@sylvesterllc/aws-constructs 1.0.31 → 1.0.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/__tests__/data/testConfig.tsx +136 -0
  2. package/__tests__/mocks/ResourceMock.ts +10 -0
  3. package/__tests__/router.test.ts +195 -0
  4. package/dist/config/customConfigs/ResourceAppConfig.d.ts +4 -1
  5. package/dist/config/customConfigs/ResourceAppConfig.js +1 -1
  6. package/dist/config/types/LogDuration.d.ts +8 -0
  7. package/dist/config/types/LogDuration.js +13 -0
  8. package/dist/config/types/TsgAuthorizerProp.d.ts +6 -0
  9. package/dist/config/types/TsgAuthorizerProp.js +3 -0
  10. package/dist/config/types/TsgAuthorizerType.d.ts +4 -0
  11. package/dist/config/types/TsgAuthorizerType.js +9 -0
  12. package/dist/config/types/TsgEc2Prop.d.ts +7 -0
  13. package/dist/config/types/TsgEc2Prop.js +3 -0
  14. package/dist/config/types/TsgKeyPair.d.ts +4 -0
  15. package/dist/config/types/TsgKeyPair.js +3 -0
  16. package/dist/config/types/TsgLambdaProp.d.ts +2 -0
  17. package/dist/config/types/TsgLambdaProp.js +1 -1
  18. package/dist/config/types/TsgLambdaProps.d.ts +0 -2
  19. package/dist/config/types/TsgLambdaProps.js +1 -1
  20. package/dist/config/types/index.d.ts +1 -0
  21. package/dist/config/types/index.js +2 -1
  22. package/dist/constructs/MicroService.js +4 -13
  23. package/dist/interfaces/ApiLambdaResult.d.ts +4 -0
  24. package/dist/interfaces/ApiLambdaResult.js +3 -0
  25. package/dist/resources/dynamodb/CreateDynamo.js +3 -3
  26. package/dist/resources/ec2/create-ec2-instance.d.ts +9 -0
  27. package/dist/resources/ec2/create-ec2-instance.js +42 -0
  28. package/dist/resources/gateway/CreateApiAndAttachLambdas.d.ts +24 -0
  29. package/dist/resources/gateway/CreateApiAndAttachLambdas.js +89 -0
  30. package/dist/resources/helpers/createRoutes.d.ts +2 -2
  31. package/dist/resources/helpers/createRoutes.js +3 -3
  32. package/dist/resources/lambda/createLambda.d.ts +5 -4
  33. package/dist/resources/lambda/createLambda.js +49 -28
  34. package/dist/resources/{helpers/createAuthorizer.d.ts → lambda-authorizer/TsgJwtTokenAuthorizer.d.ts} +2 -4
  35. package/dist/resources/lambda-authorizer/TsgJwtTokenAuthorizer.js +80 -0
  36. package/dist/resources/lambda-authorizer/TsgRequestAuthorizer.d.ts +12 -0
  37. package/dist/resources/lambda-authorizer/TsgRequestAuthorizer.js +32 -0
  38. package/dist/resources/lambda-authorizer/createAuthorizerHelpers.d.ts +5 -0
  39. package/dist/resources/lambda-authorizer/createAuthorizerHelpers.js +50 -0
  40. package/jest.config.js +9 -0
  41. package/jest.config.ts.old +20 -0
  42. package/package.json +13 -11
  43. package/src/config/customConfigs/ResourceAppConfig.ts +5 -1
  44. package/src/config/types/LogDuration.ts +8 -0
  45. package/src/config/types/TsgAuthorizerProp.ts +9 -0
  46. package/src/config/types/TsgAuthorizerType.ts +5 -0
  47. package/src/config/types/TsgEc2Prop.ts +9 -0
  48. package/src/config/types/TsgKeyPair.ts +6 -0
  49. package/src/config/types/TsgLambdaProp.ts +4 -0
  50. package/src/config/types/TsgLambdaProps.ts +0 -1
  51. package/src/config/types/index.ts +1 -1
  52. package/src/constructs/MicroService.ts +4 -14
  53. package/src/interfaces/ApiLambdaResult.ts +6 -0
  54. package/src/resources/dynamodb/CreateDynamo.ts +1 -1
  55. package/src/resources/ec2/create-ec2-instance.ts +53 -0
  56. package/src/resources/gateway/CreateApiAndAttachLambdas.ts +137 -0
  57. package/src/resources/helpers/createRoutes.ts +3 -3
  58. package/src/resources/lambda/createLambda.ts +83 -55
  59. package/src/resources/{helpers/createAuthorizer.ts → lambda-authorizer/TsgJwtTokenAuthorizer.ts} +3 -3
  60. package/src/resources/lambda-authorizer/TsgRequestAuthorizer.ts +36 -0
  61. package/src/resources/lambda-authorizer/createAuthorizerHelpers.ts +69 -0
  62. package/dist/resources/gateway/createMicroServiceBundle.d.ts +0 -14
  63. package/dist/resources/gateway/createMicroServiceBundle.js +0 -127
  64. package/dist/resources/helpers/createAuthorizer.js +0 -81
  65. package/src/resources/gateway/createMicroServiceBundle.ts +0 -184
@@ -1,81 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.CreateAuthorizer = void 0;
4
- const aws_cdk_lib_1 = require("aws-cdk-lib");
5
- const aws_apigateway_1 = require("aws-cdk-lib/aws-apigateway");
6
- const aws_iam_1 = require("aws-cdk-lib/aws-iam");
7
- const aws_lambda_nodejs_1 = require("aws-cdk-lib/aws-lambda-nodejs");
8
- const path = require("path");
9
- const baseResource_1 = require("../base/baseResource");
10
- const createLambda_1 = require("../lambda/createLambda");
11
- class CreateAuthorizer extends baseResource_1.BaseResource {
12
- get JwtAuthorizer() {
13
- return this.createdResources[0];
14
- }
15
- constructor(scope, props, authProps) {
16
- super(scope, props);
17
- this.authProps = authProps;
18
- this.createdResources = this.createResource(scope);
19
- if (this.createdResources) {
20
- this.createOutput(scope, this.createdResources);
21
- }
22
- }
23
- createResource(scope) {
24
- return [this.createLambdaAuthorizer(scope, this.authProps)];
25
- }
26
- createLambdaAuthorizer(scope, lambdaConfig) {
27
- //console.log("ENTER createLambdaAuthorizer");
28
- const authorizerProps = this.createLambdaFunctionProps(lambdaConfig);
29
- const lambdaId = createLambda_1.CreateLambda.getIdForLambda(lambdaConfig, this.config);
30
- const lambda = new aws_lambda_nodejs_1.NodejsFunction(scope, lambdaId, authorizerProps);
31
- lambda.grantInvoke(new aws_iam_1.ServicePrincipal('apigateway.amazonaws.com'));
32
- if (lambdaConfig?.managedPolicies && lambdaConfig.managedPolicies.length > 0) {
33
- this.assignManagedPolicies(lambda, lambdaConfig.managedPolicies);
34
- }
35
- const props = {
36
- handler: lambda,
37
- authorizerName: lambdaConfig.name,
38
- resultsCacheTtl: aws_cdk_lib_1.Duration.seconds(0),
39
- identitySource: aws_apigateway_1.IdentitySource.header('Authorization'),
40
- };
41
- const lambdaAuthorizer = new aws_apigateway_1.TokenAuthorizer(scope, `${lambdaConfig.name}-authorizer`, props);
42
- return lambdaAuthorizer;
43
- }
44
- createOutput(scope, createdAssets) {
45
- const entity = createdAssets[0];
46
- // new CfnOutput(scope, `authorizer`, {
47
- // value: (entity as TokenAuthorizer).authorizerArn
48
- // });
49
- }
50
- createLambdaFunctionProps(prop) {
51
- const lambdaProp = {
52
- entry: path.join(prop.codePath),
53
- functionName: prop.name,
54
- handler: prop.handler,
55
- runtime: prop.runtime || this.config.GLOBALS.stackRuntime,
56
- timeout: prop.duration || aws_cdk_lib_1.Duration.minutes(2),
57
- memorySize: prop.memory || 512,
58
- environment: {
59
- "VERBOSE_LOGGING": "true",
60
- ...prop.environment
61
- },
62
- bundling: {
63
- minify: false,
64
- target: 'es2020',
65
- sourceMap: true,
66
- sourceMapMode: aws_lambda_nodejs_1.SourceMapMode.INLINE,
67
- environment: prop.environment || prop.environment,
68
- },
69
- };
70
- return lambdaProp;
71
- }
72
- ;
73
- assignManagedPolicies(lambda, managedPolicyNames) {
74
- managedPolicyNames.forEach((managedPolicyName) => {
75
- let policy = aws_iam_1.ManagedPolicy.fromAwsManagedPolicyName(managedPolicyName);
76
- lambda.role?.addManagedPolicy(policy);
77
- });
78
- }
79
- }
80
- exports.CreateAuthorizer = CreateAuthorizer;
81
- //# sourceMappingURL=data:application/json;base64,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
@@ -1,184 +0,0 @@
1
- import { IRestApi, TokenAuthorizer } from "aws-cdk-lib/aws-apigateway";
2
- import { ITable, Table } from "aws-cdk-lib/aws-dynamodb";
3
- import { NodejsFunction } from "aws-cdk-lib/aws-lambda-nodejs";
4
- import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
5
- import { Construct } from "constructs";
6
- import { TsgDynamoTableRef, TsgLambdaProp } from "../../config/types";
7
- import { TsgLambdaProps } from "../../config/types/TsgLambdaProps";
8
- import { MicroserviceProps } from "../../interfaces/MicroserviceProps";
9
- import { CreateAuthorizer } from "../helpers/createAuthorizer";
10
- import { Routes } from "../helpers/createRoutes";
11
- import { CreateLambda } from "../lambda/createLambda";
12
- import { RemovalPolicy, Stack } from "aws-cdk-lib";
13
- import { CreateDynamoDb } from "../dynamodb/CreateDynamo";
14
- import { ISecret } from "aws-cdk-lib/aws-secretsmanager";
15
-
16
- import { ServiceBundleConfig } from "../../config/ServiceBundleConfig";
17
-
18
- export class CreateMicroServiceBundle {
19
-
20
- protected readonly requireDynamoTableRefs: boolean;
21
- protected readonly requireAuthorizer: boolean;
22
-
23
- constructor(private serviceBundleConfig: ServiceBundleConfig) {
24
-
25
- this.requireDynamoTableRefs = (this.serviceBundleConfig.props.RESOURCES.DYNAMO?.TABLE_REFS?.length ?? 0 > 0) ? true : false;
26
- this.requireAuthorizer = (this.serviceBundleConfig.props.RESOURCES.AUTHORIZER) ? true : false;
27
- this.onInit(this.serviceBundleConfig.scope);
28
- }
29
-
30
- private onInit(scope: Construct) {
31
-
32
-
33
- let authorizer: TokenAuthorizer|undefined = undefined;
34
-
35
- // Create Authorizer
36
- if (this.requireAuthorizer) {
37
- authorizer = new CreateAuthorizer(scope, this.serviceBundleConfig.appConfig, this.serviceBundleConfig.props.RESOURCES.AUTHORIZER!).JwtAuthorizer;
38
- authorizer._attachToApi(this.serviceBundleConfig.gatewayApi);
39
- authorizer.applyRemovalPolicy(RemovalPolicy.DESTROY);
40
- }
41
-
42
- // Create Lambdas
43
- const lambdaProp: TsgLambdaProps = {
44
- scope,
45
- prop: this.serviceBundleConfig.props,
46
- layers: this.serviceBundleConfig.layers,
47
- appConfig: this.serviceBundleConfig.appConfig
48
- };
49
-
50
- const lambdas = new CreateLambda(lambdaProp, this.serviceBundleConfig.appConfig);
51
-
52
- if (this.serviceBundleConfig.tables) {
53
- this.AssignAccessToTables(this.serviceBundleConfig.tables, lambdas.Lambdas);
54
- }
55
-
56
- // Allow access to existing tables
57
- // if (this.requireDynamoTableRefs) {
58
- // this.AssignAccessToTableRefs(scope, this.props.RESOURCES.DYNAMO?.TABLE_REFS, lambdas.Lambdas);
59
- // }
60
-
61
- if (this.serviceBundleConfig.secretMgr) {
62
- this.AssignAccessToSecretManager(this.serviceBundleConfig.secretMgr, lambdas.Lambdas);
63
- }
64
-
65
- // lambdas.Lambdas.map((lambda) => {
66
- // lambda.metricErrors({
67
- // label: `${lambda.functionName}-errors`,
68
- // period: Duration.minutes(3)
69
-
70
- // })
71
- // });
72
-
73
- this.AddRoutes(this.serviceBundleConfig.props, this.serviceBundleConfig.gatewayApi, lambdas.Lambdas, authorizer);
74
- }
75
-
76
- private AssignAccessToTables(tables: Table[], lambdas: NodejsFunction[]) {
77
-
78
- if (tables) {
79
- lambdas.forEach((lambda: NodejsFunction) => {
80
-
81
- tables.forEach((table: ITable) => {
82
-
83
-
84
-
85
- // This is a CDK bug: It doesn't provide
86
- // access to the indexes.
87
- //table.grantReadWriteData(lambda);
88
-
89
- // Workaround:
90
- // lambda.addToRolePolicy(
91
- // new PolicyStatement({
92
- // effect: Effect.ALLOW,
93
- // actions: CreateDynamoDb.ReadWriteActions,
94
- // resources: [
95
- // table.tableArn,
96
- // `${table.tableArn}/*`, // This is not recognized by cdk, but table is. why?
97
- // ],
98
- // })
99
- // );
100
-
101
- table.grantReadWriteData(lambda);
102
-
103
-
104
- });
105
-
106
- });
107
- }
108
- }
109
-
110
- private AssignAccessToTableRefs(scope: Construct, tableRefs: TsgDynamoTableRef[] | undefined, lambdas: NodejsFunction[]) {
111
-
112
- if (tableRefs) {
113
- tableRefs.forEach((tableRef: TsgDynamoTableRef) => {
114
-
115
- if (tableRef.region) {
116
- this.AssignReadWriteAccessToTableInRegion(scope, tableRef, lambdas);
117
- }
118
- else {
119
- this.AssignReadWriteAccessToTable(scope, tableRef, lambdas);
120
- }
121
- });
122
- }
123
- }
124
-
125
- private AssignReadWriteAccessToTableInRegion(scope: Construct, tableRef: TsgDynamoTableRef, lambdas: NodejsFunction[]) {
126
- lambdas.forEach((lambda: NodejsFunction) => {
127
-
128
- let tableArn = "arn:aws:dynamodb:" + tableRef.region + ":" + ((scope as Stack).account) + ":table/" + tableRef.tableName;
129
- let statement = new PolicyStatement({
130
- effect: Effect.ALLOW,
131
- resources: [
132
- tableArn,
133
- tableArn + "/index/*",
134
- ],
135
- actions: CreateDynamoDb.ReadWriteActions,
136
- });
137
-
138
- lambda.role?.addToPrincipalPolicy(statement);
139
-
140
- });
141
- }
142
-
143
- private AssignReadWriteAccessToTable(scope: Construct, tableRef: TsgDynamoTableRef, lambdas: NodejsFunction[]) {
144
- let table: ITable = Table.fromTableName(scope, tableRef.tableName, tableRef.tableName);
145
-
146
- lambdas.forEach((lambda: NodejsFunction) => {
147
- table.grantReadWriteData(lambda)
148
-
149
- });
150
- }
151
-
152
- private AddRoutes(props: MicroserviceProps,
153
- gateway: IRestApi,
154
- lambdas: NodejsFunction[],
155
- authorizer?: TokenAuthorizer) {
156
-
157
- props.RESOURCES.LAMBDA?.forEach((prop: TsgLambdaProp) => {
158
-
159
- const lambdaId = CreateLambda.getIdForLambda(prop, this.serviceBundleConfig.appConfig);
160
-
161
- if (!lambdaId) {
162
- throw new Error(`Can't find lambda`);
163
- }
164
- const lambdaNode = lambdas.find(x => x.node.id === lambdaId);
165
-
166
- if (!lambdaNode) {
167
- throw new Error("Can't find the Lambda Integration");
168
- }
169
-
170
- Routes.createResource(prop, gateway, lambdaNode, authorizer);
171
-
172
- });
173
- }
174
-
175
- private AssignAccessToSecretManager(secret: ISecret, lambdas: NodejsFunction[]) {
176
-
177
- lambdas.forEach((lambda) => {
178
- const result = secret.grantRead(lambda);
179
-
180
- });
181
-
182
- }
183
-
184
- }