@webiny/project-aws 0.0.0-unstable.61c048f412

package/pulumi/apps/admin/index.d.ts

@@ -0,0 +1 @@
+export * from "./createAdminPulumiApp.js";

package/pulumi/apps/admin/index.js

@@ -0,0 +1,3 @@
+export * from "./createAdminPulumiApp.js";
+
+//# sourceMappingURL=index.js.map

package/pulumi/apps/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./createAdminPulumiApp.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/pulumi/apps/api/ApiBackgroundTask.d.ts

@@ -0,0 +1,12 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;
+export declare const ApiBackgroundTaskLambdaName = "background-task";
+export declare const ApiBackgroundTask: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    backgroundTask: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+    stepFunction: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sfn/stateMachine.js").StateMachine>;
+    stepFunctionRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+    stepFunctionPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+    eventPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+    eventRolePolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment.js").RolePolicyAttachment>;
+    eventTarget: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventTarget.js").EventTarget>;
+}, void>;

package/pulumi/apps/api/ApiBackgroundTask.js

@@ -0,0 +1,148 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGraphql, CoreOutput } from "../index.js";
+import { createBackgroundTaskDefinition } from "./backgroundTask/definition.js";
+import { createBackgroundTaskStepFunctionPolicy } from "./backgroundTask/policy.js";
+import { createBackgroundTaskStepFunctionRole } from "./backgroundTask/role.js";
+import { getLayerArn } from "@webiny/aws-layers";
+import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
+export const ApiBackgroundTaskLambdaName = "background-task";
+export const ApiBackgroundTask = createAppModule({
+  name: "ApiBackgroundTask",
+  config(app) {
+    const awsAccountId = getAwsAccountId(app);
+    const awsRegion = getAwsRegion(app);
+    const core = app.getModule(CoreOutput);
+    const graphql = app.getModule(ApiGraphql);
+    const baseConfig = graphql.functions.graphql.config.clone();
+    const backgroundTask = app.addResource(aws.lambda.Function, {
+      name: ApiBackgroundTaskLambdaName,
+      config: {
+        ...baseConfig,
+        layers: graphql.functions.graphql.output.layers.apply(arns => {
+          return Array.from(new Set([...(arns || []), getLayerArn("sharp")]));
+        }),
+        timeout: 900,
+        memorySize: 1024,
+        description: "Performs background tasks.",
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+    const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {
+      name: "background-task-sfn-policy",
+      lambdaFunctionArn: backgroundTask.output.arn
+    });
+    const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {
+      name: "background-task-sfn-role",
+      policy: stepFunctionPolicy.output
+    });
+    const stepFunction = app.addResource(aws.sfn.StateMachine, {
+      name: "background-task-sfn",
+      config: {
+        roleArn: stepFunctionRole.output.arn,
+        definition: pulumi.jsonStringify(createBackgroundTaskDefinition({
+          lambdaName: ApiBackgroundTaskLambdaName,
+          lambdaArn: backgroundTask.output.arn
+        }))
+      }
+    });
+    const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {
+      name: "background-task-step-function-policy",
+      config: {
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: ["states:StartExecution", "states:StopExecution"],
+            Effect: "Allow",
+            Resource: [stepFunction.output.arn.apply(arn => `${arn}`), stepFunction.output.arn.apply(arn => `${arn}*`)]
+          }, {
+            Action: ["states:DescribeExecution", "states:ListExecutions"],
+            Effect: "Allow",
+            Resource: [stepFunction.output.name.apply(name => {
+              return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;
+            })]
+          }]
+        }
+      }
+    });
+    app.addResource(aws.iam.RolePolicyAttachment, {
+      name: "background-task-step-function-policy-attachment-graphql",
+      config: {
+        policyArn: policyToAccessStepFunction.output.arn,
+        role: graphql.role.output.name
+      }
+    });
+    const eventRole = app.addResource(aws.iam.Role, {
+      name: "background-task-event-role",
+      config: {
+        assumeRolePolicy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: "sts:AssumeRole",
+            Effect: "Allow",
+            Principal: {
+              Service: "events.amazonaws.com"
+            }
+          }]
+        }
+      }
+    });
+    const eventPolicy = app.addResource(aws.iam.Policy, {
+      name: "background-task-event-policy",
+      config: {
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: "states:StartExecution",
+            Effect: "Allow",
+            Resource: stepFunction.output.arn
+          }]
+        }
+      }
+    });
+    const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
+      name: "background-task-event-role-policy-attachment",
+      config: {
+        role: eventRole.output.name,
+        policyArn: eventPolicy.output.arn
+      }
+    });
+    const eventRule = app.addResource(aws.cloudwatch.EventRule, {
+      name: "background-task-event-rule",
+      config: {
+        eventBusName: core.eventBusName,
+        roleArn: eventRole.output.arn,
+        eventPattern: JSON.stringify({
+          "detail-type": ["WebinyBackgroundTask"]
+        })
+      }
+    });
+    const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {
+      name: "background-task-event-target",
+      config: {
+        // This is going to get called.
+        arn: stepFunction.output.arn,
+        // This is the rule which determines if this target gets called.
+        rule: eventRule.output.name,
+        // This is the role which gets assumed when calling the target.
+        roleArn: eventRole.output.arn,
+        // This is the event bus name.
+        eventBusName: core.eventBusName
+      }
+    });
+    return {
+      backgroundTask,
+      stepFunction,
+      stepFunctionRole,
+      stepFunctionPolicy,
+      eventPolicy,
+      eventRolePolicyAttachment,
+      eventTarget
+    };
+  }
+});
+
+//# sourceMappingURL=ApiBackgroundTask.js.map

package/pulumi/apps/api/ApiBackgroundTask.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["pulumi","aws","createAppModule","ApiGraphql","CoreOutput","createBackgroundTaskDefinition","createBackgroundTaskStepFunctionPolicy","createBackgroundTaskStepFunctionRole","getLayerArn","getAwsAccountId","getAwsRegion","ApiBackgroundTaskLambdaName","ApiBackgroundTask","name","config","app","awsAccountId","awsRegion","core","getModule","graphql","baseConfig","functions","clone","backgroundTask","addResource","lambda","Function","layers","output","apply","arns","Array","from","Set","timeout","memorySize","description","loggingConfig","logFormat","stepFunctionPolicy","lambdaFunctionArn","arn","stepFunctionRole","policy","stepFunction","sfn","StateMachine","roleArn","definition","jsonStringify","lambdaName","lambdaArn","policyToAccessStepFunction","iam","Policy","Version","Statement","Action","Effect","Resource","interpolate","RolePolicyAttachment","policyArn","role","eventRole","Role","assumeRolePolicy","Principal","Service","eventPolicy","eventRolePolicyAttachment","eventRule","cloudwatch","EventRule","eventBusName","eventPattern","JSON","stringify","eventTarget","EventTarget","rule"],"sources":["ApiBackgroundTask.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql, CoreOutput } from \"~/pulumi/apps/index.js\";\nimport { createBackgroundTaskDefinition } from \"./backgroundTask/definition.js\";\nimport { createBackgroundTaskStepFunctionPolicy } from \"~/pulumi/apps/api/backgroundTask/policy.js\";\nimport { createBackgroundTaskStepFunctionRole } from \"./backgroundTask/role.js\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\n\nexport type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;\n\nexport const ApiBackgroundTaskLambdaName = \"background-task\";\n\nexport const ApiBackgroundTask = createAppModule({\n    name: \"ApiBackgroundTask\",\n    config(app: PulumiApp) {\n        const awsAccountId = getAwsAccountId(app);\n        const awsRegion = getAwsRegion(app);\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const backgroundTask = app.addResource(aws.lambda.Function, {\n            name: ApiBackgroundTaskLambdaName,\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                timeout: 900,\n                memorySize: 1024,\n                description: \"Performs background tasks.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {\n            name: \"background-task-sfn-policy\",\n            lambdaFunctionArn: backgroundTask.output.arn\n        });\n\n        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {\n            name: \"background-task-sfn-role\",\n            policy: stepFunctionPolicy.output\n        });\n\n        const stepFunction = app.addResource(aws.sfn.StateMachine, {\n            name: \"background-task-sfn\",\n            config: {\n                roleArn: stepFunctionRole.output.arn,\n                definition: pulumi.jsonStringify(\n                    createBackgroundTaskDefinition({\n                        lambdaName: ApiBackgroundTaskLambdaName,\n                        lambdaArn: backgroundTask.output.arn\n                    })\n                )\n            }\n        });\n\n        const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {\n            name: \"background-task-step-function-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"states:StartExecution\", \"states:StopExecution\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.arn.apply(arn => `${arn}`),\n                                stepFunction.output.arn.apply(arn => `${arn}*`)\n                            ]\n                        },\n                        {\n                            Action: [\"states:DescribeExecution\", \"states:ListExecutions\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.name.apply(name => {\n                                    return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;\n                                })\n                            ]\n                        }\n                    ]\n                }\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-step-function-policy-attachment-graphql\",\n            config: {\n                policyArn: policyToAccessStepFunction.output.arn,\n                role: graphql.role.output.name\n            }\n        });\n\n        const eventRole = app.addResource(aws.iam.Role, {\n            name: \"background-task-event-role\",\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"events.amazonaws.com\"\n                            }\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventPolicy = app.addResource(aws.iam.Policy, {\n            name: \"background-task-event-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"states:StartExecution\",\n                            Effect: \"Allow\",\n                            Resource: stepFunction.output.arn\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-event-role-policy-attachment\",\n            config: {\n                role: eventRole.output.name,\n                policyArn: eventPolicy.output.arn\n            }\n        });\n\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: \"background-task-event-rule\",\n            config: {\n                eventBusName: core.eventBusName,\n                roleArn: eventRole.output.arn,\n                eventPattern: JSON.stringify({\n                    \"detail-type\": [\"WebinyBackgroundTask\"]\n                })\n            }\n        });\n\n        const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: \"background-task-event-target\",\n            config: {\n                // This is going to get called.\n                arn: stepFunction.output.arn,\n                // This is the rule which determines if this target gets called.\n                rule: eventRule.output.name,\n                // This is the role which gets assumed when calling the target.\n                roleArn: eventRole.output.arn,\n                // This is the event bus name.\n                eventBusName: core.eventBusName\n            }\n        });\n\n        return {\n            backgroundTask,\n            stepFunction,\n            stepFunctionRole,\n            stepFunctionPolicy,\n            eventPolicy,\n            eventRolePolicyAttachment,\n            eventTarget\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU,EAAEC,UAAU;AAC/B,SAASC,8BAA8B;AACvC,SAASC,sCAAsC;AAC/C,SAASC,oCAAoC;AAC7C,SAASC,WAAW,QAAQ,oBAAoB;AAChD,SAASC,eAAe,EAAEC,YAAY;AAItC,OAAO,MAAMC,2BAA2B,GAAG,iBAAiB;AAE5D,OAAO,MAAMC,iBAAiB,GAAGV,eAAe,CAAC;EAC7CW,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,YAAY,GAAGP,eAAe,CAACM,GAAG,CAAC;IACzC,MAAME,SAAS,GAAGP,YAAY,CAACK,GAAG,CAAC;IACnC,MAAMG,IAAI,GAAGH,GAAG,CAACI,SAAS,CAACf,UAAU,CAAC;IACtC,MAAMgB,OAAO,GAAGL,GAAG,CAACI,SAAS,CAAChB,UAAU,CAAC;IACzC,MAAMkB,UAAU,GAAGD,OAAO,CAACE,SAAS,CAACF,OAAO,CAACN,MAAM,CAACS,KAAK,CAAC,CAAC;IAE3D,MAAMC,cAAc,GAAGT,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACyB,MAAM,CAACC,QAAQ,EAAE;MACxDd,IAAI,EAAEF,2BAA2B;MACjCG,MAAM,EAAE;QACJ,GAAGO,UAAU;QACbO,MAAM,EAAER,OAAO,CAACE,SAAS,CAACF,OAAO,CAACS,MAAM,CAACD,MAAM,CAACE,KAAK,CAACC,IAAI,IAAI;UAC1D,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,IAAIH,IAAI,IAAI,EAAE,CAAC,EAAEvB,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF2B,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE,4BAA4B;QACzCC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,kBAAkB,GAAGlC,sCAAsC,CAACS,GAAG,EAAE;MACnEF,IAAI,EAAE,4BAA4B;MAClC4B,iBAAiB,EAAEjB,cAAc,CAACK,MAAM,CAACa;IAC7C,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAGpC,oCAAoC,CAACQ,GAAG,EAAE;MAC/DF,IAAI,EAAE,0BAA0B;MAChC+B,MAAM,EAAEJ,kBAAkB,CAACX;IAC/B,CAAC,CAAC;IAEF,MAAMgB,YAAY,GAAG9B,GAAG,CAACU,WAAW,CAACxB,GAAG,CAAC6C,GAAG,CAACC,YAAY,EAAE;MACvDlC,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJkC,OAAO,EAAEL,gBAAgB,CAACd,MAAM,CAACa,GAAG;QACpCO,UAAU,EAAEjD,MAAM,CAACkD,aAAa,CAC5B7C,8BAA8B,CAAC;UAC3B8C,UAAU,EAAExC,2BAA2B;UACvCyC,SAAS,EAAE5B,cAAc,CAACK,MAAM,CAACa;QACrC,CAAC,CACL;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMW,0BAA0B,GAAGtC,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACC,MAAM,EAAE;MAC/D1C,IAAI,EAAE,sCAAsC;MAC5CC,MAAM,EAAE;QACJ8B,MAAM,EAAE;UACJY,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;YACzDC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNf,YAAY,CAAChB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAI,GAAGA,GAAG,EAAE,CAAC,EAC9CG,YAAY,CAAChB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAI,GAAGA,GAAG,GAAG,CAAC;UAEvD,CAAC,EACD;YACIgB,MAAM,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;YAC7DC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNf,YAAY,CAAChB,MAAM,CAAChB,IAAI,CAACiB,KAAK,CAACjB,IAAI,IAAI;cACnC,OAAOb,MAAM,CAAC6D,WAAW,kBAAkB5C,SAAS,IAAID,YAAY,cAAcH,IAAI,IAAI;YAC9F,CAAC,CAAC;UAEV,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEFE,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACQ,oBAAoB,EAAE;MAC1CjD,IAAI,EAAE,yDAAyD;MAC/DC,MAAM,EAAE;QACJiD,SAAS,EAAEV,0BAA0B,CAACxB,MAAM,CAACa,GAAG;QAChDsB,IAAI,EAAE5C,OAAO,CAAC4C,IAAI,CAACnC,MAAM,CAAChB;MAC9B;IACJ,CAAC,CAAC;IAEF,MAAMoD,SAAS,GAAGlD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACY,IAAI,EAAE;MAC5CrD,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJqD,gBAAgB,EAAE;UACdX,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,gBAAgB;YACxBC,MAAM,EAAE,OAAO;YACfS,SAAS,EAAE;cACPC,OAAO,EAAE;YACb;UACJ,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGvD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACC,MAAM,EAAE;MAChD1C,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ8B,MAAM,EAAE;UACJY,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,uBAAuB;YAC/BC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAEf,YAAY,CAAChB,MAAM,CAACa;UAClC,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM6B,yBAAyB,GAAGxD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACQ,oBAAoB,EAAE;MAC5EjD,IAAI,EAAE,8CAA8C;MACpDC,MAAM,EAAE;QACJkD,IAAI,EAAEC,SAAS,CAACpC,MAAM,CAAChB,IAAI;QAC3BkD,SAAS,EAAEO,WAAW,CAACzC,MAAM,CAACa;MAClC;IACJ,CAAC,CAAC;IAEF,MAAM8B,SAAS,GAAGzD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACwE,UAAU,CAACC,SAAS,EAAE;MACxD7D,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJ6D,YAAY,EAAEzD,IAAI,CAACyD,YAAY;QAC/B3B,OAAO,EAAEiB,SAAS,CAACpC,MAAM,CAACa,GAAG;QAC7BkC,YAAY,EAAEC,IAAI,CAACC,SAAS,CAAC;UACzB,aAAa,EAAE,CAAC,sBAAsB;QAC1C,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGhE,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACwE,UAAU,CAACO,WAAW,EAAE;MAC5DnE,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ;QACA4B,GAAG,EAAEG,YAAY,CAAChB,MAAM,CAACa,GAAG;QAC5B;QACAuC,IAAI,EAAET,SAAS,CAAC3C,MAAM,CAAChB,IAAI;QAC3B;QACAmC,OAAO,EAAEiB,SAAS,CAACpC,MAAM,CAACa,GAAG;QAC7B;QACAiC,YAAY,EAAEzD,IAAI,CAACyD;MACvB;IACJ,CAAC,CAAC;IAEF,OAAO;MACHnD,cAAc;MACdqB,YAAY;MACZF,gBAAgB;MAChBH,kBAAkB;MAClB8B,WAAW;MACXC,yBAAyB;MACzBQ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiCloudfront.d.ts

@@ -0,0 +1,3 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;
+export declare const ApiCloudfront: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudfront/distribution.js").Distribution>, void>;

package/pulumi/apps/api/ApiCloudfront.js

@@ -0,0 +1,136 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGateway } from "./ApiGateway.js";
+export const ApiCloudfront = createAppModule({
+  name: "ApiCloudfront",
+  config(app) {
+    const gateway = app.getModule(ApiGateway);
+    const cookies = {
+      forward: "whitelist",
+      whitelistedNames: ["wby-id-token"]
+    };
+    const forwardHeaders = ["Origin", "Authorization", "Accept", "Accept-Language", "X-Tenant"];
+    return app.addResource(aws.cloudfront.Distribution, {
+      name: "api-cloudfront",
+      config: {
+        httpVersion: "http2and3",
+        waitForDeployment: false,
+        isIpv6Enabled: true,
+        enabled: true,
+        defaultCacheBehavior: {
+          compress: true,
+          allowedMethods: ["GET", "HEAD", "OPTIONS", "PUT", "POST", "PATCH", "DELETE"],
+          cachedMethods: ["GET", "HEAD", "OPTIONS"],
+          forwardedValues: {
+            cookies,
+            headers: forwardHeaders,
+            queryString: true
+          },
+          // MinTTL <= DefaultTTL <= MaxTTL
+          minTtl: 0,
+          defaultTtl: 0,
+          maxTtl: 86400,
+          targetOriginId: gateway.api.output.name,
+          viewerProtocolPolicy: "allow-all"
+        },
+        orderedCacheBehaviors: [{
+          compress: true,
+          allowedMethods: ["GET", "HEAD", "OPTIONS", "PUT", "POST", "PATCH", "DELETE"],
+          cachedMethods: ["GET", "HEAD", "OPTIONS"],
+          forwardedValues: {
+            cookies: {
+              forward: "none"
+            },
+            headers: forwardHeaders,
+            queryString: true
+          },
+          pathPattern: "/cms*",
+          viewerProtocolPolicy: "allow-all",
+          targetOriginId: gateway.api.output.name
+        }, {
+          compress: true,
+          allowedMethods: ["GET", "HEAD", "OPTIONS", "PUT", "POST", "PATCH", "DELETE"],
+          cachedMethods: ["GET", "HEAD", "OPTIONS"],
+          forwardedValues: {
+            cookies: {
+              forward: "none"
+            },
+            headers: forwardHeaders,
+            queryString: true
+          },
+          pathPattern: "/wb/*",
+          viewerProtocolPolicy: "allow-all",
+          targetOriginId: gateway.api.output.name
+        }, {
+          allowedMethods: ["HEAD", "GET", "OPTIONS"],
+          cachedMethods: ["HEAD", "GET", "OPTIONS"],
+          forwardedValues: {
+            cookies: {
+              forward: "none"
+            },
+            headers: forwardHeaders,
+            queryString: true
+          },
+          // MinTTL <= DefaultTTL <= MaxTTL
+          minTtl: 0,
+          defaultTtl: 0,
+          maxTtl: 2592000,
+          pathPattern: "/files/*",
+          viewerProtocolPolicy: "allow-all",
+          targetOriginId: gateway.api.output.name
+        }, {
+          allowedMethods: ["HEAD", "GET", "OPTIONS"],
+          cachedMethods: ["HEAD", "GET", "OPTIONS"],
+          forwardedValues: {
+            cookies: cookies,
+            headers: forwardHeaders,
+            queryString: true
+          },
+          // MinTTL <= DefaultTTL <= MaxTTL
+          minTtl: 0,
+          defaultTtl: 0,
+          maxTtl: 2592000,
+          pathPattern: "/private/*",
+          viewerProtocolPolicy: "allow-all",
+          targetOriginId: gateway.api.output.name
+        }],
+        origins: [{
+          domainName: gateway.stage.output.invokeUrl.apply(url => new URL(url).hostname),
+          originPath: gateway.stage.output.invokeUrl.apply(url => new URL(url).pathname),
+          originId: gateway.api.output.name,
+          customOriginConfig: {
+            httpPort: 80,
+            httpsPort: 443,
+            originProtocolPolicy: "https-only",
+            originSslProtocols: ["TLSv1.2"]
+          }
+        }],
+        restrictions: {
+          geoRestriction: {
+            restrictionType: "none"
+          }
+        },
+        viewerCertificate: {
+          cloudfrontDefaultCertificate: true
+        }
+      },
+      opts: {
+        // We are ignoring changes to the "staging" property. This is because of the following.
+        // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change
+        // with how Cloudfront distributions are deployed, where Pulumi now also controls the new
+        // `staging` property.
+        // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is
+        // that, because this property did not exist before, it will always be considered as a change
+        // upon deployment.
+        // We might think this is fine, but, the problem is that a change in this property causes
+        // a full replacement of the Cloudfront distribution, which is not acceptable. Especially
+        // if a custom domain has already been associated with the distribution. This then would
+        // require the user to disassociate the domain, wait for the distribution to be replaced,
+        // and then re-associate the domain. This is not a good experience.
+        ignoreChanges: ["staging"]
+      }
+    });
+  }
+});
+
+//# sourceMappingURL=ApiCloudfront.js.map

package/pulumi/apps/api/ApiCloudfront.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","ApiGateway","ApiCloudfront","name","config","app","gateway","getModule","cookies","forward","whitelistedNames","forwardHeaders","addResource","cloudfront","Distribution","httpVersion","waitForDeployment","isIpv6Enabled","enabled","defaultCacheBehavior","compress","allowedMethods","cachedMethods","forwardedValues","headers","queryString","minTtl","defaultTtl","maxTtl","targetOriginId","api","output","viewerProtocolPolicy","orderedCacheBehaviors","pathPattern","origins","domainName","stage","invokeUrl","apply","url","URL","hostname","originPath","pathname","originId","customOriginConfig","httpPort","httpsPort","originProtocolPolicy","originSslProtocols","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","opts","ignoreChanges"],"sources":["ApiCloudfront.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nimport { ApiGateway } from \"./ApiGateway.js\";\n\nexport type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;\n\nexport const ApiCloudfront = createAppModule({\n    name: \"ApiCloudfront\",\n    config(app: PulumiApp) {\n        const gateway = app.getModule(ApiGateway);\n\n        const cookies = {\n            forward: \"whitelist\",\n            whitelistedNames: [\"wby-id-token\"]\n        };\n\n        const forwardHeaders = [\"Origin\", \"Authorization\", \"Accept\", \"Accept-Language\", \"X-Tenant\"];\n\n        return app.addResource(aws.cloudfront.Distribution, {\n            name: \"api-cloudfront\",\n            config: {\n                httpVersion: \"http2and3\",\n                waitForDeployment: false,\n                isIpv6Enabled: true,\n                enabled: true,\n                defaultCacheBehavior: {\n                    compress: true,\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\", \"PUT\", \"POST\", \"PATCH\", \"DELETE\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    forwardedValues: {\n                        cookies,\n                        headers: forwardHeaders,\n                        queryString: true\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 0,\n                    maxTtl: 86400,\n                    targetOriginId: gateway.api.output.name,\n                    viewerProtocolPolicy: \"allow-all\"\n                },\n                orderedCacheBehaviors: [\n                    {\n                        compress: true,\n                        allowedMethods: [\n                            \"GET\",\n                            \"HEAD\",\n                            \"OPTIONS\",\n                            \"PUT\",\n                            \"POST\",\n                            \"PATCH\",\n                            \"DELETE\"\n                        ],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        pathPattern: \"/cms*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        compress: true,\n                        allowedMethods: [\n                            \"GET\",\n                            \"HEAD\",\n                            \"OPTIONS\",\n                            \"PUT\",\n                            \"POST\",\n                            \"PATCH\",\n                            \"DELETE\"\n                        ],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        pathPattern: \"/wb/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/files/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: cookies,\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/private/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    }\n                ],\n                origins: [\n                    {\n                        domainName: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).hostname\n                        ),\n                        originPath: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).pathname\n                        ),\n                        originId: gateway.api.output.name,\n                        customOriginConfig: {\n                            httpPort: 80,\n                            httpsPort: 443,\n                            originProtocolPolicy: \"https-only\",\n                            originSslProtocols: [\"TLSv1.2\"]\n                        }\n                    }\n                ],\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            },\n            opts: {\n                // We are ignoring changes to the \"staging\" property. This is because of the following.\n                // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change\n                // with how Cloudfront distributions are deployed, where Pulumi now also controls the new\n                // `staging` property.\n                // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is\n                // that, because this property did not exist before, it will always be considered as a change\n                // upon deployment.\n                // We might think this is fine, but, the problem is that a change in this property causes\n                // a full replacement of the Cloudfront distribution, which is not acceptable. Especially\n                // if a custom domain has already been associated with the distribution. This then would\n                // require the user to disassociate the domain, wait for the distribution to be replaced,\n                // and then re-associate the domain. This is not a good experience.\n                ignoreChanges: [\"staging\"]\n            }\n        });\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAEhD,SAASC,UAAU;AAInB,OAAO,MAAMC,aAAa,GAAGF,eAAe,CAAC;EACzCG,IAAI,EAAE,eAAe;EACrBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACN,UAAU,CAAC;IAEzC,MAAMO,OAAO,GAAG;MACZC,OAAO,EAAE,WAAW;MACpBC,gBAAgB,EAAE,CAAC,cAAc;IACrC,CAAC;IAED,MAAMC,cAAc,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC;IAE3F,OAAON,GAAG,CAACO,WAAW,CAACb,GAAG,CAACc,UAAU,CAACC,YAAY,EAAE;MAChDX,IAAI,EAAE,gBAAgB;MACtBC,MAAM,EAAE;QACJW,WAAW,EAAE,WAAW;QACxBC,iBAAiB,EAAE,KAAK;QACxBC,aAAa,EAAE,IAAI;QACnBC,OAAO,EAAE,IAAI;QACbC,oBAAoB,EAAE;UAClBC,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;UAC5EC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbf,OAAO;YACPgB,OAAO,EAAEb,cAAc;YACvBc,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,KAAK;UACbC,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACvC6B,oBAAoB,EAAE;QAC1B,CAAC;QACDC,qBAAqB,EAAE,CACnB;UACIb,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CACZ,KAAK,EACL,MAAM,EACN,SAAS,EACT,KAAK,EACL,MAAM,EACN,OAAO,EACP,QAAQ,CACX;UACDC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbf,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDe,OAAO,EAAEb,cAAc;YACvBc,WAAW,EAAE;UACjB,CAAC;UACDS,WAAW,EAAE,OAAO;UACpBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIiB,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CACZ,KAAK,EACL,MAAM,EACN,SAAS,EACT,KAAK,EACL,MAAM,EACN,OAAO,EACP,QAAQ,CACX;UACDC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbf,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDe,OAAO,EAAEb,cAAc;YACvBc,WAAW,EAAE;UACjB,CAAC;UACDS,WAAW,EAAE,OAAO;UACpBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbf,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDe,OAAO,EAAEb,cAAc;YACvBc,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,UAAU;UACvBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbf,OAAO,EAAEA,OAAO;YAChBgB,OAAO,EAAEb,cAAc;YACvBc,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,YAAY;UACzBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,CACJ;QACDgC,OAAO,EAAE,CACL;UACIC,UAAU,EAAE9B,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACE,QAClC,CAAC;UACDC,UAAU,EAAErC,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACI,QAClC,CAAC;UACDC,QAAQ,EAAEvC,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACjC2C,kBAAkB,EAAE;YAChBC,QAAQ,EAAE,EAAE;YACZC,SAAS,EAAE,GAAG;YACdC,oBAAoB,EAAE,YAAY;YAClCC,kBAAkB,EAAE,CAAC,SAAS;UAClC;QACJ,CAAC,CACJ;QACDC,YAAY,EAAE;UACVC,cAAc,EAAE;YACZC,eAAe,EAAE;UACrB;QACJ,CAAC;QACDC,iBAAiB,EAAE;UACfC,4BAA4B,EAAE;QAClC;MACJ,CAAC;MACDC,IAAI,EAAE;QACF;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACAC,aAAa,EAAE,CAAC,SAAS;MAC7B;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiFileManager.d.ts

@@ -0,0 +1,11 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiFileManager = PulumiAppModule<typeof ApiFileManager>;
+interface ApiFileManagerConfig {
+    env: Record<string, any>;
+}
+export declare const ApiFileManager: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    functions: {
+        download: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
+    };
+}, ApiFileManagerConfig>;
+export {};

package/pulumi/apps/api/ApiFileManager.js

@@ -0,0 +1,39 @@
+import * as aws from "@pulumi/aws";
+import { getLayerArn } from "@webiny/aws-layers";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGraphql } from "../index.js";
+export const ApiFileManager = createAppModule({
+  name: "ApiFileManager",
+  config(app, config) {
+    const graphql = app.getModule(ApiGraphql);
+    const baseConfig = graphql.functions.graphql.config.clone();
+    const download = app.addResource(aws.lambda.Function, {
+      name: "fm-download",
+      config: {
+        ...baseConfig,
+        memorySize: 1600,
+        description: "Serves previously uploaded files.",
+        layers: [getLayerArn("sharp")],
+        environment: {
+          variables: graphql.functions.graphql.output.environment.apply(env => {
+            return {
+              WEBINY_FUNCTION_TYPE: "asset-delivery",
+              ...env?.variables,
+              ...config.env
+            };
+          })
+        },
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+    return {
+      functions: {
+        download
+      }
+    };
+  }
+});
+
+//# sourceMappingURL=ApiFileManager.js.map

package/pulumi/apps/api/ApiFileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","getLayerArn","createAppModule","ApiGraphql","ApiFileManager","name","config","app","graphql","getModule","baseConfig","functions","clone","download","addResource","lambda","Function","memorySize","description","layers","environment","variables","output","apply","env","WEBINY_FUNCTION_TYPE","loggingConfig","logFormat"],"sources":["ApiFileManager.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\n\nexport type ApiFileManager = PulumiAppModule<typeof ApiFileManager>;\n\ninterface ApiFileManagerConfig {\n    env: Record<string, any>;\n}\n\nexport const ApiFileManager = createAppModule({\n    name: \"ApiFileManager\",\n    config(app: PulumiApp, config: ApiFileManagerConfig) {\n        const graphql = app.getModule(ApiGraphql);\n\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const download = app.addResource(aws.lambda.Function, {\n            name: \"fm-download\",\n            config: {\n                ...baseConfig,\n                memorySize: 1600,\n                description: \"Serves previously uploaded files.\",\n                layers: [getLayerArn(\"sharp\")],\n                environment: {\n                    variables: graphql.functions.graphql.output.environment.apply(env => {\n                        return {\n                            WEBINY_FUNCTION_TYPE: \"asset-delivery\",\n                            ...env?.variables,\n                            ...config.env\n                        };\n                    })\n                },\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        return {\n            functions: {\n                download\n            }\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,WAAW,QAAQ,oBAAoB;AAEhD,SAASC,eAAe,QAAQ,gBAAgB;AAEhD,SAASC,UAAU;AAQnB,OAAO,MAAMC,cAAc,GAAGF,eAAe,CAAC;EAC1CG,IAAI,EAAE,gBAAgB;EACtBC,MAAMA,CAACC,GAAc,EAAED,MAA4B,EAAE;IACjD,MAAME,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACN,UAAU,CAAC;IAEzC,MAAMO,UAAU,GAAGF,OAAO,CAACG,SAAS,CAACH,OAAO,CAACF,MAAM,CAACM,KAAK,CAAC,CAAC;IAE3D,MAAMC,QAAQ,GAAGN,GAAG,CAACO,WAAW,CAACd,GAAG,CAACe,MAAM,CAACC,QAAQ,EAAE;MAClDX,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJ,GAAGI,UAAU;QACbO,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE,mCAAmC;QAChDC,MAAM,EAAE,CAAClB,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9BmB,WAAW,EAAE;UACTC,SAAS,EAAEb,OAAO,CAACG,SAAS,CAACH,OAAO,CAACc,MAAM,CAACF,WAAW,CAACG,KAAK,CAACC,GAAG,IAAI;YACjE,OAAO;cACHC,oBAAoB,EAAE,gBAAgB;cACtC,GAAGD,GAAG,EAAEH,SAAS;cACjB,GAAGf,MAAM,CAACkB;YACd,CAAC;UACL,CAAC;QACL,CAAC;QACDE,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACHhB,SAAS,EAAE;QACPE;MACJ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiGateway.d.ts

@@ -0,0 +1,18 @@
+import type * as pulumi from "@pulumi/pulumi";
+import type { PulumiAppModule } from "@webiny/pulumi";
+export interface ApiRouteParams {
+    path: pulumi.Input<string>;
+    method: pulumi.Input<string>;
+    function: pulumi.Input<string>;
+}
+export type ApiGateway = PulumiAppModule<typeof ApiGateway>;
+export declare const ApiGateway: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    api: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/api").Api>;
+    stage: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/stage").Stage>;
+    routes: Record<string, {
+        integration: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/integration").Integration>;
+        route: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/route").Route>;
+        permission: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/permission").Permission>;
+    }>;
+    addRoute: (name: string, params: ApiRouteParams) => void;
+}, Record<string, ApiRouteParams>>;

package/pulumi/apps/api/ApiGateway.js

@@ -0,0 +1,80 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const ApiGateway = createAppModule({
+  name: "ApiGateway",
+  config(app, routesConfig) {
+    const api = app.addResource(aws.apigatewayv2.Api, {
+      name: "api-gateway",
+      config: {
+        protocolType: "HTTP",
+        description: "Main API gateway"
+      }
+    });
+    const stage = app.addResource(aws.apigatewayv2.Stage, {
+      name: "default",
+      config: {
+        apiId: api.output.id,
+        autoDeploy: true,
+        defaultRouteSettings: {
+          // Only enable when debugging. Note that by default, API Gateway does not
+          // have the required permissions to write logs to CloudWatch logs. More:
+          // https://coady.tech/aws-cloudwatch-logs-arn/
+          // loggingLevel: "INFO",
+          throttlingBurstLimit: 5000,
+          throttlingRateLimit: 10000
+        }
+      }
+    });
+    const routes = {};
+    for (const name of Object.keys(routesConfig)) {
+      addRoute(name, routesConfig[name]);
+    }
+    return {
+      api,
+      stage,
+      routes,
+      addRoute
+    };
+    function addRoute(name, params) {
+      const route = createRoute(app, api.output, name, params);
+      routes[name] = route;
+    }
+  }
+});
+function createRoute(app, api, name, params) {
+  const integration = app.addResource(aws.apigatewayv2.Integration, {
+    name: name,
+    config: {
+      description: "GraphQL API Integration",
+      apiId: api.id,
+      integrationType: "AWS_PROXY",
+      integrationMethod: params.method,
+      integrationUri: params.function,
+      passthroughBehavior: "WHEN_NO_MATCH"
+    }
+  });
+  const route = app.addResource(aws.apigatewayv2.Route, {
+    name: name,
+    config: {
+      apiId: api.id,
+      routeKey: `${params.method} ${params.path}`,
+      target: integration.output.id.apply(value => `integrations/${value}`)
+    }
+  });
+  const permission = app.addResource(aws.lambda.Permission, {
+    name: `allow-${name}`,
+    config: {
+      action: "lambda:InvokeFunction",
+      function: params.function,
+      principal: "apigateway.amazonaws.com",
+      sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)
+    }
+  });
+  return {
+    integration,
+    route,
+    permission
+  };
+}
+
+//# sourceMappingURL=ApiGateway.js.map

package/pulumi/apps/api/ApiGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","ApiGateway","name","config","app","routesConfig","api","addResource","apigatewayv2","Api","protocolType","description","stage","Stage","apiId","output","id","autoDeploy","defaultRouteSettings","throttlingBurstLimit","throttlingRateLimit","routes","Object","keys","addRoute","params","route","createRoute","integration","Integration","integrationType","integrationMethod","method","integrationUri","function","passthroughBehavior","Route","routeKey","path","target","apply","value","permission","lambda","Permission","action","principal","sourceArn","executionArn","arn"],"sources":["ApiGateway.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport interface ApiRouteParams {\n    path: pulumi.Input<string>;\n    method: pulumi.Input<string>;\n    function: pulumi.Input<string>;\n}\n\nexport type ApiGateway = PulumiAppModule<typeof ApiGateway>;\n\nexport const ApiGateway = createAppModule({\n    name: \"ApiGateway\",\n    config(app: PulumiApp, routesConfig: Record<string, ApiRouteParams>) {\n        const api = app.addResource(aws.apigatewayv2.Api, {\n            name: \"api-gateway\",\n            config: {\n                protocolType: \"HTTP\",\n                description: \"Main API gateway\"\n            }\n        });\n\n        const stage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"default\",\n            config: {\n                apiId: api.output.id,\n                autoDeploy: true,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        const routes: Record<string, ReturnType<typeof createRoute>> = {};\n\n        for (const name of Object.keys(routesConfig)) {\n            addRoute(name, routesConfig[name]);\n        }\n\n        return {\n            api,\n            stage,\n            routes,\n            addRoute\n        };\n\n        function addRoute(name: string, params: ApiRouteParams) {\n            const route = createRoute(app, api.output, name, params);\n            routes[name] = route;\n        }\n    }\n});\n\nfunction createRoute(\n    app: PulumiApp,\n    api: pulumi.Output<aws.apigatewayv2.Api>,\n    name: string,\n    params: ApiRouteParams\n) {\n    const integration = app.addResource(aws.apigatewayv2.Integration, {\n        name: name,\n        config: {\n            description: \"GraphQL API Integration\",\n            apiId: api.id,\n            integrationType: \"AWS_PROXY\",\n            integrationMethod: params.method,\n            integrationUri: params.function,\n            passthroughBehavior: \"WHEN_NO_MATCH\"\n        }\n    });\n\n    const route = app.addResource(aws.apigatewayv2.Route, {\n        name: name,\n        config: {\n            apiId: api.id,\n            routeKey: `${params.method} ${params.path}`,\n            target: integration.output.id.apply(value => `integrations/${value}`)\n        }\n    });\n\n    const permission = app.addResource(aws.lambda.Permission, {\n        name: `allow-${name}`,\n        config: {\n            action: \"lambda:InvokeFunction\",\n            function: params.function,\n            principal: \"apigateway.amazonaws.com\",\n            sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)\n        }\n    });\n\n    return {\n        integration,\n        route,\n        permission\n    };\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,eAAe,QAAQ,gBAAgB;AAUhD,OAAO,MAAMC,UAAU,GAAGD,eAAe,CAAC;EACtCE,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,YAA4C,EAAE;IACjE,MAAMC,GAAG,GAAGF,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACC,GAAG,EAAE;MAC9CP,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJO,YAAY,EAAE,MAAM;QACpBC,WAAW,EAAE;MACjB;IACJ,CAAC,CAAC;IAEF,MAAMC,KAAK,GAAGR,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACK,KAAK,EAAE;MAClDX,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJW,KAAK,EAAER,GAAG,CAACS,MAAM,CAACC,EAAE;QACpBC,UAAU,EAAE,IAAI;QAChBC,oBAAoB,EAAE;UAClB;UACA;UACA;UACA;UACAC,oBAAoB,EAAE,IAAI;UAC1BC,mBAAmB,EAAE;QACzB;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,MAAsD,GAAG,CAAC,CAAC;IAEjE,KAAK,MAAMnB,IAAI,IAAIoB,MAAM,CAACC,IAAI,CAAClB,YAAY,CAAC,EAAE;MAC1CmB,QAAQ,CAACtB,IAAI,EAAEG,YAAY,CAACH,IAAI,CAAC,CAAC;IACtC;IAEA,OAAO;MACHI,GAAG;MACHM,KAAK;MACLS,MAAM;MACNG;IACJ,CAAC;IAED,SAASA,QAAQA,CAACtB,IAAY,EAAEuB,MAAsB,EAAE;MACpD,MAAMC,KAAK,GAAGC,WAAW,CAACvB,GAAG,EAAEE,GAAG,CAACS,MAAM,EAAEb,IAAI,EAAEuB,MAAM,CAAC;MACxDJ,MAAM,CAACnB,IAAI,CAAC,GAAGwB,KAAK;IACxB;EACJ;AACJ,CAAC,CAAC;AAEF,SAASC,WAAWA,CAChBvB,GAAc,EACdE,GAAwC,EACxCJ,IAAY,EACZuB,MAAsB,EACxB;EACE,MAAMG,WAAW,GAAGxB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACqB,WAAW,EAAE;IAC9D3B,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJQ,WAAW,EAAE,yBAAyB;MACtCG,KAAK,EAAER,GAAG,CAACU,EAAE;MACbc,eAAe,EAAE,WAAW;MAC5BC,iBAAiB,EAAEN,MAAM,CAACO,MAAM;MAChCC,cAAc,EAAER,MAAM,CAACS,QAAQ;MAC/BC,mBAAmB,EAAE;IACzB;EACJ,CAAC,CAAC;EAEF,MAAMT,KAAK,GAAGtB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAAC4B,KAAK,EAAE;IAClDlC,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJW,KAAK,EAAER,GAAG,CAACU,EAAE;MACbqB,QAAQ,EAAE,GAAGZ,MAAM,CAACO,MAAM,IAAIP,MAAM,CAACa,IAAI,EAAE;MAC3CC,MAAM,EAAEX,WAAW,CAACb,MAAM,CAACC,EAAE,CAACwB,KAAK,CAACC,KAAK,IAAI,gBAAgBA,KAAK,EAAE;IACxE;EACJ,CAAC,CAAC;EAEF,MAAMC,UAAU,GAAGtC,GAAG,CAACG,WAAW,CAACR,GAAG,CAAC4C,MAAM,CAACC,UAAU,EAAE;IACtD1C,IAAI,EAAE,SAASA,IAAI,EAAE;IACrBC,MAAM,EAAE;MACJ0C,MAAM,EAAE,uBAAuB;MAC/BX,QAAQ,EAAET,MAAM,CAACS,QAAQ;MACzBY,SAAS,EAAE,0BAA0B;MACrCC,SAAS,EAAEzC,GAAG,CAAC0C,YAAY,CAACR,KAAK,CAACS,GAAG,IAAI,GAAGA,GAAG,OAAOxB,MAAM,CAACa,IAAI,EAAE;IACvE;EACJ,CAAC,CAAC;EAEF,OAAO;IACHV,WAAW;IACXF,KAAK;IACLgB;EACJ,CAAC;AACL","ignoreList":[]}

package/pulumi/apps/api/ApiGraphql.d.ts

@@ -0,0 +1,22 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+interface GraphqlParams {
+    env: Record<string, any>;
+}
+export interface AddRouteParams {
+    /**
+     * Must be in kebab case (a-z and -)
+     */
+    name: string;
+    path: `/${string}`;
+    method: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | "OPTIONS" | "ANY";
+}
+export type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;
+export declare const ApiGraphql: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+    policy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+    functions: {
+        graphql: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+    };
+    addRoute: (routeParams: AddRouteParams) => any;
+}, GraphqlParams>;
+export {};