@webiny/pulumi-aws 5.40.6 → 5.40.7-beta.0

package/apps/api/ApiCloudfront.js

@@ -105,6 +105,21 @@ const ApiCloudfront = exports.ApiCloudfront = (0, _pulumi.createAppModule)({
         viewerCertificate: {
           cloudfrontDefaultCertificate: true
         }
+      },
+      opts: {
+        // We are ignoring changes to the "staging" property. This is because of the following.
+        // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change
+        // with how Cloudfront distributions are deployed, where Pulumi now also controls the new
+        // `staging` property.
+        // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is
+        // that, because this property did not exist before, it will always be considered as a change
+        // upon deployment.
+        // We might think this is fine, but, the problem is that a change in this property causes
+        // a full replacement of the Cloudfront distribution, which is not acceptable. Especially
+        // if a custom domain has already been associated with the distribution. This then would
+        // require the user to disassociate the domain, wait for the distribution to be replaced,
+        // and then re-associate the domain. This is not a good experience.
+        ignoreChanges: ["staging"]
       }
     });
   }

package/apps/api/ApiCloudfront.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","_interopRequireWildcard","require","_pulumi","_ApiGateway","ApiCloudfront","exports","createAppModule","name","config","app","gateway","getModule","ApiGateway","cookies","forward","whitelistedNames","forwardHeaders","addResource","cloudfront","Distribution","waitForDeployment","isIpv6Enabled","enabled","defaultCacheBehavior","compress","allowedMethods","cachedMethods","forwardedValues","headers","queryString","minTtl","defaultTtl","maxTtl","targetOriginId","api","output","viewerProtocolPolicy","orderedCacheBehaviors","pathPattern","origins","domainName","stage","invokeUrl","apply","url","URL","hostname","originPath","pathname","originId","customOriginConfig","httpPort","httpsPort","originProtocolPolicy","originSslProtocols","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate"],"sources":["ApiCloudfront.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\n\nimport { ApiGateway } from \"./ApiGateway\";\n\nexport type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;\n\nexport const ApiCloudfront = createAppModule({\n    name: \"ApiCloudfront\",\n    config(app: PulumiApp) {\n        const gateway = app.getModule(ApiGateway);\n\n        const cookies = {\n            forward: \"whitelist\",\n            whitelistedNames: [\"wby-id-token\"]\n        };\n\n        const forwardHeaders = [\"Origin\", \"Accept\", \"Accept-Language\"];\n\n        return app.addResource(aws.cloudfront.Distribution, {\n            name: \"api-cloudfront\",\n            config: {\n                waitForDeployment: false,\n                isIpv6Enabled: true,\n                enabled: true,\n                defaultCacheBehavior: {\n                    compress: true,\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\", \"PUT\", \"POST\", \"PATCH\", \"DELETE\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    forwardedValues: {\n                        cookies,\n                        headers: forwardHeaders,\n                        queryString: true\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 0,\n                    maxTtl: 86400,\n                    targetOriginId: gateway.api.output.name,\n                    viewerProtocolPolicy: \"allow-all\"\n                },\n                orderedCacheBehaviors: [\n                    {\n                        compress: true,\n                        allowedMethods: [\n                            \"GET\",\n                            \"HEAD\",\n                            \"OPTIONS\",\n                            \"PUT\",\n                            \"POST\",\n                            \"PATCH\",\n                            \"DELETE\"\n                        ],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: [\"Accept\", \"Accept-Language\"],\n                            queryString: true\n                        },\n                        pathPattern: \"/cms*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/files/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: cookies,\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/private/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    }\n                ],\n                origins: [\n                    {\n                        domainName: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).hostname\n                        ),\n                        originPath: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).pathname\n                        ),\n                        originId: gateway.api.output.name,\n                        customOriginConfig: {\n                            httpPort: 80,\n                            httpsPort: 443,\n                            originProtocolPolicy: \"https-only\",\n                            originSslProtocols: [\"TLSv1.2\"]\n                        }\n                    }\n                ],\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            }\n        });\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,WAAA,GAAAF,OAAA;AAIO,MAAMG,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,IAAAE,uBAAe,EAAC;EACzCC,IAAI,EAAE,eAAe;EACrBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACC,sBAAU,CAAC;IAEzC,MAAMC,OAAO,GAAG;MACZC,OAAO,EAAE,WAAW;MACpBC,gBAAgB,EAAE,CAAC,cAAc;IACrC,CAAC;IAED,MAAMC,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;IAE9D,OAAOP,GAAG,CAACQ,WAAW,CAAClB,GAAG,CAACmB,UAAU,CAACC,YAAY,EAAE;MAChDZ,IAAI,EAAE,gBAAgB;MACtBC,MAAM,EAAE;QACJY,iBAAiB,EAAE,KAAK;QACxBC,aAAa,EAAE,IAAI;QACnBC,OAAO,EAAE,IAAI;QACbC,oBAAoB,EAAE;UAClBC,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;UAC5EC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO;YACPe,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,KAAK;UACbC,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACvC6B,oBAAoB,EAAE;QAC1B,CAAC;QACDC,qBAAqB,EAAE,CACnB;UACIb,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CACZ,KAAK,EACL,MAAM,EACN,SAAS,EACT,KAAK,EACL,MAAM,EACN,OAAO,EACP,QAAQ,CACX;UACDC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDc,OAAO,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;YACtCC,WAAW,EAAE;UACjB,CAAC;UACDS,WAAW,EAAE,OAAO;UACpBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDc,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,UAAU;UACvBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAEA,OAAO;YAChBe,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,YAAY;UACzBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,CACJ;QACDgC,OAAO,EAAE,CACL;UACIC,UAAU,EAAE9B,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACE,QAClC,CAAC;UACDC,UAAU,EAAErC,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACI,QAClC,CAAC;UACDC,QAAQ,EAAEvC,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACjC2C,kBAAkB,EAAE;YAChBC,QAAQ,EAAE,EAAE;YACZC,SAAS,EAAE,GAAG;YACdC,oBAAoB,EAAE,YAAY;YAClCC,kBAAkB,EAAE,CAAC,SAAS;UAClC;QACJ,CAAC,CACJ;QACDC,YAAY,EAAE;UACVC,cAAc,EAAE;YACZC,eAAe,EAAE;UACrB;QACJ,CAAC;QACDC,iBAAiB,EAAE;UACfC,4BAA4B,EAAE;QAClC;MACJ;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["aws","_interopRequireWildcard","require","_pulumi","_ApiGateway","ApiCloudfront","exports","createAppModule","name","config","app","gateway","getModule","ApiGateway","cookies","forward","whitelistedNames","forwardHeaders","addResource","cloudfront","Distribution","waitForDeployment","isIpv6Enabled","enabled","defaultCacheBehavior","compress","allowedMethods","cachedMethods","forwardedValues","headers","queryString","minTtl","defaultTtl","maxTtl","targetOriginId","api","output","viewerProtocolPolicy","orderedCacheBehaviors","pathPattern","origins","domainName","stage","invokeUrl","apply","url","URL","hostname","originPath","pathname","originId","customOriginConfig","httpPort","httpsPort","originProtocolPolicy","originSslProtocols","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","opts","ignoreChanges"],"sources":["ApiCloudfront.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\n\nimport { ApiGateway } from \"./ApiGateway\";\n\nexport type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;\n\nexport const ApiCloudfront = createAppModule({\n    name: \"ApiCloudfront\",\n    config(app: PulumiApp) {\n        const gateway = app.getModule(ApiGateway);\n\n        const cookies = {\n            forward: \"whitelist\",\n            whitelistedNames: [\"wby-id-token\"]\n        };\n\n        const forwardHeaders = [\"Origin\", \"Accept\", \"Accept-Language\"];\n\n        return app.addResource(aws.cloudfront.Distribution, {\n            name: \"api-cloudfront\",\n            config: {\n                waitForDeployment: false,\n                isIpv6Enabled: true,\n                enabled: true,\n                defaultCacheBehavior: {\n                    compress: true,\n                    allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\", \"PUT\", \"POST\", \"PATCH\", \"DELETE\"],\n                    cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                    forwardedValues: {\n                        cookies,\n                        headers: forwardHeaders,\n                        queryString: true\n                    },\n                    // MinTTL <= DefaultTTL <= MaxTTL\n                    minTtl: 0,\n                    defaultTtl: 0,\n                    maxTtl: 86400,\n                    targetOriginId: gateway.api.output.name,\n                    viewerProtocolPolicy: \"allow-all\"\n                },\n                orderedCacheBehaviors: [\n                    {\n                        compress: true,\n                        allowedMethods: [\n                            \"GET\",\n                            \"HEAD\",\n                            \"OPTIONS\",\n                            \"PUT\",\n                            \"POST\",\n                            \"PATCH\",\n                            \"DELETE\"\n                        ],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: [\"Accept\", \"Accept-Language\"],\n                            queryString: true\n                        },\n                        pathPattern: \"/cms*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: {\n                                forward: \"none\"\n                            },\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/files/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    },\n                    {\n                        allowedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        cachedMethods: [\"HEAD\", \"GET\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: cookies,\n                            headers: forwardHeaders,\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 2592000,\n                        pathPattern: \"/private/*\",\n                        viewerProtocolPolicy: \"allow-all\",\n                        targetOriginId: gateway.api.output.name\n                    }\n                ],\n                origins: [\n                    {\n                        domainName: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).hostname\n                        ),\n                        originPath: gateway.stage.output.invokeUrl.apply(\n                            (url: string) => new URL(url).pathname\n                        ),\n                        originId: gateway.api.output.name,\n                        customOriginConfig: {\n                            httpPort: 80,\n                            httpsPort: 443,\n                            originProtocolPolicy: \"https-only\",\n                            originSslProtocols: [\"TLSv1.2\"]\n                        }\n                    }\n                ],\n                restrictions: {\n                    geoRestriction: {\n                        restrictionType: \"none\"\n                    }\n                },\n                viewerCertificate: {\n                    cloudfrontDefaultCertificate: true\n                }\n            },\n            opts: {\n                // We are ignoring changes to the \"staging\" property. This is because of the following.\n                // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change\n                // with how Cloudfront distributions are deployed, where Pulumi now also controls the new\n                // `staging` property.\n                // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is\n                // that, because this property did not exist before, it will always be considered as a change\n                // upon deployment.\n                // We might think this is fine, but, the problem is that a change in this property causes\n                // a full replacement of the Cloudfront distribution, which is not acceptable. Especially\n                // if a custom domain has already been associated with the distribution. This then would\n                // require the user to disassociate the domain, wait for the distribution to be replaced,\n                // and then re-associate the domain. This is not a good experience.\n                ignoreChanges: [\"staging\"]\n            }\n        });\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,WAAA,GAAAF,OAAA;AAIO,MAAMG,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,IAAAE,uBAAe,EAAC;EACzCC,IAAI,EAAE,eAAe;EACrBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACC,sBAAU,CAAC;IAEzC,MAAMC,OAAO,GAAG;MACZC,OAAO,EAAE,WAAW;MACpBC,gBAAgB,EAAE,CAAC,cAAc;IACrC,CAAC;IAED,MAAMC,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;IAE9D,OAAOP,GAAG,CAACQ,WAAW,CAAClB,GAAG,CAACmB,UAAU,CAACC,YAAY,EAAE;MAChDZ,IAAI,EAAE,gBAAgB;MACtBC,MAAM,EAAE;QACJY,iBAAiB,EAAE,KAAK;QACxBC,aAAa,EAAE,IAAI;QACnBC,OAAO,EAAE,IAAI;QACbC,oBAAoB,EAAE;UAClBC,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;UAC5EC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO;YACPe,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,KAAK;UACbC,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACvC6B,oBAAoB,EAAE;QAC1B,CAAC;QACDC,qBAAqB,EAAE,CACnB;UACIb,QAAQ,EAAE,IAAI;UACdC,cAAc,EAAE,CACZ,KAAK,EACL,MAAM,EACN,SAAS,EACT,KAAK,EACL,MAAM,EACN,OAAO,EACP,QAAQ,CACX;UACDC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDc,OAAO,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;YACtCC,WAAW,EAAE;UACjB,CAAC;UACDS,WAAW,EAAE,OAAO;UACpBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAE;cACLC,OAAO,EAAE;YACb,CAAC;YACDc,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,UAAU;UACvBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,EACD;UACIkB,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UAC1CC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;UACzCC,eAAe,EAAE;YACbd,OAAO,EAAEA,OAAO;YAChBe,OAAO,EAAEZ,cAAc;YACvBa,WAAW,EAAE;UACjB,CAAC;UACD;UACAC,MAAM,EAAE,CAAC;UACTC,UAAU,EAAE,CAAC;UACbC,MAAM,EAAE,OAAO;UACfM,WAAW,EAAE,YAAY;UACzBF,oBAAoB,EAAE,WAAW;UACjCH,cAAc,EAAEvB,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B;QACvC,CAAC,CACJ;QACDgC,OAAO,EAAE,CACL;UACIC,UAAU,EAAE9B,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACE,QAClC,CAAC;UACDC,UAAU,EAAErC,OAAO,CAAC+B,KAAK,CAACN,MAAM,CAACO,SAAS,CAACC,KAAK,CAC3CC,GAAW,IAAK,IAAIC,GAAG,CAACD,GAAG,CAAC,CAACI,QAClC,CAAC;UACDC,QAAQ,EAAEvC,OAAO,CAACwB,GAAG,CAACC,MAAM,CAAC5B,IAAI;UACjC2C,kBAAkB,EAAE;YAChBC,QAAQ,EAAE,EAAE;YACZC,SAAS,EAAE,GAAG;YACdC,oBAAoB,EAAE,YAAY;YAClCC,kBAAkB,EAAE,CAAC,SAAS;UAClC;QACJ,CAAC,CACJ;QACDC,YAAY,EAAE;UACVC,cAAc,EAAE;YACZC,eAAe,EAAE;UACrB;QACJ,CAAC;QACDC,iBAAiB,EAAE;UACfC,4BAA4B,EAAE;QAClC;MACJ,CAAC;MACDC,IAAI,EAAE;QACF;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACA;QACAC,aAAa,EAAE,CAAC,SAAS;MAC7B;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/awsUtils.d.ts

@@ -1,3 +1,3 @@
 import { PulumiApp } from "@webiny/pulumi";
 export declare function getAwsAccountId(app: PulumiApp): import("@pulumi/pulumi").Output<string>;
-export declare function getAwsRegion(app: PulumiApp): import("@pulumi/pulumi").Output<"us-east-1" | "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-south-2" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-3" | "ap-southeast-4" | "ca-central-1" | "ca-west-1" | "cn-north-1" | "cn-northwest-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-south-2" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "me-central-1" | "me-south-1" | "sa-east-1" | "us-gov-east-1" | "us-gov-west-1" | "us-east-2" | "us-west-1" | "us-west-2">;
+export declare function getAwsRegion(app: PulumiApp): import("@pulumi/pulumi").Output<"af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-south-2" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-3" | "ap-southeast-4" | "ca-central-1" | "ca-west-1" | "cn-north-1" | "cn-northwest-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-south-2" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "me-central-1" | "me-south-1" | "sa-east-1" | "us-gov-east-1" | "us-gov-west-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2">;

package/apps/react/createReactPulumiApp.js

@@ -81,6 +81,21 @@ const createReactPulumiApp = projectAppParams => {
           viewerCertificate: {
             cloudfrontDefaultCertificate: true
           }
+        },
+        opts: {
+          // We are ignoring changes to the "staging" property. This is because of the following.
+          // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change
+          // with how Cloudfront distributions are deployed, where Pulumi now also controls the new
+          // `staging` property.
+          // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is
+          // that, because this property did not exist before, it will always be considered as a change
+          // upon deployment.
+          // We might think this is fine, but, the problem is that a change in this property causes
+          // a full replacement of the Cloudfront distribution, which is not acceptable. Especially
+          // if a custom domain has already been associated with the distribution. This then would
+          // require the user to disassociate the domain, wait for the distribution to be replaced,
+          // and then re-associate the domain. This is not a good experience.
+          ignoreChanges: ["staging"]
         }
       });
       const domains = app.getParam(projectAppParams.domains);

package/apps/react/createReactPulumiApp.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","_interopRequireWildcard","require","pulumi","_pulumi2","_utils","_createAppBucket","_customDomain","_withServiceManifest","_","createReactPulumiApp","projectAppParams","app","createPulumiApp","name","path","folder","config","program","pulumiResourceNamePrefix","getParam","onResource","resource","startsWith","core","addModule","CoreOutput","ApiOutput","addHandler","bucket","createPrivateAppBucket","cloudfront","addResource","Distribution","enabled","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","domains","applyCustomDomain","addOutput","output","id","addDomainsUrlsOutputs","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","tagResources","WbyAppName","WbyProjectName","String","process","env","WbyEnvironment","dynamodb","TableItem","tableName","primaryDynamodbTableName","hashKey","primaryDynamodbTableHashKey","rangeKey","primaryDynamodbTableRangeKey","apply","key","item","interpolate","params","run","variant","domainName","value","withServiceManifest","exports"],"sources":["createReactPulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport { createPulumiApp, PulumiAppParam, PulumiAppParamCallback } from \"@webiny/pulumi\";\nimport { addDomainsUrlsOutputs, tagResources } from \"~/utils\";\nimport { createPrivateAppBucket } from \"../createAppBucket\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { withServiceManifest } from \"~/utils/withServiceManifest\";\nimport { ApiOutput, CoreOutput } from \"~/apps\";\n\nexport type ReactPulumiApp = ReturnType<typeof createReactPulumiApp>;\n\nexport interface CreateReactPulumiAppParams {\n    /**\n     * A name of the app, e.g., \"user-area\"\n     */\n    name: string;\n\n    /**\n     * A folder where the app is located, e.g., \"apps/user-area\"\n     */\n    folder: string;\n\n    /** Custom domain configuration */\n    domains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: ReactPulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport const createReactPulumiApp = (projectAppParams: CreateReactPulumiAppParams) => {\n    const app = createPulumiApp({\n        name: projectAppParams.name,\n        path: projectAppParams.folder,\n        config: projectAppParams,\n        program: async app => {\n            const pulumiResourceNamePrefix = app.getParam(\n                projectAppParams.pulumiResourceNamePrefix\n            );\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            const { name } = projectAppParams;\n\n            // Register core output as a module available for all other modules\n            const core = app.addModule(CoreOutput);\n            app.addModule(ApiOutput);\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            if (projectAppParams.pulumi) {\n                app.addHandler(() => {\n                    return projectAppParams.pulumi!(app as unknown as ReactPulumiApp);\n                });\n            }\n\n            const bucket = createPrivateAppBucket(app, `${name}-app`);\n\n            const cloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: `${name}-app-cdn`,\n                config: {\n                    enabled: true,\n                    waitForDeployment: false,\n                    origins: [bucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: bucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: false\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 600,\n                        maxTtl: 600\n                    },\n                    priceClass: \"PriceClass_100\",\n                    customErrorResponses: [\n                        { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                    ],\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                }\n            });\n\n            const domains = app.getParam(projectAppParams.domains);\n            if (domains) {\n                applyCustomDomain(cloudfront, domains);\n            }\n\n            app.addOutput(\"appStorage\", bucket.bucket.output.id);\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: cloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontAppDomain\",\n                        distributionUrl: \"cloudfrontAppUrl\",\n                        usedDomain: \"appDomain\",\n                        usedUrl: \"appUrl\"\n                    }\n                });\n            });\n\n            tagResources({\n                WbyAppName: name,\n                WbyProjectName: String(process.env[\"WEBINY_PROJECT_NAME\"]),\n                WbyEnvironment: String(process.env[\"WEBINY_ENV\"])\n            });\n\n            /**\n             * We need to store the appUrl to the admin settings item in the dynamodb\n             */\n            app.addResource(aws.dynamodb.TableItem, {\n                name: \"adminSettings\",\n                config: {\n                    tableName: core.primaryDynamodbTableName,\n                    hashKey: core.primaryDynamodbTableHashKey,\n                    rangeKey: pulumi\n                        .output(core.primaryDynamodbTableRangeKey)\n                        .apply(key => key || \"SK\"),\n                    item: pulumi.interpolate`{\n                          \"PK\": {\"S\": \"ADMIN#SETTINGS\"},\n                          \"SK\": {\"S\": \"${app.params.run.variant || \"default\"}\"},\n                          \"data\": {\n                            \"M\": {\n                              \"appUrl\": {\n                                \"S\": \"${cloudfront.output.domainName.apply(\n                                    value => `https://${value}`\n                                )}\"\n                              }\n                            }\n                          }\n                        }`\n                }\n            });\n\n            return {\n                ...bucket,\n                cloudfront\n            };\n        }\n    });\n\n    return withServiceManifest(app);\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AACA,IAAAI,gBAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,oBAAA,GAAAN,OAAA;AACA,IAAAO,CAAA,GAAAP,OAAA;AAqCO,MAAMQ,oBAAoB,GAAIC,gBAA4C,IAAK;EAClF,MAAMC,GAAG,GAAG,IAAAC,wBAAe,EAAC;IACxBC,IAAI,EAAEH,gBAAgB,CAACG,IAAI;IAC3BC,IAAI,EAAEJ,gBAAgB,CAACK,MAAM;IAC7BC,MAAM,EAAEN,gBAAgB;IACxBO,OAAO,EAAE,MAAMN,GAAG,IAAI;MAClB,MAAMO,wBAAwB,GAAGP,GAAG,CAACQ,QAAQ,CACzCT,gBAAgB,CAACQ,wBACrB,CAAC;MACD,IAAIA,wBAAwB,EAAE;QAC1BP,GAAG,CAACS,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACR,IAAI,CAACS,UAAU,CAACJ,wBAAwB,CAAC,EAAE;YACrDG,QAAQ,CAACR,IAAI,GAAI,GAAEK,wBAAyB,GAAEG,QAAQ,CAACR,IAAK,EAAC;UACjE;QACJ,CAAC,CAAC;MACN;MAEA,MAAM;QAAEA;MAAK,CAAC,GAAGH,gBAAgB;;MAEjC;MACA,MAAMa,IAAI,GAAGZ,GAAG,CAACa,SAAS,CAACC,YAAU,CAAC;MACtCd,GAAG,CAACa,SAAS,CAACE,WAAS,CAAC;;MAExB;MACA;MACA,IAAIhB,gBAAgB,CAACR,MAAM,EAAE;QACzBS,GAAG,CAACgB,UAAU,CAAC,MAAM;UACjB,OAAOjB,gBAAgB,CAACR,MAAM,CAAES,GAAgC,CAAC;QACrE,CAAC,CAAC;MACN;MAEA,MAAMiB,MAAM,GAAG,IAAAC,uCAAsB,EAAClB,GAAG,EAAG,GAAEE,IAAK,MAAK,CAAC;MAEzD,MAAMiB,UAAU,GAAGnB,GAAG,CAACoB,WAAW,CAAChC,GAAG,CAAC+B,UAAU,CAACE,YAAY,EAAE;QAC5DnB,IAAI,EAAG,GAAEA,IAAK,UAAS;QACvBG,MAAM,EAAE;UACJiB,OAAO,EAAE,IAAI;UACbC,iBAAiB,EAAE,KAAK;UACxBC,OAAO,EAAE,CAACP,MAAM,CAACQ,MAAM,CAAC;UACxBC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEZ,MAAM,CAACQ,MAAM,CAACK,QAAQ;YACtCC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,GAAG;YACfC,MAAM,EAAE;UACZ,CAAC;UACDC,UAAU,EAAE,gBAAgB;UAC5BC,oBAAoB,EAAE,CAClB;YAAEC,SAAS,EAAE,GAAG;YAAEC,YAAY,EAAE,GAAG;YAAEC,gBAAgB,EAAE;UAAc,CAAC,CACzE;UACDC,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ;MACJ,CAAC,CAAC;MAEF,MAAMC,OAAO,GAAGnD,GAAG,CAACQ,QAAQ,CAACT,gBAAgB,CAACoD,OAAO,CAAC;MACtD,IAAIA,OAAO,EAAE;QACT,IAAAC,+BAAiB,EAACjC,UAAU,EAAEgC,OAAO,CAAC;MAC1C;MAEAnD,GAAG,CAACqD,SAAS,CAAC,YAAY,EAAEpC,MAAM,CAACA,MAAM,CAACqC,MAAM,CAACC,EAAE,CAAC;MAEpDvD,GAAG,CAACgB,UAAU,CAAC,MAAM;QACjB,IAAAwC,4BAAqB,EAAC;UAClBxD,GAAG;UACHyD,sBAAsB,EAAEtC,UAAU;UAClCuC,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEF,IAAAC,mBAAY,EAAC;QACTC,UAAU,EAAE9D,IAAI;QAChB+D,cAAc,EAAEC,MAAM,CAACC,OAAO,CAACC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1DC,cAAc,EAAEH,MAAM,CAACC,OAAO,CAACC,GAAG,CAAC,YAAY,CAAC;MACpD,CAAC,CAAC;;MAEF;AACZ;AACA;MACYpE,GAAG,CAACoB,WAAW,CAAChC,GAAG,CAACkF,QAAQ,CAACC,SAAS,EAAE;QACpCrE,IAAI,EAAE,eAAe;QACrBG,MAAM,EAAE;UACJmE,SAAS,EAAE5D,IAAI,CAAC6D,wBAAwB;UACxCC,OAAO,EAAE9D,IAAI,CAAC+D,2BAA2B;UACzCC,QAAQ,EAAErF,MAAM,CACX+D,MAAM,CAAC1C,IAAI,CAACiE,4BAA4B,CAAC,CACzCC,KAAK,CAACC,GAAG,IAAIA,GAAG,IAAI,IAAI,CAAC;UAC9BC,IAAI,EAAEzF,MAAM,CAAC0F,WAAY;AAC7C;AACA,yCAAyCjF,GAAG,CAACkF,MAAM,CAACC,GAAG,CAACC,OAAO,IAAI,SAAU;AAC7E;AACA;AACA;AACA,wCAAwCjE,UAAU,CAACmC,MAAM,CAAC+B,UAAU,CAACP,KAAK,CACtCQ,KAAK,IAAK,WAAUA,KAAM,EAC9B,CAAE;AAClC;AACA;AACA;AACA;QACgB;MACJ,CAAC,CAAC;MAEF,OAAO;QACH,GAAGrE,MAAM;QACTE;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,OAAO,IAAAoE,wCAAmB,EAACvF,GAAG,CAAC;AACnC,CAAC;AAACwF,OAAA,CAAA1F,oBAAA,GAAAA,oBAAA","ignoreList":[]}
+{"version":3,"names":["aws","_interopRequireWildcard","require","pulumi","_pulumi2","_utils","_createAppBucket","_customDomain","_withServiceManifest","_","createReactPulumiApp","projectAppParams","app","createPulumiApp","name","path","folder","config","program","pulumiResourceNamePrefix","getParam","onResource","resource","startsWith","core","addModule","CoreOutput","ApiOutput","addHandler","bucket","createPrivateAppBucket","cloudfront","addResource","Distribution","enabled","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","opts","ignoreChanges","domains","applyCustomDomain","addOutput","output","id","addDomainsUrlsOutputs","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","tagResources","WbyAppName","WbyProjectName","String","process","env","WbyEnvironment","dynamodb","TableItem","tableName","primaryDynamodbTableName","hashKey","primaryDynamodbTableHashKey","rangeKey","primaryDynamodbTableRangeKey","apply","key","item","interpolate","params","run","variant","domainName","value","withServiceManifest","exports"],"sources":["createReactPulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport { createPulumiApp, PulumiAppParam, PulumiAppParamCallback } from \"@webiny/pulumi\";\nimport { addDomainsUrlsOutputs, tagResources } from \"~/utils\";\nimport { createPrivateAppBucket } from \"../createAppBucket\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { withServiceManifest } from \"~/utils/withServiceManifest\";\nimport { ApiOutput, CoreOutput } from \"~/apps\";\n\nexport type ReactPulumiApp = ReturnType<typeof createReactPulumiApp>;\n\nexport interface CreateReactPulumiAppParams {\n    /**\n     * A name of the app, e.g., \"user-area\"\n     */\n    name: string;\n\n    /**\n     * A folder where the app is located, e.g., \"apps/user-area\"\n     */\n    folder: string;\n\n    /** Custom domain configuration */\n    domains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: ReactPulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport const createReactPulumiApp = (projectAppParams: CreateReactPulumiAppParams) => {\n    const app = createPulumiApp({\n        name: projectAppParams.name,\n        path: projectAppParams.folder,\n        config: projectAppParams,\n        program: async app => {\n            const pulumiResourceNamePrefix = app.getParam(\n                projectAppParams.pulumiResourceNamePrefix\n            );\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            const { name } = projectAppParams;\n\n            // Register core output as a module available for all other modules\n            const core = app.addModule(CoreOutput);\n            app.addModule(ApiOutput);\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            if (projectAppParams.pulumi) {\n                app.addHandler(() => {\n                    return projectAppParams.pulumi!(app as unknown as ReactPulumiApp);\n                });\n            }\n\n            const bucket = createPrivateAppBucket(app, `${name}-app`);\n\n            const cloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: `${name}-app-cdn`,\n                config: {\n                    enabled: true,\n                    waitForDeployment: false,\n                    origins: [bucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: bucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: false\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 600,\n                        maxTtl: 600\n                    },\n                    priceClass: \"PriceClass_100\",\n                    customErrorResponses: [\n                        { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                    ],\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                },\n                opts: {\n                    // We are ignoring changes to the \"staging\" property. This is because of the following.\n                    // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change\n                    // with how Cloudfront distributions are deployed, where Pulumi now also controls the new\n                    // `staging` property.\n                    // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is\n                    // that, because this property did not exist before, it will always be considered as a change\n                    // upon deployment.\n                    // We might think this is fine, but, the problem is that a change in this property causes\n                    // a full replacement of the Cloudfront distribution, which is not acceptable. Especially\n                    // if a custom domain has already been associated with the distribution. This then would\n                    // require the user to disassociate the domain, wait for the distribution to be replaced,\n                    // and then re-associate the domain. This is not a good experience.\n                    ignoreChanges: [\"staging\"]\n                }\n            });\n\n            const domains = app.getParam(projectAppParams.domains);\n            if (domains) {\n                applyCustomDomain(cloudfront, domains);\n            }\n\n            app.addOutput(\"appStorage\", bucket.bucket.output.id);\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: cloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontAppDomain\",\n                        distributionUrl: \"cloudfrontAppUrl\",\n                        usedDomain: \"appDomain\",\n                        usedUrl: \"appUrl\"\n                    }\n                });\n            });\n\n            tagResources({\n                WbyAppName: name,\n                WbyProjectName: String(process.env[\"WEBINY_PROJECT_NAME\"]),\n                WbyEnvironment: String(process.env[\"WEBINY_ENV\"])\n            });\n\n            /**\n             * We need to store the appUrl to the admin settings item in the dynamodb\n             */\n            app.addResource(aws.dynamodb.TableItem, {\n                name: \"adminSettings\",\n                config: {\n                    tableName: core.primaryDynamodbTableName,\n                    hashKey: core.primaryDynamodbTableHashKey,\n                    rangeKey: pulumi\n                        .output(core.primaryDynamodbTableRangeKey)\n                        .apply(key => key || \"SK\"),\n                    item: pulumi.interpolate`{\n                          \"PK\": {\"S\": \"ADMIN#SETTINGS\"},\n                          \"SK\": {\"S\": \"${app.params.run.variant || \"default\"}\"},\n                          \"data\": {\n                            \"M\": {\n                              \"appUrl\": {\n                                \"S\": \"${cloudfront.output.domainName.apply(\n                                    value => `https://${value}`\n                                )}\"\n                              }\n                            }\n                          }\n                        }`\n                }\n            });\n\n            return {\n                ...bucket,\n                cloudfront\n            };\n        }\n    });\n\n    return withServiceManifest(app);\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,MAAA,GAAAH,OAAA;AACA,IAAAI,gBAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,oBAAA,GAAAN,OAAA;AACA,IAAAO,CAAA,GAAAP,OAAA;AAqCO,MAAMQ,oBAAoB,GAAIC,gBAA4C,IAAK;EAClF,MAAMC,GAAG,GAAG,IAAAC,wBAAe,EAAC;IACxBC,IAAI,EAAEH,gBAAgB,CAACG,IAAI;IAC3BC,IAAI,EAAEJ,gBAAgB,CAACK,MAAM;IAC7BC,MAAM,EAAEN,gBAAgB;IACxBO,OAAO,EAAE,MAAMN,GAAG,IAAI;MAClB,MAAMO,wBAAwB,GAAGP,GAAG,CAACQ,QAAQ,CACzCT,gBAAgB,CAACQ,wBACrB,CAAC;MACD,IAAIA,wBAAwB,EAAE;QAC1BP,GAAG,CAACS,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACR,IAAI,CAACS,UAAU,CAACJ,wBAAwB,CAAC,EAAE;YACrDG,QAAQ,CAACR,IAAI,GAAI,GAAEK,wBAAyB,GAAEG,QAAQ,CAACR,IAAK,EAAC;UACjE;QACJ,CAAC,CAAC;MACN;MAEA,MAAM;QAAEA;MAAK,CAAC,GAAGH,gBAAgB;;MAEjC;MACA,MAAMa,IAAI,GAAGZ,GAAG,CAACa,SAAS,CAACC,YAAU,CAAC;MACtCd,GAAG,CAACa,SAAS,CAACE,WAAS,CAAC;;MAExB;MACA;MACA,IAAIhB,gBAAgB,CAACR,MAAM,EAAE;QACzBS,GAAG,CAACgB,UAAU,CAAC,MAAM;UACjB,OAAOjB,gBAAgB,CAACR,MAAM,CAAES,GAAgC,CAAC;QACrE,CAAC,CAAC;MACN;MAEA,MAAMiB,MAAM,GAAG,IAAAC,uCAAsB,EAAClB,GAAG,EAAG,GAAEE,IAAK,MAAK,CAAC;MAEzD,MAAMiB,UAAU,GAAGnB,GAAG,CAACoB,WAAW,CAAChC,GAAG,CAAC+B,UAAU,CAACE,YAAY,EAAE;QAC5DnB,IAAI,EAAG,GAAEA,IAAK,UAAS;QACvBG,MAAM,EAAE;UACJiB,OAAO,EAAE,IAAI;UACbC,iBAAiB,EAAE,KAAK;UACxBC,OAAO,EAAE,CAACP,MAAM,CAACQ,MAAM,CAAC;UACxBC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEZ,MAAM,CAACQ,MAAM,CAACK,QAAQ;YACtCC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,GAAG;YACfC,MAAM,EAAE;UACZ,CAAC;UACDC,UAAU,EAAE,gBAAgB;UAC5BC,oBAAoB,EAAE,CAClB;YAAEC,SAAS,EAAE,GAAG;YAAEC,YAAY,EAAE,GAAG;YAAEC,gBAAgB,EAAE;UAAc,CAAC,CACzE;UACDC,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ,CAAC;QACDC,IAAI,EAAE;UACF;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACAC,aAAa,EAAE,CAAC,SAAS;QAC7B;MACJ,CAAC,CAAC;MAEF,MAAMC,OAAO,GAAGrD,GAAG,CAACQ,QAAQ,CAACT,gBAAgB,CAACsD,OAAO,CAAC;MACtD,IAAIA,OAAO,EAAE;QACT,IAAAC,+BAAiB,EAACnC,UAAU,EAAEkC,OAAO,CAAC;MAC1C;MAEArD,GAAG,CAACuD,SAAS,CAAC,YAAY,EAAEtC,MAAM,CAACA,MAAM,CAACuC,MAAM,CAACC,EAAE,CAAC;MAEpDzD,GAAG,CAACgB,UAAU,CAAC,MAAM;QACjB,IAAA0C,4BAAqB,EAAC;UAClB1D,GAAG;UACH2D,sBAAsB,EAAExC,UAAU;UAClCyC,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEF,IAAAC,mBAAY,EAAC;QACTC,UAAU,EAAEhE,IAAI;QAChBiE,cAAc,EAAEC,MAAM,CAACC,OAAO,CAACC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1DC,cAAc,EAAEH,MAAM,CAACC,OAAO,CAACC,GAAG,CAAC,YAAY,CAAC;MACpD,CAAC,CAAC;;MAEF;AACZ;AACA;MACYtE,GAAG,CAACoB,WAAW,CAAChC,GAAG,CAACoF,QAAQ,CAACC,SAAS,EAAE;QACpCvE,IAAI,EAAE,eAAe;QACrBG,MAAM,EAAE;UACJqE,SAAS,EAAE9D,IAAI,CAAC+D,wBAAwB;UACxCC,OAAO,EAAEhE,IAAI,CAACiE,2BAA2B;UACzCC,QAAQ,EAAEvF,MAAM,CACXiE,MAAM,CAAC5C,IAAI,CAACmE,4BAA4B,CAAC,CACzCC,KAAK,CAACC,GAAG,IAAIA,GAAG,IAAI,IAAI,CAAC;UAC9BC,IAAI,EAAE3F,MAAM,CAAC4F,WAAY;AAC7C;AACA,yCAAyCnF,GAAG,CAACoF,MAAM,CAACC,GAAG,CAACC,OAAO,IAAI,SAAU;AAC7E;AACA;AACA;AACA,wCAAwCnE,UAAU,CAACqC,MAAM,CAAC+B,UAAU,CAACP,KAAK,CACtCQ,KAAK,IAAK,WAAUA,KAAM,EAC9B,CAAE;AAClC;AACA;AACA;AACA;QACgB;MACJ,CAAC,CAAC;MAEF,OAAO;QACH,GAAGvE,MAAM;QACTE;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,OAAO,IAAAsE,wCAAmB,EAACzF,GAAG,CAAC;AACnC,CAAC;AAAC0F,OAAA,CAAA5F,oBAAA,GAAAA,oBAAA","ignoreList":[]}

package/apps/website/createWebsitePulumiApp.js

@@ -91,6 +91,21 @@ const createWebsitePulumiApp = (projectAppParams = {}) => {
           viewerCertificate: {
             cloudfrontDefaultCertificate: true
           }
+        },
+        opts: {
+          // We are ignoring changes to the "staging" property. This is because of the following.
+          // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change
+          // with how Cloudfront distributions are deployed, where Pulumi now also controls the new
+          // `staging` property.
+          // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is
+          // that, because this property did not exist before, it will always be considered as a change
+          // upon deployment.
+          // We might think this is fine, but, the problem is that a change in this property causes
+          // a full replacement of the Cloudfront distribution, which is not acceptable. Especially
+          // if a custom domain has already been associated with the distribution. This then would
+          // require the user to disassociate the domain, wait for the distribution to be replaced,
+          // and then re-associate the domain. This is not a good experience.
+          ignoreChanges: ["staging"]
         }
       });
       const deliveryBucket = (0, _createAppBucket.createPrivateAppBucket)(app, "delivery");
@@ -171,6 +186,10 @@ const createWebsitePulumiApp = (projectAppParams = {}) => {
           viewerCertificate: {
             cloudfrontDefaultCertificate: true
           }
+        },
+        opts: {
+          // Check the comment in the `appCloudfront` resource above for more info.
+          ignoreChanges: ["staging"]
         }
       });
       const prerendering = (0, _WebsitePrerendering.createPrerenderingService)(app, {

package/apps/website/createWebsitePulumiApp.js.map

@@ -1 +1 @@
-{"version":3,"names":["pulumi","_interopRequireWildcard","require","aws","_fs","_interopRequireDefault","_pulumi2","_createAppBucket","_customDomain","_WebsitePrerendering","_","_utils","_tenantRouter","_withServiceManifest","_constants","createWebsitePulumiApp","projectAppParams","baseApp","createPulumiApp","name","path","config","program","app","pulumiResourceNamePrefix","getParam","onResource","resource","startsWith","addHandler","productionEnvironments","params","create","DEFAULT_PROD_ENV_NAMES","isProduction","includes","run","env","core","addModule","CoreOutput","ApiOutput","vpcEnabled","vpc","VpcConfig","enabled","appBucket","createPrivateAppBucket","appCloudfront","addResource","cloudfront","Distribution","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","deliveryBucket","viewerRequest","Function","runtime","publish","code","fs","readFileSync","__dirname","deliveryCloudfront","originRequestPolicyId","functionAssociations","functionArn","output","arn","eventType","orderedCacheBehaviors","headers","pathPattern","prerendering","createPrerenderingService","dbTableName","primaryDynamodbTableName","dbTableHashKey","primaryDynamodbTableHashKey","dbTableRangeKey","primaryDynamodbTableRangeKey","appUrl","interpolate","domainName","deliveryUrl","bucket","cloudfrontId","id","domains","applyCustomDomain","previewDomains","process","WCP_PROJECT_ENVIRONMENT","WEBINY_MULTI_TENANCY","originLambda","applyTenantRouter","addOutputs","websiteRouterOriginRequestFunction","appId","appStorage","deliveryId","deliveryStorage","addDomainsUrlsOutputs","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","tagResources","WbyProjectName","String","WbyEnvironment","preview","delivery","withServiceManifest","withCommonLambdaEnvVariables","resources","addServiceManifest","manifest","distributionId","bucketDomainName","bucketRegionalDomainName","exports"],"sources":["createWebsitePulumiApp.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport fs from \"fs\";\nimport { createPulumiApp, PulumiAppParamCallback, PulumiAppParam } from \"@webiny/pulumi\";\nimport { createPrivateAppBucket } from \"../createAppBucket\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { createPrerenderingService } from \"./WebsitePrerendering\";\nimport { CoreOutput, ApiOutput, VpcConfig } from \"~/apps\";\nimport { addDomainsUrlsOutputs, tagResources, withCommonLambdaEnvVariables } from \"~/utils\";\nimport { applyTenantRouter } from \"~/apps/tenantRouter\";\nimport { withServiceManifest } from \"~/utils/withServiceManifest\";\nimport { DEFAULT_PROD_ENV_NAMES } from \"~/constants\";\n\nexport type WebsitePulumiApp = ReturnType<typeof createWebsitePulumiApp>;\n\nexport interface CreateWebsitePulumiAppParams {\n    /**\n     * Custom domain(s) configuration.\n     */\n    domains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Custom preview domain(s) configuration.\n     */\n    previewDomains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Enables or disables VPC for the API.\n     * For VPC to work you also have to enable it in the `core` application.\n     */\n    vpc?: PulumiAppParam<boolean | undefined>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: WebsitePulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport const createWebsitePulumiApp = (projectAppParams: CreateWebsitePulumiAppParams = {}) => {\n    const baseApp = createPulumiApp({\n        name: \"website\",\n        path: \"apps/website\",\n        config: projectAppParams,\n        program: async app => {\n            const pulumiResourceNamePrefix = app.getParam(\n                projectAppParams.pulumiResourceNamePrefix\n            );\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            if (projectAppParams.pulumi) {\n                app.addHandler(() => {\n                    return projectAppParams.pulumi!(app as WebsitePulumiApp);\n                });\n            }\n\n            const productionEnvironments =\n                app.params.create.productionEnvironments || DEFAULT_PROD_ENV_NAMES;\n            const isProduction = productionEnvironments.includes(app.params.run.env);\n\n            // Register core and api output as a module, to be available to all other modules.\n            const core = app.addModule(CoreOutput);\n            app.addModule(ApiOutput);\n\n            // Register VPC config module to be available to other modules.\n            const vpcEnabled = app.getParam(projectAppParams?.vpc) ?? isProduction;\n            app.addModule(VpcConfig, { enabled: vpcEnabled });\n\n            const appBucket = createPrivateAppBucket(app, \"app\");\n\n            const appCloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: \"app\",\n                config: {\n                    enabled: true,\n                    waitForDeployment: true,\n                    origins: [appBucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: appBucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: false\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 0\n                    },\n                    priceClass: \"PriceClass_100\",\n                    customErrorResponses: [\n                        { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                    ],\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                }\n            });\n\n            const deliveryBucket = createPrivateAppBucket(app, \"delivery\");\n\n            /**\n             * We need to have a Cloudfront Function to perform a simple request rewrite, so the request always includes\n             * an \"/index.html\". This is necessary because our buckets are not \"website\" buckets, and we need to\n             * have an exact object key when requesting page paths.\n             */\n            const viewerRequest = app.addResource(aws.cloudfront.Function, {\n                name: \"cfViewerRequest\",\n                config: {\n                    runtime: \"cloudfront-js-1.0\",\n                    publish: true,\n                    code: fs.readFileSync(__dirname + `/deliveryViewerRequest.js`, \"utf8\")\n                }\n            });\n\n            const deliveryCloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: \"delivery\",\n                config: {\n                    enabled: true,\n                    waitForDeployment: true,\n                    origins: [deliveryBucket.origin, appBucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: deliveryBucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        originRequestPolicyId: \"\",\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 30,\n                        maxTtl: 30,\n                        functionAssociations: [\n                            { functionArn: viewerRequest.output.arn, eventType: \"viewer-request\" }\n                        ]\n                    },\n                    orderedCacheBehaviors: [\n                        {\n                            compress: true,\n                            allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                            cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                            forwardedValues: {\n                                cookies: {\n                                    forward: \"none\"\n                                },\n                                headers: [],\n                                queryString: false\n                            },\n                            pathPattern: \"/static/*\",\n                            viewerProtocolPolicy: \"allow-all\",\n                            targetOriginId: appBucket.origin.originId,\n                            // MinTTL <= DefaultTTL <= MaxTTL\n                            minTtl: 0,\n                            defaultTtl: 2592000, // 30 days\n                            maxTtl: 2592000\n                        }\n                    ],\n                    customErrorResponses: [\n                        {\n                            errorCode: 404,\n                            responseCode: 404,\n                            responsePagePath: \"/_NOT_FOUND_PAGE_/index.html\"\n                        }\n                    ],\n                    priceClass: \"PriceClass_100\",\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                }\n            });\n\n            const prerendering = createPrerenderingService(app, {\n                dbTableName: core.primaryDynamodbTableName,\n                dbTableHashKey: core.primaryDynamodbTableHashKey,\n                dbTableRangeKey: core.primaryDynamodbTableRangeKey,\n                appUrl: pulumi.interpolate`https://${appCloudfront.output.domainName}`,\n                deliveryUrl: pulumi.interpolate`https://${deliveryCloudfront.output.domainName}`,\n                bucket: deliveryBucket.bucket.output.bucket,\n                cloudfrontId: deliveryCloudfront.output.id\n            });\n\n            const domains = app.getParam(projectAppParams.domains);\n            if (domains) {\n                applyCustomDomain(deliveryCloudfront, domains);\n            }\n\n            const previewDomains = app.getParam(projectAppParams.previewDomains);\n            if (previewDomains) {\n                applyCustomDomain(appCloudfront, previewDomains);\n            }\n\n            if (\n                process.env.WCP_PROJECT_ENVIRONMENT ||\n                process.env.WEBINY_MULTI_TENANCY === \"true\"\n            ) {\n                const { originLambda } = applyTenantRouter(app, deliveryCloudfront);\n\n                app.addHandler(() => {\n                    app.addOutputs({\n                        websiteRouterOriginRequestFunction: originLambda.output.name\n                    });\n                });\n            }\n\n            app.addOutputs({\n                // Cloudfront and S3 bucket used to host the single-page application (SPA). The URL of the distribution is mainly\n                // utilized by the Page Builder app's prerendering engine. Using this URL, it accesses the SPA and creates HTML snapshots.\n                // The files that are generated in that process are stored in the `deliveryStorage` S3 bucket further below.\n                appId: appCloudfront.output.id,\n                appStorage: appBucket.bucket.output.id,\n\n                // These are the Cloudfront and S3 bucket that will deliver static pages to the actual website visitors.\n                // The static HTML snapshots delivered from them still rely on the app's S3 bucket\n                // defined above, for serving static assets (JS, CSS, images).\n                deliveryId: deliveryCloudfront.output.id,\n                deliveryStorage: deliveryBucket.bucket.output.id\n            });\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: appCloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontAppDomain\",\n                        distributionUrl: \"cloudfrontAppUrl\",\n                        usedDomain: \"appDomain\",\n                        usedUrl: \"appUrl\"\n                    }\n                });\n\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: deliveryCloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontDeliveryDomain\",\n                        distributionUrl: \"cloudfrontDeliveryUrl\",\n                        usedDomain: \"deliveryDomain\",\n                        usedUrl: \"deliveryUrl\"\n                    }\n                });\n            });\n\n            tagResources({\n                WbyProjectName: String(process.env[\"WEBINY_PROJECT_NAME\"]),\n                WbyEnvironment: String(process.env[\"WEBINY_ENV\"])\n            });\n\n            return {\n                prerendering,\n\n                // \"preview\" and \"app\" are the same.\n                // We introduced \"preview\" just because it's the word we use when talking about\n                // Page Builder and \"previewing\" pages. In other words, the \"preview\" property\n                // contains all resources related to serving page previews, unlike \"delivery\",\n                // which is used to serve published pages to actual website visitors.\n                // The \"app\" property was still left here just for backwards compatibility.\n                preview: {\n                    ...appBucket,\n                    cloudfront: appCloudfront\n                },\n                app: {\n                    ...appBucket,\n                    cloudfront: appCloudfront\n                },\n\n                delivery: {\n                    ...deliveryBucket,\n                    cloudfront: deliveryCloudfront\n                }\n            };\n        }\n    });\n\n    const app = withServiceManifest(withCommonLambdaEnvVariables(baseApp));\n\n    app.addHandler(() => {\n        const preview = baseApp.resources.preview;\n        const delivery = baseApp.resources.delivery;\n\n        app.addServiceManifest({\n            name: \"website\",\n            manifest: {\n                preview: {\n                    cloudfront: {\n                        distributionId: preview.cloudfront.output.id,\n                        domainName: preview.cloudfront.output.domainName\n                    },\n                    bucket: {\n                        name: preview.bucket.output.id,\n                        arn: preview.bucket.output.arn,\n                        bucketDomainName: preview.bucket.output.bucketDomainName,\n                        bucketRegionalDomainName: preview.bucket.output.bucketRegionalDomainName\n                    }\n                },\n                delivery: {\n                    cloudfront: {\n                        distributionId: delivery.cloudfront.output.id,\n                        domainName: delivery.cloudfront.output.domainName\n                    },\n                    bucket: {\n                        name: delivery.bucket.output.id,\n                        arn: delivery.bucket.output.arn,\n                        bucketDomainName: delivery.bucket.output.bucketDomainName,\n                        bucketRegionalDomainName: delivery.bucket.output.bucketRegionalDomainName\n                    }\n                }\n            }\n        });\n    });\n\n    return app;\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,GAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,gBAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,oBAAA,GAAAP,OAAA;AACA,IAAAQ,CAAA,GAAAR,OAAA;AACA,IAAAS,MAAA,GAAAT,OAAA;AACA,IAAAU,aAAA,GAAAV,OAAA;AACA,IAAAW,oBAAA,GAAAX,OAAA;AACA,IAAAY,UAAA,GAAAZ,OAAA;AAwCO,MAAMa,sBAAsB,GAAGA,CAACC,gBAA8C,GAAG,CAAC,CAAC,KAAK;EAC3F,MAAMC,OAAO,GAAG,IAAAC,wBAAe,EAAC;IAC5BC,IAAI,EAAE,SAAS;IACfC,IAAI,EAAE,cAAc;IACpBC,MAAM,EAAEL,gBAAgB;IACxBM,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,wBAAwB,GAAGD,GAAG,CAACE,QAAQ,CACzCT,gBAAgB,CAACQ,wBACrB,CAAC;MACD,IAAIA,wBAAwB,EAAE;QAC1BD,GAAG,CAACG,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACR,IAAI,CAACS,UAAU,CAACJ,wBAAwB,CAAC,EAAE;YACrDG,QAAQ,CAACR,IAAI,GAAI,GAAEK,wBAAyB,GAAEG,QAAQ,CAACR,IAAK,EAAC;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACA;MACA,IAAIH,gBAAgB,CAAChB,MAAM,EAAE;QACzBuB,GAAG,CAACM,UAAU,CAAC,MAAM;UACjB,OAAOb,gBAAgB,CAAChB,MAAM,CAAEuB,GAAuB,CAAC;QAC5D,CAAC,CAAC;MACN;MAEA,MAAMO,sBAAsB,GACxBP,GAAG,CAACQ,MAAM,CAACC,MAAM,CAACF,sBAAsB,IAAIG,iCAAsB;MACtE,MAAMC,YAAY,GAAGJ,sBAAsB,CAACK,QAAQ,CAACZ,GAAG,CAACQ,MAAM,CAACK,GAAG,CAACC,GAAG,CAAC;;MAExE;MACA,MAAMC,IAAI,GAAGf,GAAG,CAACgB,SAAS,CAACC,YAAU,CAAC;MACtCjB,GAAG,CAACgB,SAAS,CAACE,WAAS,CAAC;;MAExB;MACA,MAAMC,UAAU,GAAGnB,GAAG,CAACE,QAAQ,CAACT,gBAAgB,EAAE2B,GAAG,CAAC,IAAIT,YAAY;MACtEX,GAAG,CAACgB,SAAS,CAACK,WAAS,EAAE;QAAEC,OAAO,EAAEH;MAAW,CAAC,CAAC;MAEjD,MAAMI,SAAS,GAAG,IAAAC,uCAAsB,EAACxB,GAAG,EAAE,KAAK,CAAC;MAEpD,MAAMyB,aAAa,GAAGzB,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACC,YAAY,EAAE;QAC/DhC,IAAI,EAAE,KAAK;QACXE,MAAM,EAAE;UACJwB,OAAO,EAAE,IAAI;UACbO,iBAAiB,EAAE,IAAI;UACvBC,OAAO,EAAE,CAACP,SAAS,CAACQ,MAAM,CAAC;UAC3BC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEZ,SAAS,CAACQ,MAAM,CAACK,QAAQ;YACzCC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,CAAC;YACbC,MAAM,EAAE;UACZ,CAAC;UACDC,UAAU,EAAE,gBAAgB;UAC5BC,oBAAoB,EAAE,CAClB;YAAEC,SAAS,EAAE,GAAG;YAAEC,YAAY,EAAE,GAAG;YAAEC,gBAAgB,EAAE;UAAc,CAAC,CACzE;UACDC,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ;MACJ,CAAC,CAAC;MAEF,MAAMC,cAAc,GAAG,IAAAjC,uCAAsB,EAACxB,GAAG,EAAE,UAAU,CAAC;;MAE9D;AACZ;AACA;AACA;AACA;MACY,MAAM0D,aAAa,GAAG1D,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACgC,QAAQ,EAAE;QAC3D/D,IAAI,EAAE,iBAAiB;QACvBE,MAAM,EAAE;UACJ8D,OAAO,EAAE,mBAAmB;UAC5BC,OAAO,EAAE,IAAI;UACbC,IAAI,EAAEC,WAAE,CAACC,YAAY,CAACC,SAAS,GAAI,2BAA0B,EAAE,MAAM;QACzE;MACJ,CAAC,CAAC;MAEF,MAAMC,kBAAkB,GAAGlE,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACC,YAAY,EAAE;QACpEhC,IAAI,EAAE,UAAU;QAChBE,MAAM,EAAE;UACJwB,OAAO,EAAE,IAAI;UACbO,iBAAiB,EAAE,IAAI;UACvBC,OAAO,EAAE,CAAC2B,cAAc,CAAC1B,MAAM,EAAER,SAAS,CAACQ,MAAM,CAAC;UAClDC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEsB,cAAc,CAAC1B,MAAM,CAACK,QAAQ;YAC9CC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzC4B,qBAAqB,EAAE,EAAE;YACzB3B,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,EAAE;YACdC,MAAM,EAAE,EAAE;YACVsB,oBAAoB,EAAE,CAClB;cAAEC,WAAW,EAAEX,aAAa,CAACY,MAAM,CAACC,GAAG;cAAEC,SAAS,EAAE;YAAiB,CAAC;UAE9E,CAAC;UACDC,qBAAqB,EAAE,CACnB;YACIvC,QAAQ,EAAE,IAAI;YACdI,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBACLC,OAAO,EAAE;cACb,CAAC;cACDgC,OAAO,EAAE,EAAE;cACX/B,WAAW,EAAE;YACjB,CAAC;YACDgC,WAAW,EAAE,WAAW;YACxBtC,oBAAoB,EAAE,WAAW;YACjCF,cAAc,EAAEZ,SAAS,CAACQ,MAAM,CAACK,QAAQ;YACzC;YACAQ,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,OAAO;YAAE;YACrBC,MAAM,EAAE;UACZ,CAAC,CACJ;UACDE,oBAAoB,EAAE,CAClB;YACIC,SAAS,EAAE,GAAG;YACdC,YAAY,EAAE,GAAG;YACjBC,gBAAgB,EAAE;UACtB,CAAC,CACJ;UACDJ,UAAU,EAAE,gBAAgB;UAC5BK,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ;MACJ,CAAC,CAAC;MAEF,MAAMoB,YAAY,GAAG,IAAAC,8CAAyB,EAAC7E,GAAG,EAAE;QAChD8E,WAAW,EAAE/D,IAAI,CAACgE,wBAAwB;QAC1CC,cAAc,EAAEjE,IAAI,CAACkE,2BAA2B;QAChDC,eAAe,EAAEnE,IAAI,CAACoE,4BAA4B;QAClDC,MAAM,EAAE3G,MAAM,CAAC4G,WAAY,WAAU5D,aAAa,CAAC6C,MAAM,CAACgB,UAAW,EAAC;QACtEC,WAAW,EAAE9G,MAAM,CAAC4G,WAAY,WAAUnB,kBAAkB,CAACI,MAAM,CAACgB,UAAW,EAAC;QAChFE,MAAM,EAAE/B,cAAc,CAAC+B,MAAM,CAAClB,MAAM,CAACkB,MAAM;QAC3CC,YAAY,EAAEvB,kBAAkB,CAACI,MAAM,CAACoB;MAC5C,CAAC,CAAC;MAEF,MAAMC,OAAO,GAAG3F,GAAG,CAACE,QAAQ,CAACT,gBAAgB,CAACkG,OAAO,CAAC;MACtD,IAAIA,OAAO,EAAE;QACT,IAAAC,+BAAiB,EAAC1B,kBAAkB,EAAEyB,OAAO,CAAC;MAClD;MAEA,MAAME,cAAc,GAAG7F,GAAG,CAACE,QAAQ,CAACT,gBAAgB,CAACoG,cAAc,CAAC;MACpE,IAAIA,cAAc,EAAE;QAChB,IAAAD,+BAAiB,EAACnE,aAAa,EAAEoE,cAAc,CAAC;MACpD;MAEA,IACIC,OAAO,CAAChF,GAAG,CAACiF,uBAAuB,IACnCD,OAAO,CAAChF,GAAG,CAACkF,oBAAoB,KAAK,MAAM,EAC7C;QACE,MAAM;UAAEC;QAAa,CAAC,GAAG,IAAAC,+BAAiB,EAAClG,GAAG,EAAEkE,kBAAkB,CAAC;QAEnElE,GAAG,CAACM,UAAU,CAAC,MAAM;UACjBN,GAAG,CAACmG,UAAU,CAAC;YACXC,kCAAkC,EAAEH,YAAY,CAAC3B,MAAM,CAAC1E;UAC5D,CAAC,CAAC;QACN,CAAC,CAAC;MACN;MAEAI,GAAG,CAACmG,UAAU,CAAC;QACX;QACA;QACA;QACAE,KAAK,EAAE5E,aAAa,CAAC6C,MAAM,CAACoB,EAAE;QAC9BY,UAAU,EAAE/E,SAAS,CAACiE,MAAM,CAAClB,MAAM,CAACoB,EAAE;QAEtC;QACA;QACA;QACAa,UAAU,EAAErC,kBAAkB,CAACI,MAAM,CAACoB,EAAE;QACxCc,eAAe,EAAE/C,cAAc,CAAC+B,MAAM,CAAClB,MAAM,CAACoB;MAClD,CAAC,CAAC;MAEF1F,GAAG,CAACM,UAAU,CAAC,MAAM;QACjB,IAAAmG,4BAAqB,EAAC;UAClBzG,GAAG;UACH0G,sBAAsB,EAAEjF,aAAa;UACrCkF,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;QAEF,IAAAN,4BAAqB,EAAC;UAClBzG,GAAG;UACH0G,sBAAsB,EAAExC,kBAAkB;UAC1CyC,GAAG,EAAE;YACDC,kBAAkB,EAAE,0BAA0B;YAC9CC,eAAe,EAAE,uBAAuB;YACxCC,UAAU,EAAE,gBAAgB;YAC5BC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEF,IAAAC,mBAAY,EAAC;QACTC,cAAc,EAAEC,MAAM,CAACpB,OAAO,CAAChF,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1DqG,cAAc,EAAED,MAAM,CAACpB,OAAO,CAAChF,GAAG,CAAC,YAAY,CAAC;MACpD,CAAC,CAAC;MAEF,OAAO;QACH8D,YAAY;QAEZ;QACA;QACA;QACA;QACA;QACA;QACAwC,OAAO,EAAE;UACL,GAAG7F,SAAS;UACZI,UAAU,EAAEF;QAChB,CAAC;QACDzB,GAAG,EAAE;UACD,GAAGuB,SAAS;UACZI,UAAU,EAAEF;QAChB,CAAC;QAED4F,QAAQ,EAAE;UACN,GAAG5D,cAAc;UACjB9B,UAAU,EAAEuC;QAChB;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,MAAMlE,GAAG,GAAG,IAAAsH,wCAAmB,EAAC,IAAAC,mCAA4B,EAAC7H,OAAO,CAAC,CAAC;EAEtEM,GAAG,CAACM,UAAU,CAAC,MAAM;IACjB,MAAM8G,OAAO,GAAG1H,OAAO,CAAC8H,SAAS,CAACJ,OAAO;IACzC,MAAMC,QAAQ,GAAG3H,OAAO,CAAC8H,SAAS,CAACH,QAAQ;IAE3CrH,GAAG,CAACyH,kBAAkB,CAAC;MACnB7H,IAAI,EAAE,SAAS;MACf8H,QAAQ,EAAE;QACNN,OAAO,EAAE;UACLzF,UAAU,EAAE;YACRgG,cAAc,EAAEP,OAAO,CAACzF,UAAU,CAAC2C,MAAM,CAACoB,EAAE;YAC5CJ,UAAU,EAAE8B,OAAO,CAACzF,UAAU,CAAC2C,MAAM,CAACgB;UAC1C,CAAC;UACDE,MAAM,EAAE;YACJ5F,IAAI,EAAEwH,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACoB,EAAE;YAC9BnB,GAAG,EAAE6C,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACC,GAAG;YAC9BqD,gBAAgB,EAAER,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACsD,gBAAgB;YACxDC,wBAAwB,EAAET,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACuD;UACpD;QACJ,CAAC;QACDR,QAAQ,EAAE;UACN1F,UAAU,EAAE;YACRgG,cAAc,EAAEN,QAAQ,CAAC1F,UAAU,CAAC2C,MAAM,CAACoB,EAAE;YAC7CJ,UAAU,EAAE+B,QAAQ,CAAC1F,UAAU,CAAC2C,MAAM,CAACgB;UAC3C,CAAC;UACDE,MAAM,EAAE;YACJ5F,IAAI,EAAEyH,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACoB,EAAE;YAC/BnB,GAAG,EAAE8C,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACC,GAAG;YAC/BqD,gBAAgB,EAAEP,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACsD,gBAAgB;YACzDC,wBAAwB,EAAER,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACuD;UACrD;QACJ;MACJ;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;EAEF,OAAO7H,GAAG;AACd,CAAC;AAAC8H,OAAA,CAAAtI,sBAAA,GAAAA,sBAAA","ignoreList":[]}
+{"version":3,"names":["pulumi","_interopRequireWildcard","require","aws","_fs","_interopRequireDefault","_pulumi2","_createAppBucket","_customDomain","_WebsitePrerendering","_","_utils","_tenantRouter","_withServiceManifest","_constants","createWebsitePulumiApp","projectAppParams","baseApp","createPulumiApp","name","path","config","program","app","pulumiResourceNamePrefix","getParam","onResource","resource","startsWith","addHandler","productionEnvironments","params","create","DEFAULT_PROD_ENV_NAMES","isProduction","includes","run","env","core","addModule","CoreOutput","ApiOutput","vpcEnabled","vpc","VpcConfig","enabled","appBucket","createPrivateAppBucket","appCloudfront","addResource","cloudfront","Distribution","waitForDeployment","origins","origin","defaultRootObject","defaultCacheBehavior","compress","targetOriginId","originId","viewerProtocolPolicy","allowedMethods","cachedMethods","forwardedValues","cookies","forward","queryString","minTtl","defaultTtl","maxTtl","priceClass","customErrorResponses","errorCode","responseCode","responsePagePath","restrictions","geoRestriction","restrictionType","viewerCertificate","cloudfrontDefaultCertificate","opts","ignoreChanges","deliveryBucket","viewerRequest","Function","runtime","publish","code","fs","readFileSync","__dirname","deliveryCloudfront","originRequestPolicyId","functionAssociations","functionArn","output","arn","eventType","orderedCacheBehaviors","headers","pathPattern","prerendering","createPrerenderingService","dbTableName","primaryDynamodbTableName","dbTableHashKey","primaryDynamodbTableHashKey","dbTableRangeKey","primaryDynamodbTableRangeKey","appUrl","interpolate","domainName","deliveryUrl","bucket","cloudfrontId","id","domains","applyCustomDomain","previewDomains","process","WCP_PROJECT_ENVIRONMENT","WEBINY_MULTI_TENANCY","originLambda","applyTenantRouter","addOutputs","websiteRouterOriginRequestFunction","appId","appStorage","deliveryId","deliveryStorage","addDomainsUrlsOutputs","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","tagResources","WbyProjectName","String","WbyEnvironment","preview","delivery","withServiceManifest","withCommonLambdaEnvVariables","resources","addServiceManifest","manifest","distributionId","bucketDomainName","bucketRegionalDomainName","exports"],"sources":["createWebsitePulumiApp.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport fs from \"fs\";\nimport { createPulumiApp, PulumiAppParamCallback, PulumiAppParam } from \"@webiny/pulumi\";\nimport { createPrivateAppBucket } from \"../createAppBucket\";\nimport { applyCustomDomain, CustomDomainParams } from \"../customDomain\";\nimport { createPrerenderingService } from \"./WebsitePrerendering\";\nimport { CoreOutput, ApiOutput, VpcConfig } from \"~/apps\";\nimport { addDomainsUrlsOutputs, tagResources, withCommonLambdaEnvVariables } from \"~/utils\";\nimport { applyTenantRouter } from \"~/apps/tenantRouter\";\nimport { withServiceManifest } from \"~/utils/withServiceManifest\";\nimport { DEFAULT_PROD_ENV_NAMES } from \"~/constants\";\n\nexport type WebsitePulumiApp = ReturnType<typeof createWebsitePulumiApp>;\n\nexport interface CreateWebsitePulumiAppParams {\n    /**\n     * Custom domain(s) configuration.\n     */\n    domains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Custom preview domain(s) configuration.\n     */\n    previewDomains?: PulumiAppParamCallback<CustomDomainParams>;\n\n    /**\n     * Enables or disables VPC for the API.\n     * For VPC to work you also have to enable it in the `core` application.\n     */\n    vpc?: PulumiAppParam<boolean | undefined>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: WebsitePulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport const createWebsitePulumiApp = (projectAppParams: CreateWebsitePulumiAppParams = {}) => {\n    const baseApp = createPulumiApp({\n        name: \"website\",\n        path: \"apps/website\",\n        config: projectAppParams,\n        program: async app => {\n            const pulumiResourceNamePrefix = app.getParam(\n                projectAppParams.pulumiResourceNamePrefix\n            );\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            if (projectAppParams.pulumi) {\n                app.addHandler(() => {\n                    return projectAppParams.pulumi!(app as WebsitePulumiApp);\n                });\n            }\n\n            const productionEnvironments =\n                app.params.create.productionEnvironments || DEFAULT_PROD_ENV_NAMES;\n            const isProduction = productionEnvironments.includes(app.params.run.env);\n\n            // Register core and api output as a module, to be available to all other modules.\n            const core = app.addModule(CoreOutput);\n            app.addModule(ApiOutput);\n\n            // Register VPC config module to be available to other modules.\n            const vpcEnabled = app.getParam(projectAppParams?.vpc) ?? isProduction;\n            app.addModule(VpcConfig, { enabled: vpcEnabled });\n\n            const appBucket = createPrivateAppBucket(app, \"app\");\n\n            const appCloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: \"app\",\n                config: {\n                    enabled: true,\n                    waitForDeployment: true,\n                    origins: [appBucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: appBucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: false\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 0,\n                        maxTtl: 0\n                    },\n                    priceClass: \"PriceClass_100\",\n                    customErrorResponses: [\n                        { errorCode: 404, responseCode: 404, responsePagePath: \"/index.html\" }\n                    ],\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                },\n                opts: {\n                    // We are ignoring changes to the \"staging\" property. This is because of the following.\n                    // With the 5.41.0 release of Webiny, we also upgraded Pulumi to v6. This introduced a change\n                    // with how Cloudfront distributions are deployed, where Pulumi now also controls the new\n                    // `staging` property.\n                    // If not set, Pulumi will default it to `false`. Which is fine, but, the problem is\n                    // that, because this property did not exist before, it will always be considered as a change\n                    // upon deployment.\n                    // We might think this is fine, but, the problem is that a change in this property causes\n                    // a full replacement of the Cloudfront distribution, which is not acceptable. Especially\n                    // if a custom domain has already been associated with the distribution. This then would\n                    // require the user to disassociate the domain, wait for the distribution to be replaced,\n                    // and then re-associate the domain. This is not a good experience.\n                    ignoreChanges: [\"staging\"]\n                }\n            });\n\n            const deliveryBucket = createPrivateAppBucket(app, \"delivery\");\n\n            /**\n             * We need to have a Cloudfront Function to perform a simple request rewrite, so the request always includes\n             * an \"/index.html\". This is necessary because our buckets are not \"website\" buckets, and we need to\n             * have an exact object key when requesting page paths.\n             */\n            const viewerRequest = app.addResource(aws.cloudfront.Function, {\n                name: \"cfViewerRequest\",\n                config: {\n                    runtime: \"cloudfront-js-1.0\",\n                    publish: true,\n                    code: fs.readFileSync(__dirname + `/deliveryViewerRequest.js`, \"utf8\")\n                }\n            });\n\n            const deliveryCloudfront = app.addResource(aws.cloudfront.Distribution, {\n                name: \"delivery\",\n                config: {\n                    enabled: true,\n                    waitForDeployment: true,\n                    origins: [deliveryBucket.origin, appBucket.origin],\n                    defaultRootObject: \"index.html\",\n                    defaultCacheBehavior: {\n                        compress: true,\n                        targetOriginId: deliveryBucket.origin.originId,\n                        viewerProtocolPolicy: \"redirect-to-https\",\n                        allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                        originRequestPolicyId: \"\",\n                        forwardedValues: {\n                            cookies: { forward: \"none\" },\n                            queryString: true\n                        },\n                        // MinTTL <= DefaultTTL <= MaxTTL\n                        minTtl: 0,\n                        defaultTtl: 30,\n                        maxTtl: 30,\n                        functionAssociations: [\n                            { functionArn: viewerRequest.output.arn, eventType: \"viewer-request\" }\n                        ]\n                    },\n                    orderedCacheBehaviors: [\n                        {\n                            compress: true,\n                            allowedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                            cachedMethods: [\"GET\", \"HEAD\", \"OPTIONS\"],\n                            forwardedValues: {\n                                cookies: {\n                                    forward: \"none\"\n                                },\n                                headers: [],\n                                queryString: false\n                            },\n                            pathPattern: \"/static/*\",\n                            viewerProtocolPolicy: \"allow-all\",\n                            targetOriginId: appBucket.origin.originId,\n                            // MinTTL <= DefaultTTL <= MaxTTL\n                            minTtl: 0,\n                            defaultTtl: 2592000, // 30 days\n                            maxTtl: 2592000\n                        }\n                    ],\n                    customErrorResponses: [\n                        {\n                            errorCode: 404,\n                            responseCode: 404,\n                            responsePagePath: \"/_NOT_FOUND_PAGE_/index.html\"\n                        }\n                    ],\n                    priceClass: \"PriceClass_100\",\n                    restrictions: {\n                        geoRestriction: {\n                            restrictionType: \"none\"\n                        }\n                    },\n                    viewerCertificate: {\n                        cloudfrontDefaultCertificate: true\n                    }\n                },\n                opts: {\n                    // Check the comment in the `appCloudfront` resource above for more info.\n                    ignoreChanges: [\"staging\"]\n                }\n            });\n\n            const prerendering = createPrerenderingService(app, {\n                dbTableName: core.primaryDynamodbTableName,\n                dbTableHashKey: core.primaryDynamodbTableHashKey,\n                dbTableRangeKey: core.primaryDynamodbTableRangeKey,\n                appUrl: pulumi.interpolate`https://${appCloudfront.output.domainName}`,\n                deliveryUrl: pulumi.interpolate`https://${deliveryCloudfront.output.domainName}`,\n                bucket: deliveryBucket.bucket.output.bucket,\n                cloudfrontId: deliveryCloudfront.output.id\n            });\n\n            const domains = app.getParam(projectAppParams.domains);\n            if (domains) {\n                applyCustomDomain(deliveryCloudfront, domains);\n            }\n\n            const previewDomains = app.getParam(projectAppParams.previewDomains);\n            if (previewDomains) {\n                applyCustomDomain(appCloudfront, previewDomains);\n            }\n\n            if (\n                process.env.WCP_PROJECT_ENVIRONMENT ||\n                process.env.WEBINY_MULTI_TENANCY === \"true\"\n            ) {\n                const { originLambda } = applyTenantRouter(app, deliveryCloudfront);\n\n                app.addHandler(() => {\n                    app.addOutputs({\n                        websiteRouterOriginRequestFunction: originLambda.output.name\n                    });\n                });\n            }\n\n            app.addOutputs({\n                // Cloudfront and S3 bucket used to host the single-page application (SPA). The URL of the distribution is mainly\n                // utilized by the Page Builder app's prerendering engine. Using this URL, it accesses the SPA and creates HTML snapshots.\n                // The files that are generated in that process are stored in the `deliveryStorage` S3 bucket further below.\n                appId: appCloudfront.output.id,\n                appStorage: appBucket.bucket.output.id,\n\n                // These are the Cloudfront and S3 bucket that will deliver static pages to the actual website visitors.\n                // The static HTML snapshots delivered from them still rely on the app's S3 bucket\n                // defined above, for serving static assets (JS, CSS, images).\n                deliveryId: deliveryCloudfront.output.id,\n                deliveryStorage: deliveryBucket.bucket.output.id\n            });\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: appCloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontAppDomain\",\n                        distributionUrl: \"cloudfrontAppUrl\",\n                        usedDomain: \"appDomain\",\n                        usedUrl: \"appUrl\"\n                    }\n                });\n\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: deliveryCloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontDeliveryDomain\",\n                        distributionUrl: \"cloudfrontDeliveryUrl\",\n                        usedDomain: \"deliveryDomain\",\n                        usedUrl: \"deliveryUrl\"\n                    }\n                });\n            });\n\n            tagResources({\n                WbyProjectName: String(process.env[\"WEBINY_PROJECT_NAME\"]),\n                WbyEnvironment: String(process.env[\"WEBINY_ENV\"])\n            });\n\n            return {\n                prerendering,\n\n                // \"preview\" and \"app\" are the same.\n                // We introduced \"preview\" just because it's the word we use when talking about\n                // Page Builder and \"previewing\" pages. In other words, the \"preview\" property\n                // contains all resources related to serving page previews, unlike \"delivery\",\n                // which is used to serve published pages to actual website visitors.\n                // The \"app\" property was still left here just for backwards compatibility.\n                preview: {\n                    ...appBucket,\n                    cloudfront: appCloudfront\n                },\n                app: {\n                    ...appBucket,\n                    cloudfront: appCloudfront\n                },\n\n                delivery: {\n                    ...deliveryBucket,\n                    cloudfront: deliveryCloudfront\n                }\n            };\n        }\n    });\n\n    const app = withServiceManifest(withCommonLambdaEnvVariables(baseApp));\n\n    app.addHandler(() => {\n        const preview = baseApp.resources.preview;\n        const delivery = baseApp.resources.delivery;\n\n        app.addServiceManifest({\n            name: \"website\",\n            manifest: {\n                preview: {\n                    cloudfront: {\n                        distributionId: preview.cloudfront.output.id,\n                        domainName: preview.cloudfront.output.domainName\n                    },\n                    bucket: {\n                        name: preview.bucket.output.id,\n                        arn: preview.bucket.output.arn,\n                        bucketDomainName: preview.bucket.output.bucketDomainName,\n                        bucketRegionalDomainName: preview.bucket.output.bucketRegionalDomainName\n                    }\n                },\n                delivery: {\n                    cloudfront: {\n                        distributionId: delivery.cloudfront.output.id,\n                        domainName: delivery.cloudfront.output.domainName\n                    },\n                    bucket: {\n                        name: delivery.bucket.output.id,\n                        arn: delivery.bucket.output.arn,\n                        bucketDomainName: delivery.bucket.output.bucketDomainName,\n                        bucketRegionalDomainName: delivery.bucket.output.bucketRegionalDomainName\n                    }\n                }\n            }\n        });\n    });\n\n    return app;\n};\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,GAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,gBAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,oBAAA,GAAAP,OAAA;AACA,IAAAQ,CAAA,GAAAR,OAAA;AACA,IAAAS,MAAA,GAAAT,OAAA;AACA,IAAAU,aAAA,GAAAV,OAAA;AACA,IAAAW,oBAAA,GAAAX,OAAA;AACA,IAAAY,UAAA,GAAAZ,OAAA;AAwCO,MAAMa,sBAAsB,GAAGA,CAACC,gBAA8C,GAAG,CAAC,CAAC,KAAK;EAC3F,MAAMC,OAAO,GAAG,IAAAC,wBAAe,EAAC;IAC5BC,IAAI,EAAE,SAAS;IACfC,IAAI,EAAE,cAAc;IACpBC,MAAM,EAAEL,gBAAgB;IACxBM,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,wBAAwB,GAAGD,GAAG,CAACE,QAAQ,CACzCT,gBAAgB,CAACQ,wBACrB,CAAC;MACD,IAAIA,wBAAwB,EAAE;QAC1BD,GAAG,CAACG,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACR,IAAI,CAACS,UAAU,CAACJ,wBAAwB,CAAC,EAAE;YACrDG,QAAQ,CAACR,IAAI,GAAI,GAAEK,wBAAyB,GAAEG,QAAQ,CAACR,IAAK,EAAC;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACA;MACA,IAAIH,gBAAgB,CAAChB,MAAM,EAAE;QACzBuB,GAAG,CAACM,UAAU,CAAC,MAAM;UACjB,OAAOb,gBAAgB,CAAChB,MAAM,CAAEuB,GAAuB,CAAC;QAC5D,CAAC,CAAC;MACN;MAEA,MAAMO,sBAAsB,GACxBP,GAAG,CAACQ,MAAM,CAACC,MAAM,CAACF,sBAAsB,IAAIG,iCAAsB;MACtE,MAAMC,YAAY,GAAGJ,sBAAsB,CAACK,QAAQ,CAACZ,GAAG,CAACQ,MAAM,CAACK,GAAG,CAACC,GAAG,CAAC;;MAExE;MACA,MAAMC,IAAI,GAAGf,GAAG,CAACgB,SAAS,CAACC,YAAU,CAAC;MACtCjB,GAAG,CAACgB,SAAS,CAACE,WAAS,CAAC;;MAExB;MACA,MAAMC,UAAU,GAAGnB,GAAG,CAACE,QAAQ,CAACT,gBAAgB,EAAE2B,GAAG,CAAC,IAAIT,YAAY;MACtEX,GAAG,CAACgB,SAAS,CAACK,WAAS,EAAE;QAAEC,OAAO,EAAEH;MAAW,CAAC,CAAC;MAEjD,MAAMI,SAAS,GAAG,IAAAC,uCAAsB,EAACxB,GAAG,EAAE,KAAK,CAAC;MAEpD,MAAMyB,aAAa,GAAGzB,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACC,YAAY,EAAE;QAC/DhC,IAAI,EAAE,KAAK;QACXE,MAAM,EAAE;UACJwB,OAAO,EAAE,IAAI;UACbO,iBAAiB,EAAE,IAAI;UACvBC,OAAO,EAAE,CAACP,SAAS,CAACQ,MAAM,CAAC;UAC3BC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEZ,SAAS,CAACQ,MAAM,CAACK,QAAQ;YACzCC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,CAAC;YACbC,MAAM,EAAE;UACZ,CAAC;UACDC,UAAU,EAAE,gBAAgB;UAC5BC,oBAAoB,EAAE,CAClB;YAAEC,SAAS,EAAE,GAAG;YAAEC,YAAY,EAAE,GAAG;YAAEC,gBAAgB,EAAE;UAAc,CAAC,CACzE;UACDC,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ,CAAC;QACDC,IAAI,EAAE;UACF;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACAC,aAAa,EAAE,CAAC,SAAS;QAC7B;MACJ,CAAC,CAAC;MAEF,MAAMC,cAAc,GAAG,IAAAnC,uCAAsB,EAACxB,GAAG,EAAE,UAAU,CAAC;;MAE9D;AACZ;AACA;AACA;AACA;MACY,MAAM4D,aAAa,GAAG5D,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACkC,QAAQ,EAAE;QAC3DjE,IAAI,EAAE,iBAAiB;QACvBE,MAAM,EAAE;UACJgE,OAAO,EAAE,mBAAmB;UAC5BC,OAAO,EAAE,IAAI;UACbC,IAAI,EAAEC,WAAE,CAACC,YAAY,CAACC,SAAS,GAAI,2BAA0B,EAAE,MAAM;QACzE;MACJ,CAAC,CAAC;MAEF,MAAMC,kBAAkB,GAAGpE,GAAG,CAAC0B,WAAW,CAAC9C,GAAG,CAAC+C,UAAU,CAACC,YAAY,EAAE;QACpEhC,IAAI,EAAE,UAAU;QAChBE,MAAM,EAAE;UACJwB,OAAO,EAAE,IAAI;UACbO,iBAAiB,EAAE,IAAI;UACvBC,OAAO,EAAE,CAAC6B,cAAc,CAAC5B,MAAM,EAAER,SAAS,CAACQ,MAAM,CAAC;UAClDC,iBAAiB,EAAE,YAAY;UAC/BC,oBAAoB,EAAE;YAClBC,QAAQ,EAAE,IAAI;YACdC,cAAc,EAAEwB,cAAc,CAAC5B,MAAM,CAACK,QAAQ;YAC9CC,oBAAoB,EAAE,mBAAmB;YACzCC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzC8B,qBAAqB,EAAE,EAAE;YACzB7B,eAAe,EAAE;cACbC,OAAO,EAAE;gBAAEC,OAAO,EAAE;cAAO,CAAC;cAC5BC,WAAW,EAAE;YACjB,CAAC;YACD;YACAC,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,EAAE;YACdC,MAAM,EAAE,EAAE;YACVwB,oBAAoB,EAAE,CAClB;cAAEC,WAAW,EAAEX,aAAa,CAACY,MAAM,CAACC,GAAG;cAAEC,SAAS,EAAE;YAAiB,CAAC;UAE9E,CAAC;UACDC,qBAAqB,EAAE,CACnB;YACIzC,QAAQ,EAAE,IAAI;YACdI,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1CC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACzCC,eAAe,EAAE;cACbC,OAAO,EAAE;gBACLC,OAAO,EAAE;cACb,CAAC;cACDkC,OAAO,EAAE,EAAE;cACXjC,WAAW,EAAE;YACjB,CAAC;YACDkC,WAAW,EAAE,WAAW;YACxBxC,oBAAoB,EAAE,WAAW;YACjCF,cAAc,EAAEZ,SAAS,CAACQ,MAAM,CAACK,QAAQ;YACzC;YACAQ,MAAM,EAAE,CAAC;YACTC,UAAU,EAAE,OAAO;YAAE;YACrBC,MAAM,EAAE;UACZ,CAAC,CACJ;UACDE,oBAAoB,EAAE,CAClB;YACIC,SAAS,EAAE,GAAG;YACdC,YAAY,EAAE,GAAG;YACjBC,gBAAgB,EAAE;UACtB,CAAC,CACJ;UACDJ,UAAU,EAAE,gBAAgB;UAC5BK,YAAY,EAAE;YACVC,cAAc,EAAE;cACZC,eAAe,EAAE;YACrB;UACJ,CAAC;UACDC,iBAAiB,EAAE;YACfC,4BAA4B,EAAE;UAClC;QACJ,CAAC;QACDC,IAAI,EAAE;UACF;UACAC,aAAa,EAAE,CAAC,SAAS;QAC7B;MACJ,CAAC,CAAC;MAEF,MAAMoB,YAAY,GAAG,IAAAC,8CAAyB,EAAC/E,GAAG,EAAE;QAChDgF,WAAW,EAAEjE,IAAI,CAACkE,wBAAwB;QAC1CC,cAAc,EAAEnE,IAAI,CAACoE,2BAA2B;QAChDC,eAAe,EAAErE,IAAI,CAACsE,4BAA4B;QAClDC,MAAM,EAAE7G,MAAM,CAAC8G,WAAY,WAAU9D,aAAa,CAAC+C,MAAM,CAACgB,UAAW,EAAC;QACtEC,WAAW,EAAEhH,MAAM,CAAC8G,WAAY,WAAUnB,kBAAkB,CAACI,MAAM,CAACgB,UAAW,EAAC;QAChFE,MAAM,EAAE/B,cAAc,CAAC+B,MAAM,CAAClB,MAAM,CAACkB,MAAM;QAC3CC,YAAY,EAAEvB,kBAAkB,CAACI,MAAM,CAACoB;MAC5C,CAAC,CAAC;MAEF,MAAMC,OAAO,GAAG7F,GAAG,CAACE,QAAQ,CAACT,gBAAgB,CAACoG,OAAO,CAAC;MACtD,IAAIA,OAAO,EAAE;QACT,IAAAC,+BAAiB,EAAC1B,kBAAkB,EAAEyB,OAAO,CAAC;MAClD;MAEA,MAAME,cAAc,GAAG/F,GAAG,CAACE,QAAQ,CAACT,gBAAgB,CAACsG,cAAc,CAAC;MACpE,IAAIA,cAAc,EAAE;QAChB,IAAAD,+BAAiB,EAACrE,aAAa,EAAEsE,cAAc,CAAC;MACpD;MAEA,IACIC,OAAO,CAAClF,GAAG,CAACmF,uBAAuB,IACnCD,OAAO,CAAClF,GAAG,CAACoF,oBAAoB,KAAK,MAAM,EAC7C;QACE,MAAM;UAAEC;QAAa,CAAC,GAAG,IAAAC,+BAAiB,EAACpG,GAAG,EAAEoE,kBAAkB,CAAC;QAEnEpE,GAAG,CAACM,UAAU,CAAC,MAAM;UACjBN,GAAG,CAACqG,UAAU,CAAC;YACXC,kCAAkC,EAAEH,YAAY,CAAC3B,MAAM,CAAC5E;UAC5D,CAAC,CAAC;QACN,CAAC,CAAC;MACN;MAEAI,GAAG,CAACqG,UAAU,CAAC;QACX;QACA;QACA;QACAE,KAAK,EAAE9E,aAAa,CAAC+C,MAAM,CAACoB,EAAE;QAC9BY,UAAU,EAAEjF,SAAS,CAACmE,MAAM,CAAClB,MAAM,CAACoB,EAAE;QAEtC;QACA;QACA;QACAa,UAAU,EAAErC,kBAAkB,CAACI,MAAM,CAACoB,EAAE;QACxCc,eAAe,EAAE/C,cAAc,CAAC+B,MAAM,CAAClB,MAAM,CAACoB;MAClD,CAAC,CAAC;MAEF5F,GAAG,CAACM,UAAU,CAAC,MAAM;QACjB,IAAAqG,4BAAqB,EAAC;UAClB3G,GAAG;UACH4G,sBAAsB,EAAEnF,aAAa;UACrCoF,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;QAEF,IAAAN,4BAAqB,EAAC;UAClB3G,GAAG;UACH4G,sBAAsB,EAAExC,kBAAkB;UAC1CyC,GAAG,EAAE;YACDC,kBAAkB,EAAE,0BAA0B;YAC9CC,eAAe,EAAE,uBAAuB;YACxCC,UAAU,EAAE,gBAAgB;YAC5BC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MAEF,IAAAC,mBAAY,EAAC;QACTC,cAAc,EAAEC,MAAM,CAACpB,OAAO,CAAClF,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC1DuG,cAAc,EAAED,MAAM,CAACpB,OAAO,CAAClF,GAAG,CAAC,YAAY,CAAC;MACpD,CAAC,CAAC;MAEF,OAAO;QACHgE,YAAY;QAEZ;QACA;QACA;QACA;QACA;QACA;QACAwC,OAAO,EAAE;UACL,GAAG/F,SAAS;UACZI,UAAU,EAAEF;QAChB,CAAC;QACDzB,GAAG,EAAE;UACD,GAAGuB,SAAS;UACZI,UAAU,EAAEF;QAChB,CAAC;QAED8F,QAAQ,EAAE;UACN,GAAG5D,cAAc;UACjBhC,UAAU,EAAEyC;QAChB;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,MAAMpE,GAAG,GAAG,IAAAwH,wCAAmB,EAAC,IAAAC,mCAA4B,EAAC/H,OAAO,CAAC,CAAC;EAEtEM,GAAG,CAACM,UAAU,CAAC,MAAM;IACjB,MAAMgH,OAAO,GAAG5H,OAAO,CAACgI,SAAS,CAACJ,OAAO;IACzC,MAAMC,QAAQ,GAAG7H,OAAO,CAACgI,SAAS,CAACH,QAAQ;IAE3CvH,GAAG,CAAC2H,kBAAkB,CAAC;MACnB/H,IAAI,EAAE,SAAS;MACfgI,QAAQ,EAAE;QACNN,OAAO,EAAE;UACL3F,UAAU,EAAE;YACRkG,cAAc,EAAEP,OAAO,CAAC3F,UAAU,CAAC6C,MAAM,CAACoB,EAAE;YAC5CJ,UAAU,EAAE8B,OAAO,CAAC3F,UAAU,CAAC6C,MAAM,CAACgB;UAC1C,CAAC;UACDE,MAAM,EAAE;YACJ9F,IAAI,EAAE0H,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACoB,EAAE;YAC9BnB,GAAG,EAAE6C,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACC,GAAG;YAC9BqD,gBAAgB,EAAER,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACsD,gBAAgB;YACxDC,wBAAwB,EAAET,OAAO,CAAC5B,MAAM,CAAClB,MAAM,CAACuD;UACpD;QACJ,CAAC;QACDR,QAAQ,EAAE;UACN5F,UAAU,EAAE;YACRkG,cAAc,EAAEN,QAAQ,CAAC5F,UAAU,CAAC6C,MAAM,CAACoB,EAAE;YAC7CJ,UAAU,EAAE+B,QAAQ,CAAC5F,UAAU,CAAC6C,MAAM,CAACgB;UAC3C,CAAC;UACDE,MAAM,EAAE;YACJ9F,IAAI,EAAE2H,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACoB,EAAE;YAC/BnB,GAAG,EAAE8C,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACC,GAAG;YAC/BqD,gBAAgB,EAAEP,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACsD,gBAAgB;YACzDC,wBAAwB,EAAER,QAAQ,CAAC7B,MAAM,CAAClB,MAAM,CAACuD;UACrD;QACJ;MACJ;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;EAEF,OAAO/H,GAAG;AACd,CAAC;AAACgI,OAAA,CAAAxI,sBAAA,GAAAA,sBAAA","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@webiny/pulumi-aws",
-	"version": "5.40.6",
+	"version": "5.40.7-beta.0",
 	"repository": {
 		"type": "git",
 		"url": "https://github.com/webiny/webiny-js.git"
@@ -16,9 +16,9 @@
 		"@pulumi/aws": "^6.48.0",
 		"@pulumi/pulumi": "^3.128.0",
 		"@pulumi/random": "4.16.3",
-		"@webiny/aws-sdk": "5.40.6",
-		"@webiny/cli-plugin-deploy-pulumi": "5.40.6",
-		"@webiny/pulumi": "5.40.6",
+		"@webiny/aws-sdk": "5.40.7-beta.0",
+		"@webiny/cli-plugin-deploy-pulumi": "5.40.7-beta.0",
+		"@webiny/pulumi": "5.40.7-beta.0",
 		"form-data": "4.0.0",
 		"node-fetch": "2.7.0"
 	},
@@ -28,11 +28,11 @@
 		"@babel/preset-env": "7.24.3",
 		"@babel/preset-typescript": "7.24.1",
 		"@babel/runtime": "7.24.1",
-		"@webiny/api-page-builder": "5.40.6",
-		"@webiny/aws-layers": "5.40.6",
-		"@webiny/cli": "5.40.6",
-		"@webiny/feature-flags": "5.40.6",
-		"@webiny/project-utils": "5.40.6",
+		"@webiny/api-page-builder": "5.40.7-beta.0",
+		"@webiny/aws-layers": "5.40.7-beta.0",
+		"@webiny/cli": "5.40.7-beta.0",
+		"@webiny/feature-flags": "5.40.7-beta.0",
+		"@webiny/project-utils": "5.40.7-beta.0",
 		"chalk": "4.1.2",
 		"lodash": "4.17.21",
 		"mime": "2.6.0",
@@ -56,5 +56,5 @@
 			]
 		}
 	},
-	"gitHead": "f9da84b373e62f9f269599c4301e5e4418a98d51"
+	"gitHead": "7236a5d93457a1dda87e880de76d6d859d49f283"
 }