@takumi-stack/core 1.0.0

package/prefab/cdn/cdn-api/index.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CdnApiPrefab = void 0;
+const awsCloudfront = __importStar(require("aws-cdk-lib/aws-cloudfront"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudfront_origins_1 = require("aws-cdk-lib/aws-cloudfront-origins");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const aws_route53_targets_1 = require("aws-cdk-lib/aws-route53-targets");
+const constructs_1 = require("constructs");
+const common_1 = require("../../../common");
+const private_bucket_1 = require("../../../prefab/storage/bucket/private-bucket");
+class CdnApiPrefab extends constructs_1.Construct {
+    domain;
+    baseUrl;
+    service;
+    distribution;
+    apiGatewayRequestPolicy;
+    apiGatewayCachePolicy;
+    apiGatewayBehaviorOptions;
+    unrestrictedBehaviorOptions;
+    constructor(service, params) {
+        super(service, (0, common_1.getLogicalName)(CdnApiPrefab.name, params.subDomain));
+        this.service = service;
+        this.domain = (0, common_1.getDomain)(params.subDomain, service.props);
+        this.baseUrl = `https://${this.domain}/`;
+        if (params.albDefaultBehavior && params.restApiDefaultBehavior)
+            throw new common_1.SynthError('Only alb or api can be default behavior', service.props);
+        // Api Gateway Policies
+        this.apiGatewayCachePolicy = new awsCloudfront.CachePolicy(this, 'CachePolicy', {
+            cachePolicyName: (0, common_1.getCloudFrontName)('ApiGateway', 'CachePolicy', this.service.props),
+            queryStringBehavior: awsCloudfront.CacheQueryStringBehavior.all(),
+            headerBehavior: {
+                behavior: 'whitelist',
+                headers: [...(params.headersWhitelist || []), 'Authorization'],
+            },
+            ...params.cachePolicyProps,
+        });
+        this.apiGatewayRequestPolicy = new awsCloudfront.OriginRequestPolicy(this, 'OriginRequestPolicy', {
+            originRequestPolicyName: (0, common_1.getCloudFrontName)('ApiGateway', 'RequestPolicy', this.service.props),
+            headerBehavior: {
+                behavior: 'whitelist',
+                headers: [
+                    ...(params.headersWhitelist || []),
+                    'Access-Control-Allow-Origin',
+                    'Access-Control-Request-Method',
+                    'Access-Control-Allow-Headers',
+                    'Access-Control-Request-Headers',
+                    'Origin',
+                ],
+            },
+            queryStringBehavior: awsCloudfront.OriginRequestQueryStringBehavior.all(),
+        });
+        this.apiGatewayBehaviorOptions = {
+            compress: true,
+            cachePolicy: this.apiGatewayCachePolicy,
+            originRequestPolicy: this.apiGatewayRequestPolicy,
+            allowedMethods: awsCloudfront.AllowedMethods.ALLOW_ALL,
+            viewerProtocolPolicy: awsCloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+        };
+        // Integrations Policies
+        this.unrestrictedBehaviorOptions = {
+            compress: true,
+            cachePolicy: awsCloudfront.CachePolicy.CACHING_DISABLED,
+            originRequestPolicy: awsCloudfront.OriginRequestPolicy.ALL_VIEWER,
+            allowedMethods: awsCloudfront.AllowedMethods.ALLOW_ALL,
+            viewerProtocolPolicy: awsCloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+        };
+        // Default Behavior
+        let defaultBehavior = {
+            origin: new aws_cloudfront_origins_1.HttpOrigin(new private_bucket_1.PrivateBucketPrefab(service, { bucketName: 'default-origin' }).bucket.bucketDomainName, {
+                originId: (0, common_1.getCloudFrontName)('Origin', 'Default', this.service.props),
+            }),
+            ...this.apiGatewayBehaviorOptions,
+        };
+        if (params.albDefaultBehavior) {
+            defaultBehavior = {
+                origin: new aws_cloudfront_origins_1.LoadBalancerV2Origin(params.albDefaultBehavior.alb, {
+                    originId: (0, common_1.getCloudFrontName)('Origin', 'Default', this.service.props),
+                }),
+                ...this.unrestrictedBehaviorOptions,
+            };
+        }
+        if (params.restApiDefaultBehavior) {
+            defaultBehavior = {
+                origin: new aws_cloudfront_origins_1.RestApiOrigin(params.restApiDefaultBehavior.api, {
+                    originId: (0, common_1.getCloudFrontName)('Origin', 'Default', this.service.props),
+                }),
+                ...this.unrestrictedBehaviorOptions,
+                originRequestPolicy: awsCloudfront.OriginRequestPolicy.ALL_VIEWER_EXCEPT_HOST_HEADER,
+            };
+        }
+        // Distribution
+        this.distribution = new awsCloudfront.Distribution(this, 'Distribution', {
+            enabled: true,
+            comment: (0, common_1.getResourceName)('cdn', service.props),
+            certificate: params.certificate,
+            domainNames: params.explicitDomains ?? [this.domain],
+            defaultBehavior,
+            ...(service.props.envName !== 'prod' ? { priceClass: awsCloudfront.PriceClass.PRICE_CLASS_100 } : {}),
+            webAclId: params.waf?.webACL?.attrArn,
+        });
+        // Route53
+        if (!params.explicitDomains && !params.skipRecord) {
+            const hostedZone = aws_route53_1.HostedZone.fromLookup(this, 'HostedZoneEnvDns', { domainName: (0, common_1.getDomain)('', service.props) });
+            new aws_route53_1.ARecord(service, 'Record', {
+                zone: hostedZone,
+                target: aws_route53_1.RecordTarget.fromAlias(new aws_route53_targets_1.CloudFrontTarget(this.distribution)),
+                recordName: this.domain,
+            });
+        }
+        new aws_cdk_lib_1.CfnOutput(this, 'Domain', { value: params.explicitDomains ? params.explicitDomains[0] : this.domain });
+        new aws_cdk_lib_1.CfnOutput(this, 'BaseUrl', {
+            value: params.explicitDomains ? `https://${params.explicitDomains[0]}/` : this.baseUrl,
+        });
+    }
+    addApiGateway(basePath, apiUrl, originOptions) {
+        this.distribution.addBehavior(`/${basePath}*`, new aws_cloudfront_origins_1.HttpOrigin(apiUrl, { originId: (0, common_1.getCloudFrontName)('Origin', basePath, this.service.props), ...originOptions }), this.apiGatewayBehaviorOptions);
+    }
+    addAppSync(apiUrl, originOptions) {
+        this.distribution.addBehavior('/graphql*', new aws_cloudfront_origins_1.HttpOrigin(aws_cdk_lib_1.Fn.select(2, aws_cdk_lib_1.Fn.split('/', apiUrl)), {
+            originId: (0, common_1.getCloudFrontName)('Origin', 'graphql', this.service.props),
+            ...originOptions,
+        }), this.apiGatewayBehaviorOptions);
+    }
+    addAlb(basePath, alb) {
+        this.distribution.addBehavior(`/${basePath}/*`, new aws_cloudfront_origins_1.LoadBalancerV2Origin(alb, { originId: (0, common_1.getCloudFrontName)('Origin', basePath, this.service.props) }), this.unrestrictedBehaviorOptions);
+    }
+}
+exports.CdnApiPrefab = CdnApiPrefab;
+//# sourceMappingURL=index.js.map

package/prefab/cdn/cdn-api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0EAA4D;AAC5D,6CAA4C;AAE5C,+EAAsH;AAEtH,yDAA4E;AAC5E,yEAAmE;AACnE,2CAAuC;AAEvC,mCAAiH;AAKjH,yEAA2E;AAc3E,MAAa,YAAa,SAAQ,sBAAS;IACzB,MAAM,CAAS;IACf,OAAO,CAAS;IACf,OAAO,CAAe;IACtB,YAAY,CAA6B;IACzC,uBAAuB,CAAoC;IAC3D,qBAAqB,CAA4B;IACjD,yBAAyB,CAAgD;IACzE,2BAA2B,CAAgD;IAE5F,YAAY,OAAqB,EAAE,MAA0B;QAC3D,KAAK,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,GAAG,WAAW,IAAI,CAAC,MAAM,GAAG,CAAC;QAEzC,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,sBAAsB;YAAE,MAAM,IAAI,mBAAU,CAAC,yCAAyC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAE/I,uBAAuB;QACvB,IAAI,CAAC,qBAAqB,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE;YAC9E,eAAe,EAAE,IAAA,0BAAiB,EAAC,YAAY,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACnF,mBAAmB,EAAE,aAAa,CAAC,wBAAwB,CAAC,GAAG,EAAE;YACjE,cAAc,EAAE;gBACd,QAAQ,EAAE,WAAW;gBACrB,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC;aAC/D;YACD,GAAG,MAAM,CAAC,gBAAgB;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,uBAAuB,GAAG,IAAI,aAAa,CAAC,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,EAAE;YAChG,uBAAuB,EAAE,IAAA,0BAAiB,EAAC,YAAY,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7F,cAAc,EAAE;gBACd,QAAQ,EAAE,WAAW;gBACrB,OAAO,EAAE;oBACP,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;oBAClC,6BAA6B;oBAC7B,+BAA+B;oBAC/B,8BAA8B;oBAC9B,gCAAgC;oBAChC,QAAQ;iBACT;aACF;YACD,mBAAmB,EAAE,aAAa,CAAC,gCAAgC,CAAC,GAAG,EAAE;SAC1E,CAAC,CAAC;QAEH,IAAI,CAAC,yBAAyB,GAAG;YAC/B,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI,CAAC,qBAAqB;YACvC,mBAAmB,EAAE,IAAI,CAAC,uBAAuB;YACjD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,SAAS;YACtD,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CAAC,iBAAiB;SAC3E,CAAC;QAEF,wBAAwB;QACxB,IAAI,CAAC,2BAA2B,GAAG;YACjC,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,gBAAgB;YACvD,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAAC,UAAU;YACjE,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,SAAS;YACtD,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CAAC,iBAAiB;SAC3E,CAAC;QAEF,mBAAmB;QACnB,IAAI,eAAe,GAAkC;YACnD,MAAM,EAAE,IAAI,mCAAU,CAAC,IAAI,oCAAmB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE;gBACjH,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;aACrE,CAAC;YACF,GAAG,IAAI,CAAC,yBAAyB;SAClC,CAAC;QAEF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,eAAe,GAAG;gBAChB,MAAM,EAAE,IAAI,6CAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBAC9D,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;iBACrE,CAAC;gBACF,GAAG,IAAI,CAAC,2BAA2B;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAClC,eAAe,GAAG;gBAChB,MAAM,EAAE,IAAI,sCAAa,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,EAAE;oBAC3D,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;iBACrE,CAAC;gBACF,GAAG,IAAI,CAAC,2BAA2B;gBACnC,mBAAmB,EAAE,aAAa,CAAC,mBAAmB,CAAC,6BAA6B;aACrF,CAAC;QACJ,CAAC;QAED,eAAe;QACf,IAAI,CAAC,YAAY,GAAG,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE;YACvE,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACpD,eAAe;YACf,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO;SACtC,CAAC,CAAC;QAEH,UAAU;QACV,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,wBAAU,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjH,IAAI,qBAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;gBAC7B,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,0BAAY,CAAC,SAAS,CAAC,IAAI,sCAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACvE,UAAU,EAAE,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,uBAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,uBAAS,CAAC,IAAI,EAAE,SAAS,EAAE;YAC7B,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;SACvF,CAAC,CAAC;IACL,CAAC;IAEM,aAAa,CAAC,QAAgB,EAAE,MAAc,EAAE,aAA+B;QACpF,IAAI,CAAC,YAAY,CAAC,WAAW,CAC3B,IAAI,QAAQ,GAAG,EACf,IAAI,mCAAU,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,EAAE,CAAC,EACjH,IAAI,CAAC,yBAAyB,CAC/B,CAAC;IACJ,CAAC;IAEM,UAAU,CAAC,MAAc,EAAE,aAA+B;QAC/D,IAAI,CAAC,YAAY,CAAC,WAAW,CAC3B,WAAW,EACX,IAAI,mCAAU,CAAC,gBAAE,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE;YAClD,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACpE,GAAG,aAAa;SACjB,CAAC,EACF,IAAI,CAAC,yBAAyB,CAC/B,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,QAAgB,EAAE,GAA4B;QAC1D,IAAI,CAAC,YAAY,CAAC,WAAW,CAC3B,IAAI,QAAQ,IAAI,EAChB,IAAI,6CAAoB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EACtG,IAAI,CAAC,2BAA2B,CACjC,CAAC;IACJ,CAAC;CACF;AA9ID,oCA8IC"}

package/prefab/cdn/cdn-asset/index.d.ts

@@ -0,0 +1,27 @@
+import * as awsCloudfront from 'aws-cdk-lib/aws-cloudfront';
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { Construct } from 'constructs';
+
+import { ServiceStack } from '../../../common';
+
+import { WafPrefab } from '../../../prefab/networking/waf';
+import { AssetBucketParams, AssetBucketPrefab } from '../../../prefab/storage/bucket/asset-bucket';
+
+export type CdnAssetConstructProps = {
+  subDomain: string;
+  certificate: ICertificate;
+  assetBucketProps: AssetBucketParams;
+  waf?: WafPrefab;
+  skipRecord?: true;
+  explicitDomains?: string[];
+  distributionProps?: Partial<awsCloudfront.DistributionProps>;
+};
+export declare class CdnAssetPrefab extends Construct {
+  readonly bucketPrefab: AssetBucketPrefab;
+  readonly domain: string;
+  readonly baseUrl: string;
+  readonly distribution: awsCloudfront.Distribution;
+  readonly behaviorOptions: Omit<awsCloudfront.BehaviorOptions, 'origin'>;
+  constructor(service: ServiceStack, params: CdnAssetConstructProps);
+}
+//# sourceMappingURL=index.d.ts.map

package/prefab/cdn/cdn-asset/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-asset/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAKlE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAiE,MAAM,QAAQ,CAAC;AAErG,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE1F,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;CAC9D,CAAC;AAEF,qBAAa,cAAe,SAAQ,SAAS;IAC3C,SAAgB,YAAY,EAAE,iBAAiB,CAAC;IAChD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;IACzD,SAAgB,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;gBAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,sBAAsB;CA0DlE"}

package/prefab/cdn/cdn-asset/index.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CdnAssetPrefab = void 0;
+const awsCloudfront = __importStar(require("aws-cdk-lib/aws-cloudfront"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudfront_origins_1 = require("aws-cdk-lib/aws-cloudfront-origins");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const aws_route53_targets_1 = require("aws-cdk-lib/aws-route53-targets");
+const aws_s3_1 = require("aws-cdk-lib/aws-s3");
+const constructs_1 = require("constructs");
+const common_1 = require("../../../common");
+const asset_bucket_1 = require("../../../prefab/storage/bucket/asset-bucket");
+class CdnAssetPrefab extends constructs_1.Construct {
+    bucketPrefab;
+    domain;
+    baseUrl;
+    distribution;
+    behaviorOptions;
+    constructor(service, params) {
+        super(service, (0, common_1.getLogicalName)(CdnAssetPrefab.name, params.subDomain));
+        this.domain = (0, common_1.getDomain)(params.subDomain, service.props);
+        this.baseUrl = `https://${this.domain}/`;
+        this.bucketPrefab = new asset_bucket_1.AssetBucketPrefab(service, {
+            ...params.assetBucketProps,
+            bucketProps: {
+                cors: [{ allowedMethods: [aws_s3_1.HttpMethods.GET, aws_s3_1.HttpMethods.POST], allowedOrigins: ['*'], allowedHeaders: ['*'] }],
+                ...params.assetBucketProps?.bucketProps,
+            },
+        });
+        this.behaviorOptions = {
+            compress: true,
+            originRequestPolicy: new awsCloudfront.OriginRequestPolicy(this, 'OriginRequestPolicy', {
+                originRequestPolicyName: (0, common_1.getCloudFrontName)('Bucket', 'RequestPolicy', service.props),
+                headerBehavior: {
+                    behavior: 'whitelist',
+                    headers: ['Access-Control-Allow-Origin', 'Access-Control-Allow-Headers', 'Origin'],
+                },
+            }),
+            cachePolicy: awsCloudfront.CachePolicy.CACHING_OPTIMIZED,
+            allowedMethods: awsCloudfront.AllowedMethods.ALLOW_ALL,
+            viewerProtocolPolicy: awsCloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+        };
+        this.distribution = new awsCloudfront.Distribution(this, 'Distribution', {
+            enabled: true,
+            comment: (0, common_1.getResourceName)('cdn', service.props),
+            certificate: params.certificate,
+            domainNames: params.explicitDomains ?? [this.domain],
+            defaultBehavior: {
+                origin: new aws_cloudfront_origins_1.S3Origin(this.bucketPrefab.bucket, {
+                    originId: (0, common_1.getCloudFrontName)('Origin', 'Default', service.props),
+                }),
+                ...this.behaviorOptions,
+            },
+            ...(service.props.envName !== 'prod' ? { priceClass: awsCloudfront.PriceClass.PRICE_CLASS_100 } : {}),
+            webAclId: params.waf?.webACL?.attrArn,
+            ...params.distributionProps,
+        });
+        if (!params.explicitDomains || !params.skipRecord) {
+            const hostedZone = aws_route53_1.HostedZone.fromLookup(this, 'HostedZoneEnvDns', { domainName: (0, common_1.getDomain)('', service.props) });
+            new aws_route53_1.ARecord(service, 'Record', {
+                zone: hostedZone,
+                target: aws_route53_1.RecordTarget.fromAlias(new aws_route53_targets_1.CloudFrontTarget(this.distribution)),
+                recordName: this.domain,
+            });
+        }
+        new aws_cdk_lib_1.CfnOutput(this, 'Domain', { value: params.explicitDomains ? params.explicitDomains[0] : this.domain });
+        new aws_cdk_lib_1.CfnOutput(this, 'BaseUrl', {
+            value: params.explicitDomains ? `https://${params.explicitDomains[0]}/` : this.baseUrl,
+        });
+    }
+}
+exports.CdnAssetPrefab = CdnAssetPrefab;
+//# sourceMappingURL=index.js.map

package/prefab/cdn/cdn-asset/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-asset/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0EAA4D;AAC5D,6CAAwC;AAExC,+EAA8D;AAC9D,yDAA4E;AAC5E,yEAAmE;AACnE,+CAAiD;AACjD,2CAAuC;AAEvC,mCAAqG;AAGrG,qEAA0F;AAY1F,MAAa,cAAe,SAAQ,sBAAS;IAC3B,YAAY,CAAoB;IAChC,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,YAAY,CAA6B;IACzC,eAAe,CAAgD;IAE/E,YAAY,OAAqB,EAAE,MAA8B;QAC/D,KAAK,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,GAAG,WAAW,IAAI,CAAC,MAAM,GAAG,CAAC;QAEzC,IAAI,CAAC,YAAY,GAAG,IAAI,gCAAiB,CAAC,OAAO,EAAE;YACjD,GAAG,MAAM,CAAC,gBAAgB;YAC1B,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,oBAAW,CAAC,GAAG,EAAE,oBAAW,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7G,GAAG,MAAM,CAAC,gBAAgB,EAAE,WAAW;aACxC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,GAAG;YACrB,QAAQ,EAAE,IAAI;YACd,mBAAmB,EAAE,IAAI,aAAa,CAAC,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,EAAE;gBACtF,uBAAuB,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC;gBACpF,cAAc,EAAE;oBACd,QAAQ,EAAE,WAAW;oBACrB,OAAO,EAAE,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,QAAQ,CAAC;iBACnF;aACF,CAAC;YACF,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,iBAAiB;YACxD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,SAAS;YACtD,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CAAC,iBAAiB;SAC3E,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE;YACvE,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACpD,eAAe,EAAE;gBACf,MAAM,EAAE,IAAI,iCAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;oBAC7C,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC;iBAChE,CAAC;gBACF,GAAG,IAAI,CAAC,eAAe;aACxB;YACD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO;YACrC,GAAG,MAAM,CAAC,iBAAiB;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,wBAAU,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjH,IAAI,qBAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;gBAC7B,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,0BAAY,CAAC,SAAS,CAAC,IAAI,sCAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACvE,UAAU,EAAE,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,uBAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,uBAAS,CAAC,IAAI,EAAE,SAAS,EAAE;YAC7B,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;SACvF,CAAC,CAAC;IACL,CAAC;CACF;AAjED,wCAiEC"}

package/prefab/cdn/cdn-spa/index.d.ts

@@ -0,0 +1,27 @@
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { Construct } from 'constructs';
+
+import { ServiceStack } from '../../../common';
+
+import { WafPrefab } from '../../../prefab/networking/waf';
+
+export type SpaPrefabParams = {
+  subDomain: string;
+  certificate: ICertificate;
+  assetMaxAge?: string;
+  indexMaxAge?: string;
+  baseDir?: string;
+  distDir?: string;
+  calculatedSecrets?: Record<string, string>;
+  waf?: WafPrefab;
+  skipRecord?: true;
+  wwwRedirectEnabled?: true;
+  explicitDomains?: string[];
+};
+export declare class SpaPrefab extends Construct {
+  private readonly domain;
+  private readonly baseUrl;
+  private readonly distribution;
+  constructor(service: ServiceStack, params: SpaPrefabParams);
+}
+//# sourceMappingURL=index.d.ts.map

package/prefab/cdn/cdn-spa/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-spa/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAMlE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,YAAY,EAA6E,MAAM,QAAQ,CAAC;AAEjH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,qBAAa,SAAU,SAAQ,SAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;gBAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe;CAqG3D"}

package/prefab/cdn/cdn-spa/index.js

@@ -0,0 +1,138 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpaPrefab = void 0;
+const awsCloudfront = __importStar(require("aws-cdk-lib/aws-cloudfront"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudfront_origins_1 = require("aws-cdk-lib/aws-cloudfront-origins");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const aws_route53_targets_1 = require("aws-cdk-lib/aws-route53-targets");
+const aws_s3_1 = require("aws-cdk-lib/aws-s3");
+const aws_ssm_1 = require("aws-cdk-lib/aws-ssm");
+const constructs_1 = require("constructs");
+const common_1 = require("../../../common");
+const private_bucket_1 = require("../../../prefab/storage/bucket/private-bucket");
+const frontend_env_builder_1 = require("../../../prefab/utils/config/frontend-env-builder");
+class SpaPrefab extends constructs_1.Construct {
+    domain;
+    baseUrl;
+    distribution;
+    constructor(service, params) {
+        super(service, (0, common_1.getLogicalName)(SpaPrefab.name, params.subDomain));
+        this.domain = (0, common_1.getDomain)(params.subDomain, service.props);
+        this.baseUrl = `https://${this.domain}/`;
+        const privateBucketPrefab = new private_bucket_1.PrivateBucketPrefab(service, {
+            bucketName: 'spawebapp',
+            bucketProps: {
+                autoDeleteObjects: true,
+                removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+                cors: [
+                    {
+                        allowedMethods: [aws_s3_1.HttpMethods.GET, aws_s3_1.HttpMethods.HEAD],
+                        allowedOrigins: ['*'],
+                        allowedHeaders: ['*'],
+                    },
+                ],
+            },
+        });
+        const behaviorOptions = {
+            compress: true,
+            origin: new aws_cloudfront_origins_1.S3Origin(privateBucketPrefab.bucket, {
+                originId: (0, common_1.getCloudFrontName)('Origin', 'Default', service.props),
+            }),
+            originRequestPolicy: new awsCloudfront.OriginRequestPolicy(this, 'OriginRequestPolicy', {
+                originRequestPolicyName: (0, common_1.getCloudFrontName)('Bucket', 'RequestPolicy', service.props),
+                headerBehavior: {
+                    behavior: 'whitelist',
+                    headers: ['Access-Control-Allow-Origin', 'Access-Control-Allow-Headers', 'Origin'],
+                },
+            }),
+            cachePolicy: awsCloudfront.CachePolicy.CACHING_OPTIMIZED,
+            cachedMethods: awsCloudfront.AllowedMethods.ALLOW_GET_HEAD_OPTIONS,
+            allowedMethods: awsCloudfront.AllowedMethods.ALLOW_GET_HEAD_OPTIONS,
+            viewerProtocolPolicy: awsCloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
+        };
+        const domains = [this.domain];
+        if (params.wwwRedirectEnabled) {
+            if (params.subDomain)
+                throw new common_1.SynthError('wwwRedirectEnabled is only allowed in the root domain', service.props);
+            domains.push(`www.${this.domain}`);
+        }
+        this.distribution = new awsCloudfront.Distribution(this, 'Distribution', {
+            enabled: true,
+            comment: (0, common_1.getResourceName)('cdn', service.props),
+            certificate: params.certificate,
+            domainNames: params.explicitDomains ?? domains,
+            defaultRootObject: 'index.html',
+            errorResponses: [
+                {
+                    httpStatus: 403,
+                    responseHttpStatus: 200,
+                    ttl: aws_cdk_lib_1.Duration.seconds(86400),
+                    responsePagePath: '/index.html',
+                },
+                {
+                    httpStatus: 404,
+                    responseHttpStatus: 200,
+                    responsePagePath: '/index.html',
+                    ttl: aws_cdk_lib_1.Duration.seconds(86400),
+                },
+            ],
+            defaultBehavior: behaviorOptions,
+            ...(service.props.envName !== 'prod' ? { priceClass: awsCloudfront.PriceClass.PRICE_CLASS_100 } : {}),
+            webAclId: params.waf?.webACL?.attrArn,
+        });
+        if (!params.explicitDomains && !params.skipRecord) {
+            const hostedZone = aws_route53_1.HostedZone.fromLookup(this, 'HostedZoneEnvDns', { domainName: (0, common_1.getDomain)('', service.props) });
+            domains.map((d) => {
+                new aws_route53_1.ARecord(service, d.split('.')[0], {
+                    zone: hostedZone,
+                    target: aws_route53_1.RecordTarget.fromAlias(new aws_route53_targets_1.CloudFrontTarget(this.distribution)),
+                    recordName: d,
+                });
+            });
+        }
+        new frontend_env_builder_1.FrontendEnvBuilder(service, { ...params, name: params.subDomain });
+        new aws_ssm_1.StringParameter(this, 'Config', {
+            simpleName: true,
+            parameterName: (0, common_1.getResourceName)('config', service.props),
+            stringValue: JSON.stringify({
+                domain: params.explicitDomains ? params.explicitDomains[0] : this.domain,
+                bucketName: privateBucketPrefab.bucket.bucketName,
+                distributionId: this.distribution.distributionId,
+                assetMaxAge: params.assetMaxAge || '604800',
+                indexMaxAge: params.indexMaxAge || '1800',
+                baseDir: params.baseDir || `frontend/${service.props.serviceName}`,
+                distDir: params.distDir || 'build',
+            }),
+        });
+        new aws_cdk_lib_1.CfnOutput(this, 'Domain', { value: params.explicitDomains ? params.explicitDomains[0] : this.domain });
+        new aws_cdk_lib_1.CfnOutput(this, 'BaseUrl', {
+            value: params.explicitDomains ? `https://${params.explicitDomains[0]}/` : this.baseUrl,
+        });
+    }
+}
+exports.SpaPrefab = SpaPrefab;
+//# sourceMappingURL=index.js.map

package/prefab/cdn/cdn-spa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-spa/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0EAA4D;AAC5D,6CAAiE;AAEjE,+EAA8D;AAC9D,yDAA4E;AAC5E,yEAAmE;AACnE,+CAAiD;AACjD,iDAAsD;AACtD,2CAAuC;AAEvC,mCAAiH;AAGjH,yEAA2E;AAC3E,mFAA8E;AAgB9E,MAAa,SAAU,SAAQ,sBAAS;IACrB,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,YAAY,CAA6B;IAE1D,YAAY,OAAqB,EAAE,MAAuB;QACxD,KAAK,CAAC,OAAO,EAAE,IAAA,uBAAc,EAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,GAAG,WAAW,IAAI,CAAC,MAAM,GAAG,CAAC;QAEzC,MAAM,mBAAmB,GAAG,IAAI,oCAAmB,CAAC,OAAO,EAAE;YAC3D,UAAU,EAAE,WAAW;YACvB,WAAW,EAAE;gBACX,iBAAiB,EAAE,IAAI;gBACvB,aAAa,EAAE,2BAAa,CAAC,OAAO;gBACpC,IAAI,EAAE;oBACJ;wBACE,cAAc,EAAE,CAAC,oBAAW,CAAC,GAAG,EAAE,oBAAW,CAAC,IAAI,CAAC;wBACnD,cAAc,EAAE,CAAC,GAAG,CAAC;wBACrB,cAAc,EAAE,CAAC,GAAG,CAAC;qBACtB;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG;YACtB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI,iCAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE;gBAC/C,QAAQ,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC;aAChE,CAAC;YACF,mBAAmB,EAAE,IAAI,aAAa,CAAC,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,EAAE;gBACtF,uBAAuB,EAAE,IAAA,0BAAiB,EAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC;gBACpF,cAAc,EAAE;oBACd,QAAQ,EAAE,WAAW;oBACrB,OAAO,EAAE,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,QAAQ,CAAC;iBACnF;aACF,CAAC;YACF,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,iBAAiB;YACxD,aAAa,EAAE,aAAa,CAAC,cAAc,CAAC,sBAAsB;YAClE,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,sBAAsB;YACnE,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CAAC,iBAAiB;SAC3E,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,mBAAU,CAAC,uDAAuD,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACnH,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE;YACvE,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO;YAC9C,iBAAiB,EAAE,YAAY;YAC/B,cAAc,EAAE;gBACd;oBACE,UAAU,EAAE,GAAG;oBACf,kBAAkB,EAAE,GAAG;oBACvB,GAAG,EAAE,sBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC5B,gBAAgB,EAAE,aAAa;iBAChC;gBACD;oBACE,UAAU,EAAE,GAAG;oBACf,kBAAkB,EAAE,GAAG;oBACvB,gBAAgB,EAAE,aAAa;oBAC/B,GAAG,EAAE,sBAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;iBAC7B;aACF;YACD,eAAe,EAAE,eAAe;YAChC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,wBAAU,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjH,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChB,IAAI,qBAAO,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE;oBACrC,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,0BAAY,CAAC,SAAS,CAAC,IAAI,sCAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACvE,UAAU,EAAE,CAAC;iBACd,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yCAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEvE,IAAI,yBAAe,CAAC,IAAI,EAAE,QAAQ,EAAE;YAClC,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAA,wBAAe,EAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YACvD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC1B,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;gBACxE,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,UAAU;gBACjD,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc;gBAChD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ;gBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM;gBACzC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,YAAY,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;gBAClE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;aACnC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,uBAAS,CAAC,IAAI,EAAE,SAAS,EAAE;YAC7B,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;SACvF,CAAC,CAAC;IACL,CAAC;CACF;AA1GD,8BA0GC"}

package/prefab/cdn/cdn-ssr/index.d.ts

@@ -0,0 +1,36 @@
+import * as awsCloudfront from 'aws-cdk-lib/aws-cloudfront';
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import { ICertificate } from 'aws-cdk-lib/aws-certificatemanager';
+import { Construct } from 'constructs';
+
+import { ServiceStack } from '../../../common';
+
+import { WafPrefab } from '../../../prefab/networking/waf';
+import { PrivateBucketPrefab } from '../../../prefab/storage/bucket/private-bucket';
+
+export type SsrPrefabParams = {
+  subDomain: string;
+  certificate: ICertificate;
+  assetMaxAge?: string;
+  indexMaxAge?: string;
+  baseDir?: string;
+  distDir?: string;
+  calculatedSecrets?: Record<string, string>;
+  waf?: WafPrefab;
+  skipRecord?: true;
+  wwwRedirectEnabled?: true;
+  filesPathAssets: string;
+  filesPathNextFunction: string;
+  filesPathImageFunction: string;
+};
+export declare class SsrPrefab extends Construct {
+  readonly domain: string;
+  readonly baseUrl: string;
+  readonly distribution: awsCloudfront.Distribution;
+  readonly bucket: PrivateBucketPrefab;
+  readonly serverFunction: lambda.Function;
+  readonly imageFunction: lambda.Function;
+  constructor(service: ServiceStack, params: SsrPrefabParams);
+  protected createCloudFrontServerCachePolicy(): awsCloudfront.CachePolicy;
+}
+//# sourceMappingURL=index.d.ts.map

package/prefab/cdn/cdn-ssr/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../prefab/cdn/cdn-ssr/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AASlE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAMvC,OAAO,EAAE,YAAY,EAAgF,MAAM,QAAQ,CAAC;AAEpH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAG3E,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,qBAAa,SAAU,SAAQ,SAAS;IACtC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;IACzD,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;IAChD,SAAgB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAEnC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe;IAuN1D,SAAS,CAAC,iCAAiC,IAAI,aAAa,CAAC,WAAW;CAyBzE"}