@webiny/pulumi-aws 5.26.0 → 5.27.0

package/apps/website/WebsiteApp.d.ts

@@ -1,12 +1,42 @@
+import * as pulumi from "@pulumi/pulumi";
 import * as aws from "@pulumi/aws";
-import { ApplicationContext } from "@webiny/pulumi-sdk";
+import { ApplicationContext, ApplicationConfig } from "@webiny/pulumi-sdk";
 import { CustomDomainParams } from "../customDomain";
-import { ApplicationConfig } from "@webiny/pulumi-sdk";
+import { AppInput } from "../utils";
 export interface WebsiteAppConfig {
     /** Custom domain configuration */
-    domain?(ctx: ApplicationContext): CustomDomainParams;
+    domain?(ctx: ApplicationContext): CustomDomainParams | undefined | void;
+    /**
+     * Enables or disables VPC for the API.
+     * For VPC to work you also have to enable it in the `storage` application.
+     */
+    vpc?: AppInput<boolean | undefined>;
 }
 export declare const WebsiteApp: new (ctx: ApplicationContext) => import("@webiny/pulumi-sdk").PulumiApp<WebsiteAppConfig> & {
+    prerendering: {
+        subscriber: {
+            policy: pulumi.Output<aws.iam.Policy>;
+            role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+            lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+            eventRule: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventRule>;
+            eventPermission: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Permission>;
+            eventTarget: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventTarget>;
+        };
+        renderer: {
+            policy: pulumi.Output<aws.iam.Policy>;
+            role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+            lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+            eventSourceMapping: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.EventSourceMapping>;
+        };
+        flush: {
+            policy: pulumi.Output<aws.iam.Policy>;
+            role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+            lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+            eventRule: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventRule>;
+            eventPermission: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Permission>;
+            eventTarget: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventTarget>;
+        };
+    };
     app: {
         cloudfront: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudfront.Distribution>;
         bucket: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.s3.Bucket>;

package/apps/website/WebsiteApp.js

@@ -10,19 +10,25 @@ exports.createWebsiteApp = createWebsiteApp;
 
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 
+var pulumi = _interopRequireWildcard(require("@pulumi/pulumi"));
+
 var aws = _interopRequireWildcard(require("@pulumi/aws"));
 
 var _pulumiSdk = require("@webiny/pulumi-sdk");
 
 var _createAppBucket = require("../createAppBucket");
 
-var _WebsiteHookUpload = require("./WebsiteHookUpload");
+var _WebsiteUpload = require("./WebsiteUpload");
 
-var _WebsiteHookRender = require("./WebsiteHookRender");
+var _customDomain = require("../customDomain");
 
-var _WebsiteHookUpdatePbSettings = require("./WebsiteHookUpdatePbSettings");
+var _WebsitePrerendering = require("./WebsitePrerendering");
 
-var _customDomain = require("../customDomain");
+var _common = require("../common");
+
+var _utils = require("../utils");
+
+var _WebsiteHookRender = require("./WebsiteHookRender");
 
 function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
 
@@ -38,6 +44,12 @@ const WebsiteApp = (0, _pulumiSdk.defineApp)({
   config(app, config) {
     var _config$domain;
 
+    // Register storage output as a module available for all other modules
+    const storage = app.addModule(_common.StorageOutput); // Register VPC config module to be available to other modules
+
+    app.addModule(_common.VpcConfig, {
+      enabled: (0, _utils.getAppInput)(app, config.vpc)
+    });
     const appBucket = (0, _createAppBucket.createPublicAppBucket)(app, "app");
     const appCloudfront = app.addResource(aws.cloudfront.Distribution, {
       name: "app",
@@ -141,6 +153,16 @@ const WebsiteApp = (0, _pulumiSdk.defineApp)({
         }
       }
     });
+    const prerendering = (0, _WebsitePrerendering.createPrerenderingService)(app, {
+      env: {
+        DB_TABLE: storage.primaryDynamodbTableName,
+        DB_TABLE_ELASTICSEARCH: pulumi.interpolate`${storage.elasticsearchDynamodbTableName}`,
+        APP_URL: pulumi.interpolate`https://${appCloudfront.output.domainName}`,
+        DELIVERY_BUCKET: deliveryBucket.bucket.output.bucket,
+        DELIVERY_CLOUDFRONT: deliveryCloudfront.output.id,
+        DELIVERY_URL: pulumi.interpolate`https://${deliveryCloudfront.output.domainName}`
+      }
+    });
     const domain = (_config$domain = config.domain) === null || _config$domain === void 0 ? void 0 : _config$domain.call(config, app.ctx);
 
     if (domain) {
@@ -154,14 +176,44 @@ const WebsiteApp = (0, _pulumiSdk.defineApp)({
       appId: appCloudfront.output.id,
       appStorage: appBucket.bucket.output.id,
       appUrl: appCloudfront.output.domainName.apply(value => `https://${value}`),
+      appDomain: appCloudfront.output.domainName,
       // These are the Cloudfront and S3 bucket that will deliver static pages to the actual website visitors.
       // The static HTML snapshots delivered from them still rely on the app's S3 bucket
       // defined above, for serving static assets (JS, CSS, images).
       deliveryId: deliveryCloudfront.output.id,
       deliveryStorage: deliveryBucket.bucket.output.id,
+      deliveryDomain: deliveryCloudfront.output.domainName,
       deliveryUrl: deliveryCloudfront.output.domainName.apply(value => `https://${value}`)
     });
+    app.onAfterDeploy(async ({
+      outputs
+    }) => {
+      await (0, _WebsiteUpload.websiteUpload)({
+        appDir: app.ctx.appDir,
+        bucket: outputs["appStorage"]
+      });
+    }); // Update variant gateway configuration.
+
+    const variant = app.ctx.variant;
+
+    if (variant) {
+      app.onAfterDeploy(async ({
+        outputs
+      }) => {
+        // After deployment is made we update a static JSON file with a variant configuration.
+        // TODO: We should update WCP config instead of a static file here
+        await (0, _pulumiSdk.updateGatewayConfig)({
+          app: "website",
+          cwd: app.ctx.projectDir,
+          env: app.ctx.env,
+          variant: variant,
+          domain: outputs["deliveryDomain"]
+        });
+      });
+    }
+
     return {
+      prerendering,
       app: _objectSpread(_objectSpread({}, appBucket), {}, {
         cloudfront: appCloudfront
       }),
@@ -201,6 +253,6 @@ function createWebsiteApp(config) {
     onBeforeBuild: config === null || config === void 0 ? void 0 : config.onBeforeBuild,
     onAfterBuild: config === null || config === void 0 ? void 0 : config.onAfterBuild,
     onBeforeDeploy: config === null || config === void 0 ? void 0 : config.onBeforeDeploy,
-    onAfterDeploy: (0, _pulumiSdk.mergeAppHooks)(_WebsiteHookUpload.websiteUpload, _WebsiteHookRender.websiteRender, _WebsiteHookUpdatePbSettings.websiteUpdatePbSettings, config === null || config === void 0 ? void 0 : config.onAfterDeploy)
+    onAfterDeploy: (0, _pulumiSdk.mergeAppHooks)(_WebsiteHookRender.websiteRender, config === null || config === void 0 ? void 0 : config.onAfterDeploy)
   });
 }

package/apps/website/WebsiteApp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["WebsiteApp.ts"],"names":["WebsiteApp","name","config","app","appBucket","appCloudfront","addResource","aws","cloudfront","Distribution","enabled","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","deliveryBucket","deliveryCloudfront","originRequestPolicyId","orderedCacheBehaviors","headers","pathPattern","domain","ctx","addOutputs","appId","output","id","appStorage","bucket","appUrl","domainName","apply","value","deliveryId","deliveryStorage","deliveryUrl","delivery","createWebsiteApp","description","cli","watch","deploy","setup","onBeforeBuild","onAfterBuild","onBeforeDeploy","onAfterDeploy","websiteUpload","websiteRender","websiteUpdatePbSettings"],"mappings":";;;;;;;;;;;;AAAA;;AAEA;;AAOA;;AACA;;AACA;;AACA;;AACA;;;;;;;;;;AAQO,MAAMA,UAAU,GAAG,0BAAU;AAChCC,EAAAA,IAAI,EAAE,SAD0B;;AAEhCC,EAAAA,MAAM,CAACC,GAAD,EAAMD,MAAN,EAAgC;AAAA;;AAClC,UAAME,SAAS,GAAG,4CAAsBD,GAAtB,EAA2B,KAA3B,CAAlB;AAEA,UAAME,aAAa,GAAGF,GAAG,CAACG,WAAJ,CAAgBC,GAAG,CAACC,UAAJ,CAAeC,YAA/B,EAA6C;AAC/DR,MAAAA,IAAI,EAAE,KADyD;AAE/DC,MAAAA,MAAM,EAAE;AACJQ,QAAAA,OAAO,EAAE,IADL;AAEJC,QAAAA,iBAAiB,EAAE,IAFf;AAGJC,QAAAA,OAAO,EAAE,CAACR,SAAS,CAACS,MAAX,CAHL;AAIJC,QAAAA,iBAAiB,EAAE,YAJf;AAKJC,QAAAA,oBAAoB,EAAE;AAClBC,UAAAA,QAAQ,EAAE,IADQ;AAElBC,UAAAA,cAAc,EAAEb,SAAS,CAACS,MAAV,CAAiBK,QAFf;AAGlBC,UAAAA,oBAAoB,EAAE,mBAHJ;AAIlBC,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAJE;AAKlBC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CALG;AAMlBC,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AAAEC,cAAAA,OAAO,EAAE;AAAX,aADI;AAEbC,YAAAA,WAAW,EAAE;AAFA,WANC;AAUlB;AACAC,UAAAA,MAAM,EAAE,CAXU;AAYlBC,UAAAA,UAAU,EAAE,CAZM;AAalBC,UAAAA,MAAM,EAAE;AAbU,SALlB;AAoBJC,QAAAA,UAAU,EAAE,gBApBR;AAqBJC,QAAAA,oBAAoB,EAAE,CAClB;AAAEC,UAAAA,SAAS,EAAE,GAAb;AAAkBC,UAAAA,YAAY,EAAE,GAAhC;AAAqCC,UAAAA,gBAAgB,EAAE;AAAvD,SADkB,CArBlB;AAwBJC,QAAAA,YAAY,EAAE;AACVC,UAAAA,cAAc,EAAE;AACZC,YAAAA,eAAe,EAAE;AADL;AADN,SAxBV;AA6BJC,QAAAA,iBAAiB,EAAE;AACfC,UAAAA,4BAA4B,EAAE;AADf;AA7Bf;AAFuD,KAA7C,CAAtB;AAqCA,UAAMC,cAAc,GAAG,4CAAsBpC,GAAtB,EAA2B,UAA3B,CAAvB;AAEA,UAAMqC,kBAAkB,GAAGrC,GAAG,CAACG,WAAJ,CAAgBC,GAAG,CAACC,UAAJ,CAAeC,YAA/B,EAA6C;AACpER,MAAAA,IAAI,EAAE,UAD8D;AAEpEC,MAAAA,MAAM,EAAE;AACJQ,QAAAA,OAAO,EAAE,IADL;AAEJC,QAAAA,iBAAiB,EAAE,IAFf;AAGJC,QAAAA,OAAO,EAAE,CAAC2B,cAAc,CAAC1B,MAAhB,EAAwBT,SAAS,CAACS,MAAlC,CAHL;AAIJC,QAAAA,iBAAiB,EAAE,YAJf;AAKJC,QAAAA,oBAAoB,EAAE;AAClBC,UAAAA,QAAQ,EAAE,IADQ;AAElBC,UAAAA,cAAc,EAAEsB,cAAc,CAAC1B,MAAf,CAAsBK,QAFpB;AAGlBC,UAAAA,oBAAoB,EAAE,mBAHJ;AAIlBC,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAJE;AAKlBC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CALG;AAMlBoB,UAAAA,qBAAqB,EAAE,EANL;AAOlBnB,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AAAEC,cAAAA,OAAO,EAAE;AAAX,aADI;AAEbC,YAAAA,WAAW,EAAE;AAFA,WAPC;AAWlB;AACAC,UAAAA,MAAM,EAAE,CAZU;AAalBC,UAAAA,UAAU,EAAE,EAbM;AAclBC,UAAAA,MAAM,EAAE;AAdU,SALlB;AAqBJc,QAAAA,qBAAqB,EAAE,CACnB;AACI1B,UAAAA,QAAQ,EAAE,IADd;AAEII,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAFpB;AAGIC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAHnB;AAIIC,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AACLC,cAAAA,OAAO,EAAE;AADJ,aADI;AAIbmB,YAAAA,OAAO,EAAE,EAJI;AAKblB,YAAAA,WAAW,EAAE;AALA,WAJrB;AAWImB,UAAAA,WAAW,EAAE,WAXjB;AAYIzB,UAAAA,oBAAoB,EAAE,WAZ1B;AAaIF,UAAAA,cAAc,EAAEb,SAAS,CAACS,MAAV,CAAiBK,QAbrC;AAcI;AACAQ,UAAAA,MAAM,EAAE,CAfZ;AAgBIC,UAAAA,UAAU,EAAE,OAhBhB;AAgByB;AACrBC,UAAAA,MAAM,EAAE;AAjBZ,SADmB,CArBnB;AA0CJE,QAAAA,oBAAoB,EAAE,CAClB;AACIC,UAAAA,SAAS,EAAE,GADf;AAEIC,UAAAA,YAAY,EAAE,GAFlB;AAGIC,UAAAA,gBAAgB,EAAE;AAHtB,SADkB,CA1ClB;AAiDJJ,QAAAA,UAAU,EAAE,gBAjDR;AAkDJK,QAAAA,YAAY,EAAE;AACVC,UAAAA,cAAc,EAAE;AACZC,YAAAA,eAAe,EAAE;AADL;AADN,SAlDV;AAuDJC,QAAAA,iBAAiB,EAAE;AACfC,UAAAA,4BAA4B,EAAE;AADf;AAvDf;AAF4D,KAA7C,CAA3B;AA+DA,UAAMO,MAAM,qBAAG3C,MAAM,CAAC2C,MAAV,mDAAG,oBAAA3C,MAAM,EAAUC,GAAG,CAAC2C,GAAd,CAArB;;AACA,QAAID,MAAJ,EAAY;AACR,2CAAkBL,kBAAlB,EAAsCK,MAAtC;AACH;;AAED1C,IAAAA,GAAG,CAAC4C,UAAJ,CAAe;AACX;AACA;AACA;AACAC,MAAAA,KAAK,EAAE3C,aAAa,CAAC4C,MAAd,CAAqBC,EAJjB;AAKXC,MAAAA,UAAU,EAAE/C,SAAS,CAACgD,MAAV,CAAiBH,MAAjB,CAAwBC,EALzB;AAMXG,MAAAA,MAAM,EAAEhD,aAAa,CAAC4C,MAAd,CAAqBK,UAArB,CAAgCC,KAAhC,CAAsCC,KAAK,IAAK,WAAUA,KAAM,EAAhE,CANG;AAOX;AACA;AACA;AACAC,MAAAA,UAAU,EAAEjB,kBAAkB,CAACS,MAAnB,CAA0BC,EAV3B;AAWXQ,MAAAA,eAAe,EAAEnB,cAAc,CAACa,MAAf,CAAsBH,MAAtB,CAA6BC,EAXnC;AAYXS,MAAAA,WAAW,EAAEnB,kBAAkB,CAACS,MAAnB,CAA0BK,UAA1B,CAAqCC,KAArC,CAA2CC,KAAK,IAAK,WAAUA,KAAM,EAArE;AAZF,KAAf;AAeA,WAAO;AACHrD,MAAAA,GAAG,kCACIC,SADJ;AAECI,QAAAA,UAAU,EAAEH;AAFb,QADA;AAKHuD,MAAAA,QAAQ,kCACDrB,cADC;AAEJ/B,QAAAA,UAAU,EAAEgC;AAFR;AALL,KAAP;AAUH;;AAzI+B,CAAV,CAAnB;;;AA8IA,SAASqB,gBAAT,CAA0B3D,MAA1B,EAAqF;AACxF,SAAO,yCAAyB;AAC5BgD,IAAAA,EAAE,EAAE,SADwB;AAE5BjD,IAAAA,IAAI,EAAE,SAFsB;AAG5B6D,IAAAA,WAAW,EAAE,gCAHe;AAI5BC,IAAAA,GAAG,EAAE;AACD;AACAC,MAAAA,KAAK,EAAE;AACHC,QAAAA,MAAM,EAAE;AADL;AAFN,KAJuB;;AAU5B,UAAM9D,GAAN,CAAU2C,GAAV,EAAe;AAAA;;AACX;AACA,YAAM3C,GAAG,GAAG,IAAIH,UAAJ,CAAe8C,GAAf,CAAZ,CAFW,CAGX;;AACA,YAAM3C,GAAG,CAAC+D,KAAJ,CAAUhE,MAAM,IAAI,EAApB,CAAN,CAJW,CAKX;;AACA,aAAMA,MAAN,aAAMA,MAAN,yCAAMA,MAAM,CAAEA,MAAd,mDAAM,oBAAAA,MAAM,EAAWC,GAAX,EAAgB2C,GAAhB,CAAZ;AACA,aAAO3C,GAAP;AACH,KAlB2B;;AAmB5BgE,IAAAA,aAAa,EAAEjE,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAEiE,aAnBK;AAoB5BC,IAAAA,YAAY,EAAElE,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAEkE,YApBM;AAqB5BC,IAAAA,cAAc,EAAEnE,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAEmE,cArBI;AAsB5BC,IAAAA,aAAa,EAAE,8BACXC,gCADW,EAEXC,gCAFW,EAGXC,oDAHW,EAIXvE,MAJW,aAIXA,MAJW,uBAIXA,MAAM,CAAEoE,aAJG;AAtBa,GAAzB,CAAP;AA6BH","sourcesContent":["import * as aws from \"@pulumi/aws\";\n\nimport {\n    defineApp,\n    ApplicationContext,\n    createGenericApplication,\n    mergeAppHooks\n} from \"@webiny/pulumi-sdk\";\n\nimport { createPublicAppBucket } from \"../createAppBucket\";\nimport { websiteUpload } from \"./WebsiteHookUpload\";\nimport { websiteRender } from \"./WebsiteHookRender\";\nimport { websiteUpdatePbSettings } from \"./WebsiteHookUpdatePbSettings\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { ApplicationConfig } from \"@webiny/pulumi-sdk\";\n\nexport interface WebsiteAppConfig {\n    /** Custom domain configuration */\n    domain?(ctx: ApplicationContext): CustomDomainParams;\n}\n\nexport const WebsiteApp = defineApp({\n    name: \"Website\",\n    config(app, config: WebsiteAppConfig) {\n        const appBucket = createPublicAppBucket(app, \"app\");\n\n        const appCloudfront = app.addResource(aws.cloudfront.Distribution, {\n            name: \"app\",\n            config: {\n                enabled: true,\n                waitForDeployment: true,\n                origins: [appBucket.origin],\n                defaultRootObject: \"index.html\",\n                defaultCacheBehavior: {\n                    compress: true,\n                    targetOriginId: appBucket.origin.originId,\n                    viewerProtocolPolicy: \"redirect-to-https\",\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    forwardedValues: {\n                        cookies: { forward: \"none\" },\n                        queryString: false\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 0,\n                    maxTtl: 0\n                },\n                priceClass: \"PriceClass_100\",\n                customErrorResponses: [\n                    { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                ],\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            }\n        });\n\n        const deliveryBucket = createPublicAppBucket(app, \"delivery\");\n\n        const deliveryCloudfront = app.addResource(aws.cloudfront.Distribution, {\n            name: \"delivery\",\n            config: {\n                enabled: true,\n                waitForDeployment: true,\n                origins: [deliveryBucket.origin, appBucket.origin],\n                defaultRootObject: \"index.html\",\n                defaultCacheBehavior: {\n                    compress: true,\n                    targetOriginId: deliveryBucket.origin.originId,\n                    viewerProtocolPolicy: \"redirect-to-https\",\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    originRequestPolicyId: \"\",\n                    forwardedValues: {\n                        cookies: { forward: \"none\" },\n                        queryString: true\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 30,\n                    maxTtl: 30\n                },\n                orderedCacheBehaviors: [\n                    {\n                        compress: true,\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: [],\n                            queryString: false\n                        },\n                        pathPattern: \"/static/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: appBucket.origin.originId,\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 2592000, // 30 days\n                        maxTtl: 2592000\n                    }\n                ],\n                customErrorResponses: [\n                    {\n                        errorCode: 404,\n                        responseCode: 404,\n                        responsePagePath: \"/_NOT_FOUND_PAGE_/index.html\"\n                    }\n                ],\n                priceClass: \"PriceClass_100\",\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            }\n        });\n\n        const domain = config.domain?.(app.ctx);\n        if (domain) {\n            applyCustomDomain(deliveryCloudfront, domain);\n        }\n\n        app.addOutputs({\n            // Cloudfront and S3 bucket used to host the single-page application (SPA). The URL of the distribution is mainly\n            // utilized by the Page Builder app's prerendering engine. Using this URL, it accesses the SPA and creates HTML snapshots.\n            // The files that are generated in that process are stored in the `deliveryStorage` S3 bucket further below.\n            appId: appCloudfront.output.id,\n            appStorage: appBucket.bucket.output.id,\n            appUrl: appCloudfront.output.domainName.apply(value => `https://${value}`),\n            // These are the Cloudfront and S3 bucket that will deliver static pages to the actual website visitors.\n            // The static HTML snapshots delivered from them still rely on the app's S3 bucket\n            // defined above, for serving static assets (JS, CSS, images).\n            deliveryId: deliveryCloudfront.output.id,\n            deliveryStorage: deliveryBucket.bucket.output.id,\n            deliveryUrl: deliveryCloudfront.output.domainName.apply(value => `https://${value}`)\n        });\n\n        return {\n            app: {\n                ...appBucket,\n                cloudfront: appCloudfront\n            },\n            delivery: {\n                ...deliveryBucket,\n                cloudfront: deliveryCloudfront\n            }\n        };\n    }\n});\n\nexport type WebsiteApp = InstanceType<typeof WebsiteApp>;\n\nexport function createWebsiteApp(config?: WebsiteAppConfig & ApplicationConfig<WebsiteApp>) {\n    return createGenericApplication({\n        id: \"website\",\n        name: \"website\",\n        description: \"Your project's public website.\",\n        cli: {\n            // Default args for the \"yarn webiny watch ...\" command (we don't need deploy option while developing).\n            watch: {\n                deploy: false\n            }\n        },\n        async app(ctx) {\n            // Create the app instance.\n            const app = new WebsiteApp(ctx);\n            // Run the default application setup.\n            await app.setup(config || {});\n            // Run the custom user config.\n            await config?.config?.(app, ctx);\n            return app;\n        },\n        onBeforeBuild: config?.onBeforeBuild,\n        onAfterBuild: config?.onAfterBuild,\n        onBeforeDeploy: config?.onBeforeDeploy,\n        onAfterDeploy: mergeAppHooks(\n            websiteUpload,\n            websiteRender,\n            websiteUpdatePbSettings,\n            config?.onAfterDeploy\n        )\n    });\n}\n"]}
+{"version":3,"sources":["WebsiteApp.ts"],"names":["WebsiteApp","name","config","app","storage","addModule","StorageOutput","VpcConfig","enabled","vpc","appBucket","appCloudfront","addResource","aws","cloudfront","Distribution","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","deliveryBucket","deliveryCloudfront","originRequestPolicyId","orderedCacheBehaviors","headers","pathPattern","prerendering","env","DB_TABLE","primaryDynamodbTableName","DB_TABLE_ELASTICSEARCH","pulumi","interpolate","elasticsearchDynamodbTableName","APP_URL","output","domainName","DELIVERY_BUCKET","bucket","DELIVERY_CLOUDFRONT","id","DELIVERY_URL","domain","ctx","addOutputs","appId","appStorage","appUrl","apply","value","appDomain","deliveryId","deliveryStorage","deliveryDomain","deliveryUrl","onAfterDeploy","outputs","appDir","variant","cwd","projectDir","delivery","createWebsiteApp","description","cli","watch","deploy","setup","onBeforeBuild","onAfterBuild","onBeforeDeploy","websiteRender"],"mappings":";;;;;;;;;;;;AAAA;;AACA;;AAEA;;AASA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;;;;;;;;;AAaO,MAAMA,UAAU,GAAG,0BAAU;AAChCC,EAAAA,IAAI,EAAE,SAD0B;;AAEhCC,EAAAA,MAAM,CAACC,GAAD,EAAMD,MAAN,EAAgC;AAAA;;AAClC;AACA,UAAME,OAAO,GAAGD,GAAG,CAACE,SAAJ,CAAcC,qBAAd,CAAhB,CAFkC,CAIlC;;AACAH,IAAAA,GAAG,CAACE,SAAJ,CAAcE,iBAAd,EAAyB;AACrBC,MAAAA,OAAO,EAAE,wBAAYL,GAAZ,EAAiBD,MAAM,CAACO,GAAxB;AADY,KAAzB;AAIA,UAAMC,SAAS,GAAG,4CAAsBP,GAAtB,EAA2B,KAA3B,CAAlB;AAEA,UAAMQ,aAAa,GAAGR,GAAG,CAACS,WAAJ,CAAgBC,GAAG,CAACC,UAAJ,CAAeC,YAA/B,EAA6C;AAC/Dd,MAAAA,IAAI,EAAE,KADyD;AAE/DC,MAAAA,MAAM,EAAE;AACJM,QAAAA,OAAO,EAAE,IADL;AAEJQ,QAAAA,iBAAiB,EAAE,IAFf;AAGJC,QAAAA,OAAO,EAAE,CAACP,SAAS,CAACQ,MAAX,CAHL;AAIJC,QAAAA,iBAAiB,EAAE,YAJf;AAKJC,QAAAA,oBAAoB,EAAE;AAClBC,UAAAA,QAAQ,EAAE,IADQ;AAElBC,UAAAA,cAAc,EAAEZ,SAAS,CAACQ,MAAV,CAAiBK,QAFf;AAGlBC,UAAAA,oBAAoB,EAAE,mBAHJ;AAIlBC,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAJE;AAKlBC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CALG;AAMlBC,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AAAEC,cAAAA,OAAO,EAAE;AAAX,aADI;AAEbC,YAAAA,WAAW,EAAE;AAFA,WANC;AAUlB;AACAC,UAAAA,MAAM,EAAE,CAXU;AAYlBC,UAAAA,UAAU,EAAE,CAZM;AAalBC,UAAAA,MAAM,EAAE;AAbU,SALlB;AAoBJC,QAAAA,UAAU,EAAE,gBApBR;AAqBJC,QAAAA,oBAAoB,EAAE,CAClB;AAAEC,UAAAA,SAAS,EAAE,GAAb;AAAkBC,UAAAA,YAAY,EAAE,GAAhC;AAAqCC,UAAAA,gBAAgB,EAAE;AAAvD,SADkB,CArBlB;AAwBJC,QAAAA,YAAY,EAAE;AACVC,UAAAA,cAAc,EAAE;AACZC,YAAAA,eAAe,EAAE;AADL;AADN,SAxBV;AA6BJC,QAAAA,iBAAiB,EAAE;AACfC,UAAAA,4BAA4B,EAAE;AADf;AA7Bf;AAFuD,KAA7C,CAAtB;AAqCA,UAAMC,cAAc,GAAG,4CAAsBzC,GAAtB,EAA2B,UAA3B,CAAvB;AAEA,UAAM0C,kBAAkB,GAAG1C,GAAG,CAACS,WAAJ,CAAgBC,GAAG,CAACC,UAAJ,CAAeC,YAA/B,EAA6C;AACpEd,MAAAA,IAAI,EAAE,UAD8D;AAEpEC,MAAAA,MAAM,EAAE;AACJM,QAAAA,OAAO,EAAE,IADL;AAEJQ,QAAAA,iBAAiB,EAAE,IAFf;AAGJC,QAAAA,OAAO,EAAE,CAAC2B,cAAc,CAAC1B,MAAhB,EAAwBR,SAAS,CAACQ,MAAlC,CAHL;AAIJC,QAAAA,iBAAiB,EAAE,YAJf;AAKJC,QAAAA,oBAAoB,EAAE;AAClBC,UAAAA,QAAQ,EAAE,IADQ;AAElBC,UAAAA,cAAc,EAAEsB,cAAc,CAAC1B,MAAf,CAAsBK,QAFpB;AAGlBC,UAAAA,oBAAoB,EAAE,mBAHJ;AAIlBC,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAJE;AAKlBC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CALG;AAMlBoB,UAAAA,qBAAqB,EAAE,EANL;AAOlBnB,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AAAEC,cAAAA,OAAO,EAAE;AAAX,aADI;AAEbC,YAAAA,WAAW,EAAE;AAFA,WAPC;AAWlB;AACAC,UAAAA,MAAM,EAAE,CAZU;AAalBC,UAAAA,UAAU,EAAE,EAbM;AAclBC,UAAAA,MAAM,EAAE;AAdU,SALlB;AAqBJc,QAAAA,qBAAqB,EAAE,CACnB;AACI1B,UAAAA,QAAQ,EAAE,IADd;AAEII,UAAAA,cAAc,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAFpB;AAGIC,UAAAA,aAAa,EAAE,CAAC,KAAD,EAAQ,MAAR,EAAgB,SAAhB,CAHnB;AAIIC,UAAAA,eAAe,EAAE;AACbC,YAAAA,OAAO,EAAE;AACLC,cAAAA,OAAO,EAAE;AADJ,aADI;AAIbmB,YAAAA,OAAO,EAAE,EAJI;AAKblB,YAAAA,WAAW,EAAE;AALA,WAJrB;AAWImB,UAAAA,WAAW,EAAE,WAXjB;AAYIzB,UAAAA,oBAAoB,EAAE,WAZ1B;AAaIF,UAAAA,cAAc,EAAEZ,SAAS,CAACQ,MAAV,CAAiBK,QAbrC;AAcI;AACAQ,UAAAA,MAAM,EAAE,CAfZ;AAgBIC,UAAAA,UAAU,EAAE,OAhBhB;AAgByB;AACrBC,UAAAA,MAAM,EAAE;AAjBZ,SADmB,CArBnB;AA0CJE,QAAAA,oBAAoB,EAAE,CAClB;AACIC,UAAAA,SAAS,EAAE,GADf;AAEIC,UAAAA,YAAY,EAAE,GAFlB;AAGIC,UAAAA,gBAAgB,EAAE;AAHtB,SADkB,CA1ClB;AAiDJJ,QAAAA,UAAU,EAAE,gBAjDR;AAkDJK,QAAAA,YAAY,EAAE;AACVC,UAAAA,cAAc,EAAE;AACZC,YAAAA,eAAe,EAAE;AADL;AADN,SAlDV;AAuDJC,QAAAA,iBAAiB,EAAE;AACfC,UAAAA,4BAA4B,EAAE;AADf;AAvDf;AAF4D,KAA7C,CAA3B;AA+DA,UAAMO,YAAY,GAAG,oDAA0B/C,GAA1B,EAA+B;AAChDgD,MAAAA,GAAG,EAAE;AACDC,QAAAA,QAAQ,EAAEhD,OAAO,CAACiD,wBADjB;AAEDC,QAAAA,sBAAsB,EAAEC,MAAM,CAACC,WAAY,GAAEpD,OAAO,CAACqD,8BAA+B,EAFnF;AAGDC,QAAAA,OAAO,EAAEH,MAAM,CAACC,WAAY,WAAU7C,aAAa,CAACgD,MAAd,CAAqBC,UAAW,EAHrE;AAIDC,QAAAA,eAAe,EAAEjB,cAAc,CAACkB,MAAf,CAAsBH,MAAtB,CAA6BG,MAJ7C;AAKDC,QAAAA,mBAAmB,EAAElB,kBAAkB,CAACc,MAAnB,CAA0BK,EAL9C;AAMDC,QAAAA,YAAY,EAAEV,MAAM,CAACC,WAAY,WAAUX,kBAAkB,CAACc,MAAnB,CAA0BC,UAAW;AAN/E;AAD2C,KAA/B,CAArB;AAWA,UAAMM,MAAM,qBAAGhE,MAAM,CAACgE,MAAV,mDAAG,oBAAAhE,MAAM,EAAUC,GAAG,CAACgE,GAAd,CAArB;;AACA,QAAID,MAAJ,EAAY;AACR,2CAAkBrB,kBAAlB,EAAsCqB,MAAtC;AACH;;AAED/D,IAAAA,GAAG,CAACiE,UAAJ,CAAe;AACX;AACA;AACA;AACAC,MAAAA,KAAK,EAAE1D,aAAa,CAACgD,MAAd,CAAqBK,EAJjB;AAKXM,MAAAA,UAAU,EAAE5D,SAAS,CAACoD,MAAV,CAAiBH,MAAjB,CAAwBK,EALzB;AAMXO,MAAAA,MAAM,EAAE5D,aAAa,CAACgD,MAAd,CAAqBC,UAArB,CAAgCY,KAAhC,CAAsCC,KAAK,IAAK,WAAUA,KAAM,EAAhE,CANG;AAOXC,MAAAA,SAAS,EAAE/D,aAAa,CAACgD,MAAd,CAAqBC,UAPrB;AAQX;AACA;AACA;AACAe,MAAAA,UAAU,EAAE9B,kBAAkB,CAACc,MAAnB,CAA0BK,EAX3B;AAYXY,MAAAA,eAAe,EAAEhC,cAAc,CAACkB,MAAf,CAAsBH,MAAtB,CAA6BK,EAZnC;AAaXa,MAAAA,cAAc,EAAEhC,kBAAkB,CAACc,MAAnB,CAA0BC,UAb/B;AAcXkB,MAAAA,WAAW,EAAEjC,kBAAkB,CAACc,MAAnB,CAA0BC,UAA1B,CAAqCY,KAArC,CAA2CC,KAAK,IAAK,WAAUA,KAAM,EAArE;AAdF,KAAf;AAiBAtE,IAAAA,GAAG,CAAC4E,aAAJ,CAAkB,OAAO;AAAEC,MAAAA;AAAF,KAAP,KAAuB;AACrC,YAAM,kCAAc;AAChBC,QAAAA,MAAM,EAAE9E,GAAG,CAACgE,GAAJ,CAAQc,MADA;AAEhBnB,QAAAA,MAAM,EAAEkB,OAAO,CAAC,YAAD;AAFC,OAAd,CAAN;AAIH,KALD,EAlJkC,CAyJlC;;AACA,UAAME,OAAO,GAAG/E,GAAG,CAACgE,GAAJ,CAAQe,OAAxB;;AACA,QAAIA,OAAJ,EAAa;AACT/E,MAAAA,GAAG,CAAC4E,aAAJ,CAAkB,OAAO;AAAEC,QAAAA;AAAF,OAAP,KAAuB;AACrC;AACA;AACA,cAAM,oCAAoB;AACtB7E,UAAAA,GAAG,EAAE,SADiB;AAEtBgF,UAAAA,GAAG,EAAEhF,GAAG,CAACgE,GAAJ,CAAQiB,UAFS;AAGtBjC,UAAAA,GAAG,EAAEhD,GAAG,CAACgE,GAAJ,CAAQhB,GAHS;AAItB+B,UAAAA,OAAO,EAAEA,OAJa;AAKtBhB,UAAAA,MAAM,EAAEc,OAAO,CAAC,gBAAD;AALO,SAApB,CAAN;AAOH,OAVD;AAWH;;AAED,WAAO;AACH9B,MAAAA,YADG;AAEH/C,MAAAA,GAAG,kCACIO,SADJ;AAECI,QAAAA,UAAU,EAAEH;AAFb,QAFA;AAMH0E,MAAAA,QAAQ,kCACDzC,cADC;AAEJ9B,QAAAA,UAAU,EAAE+B;AAFR;AANL,KAAP;AAWH;;AAtL+B,CAAV,CAAnB;;;AA2LA,SAASyC,gBAAT,CAA0BpF,MAA1B,EAAqF;AACxF,SAAO,yCAAyB;AAC5B8D,IAAAA,EAAE,EAAE,SADwB;AAE5B/D,IAAAA,IAAI,EAAE,SAFsB;AAG5BsF,IAAAA,WAAW,EAAE,gCAHe;AAI5BC,IAAAA,GAAG,EAAE;AACD;AACAC,MAAAA,KAAK,EAAE;AACHC,QAAAA,MAAM,EAAE;AADL;AAFN,KAJuB;;AAU5B,UAAMvF,GAAN,CAAUgE,GAAV,EAAe;AAAA;;AACX;AACA,YAAMhE,GAAG,GAAG,IAAIH,UAAJ,CAAemE,GAAf,CAAZ,CAFW,CAGX;;AACA,YAAMhE,GAAG,CAACwF,KAAJ,CAAUzF,MAAM,IAAI,EAApB,CAAN,CAJW,CAKX;;AACA,aAAMA,MAAN,aAAMA,MAAN,yCAAMA,MAAM,CAAEA,MAAd,mDAAM,oBAAAA,MAAM,EAAWC,GAAX,EAAgBgE,GAAhB,CAAZ;AACA,aAAOhE,GAAP;AACH,KAlB2B;;AAmB5ByF,IAAAA,aAAa,EAAE1F,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAE0F,aAnBK;AAoB5BC,IAAAA,YAAY,EAAE3F,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAE2F,YApBM;AAqB5BC,IAAAA,cAAc,EAAE5F,MAAF,aAAEA,MAAF,uBAAEA,MAAM,CAAE4F,cArBI;AAsB5Bf,IAAAA,aAAa,EAAE,8BAAcgB,gCAAd,EAA6B7F,MAA7B,aAA6BA,MAA7B,uBAA6BA,MAAM,CAAE6E,aAArC;AAtBa,GAAzB,CAAP;AAwBH","sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\n\nimport {\n    defineApp,\n    ApplicationContext,\n    createGenericApplication,\n    mergeAppHooks,\n    updateGatewayConfig,\n    ApplicationConfig\n} from \"@webiny/pulumi-sdk\";\n\nimport { createPublicAppBucket } from \"../createAppBucket\";\nimport { websiteUpload } from \"./WebsiteUpload\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { createPrerenderingService } from \"./WebsitePrerendering\";\nimport { StorageOutput, VpcConfig } from \"../common\";\nimport { AppInput, getAppInput } from \"../utils\";\nimport { websiteRender } from \"./WebsiteHookRender\";\n\nexport interface WebsiteAppConfig {\n    /** Custom domain configuration */\n    domain?(ctx: ApplicationContext): CustomDomainParams | undefined | void;\n\n    /**\n     * Enables or disables VPC for the API.\n     * For VPC to work you also have to enable it in the `storage` application.\n     */\n    vpc?: AppInput<boolean | undefined>;\n}\n\nexport const WebsiteApp = defineApp({\n    name: \"Website\",\n    config(app, config: WebsiteAppConfig) {\n        // Register storage output as a module available for all other modules\n        const storage = app.addModule(StorageOutput);\n\n        // Register VPC config module to be available to other modules\n        app.addModule(VpcConfig, {\n            enabled: getAppInput(app, config.vpc)\n        });\n\n        const appBucket = createPublicAppBucket(app, \"app\");\n\n        const appCloudfront = app.addResource(aws.cloudfront.Distribution, {\n            name: \"app\",\n            config: {\n                enabled: true,\n                waitForDeployment: true,\n                origins: [appBucket.origin],\n                defaultRootObject: \"index.html\",\n                defaultCacheBehavior: {\n                    compress: true,\n                    targetOriginId: appBucket.origin.originId,\n                    viewerProtocolPolicy: \"redirect-to-https\",\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    forwardedValues: {\n                        cookies: { forward: \"none\" },\n                        queryString: false\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 0,\n                    maxTtl: 0\n                },\n                priceClass: \"PriceClass_100\",\n                customErrorResponses: [\n                    { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                ],\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            }\n        });\n\n        const deliveryBucket = createPublicAppBucket(app, \"delivery\");\n\n        const deliveryCloudfront = app.addResource(aws.cloudfront.Distribution, {\n            name: \"delivery\",\n            config: {\n                enabled: true,\n                waitForDeployment: true,\n                origins: [deliveryBucket.origin, appBucket.origin],\n                defaultRootObject: \"index.html\",\n                defaultCacheBehavior: {\n                    compress: true,\n                    targetOriginId: deliveryBucket.origin.originId,\n                    viewerProtocolPolicy: \"redirect-to-https\",\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    originRequestPolicyId: \"\",\n                    forwardedValues: {\n                        cookies: { forward: \"none\" },\n                        queryString: true\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 30,\n                    maxTtl: 30\n                },\n                orderedCacheBehaviors: [\n                    {\n                        compress: true,\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: [],\n                            queryString: false\n                        },\n                        pathPattern: \"/static/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: appBucket.origin.originId,\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 2592000, // 30 days\n                        maxTtl: 2592000\n                    }\n                ],\n                customErrorResponses: [\n                    {\n                        errorCode: 404,\n                        responseCode: 404,\n                        responsePagePath: \"/_NOT_FOUND_PAGE_/index.html\"\n                    }\n                ],\n                priceClass: \"PriceClass_100\",\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            }\n        });\n\n        const prerendering = createPrerenderingService(app, {\n            env: {\n                DB_TABLE: storage.primaryDynamodbTableName,\n                DB_TABLE_ELASTICSEARCH: pulumi.interpolate`${storage.elasticsearchDynamodbTableName}`,\n                APP_URL: pulumi.interpolate`https://${appCloudfront.output.domainName}`,\n                DELIVERY_BUCKET: deliveryBucket.bucket.output.bucket,\n                DELIVERY_CLOUDFRONT: deliveryCloudfront.output.id,\n                DELIVERY_URL: pulumi.interpolate`https://${deliveryCloudfront.output.domainName}`\n            }\n        });\n\n        const domain = config.domain?.(app.ctx);\n        if (domain) {\n            applyCustomDomain(deliveryCloudfront, domain);\n        }\n\n        app.addOutputs({\n            // Cloudfront and S3 bucket used to host the single-page application (SPA). The URL of the distribution is mainly\n            // utilized by the Page Builder app's prerendering engine. Using this URL, it accesses the SPA and creates HTML snapshots.\n            // The files that are generated in that process are stored in the `deliveryStorage` S3 bucket further below.\n            appId: appCloudfront.output.id,\n            appStorage: appBucket.bucket.output.id,\n            appUrl: appCloudfront.output.domainName.apply(value => `https://${value}`),\n            appDomain: appCloudfront.output.domainName,\n            // These are the Cloudfront and S3 bucket that will deliver static pages to the actual website visitors.\n            // The static HTML snapshots delivered from them still rely on the app's S3 bucket\n            // defined above, for serving static assets (JS, CSS, images).\n            deliveryId: deliveryCloudfront.output.id,\n            deliveryStorage: deliveryBucket.bucket.output.id,\n            deliveryDomain: deliveryCloudfront.output.domainName,\n            deliveryUrl: deliveryCloudfront.output.domainName.apply(value => `https://${value}`)\n        });\n\n        app.onAfterDeploy(async ({ outputs }) => {\n            await websiteUpload({\n                appDir: app.ctx.appDir,\n                bucket: outputs[\"appStorage\"]\n            });\n        });\n\n        // Update variant gateway configuration.\n        const variant = app.ctx.variant;\n        if (variant) {\n            app.onAfterDeploy(async ({ outputs }) => {\n                // After deployment is made we update a static JSON file with a variant configuration.\n                // TODO: We should update WCP config instead of a static file here\n                await updateGatewayConfig({\n                    app: \"website\",\n                    cwd: app.ctx.projectDir,\n                    env: app.ctx.env,\n                    variant: variant,\n                    domain: outputs[\"deliveryDomain\"]\n                });\n            });\n        }\n\n        return {\n            prerendering,\n            app: {\n                ...appBucket,\n                cloudfront: appCloudfront\n            },\n            delivery: {\n                ...deliveryBucket,\n                cloudfront: deliveryCloudfront\n            }\n        };\n    }\n});\n\nexport type WebsiteApp = InstanceType<typeof WebsiteApp>;\n\nexport function createWebsiteApp(config?: WebsiteAppConfig & ApplicationConfig<WebsiteApp>) {\n    return createGenericApplication({\n        id: \"website\",\n        name: \"website\",\n        description: \"Your project's public website.\",\n        cli: {\n            // Default args for the \"yarn webiny watch ...\" command (we don't need deploy option while developing).\n            watch: {\n                deploy: false\n            }\n        },\n        async app(ctx) {\n            // Create the app instance.\n            const app = new WebsiteApp(ctx);\n            // Run the default application setup.\n            await app.setup(config || {});\n            // Run the custom user config.\n            await config?.config?.(app, ctx);\n            return app;\n        },\n        onBeforeBuild: config?.onBeforeBuild,\n        onAfterBuild: config?.onAfterBuild,\n        onBeforeDeploy: config?.onBeforeDeploy,\n        onAfterDeploy: mergeAppHooks(websiteRender, config?.onAfterDeploy)\n    });\n}\n"]}

package/apps/website/WebsiteHookRender.js

@@ -7,7 +7,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.websiteRender = void 0;
 
-var _lambda = _interopRequireDefault(require("aws-sdk/clients/lambda"));
+var _eventbridge = _interopRequireDefault(require("aws-sdk/clients/eventbridge"));
 
 var _pulumiSdk = require("@webiny/pulumi-sdk");
 
@@ -17,44 +17,42 @@ const websiteRender = (0, _pulumiSdk.defineAppHook)(async (params, context) => {
   if (params.inputs.build === false) {
     context.info(`"--no-build" argument detected - skipping Website re-rendering.`);
     return;
-  } // 2. Get exports from `site` stack, for `args.env` environment.
-
+  }
 
-  const apiOutput = (0, _utils.getStackOutput)({
-    folder: "api",
+  const storageOutput = (0, _utils.getStackOutput)({
+    folder: "apps/storage",
     env: params.env
   });
   context.info("Issuing a complete website render job...");
 
   try {
-    const lambdaClient = new _lambda.default({
-      region: apiOutput["region"]
+    var _result$Entries;
+
+    const client = new _eventbridge.default({
+      region: storageOutput["region"]
     });
-    const response = await lambdaClient.invoke({
-      FunctionName: apiOutput["psQueueAdd"],
-      Payload: JSON.stringify({
-        render: {
+    const result = await client.putEvents({
+      Entries: [{
+        Source: "webiny-cli",
+        EventBusName: storageOutput["eventBusArn"],
+        DetailType: "RenderPages",
+        Detail: JSON.stringify({
           path: "*",
+          variant: params.variant,
           configuration: {
             db: {
               namespace: "T#root"
             }
           }
-        }
-      })
+        })
+      }]
     }).promise();
-    const {
-      error
-    } = JSON.parse(response.Payload);
+    const entry = (_result$Entries = result.Entries) === null || _result$Entries === void 0 ? void 0 : _result$Entries[0];
 
-    if (error) {
-      throw error;
+    if (entry !== null && entry !== void 0 && entry.ErrorMessage) {
+      throw new Error(entry.ErrorMessage);
     }
 
-    await lambdaClient.invoke({
-      FunctionName: apiOutput["psQueueProcess"],
-      InvocationType: "Event"
-    }).promise();
     context.success("Website re-render job successfully issued.");
     context.info("Please note that it can take a couple of minutes for the website to be fully updated.");
   } catch (e) {

package/apps/website/WebsiteHookRender.js.map

@@ -1 +1 @@
-{"version":3,"sources":["WebsiteHookRender.ts"],"names":["websiteRender","params","context","inputs","build","info","apiOutput","folder","env","lambdaClient","LambdaClient","region","response","invoke","FunctionName","Payload","JSON","stringify","render","path","configuration","db","namespace","promise","error","parse","InvocationType","success","e","console","log"],"mappings":";;;;;;;;;AAAA;;AAEA;;AACA;;AAEO,MAAMA,aAAa,GAAG,8BAAc,OAAOC,MAAP,EAAeC,OAAf,KAA2B;AAClE,MAAID,MAAM,CAACE,MAAP,CAAcC,KAAd,KAAwB,KAA5B,EAAmC;AAC/BF,IAAAA,OAAO,CAACG,IAAR,CAAc,iEAAd;AACA;AACH,GAJiE,CAMlE;;;AACA,QAAMC,SAAS,GAAG,2BAAe;AAAEC,IAAAA,MAAM,EAAE,KAAV;AAAiBC,IAAAA,GAAG,EAAEP,MAAM,CAACO;AAA7B,GAAf,CAAlB;AAEAN,EAAAA,OAAO,CAACG,IAAR,CAAa,0CAAb;;AAEA,MAAI;AACA,UAAMI,YAAY,GAAG,IAAIC,eAAJ,CAAiB;AAAEC,MAAAA,MAAM,EAAEL,SAAS,CAAC,QAAD;AAAnB,KAAjB,CAArB;AAEA,UAAMM,QAAQ,GAAG,MAAMH,YAAY,CAC9BI,MADkB,CACX;AACJC,MAAAA,YAAY,EAAER,SAAS,CAAC,YAAD,CADnB;AAEJS,MAAAA,OAAO,EAAEC,IAAI,CAACC,SAAL,CAAe;AACpBC,QAAAA,MAAM,EAAE;AACJC,UAAAA,IAAI,EAAE,GADF;AAEJC,UAAAA,aAAa,EAAE;AACXC,YAAAA,EAAE,EAAE;AACAC,cAAAA,SAAS,EAAE;AADX;AADO;AAFX;AADY,OAAf;AAFL,KADW,EAclBC,OAdkB,EAAvB;AAgBA,UAAM;AAAEC,MAAAA;AAAF,QAAYR,IAAI,CAACS,KAAL,CAAWb,QAAQ,CAACG,OAApB,CAAlB;;AACA,QAAIS,KAAJ,EAAW;AACP,YAAMA,KAAN;AACH;;AAED,UAAMf,YAAY,CACbI,MADC,CACM;AACJC,MAAAA,YAAY,EAAER,SAAS,CAAC,gBAAD,CADnB;AAEJoB,MAAAA,cAAc,EAAE;AAFZ,KADN,EAKDH,OALC,EAAN;AAOArB,IAAAA,OAAO,CAACyB,OAAR,CAAgB,4CAAhB;AACAzB,IAAAA,OAAO,CAACG,IAAR,CACI,uFADJ;AAGH,GAnCD,CAmCE,OAAOuB,CAAP,EAAU;AACR1B,IAAAA,OAAO,CAACsB,KAAR,CACK,+EADL;AAGAK,IAAAA,OAAO,CAACC,GAAR,CAAYF,CAAZ;AACH;AACJ,CApD4B,CAAtB","sourcesContent":["import LambdaClient from \"aws-sdk/clients/lambda\";\n\nimport { defineAppHook } from \"@webiny/pulumi-sdk\";\nimport { getStackOutput } from \"@webiny/cli-plugin-deploy-pulumi/utils\";\n\nexport const websiteRender = defineAppHook(async (params, context) => {\n    if (params.inputs.build === false) {\n        context.info(`\"--no-build\" argument detected - skipping Website re-rendering.`);\n        return;\n    }\n\n    // 2. Get exports from `site` stack, for `args.env` environment.\n    const apiOutput = getStackOutput({ folder: \"api\", env: params.env });\n\n    context.info(\"Issuing a complete website render job...\");\n\n    try {\n        const lambdaClient = new LambdaClient({ region: apiOutput[\"region\"] });\n\n        const response = await lambdaClient\n            .invoke({\n                FunctionName: apiOutput[\"psQueueAdd\"],\n                Payload: JSON.stringify({\n                    render: {\n                        path: \"*\",\n                        configuration: {\n                            db: {\n                                namespace: \"T#root\"\n                            }\n                        }\n                    }\n                })\n            })\n            .promise();\n\n        const { error } = JSON.parse(response.Payload as string);\n        if (error) {\n            throw error;\n        }\n\n        await lambdaClient\n            .invoke({\n                FunctionName: apiOutput[\"psQueueProcess\"],\n                InvocationType: \"Event\"\n            })\n            .promise();\n\n        context.success(\"Website re-render job successfully issued.\");\n        context.info(\n            \"Please note that it can take a couple of minutes for the website to be fully updated.\"\n        );\n    } catch (e) {\n        context.error(\n            `An error occurred while trying to update default Page Builder app's settings!`\n        );\n        console.log(e);\n    }\n});\n"]}
+{"version":3,"sources":["WebsiteHookRender.ts"],"names":["websiteRender","params","context","inputs","build","info","storageOutput","folder","env","client","EventBridgeClient","region","result","putEvents","Entries","Source","EventBusName","DetailType","Detail","JSON","stringify","path","variant","configuration","db","namespace","promise","entry","ErrorMessage","Error","success","e","error","console","log"],"mappings":";;;;;;;;;AAAA;;AAEA;;AACA;;AAEO,MAAMA,aAAa,GAAG,8BAAc,OAAOC,MAAP,EAAeC,OAAf,KAA2B;AAClE,MAAID,MAAM,CAACE,MAAP,CAAcC,KAAd,KAAwB,KAA5B,EAAmC;AAC/BF,IAAAA,OAAO,CAACG,IAAR,CAAc,iEAAd;AACA;AACH;;AAED,QAAMC,aAAa,GAAG,2BAAe;AAAEC,IAAAA,MAAM,EAAE,cAAV;AAA0BC,IAAAA,GAAG,EAAEP,MAAM,CAACO;AAAtC,GAAf,CAAtB;AAEAN,EAAAA,OAAO,CAACG,IAAR,CAAa,0CAAb;;AAEA,MAAI;AAAA;;AACA,UAAMI,MAAM,GAAG,IAAIC,oBAAJ,CAAsB;AACjCC,MAAAA,MAAM,EAAEL,aAAa,CAAC,QAAD;AADY,KAAtB,CAAf;AAIA,UAAMM,MAAM,GAAG,MAAMH,MAAM,CACtBI,SADgB,CACN;AACPC,MAAAA,OAAO,EAAE,CACL;AACIC,QAAAA,MAAM,EAAE,YADZ;AAEIC,QAAAA,YAAY,EAAEV,aAAa,CAAC,aAAD,CAF/B;AAGIW,QAAAA,UAAU,EAAE,aAHhB;AAIIC,QAAAA,MAAM,EAAEC,IAAI,CAACC,SAAL,CAAe;AACnBC,UAAAA,IAAI,EAAE,GADa;AAEnBC,UAAAA,OAAO,EAAErB,MAAM,CAACqB,OAFG;AAGnBC,UAAAA,aAAa,EAAE;AACXC,YAAAA,EAAE,EAAE;AACAC,cAAAA,SAAS,EAAE;AADX;AADO;AAHI,SAAf;AAJZ,OADK;AADF,KADM,EAmBhBC,OAnBgB,EAArB;AAqBA,UAAMC,KAAK,sBAAGf,MAAM,CAACE,OAAV,oDAAG,gBAAiB,CAAjB,CAAd;;AACA,QAAIa,KAAJ,aAAIA,KAAJ,eAAIA,KAAK,CAAEC,YAAX,EAAyB;AACrB,YAAM,IAAIC,KAAJ,CAAUF,KAAK,CAACC,YAAhB,CAAN;AACH;;AAED1B,IAAAA,OAAO,CAAC4B,OAAR,CAAgB,4CAAhB;AACA5B,IAAAA,OAAO,CAACG,IAAR,CACI,uFADJ;AAGH,GAnCD,CAmCE,OAAO0B,CAAP,EAAU;AACR7B,IAAAA,OAAO,CAAC8B,KAAR,CACK,+EADL;AAGAC,IAAAA,OAAO,CAACC,GAAR,CAAYH,CAAZ;AACH;AACJ,CAnD4B,CAAtB","sourcesContent":["import EventBridgeClient from \"aws-sdk/clients/eventbridge\";\n\nimport { defineAppHook } from \"@webiny/pulumi-sdk\";\nimport { getStackOutput } from \"@webiny/cli-plugin-deploy-pulumi/utils\";\n\nexport const websiteRender = defineAppHook(async (params, context) => {\n    if (params.inputs.build === false) {\n        context.info(`\"--no-build\" argument detected - skipping Website re-rendering.`);\n        return;\n    }\n\n    const storageOutput = getStackOutput({ folder: \"apps/storage\", env: params.env });\n\n    context.info(\"Issuing a complete website render job...\");\n\n    try {\n        const client = new EventBridgeClient({\n            region: storageOutput[\"region\"]\n        });\n\n        const result = await client\n            .putEvents({\n                Entries: [\n                    {\n                        Source: \"webiny-cli\",\n                        EventBusName: storageOutput[\"eventBusArn\"],\n                        DetailType: \"RenderPages\",\n                        Detail: JSON.stringify({\n                            path: \"*\",\n                            variant: params.variant,\n                            configuration: {\n                                db: {\n                                    namespace: \"T#root\"\n                                }\n                            }\n                        })\n                    }\n                ]\n            })\n            .promise();\n\n        const entry = result.Entries?.[0];\n        if (entry?.ErrorMessage) {\n            throw new Error(entry.ErrorMessage);\n        }\n\n        context.success(\"Website re-render job successfully issued.\");\n        context.info(\n            \"Please note that it can take a couple of minutes for the website to be fully updated.\"\n        );\n    } catch (e) {\n        context.error(\n            `An error occurred while trying to update default Page Builder app's settings!`\n        );\n        console.log(e);\n    }\n});\n"]}

package/apps/website/WebsitePrerendering.d.ts

@@ -0,0 +1,31 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import { PulumiApp } from "@webiny/pulumi-sdk";
+interface PreRenderingServiceParams {
+    env: Record<string, pulumi.Input<string>>;
+}
+export declare function createPrerenderingService(app: PulumiApp, params: PreRenderingServiceParams): {
+    subscriber: {
+        policy: pulumi.Output<aws.iam.Policy>;
+        role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+        lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+        eventRule: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventRule>;
+        eventPermission: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Permission>;
+        eventTarget: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventTarget>;
+    };
+    renderer: {
+        policy: pulumi.Output<aws.iam.Policy>;
+        role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+        lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+        eventSourceMapping: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.EventSourceMapping>;
+    };
+    flush: {
+        policy: pulumi.Output<aws.iam.Policy>;
+        role: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.iam.Role>;
+        lambda: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Function>;
+        eventRule: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventRule>;
+        eventPermission: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.lambda.Permission>;
+        eventTarget: import("@webiny/pulumi-sdk").PulumiAppResource<typeof aws.cloudwatch.EventTarget>;
+    };
+};
+export {};

package/apps/website/WebsitePrerendering.js

@@ -0,0 +1,266 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createPrerenderingService = createPrerenderingService;
+
+var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
+
+var path = _interopRequireWildcard(require("path"));
+
+var pulumi = _interopRequireWildcard(require("@pulumi/pulumi"));
+
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+
+var _awsLayers = require("@webiny/aws-layers");
+
+var _lambdaUtils = require("../lambdaUtils");
+
+var _common = require("../common");
+
+var _awsUtils = require("../awsUtils");
+
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function (nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
+
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { (0, _defineProperty2.default)(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+
+function createPrerenderingService(app, params) {
+  const queue = app.addResource(aws.sqs.Queue, {
+    name: "ps-render-queue",
+    config: {
+      visibilityTimeoutSeconds: 300,
+      fifoQueue: true
+    }
+  });
+  const policy = createLambdaPolicy(app, queue.output);
+  const subscriber = createRenderSubscriber(app, queue.output, policy.output, params);
+  const renderer = createRenderer(app, queue.output, policy.output, params);
+  const flush = createFlushService(app, policy.output, params);
+  return {
+    subscriber,
+    renderer,
+    flush
+  };
+}
+
+function createRenderSubscriber(app, queue, policy, params) {
+  const storage = app.getModule(_common.StorageOutput);
+  const role = (0, _lambdaUtils.createLambdaRole)(app, {
+    name: "ps-render-subscriber-role",
+    policy: policy,
+    executionRole: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole
+  });
+  const lambda = app.addResource(aws.lambda.Function, {
+    name: "ps-render-subscriber-lambda",
+    config: {
+      role: role.output.arn,
+      runtime: "nodejs14.x",
+      handler: "handler.handler",
+      timeout: 30,
+      memorySize: 512,
+      environment: {
+        variables: _objectSpread(_objectSpread(_objectSpread({}, (0, _lambdaUtils.getCommonLambdaEnvVariables)(app)), params.env), {}, {
+          SQS_QUEUE: queue.url
+        })
+      },
+      description: "Subscribes to render events on event bus",
+      code: new pulumi.asset.AssetArchive({
+        ".": new pulumi.asset.FileArchive(path.join(app.ctx.appDir, "prerendering/subscribe/build"))
+      }),
+      vpcConfig: app.getModule(_common.VpcConfig).functionVpcConfig
+    }
+  });
+  const eventRule = app.addResource(aws.cloudwatch.EventRule, {
+    name: "ps-render-subscriber-event-rule",
+    config: {
+      eventBusName: storage.eventBusArn,
+      eventPattern: JSON.stringify({
+        "detail-type": ["RenderPages"]
+      })
+    }
+  });
+  const eventPermission = app.addResource(aws.lambda.Permission, {
+    name: "ps-render-subscriber-event-permission",
+    config: {
+      action: "lambda:InvokeFunction",
+      function: lambda.output.arn,
+      principal: "events.amazonaws.com",
+      sourceArn: eventRule.output.arn
+    }
+  });
+  const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {
+    name: "ps-render-subscriber-event-target",
+    config: {
+      rule: eventRule.output.name,
+      eventBusName: storage.eventBusArn,
+      arn: lambda.output.arn
+    }
+  });
+  return {
+    policy,
+    role,
+    lambda,
+    eventRule,
+    eventPermission,
+    eventTarget
+  };
+}
+
+function createRenderer(app, queue, policy, params) {
+  const role = (0, _lambdaUtils.createLambdaRole)(app, {
+    name: "ps-render-lambda-role",
+    policy: policy,
+    executionRole: aws.iam.ManagedPolicy.AWSLambdaSQSQueueExecutionRole
+  });
+  const lambda = app.addResource(aws.lambda.Function, {
+    name: "ps-render-lambda",
+    config: {
+      role: role.output.arn,
+      runtime: "nodejs14.x",
+      handler: "handler.handler",
+      timeout: 300,
+      memorySize: 2048,
+      layers: [(0, _awsLayers.getLayerArn)("shelf-io-chrome-aws-lambda-layer")],
+      environment: {
+        variables: _objectSpread(_objectSpread({}, (0, _lambdaUtils.getCommonLambdaEnvVariables)(app)), params.env)
+      },
+      description: "Renders pages and stores output in an S3 bucket of choice.",
+      code: new pulumi.asset.AssetArchive({
+        ".": new pulumi.asset.FileArchive(path.join(app.ctx.appDir, "prerendering/render/build"))
+      }),
+      vpcConfig: app.getModule(_common.VpcConfig).functionVpcConfig
+    }
+  });
+  const eventSourceMapping = app.addResource(aws.lambda.EventSourceMapping, {
+    name: "ps-render-event-source-mapping",
+    config: {
+      functionName: lambda.output.arn,
+      eventSourceArn: queue.arn,
+      batchSize: 1
+    }
+  });
+  return {
+    policy,
+    role,
+    lambda,
+    eventSourceMapping
+  };
+}
+
+function createFlushService(app, policy, params) {
+  const storage = app.getModule(_common.StorageOutput);
+  const role = (0, _lambdaUtils.createLambdaRole)(app, {
+    name: "ps-flush-lambda-role",
+    policy: policy,
+    executionRole: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole
+  });
+  const lambda = app.addResource(aws.lambda.Function, {
+    name: "ps-flush-lambda",
+    config: {
+      role: role.output.arn,
+      runtime: "nodejs14.x",
+      handler: "handler.handler",
+      timeout: 30,
+      memorySize: 512,
+      environment: {
+        variables: _objectSpread(_objectSpread({}, (0, _lambdaUtils.getCommonLambdaEnvVariables)(app)), params.env)
+      },
+      description: "Subscribes to fluhs events on event bus",
+      code: new pulumi.asset.AssetArchive({
+        ".": new pulumi.asset.FileArchive(path.join(app.ctx.appDir, "prerendering/flush/build"))
+      }),
+      vpcConfig: app.getModule(_common.VpcConfig).functionVpcConfig
+    }
+  });
+  const eventRule = app.addResource(aws.cloudwatch.EventRule, {
+    name: "ps-flush-event-rule",
+    config: {
+      eventBusName: storage.eventBusArn,
+      eventPattern: JSON.stringify({
+        "detail-type": ["FlushPages"]
+      })
+    }
+  });
+  const eventPermission = app.addResource(aws.lambda.Permission, {
+    name: "ps-flush-event-permission",
+    config: {
+      action: "lambda:InvokeFunction",
+      function: lambda.output.arn,
+      principal: "events.amazonaws.com",
+      sourceArn: eventRule.output.arn
+    }
+  });
+  const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {
+    name: "ps-flush-event-target",
+    config: {
+      rule: eventRule.output.name,
+      eventBusName: storage.eventBusArn,
+      arn: lambda.output.arn
+    }
+  });
+  return {
+    policy,
+    role,
+    lambda,
+    eventRule,
+    eventPermission,
+    eventTarget
+  };
+}
+
+function createLambdaPolicy(app, queue) {
+  const storage = app.getModule(_common.StorageOutput);
+  const awsAccountId = (0, _awsUtils.getAwsAccountId)(app);
+  return app.addResource(aws.iam.Policy, {
+    name: "ps-lambda-policy",
+    config: {
+      description: "This policy enables access to Lambda, S3, Cloudfront, SQS and Dynamodb",
+      policy: {
+        Version: "2012-10-17",
+        Statement: [{
+          Sid: "PermissionForDynamodb",
+          Effect: "Allow",
+          Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:DeleteItem", "dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:Scan", "dynamodb:UpdateItem"],
+          Resource: storage.apply(s => {
+            // Add permissions to DynamoDB table
+            const resources = [`${s.primaryDynamodbTableArn}`, `${s.primaryDynamodbTableArn}/*`]; // Attach permissions for elastic search dynamo as well (if ES is enabled).
+
+            if (s.elasticsearchDynamodbTableArn) {
+              resources.push(`${s.elasticsearchDynamodbTableArn}`, `${s.elasticsearchDynamodbTableArn}/*`);
+            }
+
+            return resources;
+          })
+        }, {
+          Sid: "PermissionForS3",
+          Effect: "Allow",
+          Action: ["s3:DeleteObject", "s3:GetObject", "s3:GetObjectAcl", "s3:PutObject", "s3:PutObjectAcl"],
+          Resource: [pulumi.interpolate`arn:aws:s3:::${storage.fileManagerBucketId}/*`,
+          /**
+           * We're using the hard-coded value for "delivery" S3 bucket because;
+           * It is created during deployment of the `apps/website` stack which is after the api stack,
+           * so, we don't know its ARN.
+           */
+          "arn:aws:s3:::delivery-*/*"]
+        }, {
+          Sid: "PermissionForCloudfront",
+          Effect: "Allow",
+          Action: "cloudfront:CreateInvalidation",
+          Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`
+        }, {
+          Sid: "PermissionForSQS",
+          Effect: "Allow",
+          Action: ["sqs:SendMessage", "sqs:SendMessageBatch"],
+          Resource: queue.arn
+        }]
+      }
+    }
+  });
+}