aws-cdk-lib 2.51.0 → 2.51.1

package/aws-cloudfront/lib/distribution.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LambdaEdgeEventType=exports.CachedMethods=exports.AllowedMethods=exports.SecurityPolicyProtocol=exports.SSLMethod=exports.OriginProtocolPolicy=exports.ViewerProtocolPolicy=exports.PriceClass=exports.HttpVersion=exports.Distribution=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),s3=require("../../aws-s3"),core_1=require("../../core"),cx_api_1=require("../../cx-api"),constructs_1=require("constructs"),cloudfront_generated_1=require("./cloudfront.generated"),cache_behavior_1=require("./private/cache-behavior");class Distribution extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.additionalBehaviors=[],this.boundOrigins=[],this.originGroups=[];try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_DistributionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Distribution),error}if(props.certificate){const certificateRegion=core_1.Stack.of(this).splitArn(props.certificate.certificateArn,core_1.ArnFormat.SLASH_RESOURCE_NAME).region;if(!core_1.Token.isUnresolved(certificateRegion)&&certificateRegion!=="us-east-1")throw new Error(`Distribution certificates must be in the us-east-1 region and the certificate you provided is in ${certificateRegion}.`);if((props.domainNames??[]).length===0)throw new Error("Must specify at least one domain name to use a certificate with a distribution")}const originId=this.addOrigin(props.defaultBehavior.origin);this.defaultBehavior=new cache_behavior_1.CacheBehavior(originId,{pathPattern:"*",...props.defaultBehavior}),props.additionalBehaviors&&Object.entries(props.additionalBehaviors).forEach(([pathPattern,behaviorOptions])=>{this.addBehavior(pathPattern,behaviorOptions.origin,behaviorOptions)}),this.certificate=props.certificate,this.errorResponses=props.errorResponses??[];const trimmedComment=props.comment&&props.comment.length>128?`${props.comment.slice(0,128-3)}...`:props.comment,distribution=new cloudfront_generated_1.CfnDistribution(this,"Resource",{distributionConfig:{enabled:props.enabled??!0,origins:core_1.Lazy.any({produce:()=>this.renderOrigins()}),originGroups:core_1.Lazy.any({produce:()=>this.renderOriginGroups()}),defaultCacheBehavior:this.defaultBehavior._renderBehavior(),aliases:props.domainNames,cacheBehaviors:core_1.Lazy.any({produce:()=>this.renderCacheBehaviors()}),comment:trimmedComment,customErrorResponses:this.renderErrorResponses(),defaultRootObject:props.defaultRootObject,httpVersion:props.httpVersion??HttpVersion.HTTP2,ipv6Enabled:props.enableIpv6??!0,logging:this.renderLogging(props),priceClass:props.priceClass??void 0,restrictions:this.renderRestrictions(props.geoRestriction),viewerCertificate:this.certificate?this.renderViewerCertificate(this.certificate,props.minimumProtocolVersion,props.sslSupportMethod):void 0,webAclId:props.webAclId}});this.domainName=distribution.attrDomainName,this.distributionDomainName=distribution.attrDomainName,this.distributionId=distribution.ref}static fromDistributionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_DistributionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromDistributionAttributes),error}return new class extends core_1.Resource{constructor(){super(scope,id),this.domainName=attrs.domainName,this.distributionDomainName=attrs.domainName,this.distributionId=attrs.distributionId}}}addBehavior(pathPattern,origin,behaviorOptions={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_IOrigin(origin),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_AddBehaviorOptions(behaviorOptions)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addBehavior),error}if(pathPattern==="*")throw new Error("Only the default behavior can have a path pattern of '*'");const originId=this.addOrigin(origin);this.additionalBehaviors.push(new cache_behavior_1.CacheBehavior(originId,{pathPattern,...behaviorOptions}))}addOrigin(origin,isFailoverOrigin=!1){const existingOrigin=this.boundOrigins.find(boundOrigin=>boundOrigin.origin===origin);if(existingOrigin)return existingOrigin.originGroupId??existingOrigin.originId;{const originIndex=this.boundOrigins.length+1,scope=new constructs_1.Construct(this,`Origin${originIndex}`),generatedId=core_1.Names.uniqueId(scope).slice(-128),originBindConfig=origin.bind(scope,{originId:generatedId}),originId=originBindConfig.originProperty?.id??generatedId,duplicateId=this.boundOrigins.find(boundOrigin=>boundOrigin.originProperty?.id===originBindConfig.originProperty?.id);if(duplicateId)throw new Error(`Origin with id ${duplicateId.originProperty?.id} already exists. OriginIds must be unique within a distribution`);if(!originBindConfig.failoverConfig)this.boundOrigins.push({origin,originId,...originBindConfig});else{if(isFailoverOrigin)throw new Error("An Origin cannot use an Origin with its own failover configuration as its fallback origin!");const groupIndex=this.originGroups.length+1,originGroupId=core_1.Names.uniqueId(new constructs_1.Construct(this,`OriginGroup${groupIndex}`)).slice(-128);this.boundOrigins.push({origin,originId,originGroupId,...originBindConfig});const failoverOriginId=this.addOrigin(originBindConfig.failoverConfig.failoverOrigin,!0);return this.addOriginGroup(originGroupId,originBindConfig.failoverConfig.statusCodes,originId,failoverOriginId),originGroupId}return originBindConfig.originProperty?.id??originId}}addOriginGroup(originGroupId,statusCodes,originId,failoverOriginId){if(statusCodes=statusCodes??[500,502,503,504],statusCodes.length===0)throw new Error("fallbackStatusCodes cannot be empty");this.originGroups.push({failoverCriteria:{statusCodes:{items:statusCodes,quantity:statusCodes.length}},id:originGroupId,members:{items:[{originId},{originId:failoverOriginId}],quantity:2}})}renderOrigins(){const renderedOrigins=[];return this.boundOrigins.forEach(boundOrigin=>{boundOrigin.originProperty&&renderedOrigins.push(boundOrigin.originProperty)}),renderedOrigins}renderOriginGroups(){return this.originGroups.length===0?void 0:{items:this.originGroups,quantity:this.originGroups.length}}renderCacheBehaviors(){if(this.additionalBehaviors.length!==0)return this.additionalBehaviors.map(behavior=>behavior._renderBehavior())}renderErrorResponses(){if(this.errorResponses.length!==0)return this.errorResponses.map(errorConfig=>{if(!errorConfig.responseHttpStatus&&!errorConfig.ttl&&!errorConfig.responsePagePath)throw new Error("A custom error response without either a 'responseHttpStatus', 'ttl' or 'responsePagePath' is not valid.");return{errorCachingMinTtl:errorConfig.ttl?.toSeconds(),errorCode:errorConfig.httpStatus,responseCode:errorConfig.responsePagePath?errorConfig.responseHttpStatus??errorConfig.httpStatus:errorConfig.responseHttpStatus,responsePagePath:errorConfig.responsePagePath}})}renderLogging(props){if(!props.enableLogging&&!props.logBucket)return;if(props.enableLogging===!1&&props.logBucket)throw new Error("Explicitly disabled logging but provided a logging bucket.");return{bucket:(props.logBucket??new s3.Bucket(this,"LoggingBucket",{encryption:s3.BucketEncryption.S3_MANAGED})).bucketRegionalDomainName,includeCookies:props.logIncludesCookies,prefix:props.logFilePrefix}}renderRestrictions(geoRestriction){return geoRestriction?{geoRestriction:{restrictionType:geoRestriction.restrictionType,locations:geoRestriction.locations}}:void 0}renderViewerCertificate(certificate,minimumProtocolVersionProp,sslSupportMethodProp){const defaultVersion=core_1.FeatureFlags.of(this).isEnabled(cx_api_1.CLOUDFRONT_DEFAULT_SECURITY_POLICY_TLS_V1_2_2021)?SecurityPolicyProtocol.TLS_V1_2_2021:SecurityPolicyProtocol.TLS_V1_2_2019,minimumProtocolVersion=minimumProtocolVersionProp??defaultVersion,sslSupportMethod=sslSupportMethodProp??SSLMethod.SNI;return{acmCertificateArn:certificate.certificateArn,minimumProtocolVersion,sslSupportMethod}}}exports.Distribution=Distribution,_a=JSII_RTTI_SYMBOL_1,Distribution[_a]={fqn:"aws-cdk-lib.aws_cloudfront.Distribution",version:"2.51.0"};var HttpVersion;(function(HttpVersion2){HttpVersion2.HTTP1_1="http1.1",HttpVersion2.HTTP2="http2",HttpVersion2.HTTP2_AND_3="http2and3",HttpVersion2.HTTP3="http3"})(HttpVersion=exports.HttpVersion||(exports.HttpVersion={}));var PriceClass;(function(PriceClass2){PriceClass2.PRICE_CLASS_100="PriceClass_100",PriceClass2.PRICE_CLASS_200="PriceClass_200",PriceClass2.PRICE_CLASS_ALL="PriceClass_All"})(PriceClass=exports.PriceClass||(exports.PriceClass={}));var ViewerProtocolPolicy;(function(ViewerProtocolPolicy2){ViewerProtocolPolicy2.HTTPS_ONLY="https-only",ViewerProtocolPolicy2.REDIRECT_TO_HTTPS="redirect-to-https",ViewerProtocolPolicy2.ALLOW_ALL="allow-all"})(ViewerProtocolPolicy=exports.ViewerProtocolPolicy||(exports.ViewerProtocolPolicy={}));var OriginProtocolPolicy;(function(OriginProtocolPolicy2){OriginProtocolPolicy2.HTTP_ONLY="http-only",OriginProtocolPolicy2.MATCH_VIEWER="match-viewer",OriginProtocolPolicy2.HTTPS_ONLY="https-only"})(OriginProtocolPolicy=exports.OriginProtocolPolicy||(exports.OriginProtocolPolicy={}));var SSLMethod;(function(SSLMethod2){SSLMethod2.SNI="sni-only",SSLMethod2.VIP="vip"})(SSLMethod=exports.SSLMethod||(exports.SSLMethod={}));var SecurityPolicyProtocol;(function(SecurityPolicyProtocol2){SecurityPolicyProtocol2.SSL_V3="SSLv3",SecurityPolicyProtocol2.TLS_V1="TLSv1",SecurityPolicyProtocol2.TLS_V1_2016="TLSv1_2016",SecurityPolicyProtocol2.TLS_V1_1_2016="TLSv1.1_2016",SecurityPolicyProtocol2.TLS_V1_2_2018="TLSv1.2_2018",SecurityPolicyProtocol2.TLS_V1_2_2019="TLSv1.2_2019",SecurityPolicyProtocol2.TLS_V1_2_2021="TLSv1.2_2021"})(SecurityPolicyProtocol=exports.SecurityPolicyProtocol||(exports.SecurityPolicyProtocol={}));class AllowedMethods{constructor(methods){this.methods=methods}}exports.AllowedMethods=AllowedMethods,_b=JSII_RTTI_SYMBOL_1,AllowedMethods[_b]={fqn:"aws-cdk-lib.aws_cloudfront.AllowedMethods",version:"2.51.0"},AllowedMethods.ALLOW_GET_HEAD=new AllowedMethods(["GET","HEAD"]),AllowedMethods.ALLOW_GET_HEAD_OPTIONS=new AllowedMethods(["GET","HEAD","OPTIONS"]),AllowedMethods.ALLOW_ALL=new AllowedMethods(["GET","HEAD","OPTIONS","PUT","PATCH","POST","DELETE"]);class CachedMethods{constructor(methods){this.methods=methods}}exports.CachedMethods=CachedMethods,_c=JSII_RTTI_SYMBOL_1,CachedMethods[_c]={fqn:"aws-cdk-lib.aws_cloudfront.CachedMethods",version:"2.51.0"},CachedMethods.CACHE_GET_HEAD=new CachedMethods(["GET","HEAD"]),CachedMethods.CACHE_GET_HEAD_OPTIONS=new CachedMethods(["GET","HEAD","OPTIONS"]);var LambdaEdgeEventType;(function(LambdaEdgeEventType2){LambdaEdgeEventType2.ORIGIN_REQUEST="origin-request",LambdaEdgeEventType2.ORIGIN_RESPONSE="origin-response",LambdaEdgeEventType2.VIEWER_REQUEST="viewer-request",LambdaEdgeEventType2.VIEWER_RESPONSE="viewer-response"})(LambdaEdgeEventType=exports.LambdaEdgeEventType||(exports.LambdaEdgeEventType={}));
+"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LambdaEdgeEventType=exports.CachedMethods=exports.AllowedMethods=exports.SecurityPolicyProtocol=exports.SSLMethod=exports.OriginProtocolPolicy=exports.ViewerProtocolPolicy=exports.PriceClass=exports.HttpVersion=exports.Distribution=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),s3=require("../../aws-s3"),core_1=require("../../core"),cx_api_1=require("../../cx-api"),constructs_1=require("constructs"),cloudfront_generated_1=require("./cloudfront.generated"),cache_behavior_1=require("./private/cache-behavior");class Distribution extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.additionalBehaviors=[],this.boundOrigins=[],this.originGroups=[];try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_DistributionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Distribution),error}if(props.certificate){const certificateRegion=core_1.Stack.of(this).splitArn(props.certificate.certificateArn,core_1.ArnFormat.SLASH_RESOURCE_NAME).region;if(!core_1.Token.isUnresolved(certificateRegion)&&certificateRegion!=="us-east-1")throw new Error(`Distribution certificates must be in the us-east-1 region and the certificate you provided is in ${certificateRegion}.`);if((props.domainNames??[]).length===0)throw new Error("Must specify at least one domain name to use a certificate with a distribution")}const originId=this.addOrigin(props.defaultBehavior.origin);this.defaultBehavior=new cache_behavior_1.CacheBehavior(originId,{pathPattern:"*",...props.defaultBehavior}),props.additionalBehaviors&&Object.entries(props.additionalBehaviors).forEach(([pathPattern,behaviorOptions])=>{this.addBehavior(pathPattern,behaviorOptions.origin,behaviorOptions)}),this.certificate=props.certificate,this.errorResponses=props.errorResponses??[];const trimmedComment=props.comment&&props.comment.length>128?`${props.comment.slice(0,128-3)}...`:props.comment,distribution=new cloudfront_generated_1.CfnDistribution(this,"Resource",{distributionConfig:{enabled:props.enabled??!0,origins:core_1.Lazy.any({produce:()=>this.renderOrigins()}),originGroups:core_1.Lazy.any({produce:()=>this.renderOriginGroups()}),defaultCacheBehavior:this.defaultBehavior._renderBehavior(),aliases:props.domainNames,cacheBehaviors:core_1.Lazy.any({produce:()=>this.renderCacheBehaviors()}),comment:trimmedComment,customErrorResponses:this.renderErrorResponses(),defaultRootObject:props.defaultRootObject,httpVersion:props.httpVersion??HttpVersion.HTTP2,ipv6Enabled:props.enableIpv6??!0,logging:this.renderLogging(props),priceClass:props.priceClass??void 0,restrictions:this.renderRestrictions(props.geoRestriction),viewerCertificate:this.certificate?this.renderViewerCertificate(this.certificate,props.minimumProtocolVersion,props.sslSupportMethod):void 0,webAclId:props.webAclId}});this.domainName=distribution.attrDomainName,this.distributionDomainName=distribution.attrDomainName,this.distributionId=distribution.ref}static fromDistributionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_DistributionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromDistributionAttributes),error}return new class extends core_1.Resource{constructor(){super(scope,id),this.domainName=attrs.domainName,this.distributionDomainName=attrs.domainName,this.distributionId=attrs.distributionId}}}addBehavior(pathPattern,origin,behaviorOptions={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_IOrigin(origin),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_AddBehaviorOptions(behaviorOptions)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addBehavior),error}if(pathPattern==="*")throw new Error("Only the default behavior can have a path pattern of '*'");const originId=this.addOrigin(origin);this.additionalBehaviors.push(new cache_behavior_1.CacheBehavior(originId,{pathPattern,...behaviorOptions}))}addOrigin(origin,isFailoverOrigin=!1){const existingOrigin=this.boundOrigins.find(boundOrigin=>boundOrigin.origin===origin);if(existingOrigin)return existingOrigin.originGroupId??existingOrigin.originId;{const originIndex=this.boundOrigins.length+1,scope=new constructs_1.Construct(this,`Origin${originIndex}`),generatedId=core_1.Names.uniqueId(scope).slice(-128),originBindConfig=origin.bind(scope,{originId:generatedId}),originId=originBindConfig.originProperty?.id??generatedId,duplicateId=this.boundOrigins.find(boundOrigin=>boundOrigin.originProperty?.id===originBindConfig.originProperty?.id);if(duplicateId)throw new Error(`Origin with id ${duplicateId.originProperty?.id} already exists. OriginIds must be unique within a distribution`);if(!originBindConfig.failoverConfig)this.boundOrigins.push({origin,originId,...originBindConfig});else{if(isFailoverOrigin)throw new Error("An Origin cannot use an Origin with its own failover configuration as its fallback origin!");const groupIndex=this.originGroups.length+1,originGroupId=core_1.Names.uniqueId(new constructs_1.Construct(this,`OriginGroup${groupIndex}`)).slice(-128);this.boundOrigins.push({origin,originId,originGroupId,...originBindConfig});const failoverOriginId=this.addOrigin(originBindConfig.failoverConfig.failoverOrigin,!0);return this.addOriginGroup(originGroupId,originBindConfig.failoverConfig.statusCodes,originId,failoverOriginId),originGroupId}return originBindConfig.originProperty?.id??originId}}addOriginGroup(originGroupId,statusCodes,originId,failoverOriginId){if(statusCodes=statusCodes??[500,502,503,504],statusCodes.length===0)throw new Error("fallbackStatusCodes cannot be empty");this.originGroups.push({failoverCriteria:{statusCodes:{items:statusCodes,quantity:statusCodes.length}},id:originGroupId,members:{items:[{originId},{originId:failoverOriginId}],quantity:2}})}renderOrigins(){const renderedOrigins=[];return this.boundOrigins.forEach(boundOrigin=>{boundOrigin.originProperty&&renderedOrigins.push(boundOrigin.originProperty)}),renderedOrigins}renderOriginGroups(){return this.originGroups.length===0?void 0:{items:this.originGroups,quantity:this.originGroups.length}}renderCacheBehaviors(){if(this.additionalBehaviors.length!==0)return this.additionalBehaviors.map(behavior=>behavior._renderBehavior())}renderErrorResponses(){if(this.errorResponses.length!==0)return this.errorResponses.map(errorConfig=>{if(!errorConfig.responseHttpStatus&&!errorConfig.ttl&&!errorConfig.responsePagePath)throw new Error("A custom error response without either a 'responseHttpStatus', 'ttl' or 'responsePagePath' is not valid.");return{errorCachingMinTtl:errorConfig.ttl?.toSeconds(),errorCode:errorConfig.httpStatus,responseCode:errorConfig.responsePagePath?errorConfig.responseHttpStatus??errorConfig.httpStatus:errorConfig.responseHttpStatus,responsePagePath:errorConfig.responsePagePath}})}renderLogging(props){if(!props.enableLogging&&!props.logBucket)return;if(props.enableLogging===!1&&props.logBucket)throw new Error("Explicitly disabled logging but provided a logging bucket.");return{bucket:(props.logBucket??new s3.Bucket(this,"LoggingBucket",{encryption:s3.BucketEncryption.S3_MANAGED})).bucketRegionalDomainName,includeCookies:props.logIncludesCookies,prefix:props.logFilePrefix}}renderRestrictions(geoRestriction){return geoRestriction?{geoRestriction:{restrictionType:geoRestriction.restrictionType,locations:geoRestriction.locations}}:void 0}renderViewerCertificate(certificate,minimumProtocolVersionProp,sslSupportMethodProp){const defaultVersion=core_1.FeatureFlags.of(this).isEnabled(cx_api_1.CLOUDFRONT_DEFAULT_SECURITY_POLICY_TLS_V1_2_2021)?SecurityPolicyProtocol.TLS_V1_2_2021:SecurityPolicyProtocol.TLS_V1_2_2019,minimumProtocolVersion=minimumProtocolVersionProp??defaultVersion,sslSupportMethod=sslSupportMethodProp??SSLMethod.SNI;return{acmCertificateArn:certificate.certificateArn,minimumProtocolVersion,sslSupportMethod}}}exports.Distribution=Distribution,_a=JSII_RTTI_SYMBOL_1,Distribution[_a]={fqn:"aws-cdk-lib.aws_cloudfront.Distribution",version:"2.51.1"};var HttpVersion;(function(HttpVersion2){HttpVersion2.HTTP1_1="http1.1",HttpVersion2.HTTP2="http2",HttpVersion2.HTTP2_AND_3="http2and3",HttpVersion2.HTTP3="http3"})(HttpVersion=exports.HttpVersion||(exports.HttpVersion={}));var PriceClass;(function(PriceClass2){PriceClass2.PRICE_CLASS_100="PriceClass_100",PriceClass2.PRICE_CLASS_200="PriceClass_200",PriceClass2.PRICE_CLASS_ALL="PriceClass_All"})(PriceClass=exports.PriceClass||(exports.PriceClass={}));var ViewerProtocolPolicy;(function(ViewerProtocolPolicy2){ViewerProtocolPolicy2.HTTPS_ONLY="https-only",ViewerProtocolPolicy2.REDIRECT_TO_HTTPS="redirect-to-https",ViewerProtocolPolicy2.ALLOW_ALL="allow-all"})(ViewerProtocolPolicy=exports.ViewerProtocolPolicy||(exports.ViewerProtocolPolicy={}));var OriginProtocolPolicy;(function(OriginProtocolPolicy2){OriginProtocolPolicy2.HTTP_ONLY="http-only",OriginProtocolPolicy2.MATCH_VIEWER="match-viewer",OriginProtocolPolicy2.HTTPS_ONLY="https-only"})(OriginProtocolPolicy=exports.OriginProtocolPolicy||(exports.OriginProtocolPolicy={}));var SSLMethod;(function(SSLMethod2){SSLMethod2.SNI="sni-only",SSLMethod2.VIP="vip"})(SSLMethod=exports.SSLMethod||(exports.SSLMethod={}));var SecurityPolicyProtocol;(function(SecurityPolicyProtocol2){SecurityPolicyProtocol2.SSL_V3="SSLv3",SecurityPolicyProtocol2.TLS_V1="TLSv1",SecurityPolicyProtocol2.TLS_V1_2016="TLSv1_2016",SecurityPolicyProtocol2.TLS_V1_1_2016="TLSv1.1_2016",SecurityPolicyProtocol2.TLS_V1_2_2018="TLSv1.2_2018",SecurityPolicyProtocol2.TLS_V1_2_2019="TLSv1.2_2019",SecurityPolicyProtocol2.TLS_V1_2_2021="TLSv1.2_2021"})(SecurityPolicyProtocol=exports.SecurityPolicyProtocol||(exports.SecurityPolicyProtocol={}));class AllowedMethods{constructor(methods){this.methods=methods}}exports.AllowedMethods=AllowedMethods,_b=JSII_RTTI_SYMBOL_1,AllowedMethods[_b]={fqn:"aws-cdk-lib.aws_cloudfront.AllowedMethods",version:"2.51.1"},AllowedMethods.ALLOW_GET_HEAD=new AllowedMethods(["GET","HEAD"]),AllowedMethods.ALLOW_GET_HEAD_OPTIONS=new AllowedMethods(["GET","HEAD","OPTIONS"]),AllowedMethods.ALLOW_ALL=new AllowedMethods(["GET","HEAD","OPTIONS","PUT","PATCH","POST","DELETE"]);class CachedMethods{constructor(methods){this.methods=methods}}exports.CachedMethods=CachedMethods,_c=JSII_RTTI_SYMBOL_1,CachedMethods[_c]={fqn:"aws-cdk-lib.aws_cloudfront.CachedMethods",version:"2.51.1"},CachedMethods.CACHE_GET_HEAD=new CachedMethods(["GET","HEAD"]),CachedMethods.CACHE_GET_HEAD_OPTIONS=new CachedMethods(["GET","HEAD","OPTIONS"]);var LambdaEdgeEventType;(function(LambdaEdgeEventType2){LambdaEdgeEventType2.ORIGIN_REQUEST="origin-request",LambdaEdgeEventType2.ORIGIN_RESPONSE="origin-response",LambdaEdgeEventType2.VIEWER_REQUEST="viewer-request",LambdaEdgeEventType2.VIEWER_RESPONSE="viewer-response"})(LambdaEdgeEventType=exports.LambdaEdgeEventType||(exports.LambdaEdgeEventType={}));
 //# sourceMappingURL=distribution.js.map

package/aws-cloudfront/lib/experimental/edge-function.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.EdgeFunction=void 0;const jsiiDeprecationWarnings=require("../../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),path=require("path"),iam=require("../../../aws-iam"),lambda=require("../../../aws-lambda"),ssm=require("../../../aws-ssm"),core_1=require("../../../core");class EdgeFunction extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.isBoundToVpc=!1;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_experimental_EdgeFunctionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,EdgeFunction),error}const regionIsUsEast1=!core_1.Token.isUnresolved(this.env.region)&&this.env.region==="us-east-1",{edgeFunction,edgeArn}=regionIsUsEast1?this.createInRegionFunction(props):this.createCrossRegionFunction(id,props);this.edgeArn=edgeArn,this.functionArn=edgeArn,this._edgeFunction=edgeFunction,this.functionName=this._edgeFunction.functionName,this.grantPrincipal=this._edgeFunction.role,this.permissionsNode=this._edgeFunction.permissionsNode,this.version=lambda.extractQualifierFromArn(this.functionArn),this.architecture=this._edgeFunction.architecture,this.resourceArnsForGrantInvoke=this._edgeFunction.resourceArnsForGrantInvoke,this.node.defaultChild=this._edgeFunction}get lambda(){return this._edgeFunction}get currentVersion(){return this}addAlias(aliasName,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_AliasOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addAlias),error}return new lambda.Alias(this._edgeFunction,`Alias${aliasName}`,{aliasName,version:this._edgeFunction.currentVersion,...options})}get connections(){throw new Error("Lambda@Edge does not support connections")}get latestVersion(){throw new Error("$LATEST function version cannot be used for Lambda@Edge")}addEventSourceMapping(id,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_EventSourceMappingOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSourceMapping),error}return this.lambda.addEventSourceMapping(id,options)}addPermission(id,permission){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_Permission(permission)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addPermission),error}return this.lambda.addPermission(id,permission)}addToRolePolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToRolePolicy),error}return this.lambda.addToRolePolicy(statement)}grantInvoke(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGrantable(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantInvoke),error}return this.lambda.grantInvoke(identity)}grantInvokeUrl(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGrantable(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantInvokeUrl),error}return this.lambda.grantInvokeUrl(identity)}metric(metricName,props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metric),error}return this.lambda.metric(metricName,{...props,region:EdgeFunction.EDGE_REGION})}metricDuration(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricDuration),error}return this.lambda.metricDuration({...props,region:EdgeFunction.EDGE_REGION})}metricErrors(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricErrors),error}return this.lambda.metricErrors({...props,region:EdgeFunction.EDGE_REGION})}metricInvocations(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricInvocations),error}return this.lambda.metricInvocations({...props,region:EdgeFunction.EDGE_REGION})}metricThrottles(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricThrottles),error}return this.lambda.metricThrottles({...props,region:EdgeFunction.EDGE_REGION})}addEventSource(source){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_IEventSource(source)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSource),error}return this.lambda.addEventSource(source)}configureAsyncInvoke(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_EventInvokeConfigOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.configureAsyncInvoke),error}return this.lambda.configureAsyncInvoke(options)}addFunctionUrl(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_FunctionUrlOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addFunctionUrl),error}return this.lambda.addFunctionUrl(options)}createInRegionFunction(props){const edgeFunction=new lambda.Function(this,"Fn",props);return addEdgeLambdaToRoleTrustStatement(edgeFunction.role),{edgeFunction,edgeArn:edgeFunction.currentVersion.edgeArn}}createCrossRegionFunction(id,props){const parameterNamePrefix="cdk/EdgeFunctionArn";if(core_1.Token.isUnresolved(this.env.region))throw new Error("stacks which use EdgeFunctions must have an explicitly set region");const sanitizedPath=this.node.path.replace(/[^\/\w.-]/g,"_"),parameterName=`/${parameterNamePrefix}/${this.env.region}/${sanitizedPath}`,functionStack=this.edgeStack(props.stackId),edgeFunction=new lambda.Function(functionStack,id,props);addEdgeLambdaToRoleTrustStatement(edgeFunction.role);const version=edgeFunction.currentVersion;new ssm.StringParameter(edgeFunction,"Parameter",{parameterName,stringValue:version.edgeArn});const edgeArn=this.createCrossRegionArnReader(parameterNamePrefix,parameterName,version);return{edgeFunction,edgeArn}}createCrossRegionArnReader(parameterNamePrefix,parameterName,version){const parameterArnPrefix=this.stack.formatArn({service:"ssm",region:EdgeFunction.EDGE_REGION,resource:"parameter",resourceName:parameterNamePrefix+"/*"}),resourceType="Custom::CrossRegionStringParameterReader",serviceToken=core_1.CustomResourceProvider.getOrCreate(this,resourceType,{codeDirectory:path.join(__dirname,"edge-function"),runtime:core_1.CustomResourceProviderRuntime.NODEJS_14_X,policyStatements:[{Effect:"Allow",Resource:parameterArnPrefix,Action:["ssm:GetParameter"]}]});return new core_1.CustomResource(this,"ArnReader",{resourceType,serviceToken,properties:{Region:EdgeFunction.EDGE_REGION,ParameterName:parameterName,RefreshToken:core_1.Lazy.uncachedString({produce:()=>{const cfn=version.node.defaultChild;return this.stack.resolve(cfn.logicalId)}})}}).getAttString("FunctionArn")}edgeStack(stackId){const stage=core_1.Stage.of(this);if(!stage)throw new Error("stacks which use EdgeFunctions must be part of a CDK app or stage");const edgeStackId=stackId??`edge-lambda-stack-${this.stack.node.addr}`;let edgeStack=stage.node.tryFindChild(edgeStackId);return edgeStack||(edgeStack=new core_1.Stack(stage,edgeStackId,{env:{region:EdgeFunction.EDGE_REGION,account:core_1.Stack.of(this).account}})),this.stack.addDependency(edgeStack),edgeStack}}exports.EdgeFunction=EdgeFunction,_a=JSII_RTTI_SYMBOL_1,EdgeFunction[_a]={fqn:"aws-cdk-lib.aws_cloudfront.experimental.EdgeFunction",version:"2.51.0"},EdgeFunction.EDGE_REGION="us-east-1";function addEdgeLambdaToRoleTrustStatement(role){if(role instanceof iam.Role&&role.assumeRolePolicy){const statement=new iam.PolicyStatement,edgeLambdaServicePrincipal=new iam.ServicePrincipal("edgelambda.amazonaws.com");statement.addPrincipals(edgeLambdaServicePrincipal),statement.addActions(edgeLambdaServicePrincipal.assumeRoleAction),role.assumeRolePolicy.addStatements(statement)}}
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.EdgeFunction=void 0;const jsiiDeprecationWarnings=require("../../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),path=require("path"),iam=require("../../../aws-iam"),lambda=require("../../../aws-lambda"),ssm=require("../../../aws-ssm"),core_1=require("../../../core");class EdgeFunction extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.isBoundToVpc=!1;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_experimental_EdgeFunctionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,EdgeFunction),error}const regionIsUsEast1=!core_1.Token.isUnresolved(this.env.region)&&this.env.region==="us-east-1",{edgeFunction,edgeArn}=regionIsUsEast1?this.createInRegionFunction(props):this.createCrossRegionFunction(id,props);this.edgeArn=edgeArn,this.functionArn=edgeArn,this._edgeFunction=edgeFunction,this.functionName=this._edgeFunction.functionName,this.grantPrincipal=this._edgeFunction.role,this.permissionsNode=this._edgeFunction.permissionsNode,this.version=lambda.extractQualifierFromArn(this.functionArn),this.architecture=this._edgeFunction.architecture,this.resourceArnsForGrantInvoke=this._edgeFunction.resourceArnsForGrantInvoke,this.node.defaultChild=this._edgeFunction}get lambda(){return this._edgeFunction}get currentVersion(){return this}addAlias(aliasName,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_AliasOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addAlias),error}return new lambda.Alias(this._edgeFunction,`Alias${aliasName}`,{aliasName,version:this._edgeFunction.currentVersion,...options})}get connections(){throw new Error("Lambda@Edge does not support connections")}get latestVersion(){throw new Error("$LATEST function version cannot be used for Lambda@Edge")}addEventSourceMapping(id,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_EventSourceMappingOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSourceMapping),error}return this.lambda.addEventSourceMapping(id,options)}addPermission(id,permission){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_Permission(permission)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addPermission),error}return this.lambda.addPermission(id,permission)}addToRolePolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToRolePolicy),error}return this.lambda.addToRolePolicy(statement)}grantInvoke(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGrantable(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantInvoke),error}return this.lambda.grantInvoke(identity)}grantInvokeUrl(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGrantable(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantInvokeUrl),error}return this.lambda.grantInvokeUrl(identity)}metric(metricName,props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metric),error}return this.lambda.metric(metricName,{...props,region:EdgeFunction.EDGE_REGION})}metricDuration(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricDuration),error}return this.lambda.metricDuration({...props,region:EdgeFunction.EDGE_REGION})}metricErrors(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricErrors),error}return this.lambda.metricErrors({...props,region:EdgeFunction.EDGE_REGION})}metricInvocations(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricInvocations),error}return this.lambda.metricInvocations({...props,region:EdgeFunction.EDGE_REGION})}metricThrottles(props){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudwatch_MetricOptions(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.metricThrottles),error}return this.lambda.metricThrottles({...props,region:EdgeFunction.EDGE_REGION})}addEventSource(source){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_IEventSource(source)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSource),error}return this.lambda.addEventSource(source)}configureAsyncInvoke(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_EventInvokeConfigOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.configureAsyncInvoke),error}return this.lambda.configureAsyncInvoke(options)}addFunctionUrl(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_lambda_FunctionUrlOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addFunctionUrl),error}return this.lambda.addFunctionUrl(options)}createInRegionFunction(props){const edgeFunction=new lambda.Function(this,"Fn",props);return addEdgeLambdaToRoleTrustStatement(edgeFunction.role),{edgeFunction,edgeArn:edgeFunction.currentVersion.edgeArn}}createCrossRegionFunction(id,props){const parameterNamePrefix="cdk/EdgeFunctionArn";if(core_1.Token.isUnresolved(this.env.region))throw new Error("stacks which use EdgeFunctions must have an explicitly set region");const sanitizedPath=this.node.path.replace(/[^\/\w.-]/g,"_"),parameterName=`/${parameterNamePrefix}/${this.env.region}/${sanitizedPath}`,functionStack=this.edgeStack(props.stackId),edgeFunction=new lambda.Function(functionStack,id,props);addEdgeLambdaToRoleTrustStatement(edgeFunction.role);const version=edgeFunction.currentVersion;new ssm.StringParameter(edgeFunction,"Parameter",{parameterName,stringValue:version.edgeArn});const edgeArn=this.createCrossRegionArnReader(parameterNamePrefix,parameterName,version);return{edgeFunction,edgeArn}}createCrossRegionArnReader(parameterNamePrefix,parameterName,version){const parameterArnPrefix=this.stack.formatArn({service:"ssm",region:EdgeFunction.EDGE_REGION,resource:"parameter",resourceName:parameterNamePrefix+"/*"}),resourceType="Custom::CrossRegionStringParameterReader",serviceToken=core_1.CustomResourceProvider.getOrCreate(this,resourceType,{codeDirectory:path.join(__dirname,"edge-function"),runtime:core_1.CustomResourceProviderRuntime.NODEJS_14_X,policyStatements:[{Effect:"Allow",Resource:parameterArnPrefix,Action:["ssm:GetParameter"]}]});return new core_1.CustomResource(this,"ArnReader",{resourceType,serviceToken,properties:{Region:EdgeFunction.EDGE_REGION,ParameterName:parameterName,RefreshToken:core_1.Lazy.uncachedString({produce:()=>{const cfn=version.node.defaultChild;return this.stack.resolve(cfn.logicalId)}})}}).getAttString("FunctionArn")}edgeStack(stackId){const stage=core_1.Stage.of(this);if(!stage)throw new Error("stacks which use EdgeFunctions must be part of a CDK app or stage");const edgeStackId=stackId??`edge-lambda-stack-${this.stack.node.addr}`;let edgeStack=stage.node.tryFindChild(edgeStackId);return edgeStack||(edgeStack=new core_1.Stack(stage,edgeStackId,{env:{region:EdgeFunction.EDGE_REGION,account:core_1.Stack.of(this).account}})),this.stack.addDependency(edgeStack),edgeStack}}exports.EdgeFunction=EdgeFunction,_a=JSII_RTTI_SYMBOL_1,EdgeFunction[_a]={fqn:"aws-cdk-lib.aws_cloudfront.experimental.EdgeFunction",version:"2.51.1"},EdgeFunction.EDGE_REGION="us-east-1";function addEdgeLambdaToRoleTrustStatement(role){if(role instanceof iam.Role&&role.assumeRolePolicy){const statement=new iam.PolicyStatement,edgeLambdaServicePrincipal=new iam.ServicePrincipal("edgelambda.amazonaws.com");statement.addPrincipals(edgeLambdaServicePrincipal),statement.addActions(edgeLambdaServicePrincipal.assumeRoleAction),role.assumeRolePolicy.addStatements(statement)}}
 //# sourceMappingURL=edge-function.js.map

package/aws-cloudfront/lib/function.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.FunctionEventType=exports.Function=exports.FunctionCode=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),fs=require("fs"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class FunctionCode{static fromInline(code){return new InlineCode(code)}static fromFile(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FileCodeOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromFile),error}return new FileCode(options)}}exports.FunctionCode=FunctionCode,_a=JSII_RTTI_SYMBOL_1,FunctionCode[_a]={fqn:"aws-cdk-lib.aws_cloudfront.FunctionCode",version:"2.51.0"};class InlineCode extends FunctionCode{constructor(code){super(),this.code=code}render(){return this.code}}class FileCode extends FunctionCode{constructor(options){super(),this.options=options}render(){return fs.readFileSync(this.options.filePath,{encoding:"utf-8"})}}class Function extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FunctionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Function),error}this.functionName=props.functionName??this.generateName();const resource=new cloudfront_generated_1.CfnFunction(this,"Resource",{autoPublish:!0,functionCode:props.code.render(),functionConfig:{comment:props.comment??this.functionName,runtime:"cloudfront-js-1.0"},name:this.functionName});this.functionArn=resource.attrFunctionArn,this.functionStage=resource.attrStage}static fromFunctionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FunctionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromFunctionAttributes),error}return new class extends core_1.Resource{constructor(){super(...arguments),this.functionName=attrs.functionName,this.functionArn=attrs.functionArn}}(scope,id)}generateName(){const name=core_1.Stack.of(this).region+core_1.Names.uniqueId(this);return name.length>64?name.substring(0,32)+name.substring(name.length-32):name}}exports.Function=Function,_b=JSII_RTTI_SYMBOL_1,Function[_b]={fqn:"aws-cdk-lib.aws_cloudfront.Function",version:"2.51.0"};var FunctionEventType;(function(FunctionEventType2){FunctionEventType2.VIEWER_REQUEST="viewer-request",FunctionEventType2.VIEWER_RESPONSE="viewer-response"})(FunctionEventType=exports.FunctionEventType||(exports.FunctionEventType={}));
+"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.FunctionEventType=exports.Function=exports.FunctionCode=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),fs=require("fs"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class FunctionCode{static fromInline(code){return new InlineCode(code)}static fromFile(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FileCodeOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromFile),error}return new FileCode(options)}}exports.FunctionCode=FunctionCode,_a=JSII_RTTI_SYMBOL_1,FunctionCode[_a]={fqn:"aws-cdk-lib.aws_cloudfront.FunctionCode",version:"2.51.1"};class InlineCode extends FunctionCode{constructor(code){super(),this.code=code}render(){return this.code}}class FileCode extends FunctionCode{constructor(options){super(),this.options=options}render(){return fs.readFileSync(this.options.filePath,{encoding:"utf-8"})}}class Function extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FunctionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Function),error}this.functionName=props.functionName??this.generateName();const resource=new cloudfront_generated_1.CfnFunction(this,"Resource",{autoPublish:!0,functionCode:props.code.render(),functionConfig:{comment:props.comment??this.functionName,runtime:"cloudfront-js-1.0"},name:this.functionName});this.functionArn=resource.attrFunctionArn,this.functionStage=resource.attrStage}static fromFunctionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_FunctionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromFunctionAttributes),error}return new class extends core_1.Resource{constructor(){super(...arguments),this.functionName=attrs.functionName,this.functionArn=attrs.functionArn}}(scope,id)}generateName(){const name=core_1.Stack.of(this).region+core_1.Names.uniqueId(this);return name.length>64?name.substring(0,32)+name.substring(name.length-32):name}}exports.Function=Function,_b=JSII_RTTI_SYMBOL_1,Function[_b]={fqn:"aws-cdk-lib.aws_cloudfront.Function",version:"2.51.1"};var FunctionEventType;(function(FunctionEventType2){FunctionEventType2.VIEWER_REQUEST="viewer-request",FunctionEventType2.VIEWER_RESPONSE="viewer-response"})(FunctionEventType=exports.FunctionEventType||(exports.FunctionEventType={}));
 //# sourceMappingURL=function.js.map

package/aws-cloudfront/lib/geo-restriction.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.GeoRestriction=void 0;const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");class GeoRestriction{constructor(restrictionType,locations){this.restrictionType=restrictionType,this.locations=locations}static allowlist(...locations){return new GeoRestriction("whitelist",GeoRestriction.validateLocations(locations))}static denylist(...locations){return new GeoRestriction("blacklist",GeoRestriction.validateLocations(locations))}static whitelist(...locations){return GeoRestriction.allowlist(...locations)}static blacklist(...locations){return GeoRestriction.denylist(...locations)}static validateLocations(locations){if(locations.length===0)throw new Error("Should provide at least 1 location");return locations.forEach(location=>{if(!GeoRestriction.LOCATION_REGEX.test(location))throw new Error(`Invalid location format for location: ${location}, location should be two-letter and uppercase country ISO 3166-1-alpha-2 code`)}),locations}}exports.GeoRestriction=GeoRestriction,_a=JSII_RTTI_SYMBOL_1,GeoRestriction[_a]={fqn:"aws-cdk-lib.aws_cloudfront.GeoRestriction",version:"2.51.0"},GeoRestriction.LOCATION_REGEX=/^[A-Z]{2}$/;
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.GeoRestriction=void 0;const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");class GeoRestriction{constructor(restrictionType,locations){this.restrictionType=restrictionType,this.locations=locations}static allowlist(...locations){return new GeoRestriction("whitelist",GeoRestriction.validateLocations(locations))}static denylist(...locations){return new GeoRestriction("blacklist",GeoRestriction.validateLocations(locations))}static whitelist(...locations){return GeoRestriction.allowlist(...locations)}static blacklist(...locations){return GeoRestriction.denylist(...locations)}static validateLocations(locations){if(locations.length===0)throw new Error("Should provide at least 1 location");return locations.forEach(location=>{if(!GeoRestriction.LOCATION_REGEX.test(location))throw new Error(`Invalid location format for location: ${location}, location should be two-letter and uppercase country ISO 3166-1-alpha-2 code`)}),locations}}exports.GeoRestriction=GeoRestriction,_a=JSII_RTTI_SYMBOL_1,GeoRestriction[_a]={fqn:"aws-cdk-lib.aws_cloudfront.GeoRestriction",version:"2.51.1"},GeoRestriction.LOCATION_REGEX=/^[A-Z]{2}$/;
 //# sourceMappingURL=geo-restriction.js.map

package/aws-cloudfront/lib/key-group.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.KeyGroup=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class KeyGroup extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_KeyGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,KeyGroup),error}const resource=new cloudfront_generated_1.CfnKeyGroup(this,"Resource",{keyGroupConfig:{name:props.keyGroupName??this.generateName(),comment:props.comment,items:props.items.map(key=>key.publicKeyId)}});this.keyGroupId=resource.ref}static fromKeyGroupId(scope,id,keyGroupId){return new class extends core_1.Resource{constructor(){super(...arguments),this.keyGroupId=keyGroupId}}(scope,id)}generateName(){const name=core_1.Names.uniqueId(this);return name.length>80?name.substring(0,40)+name.substring(name.length-40):name}}exports.KeyGroup=KeyGroup,_a=JSII_RTTI_SYMBOL_1,KeyGroup[_a]={fqn:"aws-cdk-lib.aws_cloudfront.KeyGroup",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.KeyGroup=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class KeyGroup extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_KeyGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,KeyGroup),error}const resource=new cloudfront_generated_1.CfnKeyGroup(this,"Resource",{keyGroupConfig:{name:props.keyGroupName??this.generateName(),comment:props.comment,items:props.items.map(key=>key.publicKeyId)}});this.keyGroupId=resource.ref}static fromKeyGroupId(scope,id,keyGroupId){return new class extends core_1.Resource{constructor(){super(...arguments),this.keyGroupId=keyGroupId}}(scope,id)}generateName(){const name=core_1.Names.uniqueId(this);return name.length>80?name.substring(0,40)+name.substring(name.length-40):name}}exports.KeyGroup=KeyGroup,_a=JSII_RTTI_SYMBOL_1,KeyGroup[_a]={fqn:"aws-cdk-lib.aws_cloudfront.KeyGroup",version:"2.51.1"};
 //# sourceMappingURL=key-group.js.map

package/aws-cloudfront/lib/origin-access-identity.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginAccessIdentity=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),cdk=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class OriginAccessIdentityBase extends cdk.Resource{arn(){return cdk.Stack.of(this).formatArn({service:"iam",region:"",account:"cloudfront",resource:"user",resourceName:`CloudFront Origin Access Identity ${this.originAccessIdentityId}`})}}class OriginAccessIdentity extends OriginAccessIdentityBase{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginAccessIdentityProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginAccessIdentity),error}const comment=(props?.comment??"Allows CloudFront to reach the bucket").slice(0,128);this.resource=new cloudfront_generated_1.CfnCloudFrontOriginAccessIdentity(this,"Resource",{cloudFrontOriginAccessIdentityConfig:{comment}}),this.originAccessIdentityId=this.getResourceNameAttribute(this.resource.ref),this.cloudFrontOriginAccessIdentityS3CanonicalUserId=this.resource.attrS3CanonicalUserId,this.grantPrincipal=new iam.CanonicalUserPrincipal(this.cloudFrontOriginAccessIdentityS3CanonicalUserId)}static fromOriginAccessIdentityName(scope,id,originAccessIdentityName){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_cloudfront.OriginAccessIdentity#fromOriginAccessIdentityName","use `fromOriginAccessIdentityId`")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromOriginAccessIdentityName),error}return OriginAccessIdentity.fromOriginAccessIdentityId(scope,id,originAccessIdentityName)}static fromOriginAccessIdentityId(scope,id,originAccessIdentityId){class Import extends OriginAccessIdentityBase{constructor(s,i){super(s,i,{physicalName:originAccessIdentityId}),this.originAccessIdentityId=originAccessIdentityId,this.originAccessIdentityName=originAccessIdentityId,this.grantPrincipal=new iam.ArnPrincipal(this.arn())}}return new Import(scope,id)}get originAccessIdentityName(){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_cloudfront.OriginAccessIdentity#originAccessIdentityName","use originAccessIdentityId instead")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,jsiiDeprecationWarnings.getPropertyDescriptor(this,"originAccessIdentityName").get),error}return this.originAccessIdentityId}}exports.OriginAccessIdentity=OriginAccessIdentity,_a=JSII_RTTI_SYMBOL_1,OriginAccessIdentity[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginAccessIdentity",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginAccessIdentity=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),cdk=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class OriginAccessIdentityBase extends cdk.Resource{arn(){return cdk.Stack.of(this).formatArn({service:"iam",region:"",account:"cloudfront",resource:"user",resourceName:`CloudFront Origin Access Identity ${this.originAccessIdentityId}`})}}class OriginAccessIdentity extends OriginAccessIdentityBase{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginAccessIdentityProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginAccessIdentity),error}const comment=(props?.comment??"Allows CloudFront to reach the bucket").slice(0,128);this.resource=new cloudfront_generated_1.CfnCloudFrontOriginAccessIdentity(this,"Resource",{cloudFrontOriginAccessIdentityConfig:{comment}}),this.originAccessIdentityId=this.getResourceNameAttribute(this.resource.ref),this.cloudFrontOriginAccessIdentityS3CanonicalUserId=this.resource.attrS3CanonicalUserId,this.grantPrincipal=new iam.CanonicalUserPrincipal(this.cloudFrontOriginAccessIdentityS3CanonicalUserId)}static fromOriginAccessIdentityName(scope,id,originAccessIdentityName){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_cloudfront.OriginAccessIdentity#fromOriginAccessIdentityName","use `fromOriginAccessIdentityId`")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromOriginAccessIdentityName),error}return OriginAccessIdentity.fromOriginAccessIdentityId(scope,id,originAccessIdentityName)}static fromOriginAccessIdentityId(scope,id,originAccessIdentityId){class Import extends OriginAccessIdentityBase{constructor(s,i){super(s,i,{physicalName:originAccessIdentityId}),this.originAccessIdentityId=originAccessIdentityId,this.originAccessIdentityName=originAccessIdentityId,this.grantPrincipal=new iam.ArnPrincipal(this.arn())}}return new Import(scope,id)}get originAccessIdentityName(){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_cloudfront.OriginAccessIdentity#originAccessIdentityName","use originAccessIdentityId instead")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,jsiiDeprecationWarnings.getPropertyDescriptor(this,"originAccessIdentityName").get),error}return this.originAccessIdentityId}}exports.OriginAccessIdentity=OriginAccessIdentity,_a=JSII_RTTI_SYMBOL_1,OriginAccessIdentity[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginAccessIdentity",version:"2.51.1"};
 //# sourceMappingURL=origin-access-identity.js.map

package/aws-cloudfront/lib/origin-request-policy.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c,_d;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginRequestQueryStringBehavior=exports.OriginRequestHeaderBehavior=exports.OriginRequestCookieBehavior=exports.OriginRequestPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class OriginRequestPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.originRequestPolicyName});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginRequestPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginRequestPolicy),error}const originRequestPolicyName=props.originRequestPolicyName??core_1.Names.uniqueId(this);if(!core_1.Token.isUnresolved(originRequestPolicyName)&&!originRequestPolicyName.match(/^[\w-]+$/i))throw new Error(`'originRequestPolicyName' can only include '-', '_', and alphanumeric characters, got: '${props.originRequestPolicyName}'`);const cookies=props.cookieBehavior??OriginRequestCookieBehavior.none(),headers=props.headerBehavior??OriginRequestHeaderBehavior.none(),queryStrings=props.queryStringBehavior??OriginRequestQueryStringBehavior.none(),resource=new cloudfront_generated_1.CfnOriginRequestPolicy(this,"Resource",{originRequestPolicyConfig:{name:originRequestPolicyName,comment:props.comment,cookiesConfig:{cookieBehavior:cookies.behavior,cookies:cookies.cookies},headersConfig:{headerBehavior:headers.behavior,headers:headers.headers},queryStringsConfig:{queryStringBehavior:queryStrings.behavior,queryStrings:queryStrings.queryStrings}}});this.originRequestPolicyId=resource.ref}static fromOriginRequestPolicyId(scope,id,originRequestPolicyId){return new class extends core_1.Resource{constructor(){super(...arguments),this.originRequestPolicyId=originRequestPolicyId}}(scope,id)}static fromManagedOriginRequestPolicy(managedOriginRequestPolicyId){return new class{constructor(){this.originRequestPolicyId=managedOriginRequestPolicyId}}}}exports.OriginRequestPolicy=OriginRequestPolicy,_a=JSII_RTTI_SYMBOL_1,OriginRequestPolicy[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestPolicy",version:"2.51.0"},OriginRequestPolicy.USER_AGENT_REFERER_HEADERS=OriginRequestPolicy.fromManagedOriginRequestPolicy("acba4595-bd28-49b8-b9fe-13317c0390fa"),OriginRequestPolicy.CORS_CUSTOM_ORIGIN=OriginRequestPolicy.fromManagedOriginRequestPolicy("59781a5b-3903-41f3-afcb-af62929ccde1"),OriginRequestPolicy.CORS_S3_ORIGIN=OriginRequestPolicy.fromManagedOriginRequestPolicy("88a5eaf4-2fd4-4709-b370-b4c650ea3fcf"),OriginRequestPolicy.ALL_VIEWER=OriginRequestPolicy.fromManagedOriginRequestPolicy("216adef6-5c7f-47e4-b989-5492eafa07d3"),OriginRequestPolicy.ELEMENTAL_MEDIA_TAILOR=OriginRequestPolicy.fromManagedOriginRequestPolicy("775133bc-15f2-49f9-abea-afb2e0bf67d2");class OriginRequestCookieBehavior{constructor(behavior,cookies){this.behavior=behavior,this.cookies=cookies}static none(){return new OriginRequestCookieBehavior("none")}static all(){return new OriginRequestCookieBehavior("all")}static allowList(...cookies){if(cookies.length===0)throw new Error("At least one cookie to allow must be provided");return new OriginRequestCookieBehavior("whitelist",cookies)}}exports.OriginRequestCookieBehavior=OriginRequestCookieBehavior,_b=JSII_RTTI_SYMBOL_1,OriginRequestCookieBehavior[_b]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestCookieBehavior",version:"2.51.0"};class OriginRequestHeaderBehavior{constructor(behavior,headers){this.behavior=behavior,this.headers=headers}static none(){return new OriginRequestHeaderBehavior("none")}static all(...cloudfrontHeaders){if(cloudfrontHeaders.length>0){if(!cloudfrontHeaders.every(header=>header.startsWith("CloudFront-")))throw new Error("additional CloudFront headers passed to `OriginRequestHeaderBehavior.all()` must begin with 'CloudFront-'");return new OriginRequestHeaderBehavior("allViewerAndWhitelistCloudFront",cloudfrontHeaders)}else return new OriginRequestHeaderBehavior("allViewer")}static allowList(...headers){if(headers.length===0)throw new Error("At least one header to allow must be provided");if(headers.map(header=>header.toLowerCase()).some(header=>["authorization","accept-encoding"].includes(header)))throw new Error("you cannot pass `Authorization` or `Accept-Encoding` as header values; use a CachePolicy to forward these headers instead");return new OriginRequestHeaderBehavior("whitelist",headers)}}exports.OriginRequestHeaderBehavior=OriginRequestHeaderBehavior,_c=JSII_RTTI_SYMBOL_1,OriginRequestHeaderBehavior[_c]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestHeaderBehavior",version:"2.51.0"};class OriginRequestQueryStringBehavior{constructor(behavior,queryStrings){this.behavior=behavior,this.queryStrings=queryStrings}static none(){return new OriginRequestQueryStringBehavior("none")}static all(){return new OriginRequestQueryStringBehavior("all")}static allowList(...queryStrings){if(queryStrings.length===0)throw new Error("At least one query string to allow must be provided");return new OriginRequestQueryStringBehavior("whitelist",queryStrings)}}exports.OriginRequestQueryStringBehavior=OriginRequestQueryStringBehavior,_d=JSII_RTTI_SYMBOL_1,OriginRequestQueryStringBehavior[_d]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestQueryStringBehavior",version:"2.51.0"};
+"use strict";var _a,_b,_c,_d;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginRequestQueryStringBehavior=exports.OriginRequestHeaderBehavior=exports.OriginRequestCookieBehavior=exports.OriginRequestPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class OriginRequestPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.originRequestPolicyName});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginRequestPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginRequestPolicy),error}const originRequestPolicyName=props.originRequestPolicyName??core_1.Names.uniqueId(this);if(!core_1.Token.isUnresolved(originRequestPolicyName)&&!originRequestPolicyName.match(/^[\w-]+$/i))throw new Error(`'originRequestPolicyName' can only include '-', '_', and alphanumeric characters, got: '${props.originRequestPolicyName}'`);const cookies=props.cookieBehavior??OriginRequestCookieBehavior.none(),headers=props.headerBehavior??OriginRequestHeaderBehavior.none(),queryStrings=props.queryStringBehavior??OriginRequestQueryStringBehavior.none(),resource=new cloudfront_generated_1.CfnOriginRequestPolicy(this,"Resource",{originRequestPolicyConfig:{name:originRequestPolicyName,comment:props.comment,cookiesConfig:{cookieBehavior:cookies.behavior,cookies:cookies.cookies},headersConfig:{headerBehavior:headers.behavior,headers:headers.headers},queryStringsConfig:{queryStringBehavior:queryStrings.behavior,queryStrings:queryStrings.queryStrings}}});this.originRequestPolicyId=resource.ref}static fromOriginRequestPolicyId(scope,id,originRequestPolicyId){return new class extends core_1.Resource{constructor(){super(...arguments),this.originRequestPolicyId=originRequestPolicyId}}(scope,id)}static fromManagedOriginRequestPolicy(managedOriginRequestPolicyId){return new class{constructor(){this.originRequestPolicyId=managedOriginRequestPolicyId}}}}exports.OriginRequestPolicy=OriginRequestPolicy,_a=JSII_RTTI_SYMBOL_1,OriginRequestPolicy[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestPolicy",version:"2.51.1"},OriginRequestPolicy.USER_AGENT_REFERER_HEADERS=OriginRequestPolicy.fromManagedOriginRequestPolicy("acba4595-bd28-49b8-b9fe-13317c0390fa"),OriginRequestPolicy.CORS_CUSTOM_ORIGIN=OriginRequestPolicy.fromManagedOriginRequestPolicy("59781a5b-3903-41f3-afcb-af62929ccde1"),OriginRequestPolicy.CORS_S3_ORIGIN=OriginRequestPolicy.fromManagedOriginRequestPolicy("88a5eaf4-2fd4-4709-b370-b4c650ea3fcf"),OriginRequestPolicy.ALL_VIEWER=OriginRequestPolicy.fromManagedOriginRequestPolicy("216adef6-5c7f-47e4-b989-5492eafa07d3"),OriginRequestPolicy.ELEMENTAL_MEDIA_TAILOR=OriginRequestPolicy.fromManagedOriginRequestPolicy("775133bc-15f2-49f9-abea-afb2e0bf67d2");class OriginRequestCookieBehavior{constructor(behavior,cookies){this.behavior=behavior,this.cookies=cookies}static none(){return new OriginRequestCookieBehavior("none")}static all(){return new OriginRequestCookieBehavior("all")}static allowList(...cookies){if(cookies.length===0)throw new Error("At least one cookie to allow must be provided");return new OriginRequestCookieBehavior("whitelist",cookies)}}exports.OriginRequestCookieBehavior=OriginRequestCookieBehavior,_b=JSII_RTTI_SYMBOL_1,OriginRequestCookieBehavior[_b]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestCookieBehavior",version:"2.51.1"};class OriginRequestHeaderBehavior{constructor(behavior,headers){this.behavior=behavior,this.headers=headers}static none(){return new OriginRequestHeaderBehavior("none")}static all(...cloudfrontHeaders){if(cloudfrontHeaders.length>0){if(!cloudfrontHeaders.every(header=>header.startsWith("CloudFront-")))throw new Error("additional CloudFront headers passed to `OriginRequestHeaderBehavior.all()` must begin with 'CloudFront-'");return new OriginRequestHeaderBehavior("allViewerAndWhitelistCloudFront",cloudfrontHeaders)}else return new OriginRequestHeaderBehavior("allViewer")}static allowList(...headers){if(headers.length===0)throw new Error("At least one header to allow must be provided");if(headers.map(header=>header.toLowerCase()).some(header=>["authorization","accept-encoding"].includes(header)))throw new Error("you cannot pass `Authorization` or `Accept-Encoding` as header values; use a CachePolicy to forward these headers instead");return new OriginRequestHeaderBehavior("whitelist",headers)}}exports.OriginRequestHeaderBehavior=OriginRequestHeaderBehavior,_c=JSII_RTTI_SYMBOL_1,OriginRequestHeaderBehavior[_c]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestHeaderBehavior",version:"2.51.1"};class OriginRequestQueryStringBehavior{constructor(behavior,queryStrings){this.behavior=behavior,this.queryStrings=queryStrings}static none(){return new OriginRequestQueryStringBehavior("none")}static all(){return new OriginRequestQueryStringBehavior("all")}static allowList(...queryStrings){if(queryStrings.length===0)throw new Error("At least one query string to allow must be provided");return new OriginRequestQueryStringBehavior("whitelist",queryStrings)}}exports.OriginRequestQueryStringBehavior=OriginRequestQueryStringBehavior,_d=JSII_RTTI_SYMBOL_1,OriginRequestQueryStringBehavior[_d]={fqn:"aws-cdk-lib.aws_cloudfront.OriginRequestQueryStringBehavior",version:"2.51.1"};
 //# sourceMappingURL=origin-request-policy.js.map

package/aws-cloudfront/lib/origin.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginBase=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core");class OriginBase{constructor(domainName,props={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginBase),error}validateIntInRangeOrUndefined("connectionTimeout",1,10,props.connectionTimeout?.toSeconds()),validateIntInRangeOrUndefined("connectionAttempts",1,3,props.connectionAttempts,!1),validateCustomHeaders(props.customHeaders),this.domainName=domainName,this.originPath=this.validateOriginPath(props.originPath),this.connectionTimeout=props.connectionTimeout,this.connectionAttempts=props.connectionAttempts,this.customHeaders=props.customHeaders,this.originShieldRegion=props.originShieldRegion,this.originId=props.originId,this.originShieldEnabled=props.originShieldEnabled??!0}bind(_scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}const s3OriginConfig=this.renderS3OriginConfig(),customOriginConfig=this.renderCustomOriginConfig();if(!s3OriginConfig&&!customOriginConfig)throw new Error("Subclass must override and provide either s3OriginConfig or customOriginConfig");return{originProperty:{domainName:this.domainName,id:this.originId??options.originId,originPath:this.originPath,connectionAttempts:this.connectionAttempts,connectionTimeout:this.connectionTimeout?.toSeconds(),originCustomHeaders:this.renderCustomHeaders(),s3OriginConfig,customOriginConfig,originShield:this.renderOriginShield(this.originShieldEnabled,this.originShieldRegion)}}}renderS3OriginConfig(){}renderCustomOriginConfig(){}renderCustomHeaders(){if(!(!this.customHeaders||Object.entries(this.customHeaders).length===0))return Object.entries(this.customHeaders).map(([headerName,headerValue])=>({headerName,headerValue}))}validateOriginPath(originPath){if(core_1.Token.isUnresolved(originPath))return originPath;if(originPath===void 0)return;let path=originPath;return path.startsWith("/")||(path="/"+path),path.endsWith("/")&&(path=path.slice(0,-1)),path}renderOriginShield(originShieldEnabled,originShieldRegion){return originShieldEnabled?originShieldRegion?{enabled:!0,originShieldRegion}:void 0:{enabled:!1}}}exports.OriginBase=OriginBase,_a=JSII_RTTI_SYMBOL_1,OriginBase[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginBase",version:"2.51.0"};function validateIntInRangeOrUndefined(name,min,max,value,isDuration=!0){if(value!==void 0&&(!Number.isInteger(value)||value<min||value>max)){const seconds=isDuration?" seconds":"";throw new Error(`${name}: Must be an int between ${min} and ${max}${seconds} (inclusive); received ${value}.`)}}function validateCustomHeaders(customHeaders){if(!customHeaders||Object.entries(customHeaders).length===0)return;const customHeaderKeys=Object.keys(customHeaders),prohibitedHeaderKeys=["Cache-Control","Connection","Content-Length","Cookie","Host","If-Match","If-Modified-Since","If-None-Match","If-Range","If-Unmodified-Since","Max-Forwards","Pragma","Proxy-Authorization","Proxy-Connection","Range","Request-Range","TE","Trailer","Transfer-Encoding","Upgrade","Via","X-Real-Ip"],prohibitedHeaderKeyPrefixes=["X-Amz-","X-Edge-"],prohibitedHeadersKeysMatches=customHeaderKeys.filter(customKey=>prohibitedHeaderKeys.map(prohibitedKey=>prohibitedKey.toLowerCase()).includes(customKey.toLowerCase())),prohibitedHeaderPrefixMatches=customHeaderKeys.filter(customKey=>prohibitedHeaderKeyPrefixes.some(prohibitedKeyPrefix=>customKey.toLowerCase().startsWith(prohibitedKeyPrefix.toLowerCase())));if(prohibitedHeadersKeysMatches.length!==0)throw new Error(`The following headers cannot be configured as custom origin headers: ${prohibitedHeadersKeysMatches.join(", ")}`);if(prohibitedHeaderPrefixMatches.length!==0)throw new Error(`The following headers cannot be used as prefixes for custom origin headers: ${prohibitedHeaderPrefixMatches.join(", ")}`)}
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginBase=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core");class OriginBase{constructor(domainName,props={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginBase),error}validateIntInRangeOrUndefined("connectionTimeout",1,10,props.connectionTimeout?.toSeconds()),validateIntInRangeOrUndefined("connectionAttempts",1,3,props.connectionAttempts,!1),validateCustomHeaders(props.customHeaders),this.domainName=domainName,this.originPath=this.validateOriginPath(props.originPath),this.connectionTimeout=props.connectionTimeout,this.connectionAttempts=props.connectionAttempts,this.customHeaders=props.customHeaders,this.originShieldRegion=props.originShieldRegion,this.originId=props.originId,this.originShieldEnabled=props.originShieldEnabled??!0}bind(_scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}const s3OriginConfig=this.renderS3OriginConfig(),customOriginConfig=this.renderCustomOriginConfig();if(!s3OriginConfig&&!customOriginConfig)throw new Error("Subclass must override and provide either s3OriginConfig or customOriginConfig");return{originProperty:{domainName:this.domainName,id:this.originId??options.originId,originPath:this.originPath,connectionAttempts:this.connectionAttempts,connectionTimeout:this.connectionTimeout?.toSeconds(),originCustomHeaders:this.renderCustomHeaders(),s3OriginConfig,customOriginConfig,originShield:this.renderOriginShield(this.originShieldEnabled,this.originShieldRegion)}}}renderS3OriginConfig(){}renderCustomOriginConfig(){}renderCustomHeaders(){if(!(!this.customHeaders||Object.entries(this.customHeaders).length===0))return Object.entries(this.customHeaders).map(([headerName,headerValue])=>({headerName,headerValue}))}validateOriginPath(originPath){if(core_1.Token.isUnresolved(originPath))return originPath;if(originPath===void 0)return;let path=originPath;return path.startsWith("/")||(path="/"+path),path.endsWith("/")&&(path=path.slice(0,-1)),path}renderOriginShield(originShieldEnabled,originShieldRegion){return originShieldEnabled?originShieldRegion?{enabled:!0,originShieldRegion}:void 0:{enabled:!1}}}exports.OriginBase=OriginBase,_a=JSII_RTTI_SYMBOL_1,OriginBase[_a]={fqn:"aws-cdk-lib.aws_cloudfront.OriginBase",version:"2.51.1"};function validateIntInRangeOrUndefined(name,min,max,value,isDuration=!0){if(value!==void 0&&(!Number.isInteger(value)||value<min||value>max)){const seconds=isDuration?" seconds":"";throw new Error(`${name}: Must be an int between ${min} and ${max}${seconds} (inclusive); received ${value}.`)}}function validateCustomHeaders(customHeaders){if(!customHeaders||Object.entries(customHeaders).length===0)return;const customHeaderKeys=Object.keys(customHeaders),prohibitedHeaderKeys=["Cache-Control","Connection","Content-Length","Cookie","Host","If-Match","If-Modified-Since","If-None-Match","If-Range","If-Unmodified-Since","Max-Forwards","Pragma","Proxy-Authorization","Proxy-Connection","Range","Request-Range","TE","Trailer","Transfer-Encoding","Upgrade","Via","X-Real-Ip"],prohibitedHeaderKeyPrefixes=["X-Amz-","X-Edge-"],prohibitedHeadersKeysMatches=customHeaderKeys.filter(customKey=>prohibitedHeaderKeys.map(prohibitedKey=>prohibitedKey.toLowerCase()).includes(customKey.toLowerCase())),prohibitedHeaderPrefixMatches=customHeaderKeys.filter(customKey=>prohibitedHeaderKeyPrefixes.some(prohibitedKeyPrefix=>customKey.toLowerCase().startsWith(prohibitedKeyPrefix.toLowerCase())));if(prohibitedHeadersKeysMatches.length!==0)throw new Error(`The following headers cannot be configured as custom origin headers: ${prohibitedHeadersKeysMatches.join(", ")}`);if(prohibitedHeaderPrefixMatches.length!==0)throw new Error(`The following headers cannot be used as prefixes for custom origin headers: ${prohibitedHeaderPrefixMatches.join(", ")}`)}
 //# sourceMappingURL=origin.js.map

package/aws-cloudfront/lib/public-key.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PublicKey=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class PublicKey extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_PublicKeyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,PublicKey),error}if(!core_1.Token.isUnresolved(props.encodedKey)&&!/^-----BEGIN PUBLIC KEY-----/.test(props.encodedKey))throw new Error(`Public key must be in PEM format (with the BEGIN/END PUBLIC KEY lines); got ${props.encodedKey}`);const resource=new cloudfront_generated_1.CfnPublicKey(this,"Resource",{publicKeyConfig:{name:props.publicKeyName??this.generateName(),callerReference:this.node.addr,encodedKey:props.encodedKey,comment:props.comment}});this.publicKeyId=resource.ref}static fromPublicKeyId(scope,id,publicKeyId){return new class extends core_1.Resource{constructor(){super(...arguments),this.publicKeyId=publicKeyId}}(scope,id)}generateName(){const name=core_1.Names.uniqueId(this);return name.length>80?name.substring(0,40)+name.substring(name.length-40):name}}exports.PublicKey=PublicKey,_a=JSII_RTTI_SYMBOL_1,PublicKey[_a]={fqn:"aws-cdk-lib.aws_cloudfront.PublicKey",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PublicKey=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class PublicKey extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_PublicKeyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,PublicKey),error}if(!core_1.Token.isUnresolved(props.encodedKey)&&!/^-----BEGIN PUBLIC KEY-----/.test(props.encodedKey))throw new Error(`Public key must be in PEM format (with the BEGIN/END PUBLIC KEY lines); got ${props.encodedKey}`);const resource=new cloudfront_generated_1.CfnPublicKey(this,"Resource",{publicKeyConfig:{name:props.publicKeyName??this.generateName(),callerReference:this.node.addr,encodedKey:props.encodedKey,comment:props.comment}});this.publicKeyId=resource.ref}static fromPublicKeyId(scope,id,publicKeyId){return new class extends core_1.Resource{constructor(){super(...arguments),this.publicKeyId=publicKeyId}}(scope,id)}generateName(){const name=core_1.Names.uniqueId(this);return name.length>80?name.substring(0,40)+name.substring(name.length-40):name}}exports.PublicKey=PublicKey,_a=JSII_RTTI_SYMBOL_1,PublicKey[_a]={fqn:"aws-cdk-lib.aws_cloudfront.PublicKey",version:"2.51.1"};
 //# sourceMappingURL=public-key.js.map

package/aws-cloudfront/lib/response-headers-policy.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HeadersReferrerPolicy=exports.HeadersFrameOption=exports.ResponseHeadersPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class ResponseHeadersPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.responseHeadersPolicyName});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ResponseHeadersPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ResponseHeadersPolicy),error}const responseHeadersPolicyName=props.responseHeadersPolicyName??core_1.Names.uniqueResourceName(this,{maxLength:128}),resource=new cloudfront_generated_1.CfnResponseHeadersPolicy(this,"Resource",{responseHeadersPolicyConfig:{name:responseHeadersPolicyName,comment:props.comment,corsConfig:props.corsBehavior?this._renderCorsConfig(props.corsBehavior):void 0,customHeadersConfig:props.customHeadersBehavior?this._renderCustomHeadersConfig(props.customHeadersBehavior):void 0,securityHeadersConfig:props.securityHeadersBehavior?this._renderSecurityHeadersConfig(props.securityHeadersBehavior):void 0}});this.responseHeadersPolicyId=resource.ref}static fromResponseHeadersPolicyId(scope,id,responseHeadersPolicyId){class Import extends core_1.Resource{constructor(){super(...arguments),this.responseHeadersPolicyId=responseHeadersPolicyId}}return new Import(scope,id)}static fromManagedResponseHeadersPolicy(managedResponseHeadersPolicyId){return new class{constructor(){this.responseHeadersPolicyId=managedResponseHeadersPolicyId}}}_renderCorsConfig(behavior){return{accessControlAllowCredentials:behavior.accessControlAllowCredentials,accessControlAllowHeaders:{items:behavior.accessControlAllowHeaders},accessControlAllowMethods:{items:behavior.accessControlAllowMethods},accessControlAllowOrigins:{items:behavior.accessControlAllowOrigins},accessControlExposeHeaders:behavior.accessControlExposeHeaders?{items:behavior.accessControlExposeHeaders}:void 0,accessControlMaxAgeSec:behavior.accessControlMaxAge?behavior.accessControlMaxAge.toSeconds():void 0,originOverride:behavior.originOverride}}_renderCustomHeadersConfig(behavior){return{items:behavior.customHeaders}}_renderSecurityHeadersConfig(behavior){return{contentSecurityPolicy:behavior.contentSecurityPolicy,contentTypeOptions:behavior.contentTypeOptions,frameOptions:behavior.frameOptions,referrerPolicy:behavior.referrerPolicy,strictTransportSecurity:behavior.strictTransportSecurity?{...behavior.strictTransportSecurity,accessControlMaxAgeSec:behavior.strictTransportSecurity.accessControlMaxAge.toSeconds()}:void 0,xssProtection:behavior.xssProtection}}}exports.ResponseHeadersPolicy=ResponseHeadersPolicy,_a=JSII_RTTI_SYMBOL_1,ResponseHeadersPolicy[_a]={fqn:"aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy",version:"2.51.0"},ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("60669652-455b-4ae9-85a4-c4c02393f86c"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("5cc3b908-e619-4b99-88e5-2cf7f45965bd"),ResponseHeadersPolicy.SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("67f7725c-6f97-4210-82d7-5512b31e9d03"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_AND_SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("e61eb60c-9c35-4d20-a928-2b84e02af89c"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT_AND_SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("eaab4381-ed33-4a86-88ca-d9558dc6cd63");var HeadersFrameOption;(function(HeadersFrameOption2){HeadersFrameOption2.DENY="DENY",HeadersFrameOption2.SAMEORIGIN="SAMEORIGIN"})(HeadersFrameOption=exports.HeadersFrameOption||(exports.HeadersFrameOption={}));var HeadersReferrerPolicy;(function(HeadersReferrerPolicy2){HeadersReferrerPolicy2.NO_REFERRER="no-referrer",HeadersReferrerPolicy2.NO_REFERRER_WHEN_DOWNGRADE="no-referrer-when-downgrade",HeadersReferrerPolicy2.ORIGIN="origin",HeadersReferrerPolicy2.ORIGIN_WHEN_CROSS_ORIGIN="origin-when-cross-origin",HeadersReferrerPolicy2.SAME_ORIGIN="same-origin",HeadersReferrerPolicy2.STRICT_ORIGIN="strict-origin",HeadersReferrerPolicy2.STRICT_ORIGIN_WHEN_CROSS_ORIGIN="strict-origin-when-cross-origin",HeadersReferrerPolicy2.UNSAFE_URL="unsafe-url"})(HeadersReferrerPolicy=exports.HeadersReferrerPolicy||(exports.HeadersReferrerPolicy={}));
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HeadersReferrerPolicy=exports.HeadersFrameOption=exports.ResponseHeadersPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated");class ResponseHeadersPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.responseHeadersPolicyName});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ResponseHeadersPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ResponseHeadersPolicy),error}const responseHeadersPolicyName=props.responseHeadersPolicyName??core_1.Names.uniqueResourceName(this,{maxLength:128}),resource=new cloudfront_generated_1.CfnResponseHeadersPolicy(this,"Resource",{responseHeadersPolicyConfig:{name:responseHeadersPolicyName,comment:props.comment,corsConfig:props.corsBehavior?this._renderCorsConfig(props.corsBehavior):void 0,customHeadersConfig:props.customHeadersBehavior?this._renderCustomHeadersConfig(props.customHeadersBehavior):void 0,securityHeadersConfig:props.securityHeadersBehavior?this._renderSecurityHeadersConfig(props.securityHeadersBehavior):void 0}});this.responseHeadersPolicyId=resource.ref}static fromResponseHeadersPolicyId(scope,id,responseHeadersPolicyId){class Import extends core_1.Resource{constructor(){super(...arguments),this.responseHeadersPolicyId=responseHeadersPolicyId}}return new Import(scope,id)}static fromManagedResponseHeadersPolicy(managedResponseHeadersPolicyId){return new class{constructor(){this.responseHeadersPolicyId=managedResponseHeadersPolicyId}}}_renderCorsConfig(behavior){return{accessControlAllowCredentials:behavior.accessControlAllowCredentials,accessControlAllowHeaders:{items:behavior.accessControlAllowHeaders},accessControlAllowMethods:{items:behavior.accessControlAllowMethods},accessControlAllowOrigins:{items:behavior.accessControlAllowOrigins},accessControlExposeHeaders:behavior.accessControlExposeHeaders?{items:behavior.accessControlExposeHeaders}:void 0,accessControlMaxAgeSec:behavior.accessControlMaxAge?behavior.accessControlMaxAge.toSeconds():void 0,originOverride:behavior.originOverride}}_renderCustomHeadersConfig(behavior){return{items:behavior.customHeaders}}_renderSecurityHeadersConfig(behavior){return{contentSecurityPolicy:behavior.contentSecurityPolicy,contentTypeOptions:behavior.contentTypeOptions,frameOptions:behavior.frameOptions,referrerPolicy:behavior.referrerPolicy,strictTransportSecurity:behavior.strictTransportSecurity?{...behavior.strictTransportSecurity,accessControlMaxAgeSec:behavior.strictTransportSecurity.accessControlMaxAge.toSeconds()}:void 0,xssProtection:behavior.xssProtection}}}exports.ResponseHeadersPolicy=ResponseHeadersPolicy,_a=JSII_RTTI_SYMBOL_1,ResponseHeadersPolicy[_a]={fqn:"aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy",version:"2.51.1"},ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("60669652-455b-4ae9-85a4-c4c02393f86c"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("5cc3b908-e619-4b99-88e5-2cf7f45965bd"),ResponseHeadersPolicy.SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("67f7725c-6f97-4210-82d7-5512b31e9d03"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_AND_SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("e61eb60c-9c35-4d20-a928-2b84e02af89c"),ResponseHeadersPolicy.CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT_AND_SECURITY_HEADERS=ResponseHeadersPolicy.fromManagedResponseHeadersPolicy("eaab4381-ed33-4a86-88ca-d9558dc6cd63");var HeadersFrameOption;(function(HeadersFrameOption2){HeadersFrameOption2.DENY="DENY",HeadersFrameOption2.SAMEORIGIN="SAMEORIGIN"})(HeadersFrameOption=exports.HeadersFrameOption||(exports.HeadersFrameOption={}));var HeadersReferrerPolicy;(function(HeadersReferrerPolicy2){HeadersReferrerPolicy2.NO_REFERRER="no-referrer",HeadersReferrerPolicy2.NO_REFERRER_WHEN_DOWNGRADE="no-referrer-when-downgrade",HeadersReferrerPolicy2.ORIGIN="origin",HeadersReferrerPolicy2.ORIGIN_WHEN_CROSS_ORIGIN="origin-when-cross-origin",HeadersReferrerPolicy2.SAME_ORIGIN="same-origin",HeadersReferrerPolicy2.STRICT_ORIGIN="strict-origin",HeadersReferrerPolicy2.STRICT_ORIGIN_WHEN_CROSS_ORIGIN="strict-origin-when-cross-origin",HeadersReferrerPolicy2.UNSAFE_URL="unsafe-url"})(HeadersReferrerPolicy=exports.HeadersReferrerPolicy||(exports.HeadersReferrerPolicy={}));
 //# sourceMappingURL=response-headers-policy.js.map

package/aws-cloudfront/lib/web-distribution.js

@@ -1,3 +1,3 @@
-"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFrontWebDistribution=exports.ViewerCertificate=exports.CloudFrontAllowedCachedMethods=exports.CloudFrontAllowedMethods=exports.OriginSslPolicy=exports.FailoverStatusCode=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),certificatemanager=require("../../aws-certificatemanager"),iam=require("../../aws-iam"),s3=require("../../aws-s3"),cdk=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated"),distribution_1=require("./distribution");var FailoverStatusCode;(function(FailoverStatusCode2){FailoverStatusCode2[FailoverStatusCode2.FORBIDDEN=403]="FORBIDDEN",FailoverStatusCode2[FailoverStatusCode2.NOT_FOUND=404]="NOT_FOUND",FailoverStatusCode2[FailoverStatusCode2.INTERNAL_SERVER_ERROR=500]="INTERNAL_SERVER_ERROR",FailoverStatusCode2[FailoverStatusCode2.BAD_GATEWAY=502]="BAD_GATEWAY",FailoverStatusCode2[FailoverStatusCode2.SERVICE_UNAVAILABLE=503]="SERVICE_UNAVAILABLE",FailoverStatusCode2[FailoverStatusCode2.GATEWAY_TIMEOUT=504]="GATEWAY_TIMEOUT"})(FailoverStatusCode=exports.FailoverStatusCode||(exports.FailoverStatusCode={}));var OriginSslPolicy;(function(OriginSslPolicy2){OriginSslPolicy2.SSL_V3="SSLv3",OriginSslPolicy2.TLS_V1="TLSv1",OriginSslPolicy2.TLS_V1_1="TLSv1.1",OriginSslPolicy2.TLS_V1_2="TLSv1.2"})(OriginSslPolicy=exports.OriginSslPolicy||(exports.OriginSslPolicy={}));var CloudFrontAllowedMethods;(function(CloudFrontAllowedMethods2){CloudFrontAllowedMethods2.GET_HEAD="GH",CloudFrontAllowedMethods2.GET_HEAD_OPTIONS="GHO",CloudFrontAllowedMethods2.ALL="ALL"})(CloudFrontAllowedMethods=exports.CloudFrontAllowedMethods||(exports.CloudFrontAllowedMethods={}));var CloudFrontAllowedCachedMethods;(function(CloudFrontAllowedCachedMethods2){CloudFrontAllowedCachedMethods2.GET_HEAD="GH",CloudFrontAllowedCachedMethods2.GET_HEAD_OPTIONS="GHO"})(CloudFrontAllowedCachedMethods=exports.CloudFrontAllowedCachedMethods||(exports.CloudFrontAllowedCachedMethods={}));class ViewerCertificate{constructor(props,aliases=[]){this.props=props,this.aliases=aliases}static fromAcmCertificate(certificate,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_certificatemanager_ICertificate(certificate),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ViewerCertificateOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromAcmCertificate),error}const{sslMethod:sslSupportMethod=distribution_1.SSLMethod.SNI,securityPolicy:minimumProtocolVersion,aliases}=options;return new ViewerCertificate({acmCertificateArn:certificate.certificateArn,sslSupportMethod,minimumProtocolVersion},aliases)}static fromIamCertificate(iamCertificateId,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ViewerCertificateOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromIamCertificate),error}const{sslMethod:sslSupportMethod=distribution_1.SSLMethod.SNI,securityPolicy:minimumProtocolVersion,aliases}=options;return new ViewerCertificate({iamCertificateId,sslSupportMethod,minimumProtocolVersion},aliases)}static fromCloudFrontDefaultCertificate(...aliases){return new ViewerCertificate({cloudFrontDefaultCertificate:!0},aliases)}}exports.ViewerCertificate=ViewerCertificate,_a=JSII_RTTI_SYMBOL_1,ViewerCertificate[_a]={fqn:"aws-cdk-lib.aws_cloudfront.ViewerCertificate",version:"2.51.0"};class CloudFrontWebDistribution extends cdk.Resource{constructor(scope,id,props){super(scope,id),this.METHOD_LOOKUP_MAP={GH:["GET","HEAD"],GHO:["GET","HEAD","OPTIONS"],ALL:["DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT"]},this.VALID_SSL_PROTOCOLS={[distribution_1.SSLMethod.SNI]:[distribution_1.SecurityPolicyProtocol.TLS_V1,distribution_1.SecurityPolicyProtocol.TLS_V1_1_2016,distribution_1.SecurityPolicyProtocol.TLS_V1_2016,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2018,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2019,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2021],[distribution_1.SSLMethod.VIP]:[distribution_1.SecurityPolicyProtocol.SSL_V3,distribution_1.SecurityPolicyProtocol.TLS_V1]};try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_CloudFrontWebDistributionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CloudFrontWebDistribution),error}const trimmedComment=props.comment&&props.comment.length>128?`${props.comment.slice(0,128-3)}...`:props.comment,behaviors=[],origins=[],originGroups=[];let originIndex=1;for(const originConfig of props.originConfigs){let originId=`origin${originIndex}`;const originProperty=this.toOriginProperty(originConfig,originId);if(originConfig.failoverCustomOriginSource||originConfig.failoverS3OriginSource){const originSecondaryId=`originSecondary${originIndex}`,originSecondaryProperty=this.toOriginProperty({s3OriginSource:originConfig.failoverS3OriginSource,customOriginSource:originConfig.failoverCustomOriginSource,originPath:originConfig.originPath,originHeaders:originConfig.originHeaders,originShieldRegion:originConfig.originShieldRegion},originSecondaryId),originGroupsId=`OriginGroup${originIndex}`,failoverCodes=originConfig.failoverCriteriaStatusCodes??[500,502,503,504];originGroups.push({id:originGroupsId,members:{items:[{originId},{originId:originSecondaryId}],quantity:2},failoverCriteria:{statusCodes:{items:failoverCodes,quantity:failoverCodes.length}}}),originId=originGroupsId,origins.push(originSecondaryProperty)}for(const behavior of originConfig.behaviors)behaviors.push({...behavior,targetOriginId:originId});origins.push(originProperty),originIndex++}origins.forEach(origin=>{if(!origin.s3OriginConfig&&!origin.customOriginConfig)throw new Error(`Origin ${origin.domainName} is missing either S3OriginConfig or CustomOriginConfig. At least 1 must be specified.`)});const originGroupsDistConfig=originGroups.length>0?{items:originGroups,quantity:originGroups.length}:void 0,defaultBehaviors=behaviors.filter(behavior=>behavior.isDefaultBehavior);if(defaultBehaviors.length!==1)throw new Error("There can only be one default behavior across all sources. [ One default behavior per distribution ].");const otherBehaviors=[];for(const behavior of behaviors.filter(b=>!b.isDefaultBehavior)){if(!behavior.pathPattern)throw new Error("pathPattern is required for all non-default behaviors");otherBehaviors.push(this.toBehavior(behavior,props.viewerProtocolPolicy))}let distributionConfig={comment:trimmedComment,enabled:props.enabled??!0,defaultRootObject:props.defaultRootObject??"index.html",httpVersion:props.httpVersion||distribution_1.HttpVersion.HTTP2,priceClass:props.priceClass||distribution_1.PriceClass.PRICE_CLASS_100,ipv6Enabled:props.enableIpV6??!0,customErrorResponses:props.errorConfigurations,webAclId:props.webACLId,origins,originGroups:originGroupsDistConfig,defaultCacheBehavior:this.toBehavior(defaultBehaviors[0],props.viewerProtocolPolicy),cacheBehaviors:otherBehaviors.length>0?otherBehaviors:void 0};if(props.aliasConfiguration&&props.viewerCertificate)throw new Error(["You cannot set both aliasConfiguration and viewerCertificate properties.","Please only use viewerCertificate, as aliasConfiguration is deprecated."].join(" "));let _viewerCertificate=props.viewerCertificate;if(props.aliasConfiguration){const{acmCertRef,securityPolicy,sslMethod,names:aliases}=props.aliasConfiguration;_viewerCertificate=ViewerCertificate.fromAcmCertificate(certificatemanager.Certificate.fromCertificateArn(this,"AliasConfigurationCert",acmCertRef),{securityPolicy,sslMethod,aliases})}if(_viewerCertificate){const{props:viewerCertificate,aliases}=_viewerCertificate;Object.assign(distributionConfig,{aliases,viewerCertificate});const{minimumProtocolVersion,sslSupportMethod}=viewerCertificate;if(minimumProtocolVersion!=null&&sslSupportMethod!=null){const validProtocols=this.VALID_SSL_PROTOCOLS[sslSupportMethod];if(validProtocols.indexOf(minimumProtocolVersion.toString())===-1)throw new Error(`${minimumProtocolVersion} is not compabtible with sslMethod ${sslSupportMethod}.
-	Valid Protocols are: ${validProtocols.join(", ")}`)}}else distributionConfig={...distributionConfig,viewerCertificate:{cloudFrontDefaultCertificate:!0}};props.loggingConfig&&(this.loggingBucket=props.loggingConfig.bucket||new s3.Bucket(this,"LoggingBucket",{encryption:s3.BucketEncryption.S3_MANAGED}),distributionConfig={...distributionConfig,logging:{bucket:this.loggingBucket.bucketRegionalDomainName,includeCookies:props.loggingConfig.includeCookies||!1,prefix:props.loggingConfig.prefix}}),props.geoRestriction&&(distributionConfig={...distributionConfig,restrictions:{geoRestriction:{restrictionType:props.geoRestriction.restrictionType,locations:props.geoRestriction.locations}}});const distribution=new cloudfront_generated_1.CfnDistribution(this,"CFDistribution",{distributionConfig});this.node.defaultChild=distribution,this.domainName=distribution.attrDomainName,this.distributionDomainName=distribution.attrDomainName,this.distributionId=distribution.ref}static fromDistributionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_CloudFrontWebDistributionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromDistributionAttributes),error}return new class extends cdk.Resource{constructor(){super(scope,id),this.domainName=attrs.domainName,this.distributionDomainName=attrs.domainName,this.distributionId=attrs.distributionId}}}toBehavior(input,protoPolicy){let toReturn={allowedMethods:this.METHOD_LOOKUP_MAP[input.allowedMethods||CloudFrontAllowedMethods.GET_HEAD],cachedMethods:this.METHOD_LOOKUP_MAP[input.cachedMethods||CloudFrontAllowedCachedMethods.GET_HEAD],compress:input.compress!==!1,defaultTtl:input.defaultTtl&&input.defaultTtl.toSeconds(),forwardedValues:input.forwardedValues||{queryString:!1,cookies:{forward:"none"}},maxTtl:input.maxTtl&&input.maxTtl.toSeconds(),minTtl:input.minTtl&&input.minTtl.toSeconds(),trustedKeyGroups:input.trustedKeyGroups?.map(key=>key.keyGroupId),trustedSigners:input.trustedSigners,targetOriginId:input.targetOriginId,viewerProtocolPolicy:input.viewerProtocolPolicy||protoPolicy||distribution_1.ViewerProtocolPolicy.REDIRECT_TO_HTTPS};if(input.isDefaultBehavior||(toReturn=Object.assign(toReturn,{pathPattern:input.pathPattern})),input.functionAssociations&&(toReturn=Object.assign(toReturn,{functionAssociations:input.functionAssociations.map(association=>({functionArn:association.function.functionArn,eventType:association.eventType.toString()}))})),input.lambdaFunctionAssociations){const includeBodyEventTypes=[distribution_1.LambdaEdgeEventType.ORIGIN_REQUEST,distribution_1.LambdaEdgeEventType.VIEWER_REQUEST];if(input.lambdaFunctionAssociations.some(fna=>fna.includeBody&&!includeBodyEventTypes.includes(fna.eventType)))throw new Error("'includeBody' can only be true for ORIGIN_REQUEST or VIEWER_REQUEST event types.");toReturn=Object.assign(toReturn,{lambdaFunctionAssociations:input.lambdaFunctionAssociations.map(fna=>({eventType:fna.eventType,lambdaFunctionArn:fna.lambdaFunction&&fna.lambdaFunction.edgeArn,includeBody:fna.includeBody}))});for(const a of input.lambdaFunctionAssociations)a.lambdaFunction.role&&a.lambdaFunction.role instanceof iam.Role&&a.lambdaFunction.role.assumeRolePolicy&&a.lambdaFunction.role.assumeRolePolicy.addStatements(new iam.PolicyStatement({actions:["sts:AssumeRole"],principals:[new iam.ServicePrincipal("edgelambda.amazonaws.com")]}))}return toReturn}toOriginProperty(originConfig,originId){if(!originConfig.s3OriginSource&&!originConfig.customOriginSource)throw new Error("There must be at least one origin source - either an s3OriginSource, a customOriginSource");if(originConfig.customOriginSource&&originConfig.s3OriginSource)throw new Error("There cannot be both an s3OriginSource and a customOriginSource in the same SourceConfiguration.");if([originConfig.originHeaders,originConfig.s3OriginSource?.originHeaders,originConfig.customOriginSource?.originHeaders].filter(x=>x).length>1)throw new Error("Only one originHeaders field allowed across origin and failover origins");if([originConfig.originPath,originConfig.s3OriginSource?.originPath,originConfig.customOriginSource?.originPath].filter(x=>x).length>1)throw new Error("Only one originPath field allowed across origin and failover origins");if([originConfig.originShieldRegion,originConfig.s3OriginSource?.originShieldRegion,originConfig.customOriginSource?.originShieldRegion].filter(x=>x).length>1)throw new Error("Only one originShieldRegion field allowed across origin and failover origins");const headers=originConfig.originHeaders??originConfig.s3OriginSource?.originHeaders??originConfig.customOriginSource?.originHeaders,originHeaders=[];headers&&Object.keys(headers).forEach(key=>{const oHeader={headerName:key,headerValue:headers[key]};originHeaders.push(oHeader)});let s3OriginConfig;originConfig.s3OriginSource&&(originConfig.s3OriginSource.originAccessIdentity?(originConfig.s3OriginSource.s3BucketSource.addToResourcePolicy(new iam.PolicyStatement({resources:[originConfig.s3OriginSource.s3BucketSource.arnForObjects("*")],actions:["s3:GetObject"],principals:[originConfig.s3OriginSource.originAccessIdentity.grantPrincipal]})),s3OriginConfig={originAccessIdentity:`origin-access-identity/cloudfront/${originConfig.s3OriginSource.originAccessIdentity.originAccessIdentityId}`}):s3OriginConfig={});const connectionAttempts=originConfig.connectionAttempts??3;if(connectionAttempts<1||3<connectionAttempts||!Number.isInteger(connectionAttempts))throw new Error("connectionAttempts: You can specify 1, 2, or 3 as the number of attempts.");const connectionTimeout=(originConfig.connectionTimeout||cdk.Duration.seconds(10)).toSeconds();if(connectionTimeout<1||10<connectionTimeout||!Number.isInteger(connectionTimeout))throw new Error("connectionTimeout: You can specify a number of seconds between 1 and 10 (inclusive).");return{id:originId,domainName:originConfig.s3OriginSource?originConfig.s3OriginSource.s3BucketSource.bucketRegionalDomainName:originConfig.customOriginSource.domainName,originPath:originConfig.originPath??originConfig.customOriginSource?.originPath??originConfig.s3OriginSource?.originPath,originCustomHeaders:originHeaders.length>0?originHeaders:void 0,s3OriginConfig,originShield:this.toOriginShieldProperty(originConfig),customOriginConfig:originConfig.customOriginSource?{httpPort:originConfig.customOriginSource.httpPort||80,httpsPort:originConfig.customOriginSource.httpsPort||443,originKeepaliveTimeout:originConfig.customOriginSource.originKeepaliveTimeout&&originConfig.customOriginSource.originKeepaliveTimeout.toSeconds()||5,originReadTimeout:originConfig.customOriginSource.originReadTimeout&&originConfig.customOriginSource.originReadTimeout.toSeconds()||30,originProtocolPolicy:originConfig.customOriginSource.originProtocolPolicy||distribution_1.OriginProtocolPolicy.HTTPS_ONLY,originSslProtocols:originConfig.customOriginSource.allowedOriginSSLVersions||[OriginSslPolicy.TLS_V1_2]}:void 0,connectionAttempts,connectionTimeout}}toOriginShieldProperty(originConfig){const originShieldRegion=originConfig.originShieldRegion??originConfig.customOriginSource?.originShieldRegion??originConfig.s3OriginSource?.originShieldRegion;return originShieldRegion?{enabled:!0,originShieldRegion}:void 0}}exports.CloudFrontWebDistribution=CloudFrontWebDistribution,_b=JSII_RTTI_SYMBOL_1,CloudFrontWebDistribution[_b]={fqn:"aws-cdk-lib.aws_cloudfront.CloudFrontWebDistribution",version:"2.51.0"};
+"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFrontWebDistribution=exports.ViewerCertificate=exports.CloudFrontAllowedCachedMethods=exports.CloudFrontAllowedMethods=exports.OriginSslPolicy=exports.FailoverStatusCode=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),certificatemanager=require("../../aws-certificatemanager"),iam=require("../../aws-iam"),s3=require("../../aws-s3"),cdk=require("../../core"),cloudfront_generated_1=require("./cloudfront.generated"),distribution_1=require("./distribution");var FailoverStatusCode;(function(FailoverStatusCode2){FailoverStatusCode2[FailoverStatusCode2.FORBIDDEN=403]="FORBIDDEN",FailoverStatusCode2[FailoverStatusCode2.NOT_FOUND=404]="NOT_FOUND",FailoverStatusCode2[FailoverStatusCode2.INTERNAL_SERVER_ERROR=500]="INTERNAL_SERVER_ERROR",FailoverStatusCode2[FailoverStatusCode2.BAD_GATEWAY=502]="BAD_GATEWAY",FailoverStatusCode2[FailoverStatusCode2.SERVICE_UNAVAILABLE=503]="SERVICE_UNAVAILABLE",FailoverStatusCode2[FailoverStatusCode2.GATEWAY_TIMEOUT=504]="GATEWAY_TIMEOUT"})(FailoverStatusCode=exports.FailoverStatusCode||(exports.FailoverStatusCode={}));var OriginSslPolicy;(function(OriginSslPolicy2){OriginSslPolicy2.SSL_V3="SSLv3",OriginSslPolicy2.TLS_V1="TLSv1",OriginSslPolicy2.TLS_V1_1="TLSv1.1",OriginSslPolicy2.TLS_V1_2="TLSv1.2"})(OriginSslPolicy=exports.OriginSslPolicy||(exports.OriginSslPolicy={}));var CloudFrontAllowedMethods;(function(CloudFrontAllowedMethods2){CloudFrontAllowedMethods2.GET_HEAD="GH",CloudFrontAllowedMethods2.GET_HEAD_OPTIONS="GHO",CloudFrontAllowedMethods2.ALL="ALL"})(CloudFrontAllowedMethods=exports.CloudFrontAllowedMethods||(exports.CloudFrontAllowedMethods={}));var CloudFrontAllowedCachedMethods;(function(CloudFrontAllowedCachedMethods2){CloudFrontAllowedCachedMethods2.GET_HEAD="GH",CloudFrontAllowedCachedMethods2.GET_HEAD_OPTIONS="GHO"})(CloudFrontAllowedCachedMethods=exports.CloudFrontAllowedCachedMethods||(exports.CloudFrontAllowedCachedMethods={}));class ViewerCertificate{constructor(props,aliases=[]){this.props=props,this.aliases=aliases}static fromAcmCertificate(certificate,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_certificatemanager_ICertificate(certificate),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ViewerCertificateOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromAcmCertificate),error}const{sslMethod:sslSupportMethod=distribution_1.SSLMethod.SNI,securityPolicy:minimumProtocolVersion,aliases}=options;return new ViewerCertificate({acmCertificateArn:certificate.certificateArn,sslSupportMethod,minimumProtocolVersion},aliases)}static fromIamCertificate(iamCertificateId,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_ViewerCertificateOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromIamCertificate),error}const{sslMethod:sslSupportMethod=distribution_1.SSLMethod.SNI,securityPolicy:minimumProtocolVersion,aliases}=options;return new ViewerCertificate({iamCertificateId,sslSupportMethod,minimumProtocolVersion},aliases)}static fromCloudFrontDefaultCertificate(...aliases){return new ViewerCertificate({cloudFrontDefaultCertificate:!0},aliases)}}exports.ViewerCertificate=ViewerCertificate,_a=JSII_RTTI_SYMBOL_1,ViewerCertificate[_a]={fqn:"aws-cdk-lib.aws_cloudfront.ViewerCertificate",version:"2.51.1"};class CloudFrontWebDistribution extends cdk.Resource{constructor(scope,id,props){super(scope,id),this.METHOD_LOOKUP_MAP={GH:["GET","HEAD"],GHO:["GET","HEAD","OPTIONS"],ALL:["DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT"]},this.VALID_SSL_PROTOCOLS={[distribution_1.SSLMethod.SNI]:[distribution_1.SecurityPolicyProtocol.TLS_V1,distribution_1.SecurityPolicyProtocol.TLS_V1_1_2016,distribution_1.SecurityPolicyProtocol.TLS_V1_2016,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2018,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2019,distribution_1.SecurityPolicyProtocol.TLS_V1_2_2021],[distribution_1.SSLMethod.VIP]:[distribution_1.SecurityPolicyProtocol.SSL_V3,distribution_1.SecurityPolicyProtocol.TLS_V1]};try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_CloudFrontWebDistributionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CloudFrontWebDistribution),error}const trimmedComment=props.comment&&props.comment.length>128?`${props.comment.slice(0,128-3)}...`:props.comment,behaviors=[],origins=[],originGroups=[];let originIndex=1;for(const originConfig of props.originConfigs){let originId=`origin${originIndex}`;const originProperty=this.toOriginProperty(originConfig,originId);if(originConfig.failoverCustomOriginSource||originConfig.failoverS3OriginSource){const originSecondaryId=`originSecondary${originIndex}`,originSecondaryProperty=this.toOriginProperty({s3OriginSource:originConfig.failoverS3OriginSource,customOriginSource:originConfig.failoverCustomOriginSource,originPath:originConfig.originPath,originHeaders:originConfig.originHeaders,originShieldRegion:originConfig.originShieldRegion},originSecondaryId),originGroupsId=`OriginGroup${originIndex}`,failoverCodes=originConfig.failoverCriteriaStatusCodes??[500,502,503,504];originGroups.push({id:originGroupsId,members:{items:[{originId},{originId:originSecondaryId}],quantity:2},failoverCriteria:{statusCodes:{items:failoverCodes,quantity:failoverCodes.length}}}),originId=originGroupsId,origins.push(originSecondaryProperty)}for(const behavior of originConfig.behaviors)behaviors.push({...behavior,targetOriginId:originId});origins.push(originProperty),originIndex++}origins.forEach(origin=>{if(!origin.s3OriginConfig&&!origin.customOriginConfig)throw new Error(`Origin ${origin.domainName} is missing either S3OriginConfig or CustomOriginConfig. At least 1 must be specified.`)});const originGroupsDistConfig=originGroups.length>0?{items:originGroups,quantity:originGroups.length}:void 0,defaultBehaviors=behaviors.filter(behavior=>behavior.isDefaultBehavior);if(defaultBehaviors.length!==1)throw new Error("There can only be one default behavior across all sources. [ One default behavior per distribution ].");const otherBehaviors=[];for(const behavior of behaviors.filter(b=>!b.isDefaultBehavior)){if(!behavior.pathPattern)throw new Error("pathPattern is required for all non-default behaviors");otherBehaviors.push(this.toBehavior(behavior,props.viewerProtocolPolicy))}let distributionConfig={comment:trimmedComment,enabled:props.enabled??!0,defaultRootObject:props.defaultRootObject??"index.html",httpVersion:props.httpVersion||distribution_1.HttpVersion.HTTP2,priceClass:props.priceClass||distribution_1.PriceClass.PRICE_CLASS_100,ipv6Enabled:props.enableIpV6??!0,customErrorResponses:props.errorConfigurations,webAclId:props.webACLId,origins,originGroups:originGroupsDistConfig,defaultCacheBehavior:this.toBehavior(defaultBehaviors[0],props.viewerProtocolPolicy),cacheBehaviors:otherBehaviors.length>0?otherBehaviors:void 0};if(props.aliasConfiguration&&props.viewerCertificate)throw new Error(["You cannot set both aliasConfiguration and viewerCertificate properties.","Please only use viewerCertificate, as aliasConfiguration is deprecated."].join(" "));let _viewerCertificate=props.viewerCertificate;if(props.aliasConfiguration){const{acmCertRef,securityPolicy,sslMethod,names:aliases}=props.aliasConfiguration;_viewerCertificate=ViewerCertificate.fromAcmCertificate(certificatemanager.Certificate.fromCertificateArn(this,"AliasConfigurationCert",acmCertRef),{securityPolicy,sslMethod,aliases})}if(_viewerCertificate){const{props:viewerCertificate,aliases}=_viewerCertificate;Object.assign(distributionConfig,{aliases,viewerCertificate});const{minimumProtocolVersion,sslSupportMethod}=viewerCertificate;if(minimumProtocolVersion!=null&&sslSupportMethod!=null){const validProtocols=this.VALID_SSL_PROTOCOLS[sslSupportMethod];if(validProtocols.indexOf(minimumProtocolVersion.toString())===-1)throw new Error(`${minimumProtocolVersion} is not compabtible with sslMethod ${sslSupportMethod}.
+	Valid Protocols are: ${validProtocols.join(", ")}`)}}else distributionConfig={...distributionConfig,viewerCertificate:{cloudFrontDefaultCertificate:!0}};props.loggingConfig&&(this.loggingBucket=props.loggingConfig.bucket||new s3.Bucket(this,"LoggingBucket",{encryption:s3.BucketEncryption.S3_MANAGED}),distributionConfig={...distributionConfig,logging:{bucket:this.loggingBucket.bucketRegionalDomainName,includeCookies:props.loggingConfig.includeCookies||!1,prefix:props.loggingConfig.prefix}}),props.geoRestriction&&(distributionConfig={...distributionConfig,restrictions:{geoRestriction:{restrictionType:props.geoRestriction.restrictionType,locations:props.geoRestriction.locations}}});const distribution=new cloudfront_generated_1.CfnDistribution(this,"CFDistribution",{distributionConfig});this.node.defaultChild=distribution,this.domainName=distribution.attrDomainName,this.distributionDomainName=distribution.attrDomainName,this.distributionId=distribution.ref}static fromDistributionAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_CloudFrontWebDistributionAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromDistributionAttributes),error}return new class extends cdk.Resource{constructor(){super(scope,id),this.domainName=attrs.domainName,this.distributionDomainName=attrs.domainName,this.distributionId=attrs.distributionId}}}toBehavior(input,protoPolicy){let toReturn={allowedMethods:this.METHOD_LOOKUP_MAP[input.allowedMethods||CloudFrontAllowedMethods.GET_HEAD],cachedMethods:this.METHOD_LOOKUP_MAP[input.cachedMethods||CloudFrontAllowedCachedMethods.GET_HEAD],compress:input.compress!==!1,defaultTtl:input.defaultTtl&&input.defaultTtl.toSeconds(),forwardedValues:input.forwardedValues||{queryString:!1,cookies:{forward:"none"}},maxTtl:input.maxTtl&&input.maxTtl.toSeconds(),minTtl:input.minTtl&&input.minTtl.toSeconds(),trustedKeyGroups:input.trustedKeyGroups?.map(key=>key.keyGroupId),trustedSigners:input.trustedSigners,targetOriginId:input.targetOriginId,viewerProtocolPolicy:input.viewerProtocolPolicy||protoPolicy||distribution_1.ViewerProtocolPolicy.REDIRECT_TO_HTTPS};if(input.isDefaultBehavior||(toReturn=Object.assign(toReturn,{pathPattern:input.pathPattern})),input.functionAssociations&&(toReturn=Object.assign(toReturn,{functionAssociations:input.functionAssociations.map(association=>({functionArn:association.function.functionArn,eventType:association.eventType.toString()}))})),input.lambdaFunctionAssociations){const includeBodyEventTypes=[distribution_1.LambdaEdgeEventType.ORIGIN_REQUEST,distribution_1.LambdaEdgeEventType.VIEWER_REQUEST];if(input.lambdaFunctionAssociations.some(fna=>fna.includeBody&&!includeBodyEventTypes.includes(fna.eventType)))throw new Error("'includeBody' can only be true for ORIGIN_REQUEST or VIEWER_REQUEST event types.");toReturn=Object.assign(toReturn,{lambdaFunctionAssociations:input.lambdaFunctionAssociations.map(fna=>({eventType:fna.eventType,lambdaFunctionArn:fna.lambdaFunction&&fna.lambdaFunction.edgeArn,includeBody:fna.includeBody}))});for(const a of input.lambdaFunctionAssociations)a.lambdaFunction.role&&a.lambdaFunction.role instanceof iam.Role&&a.lambdaFunction.role.assumeRolePolicy&&a.lambdaFunction.role.assumeRolePolicy.addStatements(new iam.PolicyStatement({actions:["sts:AssumeRole"],principals:[new iam.ServicePrincipal("edgelambda.amazonaws.com")]}))}return toReturn}toOriginProperty(originConfig,originId){if(!originConfig.s3OriginSource&&!originConfig.customOriginSource)throw new Error("There must be at least one origin source - either an s3OriginSource, a customOriginSource");if(originConfig.customOriginSource&&originConfig.s3OriginSource)throw new Error("There cannot be both an s3OriginSource and a customOriginSource in the same SourceConfiguration.");if([originConfig.originHeaders,originConfig.s3OriginSource?.originHeaders,originConfig.customOriginSource?.originHeaders].filter(x=>x).length>1)throw new Error("Only one originHeaders field allowed across origin and failover origins");if([originConfig.originPath,originConfig.s3OriginSource?.originPath,originConfig.customOriginSource?.originPath].filter(x=>x).length>1)throw new Error("Only one originPath field allowed across origin and failover origins");if([originConfig.originShieldRegion,originConfig.s3OriginSource?.originShieldRegion,originConfig.customOriginSource?.originShieldRegion].filter(x=>x).length>1)throw new Error("Only one originShieldRegion field allowed across origin and failover origins");const headers=originConfig.originHeaders??originConfig.s3OriginSource?.originHeaders??originConfig.customOriginSource?.originHeaders,originHeaders=[];headers&&Object.keys(headers).forEach(key=>{const oHeader={headerName:key,headerValue:headers[key]};originHeaders.push(oHeader)});let s3OriginConfig;originConfig.s3OriginSource&&(originConfig.s3OriginSource.originAccessIdentity?(originConfig.s3OriginSource.s3BucketSource.addToResourcePolicy(new iam.PolicyStatement({resources:[originConfig.s3OriginSource.s3BucketSource.arnForObjects("*")],actions:["s3:GetObject"],principals:[originConfig.s3OriginSource.originAccessIdentity.grantPrincipal]})),s3OriginConfig={originAccessIdentity:`origin-access-identity/cloudfront/${originConfig.s3OriginSource.originAccessIdentity.originAccessIdentityId}`}):s3OriginConfig={});const connectionAttempts=originConfig.connectionAttempts??3;if(connectionAttempts<1||3<connectionAttempts||!Number.isInteger(connectionAttempts))throw new Error("connectionAttempts: You can specify 1, 2, or 3 as the number of attempts.");const connectionTimeout=(originConfig.connectionTimeout||cdk.Duration.seconds(10)).toSeconds();if(connectionTimeout<1||10<connectionTimeout||!Number.isInteger(connectionTimeout))throw new Error("connectionTimeout: You can specify a number of seconds between 1 and 10 (inclusive).");return{id:originId,domainName:originConfig.s3OriginSource?originConfig.s3OriginSource.s3BucketSource.bucketRegionalDomainName:originConfig.customOriginSource.domainName,originPath:originConfig.originPath??originConfig.customOriginSource?.originPath??originConfig.s3OriginSource?.originPath,originCustomHeaders:originHeaders.length>0?originHeaders:void 0,s3OriginConfig,originShield:this.toOriginShieldProperty(originConfig),customOriginConfig:originConfig.customOriginSource?{httpPort:originConfig.customOriginSource.httpPort||80,httpsPort:originConfig.customOriginSource.httpsPort||443,originKeepaliveTimeout:originConfig.customOriginSource.originKeepaliveTimeout&&originConfig.customOriginSource.originKeepaliveTimeout.toSeconds()||5,originReadTimeout:originConfig.customOriginSource.originReadTimeout&&originConfig.customOriginSource.originReadTimeout.toSeconds()||30,originProtocolPolicy:originConfig.customOriginSource.originProtocolPolicy||distribution_1.OriginProtocolPolicy.HTTPS_ONLY,originSslProtocols:originConfig.customOriginSource.allowedOriginSSLVersions||[OriginSslPolicy.TLS_V1_2]}:void 0,connectionAttempts,connectionTimeout}}toOriginShieldProperty(originConfig){const originShieldRegion=originConfig.originShieldRegion??originConfig.customOriginSource?.originShieldRegion??originConfig.s3OriginSource?.originShieldRegion;return originShieldRegion?{enabled:!0,originShieldRegion}:void 0}}exports.CloudFrontWebDistribution=CloudFrontWebDistribution,_b=JSII_RTTI_SYMBOL_1,CloudFrontWebDistribution[_b]={fqn:"aws-cdk-lib.aws_cloudfront.CloudFrontWebDistribution",version:"2.51.1"};
 //# sourceMappingURL=web-distribution.js.map

package/aws-cloudfront-origins/lib/http-origin.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HttpOrigin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),utils_1=require("./private/utils");class HttpOrigin extends cloudfront.OriginBase{constructor(domainName,props={}){super(domainName,props),this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_HttpOriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,HttpOrigin),error}utils_1.validateSecondsInRangeOrUndefined("readTimeout",1,180,props.readTimeout),utils_1.validateSecondsInRangeOrUndefined("keepaliveTimeout",1,180,props.keepaliveTimeout)}renderCustomOriginConfig(){return{originSslProtocols:this.props.originSslProtocols??[cloudfront.OriginSslPolicy.TLS_V1_2],originProtocolPolicy:this.props.protocolPolicy??cloudfront.OriginProtocolPolicy.HTTPS_ONLY,httpPort:this.props.httpPort,httpsPort:this.props.httpsPort,originReadTimeout:this.props.readTimeout?.toSeconds(),originKeepaliveTimeout:this.props.keepaliveTimeout?.toSeconds()}}}exports.HttpOrigin=HttpOrigin,_a=JSII_RTTI_SYMBOL_1,HttpOrigin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.HttpOrigin",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HttpOrigin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),utils_1=require("./private/utils");class HttpOrigin extends cloudfront.OriginBase{constructor(domainName,props={}){super(domainName,props),this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_HttpOriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,HttpOrigin),error}utils_1.validateSecondsInRangeOrUndefined("readTimeout",1,180,props.readTimeout),utils_1.validateSecondsInRangeOrUndefined("keepaliveTimeout",1,180,props.keepaliveTimeout)}renderCustomOriginConfig(){return{originSslProtocols:this.props.originSslProtocols??[cloudfront.OriginSslPolicy.TLS_V1_2],originProtocolPolicy:this.props.protocolPolicy??cloudfront.OriginProtocolPolicy.HTTPS_ONLY,httpPort:this.props.httpPort,httpsPort:this.props.httpsPort,originReadTimeout:this.props.readTimeout?.toSeconds(),originKeepaliveTimeout:this.props.keepaliveTimeout?.toSeconds()}}}exports.HttpOrigin=HttpOrigin,_a=JSII_RTTI_SYMBOL_1,HttpOrigin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.HttpOrigin",version:"2.51.1"};
 //# sourceMappingURL=http-origin.js.map

package/aws-cloudfront-origins/lib/load-balancer-origin.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LoadBalancerV2Origin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),http_origin_1=require("./http-origin");class LoadBalancerV2Origin extends http_origin_1.HttpOrigin{constructor(loadBalancer,props={}){super(loadBalancer.loadBalancerDnsName,{...props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_elasticloadbalancingv2_ILoadBalancerV2(loadBalancer),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_LoadBalancerV2OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,LoadBalancerV2Origin),error}}}exports.LoadBalancerV2Origin=LoadBalancerV2Origin,_a=JSII_RTTI_SYMBOL_1,LoadBalancerV2Origin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.LoadBalancerV2Origin",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LoadBalancerV2Origin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),http_origin_1=require("./http-origin");class LoadBalancerV2Origin extends http_origin_1.HttpOrigin{constructor(loadBalancer,props={}){super(loadBalancer.loadBalancerDnsName,{...props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_elasticloadbalancingv2_ILoadBalancerV2(loadBalancer),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_LoadBalancerV2OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,LoadBalancerV2Origin),error}}}exports.LoadBalancerV2Origin=LoadBalancerV2Origin,_a=JSII_RTTI_SYMBOL_1,LoadBalancerV2Origin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.LoadBalancerV2Origin",version:"2.51.1"};
 //# sourceMappingURL=load-balancer-origin.js.map

package/aws-cloudfront-origins/lib/origin-group.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginGroup=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");class OriginGroup{constructor(props){this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_OriginGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginGroup),error}}bind(scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}const primaryOriginConfig=this.props.primaryOrigin.bind(scope,options);if(primaryOriginConfig.failoverConfig)throw new Error("An OriginGroup cannot use an Origin with its own failover configuration as its primary origin!");return{originProperty:primaryOriginConfig.originProperty,failoverConfig:{failoverOrigin:this.props.fallbackOrigin,statusCodes:this.props.fallbackStatusCodes}}}}exports.OriginGroup=OriginGroup,_a=JSII_RTTI_SYMBOL_1,OriginGroup[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.OriginGroup",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OriginGroup=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");class OriginGroup{constructor(props){this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_OriginGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OriginGroup),error}}bind(scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}const primaryOriginConfig=this.props.primaryOrigin.bind(scope,options);if(primaryOriginConfig.failoverConfig)throw new Error("An OriginGroup cannot use an Origin with its own failover configuration as its primary origin!");return{originProperty:primaryOriginConfig.originProperty,failoverConfig:{failoverOrigin:this.props.fallbackOrigin,statusCodes:this.props.fallbackStatusCodes}}}}exports.OriginGroup=OriginGroup,_a=JSII_RTTI_SYMBOL_1,OriginGroup[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.OriginGroup",version:"2.51.1"};
 //# sourceMappingURL=origin-group.js.map

package/aws-cloudfront-origins/lib/rest-api-origin.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.RestApiOrigin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),cdk=require("../../core"),utils_1=require("./private/utils");class RestApiOrigin extends cloudfront.OriginBase{constructor(restApi,props={}){super(cdk.Fn.select(2,cdk.Fn.split("/",restApi.url)),{originPath:`/${cdk.Fn.select(3,cdk.Fn.split("/",restApi.url))}`,...props}),this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_apigateway_RestApi(restApi),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_RestApiOriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,RestApiOrigin),error}utils_1.validateSecondsInRangeOrUndefined("readTimeout",1,180,props.readTimeout),utils_1.validateSecondsInRangeOrUndefined("keepaliveTimeout",1,180,props.keepaliveTimeout)}renderCustomOriginConfig(){return{originSslProtocols:[cloudfront.OriginSslPolicy.TLS_V1_2],originProtocolPolicy:cloudfront.OriginProtocolPolicy.HTTPS_ONLY,originReadTimeout:this.props.readTimeout?.toSeconds(),originKeepaliveTimeout:this.props.keepaliveTimeout?.toSeconds()}}}exports.RestApiOrigin=RestApiOrigin,_a=JSII_RTTI_SYMBOL_1,RestApiOrigin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.RestApiOrigin",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.RestApiOrigin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),cdk=require("../../core"),utils_1=require("./private/utils");class RestApiOrigin extends cloudfront.OriginBase{constructor(restApi,props={}){super(cdk.Fn.select(2,cdk.Fn.split("/",restApi.url)),{originPath:`/${cdk.Fn.select(3,cdk.Fn.split("/",restApi.url))}`,...props}),this.props=props;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_apigateway_RestApi(restApi),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_RestApiOriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,RestApiOrigin),error}utils_1.validateSecondsInRangeOrUndefined("readTimeout",1,180,props.readTimeout),utils_1.validateSecondsInRangeOrUndefined("keepaliveTimeout",1,180,props.keepaliveTimeout)}renderCustomOriginConfig(){return{originSslProtocols:[cloudfront.OriginSslPolicy.TLS_V1_2],originProtocolPolicy:cloudfront.OriginProtocolPolicy.HTTPS_ONLY,originReadTimeout:this.props.readTimeout?.toSeconds(),originKeepaliveTimeout:this.props.keepaliveTimeout?.toSeconds()}}}exports.RestApiOrigin=RestApiOrigin,_a=JSII_RTTI_SYMBOL_1,RestApiOrigin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.RestApiOrigin",version:"2.51.1"};
 //# sourceMappingURL=rest-api-origin.js.map

package/aws-cloudfront-origins/lib/s3-origin.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.S3Origin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),iam=require("../../aws-iam"),cdk=require("../../core"),http_origin_1=require("./http-origin");class S3Origin{constructor(bucket,props={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_s3_IBucket(bucket),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_S3OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,S3Origin),error}this.origin=bucket.isWebsite?new http_origin_1.HttpOrigin(bucket.bucketWebsiteDomainName,{protocolPolicy:cloudfront.OriginProtocolPolicy.HTTP_ONLY,...props}):new S3BucketOrigin(bucket,props)}bind(scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}return this.origin.bind(scope,options)}}exports.S3Origin=S3Origin,_a=JSII_RTTI_SYMBOL_1,S3Origin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.S3Origin",version:"2.51.0"};class S3BucketOrigin extends cloudfront.OriginBase{constructor(bucket,{originAccessIdentity,...props}){super(bucket.bucketRegionalDomainName,props),this.bucket=bucket,originAccessIdentity&&(this.originAccessIdentity=originAccessIdentity)}bind(scope,options){if(!this.originAccessIdentity){const bucketStack=cdk.Stack.of(this.bucket),bucketInDifferentStack=bucketStack!==cdk.Stack.of(scope),oaiScope=bucketInDifferentStack?bucketStack:scope,oaiId=bucketInDifferentStack?`${cdk.Names.uniqueId(scope)}S3Origin`:"S3Origin";this.originAccessIdentity=new cloudfront.OriginAccessIdentity(oaiScope,oaiId,{comment:`Identity for ${options.originId}`})}return this.bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.bucket.arnForObjects("*")],actions:["s3:GetObject"],principals:[this.originAccessIdentity.grantPrincipal]})),super.bind(scope,options)}renderS3OriginConfig(){return{originAccessIdentity:`origin-access-identity/cloudfront/${this.originAccessIdentity.originAccessIdentityId}`}}}
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.S3Origin=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cloudfront=require("../../aws-cloudfront"),iam=require("../../aws-iam"),cdk=require("../../core"),http_origin_1=require("./http-origin");class S3Origin{constructor(bucket,props={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_s3_IBucket(bucket),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_origins_S3OriginProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,S3Origin),error}this.origin=bucket.isWebsite?new http_origin_1.HttpOrigin(bucket.bucketWebsiteDomainName,{protocolPolicy:cloudfront.OriginProtocolPolicy.HTTP_ONLY,...props}):new S3BucketOrigin(bucket,props)}bind(scope,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudfront_OriginBindOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}return this.origin.bind(scope,options)}}exports.S3Origin=S3Origin,_a=JSII_RTTI_SYMBOL_1,S3Origin[_a]={fqn:"aws-cdk-lib.aws_cloudfront_origins.S3Origin",version:"2.51.1"};class S3BucketOrigin extends cloudfront.OriginBase{constructor(bucket,{originAccessIdentity,...props}){super(bucket.bucketRegionalDomainName,props),this.bucket=bucket,originAccessIdentity&&(this.originAccessIdentity=originAccessIdentity)}bind(scope,options){if(!this.originAccessIdentity){const bucketStack=cdk.Stack.of(this.bucket),bucketInDifferentStack=bucketStack!==cdk.Stack.of(scope),oaiScope=bucketInDifferentStack?bucketStack:scope,oaiId=bucketInDifferentStack?`${cdk.Names.uniqueId(scope)}S3Origin`:"S3Origin";this.originAccessIdentity=new cloudfront.OriginAccessIdentity(oaiScope,oaiId,{comment:`Identity for ${options.originId}`})}return this.bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.bucket.arnForObjects("*")],actions:["s3:GetObject"],principals:[this.originAccessIdentity.grantPrincipal]})),super.bind(scope,options)}renderS3OriginConfig(){return{originAccessIdentity:`origin-access-identity/cloudfront/${this.originAccessIdentity.originAccessIdentityId}`}}}
 //# sourceMappingURL=s3-origin.js.map

package/aws-cloudtrail/lib/cloudtrail.generated.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnTrail=exports.CfnEventDataStore=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnEventDataStorePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("advancedEventSelectors",cdk.listValidator(CfnEventDataStore_AdvancedEventSelectorPropertyValidator))(properties.advancedEventSelectors)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("multiRegionEnabled",cdk.validateBoolean)(properties.multiRegionEnabled)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("organizationEnabled",cdk.validateBoolean)(properties.organizationEnabled)),errors.collect(cdk.propertyValidator("retentionPeriod",cdk.validateNumber)(properties.retentionPeriod)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("terminationProtectionEnabled",cdk.validateBoolean)(properties.terminationProtectionEnabled)),errors.wrap('supplied properties not correct for "CfnEventDataStoreProps"')}function cfnEventDataStorePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStorePropsValidator(properties).assertSuccess(),{AdvancedEventSelectors:cdk.listMapper(cfnEventDataStoreAdvancedEventSelectorPropertyToCloudFormation)(properties.advancedEventSelectors),KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),MultiRegionEnabled:cdk.booleanToCloudFormation(properties.multiRegionEnabled),Name:cdk.stringToCloudFormation(properties.name),OrganizationEnabled:cdk.booleanToCloudFormation(properties.organizationEnabled),RetentionPeriod:cdk.numberToCloudFormation(properties.retentionPeriod),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),TerminationProtectionEnabled:cdk.booleanToCloudFormation(properties.terminationProtectionEnabled)}):properties}function CfnEventDataStorePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("advancedEventSelectors","AdvancedEventSelectors",properties.AdvancedEventSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnEventDataStoreAdvancedEventSelectorPropertyFromCloudFormation)(properties.AdvancedEventSelectors):void 0),ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("multiRegionEnabled","MultiRegionEnabled",properties.MultiRegionEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.MultiRegionEnabled):void 0),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("organizationEnabled","OrganizationEnabled",properties.OrganizationEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.OrganizationEnabled):void 0),ret.addPropertyResult("retentionPeriod","RetentionPeriod",properties.RetentionPeriod!=null?cfn_parse.FromCloudFormation.getNumber(properties.RetentionPeriod):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("terminationProtectionEnabled","TerminationProtectionEnabled",properties.TerminationProtectionEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.TerminationProtectionEnabled):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnEventDataStore extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnEventDataStore.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_CfnEventDataStoreProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnEventDataStore),error}this.attrCreatedTimestamp=cdk.Token.asString(this.getAtt("CreatedTimestamp")),this.attrEventDataStoreArn=cdk.Token.asString(this.getAtt("EventDataStoreArn")),this.attrStatus=cdk.Token.asString(this.getAtt("Status")),this.attrUpdatedTimestamp=cdk.Token.asString(this.getAtt("UpdatedTimestamp")),this.advancedEventSelectors=props.advancedEventSelectors,this.kmsKeyId=props.kmsKeyId,this.multiRegionEnabled=props.multiRegionEnabled,this.name=props.name,this.organizationEnabled=props.organizationEnabled,this.retentionPeriod=props.retentionPeriod,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::CloudTrail::EventDataStore",props.tags,{tagPropertyName:"tags"}),this.terminationProtectionEnabled=props.terminationProtectionEnabled}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnEventDataStorePropsFromCloudFormation(resourceProperties),ret=new CfnEventDataStore(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnEventDataStore.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{advancedEventSelectors:this.advancedEventSelectors,kmsKeyId:this.kmsKeyId,multiRegionEnabled:this.multiRegionEnabled,name:this.name,organizationEnabled:this.organizationEnabled,retentionPeriod:this.retentionPeriod,tags:this.tags.renderTags(),terminationProtectionEnabled:this.terminationProtectionEnabled}}renderProperties(props){return cfnEventDataStorePropsToCloudFormation(props)}}exports.CfnEventDataStore=CfnEventDataStore,_a=JSII_RTTI_SYMBOL_1,CfnEventDataStore[_a]={fqn:"aws-cdk-lib.aws_cloudtrail.CfnEventDataStore",version:"2.51.0"},CfnEventDataStore.CFN_RESOURCE_TYPE_NAME="AWS::CloudTrail::EventDataStore";function CfnEventDataStore_AdvancedEventSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("fieldSelectors",cdk.requiredValidator)(properties.fieldSelectors)),errors.collect(cdk.propertyValidator("fieldSelectors",cdk.listValidator(CfnEventDataStore_AdvancedFieldSelectorPropertyValidator))(properties.fieldSelectors)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.wrap('supplied properties not correct for "AdvancedEventSelectorProperty"')}function cfnEventDataStoreAdvancedEventSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStore_AdvancedEventSelectorPropertyValidator(properties).assertSuccess(),{FieldSelectors:cdk.listMapper(cfnEventDataStoreAdvancedFieldSelectorPropertyToCloudFormation)(properties.fieldSelectors),Name:cdk.stringToCloudFormation(properties.name)}):properties}function CfnEventDataStoreAdvancedEventSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("fieldSelectors","FieldSelectors",cfn_parse.FromCloudFormation.getArray(CfnEventDataStoreAdvancedFieldSelectorPropertyFromCloudFormation)(properties.FieldSelectors)),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnEventDataStore_AdvancedFieldSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("endsWith",cdk.listValidator(cdk.validateString))(properties.endsWith)),errors.collect(cdk.propertyValidator("equalTo",cdk.listValidator(cdk.validateString))(properties.equalTo)),errors.collect(cdk.propertyValidator("field",cdk.requiredValidator)(properties.field)),errors.collect(cdk.propertyValidator("field",cdk.validateString)(properties.field)),errors.collect(cdk.propertyValidator("notEndsWith",cdk.listValidator(cdk.validateString))(properties.notEndsWith)),errors.collect(cdk.propertyValidator("notEquals",cdk.listValidator(cdk.validateString))(properties.notEquals)),errors.collect(cdk.propertyValidator("notStartsWith",cdk.listValidator(cdk.validateString))(properties.notStartsWith)),errors.collect(cdk.propertyValidator("startsWith",cdk.listValidator(cdk.validateString))(properties.startsWith)),errors.wrap('supplied properties not correct for "AdvancedFieldSelectorProperty"')}function cfnEventDataStoreAdvancedFieldSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStore_AdvancedFieldSelectorPropertyValidator(properties).assertSuccess(),{EndsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.endsWith),Equals:cdk.listMapper(cdk.stringToCloudFormation)(properties.equalTo),Field:cdk.stringToCloudFormation(properties.field),NotEndsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.notEndsWith),NotEquals:cdk.listMapper(cdk.stringToCloudFormation)(properties.notEquals),NotStartsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.notStartsWith),StartsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.startsWith)}):properties}function CfnEventDataStoreAdvancedFieldSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("endsWith","EndsWith",properties.EndsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.EndsWith):void 0),ret.addPropertyResult("equalTo","Equals",properties.Equals!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Equals):void 0),ret.addPropertyResult("field","Field",cfn_parse.FromCloudFormation.getString(properties.Field)),ret.addPropertyResult("notEndsWith","NotEndsWith",properties.NotEndsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotEndsWith):void 0),ret.addPropertyResult("notEquals","NotEquals",properties.NotEquals!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotEquals):void 0),ret.addPropertyResult("notStartsWith","NotStartsWith",properties.NotStartsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotStartsWith):void 0),ret.addPropertyResult("startsWith","StartsWith",properties.StartsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.StartsWith):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrailPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("cloudWatchLogsLogGroupArn",cdk.validateString)(properties.cloudWatchLogsLogGroupArn)),errors.collect(cdk.propertyValidator("cloudWatchLogsRoleArn",cdk.validateString)(properties.cloudWatchLogsRoleArn)),errors.collect(cdk.propertyValidator("enableLogFileValidation",cdk.validateBoolean)(properties.enableLogFileValidation)),errors.collect(cdk.propertyValidator("eventSelectors",cdk.listValidator(CfnTrail_EventSelectorPropertyValidator))(properties.eventSelectors)),errors.collect(cdk.propertyValidator("includeGlobalServiceEvents",cdk.validateBoolean)(properties.includeGlobalServiceEvents)),errors.collect(cdk.propertyValidator("insightSelectors",cdk.listValidator(CfnTrail_InsightSelectorPropertyValidator))(properties.insightSelectors)),errors.collect(cdk.propertyValidator("isLogging",cdk.requiredValidator)(properties.isLogging)),errors.collect(cdk.propertyValidator("isLogging",cdk.validateBoolean)(properties.isLogging)),errors.collect(cdk.propertyValidator("isMultiRegionTrail",cdk.validateBoolean)(properties.isMultiRegionTrail)),errors.collect(cdk.propertyValidator("isOrganizationTrail",cdk.validateBoolean)(properties.isOrganizationTrail)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("s3BucketName",cdk.requiredValidator)(properties.s3BucketName)),errors.collect(cdk.propertyValidator("s3BucketName",cdk.validateString)(properties.s3BucketName)),errors.collect(cdk.propertyValidator("s3KeyPrefix",cdk.validateString)(properties.s3KeyPrefix)),errors.collect(cdk.propertyValidator("snsTopicName",cdk.validateString)(properties.snsTopicName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("trailName",cdk.validateString)(properties.trailName)),errors.wrap('supplied properties not correct for "CfnTrailProps"')}function cfnTrailPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrailPropsValidator(properties).assertSuccess(),{IsLogging:cdk.booleanToCloudFormation(properties.isLogging),S3BucketName:cdk.stringToCloudFormation(properties.s3BucketName),CloudWatchLogsLogGroupArn:cdk.stringToCloudFormation(properties.cloudWatchLogsLogGroupArn),CloudWatchLogsRoleArn:cdk.stringToCloudFormation(properties.cloudWatchLogsRoleArn),EnableLogFileValidation:cdk.booleanToCloudFormation(properties.enableLogFileValidation),EventSelectors:cdk.listMapper(cfnTrailEventSelectorPropertyToCloudFormation)(properties.eventSelectors),IncludeGlobalServiceEvents:cdk.booleanToCloudFormation(properties.includeGlobalServiceEvents),InsightSelectors:cdk.listMapper(cfnTrailInsightSelectorPropertyToCloudFormation)(properties.insightSelectors),IsMultiRegionTrail:cdk.booleanToCloudFormation(properties.isMultiRegionTrail),IsOrganizationTrail:cdk.booleanToCloudFormation(properties.isOrganizationTrail),KMSKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),S3KeyPrefix:cdk.stringToCloudFormation(properties.s3KeyPrefix),SnsTopicName:cdk.stringToCloudFormation(properties.snsTopicName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),TrailName:cdk.stringToCloudFormation(properties.trailName)}):properties}function CfnTrailPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("isLogging","IsLogging",cfn_parse.FromCloudFormation.getBoolean(properties.IsLogging)),ret.addPropertyResult("s3BucketName","S3BucketName",cfn_parse.FromCloudFormation.getString(properties.S3BucketName)),ret.addPropertyResult("cloudWatchLogsLogGroupArn","CloudWatchLogsLogGroupArn",properties.CloudWatchLogsLogGroupArn!=null?cfn_parse.FromCloudFormation.getString(properties.CloudWatchLogsLogGroupArn):void 0),ret.addPropertyResult("cloudWatchLogsRoleArn","CloudWatchLogsRoleArn",properties.CloudWatchLogsRoleArn!=null?cfn_parse.FromCloudFormation.getString(properties.CloudWatchLogsRoleArn):void 0),ret.addPropertyResult("enableLogFileValidation","EnableLogFileValidation",properties.EnableLogFileValidation!=null?cfn_parse.FromCloudFormation.getBoolean(properties.EnableLogFileValidation):void 0),ret.addPropertyResult("eventSelectors","EventSelectors",properties.EventSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailEventSelectorPropertyFromCloudFormation)(properties.EventSelectors):void 0),ret.addPropertyResult("includeGlobalServiceEvents","IncludeGlobalServiceEvents",properties.IncludeGlobalServiceEvents!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeGlobalServiceEvents):void 0),ret.addPropertyResult("insightSelectors","InsightSelectors",properties.InsightSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailInsightSelectorPropertyFromCloudFormation)(properties.InsightSelectors):void 0),ret.addPropertyResult("isMultiRegionTrail","IsMultiRegionTrail",properties.IsMultiRegionTrail!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IsMultiRegionTrail):void 0),ret.addPropertyResult("isOrganizationTrail","IsOrganizationTrail",properties.IsOrganizationTrail!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IsOrganizationTrail):void 0),ret.addPropertyResult("kmsKeyId","KMSKeyId",properties.KMSKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KMSKeyId):void 0),ret.addPropertyResult("s3KeyPrefix","S3KeyPrefix",properties.S3KeyPrefix!=null?cfn_parse.FromCloudFormation.getString(properties.S3KeyPrefix):void 0),ret.addPropertyResult("snsTopicName","SnsTopicName",properties.SnsTopicName!=null?cfn_parse.FromCloudFormation.getString(properties.SnsTopicName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("trailName","TrailName",properties.TrailName!=null?cfn_parse.FromCloudFormation.getString(properties.TrailName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnTrail extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnTrail.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_CfnTrailProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnTrail),error}cdk.requireProperty(props,"isLogging",this),cdk.requireProperty(props,"s3BucketName",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.attrSnsTopicArn=cdk.Token.asString(this.getAtt("SnsTopicArn")),this.isLogging=props.isLogging,this.s3BucketName=props.s3BucketName,this.cloudWatchLogsLogGroupArn=props.cloudWatchLogsLogGroupArn,this.cloudWatchLogsRoleArn=props.cloudWatchLogsRoleArn,this.enableLogFileValidation=props.enableLogFileValidation,this.eventSelectors=props.eventSelectors,this.includeGlobalServiceEvents=props.includeGlobalServiceEvents,this.insightSelectors=props.insightSelectors,this.isMultiRegionTrail=props.isMultiRegionTrail,this.isOrganizationTrail=props.isOrganizationTrail,this.kmsKeyId=props.kmsKeyId,this.s3KeyPrefix=props.s3KeyPrefix,this.snsTopicName=props.snsTopicName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::CloudTrail::Trail",props.tags,{tagPropertyName:"tags"}),this.trailName=props.trailName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnTrailPropsFromCloudFormation(resourceProperties),ret=new CfnTrail(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnTrail.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{isLogging:this.isLogging,s3BucketName:this.s3BucketName,cloudWatchLogsLogGroupArn:this.cloudWatchLogsLogGroupArn,cloudWatchLogsRoleArn:this.cloudWatchLogsRoleArn,enableLogFileValidation:this.enableLogFileValidation,eventSelectors:this.eventSelectors,includeGlobalServiceEvents:this.includeGlobalServiceEvents,insightSelectors:this.insightSelectors,isMultiRegionTrail:this.isMultiRegionTrail,isOrganizationTrail:this.isOrganizationTrail,kmsKeyId:this.kmsKeyId,s3KeyPrefix:this.s3KeyPrefix,snsTopicName:this.snsTopicName,tags:this.tags.renderTags(),trailName:this.trailName}}renderProperties(props){return cfnTrailPropsToCloudFormation(props)}}exports.CfnTrail=CfnTrail,_b=JSII_RTTI_SYMBOL_1,CfnTrail[_b]={fqn:"aws-cdk-lib.aws_cloudtrail.CfnTrail",version:"2.51.0"},CfnTrail.CFN_RESOURCE_TYPE_NAME="AWS::CloudTrail::Trail";function CfnTrail_DataResourcePropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("type",cdk.requiredValidator)(properties.type)),errors.collect(cdk.propertyValidator("type",cdk.validateString)(properties.type)),errors.collect(cdk.propertyValidator("values",cdk.listValidator(cdk.validateString))(properties.values)),errors.wrap('supplied properties not correct for "DataResourceProperty"')}function cfnTrailDataResourcePropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_DataResourcePropertyValidator(properties).assertSuccess(),{Type:cdk.stringToCloudFormation(properties.type),Values:cdk.listMapper(cdk.stringToCloudFormation)(properties.values)}):properties}function CfnTrailDataResourcePropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("type","Type",cfn_parse.FromCloudFormation.getString(properties.Type)),ret.addPropertyResult("values","Values",properties.Values!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Values):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrail_EventSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("dataResources",cdk.listValidator(CfnTrail_DataResourcePropertyValidator))(properties.dataResources)),errors.collect(cdk.propertyValidator("excludeManagementEventSources",cdk.listValidator(cdk.validateString))(properties.excludeManagementEventSources)),errors.collect(cdk.propertyValidator("includeManagementEvents",cdk.validateBoolean)(properties.includeManagementEvents)),errors.collect(cdk.propertyValidator("readWriteType",cdk.validateString)(properties.readWriteType)),errors.wrap('supplied properties not correct for "EventSelectorProperty"')}function cfnTrailEventSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_EventSelectorPropertyValidator(properties).assertSuccess(),{DataResources:cdk.listMapper(cfnTrailDataResourcePropertyToCloudFormation)(properties.dataResources),ExcludeManagementEventSources:cdk.listMapper(cdk.stringToCloudFormation)(properties.excludeManagementEventSources),IncludeManagementEvents:cdk.booleanToCloudFormation(properties.includeManagementEvents),ReadWriteType:cdk.stringToCloudFormation(properties.readWriteType)}):properties}function CfnTrailEventSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("dataResources","DataResources",properties.DataResources!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailDataResourcePropertyFromCloudFormation)(properties.DataResources):void 0),ret.addPropertyResult("excludeManagementEventSources","ExcludeManagementEventSources",properties.ExcludeManagementEventSources!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ExcludeManagementEventSources):void 0),ret.addPropertyResult("includeManagementEvents","IncludeManagementEvents",properties.IncludeManagementEvents!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeManagementEvents):void 0),ret.addPropertyResult("readWriteType","ReadWriteType",properties.ReadWriteType!=null?cfn_parse.FromCloudFormation.getString(properties.ReadWriteType):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrail_InsightSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("insightType",cdk.validateString)(properties.insightType)),errors.wrap('supplied properties not correct for "InsightSelectorProperty"')}function cfnTrailInsightSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_InsightSelectorPropertyValidator(properties).assertSuccess(),{InsightType:cdk.stringToCloudFormation(properties.insightType)}):properties}function CfnTrailInsightSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("insightType","InsightType",properties.InsightType!=null?cfn_parse.FromCloudFormation.getString(properties.InsightType):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}
+"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnTrail=exports.CfnEventDataStore=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnEventDataStorePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("advancedEventSelectors",cdk.listValidator(CfnEventDataStore_AdvancedEventSelectorPropertyValidator))(properties.advancedEventSelectors)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("multiRegionEnabled",cdk.validateBoolean)(properties.multiRegionEnabled)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("organizationEnabled",cdk.validateBoolean)(properties.organizationEnabled)),errors.collect(cdk.propertyValidator("retentionPeriod",cdk.validateNumber)(properties.retentionPeriod)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("terminationProtectionEnabled",cdk.validateBoolean)(properties.terminationProtectionEnabled)),errors.wrap('supplied properties not correct for "CfnEventDataStoreProps"')}function cfnEventDataStorePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStorePropsValidator(properties).assertSuccess(),{AdvancedEventSelectors:cdk.listMapper(cfnEventDataStoreAdvancedEventSelectorPropertyToCloudFormation)(properties.advancedEventSelectors),KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),MultiRegionEnabled:cdk.booleanToCloudFormation(properties.multiRegionEnabled),Name:cdk.stringToCloudFormation(properties.name),OrganizationEnabled:cdk.booleanToCloudFormation(properties.organizationEnabled),RetentionPeriod:cdk.numberToCloudFormation(properties.retentionPeriod),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),TerminationProtectionEnabled:cdk.booleanToCloudFormation(properties.terminationProtectionEnabled)}):properties}function CfnEventDataStorePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("advancedEventSelectors","AdvancedEventSelectors",properties.AdvancedEventSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnEventDataStoreAdvancedEventSelectorPropertyFromCloudFormation)(properties.AdvancedEventSelectors):void 0),ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("multiRegionEnabled","MultiRegionEnabled",properties.MultiRegionEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.MultiRegionEnabled):void 0),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("organizationEnabled","OrganizationEnabled",properties.OrganizationEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.OrganizationEnabled):void 0),ret.addPropertyResult("retentionPeriod","RetentionPeriod",properties.RetentionPeriod!=null?cfn_parse.FromCloudFormation.getNumber(properties.RetentionPeriod):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("terminationProtectionEnabled","TerminationProtectionEnabled",properties.TerminationProtectionEnabled!=null?cfn_parse.FromCloudFormation.getBoolean(properties.TerminationProtectionEnabled):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnEventDataStore extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnEventDataStore.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_CfnEventDataStoreProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnEventDataStore),error}this.attrCreatedTimestamp=cdk.Token.asString(this.getAtt("CreatedTimestamp")),this.attrEventDataStoreArn=cdk.Token.asString(this.getAtt("EventDataStoreArn")),this.attrStatus=cdk.Token.asString(this.getAtt("Status")),this.attrUpdatedTimestamp=cdk.Token.asString(this.getAtt("UpdatedTimestamp")),this.advancedEventSelectors=props.advancedEventSelectors,this.kmsKeyId=props.kmsKeyId,this.multiRegionEnabled=props.multiRegionEnabled,this.name=props.name,this.organizationEnabled=props.organizationEnabled,this.retentionPeriod=props.retentionPeriod,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::CloudTrail::EventDataStore",props.tags,{tagPropertyName:"tags"}),this.terminationProtectionEnabled=props.terminationProtectionEnabled}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnEventDataStorePropsFromCloudFormation(resourceProperties),ret=new CfnEventDataStore(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnEventDataStore.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{advancedEventSelectors:this.advancedEventSelectors,kmsKeyId:this.kmsKeyId,multiRegionEnabled:this.multiRegionEnabled,name:this.name,organizationEnabled:this.organizationEnabled,retentionPeriod:this.retentionPeriod,tags:this.tags.renderTags(),terminationProtectionEnabled:this.terminationProtectionEnabled}}renderProperties(props){return cfnEventDataStorePropsToCloudFormation(props)}}exports.CfnEventDataStore=CfnEventDataStore,_a=JSII_RTTI_SYMBOL_1,CfnEventDataStore[_a]={fqn:"aws-cdk-lib.aws_cloudtrail.CfnEventDataStore",version:"2.51.1"},CfnEventDataStore.CFN_RESOURCE_TYPE_NAME="AWS::CloudTrail::EventDataStore";function CfnEventDataStore_AdvancedEventSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("fieldSelectors",cdk.requiredValidator)(properties.fieldSelectors)),errors.collect(cdk.propertyValidator("fieldSelectors",cdk.listValidator(CfnEventDataStore_AdvancedFieldSelectorPropertyValidator))(properties.fieldSelectors)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.wrap('supplied properties not correct for "AdvancedEventSelectorProperty"')}function cfnEventDataStoreAdvancedEventSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStore_AdvancedEventSelectorPropertyValidator(properties).assertSuccess(),{FieldSelectors:cdk.listMapper(cfnEventDataStoreAdvancedFieldSelectorPropertyToCloudFormation)(properties.fieldSelectors),Name:cdk.stringToCloudFormation(properties.name)}):properties}function CfnEventDataStoreAdvancedEventSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("fieldSelectors","FieldSelectors",cfn_parse.FromCloudFormation.getArray(CfnEventDataStoreAdvancedFieldSelectorPropertyFromCloudFormation)(properties.FieldSelectors)),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnEventDataStore_AdvancedFieldSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("endsWith",cdk.listValidator(cdk.validateString))(properties.endsWith)),errors.collect(cdk.propertyValidator("equalTo",cdk.listValidator(cdk.validateString))(properties.equalTo)),errors.collect(cdk.propertyValidator("field",cdk.requiredValidator)(properties.field)),errors.collect(cdk.propertyValidator("field",cdk.validateString)(properties.field)),errors.collect(cdk.propertyValidator("notEndsWith",cdk.listValidator(cdk.validateString))(properties.notEndsWith)),errors.collect(cdk.propertyValidator("notEquals",cdk.listValidator(cdk.validateString))(properties.notEquals)),errors.collect(cdk.propertyValidator("notStartsWith",cdk.listValidator(cdk.validateString))(properties.notStartsWith)),errors.collect(cdk.propertyValidator("startsWith",cdk.listValidator(cdk.validateString))(properties.startsWith)),errors.wrap('supplied properties not correct for "AdvancedFieldSelectorProperty"')}function cfnEventDataStoreAdvancedFieldSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnEventDataStore_AdvancedFieldSelectorPropertyValidator(properties).assertSuccess(),{EndsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.endsWith),Equals:cdk.listMapper(cdk.stringToCloudFormation)(properties.equalTo),Field:cdk.stringToCloudFormation(properties.field),NotEndsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.notEndsWith),NotEquals:cdk.listMapper(cdk.stringToCloudFormation)(properties.notEquals),NotStartsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.notStartsWith),StartsWith:cdk.listMapper(cdk.stringToCloudFormation)(properties.startsWith)}):properties}function CfnEventDataStoreAdvancedFieldSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("endsWith","EndsWith",properties.EndsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.EndsWith):void 0),ret.addPropertyResult("equalTo","Equals",properties.Equals!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Equals):void 0),ret.addPropertyResult("field","Field",cfn_parse.FromCloudFormation.getString(properties.Field)),ret.addPropertyResult("notEndsWith","NotEndsWith",properties.NotEndsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotEndsWith):void 0),ret.addPropertyResult("notEquals","NotEquals",properties.NotEquals!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotEquals):void 0),ret.addPropertyResult("notStartsWith","NotStartsWith",properties.NotStartsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.NotStartsWith):void 0),ret.addPropertyResult("startsWith","StartsWith",properties.StartsWith!=null?cfn_parse.FromCloudFormation.getStringArray(properties.StartsWith):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrailPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("cloudWatchLogsLogGroupArn",cdk.validateString)(properties.cloudWatchLogsLogGroupArn)),errors.collect(cdk.propertyValidator("cloudWatchLogsRoleArn",cdk.validateString)(properties.cloudWatchLogsRoleArn)),errors.collect(cdk.propertyValidator("enableLogFileValidation",cdk.validateBoolean)(properties.enableLogFileValidation)),errors.collect(cdk.propertyValidator("eventSelectors",cdk.listValidator(CfnTrail_EventSelectorPropertyValidator))(properties.eventSelectors)),errors.collect(cdk.propertyValidator("includeGlobalServiceEvents",cdk.validateBoolean)(properties.includeGlobalServiceEvents)),errors.collect(cdk.propertyValidator("insightSelectors",cdk.listValidator(CfnTrail_InsightSelectorPropertyValidator))(properties.insightSelectors)),errors.collect(cdk.propertyValidator("isLogging",cdk.requiredValidator)(properties.isLogging)),errors.collect(cdk.propertyValidator("isLogging",cdk.validateBoolean)(properties.isLogging)),errors.collect(cdk.propertyValidator("isMultiRegionTrail",cdk.validateBoolean)(properties.isMultiRegionTrail)),errors.collect(cdk.propertyValidator("isOrganizationTrail",cdk.validateBoolean)(properties.isOrganizationTrail)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("s3BucketName",cdk.requiredValidator)(properties.s3BucketName)),errors.collect(cdk.propertyValidator("s3BucketName",cdk.validateString)(properties.s3BucketName)),errors.collect(cdk.propertyValidator("s3KeyPrefix",cdk.validateString)(properties.s3KeyPrefix)),errors.collect(cdk.propertyValidator("snsTopicName",cdk.validateString)(properties.snsTopicName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("trailName",cdk.validateString)(properties.trailName)),errors.wrap('supplied properties not correct for "CfnTrailProps"')}function cfnTrailPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrailPropsValidator(properties).assertSuccess(),{IsLogging:cdk.booleanToCloudFormation(properties.isLogging),S3BucketName:cdk.stringToCloudFormation(properties.s3BucketName),CloudWatchLogsLogGroupArn:cdk.stringToCloudFormation(properties.cloudWatchLogsLogGroupArn),CloudWatchLogsRoleArn:cdk.stringToCloudFormation(properties.cloudWatchLogsRoleArn),EnableLogFileValidation:cdk.booleanToCloudFormation(properties.enableLogFileValidation),EventSelectors:cdk.listMapper(cfnTrailEventSelectorPropertyToCloudFormation)(properties.eventSelectors),IncludeGlobalServiceEvents:cdk.booleanToCloudFormation(properties.includeGlobalServiceEvents),InsightSelectors:cdk.listMapper(cfnTrailInsightSelectorPropertyToCloudFormation)(properties.insightSelectors),IsMultiRegionTrail:cdk.booleanToCloudFormation(properties.isMultiRegionTrail),IsOrganizationTrail:cdk.booleanToCloudFormation(properties.isOrganizationTrail),KMSKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),S3KeyPrefix:cdk.stringToCloudFormation(properties.s3KeyPrefix),SnsTopicName:cdk.stringToCloudFormation(properties.snsTopicName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),TrailName:cdk.stringToCloudFormation(properties.trailName)}):properties}function CfnTrailPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("isLogging","IsLogging",cfn_parse.FromCloudFormation.getBoolean(properties.IsLogging)),ret.addPropertyResult("s3BucketName","S3BucketName",cfn_parse.FromCloudFormation.getString(properties.S3BucketName)),ret.addPropertyResult("cloudWatchLogsLogGroupArn","CloudWatchLogsLogGroupArn",properties.CloudWatchLogsLogGroupArn!=null?cfn_parse.FromCloudFormation.getString(properties.CloudWatchLogsLogGroupArn):void 0),ret.addPropertyResult("cloudWatchLogsRoleArn","CloudWatchLogsRoleArn",properties.CloudWatchLogsRoleArn!=null?cfn_parse.FromCloudFormation.getString(properties.CloudWatchLogsRoleArn):void 0),ret.addPropertyResult("enableLogFileValidation","EnableLogFileValidation",properties.EnableLogFileValidation!=null?cfn_parse.FromCloudFormation.getBoolean(properties.EnableLogFileValidation):void 0),ret.addPropertyResult("eventSelectors","EventSelectors",properties.EventSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailEventSelectorPropertyFromCloudFormation)(properties.EventSelectors):void 0),ret.addPropertyResult("includeGlobalServiceEvents","IncludeGlobalServiceEvents",properties.IncludeGlobalServiceEvents!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeGlobalServiceEvents):void 0),ret.addPropertyResult("insightSelectors","InsightSelectors",properties.InsightSelectors!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailInsightSelectorPropertyFromCloudFormation)(properties.InsightSelectors):void 0),ret.addPropertyResult("isMultiRegionTrail","IsMultiRegionTrail",properties.IsMultiRegionTrail!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IsMultiRegionTrail):void 0),ret.addPropertyResult("isOrganizationTrail","IsOrganizationTrail",properties.IsOrganizationTrail!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IsOrganizationTrail):void 0),ret.addPropertyResult("kmsKeyId","KMSKeyId",properties.KMSKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KMSKeyId):void 0),ret.addPropertyResult("s3KeyPrefix","S3KeyPrefix",properties.S3KeyPrefix!=null?cfn_parse.FromCloudFormation.getString(properties.S3KeyPrefix):void 0),ret.addPropertyResult("snsTopicName","SnsTopicName",properties.SnsTopicName!=null?cfn_parse.FromCloudFormation.getString(properties.SnsTopicName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("trailName","TrailName",properties.TrailName!=null?cfn_parse.FromCloudFormation.getString(properties.TrailName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnTrail extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnTrail.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_CfnTrailProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnTrail),error}cdk.requireProperty(props,"isLogging",this),cdk.requireProperty(props,"s3BucketName",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.attrSnsTopicArn=cdk.Token.asString(this.getAtt("SnsTopicArn")),this.isLogging=props.isLogging,this.s3BucketName=props.s3BucketName,this.cloudWatchLogsLogGroupArn=props.cloudWatchLogsLogGroupArn,this.cloudWatchLogsRoleArn=props.cloudWatchLogsRoleArn,this.enableLogFileValidation=props.enableLogFileValidation,this.eventSelectors=props.eventSelectors,this.includeGlobalServiceEvents=props.includeGlobalServiceEvents,this.insightSelectors=props.insightSelectors,this.isMultiRegionTrail=props.isMultiRegionTrail,this.isOrganizationTrail=props.isOrganizationTrail,this.kmsKeyId=props.kmsKeyId,this.s3KeyPrefix=props.s3KeyPrefix,this.snsTopicName=props.snsTopicName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::CloudTrail::Trail",props.tags,{tagPropertyName:"tags"}),this.trailName=props.trailName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnTrailPropsFromCloudFormation(resourceProperties),ret=new CfnTrail(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnTrail.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{isLogging:this.isLogging,s3BucketName:this.s3BucketName,cloudWatchLogsLogGroupArn:this.cloudWatchLogsLogGroupArn,cloudWatchLogsRoleArn:this.cloudWatchLogsRoleArn,enableLogFileValidation:this.enableLogFileValidation,eventSelectors:this.eventSelectors,includeGlobalServiceEvents:this.includeGlobalServiceEvents,insightSelectors:this.insightSelectors,isMultiRegionTrail:this.isMultiRegionTrail,isOrganizationTrail:this.isOrganizationTrail,kmsKeyId:this.kmsKeyId,s3KeyPrefix:this.s3KeyPrefix,snsTopicName:this.snsTopicName,tags:this.tags.renderTags(),trailName:this.trailName}}renderProperties(props){return cfnTrailPropsToCloudFormation(props)}}exports.CfnTrail=CfnTrail,_b=JSII_RTTI_SYMBOL_1,CfnTrail[_b]={fqn:"aws-cdk-lib.aws_cloudtrail.CfnTrail",version:"2.51.1"},CfnTrail.CFN_RESOURCE_TYPE_NAME="AWS::CloudTrail::Trail";function CfnTrail_DataResourcePropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("type",cdk.requiredValidator)(properties.type)),errors.collect(cdk.propertyValidator("type",cdk.validateString)(properties.type)),errors.collect(cdk.propertyValidator("values",cdk.listValidator(cdk.validateString))(properties.values)),errors.wrap('supplied properties not correct for "DataResourceProperty"')}function cfnTrailDataResourcePropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_DataResourcePropertyValidator(properties).assertSuccess(),{Type:cdk.stringToCloudFormation(properties.type),Values:cdk.listMapper(cdk.stringToCloudFormation)(properties.values)}):properties}function CfnTrailDataResourcePropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("type","Type",cfn_parse.FromCloudFormation.getString(properties.Type)),ret.addPropertyResult("values","Values",properties.Values!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Values):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrail_EventSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("dataResources",cdk.listValidator(CfnTrail_DataResourcePropertyValidator))(properties.dataResources)),errors.collect(cdk.propertyValidator("excludeManagementEventSources",cdk.listValidator(cdk.validateString))(properties.excludeManagementEventSources)),errors.collect(cdk.propertyValidator("includeManagementEvents",cdk.validateBoolean)(properties.includeManagementEvents)),errors.collect(cdk.propertyValidator("readWriteType",cdk.validateString)(properties.readWriteType)),errors.wrap('supplied properties not correct for "EventSelectorProperty"')}function cfnTrailEventSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_EventSelectorPropertyValidator(properties).assertSuccess(),{DataResources:cdk.listMapper(cfnTrailDataResourcePropertyToCloudFormation)(properties.dataResources),ExcludeManagementEventSources:cdk.listMapper(cdk.stringToCloudFormation)(properties.excludeManagementEventSources),IncludeManagementEvents:cdk.booleanToCloudFormation(properties.includeManagementEvents),ReadWriteType:cdk.stringToCloudFormation(properties.readWriteType)}):properties}function CfnTrailEventSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("dataResources","DataResources",properties.DataResources!=null?cfn_parse.FromCloudFormation.getArray(CfnTrailDataResourcePropertyFromCloudFormation)(properties.DataResources):void 0),ret.addPropertyResult("excludeManagementEventSources","ExcludeManagementEventSources",properties.ExcludeManagementEventSources!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ExcludeManagementEventSources):void 0),ret.addPropertyResult("includeManagementEvents","IncludeManagementEvents",properties.IncludeManagementEvents!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeManagementEvents):void 0),ret.addPropertyResult("readWriteType","ReadWriteType",properties.ReadWriteType!=null?cfn_parse.FromCloudFormation.getString(properties.ReadWriteType):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnTrail_InsightSelectorPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("insightType",cdk.validateString)(properties.insightType)),errors.wrap('supplied properties not correct for "InsightSelectorProperty"')}function cfnTrailInsightSelectorPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnTrail_InsightSelectorPropertyValidator(properties).assertSuccess(),{InsightType:cdk.stringToCloudFormation(properties.insightType)}):properties}function CfnTrailInsightSelectorPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("insightType","InsightType",properties.InsightType!=null?cfn_parse.FromCloudFormation.getString(properties.InsightType):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}
 //# sourceMappingURL=cloudtrail.generated.js.map

package/aws-cloudtrail/lib/cloudtrail.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.DataResourceType=exports.ManagementEventSources=exports.Trail=exports.ReadWriteType=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),events=require("../../aws-events"),iam=require("../../aws-iam"),logs=require("../../aws-logs"),s3=require("../../aws-s3"),core_1=require("../../core"),cloudtrail_generated_1=require("./cloudtrail.generated");var ReadWriteType;(function(ReadWriteType2){ReadWriteType2.READ_ONLY="ReadOnly",ReadWriteType2.WRITE_ONLY="WriteOnly",ReadWriteType2.ALL="All",ReadWriteType2.NONE="None"})(ReadWriteType=exports.ReadWriteType||(exports.ReadWriteType={}));class Trail extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.trailName}),this.eventSelectors=[];try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_TrailProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Trail),error}const cloudTrailPrincipal=new iam.ServicePrincipal("cloudtrail.amazonaws.com");this.s3bucket=props.bucket||new s3.Bucket(this,"S3",{encryption:s3.BucketEncryption.UNENCRYPTED,enforceSSL:!0}),this.s3bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.s3bucket.bucketArn],actions:["s3:GetBucketAcl"],principals:[cloudTrailPrincipal]})),this.s3bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.s3bucket.arnForObjects(`${props.s3KeyPrefix?`${props.s3KeyPrefix}/`:""}AWSLogs/${core_1.Stack.of(this).account}/*`)],actions:["s3:PutObject"],principals:[cloudTrailPrincipal],conditions:{StringEquals:{"s3:x-amz-acl":"bucket-owner-full-control"}}})),this.topic=props.snsTopic,this.topic&&this.topic.grantPublish(cloudTrailPrincipal);let logsRole;if(props.sendToCloudWatchLogs&&(props.cloudWatchLogGroup?this.logGroup=props.cloudWatchLogGroup:this.logGroup=new logs.LogGroup(this,"LogGroup",{retention:props.cloudWatchLogsRetention??logs.RetentionDays.ONE_YEAR}),logsRole=new iam.Role(this,"LogsRole",{assumedBy:cloudTrailPrincipal}),logsRole.addToPrincipalPolicy(new iam.PolicyStatement({actions:["logs:PutLogEvents","logs:CreateLogStream"],resources:[this.logGroup.logGroupArn]}))),props.managementEvents){let managementEvent;props.managementEvents===ReadWriteType.NONE?managementEvent={includeManagementEvents:!1}:managementEvent={includeManagementEvents:!0,readWriteType:props.managementEvents},this.eventSelectors.push(managementEvent)}if(props.kmsKey&&props.encryptionKey)throw new Error("Both kmsKey and encryptionKey must not be specified. Use only encryptionKey");const trail=new cloudtrail_generated_1.CfnTrail(this,"Resource",{isLogging:!0,enableLogFileValidation:props.enableFileValidation==null?!0:props.enableFileValidation,isMultiRegionTrail:props.isMultiRegionTrail==null?!0:props.isMultiRegionTrail,includeGlobalServiceEvents:props.includeGlobalServiceEvents==null?!0:props.includeGlobalServiceEvents,trailName:this.physicalName,kmsKeyId:props.encryptionKey?.keyArn??props.kmsKey?.keyArn,s3BucketName:this.s3bucket.bucketName,s3KeyPrefix:props.s3KeyPrefix,cloudWatchLogsLogGroupArn:this.logGroup?.logGroupArn,cloudWatchLogsRoleArn:logsRole?.roleArn,snsTopicName:this.topic?.topicName,eventSelectors:this.eventSelectors,isOrganizationTrail:props.isOrganizationTrail});this.trailArn=this.getResourceArnAttribute(trail.attrArn,{service:"cloudtrail",resource:"trail",resourceName:this.physicalName}),this.trailSnsTopicArn=trail.attrSnsTopicArn,this.s3bucket.policy&&trail.node.addDependency(this.s3bucket.policy),logsRole!==void 0&&trail.node.addDependency(logsRole)}static onEvent(scope,id,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_events_OnEventOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.onEvent),error}const rule=new events.Rule(scope,id,options);return rule.addTarget(options.target),rule.addEventPattern({detailType:["AWS API Call via CloudTrail"]}),rule}addEventSelector(dataResourceType,dataResourceValues,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_DataResourceType(dataResourceType),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSelector),error}if(dataResourceValues.length>250)throw new Error("A maximum of 250 data elements can be in one event selector");if(this.eventSelectors.length>5)throw new Error("A maximum of 5 event selectors are supported per trail.");this.eventSelectors.push({dataResources:[{type:dataResourceType,values:dataResourceValues}],includeManagementEvents:options.includeManagementEvents,excludeManagementEventSources:options.excludeManagementEventSources,readWriteType:options.readWriteType})}addLambdaEventSelector(handlers,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addLambdaEventSelector),error}if(handlers.length===0)return;const dataResourceValues=handlers.map(h=>h.functionArn);return this.addEventSelector(DataResourceType.LAMBDA_FUNCTION,dataResourceValues,options)}logAllLambdaDataEvents(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.logAllLambdaDataEvents),error}return this.addEventSelector(DataResourceType.LAMBDA_FUNCTION,[`arn:${this.stack.partition}:lambda`],options)}addS3EventSelector(s3Selector,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addS3EventSelector),error}if(s3Selector.length===0)return;const dataResourceValues=s3Selector.map(sel=>`${sel.bucket.bucketArn}/${sel.objectPrefix??""}`);return this.addEventSelector(DataResourceType.S3_OBJECT,dataResourceValues,options)}logAllS3DataEvents(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.logAllS3DataEvents),error}return this.addEventSelector(DataResourceType.S3_OBJECT,[`arn:${this.stack.partition}:s3:::`],options)}onCloudTrailEvent(id,options={}){return Trail.onEvent(this,id,options)}}exports.Trail=Trail,_a=JSII_RTTI_SYMBOL_1,Trail[_a]={fqn:"aws-cdk-lib.aws_cloudtrail.Trail",version:"2.51.0"};var ManagementEventSources;(function(ManagementEventSources2){ManagementEventSources2.KMS="kms.amazonaws.com",ManagementEventSources2.RDS_DATA_API="rdsdata.amazonaws.com"})(ManagementEventSources=exports.ManagementEventSources||(exports.ManagementEventSources={}));var DataResourceType;(function(DataResourceType2){DataResourceType2.LAMBDA_FUNCTION="AWS::Lambda::Function",DataResourceType2.S3_OBJECT="AWS::S3::Object"})(DataResourceType=exports.DataResourceType||(exports.DataResourceType={}));
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.DataResourceType=exports.ManagementEventSources=exports.Trail=exports.ReadWriteType=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),events=require("../../aws-events"),iam=require("../../aws-iam"),logs=require("../../aws-logs"),s3=require("../../aws-s3"),core_1=require("../../core"),cloudtrail_generated_1=require("./cloudtrail.generated");var ReadWriteType;(function(ReadWriteType2){ReadWriteType2.READ_ONLY="ReadOnly",ReadWriteType2.WRITE_ONLY="WriteOnly",ReadWriteType2.ALL="All",ReadWriteType2.NONE="None"})(ReadWriteType=exports.ReadWriteType||(exports.ReadWriteType={}));class Trail extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.trailName}),this.eventSelectors=[];try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_TrailProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Trail),error}const cloudTrailPrincipal=new iam.ServicePrincipal("cloudtrail.amazonaws.com");this.s3bucket=props.bucket||new s3.Bucket(this,"S3",{encryption:s3.BucketEncryption.UNENCRYPTED,enforceSSL:!0}),this.s3bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.s3bucket.bucketArn],actions:["s3:GetBucketAcl"],principals:[cloudTrailPrincipal]})),this.s3bucket.addToResourcePolicy(new iam.PolicyStatement({resources:[this.s3bucket.arnForObjects(`${props.s3KeyPrefix?`${props.s3KeyPrefix}/`:""}AWSLogs/${core_1.Stack.of(this).account}/*`)],actions:["s3:PutObject"],principals:[cloudTrailPrincipal],conditions:{StringEquals:{"s3:x-amz-acl":"bucket-owner-full-control"}}})),this.topic=props.snsTopic,this.topic&&this.topic.grantPublish(cloudTrailPrincipal);let logsRole;if(props.sendToCloudWatchLogs&&(props.cloudWatchLogGroup?this.logGroup=props.cloudWatchLogGroup:this.logGroup=new logs.LogGroup(this,"LogGroup",{retention:props.cloudWatchLogsRetention??logs.RetentionDays.ONE_YEAR}),logsRole=new iam.Role(this,"LogsRole",{assumedBy:cloudTrailPrincipal}),logsRole.addToPrincipalPolicy(new iam.PolicyStatement({actions:["logs:PutLogEvents","logs:CreateLogStream"],resources:[this.logGroup.logGroupArn]}))),props.managementEvents){let managementEvent;props.managementEvents===ReadWriteType.NONE?managementEvent={includeManagementEvents:!1}:managementEvent={includeManagementEvents:!0,readWriteType:props.managementEvents},this.eventSelectors.push(managementEvent)}if(props.kmsKey&&props.encryptionKey)throw new Error("Both kmsKey and encryptionKey must not be specified. Use only encryptionKey");const trail=new cloudtrail_generated_1.CfnTrail(this,"Resource",{isLogging:!0,enableLogFileValidation:props.enableFileValidation==null?!0:props.enableFileValidation,isMultiRegionTrail:props.isMultiRegionTrail==null?!0:props.isMultiRegionTrail,includeGlobalServiceEvents:props.includeGlobalServiceEvents==null?!0:props.includeGlobalServiceEvents,trailName:this.physicalName,kmsKeyId:props.encryptionKey?.keyArn??props.kmsKey?.keyArn,s3BucketName:this.s3bucket.bucketName,s3KeyPrefix:props.s3KeyPrefix,cloudWatchLogsLogGroupArn:this.logGroup?.logGroupArn,cloudWatchLogsRoleArn:logsRole?.roleArn,snsTopicName:this.topic?.topicName,eventSelectors:this.eventSelectors,isOrganizationTrail:props.isOrganizationTrail});this.trailArn=this.getResourceArnAttribute(trail.attrArn,{service:"cloudtrail",resource:"trail",resourceName:this.physicalName}),this.trailSnsTopicArn=trail.attrSnsTopicArn,this.s3bucket.policy&&trail.node.addDependency(this.s3bucket.policy),logsRole!==void 0&&trail.node.addDependency(logsRole)}static onEvent(scope,id,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_events_OnEventOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.onEvent),error}const rule=new events.Rule(scope,id,options);return rule.addTarget(options.target),rule.addEventPattern({detailType:["AWS API Call via CloudTrail"]}),rule}addEventSelector(dataResourceType,dataResourceValues,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_DataResourceType(dataResourceType),jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addEventSelector),error}if(dataResourceValues.length>250)throw new Error("A maximum of 250 data elements can be in one event selector");if(this.eventSelectors.length>5)throw new Error("A maximum of 5 event selectors are supported per trail.");this.eventSelectors.push({dataResources:[{type:dataResourceType,values:dataResourceValues}],includeManagementEvents:options.includeManagementEvents,excludeManagementEventSources:options.excludeManagementEventSources,readWriteType:options.readWriteType})}addLambdaEventSelector(handlers,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addLambdaEventSelector),error}if(handlers.length===0)return;const dataResourceValues=handlers.map(h=>h.functionArn);return this.addEventSelector(DataResourceType.LAMBDA_FUNCTION,dataResourceValues,options)}logAllLambdaDataEvents(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.logAllLambdaDataEvents),error}return this.addEventSelector(DataResourceType.LAMBDA_FUNCTION,[`arn:${this.stack.partition}:lambda`],options)}addS3EventSelector(s3Selector,options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addS3EventSelector),error}if(s3Selector.length===0)return;const dataResourceValues=s3Selector.map(sel=>`${sel.bucket.bucketArn}/${sel.objectPrefix??""}`);return this.addEventSelector(DataResourceType.S3_OBJECT,dataResourceValues,options)}logAllS3DataEvents(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_cloudtrail_AddEventSelectorOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.logAllS3DataEvents),error}return this.addEventSelector(DataResourceType.S3_OBJECT,[`arn:${this.stack.partition}:s3:::`],options)}onCloudTrailEvent(id,options={}){return Trail.onEvent(this,id,options)}}exports.Trail=Trail,_a=JSII_RTTI_SYMBOL_1,Trail[_a]={fqn:"aws-cdk-lib.aws_cloudtrail.Trail",version:"2.51.1"};var ManagementEventSources;(function(ManagementEventSources2){ManagementEventSources2.KMS="kms.amazonaws.com",ManagementEventSources2.RDS_DATA_API="rdsdata.amazonaws.com"})(ManagementEventSources=exports.ManagementEventSources||(exports.ManagementEventSources={}));var DataResourceType;(function(DataResourceType2){DataResourceType2.LAMBDA_FUNCTION="AWS::Lambda::Function",DataResourceType2.S3_OBJECT="AWS::S3::Object"})(DataResourceType=exports.DataResourceType||(exports.DataResourceType={}));
 //# sourceMappingURL=cloudtrail.js.map