@sylvesterllc/aws-constructs 1.0.0

package/src/resources/resources/iam/policyDocuments/cognitoPolicy.ts

@@ -0,0 +1,55 @@
+import { IUserPool } from "aws-cdk-lib/aws-cognito";
+import { Effect, PolicyDocument, PolicyStatement } from "aws-cdk-lib/aws-iam";
+import { MicroserviceProps } from "../../../../interfaces/MicroserviceProps";
+
+
+export const cognitoPolicyDocument = (userPool: IUserPool, config: MicroserviceProps) => {
+
+  const cpd: PolicyDocument = new PolicyDocument({
+
+    statements: [
+      new PolicyStatement({
+        resources: [userPool.userPoolArn],
+        actions: [
+          "cognito:*",
+          "cognito-idp:ListUsers"
+        ],
+        effect: Effect.ALLOW,
+      }),
+      new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: [
+          "logs:CreateLogGroup",
+          "logs:CreateLogStream",
+          "logs:DescribeLogGroups",
+          "logs:DescribeLogStreams",
+          "logs:PutLogEvents",
+          "logs:GetLogEvents",
+          "logs:FilterLogEvents"
+        ],
+        resources: ["*"]
+      }),
+      new PolicyStatement({
+        resources: [`arn:aws:dynamodb:${config.GLOBALS.region}:${config.GLOBALS.accountNumber}:table/*`],
+        actions: [
+          "dynamodb:BatchGetItem",
+          "dynamodb:BatchWriteItem",
+          "dynamodb:ConditionCheckItem",
+          "dynamodb:DeleteItem",
+          "dynamodb:DescribeTable",
+          "dynamodb:GetItem",
+          "dynamodb:GetRecords",
+          "dynamodb:GetShardIterator",
+          "dynamodb:PutItem",
+          "dynamodb:Query",
+          "dynamodb:Scan",
+          "dynamodb:UpdateItem",
+
+        ],
+        effect: Effect.ALLOW,
+      }),
+    ],
+  });
+
+  return cpd;
+};

package/src/resources/resources/iam/roles/createRole.ts

@@ -0,0 +1,30 @@
+import { CompositePrincipal, PolicyDocument, Role, RoleProps, ServicePrincipal } from "aws-cdk-lib/aws-iam";
+import { Construct } from "constructs";
+
+
+export const createRole = (scope: Construct, roleName: string, desc: string, policyDocument: PolicyDocument, 
+    servicePrincipal: ServicePrincipal) => {
+
+    const role = new Role(scope, `${roleName}-role`, createRoleProps(roleName, desc, 
+        policyDocument, servicePrincipal));
+    
+    return role;
+};
+
+export const createRoleProps = (roleName: string, desc: string, policyDocument: PolicyDocument, 
+    servicePrincipal: ServicePrincipal) => {
+
+    const roleProp: RoleProps = {
+        roleName,
+        description: 'Allows access to DynamoDb Client Table',
+        inlinePolicies: {
+          policyDocument
+        },
+        assumedBy: new CompositePrincipal(
+          servicePrincipal,
+        )
+  
+      };
+  
+   return roleProp;
+};

package/src/resources/route53/CreateZone.ts

@@ -0,0 +1,62 @@
+// import { CfnOutput } from "aws-cdk-lib";
+// import { HostedZoneProps, IHostedZone, IPublicHostedZone, PublicHostedZone } from "aws-cdk-lib/aws-route53";
+// import { Construct } from "constructs";
+// import { BaseResource } from "../base/BaseResource";
+
+// export class CreateHostedZone extends BaseResource  {
+    
+//     public createdPublicZones: IPublicHostedZone[] = [];
+    
+//     constructor(scope: Construct) {
+//         super(scope);
+
+//         this.createZone();
+        
+//     }
+
+//     public createZone() {
+//         const props: HostedZoneProps = {
+//             zoneName: this.appConfig.DNS.ZoneName
+//         };
+    
+//         let zone: IPublicHostedZone;
+
+//         if (!this.appConfig.DNS.ZoneExist) {
+//             zone = new PublicHostedZone(this.scope, `${this.appConfig.DNS.ZoneNameWithoutPeriod}-hosted-zone`, props);
+//         } else {
+//             if (!this.appConfig.DNS.ZoneName || !this.appConfig.DNS.ZoneId) {
+//                 throw new Error("You must provide a Zone Name and Zone Id");                
+//             }
+//             zone = PublicHostedZone.fromHostedZoneAttributes(this.scope, `${this.appConfig.DNS.ZoneNameWithoutPeriod}-hosted-zone`, {
+//                 zoneName: this.appConfig.DNS.ZoneName,
+//                 hostedZoneId: this.appConfig.DNS.ZoneId
+//             });
+//         }
+
+//         this.createdPublicZones.push(zone);
+    
+//         this.createOutput(this.scope, this.createdPublicZones);
+//     }
+
+//     protected createOutput<HostedZone>(scope: Construct, createdAssets: HostedZone[]): void {
+        
+//         let nameServers = '';
+        
+//         this.createdPublicZones.forEach((zone, index) => {
+//             console.log('Name Servers:', zone.hostedZoneNameServers);    
+            
+//             zone.hostedZoneNameServers?.forEach((server, idx) => { 
+//                 console.log(nameServers);
+//                 nameServers = `${nameServers} - ${idx}: ${server}`;
+//             }, '');
+    
+//             new CfnOutput(scope, `zone-output-${index}`, {
+//                 value: zone.hostedZoneId,
+//                 exportName: 'hosted-zone-id'
+//             });
+    
+//             nameServers = '';
+//         });
+//     }
+
+// }

package/src/resources/route53/create-zones.ts

@@ -0,0 +1,41 @@
+// import { CfnOutput, Token } from "aws-cdk-lib";
+// import { HostedZoneProps, PublicHostedZone, ZoneDelegationRecord } from "aws-cdk-lib/aws-route53";
+// import { Construct } from "constructs";
+// import { MicroserviceProps } from "../../interfaces/MicroserviceProps";
+
+
+// export const createZones = (scope: Construct, appConfig: MicroserviceProps) => {
+
+//     const createdPublicZones: PublicHostedZone[] = [];
+
+//     const props: HostedZoneProps = {
+//         zoneName: appConfig.DNS.ZoneName
+//     };
+
+//     const createdZone = new PublicHostedZone(scope, `${appConfig.DNS.ZoneNameWithoutPeriod}-hosted-zone`, props);
+
+//     createdPublicZones.push(createdZone);
+
+//     zoneOutput(scope, createdPublicZones);
+// };
+
+// const zoneOutput = (scope: Construct, publicZones: PublicHostedZone[]) => {
+
+    
+//     let nameServers = '';
+//     publicZones.forEach((zone, index) => {
+//         console.log('Name Servers:', zone.hostedZoneNameServers);    
+//         zone.hostedZoneNameServers?.forEach((server, idx) => { 
+//             console.log(nameServers);
+//             nameServers = `${nameServers} - ${idx}: ${server}`;
+//         }, '');
+
+//         new CfnOutput(scope, `zone-output-${index}`, {
+//             value: zone.hostedZoneId,
+//             exportName: 'hosted-zone-id'
+//         });
+
+//         nameServers = '';
+//     });
+
+// };

package/src/resources/securityManager/index.ts

@@ -0,0 +1,24 @@
+import { SecretValue } from "aws-cdk-lib";
+import { Secret } from "aws-cdk-lib/aws-secretsmanager";
+import { Construct } from "constructs";
+import { MicroserviceProps } from "../../interfaces/MicroserviceProps";
+
+export const createSecretManager = (scope: Construct) => {
+
+  const secureMgr = new Secret(scope, 'TemplatedSecret', {
+    secretName: 'GITHUB_TOKEN',
+    secretStringValue: SecretValue.unsafePlainText(process.env.GITHUB_TOKEN!),
+  });
+
+
+
+};
+
+export const getSecretManager = (scope: Construct, prop: MicroserviceProps,
+  secretManagerARN: string) => {
+
+  const secretMgr = Secret.fromSecretCompleteArn(scope, `${prop.GLOBALS.name}-secret-manager`,
+    secretManagerARN);
+
+  return secretMgr;
+};

package/tsconfig.json

@@ -0,0 +1,40 @@
+{
+    "compilerOptions": {
+      "target": "ES2020",
+      "module": "commonjs",
+      "lib": [
+        "es2020"
+      ],
+      "declaration": true,
+      "strict": true,
+      "noImplicitAny": true,
+      "strictNullChecks": true,
+      "noImplicitThis": true,
+      "alwaysStrict": true,
+      "noUnusedLocals": false,
+      "noUnusedParameters": false,
+      "noImplicitReturns": true,
+      "noFallthroughCasesInSwitch": false,
+      "inlineSourceMap": true,
+      "inlineSources": true,
+      "experimentalDecorators": true,
+      "strictPropertyInitialization": false,
+      "rootDir": "src",
+      "outDir": "dist",      
+      "typeRoots": [
+        "./node_modules/@types"
+      ],
+      "paths": {
+        "@davissylvester/common": ["./layers/common/dist/nodejs/node_modules/@davissylvester/common"],
+        
+      }
+    },
+    "exclude": [
+      "node_modules",
+      "cdk.out"
+    ],
+    "include": [
+        "src"
+      ],
+  }
+