@sylvesterllc/aws-constructs 1.1.62 → 1.1.63

package/.github/workflows/publish.yml

@@ -16,38 +16,32 @@ jobs:
       id-token: write # for provenance (optional)
     steps:
       - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
         with:
-          version: 9
+          bun-version: latest
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: "22.x"
-          cache: "pnpm"
+          node-version: "24.x"
+          # Note: actions/setup-node does not support bun caching
       - name: Configure .npmrc for npm registry
         run: |
           cat > ~/.npmrc << EOF
           //registry.npmjs.org/:_authToken=${{ secrets.NPM_REGISTRY_TOKEN }}
           registry=https://registry.npmjs.org/
           EOF
-      - name: Install dependencies
-        run: |
-          if [ -f pnpm-lock.yaml ]; then
-            echo "Found pnpm-lock.yaml; using --frozen-lockfile"
-            pnpm install --frozen-lockfile
-          else
-            echo "No pnpm-lock.yaml present; performing regular install"
-            pnpm install
-          fi
+      - name: Install dependencies (bun)
+        run: bun install
       - name: Verify npm auth & scope
         run: |
           npm whoami || { echo 'Not authenticated'; exit 1; }
           npm ping
           echo "Publishing package version $(jq -r '.version' package.json)"
       - name: Run tests
-        run: pnpm test -- --passWithNoTests
+        run: bun run test -- --passWithNoTests
       - name: Build
-        run: pnpm build
+        run: bun run build
       - name: Guard against duplicate version
         run: |
           V=$(jq -r '.version' package.json)

package/__tests__/SpaCFRoute53.test.ts

@@ -0,0 +1,80 @@
+import { App, Stack } from "aws-cdk-lib";
+import { SpaCFRoute53 } from "../src/constructs/SpaCFRoute53";
+import { SpaProps } from "../src/interfaces/SpaProps";
+import { Template } from "aws-cdk-lib/assertions";
+
+describe("SpaCFRoute53", () => {
+  const props: SpaProps = {
+    siteName: "testsite",
+    bucketName: "testsite-bucket-unique",
+    cloudfrontName: "testsite-cf",
+    domainName: "example.com",
+    fqdn: "spa.example.com",
+  };
+
+  it("provisions a private, versioned, encrypted S3 bucket with access logging", () => {
+    const app = new App();
+    const stack = new Stack(app, "TestStack");
+    new SpaCFRoute53(stack, "SpaCFRoute53", props);
+    const template = Template.fromStack(stack);
+    template.hasResourceProperties("AWS::S3::Bucket", {
+      BucketName: props.bucketName,
+      VersioningConfiguration: { Status: "Enabled" },
+      BucketEncryption: {
+        ServerSideEncryptionConfiguration: [
+          { ServerSideEncryptionByDefault: { SSEAlgorithm: "AES256" } },
+        ],
+      },
+      PublicAccessBlockConfiguration: {
+        BlockPublicAcls: true,
+        BlockPublicPolicy: true,
+        IgnorePublicAcls: true,
+        RestrictPublicBuckets: true,
+      },
+    });
+  });
+
+  it("provisions a logs bucket with 14-day retention", () => {
+    const app = new App();
+    const stack = new Stack(app, "TestStack");
+    new SpaCFRoute53(stack, "SpaCFRoute53", props);
+    const template = Template.fromStack(stack);
+    template.hasResourceProperties("AWS::S3::Bucket", {
+      LifecycleConfiguration: {
+        Rules: [{ Status: "Enabled", ExpirationInDays: 14 }],
+      },
+    });
+  });
+
+  it("provisions a CloudFront distribution with TLS 1.3, GET/HEAD only, and SPA error routing", () => {
+    const app = new App();
+    const stack = new Stack(app, "TestStack");
+    new SpaCFRoute53(stack, "SpaCFRoute53", props);
+    const template = Template.fromStack(stack);
+    template.hasResourceProperties("AWS::CloudFront::Distribution", {
+      DistributionConfig: {
+        Aliases: [props.fqdn],
+        DefaultRootObject: "index.html",
+        ViewerCertificate: {
+          MinimumProtocolVersion: "TLSv1.3_2021",
+        },
+        DefaultCacheBehavior: {
+          AllowedMethods: ["GET", "HEAD"],
+          ViewerProtocolPolicy: "redirect-to-https",
+        },
+        CustomErrorResponses: [
+          {
+            ErrorCode: 403,
+            ResponseCode: 200,
+            ResponsePagePath: "/index.html",
+          },
+          {
+            ErrorCode: 404,
+            ResponseCode: 200,
+            ResponsePagePath: "/index.html",
+          },
+        ],
+      },
+    });
+  });
+});