@stacksjs/ts-cloud-core 0.1.2 → 0.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (250) hide show
  1. package/README.md +98 -13
  2. package/package.json +12 -3
  3. package/src/advanced-features.test.ts +0 -465
  4. package/src/aws/cloudformation.ts +0 -421
  5. package/src/aws/cloudfront.ts +0 -158
  6. package/src/aws/credentials.test.ts +0 -132
  7. package/src/aws/credentials.ts +0 -545
  8. package/src/aws/index.ts +0 -87
  9. package/src/aws/s3.test.ts +0 -188
  10. package/src/aws/s3.ts +0 -1088
  11. package/src/aws/signature.test.ts +0 -670
  12. package/src/aws/signature.ts +0 -1155
  13. package/src/backup/disaster-recovery.test.ts +0 -726
  14. package/src/backup/disaster-recovery.ts +0 -500
  15. package/src/backup/index.ts +0 -34
  16. package/src/backup/manager.test.ts +0 -498
  17. package/src/backup/manager.ts +0 -432
  18. package/src/cicd/circleci.ts +0 -430
  19. package/src/cicd/github-actions.ts +0 -424
  20. package/src/cicd/gitlab-ci.ts +0 -255
  21. package/src/cicd/index.ts +0 -8
  22. package/src/cli/history.ts +0 -396
  23. package/src/cli/index.ts +0 -10
  24. package/src/cli/progress.ts +0 -458
  25. package/src/cli/repl.ts +0 -454
  26. package/src/cli/suggestions.ts +0 -327
  27. package/src/cli/table.test.ts +0 -319
  28. package/src/cli/table.ts +0 -332
  29. package/src/cloudformation/builder.test.ts +0 -327
  30. package/src/cloudformation/builder.ts +0 -378
  31. package/src/cloudformation/builders/api-gateway.ts +0 -449
  32. package/src/cloudformation/builders/cache.ts +0 -334
  33. package/src/cloudformation/builders/cdn.ts +0 -278
  34. package/src/cloudformation/builders/compute.ts +0 -485
  35. package/src/cloudformation/builders/database.ts +0 -392
  36. package/src/cloudformation/builders/functions.ts +0 -343
  37. package/src/cloudformation/builders/messaging.ts +0 -140
  38. package/src/cloudformation/builders/monitoring.ts +0 -300
  39. package/src/cloudformation/builders/network.ts +0 -264
  40. package/src/cloudformation/builders/queue.ts +0 -147
  41. package/src/cloudformation/builders/security.ts +0 -399
  42. package/src/cloudformation/builders/storage.ts +0 -285
  43. package/src/cloudformation/index.ts +0 -30
  44. package/src/cloudformation/types.ts +0 -173
  45. package/src/compliance/aws-config.ts +0 -543
  46. package/src/compliance/cloudtrail.ts +0 -376
  47. package/src/compliance/compliance.test.ts +0 -423
  48. package/src/compliance/guardduty.ts +0 -446
  49. package/src/compliance/index.ts +0 -66
  50. package/src/compliance/security-hub.ts +0 -456
  51. package/src/containers/build-optimization.ts +0 -416
  52. package/src/containers/containers.test.ts +0 -508
  53. package/src/containers/image-scanning.ts +0 -360
  54. package/src/containers/index.ts +0 -9
  55. package/src/containers/registry.ts +0 -293
  56. package/src/containers/service-mesh.ts +0 -520
  57. package/src/database/database.test.ts +0 -762
  58. package/src/database/index.ts +0 -9
  59. package/src/database/migrations.ts +0 -444
  60. package/src/database/performance.ts +0 -528
  61. package/src/database/replicas.ts +0 -534
  62. package/src/database/users.ts +0 -494
  63. package/src/dependency-graph.ts +0 -143
  64. package/src/deployment/ab-testing.ts +0 -582
  65. package/src/deployment/blue-green.ts +0 -452
  66. package/src/deployment/canary.ts +0 -500
  67. package/src/deployment/deployment.test.ts +0 -526
  68. package/src/deployment/index.ts +0 -61
  69. package/src/deployment/progressive.ts +0 -62
  70. package/src/dns/dns.test.ts +0 -641
  71. package/src/dns/dnssec.ts +0 -315
  72. package/src/dns/index.ts +0 -8
  73. package/src/dns/resolver.ts +0 -496
  74. package/src/dns/routing.ts +0 -593
  75. package/src/email/advanced/analytics.ts +0 -445
  76. package/src/email/advanced/index.ts +0 -11
  77. package/src/email/advanced/rules.ts +0 -465
  78. package/src/email/advanced/scheduling.ts +0 -352
  79. package/src/email/advanced/search.ts +0 -412
  80. package/src/email/advanced/shared-mailboxes.ts +0 -404
  81. package/src/email/advanced/templates.ts +0 -455
  82. package/src/email/advanced/threading.ts +0 -281
  83. package/src/email/analytics.ts +0 -467
  84. package/src/email/bounce-handling.ts +0 -425
  85. package/src/email/email.test.ts +0 -431
  86. package/src/email/handlers/__tests__/inbound.test.ts +0 -38
  87. package/src/email/handlers/__tests__/outbound.test.ts +0 -37
  88. package/src/email/handlers/converter.ts +0 -227
  89. package/src/email/handlers/feedback.ts +0 -228
  90. package/src/email/handlers/inbound.ts +0 -169
  91. package/src/email/handlers/outbound.ts +0 -178
  92. package/src/email/index.ts +0 -15
  93. package/src/email/reputation.ts +0 -303
  94. package/src/email/templates.ts +0 -352
  95. package/src/errors/index.test.ts +0 -434
  96. package/src/errors/index.ts +0 -416
  97. package/src/health-checks/index.ts +0 -40
  98. package/src/index.ts +0 -360
  99. package/src/intrinsic-functions.ts +0 -118
  100. package/src/lambda/concurrency.ts +0 -330
  101. package/src/lambda/destinations.ts +0 -345
  102. package/src/lambda/dlq.ts +0 -425
  103. package/src/lambda/index.ts +0 -11
  104. package/src/lambda/lambda.test.ts +0 -840
  105. package/src/lambda/layers.ts +0 -263
  106. package/src/lambda/versions.ts +0 -376
  107. package/src/lambda/vpc.ts +0 -399
  108. package/src/local/config.ts +0 -114
  109. package/src/local/index.ts +0 -6
  110. package/src/local/mock-aws.ts +0 -351
  111. package/src/modules/ai.ts +0 -340
  112. package/src/modules/api.ts +0 -478
  113. package/src/modules/auth.ts +0 -805
  114. package/src/modules/cache.ts +0 -417
  115. package/src/modules/cdn.ts +0 -1062
  116. package/src/modules/communication.ts +0 -1094
  117. package/src/modules/compute.ts +0 -3348
  118. package/src/modules/database.ts +0 -554
  119. package/src/modules/deployment.ts +0 -1079
  120. package/src/modules/dns.ts +0 -337
  121. package/src/modules/email.ts +0 -1538
  122. package/src/modules/filesystem.ts +0 -515
  123. package/src/modules/index.ts +0 -32
  124. package/src/modules/messaging.ts +0 -486
  125. package/src/modules/monitoring.ts +0 -2086
  126. package/src/modules/network.ts +0 -664
  127. package/src/modules/parameter-store.ts +0 -325
  128. package/src/modules/permissions.ts +0 -1081
  129. package/src/modules/phone.ts +0 -494
  130. package/src/modules/queue.ts +0 -1260
  131. package/src/modules/redirects.ts +0 -464
  132. package/src/modules/registry.ts +0 -699
  133. package/src/modules/search.ts +0 -401
  134. package/src/modules/secrets.ts +0 -416
  135. package/src/modules/security.ts +0 -731
  136. package/src/modules/sms.ts +0 -389
  137. package/src/modules/storage.ts +0 -1120
  138. package/src/modules/workflow.ts +0 -680
  139. package/src/multi-account/config.ts +0 -521
  140. package/src/multi-account/index.ts +0 -7
  141. package/src/multi-account/manager.ts +0 -427
  142. package/src/multi-region/cross-region.ts +0 -410
  143. package/src/multi-region/index.ts +0 -8
  144. package/src/multi-region/manager.ts +0 -483
  145. package/src/multi-region/regions.ts +0 -435
  146. package/src/network-security/index.ts +0 -48
  147. package/src/observability/index.ts +0 -9
  148. package/src/observability/logs.ts +0 -522
  149. package/src/observability/metrics.ts +0 -460
  150. package/src/observability/observability.test.ts +0 -782
  151. package/src/observability/synthetics.ts +0 -568
  152. package/src/observability/xray.ts +0 -358
  153. package/src/phone/advanced/analytics.ts +0 -349
  154. package/src/phone/advanced/callbacks.ts +0 -428
  155. package/src/phone/advanced/index.ts +0 -8
  156. package/src/phone/advanced/ivr-builder.ts +0 -504
  157. package/src/phone/advanced/recording.ts +0 -310
  158. package/src/phone/handlers/__tests__/incoming-call.test.ts +0 -40
  159. package/src/phone/handlers/incoming-call.ts +0 -117
  160. package/src/phone/handlers/missed-call.ts +0 -116
  161. package/src/phone/handlers/voicemail.ts +0 -179
  162. package/src/phone/index.ts +0 -9
  163. package/src/presets/api-backend.ts +0 -134
  164. package/src/presets/data-pipeline.ts +0 -204
  165. package/src/presets/extend.test.ts +0 -295
  166. package/src/presets/extend.ts +0 -297
  167. package/src/presets/fullstack-app.ts +0 -144
  168. package/src/presets/index.ts +0 -27
  169. package/src/presets/jamstack.ts +0 -135
  170. package/src/presets/microservices.ts +0 -167
  171. package/src/presets/ml-api.ts +0 -208
  172. package/src/presets/nodejs-server.ts +0 -104
  173. package/src/presets/nodejs-serverless.ts +0 -114
  174. package/src/presets/realtime-app.ts +0 -184
  175. package/src/presets/static-site.ts +0 -64
  176. package/src/presets/traditional-web-app.ts +0 -339
  177. package/src/presets/wordpress.ts +0 -138
  178. package/src/preview/github.test.ts +0 -249
  179. package/src/preview/github.ts +0 -297
  180. package/src/preview/index.ts +0 -37
  181. package/src/preview/manager.test.ts +0 -440
  182. package/src/preview/manager.ts +0 -326
  183. package/src/preview/notifications.test.ts +0 -582
  184. package/src/preview/notifications.ts +0 -341
  185. package/src/queue/batch-processing.ts +0 -402
  186. package/src/queue/dlq-monitoring.ts +0 -402
  187. package/src/queue/fifo.ts +0 -342
  188. package/src/queue/index.ts +0 -9
  189. package/src/queue/management.ts +0 -428
  190. package/src/queue/queue.test.ts +0 -429
  191. package/src/resource-mgmt/index.ts +0 -39
  192. package/src/resource-naming.ts +0 -62
  193. package/src/s3/index.ts +0 -523
  194. package/src/schema/cloud-config.schema.json +0 -554
  195. package/src/schema/index.ts +0 -68
  196. package/src/security/certificate-manager.ts +0 -492
  197. package/src/security/index.ts +0 -9
  198. package/src/security/scanning.ts +0 -545
  199. package/src/security/secrets-manager.ts +0 -476
  200. package/src/security/secrets-rotation.ts +0 -456
  201. package/src/security/security.test.ts +0 -738
  202. package/src/sms/advanced/ab-testing.ts +0 -389
  203. package/src/sms/advanced/analytics.ts +0 -336
  204. package/src/sms/advanced/campaigns.ts +0 -523
  205. package/src/sms/advanced/chatbot.ts +0 -224
  206. package/src/sms/advanced/index.ts +0 -10
  207. package/src/sms/advanced/link-tracking.ts +0 -248
  208. package/src/sms/advanced/mms.ts +0 -308
  209. package/src/sms/handlers/__tests__/send.test.ts +0 -40
  210. package/src/sms/handlers/delivery-status.ts +0 -133
  211. package/src/sms/handlers/receive.ts +0 -162
  212. package/src/sms/handlers/send.ts +0 -174
  213. package/src/sms/index.ts +0 -9
  214. package/src/stack-diff.ts +0 -389
  215. package/src/static-site/index.ts +0 -85
  216. package/src/template-builder.ts +0 -110
  217. package/src/template-validator.ts +0 -574
  218. package/src/utils/cache.ts +0 -291
  219. package/src/utils/diff.ts +0 -269
  220. package/src/utils/hash.ts +0 -227
  221. package/src/utils/index.ts +0 -8
  222. package/src/utils/parallel.ts +0 -294
  223. package/src/validators/credentials.test.ts +0 -274
  224. package/src/validators/credentials.ts +0 -233
  225. package/src/validators/quotas.test.ts +0 -434
  226. package/src/validators/quotas.ts +0 -217
  227. package/test/ai.test.ts +0 -327
  228. package/test/api.test.ts +0 -511
  229. package/test/auth.test.ts +0 -632
  230. package/test/cache.test.ts +0 -406
  231. package/test/cdn.test.ts +0 -247
  232. package/test/compute.test.ts +0 -861
  233. package/test/database.test.ts +0 -523
  234. package/test/deployment.test.ts +0 -499
  235. package/test/dns.test.ts +0 -270
  236. package/test/email.test.ts +0 -439
  237. package/test/filesystem.test.ts +0 -382
  238. package/test/integration.test.ts +0 -350
  239. package/test/messaging.test.ts +0 -514
  240. package/test/monitoring.test.ts +0 -634
  241. package/test/network.test.ts +0 -425
  242. package/test/permissions.test.ts +0 -488
  243. package/test/queue.test.ts +0 -484
  244. package/test/registry.test.ts +0 -306
  245. package/test/security.test.ts +0 -462
  246. package/test/storage.test.ts +0 -463
  247. package/test/template-validator.test.ts +0 -559
  248. package/test/workflow.test.ts +0 -592
  249. package/tsconfig.json +0 -16
  250. package/tsconfig.tsbuildinfo +0 -1
@@ -1,300 +0,0 @@
1
- import type { CloudFormationBuilder } from '../builder'
2
- import { Fn } from '../types'
3
-
4
- export interface AlarmConfig {
5
- name?: string
6
- metric: string
7
- threshold: number
8
- evaluationPeriods?: number
9
- comparisonOperator?: 'GreaterThanThreshold' | 'LessThanThreshold' | 'GreaterThanOrEqualToThreshold' | 'LessThanOrEqualToThreshold'
10
- statistic?: 'Average' | 'Sum' | 'Minimum' | 'Maximum' | 'SampleCount'
11
- period?: number
12
- treatMissingData?: 'breaching' | 'notBreaching' | 'ignore' | 'missing'
13
- service?: string
14
- namespace?: string
15
- dimensions?: Record<string, string>
16
- }
17
-
18
- export interface MonitoringConfig {
19
- dashboard?: {
20
- name: string
21
- widgets?: Array<{
22
- type: 'metric' | 'log' | 'text'
23
- metrics?: string[] | Array<{ service?: string, metric: string }>
24
- logGroup?: string
25
- text?: string
26
- width?: number
27
- height?: number
28
- }>
29
- }
30
- alarms?: AlarmConfig[]
31
- logs?: {
32
- retention?: number
33
- groups?: string[]
34
- }
35
- }
36
-
37
- /**
38
- * Add CloudWatch monitoring resources to CloudFormation template
39
- */
40
- export function addMonitoringResources(
41
- builder: CloudFormationBuilder,
42
- config: MonitoringConfig,
43
- ): void {
44
- // SNS Topic for alarms
45
- if (config.alarms && config.alarms.length > 0) {
46
- builder.addResource('AlarmTopic', 'AWS::SNS::Topic', {
47
- TopicName: Fn.sub('${AWS::StackName}-alarms'),
48
- DisplayName: 'CloudWatch Alarms',
49
- Tags: [
50
- { Key: 'Name', Value: Fn.sub('${AWS::StackName}-alarms') },
51
- ],
52
- })
53
-
54
- // Add alarms
55
- config.alarms.forEach((alarm, index) => {
56
- addCloudWatchAlarm(builder, alarm, index)
57
- })
58
- }
59
-
60
- // CloudWatch Dashboard
61
- if (config.dashboard) {
62
- addCloudWatchDashboard(builder, config.dashboard)
63
- }
64
-
65
- // Log Groups
66
- if (config.logs?.groups) {
67
- config.logs.groups.forEach(group => {
68
- addLogGroup(builder, group, config.logs?.retention)
69
- })
70
- }
71
- }
72
-
73
- /**
74
- * Add CloudWatch alarm
75
- */
76
- function addCloudWatchAlarm(
77
- builder: CloudFormationBuilder,
78
- config: AlarmConfig,
79
- index: number,
80
- ): void {
81
- const alarmId = builder.toLogicalId(`alarm-${config.name || config.metric}-${index}`)
82
-
83
- const alarmProperties: Record<string, any> = {
84
- AlarmName: config.name || Fn.sub(`\${AWS::StackName}-${config.metric}`),
85
- AlarmDescription: `Alarm for ${config.metric}`,
86
- MetricName: config.metric,
87
- Namespace: config.namespace || getNamespaceForMetric(config.metric, config.service),
88
- Statistic: config.statistic || 'Average',
89
- Period: config.period || 300,
90
- EvaluationPeriods: config.evaluationPeriods || 1,
91
- Threshold: config.threshold,
92
- ComparisonOperator: config.comparisonOperator || 'GreaterThanThreshold',
93
- TreatMissingData: config.treatMissingData || 'notBreaching',
94
- AlarmActions: [Fn.ref('AlarmTopic')],
95
- OKActions: [Fn.ref('AlarmTopic')],
96
- }
97
-
98
- // Dimensions
99
- if (config.dimensions) {
100
- alarmProperties.Dimensions = Object.entries(config.dimensions).map(([name, value]) => ({
101
- Name: name,
102
- Value: value,
103
- }))
104
- }
105
- else if (config.service) {
106
- // Auto-generate dimensions based on service
107
- alarmProperties.Dimensions = generateDimensionsForService(config.service)
108
- }
109
-
110
- builder.addResource(alarmId, 'AWS::CloudWatch::Alarm', alarmProperties, {
111
- dependsOn: 'AlarmTopic',
112
- })
113
- }
114
-
115
- /**
116
- * Add CloudWatch Dashboard
117
- */
118
- function addCloudWatchDashboard(
119
- builder: CloudFormationBuilder,
120
- config: MonitoringConfig['dashboard'],
121
- ): void {
122
- if (!config) return
123
-
124
- const widgets: any[] = []
125
- let x = 0
126
- let y = 0
127
-
128
- // Build dashboard widgets
129
- config.widgets?.forEach(widget => {
130
- const width = widget.width || 12
131
- const height = widget.height || 6
132
-
133
- if (widget.type === 'metric' && widget.metrics) {
134
- const metrics = widget.metrics.map(metric => {
135
- if (typeof metric === 'string') {
136
- // Simple metric name - infer namespace
137
- const namespace = getNamespaceForMetric(metric)
138
- return [namespace, metric]
139
- }
140
- else {
141
- // Metric with service specified
142
- const namespace = getNamespaceForMetric(metric.metric, metric.service)
143
- return [namespace, metric.metric]
144
- }
145
- })
146
-
147
- widgets.push({
148
- type: 'metric',
149
- x,
150
- y,
151
- width,
152
- height,
153
- properties: {
154
- metrics,
155
- period: 300,
156
- stat: 'Average',
157
- region: Fn.ref('AWS::Region'),
158
- title: widget.metrics.length > 1
159
- ? 'Multiple Metrics'
160
- : typeof widget.metrics[0] === 'string'
161
- ? widget.metrics[0]
162
- : widget.metrics[0].metric,
163
- },
164
- })
165
- }
166
- else if (widget.type === 'log' && widget.logGroup) {
167
- widgets.push({
168
- type: 'log',
169
- x,
170
- y,
171
- width,
172
- height,
173
- properties: {
174
- query: `SOURCE '${widget.logGroup}'\n| fields @timestamp, @message\n| sort @timestamp desc\n| limit 20`,
175
- region: Fn.ref('AWS::Region'),
176
- title: `Logs: ${widget.logGroup}`,
177
- },
178
- })
179
- }
180
- else if (widget.type === 'text' && widget.text) {
181
- widgets.push({
182
- type: 'text',
183
- x,
184
- y,
185
- width,
186
- height,
187
- properties: {
188
- markdown: widget.text,
189
- },
190
- })
191
- }
192
-
193
- // Update position for next widget
194
- x += width
195
- if (x >= 24) {
196
- x = 0
197
- y += height
198
- }
199
- })
200
-
201
- builder.addResource('CloudWatchDashboard', 'AWS::CloudWatch::Dashboard', {
202
- DashboardName: Fn.sub(`\${AWS::StackName}-${config.name}`),
203
- DashboardBody: JSON.stringify({ widgets }),
204
- })
205
-
206
- // Output
207
- builder.addOutputs({
208
- DashboardURL: {
209
- Description: 'CloudWatch Dashboard URL',
210
- Value: Fn.sub(
211
- `https://console.aws.amazon.com/cloudwatch/home?region=\${AWS::Region}#dashboards:name=\${CloudWatchDashboard}`,
212
- ),
213
- },
214
- })
215
- }
216
-
217
- /**
218
- * Add CloudWatch Log Group
219
- */
220
- function addLogGroup(
221
- builder: CloudFormationBuilder,
222
- groupName: string,
223
- retention?: number,
224
- ): void {
225
- const logicalId = builder.toLogicalId(`${groupName}-log-group`)
226
-
227
- builder.addResource(logicalId, 'AWS::Logs::LogGroup', {
228
- LogGroupName: Fn.sub(`/aws/\${AWS::StackName}/${groupName}`),
229
- RetentionInDays: retention || 14,
230
- Tags: [
231
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-${groupName}`) },
232
- ],
233
- })
234
- }
235
-
236
- /**
237
- * Get AWS namespace for a metric
238
- */
239
- function getNamespaceForMetric(metric: string, service?: string): string {
240
- if (service) {
241
- const namespaceMap: Record<string, string> = {
242
- 'ec2': 'AWS/EC2',
243
- 'ecs': 'AWS/ECS',
244
- 'lambda': 'AWS/Lambda',
245
- 'rds': 'AWS/RDS',
246
- 'dynamodb': 'AWS/DynamoDB',
247
- 's3': 'AWS/S3',
248
- 'cloudfront': 'AWS/CloudFront',
249
- 'alb': 'AWS/ApplicationELB',
250
- 'nlb': 'AWS/NetworkELB',
251
- 'apigateway': 'AWS/ApiGateway',
252
- 'sqs': 'AWS/SQS',
253
- 'sns': 'AWS/SNS',
254
- 'kinesis': 'AWS/Kinesis',
255
- 'elasticache': 'AWS/ElastiCache',
256
- }
257
- return namespaceMap[service.toLowerCase()] || 'AWS/CloudWatch'
258
- }
259
-
260
- // Infer namespace from metric name
261
- const metricLower = metric.toLowerCase()
262
-
263
- if (metricLower.includes('cpu') || metricLower.includes('memory') || metricLower.includes('network')) {
264
- return 'AWS/EC2'
265
- }
266
- if (metricLower.includes('lambda') || metricLower.includes('invocation') || metricLower.includes('duration')) {
267
- return 'AWS/Lambda'
268
- }
269
- if (metricLower.includes('request') || metricLower.includes('latency') || metricLower.includes('target')) {
270
- return 'AWS/ApplicationELB'
271
- }
272
- if (metricLower.includes('database') || metricLower.includes('connection')) {
273
- return 'AWS/RDS'
274
- }
275
- if (metricLower.includes('read') || metricLower.includes('write') || metricLower.includes('consumed')) {
276
- return 'AWS/DynamoDB'
277
- }
278
-
279
- return 'AWS/CloudWatch'
280
- }
281
-
282
- /**
283
- * Generate dimensions for a service
284
- */
285
- function generateDimensionsForService(service: string): any[] {
286
- const dimensionMap: Record<string, any[]> = {
287
- 'ec2': [{ Name: 'InstanceId', Value: Fn.ref('EC2Instance') }],
288
- 'ecs': [
289
- { Name: 'ClusterName', Value: Fn.ref('ECSCluster') },
290
- { Name: 'ServiceName', Value: Fn.getAtt('ECSService', 'Name') },
291
- ],
292
- 'lambda': [{ Name: 'FunctionName', Value: Fn.ref('LambdaFunction') }],
293
- 'rds': [{ Name: 'DBInstanceIdentifier', Value: Fn.ref('Database') }],
294
- 'dynamodb': [{ Name: 'TableName', Value: Fn.ref('DynamoDBTable') }],
295
- 'alb': [{ Name: 'LoadBalancer', Value: Fn.getAtt('LoadBalancer', 'LoadBalancerFullName') }],
296
- 'apigateway': [{ Name: 'ApiName', Value: Fn.ref('HttpApi') }],
297
- }
298
-
299
- return dimensionMap[service.toLowerCase()] || []
300
- }
@@ -1,264 +0,0 @@
1
- import type { CloudFormationBuilder } from '../builder'
2
- import { Fn } from '../types'
3
-
4
- export interface NetworkConfig {
5
- vpc?: {
6
- cidr?: string
7
- availabilityZones?: number
8
- natGateways?: number
9
- enableDnsHostnames?: boolean
10
- enableDnsSupport?: boolean
11
- }
12
- }
13
-
14
- /**
15
- * Add VPC and networking resources to CloudFormation template
16
- */
17
- export function addNetworkResources(
18
- builder: CloudFormationBuilder,
19
- config: NetworkConfig,
20
- ): void {
21
- if (!config.vpc) {
22
- return
23
- }
24
-
25
- const {
26
- cidr = '10.0.0.0/16',
27
- availabilityZones = 2,
28
- natGateways = 1,
29
- enableDnsHostnames = true,
30
- enableDnsSupport = true,
31
- } = config.vpc
32
-
33
- // VPC
34
- builder.addResource('VPC', 'AWS::EC2::VPC', {
35
- CidrBlock: cidr,
36
- EnableDnsHostnames: enableDnsHostnames,
37
- EnableDnsSupport: enableDnsSupport,
38
- Tags: [
39
- { Key: 'Name', Value: Fn.sub('${AWS::StackName}-vpc') },
40
- ],
41
- })
42
-
43
- // Internet Gateway
44
- builder.addResource('InternetGateway', 'AWS::EC2::InternetGateway', {
45
- Tags: [
46
- { Key: 'Name', Value: Fn.sub('${AWS::StackName}-igw') },
47
- ],
48
- })
49
-
50
- builder.addResource('VPCGatewayAttachment', 'AWS::EC2::VPCGatewayAttachment', {
51
- VpcId: Fn.ref('VPC'),
52
- InternetGatewayId: Fn.ref('InternetGateway'),
53
- }, {
54
- dependsOn: ['VPC', 'InternetGateway'],
55
- })
56
-
57
- // Public subnets (one per AZ)
58
- const publicSubnets: string[] = []
59
- for (let i = 0; i < availabilityZones; i++) {
60
- const subnetId = `PublicSubnet${i + 1}`
61
- publicSubnets.push(subnetId)
62
-
63
- builder.addResource(subnetId, 'AWS::EC2::Subnet', {
64
- VpcId: Fn.ref('VPC'),
65
- CidrBlock: Fn.select(i, Fn.cidr(Fn.getAtt('VPC', 'CidrBlock'), availabilityZones * 2, 8)),
66
- AvailabilityZone: Fn.select(i, Fn.getAZs()),
67
- MapPublicIpOnLaunch: true,
68
- Tags: [
69
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-public-${i + 1}`) },
70
- { Key: 'Type', Value: 'public' },
71
- ],
72
- }, {
73
- dependsOn: 'VPC',
74
- })
75
- }
76
-
77
- // Private subnets (one per AZ)
78
- const privateSubnets: string[] = []
79
- for (let i = 0; i < availabilityZones; i++) {
80
- const subnetId = `PrivateSubnet${i + 1}`
81
- privateSubnets.push(subnetId)
82
-
83
- builder.addResource(subnetId, 'AWS::EC2::Subnet', {
84
- VpcId: Fn.ref('VPC'),
85
- CidrBlock: Fn.select(
86
- i + availabilityZones,
87
- Fn.cidr(Fn.getAtt('VPC', 'CidrBlock'), availabilityZones * 2, 8),
88
- ),
89
- AvailabilityZone: Fn.select(i, Fn.getAZs()),
90
- MapPublicIpOnLaunch: false,
91
- Tags: [
92
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-private-${i + 1}`) },
93
- { Key: 'Type', Value: 'private' },
94
- ],
95
- }, {
96
- dependsOn: 'VPC',
97
- })
98
- }
99
-
100
- // Elastic IPs for NAT Gateways
101
- const eips: string[] = []
102
- for (let i = 0; i < natGateways; i++) {
103
- const eipId = `NatEIP${i + 1}`
104
- eips.push(eipId)
105
-
106
- builder.addResource(eipId, 'AWS::EC2::EIP', {
107
- Domain: 'vpc',
108
- Tags: [
109
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-nat-eip-${i + 1}`) },
110
- ],
111
- }, {
112
- dependsOn: 'VPCGatewayAttachment',
113
- })
114
- }
115
-
116
- // NAT Gateways
117
- const natGatewayIds: string[] = []
118
- for (let i = 0; i < natGateways; i++) {
119
- const natId = `NatGateway${i + 1}`
120
- natGatewayIds.push(natId)
121
-
122
- // Use round-robin to distribute NAT gateways across AZs
123
- const subnetIndex = i % availabilityZones
124
-
125
- builder.addResource(natId, 'AWS::EC2::NatGateway', {
126
- AllocationId: Fn.getAtt(eips[i], 'AllocationId'),
127
- SubnetId: Fn.ref(publicSubnets[subnetIndex]),
128
- Tags: [
129
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-nat-${i + 1}`) },
130
- ],
131
- }, {
132
- dependsOn: [eips[i], publicSubnets[subnetIndex]],
133
- })
134
- }
135
-
136
- // Public route table
137
- builder.addResource('PublicRouteTable', 'AWS::EC2::RouteTable', {
138
- VpcId: Fn.ref('VPC'),
139
- Tags: [
140
- { Key: 'Name', Value: Fn.sub('${AWS::StackName}-public-rt') },
141
- ],
142
- }, {
143
- dependsOn: 'VPC',
144
- })
145
-
146
- builder.addResource('PublicRoute', 'AWS::EC2::Route', {
147
- RouteTableId: Fn.ref('PublicRouteTable'),
148
- DestinationCidrBlock: '0.0.0.0/0',
149
- GatewayId: Fn.ref('InternetGateway'),
150
- }, {
151
- dependsOn: ['PublicRouteTable', 'VPCGatewayAttachment'],
152
- })
153
-
154
- // Associate public subnets with public route table
155
- publicSubnets.forEach((subnetId, i) => {
156
- builder.addResource(`PublicSubnetRouteTableAssociation${i + 1}`, 'AWS::EC2::SubnetRouteTableAssociation', {
157
- SubnetId: Fn.ref(subnetId),
158
- RouteTableId: Fn.ref('PublicRouteTable'),
159
- }, {
160
- dependsOn: [subnetId, 'PublicRouteTable'],
161
- })
162
- })
163
-
164
- // Private route tables (one per NAT gateway for HA)
165
- privateSubnets.forEach((subnetId, i) => {
166
- const routeTableId = `PrivateRouteTable${i + 1}`
167
- const natIndex = i % natGateways
168
-
169
- builder.addResource(routeTableId, 'AWS::EC2::RouteTable', {
170
- VpcId: Fn.ref('VPC'),
171
- Tags: [
172
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-private-rt-${i + 1}`) },
173
- ],
174
- }, {
175
- dependsOn: 'VPC',
176
- })
177
-
178
- builder.addResource(`PrivateRoute${i + 1}`, 'AWS::EC2::Route', {
179
- RouteTableId: Fn.ref(routeTableId),
180
- DestinationCidrBlock: '0.0.0.0/0',
181
- NatGatewayId: Fn.ref(natGatewayIds[natIndex]),
182
- }, {
183
- dependsOn: [routeTableId, natGatewayIds[natIndex]],
184
- })
185
-
186
- builder.addResource(`PrivateSubnetRouteTableAssociation${i + 1}`, 'AWS::EC2::SubnetRouteTableAssociation', {
187
- SubnetId: Fn.ref(subnetId),
188
- RouteTableId: Fn.ref(routeTableId),
189
- }, {
190
- dependsOn: [subnetId, routeTableId],
191
- })
192
- })
193
-
194
- // VPC Endpoints for AWS services (cost optimization)
195
- builder.addResource('S3VPCEndpoint', 'AWS::EC2::VPCEndpoint', {
196
- VpcId: Fn.ref('VPC'),
197
- ServiceName: Fn.sub('com.amazonaws.${AWS::Region}.s3'),
198
- VpcEndpointType: 'Gateway',
199
- RouteTableIds: [
200
- Fn.ref('PublicRouteTable'),
201
- ...Array.from({ length: availabilityZones }, (_, i) => Fn.ref(`PrivateRouteTable${i + 1}`)),
202
- ],
203
- }, {
204
- dependsOn: 'VPC',
205
- })
206
-
207
- // Network ACL for additional security
208
- builder.addResource('NetworkAcl', 'AWS::EC2::NetworkAcl', {
209
- VpcId: Fn.ref('VPC'),
210
- Tags: [
211
- { Key: 'Name', Value: Fn.sub('${AWS::StackName}-nacl') },
212
- ],
213
- }, {
214
- dependsOn: 'VPC',
215
- })
216
-
217
- // Allow all inbound traffic (can be customized)
218
- builder.addResource('NetworkAclEntryInbound', 'AWS::EC2::NetworkAclEntry', {
219
- NetworkAclId: Fn.ref('NetworkAcl'),
220
- RuleNumber: 100,
221
- Protocol: -1,
222
- RuleAction: 'allow',
223
- CidrBlock: '0.0.0.0/0',
224
- }, {
225
- dependsOn: 'NetworkAcl',
226
- })
227
-
228
- // Allow all outbound traffic
229
- builder.addResource('NetworkAclEntryOutbound', 'AWS::EC2::NetworkAclEntry', {
230
- NetworkAclId: Fn.ref('NetworkAcl'),
231
- RuleNumber: 100,
232
- Protocol: -1,
233
- Egress: true,
234
- RuleAction: 'allow',
235
- CidrBlock: '0.0.0.0/0',
236
- }, {
237
- dependsOn: 'NetworkAcl',
238
- })
239
-
240
- // Outputs
241
- builder.addOutputs({
242
- VPCId: {
243
- Description: 'VPC ID',
244
- Value: Fn.ref('VPC'),
245
- Export: {
246
- Name: Fn.sub('${AWS::StackName}-VPC'),
247
- },
248
- },
249
- PublicSubnets: {
250
- Description: 'Public subnet IDs',
251
- Value: Fn.join(',', publicSubnets.map(id => Fn.ref(id))),
252
- Export: {
253
- Name: Fn.sub('${AWS::StackName}-PublicSubnets'),
254
- },
255
- },
256
- PrivateSubnets: {
257
- Description: 'Private subnet IDs',
258
- Value: Fn.join(',', privateSubnets.map(id => Fn.ref(id))),
259
- Export: {
260
- Name: Fn.sub('${AWS::StackName}-PrivateSubnets'),
261
- },
262
- },
263
- })
264
- }
@@ -1,147 +0,0 @@
1
- import type { CloudFormationBuilder } from '../builder'
2
- import { Fn } from '../types'
3
-
4
- export interface QueueConfig {
5
- [queueName: string]: {
6
- fifo?: boolean
7
- visibilityTimeout?: number
8
- messageRetentionPeriod?: number
9
- receiveMessageWaitTime?: number
10
- deadLetterQueue?: boolean
11
- maxReceiveCount?: number
12
- contentBasedDeduplication?: boolean
13
- }
14
- }
15
-
16
- /**
17
- * Add SQS queue resources to CloudFormation template
18
- */
19
- export function addQueueResources(
20
- builder: CloudFormationBuilder,
21
- config: QueueConfig,
22
- ): void {
23
- for (const [queueName, queueConfig] of Object.entries(config)) {
24
- addQueue(builder, queueName, queueConfig)
25
- }
26
- }
27
-
28
- /**
29
- * Add SQS queue
30
- */
31
- function addQueue(
32
- builder: CloudFormationBuilder,
33
- name: string,
34
- config: QueueConfig[string],
35
- ): void {
36
- const logicalId = builder.toLogicalId(`${name}-queue`)
37
- const isFifo = config.fifo || false
38
-
39
- // Dead Letter Queue (if enabled)
40
- let dlqArn: any
41
- if (config.deadLetterQueue) {
42
- const dlqLogicalId = `${logicalId}DLQ`
43
-
44
- builder.addResource(dlqLogicalId, 'AWS::SQS::Queue', {
45
- QueueName: isFifo
46
- ? Fn.sub(`\${AWS::StackName}-${name}-dlq.fifo`)
47
- : Fn.sub(`\${AWS::StackName}-${name}-dlq`),
48
- FifoQueue: isFifo,
49
- MessageRetentionPeriod: 1209600, // 14 days max retention for DLQ
50
- Tags: [
51
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-${name}-dlq`) },
52
- ],
53
- })
54
-
55
- dlqArn = Fn.getAtt(dlqLogicalId, 'Arn')
56
- }
57
-
58
- // Main Queue
59
- const queueProperties: Record<string, any> = {
60
- QueueName: isFifo
61
- ? Fn.sub(`\${AWS::StackName}-${name}.fifo`)
62
- : Fn.sub(`\${AWS::StackName}-${name}`),
63
- FifoQueue: isFifo,
64
- VisibilityTimeout: config.visibilityTimeout || 30,
65
- MessageRetentionPeriod: config.messageRetentionPeriod || 345600, // 4 days
66
- ReceiveMessageWaitTimeSeconds: config.receiveMessageWaitTime || 0,
67
- Tags: [
68
- { Key: 'Name', Value: Fn.sub(`\${AWS::StackName}-${name}`) },
69
- ],
70
- }
71
-
72
- // FIFO-specific settings
73
- if (isFifo && config.contentBasedDeduplication) {
74
- queueProperties.ContentBasedDeduplication = true
75
- }
76
-
77
- // Dead Letter Queue configuration
78
- if (config.deadLetterQueue && dlqArn) {
79
- queueProperties.RedrivePolicy = {
80
- deadLetterTargetArn: dlqArn,
81
- maxReceiveCount: config.maxReceiveCount || 3,
82
- }
83
- }
84
-
85
- builder.addResource(logicalId, 'AWS::SQS::Queue', queueProperties, {
86
- dependsOn: config.deadLetterQueue ? `${logicalId}DLQ` : undefined,
87
- })
88
-
89
- // Queue Policy (allow common AWS services to send messages)
90
- builder.addResource(`${logicalId}Policy`, 'AWS::SQS::QueuePolicy', {
91
- Queues: [Fn.ref(logicalId)],
92
- PolicyDocument: {
93
- Version: '2012-10-17',
94
- Statement: [
95
- {
96
- Effect: 'Allow',
97
- Principal: {
98
- Service: [
99
- 'lambda.amazonaws.com',
100
- 'events.amazonaws.com',
101
- 'sns.amazonaws.com',
102
- ],
103
- },
104
- Action: 'sqs:SendMessage',
105
- Resource: Fn.getAtt(logicalId, 'Arn'),
106
- Condition: {
107
- ArnEquals: {
108
- 'aws:SourceArn': Fn.sub('arn:aws:*:${AWS::Region}:${AWS::AccountId}:*'),
109
- },
110
- },
111
- },
112
- ],
113
- },
114
- }, {
115
- dependsOn: logicalId,
116
- })
117
-
118
- // Outputs
119
- builder.addOutputs({
120
- [`${logicalId}Url`]: {
121
- Description: `${name} queue URL`,
122
- Value: Fn.ref(logicalId),
123
- Export: {
124
- Name: Fn.sub(`\${AWS::StackName}-${name}-queue-url`),
125
- },
126
- },
127
- [`${logicalId}Arn`]: {
128
- Description: `${name} queue ARN`,
129
- Value: Fn.getAtt(logicalId, 'Arn'),
130
- Export: {
131
- Name: Fn.sub(`\${AWS::StackName}-${name}-queue-arn`),
132
- },
133
- },
134
- })
135
-
136
- if (config.deadLetterQueue) {
137
- builder.addOutputs({
138
- [`${logicalId}DLQUrl`]: {
139
- Description: `${name} dead letter queue URL`,
140
- Value: Fn.ref(`${logicalId}DLQ`),
141
- Export: {
142
- Name: Fn.sub(`\${AWS::StackName}-${name}-dlq-url`),
143
- },
144
- },
145
- })
146
- }
147
- }