@umccr/htsget-lambda 0.9.6

package/lib/htsget-lambda.js

@@ -0,0 +1,363 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HtsgetLambda = void 0;
+const fs_1 = require("fs");
+const node_path_1 = require("node:path");
+const os_1 = require("os");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const constructs_1 = require("constructs");
+const aws_cognito_1 = require("aws-cdk-lib/aws-cognito");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const aws_lambda_1 = require("aws-cdk-lib/aws-lambda");
+const aws_certificatemanager_1 = require("aws-cdk-lib/aws-certificatemanager");
+const aws_route53_1 = require("aws-cdk-lib/aws-route53");
+const aws_route53_targets_1 = require("aws-cdk-lib/aws-route53-targets");
+const cargo_lambda_cdk_1 = require("cargo-lambda-cdk");
+const path_1 = __importDefault(require("path"));
+const aws_apigatewayv2_integrations_1 = require("aws-cdk-lib/aws-apigatewayv2-integrations");
+const aws_apigatewayv2_1 = require("aws-cdk-lib/aws-apigatewayv2");
+const aws_apigatewayv2_authorizers_1 = require("aws-cdk-lib/aws-apigatewayv2-authorizers");
+const aws_s3_1 = require("aws-cdk-lib/aws-s3");
+const aws_s3_deployment_1 = require("aws-cdk-lib/aws-s3-deployment");
+const aws_secretsmanager_1 = require("aws-cdk-lib/aws-secretsmanager");
+const util_1 = require("cargo-lambda-cdk/lib/util");
+/**
+ * @ignore
+ * Construct used to deploy htsget-lambda.
+ */
+class HtsgetLambda extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        props.htsgetConfig ??= {
+            locations: [],
+        };
+        let httpApi;
+        if (props.httpApi !== undefined) {
+            httpApi = props.httpApi;
+        }
+        else {
+            if (props.domain === undefined) {
+                throw Error("domain must be defined if httpApi is not specified");
+            }
+            httpApi = this.createHttpApi(props.domain, props.jwt, props.cors, props.subDomain, props.hostedZone, props.certificateArn);
+        }
+        let lambdaRole;
+        if (props.role == undefined) {
+            lambdaRole = HtsgetLambda.createRole(this, id, props.roleName);
+        }
+        props.buildEnvironment ??= {};
+        const htsgetLambda = new cargo_lambda_cdk_1.RustFunction(this, "Function", {
+            gitRemote: "https://github.com/umccr/htsget-rs",
+            gitForceClone: props.gitForceClone,
+            gitReference: props.gitReference,
+            functionName: props.functionName,
+            binaryName: "htsget-lambda",
+            bundling: {
+                environment: {
+                    RUSTFLAGS: "-C target-cpu=neoverse-n1",
+                    CARGO_PROFILE_RELEASE_LTO: "true",
+                    CARGO_PROFILE_RELEASE_CODEGEN_UNITS: "1",
+                    AWS_LAMBDA_HTTP_IGNORE_STAGE_IN_PATH: "true",
+                    ...props.buildEnvironment,
+                },
+                cargoLambdaFlags: props.cargoLambdaFlags ?? [
+                    HtsgetLambda.resolveFeatures(props.htsgetConfig, props.copyTestData ?? false),
+                ],
+            },
+            memorySize: 128,
+            timeout: aws_cdk_lib_1.Duration.seconds(28),
+            architecture: aws_lambda_1.Architecture.ARM_64,
+            role: lambdaRole ?? props.role,
+            vpc: props.vpc,
+        });
+        let bucket = undefined;
+        let privateKey = undefined;
+        let publicKey = undefined;
+        if (props.copyTestData) {
+            [bucket, privateKey, publicKey] = this.setupTestData(props.gitReference, props.bucketName);
+        }
+        if (lambdaRole !== undefined) {
+            HtsgetLambda.setPermissions(lambdaRole, props.htsgetConfig, bucket, privateKey, publicKey);
+        }
+        const env = HtsgetLambda.configToEnv(props.htsgetConfig, props.cors, bucket, privateKey, publicKey);
+        for (const key in env) {
+            htsgetLambda.addEnvironment(key, env[key]);
+        }
+        htsgetLambda.addEnvironment("RUST_LOG", "trace");
+        const httpIntegration = new aws_apigatewayv2_integrations_1.HttpLambdaIntegration("Integration", htsgetLambda);
+        [aws_apigatewayv2_1.HttpMethod.GET, aws_apigatewayv2_1.HttpMethod.POST].map((method) => {
+            const path = "/{proxy+}";
+            new aws_apigatewayv2_1.HttpRoute(this, `${method}${path}`, {
+                httpApi: httpApi,
+                routeKey: aws_apigatewayv2_1.HttpRouteKey.with(path, method),
+                integration: httpIntegration,
+            });
+        });
+        if (httpApi.defaultAuthorizer === undefined) {
+            console.warn("This will create an instance of htsget-rs that is public! Anyone will be able to query the server without authorization.");
+        }
+    }
+    /**
+     * Determine the correct features based on the locations.
+     */
+    static resolveFeatures(config, bucketSetup) {
+        const features = [];
+        if (config.locations?.some((location) => location.location.startsWith("s3://")) ||
+            bucketSetup) {
+            features.push("aws");
+        }
+        if (config.locations?.some((location) => location.location.startsWith("http://") ||
+            location.location.startsWith("https://"))) {
+            features.push("url");
+        }
+        if (config.locations?.some((location) => location.private_key !== undefined ||
+            location.public_key !== undefined) ||
+            bucketSetup) {
+            features.push("experimental");
+        }
+        return features.length === 0
+            ? "--all-features"
+            : `--features ${features.join(",")}`;
+    }
+    /**
+     * Create a bucket and copy test data if configured.
+     */
+    setupTestData(gitReference, bucketName) {
+        const gitRemote = "https://github.com/umccr/htsget-rs";
+        const latestCommit = (0, util_1.exec)("git", [
+            "ls-remote",
+            gitRemote,
+            gitReference ?? "HEAD",
+        ])
+            .stdout.toString()
+            .split(/(\s+)/)[0];
+        const localPath = (0, node_path_1.join)((0, os_1.tmpdir)(), latestCommit);
+        const bucket = new aws_s3_1.Bucket(this, "Bucket", {
+            blockPublicAccess: aws_s3_1.BlockPublicAccess.BLOCK_ALL,
+            encryption: aws_s3_1.BucketEncryption.S3_MANAGED,
+            enforceSSL: true,
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.RETAIN,
+            bucketName,
+        });
+        // Copy data from upstream htsget repo
+        const localDataPath = path_1.default.join(localPath, "data");
+        new aws_s3_deployment_1.BucketDeployment(this, "DeployFiles", {
+            sources: [
+                aws_s3_deployment_1.Source.asset(path_1.default.join(localDataPath, "c4gh")),
+                aws_s3_deployment_1.Source.asset(path_1.default.join(localDataPath, "bam")),
+                aws_s3_deployment_1.Source.asset(path_1.default.join(localDataPath, "cram")),
+                aws_s3_deployment_1.Source.asset(path_1.default.join(localDataPath, "vcf")),
+                aws_s3_deployment_1.Source.asset(path_1.default.join(localDataPath, "bcf")),
+            ],
+            destinationBucket: bucket,
+        });
+        const keyDir = path_1.default.join(localPath, "data", "c4gh", "keys");
+        const privateKey = new aws_secretsmanager_1.Secret(this, "PrivateKey", {
+            secretStringValue: aws_cdk_lib_1.SecretValue.unsafePlainText((0, fs_1.readFileSync)(path_1.default.join(keyDir, "bob.sec")).toString()),
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+        });
+        const publicKey = new aws_secretsmanager_1.Secret(this, "PublicKey", {
+            secretStringValue: aws_cdk_lib_1.SecretValue.unsafePlainText((0, fs_1.readFileSync)(path_1.default.join(keyDir, "alice.pub")).toString()),
+            removalPolicy: aws_cdk_lib_1.RemovalPolicy.DESTROY,
+        });
+        new aws_cdk_lib_1.CfnOutput(this, "BucketName", { value: bucket.bucketName });
+        return [bucket, privateKey, publicKey];
+    }
+    /**
+     * Set permissions for the Lambda role.
+     */
+    static setPermissions(role, config, bucket, privateKey, publicKey) {
+        role.addManagedPolicy(aws_iam_1.ManagedPolicy.fromAwsManagedPolicyName("service-role/AWSLambdaBasicExecutionRole"));
+        const locations = config.locations ?? [];
+        // Add any "s3://" locations to policy.
+        const buckets = locations.flatMap((location) => {
+            if (location.location.startsWith("s3://")) {
+                return [location.location.split("/")[2]];
+            }
+            else {
+                return [];
+            }
+        });
+        if (bucket !== undefined) {
+            buckets.push(bucket.bucketName);
+        }
+        const bucketPolicy = new aws_iam_1.PolicyStatement({
+            actions: ["s3:GetObject"],
+            resources: buckets.map((bucket) => `arn:aws:s3:::${bucket}/*`),
+        });
+        if (bucketPolicy.resources.length !== 0) {
+            role.addToPolicy(bucketPolicy);
+        }
+        // Add any keys from the locations.
+        const keys = locations.flatMap((location) => {
+            const keys = [];
+            if (location.private_key !== undefined) {
+                keys.push([false, location.private_key]);
+            }
+            if (location.public_key !== undefined) {
+                keys.push([false, location.public_key]);
+            }
+            return keys;
+        });
+        if (privateKey !== undefined) {
+            keys.push([true, privateKey.secretArn]);
+        }
+        if (publicKey !== undefined) {
+            keys.push([true, publicKey.secretArn]);
+        }
+        const secretPolicy = new aws_iam_1.PolicyStatement({
+            actions: ["secretsmanager:GetSecretValue"],
+            resources: keys.map(([arn, key]) => {
+                if (arn) {
+                    return key;
+                }
+                else {
+                    return `arn:aws:secretsmanager:${aws_cdk_lib_1.Aws.REGION}:${aws_cdk_lib_1.Aws.ACCOUNT_ID}:secret:${key}-*`;
+                }
+            }),
+        });
+        if (secretPolicy.resources.length !== 0) {
+            role.addToPolicy(secretPolicy);
+        }
+    }
+    /**
+     * Creates a lambda role with the configured permissions.
+     */
+    static createRole(scope, id, roleName) {
+        return new aws_iam_1.Role(scope, "Role", {
+            assumedBy: new aws_iam_1.ServicePrincipal("lambda.amazonaws.com"),
+            description: "Lambda execution role for " + id,
+            roleName,
+        });
+    }
+    /**
+     * Create stateful config related to the httpApi and the API itself.
+     */
+    createHttpApi(domain, jwtAuthorizer, config, subDomain, hostedZone, certificateArn) {
+        // Add an authorizer if auth is required.
+        let authorizer = undefined;
+        if (jwtAuthorizer !== undefined) {
+            // If the cog user pool id is not specified, create a new one.
+            if (jwtAuthorizer.cogUserPoolId === undefined) {
+                const pool = new aws_cognito_1.UserPool(this, "UserPool");
+                jwtAuthorizer.cogUserPoolId = pool.userPoolId;
+            }
+            authorizer = new aws_apigatewayv2_authorizers_1.HttpJwtAuthorizer("HtsgetAuthorizer", `https://cognito-idp.${aws_cdk_lib_1.Stack.of(this).region}.amazonaws.com/${jwtAuthorizer.cogUserPoolId}`, {
+                identitySource: ["$request.header.Authorization"],
+                jwtAudience: jwtAuthorizer.audience ?? [],
+            });
+        }
+        let zone;
+        if (hostedZone === undefined) {
+            zone = aws_route53_1.HostedZone.fromLookup(this, "HostedZone", {
+                domainName: domain,
+            });
+        }
+        else {
+            zone = hostedZone;
+        }
+        const url = `${subDomain ?? "htsget"}.${domain}`;
+        let certificate;
+        if (certificateArn !== undefined) {
+            certificate = aws_certificatemanager_1.Certificate.fromCertificateArn(this, "Certificate", certificateArn);
+        }
+        else {
+            certificate = new aws_certificatemanager_1.Certificate(this, "Certificate", {
+                domainName: url,
+                validation: aws_certificatemanager_1.CertificateValidation.fromDns(hostedZone),
+                certificateName: url,
+            });
+        }
+        const domainName = new aws_apigatewayv2_1.DomainName(this, "DomainName", {
+            certificate: certificate,
+            domainName: url,
+        });
+        new aws_route53_1.ARecord(this, "ARecord", {
+            zone,
+            recordName: subDomain ?? "htsget",
+            target: aws_route53_1.RecordTarget.fromAlias(new aws_route53_targets_1.ApiGatewayv2DomainProperties(domainName.regionalDomainName, domainName.regionalHostedZoneId)),
+        });
+        return new aws_apigatewayv2_1.HttpApi(this, "HtsGetApiGateway", {
+            defaultAuthorizer: authorizer,
+            defaultDomainMapping: {
+                domainName: domainName,
+            },
+            corsPreflight: {
+                allowCredentials: config?.allowCredentials ?? false,
+                allowHeaders: config?.allowHeaders ?? ["*"],
+                allowMethods: config?.allowMethods ?? [aws_apigatewayv2_1.CorsHttpMethod.ANY],
+                allowOrigins: config?.allowOrigins ?? ["*"],
+                exposeHeaders: config?.exposeHeaders ?? ["*"],
+                maxAge: config?.maxAge ?? aws_cdk_lib_1.Duration.days(30),
+            },
+        });
+    }
+    /**
+     * Convert JSON config to htsget-rs env representation.
+     */
+    static configToEnv(config, corsConfig, bucket, privateKey, publicKey) {
+        const toHtsgetEnv = (value) => {
+            return JSON.stringify(value)
+                .replaceAll(new RegExp(/"( )*:( )*/g), "=")
+                .replaceAll('"', "");
+        };
+        const out = {};
+        const locations = config.locations ?? [];
+        if (bucket !== undefined) {
+            locations.push({
+                location: `s3://${bucket.bucketName}`,
+                private_key: privateKey?.secretArn,
+                public_key: publicKey?.secretArn,
+            });
+        }
+        let locationsEnv = locations
+            .map((location) => {
+            return toHtsgetEnv({
+                location: location.location,
+                ...(location.private_key !== undefined &&
+                    location.public_key !== undefined && {
+                    keys: {
+                        kind: "SecretsManager",
+                        private: location.private_key,
+                        public: location.public_key,
+                    },
+                }),
+            });
+        })
+            .join(",");
+        locationsEnv = `[${locationsEnv}]`;
+        if (locationsEnv == "[]" &&
+            config.environment_override?.HTSGET_LOCATIONS === undefined) {
+            locationsEnv = undefined;
+        }
+        out.HTSGET_LOCATIONS = locationsEnv;
+        out.HTSGET_TICKET_SERVER_CORS_ALLOW_CREDENTIALS =
+            corsConfig?.allowCredentials?.toString();
+        // eslint-disable-next-line @typescript-eslint/non-nullable-type-assertion-style
+        out.HTSGET_TICKET_SERVER_CORS_ALLOW_HEADERS = `[${corsConfig?.allowHeaders?.join(",")}]`;
+        // eslint-disable-next-line @typescript-eslint/non-nullable-type-assertion-style
+        out.HTSGET_TICKET_SERVER_CORS_ALLOW_METHODS = `[${corsConfig?.allowMethods?.join(",")}]`;
+        // eslint-disable-next-line @typescript-eslint/non-nullable-type-assertion-style
+        out.HTSGET_TICKET_SERVER_CORS_ALLOW_ORIGINS = `[${corsConfig?.allowOrigins?.join(",")}]`;
+        // eslint-disable-next-line @typescript-eslint/non-nullable-type-assertion-style
+        out.HTSGET_TICKET_SERVER_CORS_EXPOSE_HEADERS = `[${corsConfig?.exposeHeaders?.join(",")}]`;
+        out.HTSGET_TICKET_SERVER_CORS_MAX_AGE = corsConfig?.maxAge
+            ?.toSeconds()
+            .toString();
+        for (const key in config.service_info) {
+            out[`HTSGET_SERVICE_INFO_${key.toUpperCase()}`] = toHtsgetEnv(config.service_info[key]);
+        }
+        for (const key in config.environment_override) {
+            out[key] = toHtsgetEnv(config.environment_override[key]);
+        }
+        Object.keys(out).forEach((key) => 
+        // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+        (out[key] == `[undefined]` || out[key] == "[]") && delete out[key]);
+        return out;
+    }
+}
+exports.HtsgetLambda = HtsgetLambda;
+//# sourceMappingURL=data:application/json;base64,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