@xube/kit-aws-infrastructure 0.0.101 → 0.0.102

package/dist/helpers.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=helpers.d.ts.map

package/dist/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":""}

package/dist/helpers.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/index.d.ts

@@ -1,3 +1,9 @@
 export * from "./api/rest-api";
 export * from "./cognito/pool";
+export * from "./pipeline/constants";
+export * from "./pipeline/helpers";
+export * from "./pipeline/source";
+export * from "./pipeline/xube-build-step";
+export * from "./pipeline/xube-deploy-stage";
+export * from "./pipeline/xube-pipeline";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAE/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC"}

package/dist/index.js

@@ -16,3 +16,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./api/rest-api"), exports);
 __exportStar(require("./cognito/pool"), exports);
+__exportStar(require("./pipeline/constants"), exports);
+__exportStar(require("./pipeline/helpers"), exports);
+__exportStar(require("./pipeline/source"), exports);
+__exportStar(require("./pipeline/xube-build-step"), exports);
+__exportStar(require("./pipeline/xube-deploy-stage"), exports);
+__exportStar(require("./pipeline/xube-pipeline"), exports);

package/dist/pipeline/constants.d.ts

@@ -0,0 +1,5 @@
+export declare const DEFAULT_CDK_OUTPUT_PATH = "./services/cdk.out";
+export declare const NPM_AUTH_TOKEN_ENV_VAR_NAME = "NPM_AUTH_TOKEN";
+export declare const DEFAULT_INSTALL_COMMANDS: string[];
+export declare const DEFAULT_BUILD_COMMANDS: string[];
+//# sourceMappingURL=constants.d.ts.map

package/dist/pipeline/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/pipeline/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAE5D,eAAO,MAAM,wBAAwB,UAsBpC,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAKlC,CAAA"}

package/dist/pipeline/constants.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_BUILD_COMMANDS = exports.DEFAULT_INSTALL_COMMANDS = exports.NPM_AUTH_TOKEN_ENV_VAR_NAME = exports.DEFAULT_CDK_OUTPUT_PATH = void 0;
+exports.DEFAULT_CDK_OUTPUT_PATH = "./services/cdk.out";
+exports.NPM_AUTH_TOKEN_ENV_VAR_NAME = "NPM_AUTH_TOKEN";
+exports.DEFAULT_INSTALL_COMMANDS = [
+    "n 18",
+    "corepack enable",
+    "yarn set version 3.6.1",
+    "node --version",
+    "npm --version",
+    "yarn --version",
+    'yarn config set "nodeLinker" "node-modules"',
+    'yarn config set "npmScopes.inside-labs.npmRegistryServer" "https://npm.pkg.github.com"',
+    'yarn config set "npmScopes.inside-labs.npmPublishRegistry" "https://npm.pkg.github.com"',
+    'yarn config set "npmScopes.inside-labs.npmAlwaysAuth" "true"',
+    `yarn config set "npmScopes.inside-labs.npmAuthToken" "\${${exports.NPM_AUTH_TOKEN_ENV_VAR_NAME}}"`,
+    "yarn plugin import workspace-tools",
+    // "yarn install --immutable",
+    "YARN_ENABLE_IMMUTABLE_INSTALLS=false yarn install",
+];
+exports.DEFAULT_BUILD_COMMANDS = [
+    "yarn build",
+    "yarn test",
+    "cd services",
+    "npx cdk synth",
+];

package/dist/pipeline/helpers.d.ts

@@ -0,0 +1,3 @@
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+export declare const getPipelineArn: (env: XubeEnvironment, name: string) => string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/pipeline/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/pipeline/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,eAAO,MAAM,cAAc,QACpB,eAAe,QACd,MAAM,KACX,MAC0D,CAAC"}

package/dist/pipeline/helpers.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPipelineArn = void 0;
+const getPipelineArn = (env, name) => `arn:aws:codepipeline:${env.region}:${env.account}:${name}`;
+exports.getPipelineArn = getPipelineArn;

package/dist/pipeline/source.d.ts

@@ -0,0 +1,16 @@
+import { Construct } from "constructs";
+import { CodePipelineSource } from "aws-cdk-lib/pipelines";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { CfnConnection } from "aws-cdk-lib/aws-codeconnections";
+interface XubeBuildGithubSourceProps extends XubeEnvironment {
+    codeStarConnection?: CfnConnection;
+    org: string;
+    repo: string;
+    branch: string;
+}
+export declare class XubeBuildSource extends Construct {
+    pipelineSource: CodePipelineSource;
+    constructor(scope: Construct, id: string, props: XubeBuildGithubSourceProps);
+}
+export {};
+//# sourceMappingURL=source.d.ts.map

package/dist/pipeline/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../src/pipeline/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,UAAU,0BAA2B,SAAQ,eAAe;IAC1D,kBAAkB,CAAC,EAAE,aAAa,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,cAAc,EAAE,kBAAkB,CAAC;gBACvB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B;CAkB5E"}

package/dist/pipeline/source.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XubeBuildSource = void 0;
+const constructs_1 = require("constructs");
+const pipelines_1 = require("aws-cdk-lib/pipelines");
+const aws_codeconnections_1 = require("aws-cdk-lib/aws-codeconnections");
+class XubeBuildSource extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const codeStarConnection = props.codeStarConnection ??
+            new aws_codeconnections_1.CfnConnection(scope, id + "codestar-connection", {
+                providerType: "GitHub",
+                connectionName: "xube-conns",
+            });
+        this.pipelineSource = pipelines_1.CodePipelineSource.connection(`${props.org}/${props.repo}`, props.branch, {
+            connectionArn: codeStarConnection.attrConnectionArn,
+        });
+    }
+}
+exports.XubeBuildSource = XubeBuildSource;

package/dist/pipeline/xube-build-step.d.ts

@@ -0,0 +1,39 @@
+import { Construct } from "constructs";
+import { CodeBuildStep, CodePipelineSource } from "aws-cdk-lib/pipelines";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+/**
+ * In order for the Build to Run there needs to be a secret value added to secrets manager containing the github auth token for inside labs
+ * with the name: "il-github-auth-token"
+ *
+ * @param repository
+ * The repository name for the domain that owns this pipeline.
+ *
+ * @param installCommands
+ * The commands that must be run in preparation for build commands.
+ *
+ * @param commands
+ * The commands that must be run after install has been completed.
+ *
+ * @param branchName
+ * The branch name to trigger this pipeline deployment.
+ *
+ * default: the deploymentEnvironment
+ *
+ * @param cdkOutPath
+ * Location of the cdk output when synth is completed (generally in cdk.out in the cdk directory)
+ */
+interface XubeBuildStepProps extends XubeEnvironment {
+    repository: string;
+    installCommands?: string[];
+    commands?: string[];
+    branchName?: string;
+    cdkOutPath?: string;
+    pipelineSource: CodePipelineSource;
+    name: string;
+}
+export declare class XubeBuildStep extends Construct {
+    synthCodeBuildStep: CodeBuildStep;
+    constructor(scope: Construct, id: string, props: XubeBuildStepProps);
+}
+export {};
+//# sourceMappingURL=xube-build-step.d.ts.map

package/dist/pipeline/xube-build-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xube-build-step.d.ts","sourceRoot":"","sources":["../../src/pipeline/xube-build-step.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAY1E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,UAAU,kBAAmB,SAAQ,eAAe;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,kBAAkB,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,aAAc,SAAQ,SAAS;IAC1C,kBAAkB,EAAE,aAAa,CAAC;gBACtB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;CAkCpE"}

package/dist/pipeline/xube-build-step.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XubeBuildStep = void 0;
+const constructs_1 = require("constructs");
+const pipelines_1 = require("aws-cdk-lib/pipelines");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const constants_1 = require("./constants");
+class XubeBuildStep extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.synthCodeBuildStep = new pipelines_1.CodeBuildStep(id + "synth-step", {
+            input: props.pipelineSource,
+            env: {},
+            role: new aws_iam_1.Role(scope, id + "-build-synth-role", {
+                assumedBy: new aws_iam_1.ServicePrincipal("codebuild.amazonaws.com"),
+                managedPolicies: [
+                    new aws_iam_1.ManagedPolicy(scope, id + "-build-synth-policy", {
+                        managedPolicyName: id + '-policy',
+                        statements: [
+                            new aws_iam_1.PolicyStatement({
+                                actions: ["cognito-idp:*"],
+                                effect: aws_iam_1.Effect.ALLOW,
+                                resources: ["*"],
+                            }),
+                        ],
+                    }),
+                ],
+            }),
+            buildEnvironment: {
+                environmentVariables: {},
+            },
+            installCommands: props.installCommands ?? constants_1.DEFAULT_INSTALL_COMMANDS,
+            commands: props.commands ?? constants_1.DEFAULT_BUILD_COMMANDS,
+            primaryOutputDirectory: props.cdkOutPath ?? constants_1.DEFAULT_CDK_OUTPUT_PATH,
+        });
+    }
+}
+exports.XubeBuildStep = XubeBuildStep;

package/dist/pipeline/xube-deploy-stage.d.ts

@@ -0,0 +1,13 @@
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { Stack, Stage } from "aws-cdk-lib";
+import { Construct } from "constructs";
+interface XubeDeploymentStageProps extends XubeEnvironment {
+    generateStacks: ((stage: Stage, props: XubeEnvironment) => Stack)[];
+    stageName: string;
+}
+export declare class XubeDeploymentStage extends Stage {
+    readonly stacks: Stack[];
+    constructor(scope: Construct, id: string, props: XubeDeploymentStageProps);
+}
+export {};
+//# sourceMappingURL=xube-deploy-stage.d.ts.map

package/dist/pipeline/xube-deploy-stage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xube-deploy-stage.d.ts","sourceRoot":"","sources":["../../src/pipeline/xube-deploy-stage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,UAAU,wBAAyB,SAAQ,eAAe;IACxD,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,KAAK,KAAK,CAAC,EAAE,CAAC;IACpE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAgB,MAAM,EAAE,KAAK,EAAE,CAAM;gBAEzB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB;CAU1E"}

package/dist/pipeline/xube-deploy-stage.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XubeDeploymentStage = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+class XubeDeploymentStage extends aws_cdk_lib_1.Stage {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            env: props,
+            stageName: props.stageName,
+        });
+        this.stacks = [];
+        for (const stackGenerator of props.generateStacks) {
+            this.stacks.push(stackGenerator(this, props));
+        }
+    }
+}
+exports.XubeDeploymentStage = XubeDeploymentStage;

package/dist/pipeline/xube-pipeline.d.ts

@@ -0,0 +1,14 @@
+import { Construct } from "constructs";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { XubeBuildStep } from "./xube-build-step";
+import { XubeDeploymentStage } from "./xube-deploy-stage";
+interface XubeDeployPipelineProps extends XubeEnvironment {
+    name: string;
+    xubeBuildStep: XubeBuildStep;
+    xubeDeployStage: XubeDeploymentStage;
+}
+export declare class XubeDeployPipeline extends Construct {
+    constructor(scope: Construct, id: string, props: XubeDeployPipelineProps);
+}
+export {};
+//# sourceMappingURL=xube-pipeline.d.ts.map

package/dist/pipeline/xube-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xube-pipeline.d.ts","sourceRoot":"","sources":["../../src/pipeline/xube-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,UAAU,uBAAwB,SAAQ,eAAe;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB;CAYzE"}

package/dist/pipeline/xube-pipeline.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XubeDeployPipeline = void 0;
+const constructs_1 = require("constructs");
+const pipelines_1 = require("aws-cdk-lib/pipelines");
+class XubeDeployPipeline extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const pipeline = new pipelines_1.CodePipeline(this, id + "Pipeline", {
+            pipelineName: props.name,
+            synth: props.xubeBuildStep.synthCodeBuildStep,
+            dockerEnabledForSynth: true,
+            dockerEnabledForSelfMutation: true,
+        });
+        pipeline.addStage(props.xubeDeployStage);
+    }
+}
+exports.XubeDeployPipeline = XubeDeployPipeline;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xube/kit-aws-infrastructure",
-  "version": "0.0.101",
+  "version": "0.0.102",
   "description": "",
   "main": "dist/index.js",
   "scripts": {
@@ -17,12 +17,13 @@
   },
   "homepage": "https://github.com/XubeLtd/dev-kit#readme",
   "devDependencies": {
-    "@xube/kit-build": "^0.0.101",
+    "@xube/kit-build": "^0.0.102",
     "aws-cdk": "^2.159.1"
   },
   "dependencies": {
-    "@xube/kit-log": "^0.0.101",
-    "@xube/kit-request": "^0.0.101",
+    "@xube/kit-aws-schema": "^0.0.102",
+    "@xube/kit-log": "^0.0.102",
+    "@xube/kit-request": "^0.0.102",
     "aws-cdk-lib": "^2.159.1",
     "aws-lambda": "^1.0.7",
     "constructs": "^10.3.0"

package/src/helpers.ts

@@ -0,0 +1 @@
+import { XubeEnvironment } from "@xube/kit-aws-schema";

package/src/index.ts

@@ -1,2 +1,9 @@
 export * from "./api/rest-api";
-export * from "./cognito/pool"
+export * from "./cognito/pool";
+
+export * from "./pipeline/constants";
+export * from "./pipeline/helpers";
+export * from "./pipeline/source";
+export * from "./pipeline/xube-build-step";
+export * from "./pipeline/xube-deploy-stage";
+export * from "./pipeline/xube-pipeline";

package/src/pipeline/constants.ts

@@ -0,0 +1,34 @@
+export const DEFAULT_CDK_OUTPUT_PATH = "./services/cdk.out";
+
+export const NPM_AUTH_TOKEN_ENV_VAR_NAME = "NPM_AUTH_TOKEN";
+
+export const DEFAULT_INSTALL_COMMANDS = [
+  "n 18",
+
+  "corepack enable",
+
+  "yarn set version 3.6.1",
+
+  "node --version",
+  "npm --version",
+  "yarn --version",
+
+  'yarn config set "nodeLinker" "node-modules"',
+
+  'yarn config set "npmScopes.inside-labs.npmRegistryServer" "https://npm.pkg.github.com"',
+  'yarn config set "npmScopes.inside-labs.npmPublishRegistry" "https://npm.pkg.github.com"',
+  'yarn config set "npmScopes.inside-labs.npmAlwaysAuth" "true"',
+  `yarn config set "npmScopes.inside-labs.npmAuthToken" "\${${NPM_AUTH_TOKEN_ENV_VAR_NAME}}"`,
+
+  "yarn plugin import workspace-tools",
+
+  // "yarn install --immutable",
+  "YARN_ENABLE_IMMUTABLE_INSTALLS=false yarn install",
+];
+
+export const DEFAULT_BUILD_COMMANDS = [
+  "yarn build",
+  "yarn test",
+  "cd services",
+  "npx cdk synth",
+]

package/src/pipeline/helpers.ts

@@ -0,0 +1,7 @@
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+
+export const getPipelineArn = (
+  env: XubeEnvironment,
+  name: string
+): string =>
+  `arn:aws:codepipeline:${env.region}:${env.account}:${name}`;

package/src/pipeline/source.ts

@@ -0,0 +1,33 @@
+import { Construct } from "constructs";
+import { CodePipelineSource } from "aws-cdk-lib/pipelines";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { CfnConnection } from "aws-cdk-lib/aws-codeconnections";
+
+interface XubeBuildGithubSourceProps extends XubeEnvironment {
+  codeStarConnection?: CfnConnection;
+  org: string;
+  repo: string;
+  branch: string;
+}
+
+export class XubeBuildSource extends Construct {
+  pipelineSource: CodePipelineSource;
+  constructor(scope: Construct, id: string, props: XubeBuildGithubSourceProps) {
+    super(scope, id);
+
+    const codeStarConnection =
+      props.codeStarConnection ??
+      new CfnConnection(scope, id + "codestar-connection", {
+        providerType: "GitHub",
+        connectionName: "xube-conns",
+      });
+
+    this.pipelineSource = CodePipelineSource.connection(
+      `${props.org}/${props.repo}`,
+      props.branch,
+      {
+        connectionArn: codeStarConnection.attrConnectionArn,
+      }
+    );
+  }
+}

package/src/pipeline/xube-build-step.ts

@@ -0,0 +1,89 @@
+import { Construct } from "constructs";
+import { CodeBuildStep, CodePipelineSource } from "aws-cdk-lib/pipelines";
+import { aws_codestarconnections } from "aws-cdk-lib";
+import { Secret } from "aws-cdk-lib/aws-secretsmanager";
+import { BuildEnvironmentVariableType } from "aws-cdk-lib/aws-codebuild";
+import {
+  Effect,
+  ManagedPolicy,
+  PolicyStatement,
+  Role,
+  ServicePrincipal,
+} from "aws-cdk-lib/aws-iam";
+import { CustomPolicy } from "aws-cdk-lib/aws-config";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { CfnConnection } from "aws-cdk-lib/aws-codeconnections";
+import {
+  DEFAULT_BUILD_COMMANDS,
+  DEFAULT_CDK_OUTPUT_PATH,
+  DEFAULT_INSTALL_COMMANDS,
+} from "./constants";
+
+/**
+ * In order for the Build to Run there needs to be a secret value added to secrets manager containing the github auth token for inside labs
+ * with the name: "il-github-auth-token"
+ *
+ * @param repository
+ * The repository name for the domain that owns this pipeline.
+ *
+ * @param installCommands
+ * The commands that must be run in preparation for build commands.
+ *
+ * @param commands
+ * The commands that must be run after install has been completed.
+ *
+ * @param branchName
+ * The branch name to trigger this pipeline deployment.
+ *
+ * default: the deploymentEnvironment
+ *
+ * @param cdkOutPath
+ * Location of the cdk output when synth is completed (generally in cdk.out in the cdk directory)
+ */
+interface XubeBuildStepProps extends XubeEnvironment {
+  repository: string;
+  installCommands?: string[];
+  commands?: string[];
+  branchName?: string;
+  cdkOutPath?: string;
+  pipelineSource: CodePipelineSource;
+  name: string;
+}
+
+export class XubeBuildStep extends Construct {
+  synthCodeBuildStep: CodeBuildStep;
+  constructor(scope: Construct, id: string, props: XubeBuildStepProps) {
+    super(scope, id);
+
+    this.synthCodeBuildStep = new CodeBuildStep(id + "synth-step", {
+      input: props.pipelineSource,
+      env: {},
+
+      role: new Role(scope, id + "-build-synth-role", {
+        assumedBy: new ServicePrincipal("codebuild.amazonaws.com"),
+        managedPolicies: [
+          new ManagedPolicy(
+            scope,
+            id + "-build-synth-policy",
+            {
+              managedPolicyName: id + '-policy',
+              statements: [
+                new PolicyStatement({
+                  actions: ["cognito-idp:*"],
+                  effect: Effect.ALLOW,
+                  resources: ["*"],
+                }),
+              ],
+            }
+          ),
+        ],
+      }),
+      buildEnvironment: {
+        environmentVariables: {},
+      },
+      installCommands: props.installCommands ?? DEFAULT_INSTALL_COMMANDS,
+      commands: props.commands ?? DEFAULT_BUILD_COMMANDS,
+      primaryOutputDirectory: props.cdkOutPath ?? DEFAULT_CDK_OUTPUT_PATH,
+    });
+  }
+}

package/src/pipeline/xube-deploy-stage.ts

@@ -0,0 +1,23 @@
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { Stack, Stage } from "aws-cdk-lib";
+import { Construct } from "constructs";
+
+interface XubeDeploymentStageProps extends XubeEnvironment {
+  generateStacks: ((stage: Stage, props: XubeEnvironment) => Stack)[];
+  stageName: string;
+}
+
+export class XubeDeploymentStage extends Stage {
+  public readonly stacks: Stack[] = [];
+
+  constructor(scope: Construct, id: string, props: XubeDeploymentStageProps) {
+    super(scope, id, {
+      env: props,
+      stageName: props.stageName,
+    });
+
+    for (const stackGenerator of props.generateStacks) {
+      this.stacks.push(stackGenerator(this, props));
+    }
+  }
+}

package/src/pipeline/xube-pipeline.ts

@@ -0,0 +1,27 @@
+import { Construct } from "constructs";
+import { CodePipeline } from "aws-cdk-lib/pipelines";
+import { pipelines } from "aws-cdk-lib";
+import { XubeEnvironment } from "@xube/kit-aws-schema";
+import { XubeBuildStep } from "./xube-build-step";
+import { XubeDeploymentStage } from "./xube-deploy-stage";
+
+interface XubeDeployPipelineProps extends XubeEnvironment {
+  name: string;
+  xubeBuildStep: XubeBuildStep;
+  xubeDeployStage: XubeDeploymentStage;
+}
+
+export class XubeDeployPipeline extends Construct {
+  constructor(scope: Construct, id: string, props: XubeDeployPipelineProps) {
+    super(scope, id);
+
+    const pipeline = new CodePipeline(this, id + "Pipeline", {
+      pipelineName: props.name,
+      synth: props.xubeBuildStep.synthCodeBuildStep,
+      dockerEnabledForSynth: true,
+      dockerEnabledForSelfMutation: true,
+    });
+
+    pipeline.addStage(props.xubeDeployStage);
+  }
+}