@rio-cloud/cdk-v2-constructs 9.0.0-alpha.2 → 9.0.0-alpha.4

package/.jsii

@@ -10,10 +10,12 @@
   "bundled": {
     "@aws-lambda-powertools/logger": "^2.10.0",
     "@aws-lambda-powertools/parameters": "^2.10.0",
+    "@aws-sdk/client-acm": "^3.1036.0",
     "@aws-sdk/client-cloudformation": "^3.1036.0",
     "@aws-sdk/client-codedeploy": "^3.1036.0",
     "@aws-sdk/client-ecs": "3.1036.0",
     "@aws-sdk/client-organizations": "^3.1036.0",
+    "@aws-sdk/client-route-53": "^3.1036.0",
     "@aws-sdk/client-s3": "^3.1036.0",
     "@aws-sdk/client-secrets-manager": "^3.1036.0",
     "@aws-sdk/client-ssm": "^3.1036.0",
@@ -9885,49 +9887,49 @@
     "@rio-cloud/cdk-v2-constructs.datadog": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 4
+        "line": 5
       },
       "symbolId": "src/datadog/index:"
     },
     "@rio-cloud/cdk-v2-constructs.datadogv2": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 5
+        "line": 6
       },
       "symbolId": "src/datadogv2/index:"
     },
     "@rio-cloud/cdk-v2-constructs.ecr": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 6
+        "line": 7
       },
       "symbolId": "src/ecr/index:"
     },
     "@rio-cloud/cdk-v2-constructs.fargate": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 7
+        "line": 8
       },
       "symbolId": "src/fargate/index:"
     },
     "@rio-cloud/cdk-v2-constructs.kafka": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 12
+        "line": 13
       },
       "symbolId": "src/kafka/index:"
     },
     "@rio-cloud/cdk-v2-constructs.ses": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 19
+        "line": 20
       },
       "symbolId": "src/ses/index:"
     },
     "@rio-cloud/cdk-v2-constructs.watchfulv2": {
       "locationInModule": {
         "filename": "src/index.ts",
-        "line": 22
+        "line": 23
       },
       "symbolId": "src/watchfulv2/index:"
     }
@@ -10803,6 +10805,134 @@
       "name": "ClassifyPipelineType",
       "symbolId": "src/pipeline/rio-pipeline-type:ClassifyPipelineType"
     },
+    "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "Deployment waits for DNS validation before exposing the certificate ARN.\nAll instances in a stack share the provider and its singleton Lambda handlers.\nDomain or hosted zone changes replace the certificate. Validation CNAMEs are\nretained on deletion because ACM can share them with other certificates.",
+        "stability": "stable",
+        "summary": "Creates an ACM certificate in us-east-1, regardless of the stack region."
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "src/certificate/cloud-front-certificate.ts",
+          "line": 34
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/certificate/cloud-front-certificate.ts",
+        "line": 27
+      },
+      "name": "CloudFrontCertificate",
+      "properties": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Certificate reference that can be passed directly to CDK constructs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 32
+          },
+          "name": "certificate",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_certificatemanager.ICertificate"
+          }
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "ARN of the issued certificate, suitable for Certificate.fromCertificateArn."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 29
+          },
+          "name": "certificateArn",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/certificate/cloud-front-certificate:CloudFrontCertificate"
+    },
+    "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps": {
+      "assembly": "@rio-cloud/cdk-v2-constructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Properties for a DNS-validated CloudFront certificate."
+      },
+      "fqn": "@rio-cloud/cdk-v2-constructs.CloudFrontCertificateProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/certificate/cloud-front-certificate.ts",
+        "line": 13
+      },
+      "name": "CloudFrontCertificateProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Domain name to certify, including a wildcard if required."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 15
+          },
+          "name": "domainName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Public Route 53 hosted zone in this account containing the domain."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/certificate/cloud-front-certificate.ts",
+            "line": 17
+          },
+          "name": "hostedZone",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_route53.IHostedZone"
+          }
+        }
+      ],
+      "symbolId": "src/certificate/cloud-front-certificate:CloudFrontCertificateProps"
+    },
     "@rio-cloud/cdk-v2-constructs.ComparisonOperator": {
       "assembly": "@rio-cloud/cdk-v2-constructs",
       "docs": {
@@ -19601,10 +19731,10 @@
                     "union": {
                       "types": [
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.Function"
+                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
                         },
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
+                          "fqn": "aws-cdk-lib.aws_lambda.Function"
                         }
                       ]
                     }
@@ -19647,10 +19777,10 @@
                     "union": {
                       "types": [
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.Function"
+                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
                         },
                         {
-                          "fqn": "aws-cdk-lib.aws_lambda.SingletonFunction"
+                          "fqn": "aws-cdk-lib.aws_lambda.Function"
                         }
                       ]
                     }
@@ -26261,5 +26391,5 @@
     }
   },
   "version": "0.0.0",
-  "fingerprint": "7m6iygKyWFALUrzvCDgwerfgWd6qRZ3FCpQG49QHMtc="
+  "fingerprint": "DM0z77ZqYH2Ll9DPbqGYVtKiVTvy9jG0XDPvlY1THiQ="
 }

package/lib/certificate/cloud-front-certificate.d.ts

@@ -0,0 +1,24 @@
+import * as acm from 'aws-cdk-lib/aws-certificatemanager';
+import * as route53 from 'aws-cdk-lib/aws-route53';
+import { Construct } from 'constructs';
+/** Properties for a DNS-validated CloudFront certificate. */
+export interface CloudFrontCertificateProps {
+    /** Domain name to certify, including a wildcard if required. */
+    readonly domainName: string;
+    /** Public Route 53 hosted zone in this account containing the domain. */
+    readonly hostedZone: route53.IHostedZone;
+}
+/**
+ * Creates an ACM certificate in us-east-1, regardless of the stack region.
+ * Deployment waits for DNS validation before exposing the certificate ARN.
+ * All instances in a stack share the provider and its singleton Lambda handlers.
+ * Domain or hosted zone changes replace the certificate. Validation CNAMEs are
+ * retained on deletion because ACM can share them with other certificates.
+ */
+export declare class CloudFrontCertificate extends Construct {
+    /** ARN of the issued certificate, suitable for Certificate.fromCertificateArn. */
+    readonly certificateArn: string;
+    /** Certificate reference that can be passed directly to CDK constructs. */
+    readonly certificate: acm.ICertificate;
+    constructor(scope: Construct, id: string, props: CloudFrontCertificateProps);
+}

package/lib/certificate/cloud-front-certificate.js

@@ -0,0 +1,106 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudFrontCertificate = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const acm = require("aws-cdk-lib/aws-certificatemanager");
+const iam = require("aws-cdk-lib/aws-iam");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const logs = require("aws-cdk-lib/aws-logs");
+const custom_resources_1 = require("aws-cdk-lib/custom-resources");
+const constructs_1 = require("constructs");
+const path = require("path");
+const constants_1 = require("../constants");
+/**
+ * Creates an ACM certificate in us-east-1, regardless of the stack region.
+ * Deployment waits for DNS validation before exposing the certificate ARN.
+ * All instances in a stack share the provider and its singleton Lambda handlers.
+ * Domain or hosted zone changes replace the certificate. Validation CNAMEs are
+ * retained on deletion because ACM can share them with other certificates.
+ */
+class CloudFrontCertificate extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const provider = certificateProvider(aws_cdk_lib_1.Stack.of(this));
+        const hostedZoneId = props.hostedZone.hostedZoneId;
+        provider.isCompleteHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ['route53:ChangeResourceRecordSets'],
+            resources: [
+                aws_cdk_lib_1.Stack.of(this).formatArn({
+                    service: 'route53',
+                    region: '',
+                    account: '',
+                    resource: 'hostedzone',
+                    resourceName: hostedZoneId,
+                }),
+            ],
+            conditions: {
+                'ForAllValues:StringEquals': {
+                    'route53:ChangeResourceRecordSetsRecordTypes': ['CNAME'],
+                    'route53:ChangeResourceRecordSetsActions': ['UPSERT'],
+                },
+            },
+        }));
+        const resource = new aws_cdk_lib_1.CustomResource(this, 'Resource', {
+            resourceType: 'Custom::CloudFrontCertificate',
+            serviceToken: provider.serviceToken,
+            properties: { DomainName: props.domainName, HostedZoneId: hostedZoneId },
+        });
+        this.certificateArn = resource.getAttString('CertificateArn');
+        this.certificate = acm.Certificate.fromCertificateArn(this, 'Certificate', this.certificateArn);
+    }
+}
+exports.CloudFrontCertificate = CloudFrontCertificate;
+_a = JSII_RTTI_SYMBOL_1;
+CloudFrontCertificate[_a] = { fqn: "@rio-cloud/cdk-v2-constructs.CloudFrontCertificate", version: "0.0.0" };
+function certificateProvider(stack) {
+    const providerId = 'CloudFrontCertificateProvider';
+    const existing = stack.node.tryFindChild(providerId);
+    if (existing)
+        return existing;
+    const logGroup = new logs.LogGroup(stack, 'CloudFrontCertificateHandlerLogs', {
+        retention: logs.RetentionDays.ONE_WEEK,
+    });
+    const common = {
+        runtime: constants_1.DEFAULT_NODE_RUNTIME,
+        architecture: lambda.Architecture.ARM_64,
+        code: lambda.Code.fromAsset(path.join(__dirname, 'lambda'), { exclude: ['*.js', '*.d.ts'] }),
+        timeout: aws_cdk_lib_1.Duration.minutes(1),
+        logGroup,
+    };
+    const certificateArns = [
+        stack.formatArn({ service: 'acm', region: 'us-east-1', resource: 'certificate', resourceName: '*' }),
+    ];
+    const onEvent = new lambda.SingletonFunction(stack, 'CloudFrontCertificateOnEvent', {
+        ...common,
+        uuid: '4762d50e-e44e-4995-8c6c-51fa59e62373',
+        lambdaPurpose: 'CloudFrontCertificateOnEvent',
+        handler: 'handler.onEvent',
+        initialPolicy: [
+            new iam.PolicyStatement({
+                actions: ['acm:RequestCertificate'],
+                resources: ['*'],
+            }),
+        ],
+    });
+    const isComplete = new lambda.SingletonFunction(stack, 'CloudFrontCertificateIsComplete', {
+        ...common,
+        uuid: '4673d9de-d91e-49c5-8d9f-c47d9e16d0ee',
+        lambdaPurpose: 'CloudFrontCertificateIsComplete',
+        handler: 'handler.isComplete',
+        initialPolicy: [
+            new iam.PolicyStatement({
+                actions: ['acm:DescribeCertificate', 'acm:DeleteCertificate'],
+                resources: certificateArns,
+            }),
+        ],
+    });
+    return new custom_resources_1.Provider(stack, providerId, {
+        onEventHandler: onEvent,
+        isCompleteHandler: isComplete,
+        queryInterval: aws_cdk_lib_1.Duration.seconds(30),
+        totalTimeout: aws_cdk_lib_1.Duration.minutes(60),
+    });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xvdWQtZnJvbnQtY2VydGlmaWNhdGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2VydGlmaWNhdGUvY2xvdWQtZnJvbnQtY2VydGlmaWNhdGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFBQSw2Q0FBOEQ7QUFDOUQsMERBQTBEO0FBQzFELDJDQUEyQztBQUMzQyxpREFBaUQ7QUFDakQsNkNBQTZDO0FBRTdDLG1FQUF3RDtBQUN4RCwyQ0FBdUM7QUFDdkMsNkJBQTZCO0FBQzdCLDRDQUFvRDtBQVVwRDs7Ozs7O0dBTUc7QUFDSCxNQUFhLHFCQUFzQixTQUFRLHNCQUFTO0lBT2xELFlBQVksS0FBZ0IsRUFBRSxFQUFVLEVBQUUsS0FBaUM7UUFDekUsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLENBQUMsQ0FBQztRQUNqQixNQUFNLFFBQVEsR0FBRyxtQkFBbUIsQ0FBQyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDO1FBQ3JELE1BQU0sWUFBWSxHQUFHLEtBQUssQ0FBQyxVQUFVLENBQUMsWUFBWSxDQUFDO1FBQ25ELFFBQVEsQ0FBQyxpQkFBa0IsQ0FBQyxlQUFlLENBQ3pDLElBQUksR0FBRyxDQUFDLGVBQWUsQ0FBQztZQUN0QixPQUFPLEVBQUUsQ0FBQyxrQ0FBa0MsQ0FBQztZQUM3QyxTQUFTLEVBQUU7Z0JBQ1QsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsU0FBUyxDQUFDO29CQUN2QixPQUFPLEVBQUUsU0FBUztvQkFDbEIsTUFBTSxFQUFFLEVBQUU7b0JBQ1YsT0FBTyxFQUFFLEVBQUU7b0JBQ1gsUUFBUSxFQUFFLFlBQVk7b0JBQ3RCLFlBQVksRUFBRSxZQUFZO2lCQUMzQixDQUFDO2FBQ0g7WUFDRCxVQUFVLEVBQUU7Z0JBQ1YsMkJBQTJCLEVBQUU7b0JBQzNCLDZDQUE2QyxFQUFFLENBQUMsT0FBTyxDQUFDO29CQUN4RCx5Q0FBeUMsRUFBRSxDQUFDLFFBQVEsQ0FBQztpQkFDdEQ7YUFDRjtTQUNGLENBQUMsQ0FDSCxDQUFDO1FBQ0YsTUFBTSxRQUFRLEdBQUcsSUFBSSw0QkFBYyxDQUFDLElBQUksRUFBRSxVQUFVLEVBQUU7WUFDcEQsWUFBWSxFQUFFLCtCQUErQjtZQUM3QyxZQUFZLEVBQUUsUUFBUSxDQUFDLFlBQVk7WUFDbkMsVUFBVSxFQUFFLEVBQUUsVUFBVSxFQUFFLEtBQUssQ0FBQyxVQUFVLEVBQUUsWUFBWSxFQUFFLFlBQVksRUFBRTtTQUN6RSxDQUFDLENBQUM7UUFDSCxJQUFJLENBQUMsY0FBYyxHQUFHLFFBQVEsQ0FBQyxZQUFZLENBQUMsZ0JBQWdCLENBQUMsQ0FBQztRQUM5RCxJQUFJLENBQUMsV0FBVyxHQUFHLEdBQUcsQ0FBQyxXQUFXLENBQUMsa0JBQWtCLENBQUMsSUFBSSxFQUFFLGFBQWEsRUFBRSxJQUFJLENBQUMsY0FBYyxDQUFDLENBQUM7SUFDbEcsQ0FBQzs7QUF0Q0gsc0RBdUNDOzs7QUFFRCxTQUFTLG1CQUFtQixDQUFDLEtBQVk7SUFDdkMsTUFBTSxVQUFVLEdBQUcsK0JBQStCLENBQUM7SUFDbkQsTUFBTSxRQUFRLEdBQUcsS0FBSyxDQUFDLElBQUksQ0FBQyxZQUFZLENBQUMsVUFBVSxDQUFDLENBQUM7SUFDckQsSUFBSSxRQUFRO1FBQUUsT0FBTyxRQUFvQixDQUFDO0lBRTFDLE1BQU0sUUFBUSxHQUFHLElBQUksSUFBSSxDQUFDLFFBQVEsQ0FBQyxLQUFLLEVBQUUsa0NBQWtDLEVBQUU7UUFDNUUsU0FBUyxFQUFFLElBQUksQ0FBQyxhQUFhLENBQUMsUUFBUTtLQUN2QyxDQUFDLENBQUM7SUFDSCxNQUFNLE1BQU0sR0FBRztRQUNiLE9BQU8sRUFBRSxnQ0FBb0I7UUFDN0IsWUFBWSxFQUFFLE1BQU0sQ0FBQyxZQUFZLENBQUMsTUFBTTtRQUN4QyxJQUFJLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxTQUFTLEVBQUUsUUFBUSxDQUFDLEVBQUUsRUFBRSxPQUFPLEVBQUUsQ0FBQyxNQUFNLEVBQUUsUUFBUSxDQUFDLEVBQUUsQ0FBQztRQUM1RixPQUFPLEVBQUUsc0JBQVEsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO1FBQzVCLFFBQVE7S0FDVCxDQUFDO0lBQ0YsTUFBTSxlQUFlLEdBQUc7UUFDdEIsS0FBSyxDQUFDLFNBQVMsQ0FBQyxFQUFFLE9BQU8sRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLFdBQVcsRUFBRSxRQUFRLEVBQUUsYUFBYSxFQUFFLFlBQVksRUFBRSxHQUFHLEVBQUUsQ0FBQztLQUNyRyxDQUFDO0lBQ0YsTUFBTSxPQUFPLEdBQUcsSUFBSSxNQUFNLENBQUMsaUJBQWlCLENBQUMsS0FBSyxFQUFFLDhCQUE4QixFQUFFO1FBQ2xGLEdBQUcsTUFBTTtRQUNULElBQUksRUFBRSxzQ0FBc0M7UUFDNUMsYUFBYSxFQUFFLDhCQUE4QjtRQUM3QyxPQUFPLEVBQUUsaUJBQWlCO1FBQzFCLGFBQWEsRUFBRTtZQUNiLElBQUksR0FBRyxDQUFDLGVBQWUsQ0FBQztnQkFDdEIsT0FBTyxFQUFFLENBQUMsd0JBQXdCLENBQUM7Z0JBQ25DLFNBQVMsRUFBRSxDQUFDLEdBQUcsQ0FBQzthQUNqQixDQUFDO1NBQ0g7S0FDRixDQUFDLENBQUM7SUFDSCxNQUFNLFVBQVUsR0FBRyxJQUFJLE1BQU0sQ0FBQyxpQkFBaUIsQ0FBQyxLQUFLLEVBQUUsaUNBQWlDLEVBQUU7UUFDeEYsR0FBRyxNQUFNO1FBQ1QsSUFBSSxFQUFFLHNDQUFzQztRQUM1QyxhQUFhLEVBQUUsaUNBQWlDO1FBQ2hELE9BQU8sRUFBRSxvQkFBb0I7UUFDN0IsYUFBYSxFQUFFO1lBQ2IsSUFBSSxHQUFHLENBQUMsZUFBZSxDQUFDO2dCQUN0QixPQUFPLEVBQUUsQ0FBQyx5QkFBeUIsRUFBRSx1QkFBdUIsQ0FBQztnQkFDN0QsU0FBUyxFQUFFLGVBQWU7YUFDM0IsQ0FBQztTQUNIO0tBQ0YsQ0FBQyxDQUFDO0lBQ0gsT0FBTyxJQUFJLDJCQUFRLENBQUMsS0FBSyxFQUFFLFVBQVUsRUFBRTtRQUNyQyxjQUFjLEVBQUUsT0FBTztRQUN2QixpQkFBaUIsRUFBRSxVQUFVO1FBQzdCLGFBQWEsRUFBRSxzQkFBUSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7UUFDbkMsWUFBWSxFQUFFLHNCQUFRLENBQUMsT0FBTyxDQUFDLEVBQUUsQ0FBQztLQUNuQyxDQUFDLENBQUM7QUFDTCxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgQ3VzdG9tUmVzb3VyY2UsIER1cmF0aW9uLCBTdGFjayB9IGZyb20gJ2F3cy1jZGstbGliJztcbmltcG9ydCAqIGFzIGFjbSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtY2VydGlmaWNhdGVtYW5hZ2VyJztcbmltcG9ydCAqIGFzIGlhbSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtaWFtJztcbmltcG9ydCAqIGFzIGxhbWJkYSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtbGFtYmRhJztcbmltcG9ydCAqIGFzIGxvZ3MgZnJvbSAnYXdzLWNkay1saWIvYXdzLWxvZ3MnO1xuaW1wb3J0ICogYXMgcm91dGU1MyBmcm9tICdhd3MtY2RrLWxpYi9hd3Mtcm91dGU1Myc7XG5pbXBvcnQgeyBQcm92aWRlciB9IGZyb20gJ2F3cy1jZGstbGliL2N1c3RvbS1yZXNvdXJjZXMnO1xuaW1wb3J0IHsgQ29uc3RydWN0IH0gZnJvbSAnY29uc3RydWN0cyc7XG5pbXBvcnQgKiBhcyBwYXRoIGZyb20gJ3BhdGgnO1xuaW1wb3J0IHsgREVGQVVMVF9OT0RFX1JVTlRJTUUgfSBmcm9tICcuLi9jb25zdGFudHMnO1xuXG4vKiogUHJvcGVydGllcyBmb3IgYSBETlMtdmFsaWRhdGVkIENsb3VkRnJvbnQgY2VydGlmaWNhdGUuICovXG5leHBvcnQgaW50ZXJmYWNlIENsb3VkRnJvbnRDZXJ0aWZpY2F0ZVByb3BzIHtcbiAgLyoqIERvbWFpbiBuYW1lIHRvIGNlcnRpZnksIGluY2x1ZGluZyBhIHdpbGRjYXJkIGlmIHJlcXVpcmVkLiAqL1xuICByZWFkb25seSBkb21haW5OYW1lOiBzdHJpbmc7XG4gIC8qKiBQdWJsaWMgUm91dGUgNTMgaG9zdGVkIHpvbmUgaW4gdGhpcyBhY2NvdW50IGNvbnRhaW5pbmcgdGhlIGRvbWFpbi4gKi9cbiAgcmVhZG9ubHkgaG9zdGVkWm9uZTogcm91dGU1My5JSG9zdGVkWm9uZTtcbn1cblxuLyoqXG4gKiBDcmVhdGVzIGFuIEFDTSBjZXJ0aWZpY2F0ZSBpbiB1cy1lYXN0LTEsIHJlZ2FyZGxlc3Mgb2YgdGhlIHN0YWNrIHJlZ2lvbi5cbiAqIERlcGxveW1lbnQgd2FpdHMgZm9yIEROUyB2YWxpZGF0aW9uIGJlZm9yZSBleHBvc2luZyB0aGUgY2VydGlmaWNhdGUgQVJOLlxuICogQWxsIGluc3RhbmNlcyBpbiBhIHN0YWNrIHNoYXJlIHRoZSBwcm92aWRlciBhbmQgaXRzIHNpbmdsZXRvbiBMYW1iZGEgaGFuZGxlcnMuXG4gKiBEb21haW4gb3IgaG9zdGVkIHpvbmUgY2hhbmdlcyByZXBsYWNlIHRoZSBjZXJ0aWZpY2F0ZS4gVmFsaWRhdGlvbiBDTkFNRXMgYXJlXG4gKiByZXRhaW5lZCBvbiBkZWxldGlvbiBiZWNhdXNlIEFDTSBjYW4gc2hhcmUgdGhlbSB3aXRoIG90aGVyIGNlcnRpZmljYXRlcy5cbiAqL1xuZXhwb3J0IGNsYXNzIENsb3VkRnJvbnRDZXJ0aWZpY2F0ZSBleHRlbmRzIENvbnN0cnVjdCB7XG4gIC8qKiBBUk4gb2YgdGhlIGlzc3VlZCBjZXJ0aWZpY2F0ZSwgc3VpdGFibGUgZm9yIENlcnRpZmljYXRlLmZyb21DZXJ0aWZpY2F0ZUFybi4gKi9cbiAgcHVibGljIHJlYWRvbmx5IGNlcnRpZmljYXRlQXJuOiBzdHJpbmc7XG5cbiAgLyoqIENlcnRpZmljYXRlIHJlZmVyZW5jZSB0aGF0IGNhbiBiZSBwYXNzZWQgZGlyZWN0bHkgdG8gQ0RLIGNvbnN0cnVjdHMuICovXG4gIHB1YmxpYyByZWFkb25seSBjZXJ0aWZpY2F0ZTogYWNtLklDZXJ0aWZpY2F0ZTtcblxuICBjb25zdHJ1Y3RvcihzY29wZTogQ29uc3RydWN0LCBpZDogc3RyaW5nLCBwcm9wczogQ2xvdWRGcm9udENlcnRpZmljYXRlUHJvcHMpIHtcbiAgICBzdXBlcihzY29wZSwgaWQpO1xuICAgIGNvbnN0IHByb3ZpZGVyID0gY2VydGlmaWNhdGVQcm92aWRlcihTdGFjay5vZih0aGlzKSk7XG4gICAgY29uc3QgaG9zdGVkWm9uZUlkID0gcHJvcHMuaG9zdGVkWm9uZS5ob3N0ZWRab25lSWQ7XG4gICAgcHJvdmlkZXIuaXNDb21wbGV0ZUhhbmRsZXIhLmFkZFRvUm9sZVBvbGljeShcbiAgICAgIG5ldyBpYW0uUG9saWN5U3RhdGVtZW50KHtcbiAgICAgICAgYWN0aW9uczogWydyb3V0ZTUzOkNoYW5nZVJlc291cmNlUmVjb3JkU2V0cyddLFxuICAgICAgICByZXNvdXJjZXM6IFtcbiAgICAgICAgICBTdGFjay5vZih0aGlzKS5mb3JtYXRBcm4oe1xuICAgICAgICAgICAgc2VydmljZTogJ3JvdXRlNTMnLFxuICAgICAgICAgICAgcmVnaW9uOiAnJyxcbiAgICAgICAgICAgIGFjY291bnQ6ICcnLFxuICAgICAgICAgICAgcmVzb3VyY2U6ICdob3N0ZWR6b25lJyxcbiAgICAgICAgICAgIHJlc291cmNlTmFtZTogaG9zdGVkWm9uZUlkLFxuICAgICAgICAgIH0pLFxuICAgICAgICBdLFxuICAgICAgICBjb25kaXRpb25zOiB7XG4gICAgICAgICAgJ0ZvckFsbFZhbHVlczpTdHJpbmdFcXVhbHMnOiB7XG4gICAgICAgICAgICAncm91dGU1MzpDaGFuZ2VSZXNvdXJjZVJlY29yZFNldHNSZWNvcmRUeXBlcyc6IFsnQ05BTUUnXSxcbiAgICAgICAgICAgICdyb3V0ZTUzOkNoYW5nZVJlc291cmNlUmVjb3JkU2V0c0FjdGlvbnMnOiBbJ1VQU0VSVCddLFxuICAgICAgICAgIH0sXG4gICAgICAgIH0sXG4gICAgICB9KVxuICAgICk7XG4gICAgY29uc3QgcmVzb3VyY2UgPSBuZXcgQ3VzdG9tUmVzb3VyY2UodGhpcywgJ1Jlc291cmNlJywge1xuICAgICAgcmVzb3VyY2VUeXBlOiAnQ3VzdG9tOjpDbG91ZEZyb250Q2VydGlmaWNhdGUnLFxuICAgICAgc2VydmljZVRva2VuOiBwcm92aWRlci5zZXJ2aWNlVG9rZW4sXG4gICAgICBwcm9wZXJ0aWVzOiB7IERvbWFpbk5hbWU6IHByb3BzLmRvbWFpbk5hbWUsIEhvc3RlZFpvbmVJZDogaG9zdGVkWm9uZUlkIH0sXG4gICAgfSk7XG4gICAgdGhpcy5jZXJ0aWZpY2F0ZUFybiA9IHJlc291cmNlLmdldEF0dFN0cmluZygnQ2VydGlmaWNhdGVBcm4nKTtcbiAgICB0aGlzLmNlcnRpZmljYXRlID0gYWNtLkNlcnRpZmljYXRlLmZyb21DZXJ0aWZpY2F0ZUFybih0aGlzLCAnQ2VydGlmaWNhdGUnLCB0aGlzLmNlcnRpZmljYXRlQXJuKTtcbiAgfVxufVxuXG5mdW5jdGlvbiBjZXJ0aWZpY2F0ZVByb3ZpZGVyKHN0YWNrOiBTdGFjayk6IFByb3ZpZGVyIHtcbiAgY29uc3QgcHJvdmlkZXJJZCA9ICdDbG91ZEZyb250Q2VydGlmaWNhdGVQcm92aWRlcic7XG4gIGNvbnN0IGV4aXN0aW5nID0gc3RhY2subm9kZS50cnlGaW5kQ2hpbGQocHJvdmlkZXJJZCk7XG4gIGlmIChleGlzdGluZykgcmV0dXJuIGV4aXN0aW5nIGFzIFByb3ZpZGVyO1xuXG4gIGNvbnN0IGxvZ0dyb3VwID0gbmV3IGxvZ3MuTG9nR3JvdXAoc3RhY2ssICdDbG91ZEZyb250Q2VydGlmaWNhdGVIYW5kbGVyTG9ncycsIHtcbiAgICByZXRlbnRpb246IGxvZ3MuUmV0ZW50aW9uRGF5cy5PTkVfV0VFSyxcbiAgfSk7XG4gIGNvbnN0IGNvbW1vbiA9IHtcbiAgICBydW50aW1lOiBERUZBVUxUX05PREVfUlVOVElNRSxcbiAgICBhcmNoaXRlY3R1cmU6IGxhbWJkYS5BcmNoaXRlY3R1cmUuQVJNXzY0LFxuICAgIGNvZGU6IGxhbWJkYS5Db2RlLmZyb21Bc3NldChwYXRoLmpvaW4oX19kaXJuYW1lLCAnbGFtYmRhJyksIHsgZXhjbHVkZTogWycqLmpzJywgJyouZC50cyddIH0pLFxuICAgIHRpbWVvdXQ6IER1cmF0aW9uLm1pbnV0ZXMoMSksXG4gICAgbG9nR3JvdXAsXG4gIH07XG4gIGNvbnN0IGNlcnRpZmljYXRlQXJucyA9IFtcbiAgICBzdGFjay5mb3JtYXRBcm4oeyBzZXJ2aWNlOiAnYWNtJywgcmVnaW9uOiAndXMtZWFzdC0xJywgcmVzb3VyY2U6ICdjZXJ0aWZpY2F0ZScsIHJlc291cmNlTmFtZTogJyonIH0pLFxuICBdO1xuICBjb25zdCBvbkV2ZW50ID0gbmV3IGxhbWJkYS5TaW5nbGV0b25GdW5jdGlvbihzdGFjaywgJ0Nsb3VkRnJvbnRDZXJ0aWZpY2F0ZU9uRXZlbnQnLCB7XG4gICAgLi4uY29tbW9uLFxuICAgIHV1aWQ6ICc0NzYyZDUwZS1lNDRlLTQ5OTUtOGM2Yy01MWZhNTllNjIzNzMnLFxuICAgIGxhbWJkYVB1cnBvc2U6ICdDbG91ZEZyb250Q2VydGlmaWNhdGVPbkV2ZW50JyxcbiAgICBoYW5kbGVyOiAnaGFuZGxlci5vbkV2ZW50JyxcbiAgICBpbml0aWFsUG9saWN5OiBbXG4gICAgICBuZXcgaWFtLlBvbGljeVN0YXRlbWVudCh7XG4gICAgICAgIGFjdGlvbnM6IFsnYWNtOlJlcXVlc3RDZXJ0aWZpY2F0ZSddLFxuICAgICAgICByZXNvdXJjZXM6IFsnKiddLFxuICAgICAgfSksXG4gICAgXSxcbiAgfSk7XG4gIGNvbnN0IGlzQ29tcGxldGUgPSBuZXcgbGFtYmRhLlNpbmdsZXRvbkZ1bmN0aW9uKHN0YWNrLCAnQ2xvdWRGcm9udENlcnRpZmljYXRlSXNDb21wbGV0ZScsIHtcbiAgICAuLi5jb21tb24sXG4gICAgdXVpZDogJzQ2NzNkOWRlLWQ5MWUtNDljNS04ZDlmLWM0N2Q5ZTE2ZDBlZScsXG4gICAgbGFtYmRhUHVycG9zZTogJ0Nsb3VkRnJvbnRDZXJ0aWZpY2F0ZUlzQ29tcGxldGUnLFxuICAgIGhhbmRsZXI6ICdoYW5kbGVyLmlzQ29tcGxldGUnLFxuICAgIGluaXRpYWxQb2xpY3k6IFtcbiAgICAgIG5ldyBpYW0uUG9saWN5U3RhdGVtZW50KHtcbiAgICAgICAgYWN0aW9uczogWydhY206RGVzY3JpYmVDZXJ0aWZpY2F0ZScsICdhY206RGVsZXRlQ2VydGlmaWNhdGUnXSxcbiAgICAgICAgcmVzb3VyY2VzOiBjZXJ0aWZpY2F0ZUFybnMsXG4gICAgICB9KSxcbiAgICBdLFxuICB9KTtcbiAgcmV0dXJuIG5ldyBQcm92aWRlcihzdGFjaywgcHJvdmlkZXJJZCwge1xuICAgIG9uRXZlbnRIYW5kbGVyOiBvbkV2ZW50LFxuICAgIGlzQ29tcGxldGVIYW5kbGVyOiBpc0NvbXBsZXRlLFxuICAgIHF1ZXJ5SW50ZXJ2YWw6IER1cmF0aW9uLnNlY29uZHMoMzApLFxuICAgIHRvdGFsVGltZW91dDogRHVyYXRpb24ubWludXRlcyg2MCksXG4gIH0pO1xufVxuIl19

package/lib/certificate/index.d.ts

@@ -0,0 +1 @@
+export * from './cloud-front-certificate';

package/lib/certificate/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cloud-front-certificate"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2VydGlmaWNhdGUvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDREQUEwQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vY2xvdWQtZnJvbnQtY2VydGlmaWNhdGUnO1xuIl19