@takumi-stack/core 1.0.0

package/prefab/analytics/events/index.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventsAnalyticsPrefab = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_athena_1 = require("aws-cdk-lib/aws-athena");
+const aws_events_1 = require("aws-cdk-lib/aws-events");
+const aws_events_targets_1 = require("aws-cdk-lib/aws-events-targets");
+const aws_glue_1 = require("aws-cdk-lib/aws-glue");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_kinesisfirehose_1 = require("aws-cdk-lib/aws-kinesisfirehose");
+const aws_s3_1 = require("aws-cdk-lib/aws-s3");
+const constructs_1 = require("constructs");
+const common_1 = require("../../../common");
+const base_function_1 = require("../../../prefab/compute/function/base-function");
+class EventsAnalyticsPrefab extends constructs_1.Construct {
+    datalakeBucket;
+    database;
+    crawler;
+    athenaOutputBucket;
+    workGroup;
+    constructor(service, params) {
+        super(service, (0, common_1.getLogicalName)(EventsAnalyticsPrefab.name));
+        this.datalakeBucket = new aws_s3_1.Bucket(service, 'DataLakeBucket', {
+            bucketName: (0, common_1.getBucketName)('datalake', service.props),
+            versioned: false,
+            publicReadAccess: false,
+            blockPublicAccess: aws_s3_1.BlockPublicAccess.BLOCK_ALL,
+            encryption: aws_s3_1.BucketEncryption.KMS_MANAGED,
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+            ...(service.props.envName !== 'prod' ? { autoDeleteObjects: true } : {}),
+            lifecycleRules: [
+                {
+                    transitions: [
+                        {
+                            storageClass: aws_s3_1.StorageClass.INFREQUENT_ACCESS,
+                            transitionAfter: aws_cdk_lib_1.Duration.days(params.lifecycleDurations?.infrequentDays || 90),
+                        },
+                        {
+                            storageClass: aws_s3_1.StorageClass.GLACIER,
+                            transitionAfter: aws_cdk_lib_1.Duration.days(params.lifecycleDurations?.glacierDays || 360),
+                        },
+                    ],
+                },
+            ],
+        });
+        if (service.props.envName === 'prod') {
+            this.datalakeBucket.applyRemovalPolicy(aws_cdk_lib_1.RemovalPolicy.RETAIN);
+        }
+        const role = new aws_iam_1.Role(service, (0, common_1.getLogicalName)('DataLakeDeliveryStringRole'), {
+            assumedBy: new aws_iam_1.ServicePrincipal('firehose.amazonaws.com'),
+        });
+        const lambdaFunction = new base_function_1.BaseFunction(service, {
+            name: 'ingestion-transform',
+            baseFunctionFolder: __dirname,
+            ...(service.props.isDemoProject ? {} : { compiled: true }),
+        }).lambdaFunction;
+        const deliveryStream = new aws_kinesisfirehose_1.CfnDeliveryStream(service, 'DataLakeDeliveryStream', {
+            deliveryStreamType: 'DirectPut',
+            extendedS3DestinationConfiguration: {
+                bucketArn: this.datalakeBucket.bucketArn,
+                roleArn: role.roleArn,
+                compressionFormat: 'UNCOMPRESSED',
+                prefix: 'year=!{timestamp:yyyy}/month=!{timestamp:MM}/day=!{timestamp:dd}/hour=!{timestamp:HH}/',
+                errorOutputPrefix: 'error/!{firehose:random-string}/!{firehose:error-output-type}/!{timestamp:yyyy/MM/dd}/',
+                bufferingHints: {
+                    intervalInSeconds: params.bufferingHints?.intervalInSeconds || 300,
+                    sizeInMBs: params.bufferingHints?.sizeInMBs || 5,
+                },
+                processingConfiguration: {
+                    enabled: true,
+                    processors: [
+                        {
+                            type: 'Lambda',
+                            parameters: [{ parameterName: 'LambdaArn', parameterValue: lambdaFunction.functionArn }],
+                        },
+                    ],
+                },
+            },
+        });
+        new aws_events_1.Rule(service, 'EventProcessorRule', {
+            ...(params.eventBus ? { eventBus: params.eventBus.bus } : {}),
+            eventPattern: { source: [params.eventSource || 'app'] },
+            targets: [new aws_events_targets_1.KinesisFirehoseStream(deliveryStream)],
+        });
+        this.datalakeBucket.grantReadWrite(role);
+        lambdaFunction.grantInvoke(role);
+        this.database = new aws_glue_1.CfnDatabase(service, 'Database', {
+            catalogId: (0, common_1.getDeployConfig)(service.props).env.account,
+            databaseInput: { name: (0, common_1.getDatabaseName)('datalake', service.props) },
+        });
+        const crawlerRole = new aws_iam_1.Role(service, 'CrawlerRole', { assumedBy: new aws_iam_1.ServicePrincipal('glue.amazonaws.com') });
+        crawlerRole.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+            effect: aws_iam_1.Effect.ALLOW,
+            actions: [
+                'glue:*',
+                's3:GetBucketLocation',
+                's3:ListBucket',
+                's3:ListAllMyBuckets',
+                'iam:ListRolePolicies',
+                'iam:GetRole',
+                'iam:GetRolePolicy',
+                'cloudwatch:PutMetricData',
+                'logs:PutLogEvents',
+                'logs:CreateLogGroup',
+                'logs:CreateLogStream',
+            ],
+            resources: ['*'],
+        }));
+        this.datalakeBucket.grantReadWrite(crawlerRole);
+        this.crawler = new aws_glue_1.CfnCrawler(this, 'DatalakeTableCrawler', {
+            name: (0, common_1.getResourceName)('crawler', service.props),
+            databaseName: this.database.ref.toString(),
+            role: crawlerRole.roleArn,
+            targets: { s3Targets: [{ path: this.datalakeBucket.bucketName }] },
+            configuration: JSON.stringify({
+                Version: 1.0,
+                Grouping: { TableGroupingPolicy: 'CombineCompatibleSchemas' },
+                CrawlerOutput: {
+                    Tables: { AddOrUpdateBehavior: 'MergeNewColumns' },
+                    Partitions: { AddOrUpdateBehavior: 'InheritFromTable' },
+                },
+            }),
+            schemaChangePolicy: {
+                deleteBehavior: 'DELETE_FROM_DATABASE',
+                updateBehavior: 'UPDATE_IN_DATABASE',
+            },
+            ...params.paramsCrawlerProps,
+        });
+        new aws_cdk_lib_1.CfnOutput(service, 'CrawlerName', {
+            exportName: (0, common_1.getResourceName)('CrawlerName', service.props),
+            value: this.crawler.name,
+        });
+        new aws_cdk_lib_1.CfnOutput(service, 'DatabaseName', {
+            exportName: (0, common_1.getResourceName)('DatabaseName', service.props),
+            value: this.database.ref.toString(),
+        });
+        new aws_cdk_lib_1.CfnOutput(service, 'TableName', {
+            exportName: (0, common_1.getResourceName)('TableName', service.props),
+            value: (0, common_1.getDatabaseName)('datalake', service.props),
+        });
+        this.athenaOutputBucket = new aws_s3_1.Bucket(service, 'QueryOutputsBucket', {
+            bucketName: (0, common_1.getBucketName)('query-outputs', service.props),
+            versioned: false,
+            publicReadAccess: false,
+            blockPublicAccess: aws_s3_1.BlockPublicAccess.BLOCK_ALL,
+            encryption: aws_s3_1.BucketEncryption.KMS_MANAGED,
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+            autoDeleteObjects: true,
+        });
+        this.workGroup = new aws_athena_1.CfnWorkGroup(service, 'DataLakeWorkGroup', {
+            name: (0, common_1.getResourceName)('datalake', service.props),
+            recursiveDeleteOption: true,
+            workGroupConfiguration: {
+                resultConfiguration: {
+                    outputLocation: this.athenaOutputBucket.s3UrlForObject(),
+                },
+            },
+        });
+        this.workGroup.applyRemovalPolicy(aws_cdk_lib_1.RemovalPolicy.DESTROY);
+    }
+}
+exports.EventsAnalyticsPrefab = EventsAnalyticsPrefab;
+//# sourceMappingURL=index.js.map

package/prefab/analytics/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../prefab/analytics/events/index.ts"],"names":[],"mappings":";;;AAAA,6CAAiE;AACjE,uDAAsD;AACtD,uDAA8C;AAC9C,uEAAuE;AACvE,mDAAgF;AAChF,iDAAsF;AACtF,yEAAoE;AACpE,+CAA+F;AAC/F,2CAAuC;AAEvC,mCAAwH;AAExH,yEAAqE;AAiBrE,MAAa,qBAAsB,SAAQ,sBAAS;IAClC,cAAc,CAAS;IACvB,QAAQ,CAAc;IACtB,OAAO,CAAa;IACpB,kBAAkB,CAAS;IAC3B,SAAS,CAAe;IAExC,YAAY,OAAqB,EAAE,MAA6B;QAC9D,KAAK,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3D,IAAI,CAAC,cAAc,GAAG,IAAI,eAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE;YAC1D,UAAU,EAAE,IAAA,sBAAa,EAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;YACpD,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,0BAAiB,CAAC,SAAS;YAC9C,UAAU,EAAE,yBAAgB,CAAC,WAAW;YACxC,aAAa,EAAE,2BAAa,CAAC,OAAO;YACpC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,cAAc,EAAE;gBACd;oBACE,WAAW,EAAE;wBACX;4BACE,YAAY,EAAE,qBAAY,CAAC,iBAAiB;4BAC5C,eAAe,EAAE,sBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,IAAI,EAAE,CAAC;yBAChF;wBACD;4BACE,YAAY,EAAE,qBAAY,CAAC,OAAO;4BAClC,eAAe,EAAE,sBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,WAAW,IAAI,GAAG,CAAC;yBAC9E;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,2BAAa,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,4BAA4B,CAAC,EAAE;YAC3E,SAAS,EAAE,IAAI,0BAAgB,CAAC,wBAAwB,CAAC;SAC1D,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,4BAAY,CAAC,OAAO,EAAE;YAC/C,IAAI,EAAE,qBAAqB;YAC3B,kBAAkB,EAAE,SAAS;YAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC3D,CAAC,CAAC,cAAc,CAAC;QAElB,MAAM,cAAc,GAAG,IAAI,uCAAiB,CAAC,OAAO,EAAE,wBAAwB,EAAE;YAC9E,kBAAkB,EAAE,WAAW;YAC/B,kCAAkC,EAAE;gBAClC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,iBAAiB,EAAE,cAAc;gBACjC,MAAM,EAAE,wFAAwF;gBAChG,iBAAiB,EAAE,wFAAwF;gBAC3G,cAAc,EAAE;oBACd,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,iBAAiB,IAAI,GAAG;oBAClE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,IAAI,CAAC;iBACjD;gBACD,uBAAuB,EAAE;oBACvB,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC;yBACzF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,IAAI,iBAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE;YACtC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;YACvD,OAAO,EAAE,CAAC,IAAI,0CAAqB,CAAC,cAAc,CAAC,CAAC;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAW,CAAC,OAAO,EAAE,UAAU,EAAE;YACnD,SAAS,EAAE,IAAA,wBAAe,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO;YACrD,aAAa,EAAE,EAAE,IAAI,EAAE,IAAA,wBAAe,EAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;SACpE,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,cAAI,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,0BAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAEhH,WAAW,CAAC,oBAAoB,CAC9B,IAAI,yBAAe,CAAC;YAClB,MAAM,EAAE,gBAAM,CAAC,KAAK;YACpB,OAAO,EAAE;gBACP,QAAQ;gBACR,sBAAsB;gBACtB,eAAe;gBACf,qBAAqB;gBACrB,sBAAsB;gBACtB,aAAa;gBACb,mBAAmB;gBACnB,0BAA0B;gBAC1B,mBAAmB;gBACnB,qBAAqB;gBACrB,sBAAsB;aACvB;YACD,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAU,CAAC,IAAI,EAAE,sBAAsB,EAAE;YAC1D,IAAI,EAAE,IAAA,wBAAe,EAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC;YAC/C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC1C,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE;YAClE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC5B,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,EAAE,mBAAmB,EAAE,0BAA0B,EAAE;gBAC7D,aAAa,EAAE;oBACb,MAAM,EAAE,EAAE,mBAAmB,EAAE,iBAAiB,EAAE;oBAClD,UAAU,EAAE,EAAE,mBAAmB,EAAE,kBAAkB,EAAE;iBACxD;aACF,CAAC;YACF,kBAAkB,EAAE;gBAClB,cAAc,EAAE,sBAAsB;gBACtC,cAAc,EAAE,oBAAoB;aACrC;YACD,GAAG,MAAM,CAAC,kBAAkB;SAC7B,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,OAAO,EAAE,aAAa,EAAE;YACpC,UAAU,EAAE,IAAA,wBAAe,EAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC;YACzD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAc;SACnC,CAAC,CAAC;QACH,IAAI,uBAAS,CAAC,OAAO,EAAE,cAAc,EAAE;YACrC,UAAU,EAAE,IAAA,wBAAe,EAAC,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC;YAC1D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;SACpC,CAAC,CAAC;QACH,IAAI,uBAAS,CAAC,OAAO,EAAE,WAAW,EAAE;YAClC,UAAU,EAAE,IAAA,wBAAe,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC;YACvD,KAAK,EAAE,IAAA,wBAAe,EAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,IAAI,eAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE;YAClE,UAAU,EAAE,IAAA,sBAAa,EAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC;YACzD,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,0BAAiB,CAAC,SAAS;YAC9C,UAAU,EAAE,yBAAgB,CAAC,WAAW;YACxC,aAAa,EAAE,2BAAa,CAAC,OAAO;YACpC,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE;YAC9D,IAAI,EAAE,IAAA,wBAAe,EAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;YAChD,qBAAqB,EAAE,IAAI;YAC3B,sBAAsB,EAAE;gBACtB,mBAAmB,EAAE;oBACnB,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE;iBACzD;aACF;SACF,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,2BAAa,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;CACF;AAnKD,sDAmKC"}

package/prefab/analytics/index.d.ts

@@ -0,0 +1,2 @@
+export * from './events';
+//# sourceMappingURL=index.d.ts.map

package/prefab/analytics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../prefab/analytics/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/prefab/analytics/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./events"), exports);
+//# sourceMappingURL=index.js.map

package/prefab/analytics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../prefab/analytics/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}

package/prefab/auth/cognito-pool/index.d.ts

@@ -0,0 +1,65 @@
+import * as awsCognito from 'aws-cdk-lib/aws-cognito';
+import { Key } from 'aws-cdk-lib/aws-kms';
+import { Construct } from 'constructs';
+
+import { ServiceStack, Modifier } from '../../../common';
+
+export type AuthPoolParams = {
+  userPool?: Partial<awsCognito.UserPoolProps>;
+  userPoolClient?: Partial<awsCognito.UserPoolClientProps>;
+  userPoolDomain?: Partial<awsCognito.UserPoolDomainProps>;
+  emailConfiguration?: awsCognito.UserPoolSESOptions;
+  callbackUrl?: string;
+  enableCustomSender?: boolean;
+  socialLogin?: {
+    google?: Omit<awsCognito.UserPoolIdentityProviderGoogleProps, 'userPool'>;
+    facebook?: awsCognito.UserPoolIdentityProviderFacebookProps;
+    apple?: awsCognito.UserPoolIdentityProviderAppleProps;
+  };
+};
+export declare class CognitoAuthPoolPrefab extends Construct {
+  readonly userPool: awsCognito.UserPool;
+  readonly userPoolClient: awsCognito.UserPoolClient;
+  readonly userPoolDomain: awsCognito.UserPoolDomain;
+  readonly frontendRefs: Record<string, string>;
+  readonly kmsKey: Key | undefined;
+  readonly props: import('../../../common').BaseServiceProps<
+    import('../../../common').BaseGlobalProps<
+      {
+        projectName: string;
+        projectShortName: string;
+        repositoryName: string;
+        landingZones: string[];
+        pipelineNotificationSlackChannel?: string;
+        isDemoProject?: boolean;
+        bootstrappingServices?: string[];
+        isSingleProjectAccount?: boolean;
+      },
+      {
+        roleName: string;
+        deployBranch: string;
+        hostedZoneName: string;
+        envDomainName: string;
+        emailSender: string;
+      },
+      import('../../../common').BaseGlobalDeployTarget<string>
+    >
+  >;
+  /**
+   * Creates a Cognito UserPool
+   *
+   * @param service - The instance of StackService where the prefab will be deployed
+   * @param params - Prefab params
+   * @returns CognitoAuthPoolPrefab instance
+   */
+  constructor(service: ServiceStack, params: AuthPoolParams);
+  useMod(mods: ((userPool: awsCognito.UserPool) => any)[]): Modifier;
+  customSmsSenderMod(): Modifier;
+  static modifier: {
+    updateUserAtt: () => Modifier;
+    deleteUser: () => Modifier;
+    preSignUp: () => Modifier;
+    authUser: () => Modifier;
+  };
+}
+//# sourceMappingURL=index.d.ts.map

package/prefab/auth/cognito-pool/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../prefab/auth/cognito-pool/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,yBAAyB,CAAC;AAGtD,OAAO,EAAE,GAAG,EAAW,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,YAAY,EAA8C,QAAQ,EAA8B,MAAM,QAAQ,CAAC;AAExH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACzD,kBAAkB,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE;QACZ,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,mCAAmC,EAAE,UAAU,CAAC,CAAC;QAC1E,QAAQ,CAAC,EAAE,UAAU,CAAC,qCAAqC,CAAC;QAC5D,KAAK,CAAC,EAAE,UAAU,CAAC,kCAAkC,CAAC;KACvD,CAAC;CACH,CAAC;AAEF,qBAAa,qBAAsB,SAAQ,SAAS;IAClD,SAAgB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC;IAC9C,SAAgB,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC;IAC1D,SAAgB,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC;IAC1D,SAAgB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,SAAgB,MAAM,EAAE,GAAG,GAAG,SAAS,CAAC;IACxC,SAAgB,KAAK;;;;;;;;;;;;;;;yDAAC;IAGtB;;;;;;OAMG;gBACS,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc;IA6HlD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,GAAG,QAAQ;IAQlE,kBAAkB,IAAI,QAAQ;IAiCrC,OAAc,QAAQ;6BACD,QAAQ;0BAUX,QAAQ;yBAUT,QAAQ;wBAgBT,QAAQ;MAkBtB;CACH"}

package/prefab/auth/cognito-pool/index.js

@@ -0,0 +1,240 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CognitoAuthPoolPrefab = void 0;
+const awsCognito = __importStar(require("aws-cdk-lib/aws-cognito"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_kms_1 = require("aws-cdk-lib/aws-kms");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const aws_route53_targets_1 = require("aws-cdk-lib/aws-route53-targets");
+const constructs_1 = require("constructs");
+const common_1 = require("../../../common");
+class CognitoAuthPoolPrefab extends constructs_1.Construct {
+    userPool;
+    userPoolClient;
+    userPoolDomain;
+    frontendRefs;
+    kmsKey;
+    props;
+    // public readonly googleProvider: awsCognito.UserPoolIdentityProviderGoogle | undefined;
+    /**
+     * Creates a Cognito UserPool
+     *
+     * @param service - The instance of StackService where the prefab will be deployed
+     * @param params - Prefab params
+     * @returns CognitoAuthPoolPrefab instance
+     */
+    constructor(service, params) {
+        super(service, (0, common_1.getLogicalName)(CognitoAuthPoolPrefab.name));
+        this.props = service.props;
+        //User Pool
+        if (params.enableCustomSender) {
+            this.kmsKey = new aws_kms_1.Key(this, (0, common_1.getResourceName)('kms', service.props), {
+                keySpec: aws_kms_1.KeySpec.SYMMETRIC_DEFAULT,
+                alias: (0, common_1.getResourceName)('kms-alias', service.props),
+                enableKeyRotation: false,
+            });
+            this.kmsKey.addToResourcePolicy(new aws_iam_1.PolicyStatement({
+                actions: ['kms:Encrypt'],
+                effect: aws_iam_1.Effect.ALLOW,
+                principals: [new aws_iam_1.ServicePrincipal('cognito-idp.amazonaws.com')],
+                resources: ['*'],
+            }));
+        }
+        const defaultUserPoolProps = {
+            userPoolName: (0, common_1.getResourceName)('', service.props),
+            accountRecovery: awsCognito.AccountRecovery.EMAIL_ONLY,
+            selfSignUpEnabled: true,
+            autoVerify: { email: true },
+            signInCaseSensitive: false,
+            passwordPolicy: { minLength: 8, requireDigits: true },
+            customSenderKmsKey: params.enableCustomSender ? this.kmsKey : undefined,
+            email: params.emailConfiguration && awsCognito.UserPoolEmail.withSES(params.emailConfiguration),
+        };
+        const userPool = new awsCognito.UserPool(this, 'UserPool', { ...defaultUserPoolProps, ...params.userPool });
+        // Social Login
+        if (params.socialLogin?.google) {
+            const googleProvider = new awsCognito.UserPoolIdentityProviderGoogle(this, 'GoogleProvider', {
+                userPool: userPool,
+                scopes: ['openid', 'email', 'profile'],
+                attributeMapping: {
+                    email: awsCognito.ProviderAttribute.GOOGLE_EMAIL,
+                    givenName: awsCognito.ProviderAttribute.GOOGLE_GIVEN_NAME,
+                    familyName: awsCognito.ProviderAttribute.GOOGLE_FAMILY_NAME,
+                },
+                ...params.socialLogin.google,
+            });
+            userPool.registerIdentityProvider(googleProvider);
+        }
+        if (params.socialLogin?.facebook) {
+            const facebookProvider = new awsCognito.UserPoolIdentityProviderFacebook(this, 'FacebookProvider', params.socialLogin.facebook);
+            userPool.registerIdentityProvider(facebookProvider);
+        }
+        if (params.socialLogin?.apple) {
+            const appleProvider = new awsCognito.UserPoolIdentityProviderApple(this, 'AppleProvider', params.socialLogin.apple);
+            userPool.registerIdentityProvider(appleProvider);
+        }
+        // UserPoolClient
+        const callbackUrl = params.callbackUrl || (0, common_1.getDomain)('app', service.props, true);
+        const defaultUserClientProps = {
+            userPoolClientName: (0, common_1.getResourceName)('', service.props),
+            authFlows: {
+                custom: true,
+                userSrp: true,
+                userPassword: true,
+                adminUserPassword: false,
+            },
+            oAuth: {
+                flows: {
+                    authorizationCodeGrant: true,
+                },
+                callbackUrls: [callbackUrl, ...(service.props.envName === 'dev' ? ['http://localhost:3000'] : [])],
+                logoutUrls: [`${callbackUrl}/sign-in`, ...(service.props.envName === 'dev' ? ['http://localhost:3000/sign-in'] : [])],
+            },
+            preventUserExistenceErrors: true,
+            generateSecret: false,
+        };
+        const userPoolClient = new awsCognito.UserPoolClient(this, 'UserPoolClient', {
+            userPool,
+            ...defaultUserClientProps,
+            ...params.userPoolClient,
+        });
+        // UserPoolDomain
+        const userPoolDomain = new awsCognito.UserPoolDomain(this, 'UserPoolDomain', {
+            userPool,
+            ...(params.userPoolDomain ? params.userPoolDomain : { cognitoDomain: { domainPrefix: (0, common_1.getDomain)('auth', service.props).replace(/\./g, '-') } }),
+        });
+        if (params.userPoolDomain) {
+            const hostedZone = aws_route53_1.HostedZone.fromLookup(this, 'HostedZoneEnvDns', { domainName: (0, common_1.getDomain)('', service.props) });
+            const record = new aws_route53_1.ARecord(service, 'Record', {
+                zone: hostedZone,
+                target: aws_route53_1.RecordTarget.fromAlias(new aws_route53_targets_1.UserPoolDomainTarget(userPoolDomain)),
+                recordName: params.userPoolDomain.customDomain?.domainName,
+            });
+            record.node.addDependency(userPoolDomain);
+        }
+        // Attributes and Outputs
+        const userPoolId = userPool.userPoolId;
+        const userPoolClientId = userPoolClient.userPoolClientId;
+        const userPoolDomainUrl = aws_cdk_lib_1.Fn.join('', ['https://', userPoolDomain.domainName, '.auth.us-east-1.amazoncognito.com']);
+        const userPoolRegion = service.props.regionName;
+        new aws_cdk_lib_1.CfnOutput(this, 'UserPoolId', { value: userPoolId });
+        new aws_cdk_lib_1.CfnOutput(this, 'UserPoolClientId', { value: userPoolClientId });
+        new aws_cdk_lib_1.CfnOutput(this, 'UserPoolDomainUrl', { value: userPoolDomainUrl });
+        new aws_cdk_lib_1.CfnOutput(this, 'UserPoolRegion', { value: userPoolRegion });
+        this.userPool = userPool;
+        this.userPoolClient = userPoolClient;
+        this.userPoolDomain = userPoolDomain;
+        this.frontendRefs = {
+            REACT_APP_COGNITO_USER_POOL_ID: userPoolId,
+            REACT_APP_COGNITO_WEB_CLIENT_ID: userPoolClientId,
+            REACT_APP_COGNITO_DOMAIN: userPoolDomainUrl,
+            REACT_APP_COGNITO_REGION: userPoolRegion,
+        };
+    }
+    // MODS
+    useMod(mods) {
+        return (lambda) => {
+            lambda.addEnvironment('USER_POOL_ID', this.userPool.userPoolId);
+            lambda.addEnvironment('USER_POOL_CLIENT_ID', this.userPoolClient.userPoolClientId);
+            mods.map((fn) => fn(this.userPool)(lambda));
+        };
+    }
+    customSmsSenderMod() {
+        return (lambda) => {
+            if (!this.kmsKey)
+                throw new common_1.SynthError('enableCustomSender must be true to use customSmsSenderMod');
+            lambda.addEnvironment('KEY_ID', this.kmsKey.keyArn);
+            lambda.addEnvironment('KEY_ALIAS', `arn:aws:kms:${this.props.regionName}:${this.props.deployTarget['services'].account}:alias/${(0, common_1.getServiceName)('kms', this.props)}`);
+            lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                actions: [
+                    'cognito-idp:AdminConfirmSignUp',
+                    'cognito-idp:SignUp',
+                    'cognito-idp:InitiateAuth',
+                    'cognito-idp:ConfirmSignUp',
+                    'cognito-idp:ForgotPassword',
+                    'cognito-idp:ConfirmForgotPassword',
+                    'cognito-idp:ResendConfirmationCode',
+                ],
+                resources: ['*'],
+            }));
+            lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                actions: ['kms:Decrypt', 'kms:DescribeKey'],
+                resources: [this.kmsKey.keyArn],
+            }));
+        };
+    }
+    static modifier = {
+        updateUserAtt: () => {
+            return (lambda) => {
+                lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                    actions: ['cognito-idp:AdminUpdateUserAttributes', 'cognito-idp:AdminDisableUser', 'cognito-idp:AdminEnableUser'],
+                    resources: ['*'],
+                }));
+            };
+        },
+        deleteUser: () => {
+            return (lambda) => {
+                lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                    actions: ['cognito-idp:AdminDeleteUser'],
+                    resources: ['*'],
+                }));
+            };
+        },
+        preSignUp: () => {
+            return (lambda) => {
+                lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                    actions: [
+                        'cognito-idp:AdminLinkProviderForUser',
+                        'cognito-idp:AdminGetUser',
+                        'cognito-idp:AdminCreateUser',
+                        'cognito-idp:AdminSetUserPassword',
+                        'cognito-idp:AdminUpdateUserAttributes',
+                    ],
+                    resources: ['*'],
+                }));
+            };
+        },
+        authUser: () => {
+            return (lambda) => {
+                lambda.role?.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+                    actions: [
+                        'cognito-idp:AdminConfirmSignUp',
+                        'cognito-idp:SignUp',
+                        'cognito-idp:InitiateAuth',
+                        'cognito-idp:ConfirmSignUp',
+                        'cognito-idp:ForgotPassword',
+                        'cognito-idp:ConfirmForgotPassword',
+                        'cognito-idp:ResendConfirmationCode',
+                    ],
+                    resources: ['*'],
+                }));
+            };
+        },
+    };
+}
+exports.CognitoAuthPoolPrefab = CognitoAuthPoolPrefab;
+//# sourceMappingURL=index.js.map

package/prefab/auth/cognito-pool/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../prefab/auth/cognito-pool/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oEAAsD;AACtD,6CAA4C;AAC5C,iDAAgF;AAChF,iDAAmD;AACnD,yDAA4E;AAC5E,yEAAuE;AACvE,2CAAuC;AAEvC,mCAAwH;AAgBxH,MAAa,qBAAsB,SAAQ,sBAAS;IAClC,QAAQ,CAAsB;IAC9B,cAAc,CAA4B;IAC1C,cAAc,CAA4B;IAC1C,YAAY,CAAyB;IACrC,MAAM,CAAkB;IACxB,KAAK,CAAC;IACtB,yFAAyF;IAEzF;;;;;;OAMG;IACH,YAAY,OAAqB,EAAE,MAAsB;QACvD,KAAK,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3D,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE3B,WAAW;QAEX,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,aAAG,CAAC,IAAI,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;gBACjE,OAAO,EAAE,iBAAO,CAAC,iBAAiB;gBAClC,KAAK,EAAE,IAAA,wBAAe,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC;gBAClD,iBAAiB,EAAE,KAAK;aACzB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAC7B,IAAI,yBAAe,CAAC;gBAClB,OAAO,EAAE,CAAC,aAAa,CAAC;gBACxB,MAAM,EAAE,gBAAM,CAAC,KAAK;gBACpB,UAAU,EAAE,CAAC,IAAI,0BAAgB,CAAC,2BAA2B,CAAC,CAAC;gBAC/D,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GAA6B;YACrD,YAAY,EAAE,IAAA,wBAAe,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YAChD,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,UAAU;YACtD,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YAC3B,mBAAmB,EAAE,KAAK;YAC1B,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;YACrD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACvE,KAAK,EAAE,MAAM,CAAC,kBAAkB,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;SAChG,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,oBAAoB,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5G,eAAe;QACf,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAC/B,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,8BAA8B,CAAC,IAAI,EAAE,gBAAgB,EAAE;gBAC3F,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBACtC,gBAAgB,EAAE;oBAChB,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC,YAAY;oBAChD,SAAS,EAAE,UAAU,CAAC,iBAAiB,CAAC,iBAAiB;oBACzD,UAAU,EAAE,UAAU,CAAC,iBAAiB,CAAC,kBAAkB;iBAC5D;gBACD,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM;aAC7B,CAAC,CAAC;YACH,QAAQ,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YACjC,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAChI,QAAQ,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,6BAA6B,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpH,QAAQ,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QAED,iBAAiB;QACjB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAA,kBAAS,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,sBAAsB,GAA4C;YACtE,kBAAkB,EAAE,IAAA,wBAAe,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YACtD,SAAS,EAAE;gBACT,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;gBAClB,iBAAiB,EAAE,KAAK;aACzB;YACD,KAAK,EAAE;gBACL,KAAK,EAAE;oBACL,sBAAsB,EAAE,IAAI;iBAC7B;gBACD,YAAY,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClG,UAAU,EAAE,CAAC,GAAG,WAAW,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACtH;YACD,0BAA0B,EAAE,IAAI;YAChC,cAAc,EAAE,KAAK;SACtB,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE;YAC3E,QAAQ;YACR,GAAG,sBAAsB;YACzB,GAAG,MAAM,CAAC,cAAc;SACzB,CAAC,CAAC;QAEH,iBAAiB;QACjB,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE;YAC3E,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,IAAA,kBAAS,EAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;SAC/I,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,wBAAU,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjH,MAAM,MAAM,GAAG,IAAI,qBAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;gBAC5C,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,0BAAY,CAAC,SAAS,CAAC,IAAI,0CAAoB,CAAC,cAAc,CAAC,CAAC;gBACxE,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU;aAC3D,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACvC,MAAM,gBAAgB,GAAG,cAAc,CAAC,gBAAgB,CAAC;QACzD,MAAM,iBAAiB,GAAG,gBAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC,CAAC;QACpH,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAEhD,IAAI,uBAAS,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACzD,IAAI,uBAAS,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACrE,IAAI,uBAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvE,IAAI,uBAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG;YAClB,8BAA8B,EAAE,UAAU;YAC1C,+BAA+B,EAAE,gBAAgB;YACjD,wBAAwB,EAAE,iBAAiB;YAC3C,wBAAwB,EAAE,cAAc;SACzC,CAAC;IACJ,CAAC;IAED,OAAO;IACA,MAAM,CAAC,IAAgD;QAC5D,OAAO,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAChE,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YACnF,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAEM,kBAAkB;QACvB,OAAO,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,mBAAU,CAAC,2DAA2D,CAAC,CAAC;YAEpG,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,cAAc,CACnB,WAAW,EACX,eAAe,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAE,CAAC,OAAO,UAAU,IAAA,uBAAc,EAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAClI,CAAC;YAEF,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;gBAClB,OAAO,EAAE;oBACP,gCAAgC;oBAChC,oBAAoB;oBACpB,0BAA0B;oBAC1B,2BAA2B;oBAC3B,4BAA4B;oBAC5B,mCAAmC;oBACnC,oCAAoC;iBACrC;gBACD,SAAS,EAAE,CAAC,GAAG,CAAC;aACjB,CAAC,CACH,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;gBAClB,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;gBAC3C,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;aAChC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,QAAQ,GAAG;QACvB,aAAa,EAAE,GAAa,EAAE;YAC5B,OAAO,CAAC,MAAM,EAAE,EAAE;gBAChB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;oBAClB,OAAO,EAAE,CAAC,uCAAuC,EAAE,8BAA8B,EAAE,6BAA6B,CAAC;oBACjH,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,GAAa,EAAE;YACzB,OAAO,CAAC,MAAM,EAAE,EAAE;gBAChB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;oBAClB,OAAO,EAAE,CAAC,6BAA6B,CAAC;oBACxC,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;QACD,SAAS,EAAE,GAAa,EAAE;YACxB,OAAO,CAAC,MAAM,EAAE,EAAE;gBAChB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;oBAClB,OAAO,EAAE;wBACP,sCAAsC;wBACtC,0BAA0B;wBAC1B,6BAA6B;wBAC7B,kCAAkC;wBAClC,uCAAuC;qBACxC;oBACD,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,GAAa,EAAE;YACvB,OAAO,CAAC,MAAM,EAAE,EAAE;gBAChB,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAC/B,IAAI,yBAAe,CAAC;oBAClB,OAAO,EAAE;wBACP,gCAAgC;wBAChC,oBAAoB;wBACpB,0BAA0B;wBAC1B,2BAA2B;wBAC3B,4BAA4B;wBAC5B,mCAAmC;wBACnC,oCAAoC;qBACrC;oBACD,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;;AA7OJ,sDA8OC"}

package/prefab/auth/index.d.ts

@@ -0,0 +1,2 @@
+export * from './cognito-pool';
+//# sourceMappingURL=index.d.ts.map

package/prefab/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../prefab/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/prefab/auth/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cognito-pool"), exports);
+//# sourceMappingURL=index.js.map

package/prefab/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../prefab/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B"}

package/prefab/cdn/cdn-api/index.d.ts

@@ -0,0 +1,38 @@
+import * as awsCloudfront from 'aws-cdk-lib/aws-cloudfront';
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { HttpOriginProps } from 'aws-cdk-lib/aws-cloudfront-origins';
+import { ApplicationLoadBalancer } from 'aws-cdk-lib/aws-elasticloadbalancingv2';
+import { Construct } from 'constructs';
+
+import { ServiceStack } from '../../../common';
+
+import { PublicAlbPrefab } from '../../../prefab/gateway/alb-public';
+import { ApiRestPrefab } from '../../../prefab/gateway/api-gateway/api-rest';
+import { WafPrefab } from '../../../prefab/networking/waf';
+
+export type CdnApiPrefabParams = {
+  subDomain: string;
+  certificate: ICertificate;
+  albDefaultBehavior?: PublicAlbPrefab;
+  restApiDefaultBehavior?: ApiRestPrefab;
+  headersWhitelist?: string[];
+  waf?: WafPrefab;
+  skipRecord?: true;
+  explicitDomains?: string[];
+  cachePolicyProps?: Omit<awsCloudfront.CachePolicyProps, 'cachePolicyName' | 'headerBehavior' | 'queryStringBehavior'>;
+};
+export declare class CdnApiPrefab extends Construct {
+  readonly domain: string;
+  readonly baseUrl: string;
+  private readonly service;
+  private readonly distribution;
+  private readonly apiGatewayRequestPolicy;
+  private readonly apiGatewayCachePolicy;
+  private readonly apiGatewayBehaviorOptions;
+  private readonly unrestrictedBehaviorOptions;
+  constructor(service: ServiceStack, params: CdnApiPrefabParams);
+  addApiGateway(basePath: string, apiUrl: string, originOptions?: HttpOriginProps): void;
+  addAppSync(apiUrl: string, originOptions?: HttpOriginProps): void;
+  addAlb(basePath: string, alb: ApplicationLoadBalancer): void;
+}
+//# sourceMappingURL=index.d.ts.map

package/prefab/cdn/cdn-api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAc,eAAe,EAAuC,MAAM,oCAAoC,CAAC;AACtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,YAAY,EAA6E,MAAM,QAAQ,CAAC;AAEjH,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,kBAAkB,CAAC,EAAE,eAAe,CAAC;IACrC,sBAAsB,CAAC,EAAE,aAAa,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,qBAAqB,CAAC,CAAC;CACvH,CAAC;AAEF,qBAAa,YAAa,SAAQ,SAAS;IACzC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAoC;IAC5E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA4B;IAClE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAgD;IAC1F,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAgD;gBAEhF,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB;IA0GtD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,eAAe,GAAG,IAAI;IAQtF,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,eAAe,GAAG,IAAI;IAWjE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,GAAG,IAAI;CAOpE"}