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "Deployment waits for DNS validation before exposing the certificate ARN.\nAll instances in a stack share the provider and its singleton Lambda handlers.\nDomain or hosted zone changes replace the certificate. Validation CNAMEs are\nretained on deletion because ACM can share them with other certificates.",
+        "stability": "stable",
+        "summary": "Creates an ACM certificate in us-east-1, regardless of the stack region."
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "src/certificate/cloud-front-certificate.ts",
+          "line": 30
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/certificate/cloud-front-certificate.ts",
+        "line": 26
+      },
+      "name": "CloudFrontCertificate",
+      "properties": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "ARN of the issued certificate, suitable for Certificate.fromCertificateArn."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 28
+          },
+          "name": "certificateArn",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/certificate/cloud-front-certificate:CloudFrontCertificate"
+    },
+    "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Properties for a DNS-validated CloudFront certificate."
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/certificate/cloud-front-certificate.ts",
+        "line": 12
+      },
+      "name": "CloudFrontCertificateProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Domain name to certify, including a wildcard if required."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 14
+          },
+          "name": "domainName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Public Route 53 hosted zone in this account containing the domain."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 16
+          },
+          "name": "hostedZone",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_route53.IHostedZone"
+          }
+        }
+      ],
+      "symbolId": "src/certificate/cloud-front-certificate:CloudFrontCertificateProps"
+    },
     "@rio-cloud/cdk-v2-constructs.ComparisonOperator": {
       "assembly": "@rio-cloud/cdk-v2-constructs",
       "docs": {
@@ -19601,10 +19716,10 @@
                     "union": {
                       "types": [
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.Function"
+                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
                         },
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
+                          "fqn": "aws-cdk-lib.aws_lambda.Function"
                         }
                       ]
                     }
@@ -19647,10 +19762,10 @@
                     "union": {
                       "types": [
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.Function"
+                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
                         },
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
+                          "fqn": "aws-cdk-lib.aws_lambda.Function"
                         }
                       ]
                     }
@@ -26261,5 +26376,5 @@
     }
   },
   "version": "0.0.0",
-  "fingerprint": "7m6iygKyWFALUrzvCDgwerfgWd6qRZ3FCpQG49QHMtc="
+  "fingerprint": "rcJEUwt42IfRzIORo0OM1R/suaTHbkRlthLzucEFZ6M="
 }

package/lib/certificate/cloud-front-certificate.d.ts

@@ -0,0 +1,21 @@
+import * as route53 from 'aws-cdk-lib/aws-route53';
+import { Construct } from 'constructs';
+/** Properties for a DNS-validated CloudFront certificate. */
+export interface CloudFrontCertificateProps {
+    /** Domain name to certify, including a wildcard if required. */
+    readonly domainName: string;
+    /** Public Route 53 hosted zone in this account containing the domain. */
+    readonly hostedZone: route53.IHostedZone;
+}
+/**
+ * Creates an ACM certificate in us-east-1, regardless of the stack region.
+ * Deployment waits for DNS validation before exposing the certificate ARN.
+ * All instances in a stack share the provider and its singleton Lambda handlers.
+ * Domain or hosted zone changes replace the certificate. Validation CNAMEs are
+ * retained on deletion because ACM can share them with other certificates.
+ */
+export declare class CloudFrontCertificate extends Construct {
+    /** ARN of the issued certificate, suitable for Certificate.fromCertificateArn. */
+    readonly certificateArn: string;
+    constructor(scope: Construct, id: string, props: CloudFrontCertificateProps);
+}

package/lib/certificate/cloud-front-certificate.js

@@ -0,0 +1,104 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudFrontCertificate = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const iam = require("aws-cdk-lib/aws-iam");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const logs = require("aws-cdk-lib/aws-logs");
+const custom_resources_1 = require("aws-cdk-lib/custom-resources");
+const constructs_1 = require("constructs");
+const path = require("path");
+const constants_1 = require("../constants");
+/**
+ * Creates an ACM certificate in us-east-1, regardless of the stack region.
+ * Deployment waits for DNS validation before exposing the certificate ARN.
+ * All instances in a stack share the provider and its singleton Lambda handlers.
+ * Domain or hosted zone changes replace the certificate. Validation CNAMEs are
+ * retained on deletion because ACM can share them with other certificates.
+ */
+class CloudFrontCertificate extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const provider = certificateProvider(aws_cdk_lib_1.Stack.of(this));
+        const hostedZoneId = props.hostedZone.hostedZoneId;
+        provider.isCompleteHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ['route53:ChangeResourceRecordSets'],
+            resources: [
+                aws_cdk_lib_1.Stack.of(this).formatArn({
+                    service: 'route53',
+                    region: '',
+                    account: '',
+                    resource: 'hostedzone',
+                    resourceName: hostedZoneId,
+                }),
+            ],
+            conditions: {
+                'ForAllValues:StringEquals': {
+                    'route53:ChangeResourceRecordSetsRecordTypes': ['CNAME'],
+                    'route53:ChangeResourceRecordSetsActions': ['UPSERT'],
+                },
+            },
+        }));
+        const resource = new aws_cdk_lib_1.CustomResource(this, 'Resource', {
+            resourceType: 'Custom::CloudFrontCertificate',
+            serviceToken: provider.serviceToken,
+            properties: { DomainName: props.domainName, HostedZoneId: hostedZoneId },
+        });
+        this.certificateArn = resource.getAttString('CertificateArn');
+    }
+}
+exports.CloudFrontCertificate = CloudFrontCertificate;
+_a = JSII_RTTI_SYMBOL_1;
+CloudFrontCertificate[_a] = { fqn: "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate", version: "0.0.0" };
+function certificateProvider(stack) {
+    const providerId = 'CloudFrontCertificateProvider';
+    const existing = stack.node.tryFindChild(providerId);
+    if (existing)
+        return existing;
+    const logGroup = new logs.LogGroup(stack, 'CloudFrontCertificateHandlerLogs', {
+        retention: logs.RetentionDays.ONE_WEEK,
+    });
+    const common = {
+        runtime: constants_1.DEFAULT_NODE_RUNTIME,
+        architecture: lambda.Architecture.ARM_64,
+        code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), { exclude: ['*.js', '*.d.ts'] }),
+        timeout: aws_cdk_lib_1.Duration.minutes(1),
+        logGroup,
+    };
+    const certificateArns = [
+        stack.formatArn({ service: 'acm', region: 'us-east-1', resource: 'certificate', resourceName: '*' }),
+    ];
+    const onEvent = new lambda.SingletonFunction(stack, 'CloudFrontCertificateOnEvent', {
+        ...common,
+        uuid: '4762d50e-e44e-4995-8c6c-51fa59e62373',
+        lambdaPurpose: 'CloudFrontCertificateOnEvent',
+        handler: 'handler.onEvent',
+        initialPolicy: [
+            new iam.PolicyStatement({
+                actions: ['acm:RequestCertificate'],
+                resources: ['*'],
+            }),
+        ],
+    });
+    const isComplete = new lambda.SingletonFunction(stack, 'CloudFrontCertificateIsComplete', {
+        ...common,
+        uuid: '4673d9de-d91e-49c5-8d9f-c47d9e16d0ee',
+        lambdaPurpose: 'CloudFrontCertificateIsComplete',
+        handler: 'handler.isComplete',
+        initialPolicy: [
+            new iam.PolicyStatement({
+                actions: ['acm:DescribeCertificate', 'acm:DeleteCertificate'],
+                resources: certificateArns,
+            }),
+        ],
+    });
+    return new custom_resources_1.Provider(stack, providerId, {
+        onEventHandler: onEvent,
+        isCompleteHandler: isComplete,
+        queryInterval: aws_cdk_lib_1.Duration.seconds(30),
+        totalTimeout: aws_cdk_lib_1.Duration.minutes(60),
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/certificate/index.d.ts

@@ -0,0 +1 @@
+export * from './cloud-front-certificate';

package/lib/certificate/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cloud-front-certificate"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2VydGlmaWNhdGUvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDREQUEwQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vY2xvdWQtZnJvbnQtY2VydGlmaWNhdGUnO1xuIl19