carlin 1.19.11 → 1.19.13

package/dist/deploy/baseStack/getLambdaImageBuilder.template.js

@@ -0,0 +1,186 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLambdaImageBuilderTemplate = void 0;
+const tslib_1 = require("tslib");
+const js_yaml_1 = tslib_1.__importDefault(require("js-yaml"));
+const utils_1 = require("../../utils");
+const config_1 = require("./config");
+const getLambdaImageBuilderTemplate = () => {
+    const CODE_BUILD_PROJECT_LOGS_LOGICAL_ID = 'CodeBuildProjectLogsLogGroup';
+    const CODE_BUILD_PROJECT_SERVICE_ROLE_LOGICAL_ID = 'ImageCodeBuildProjectIAMRole';
+    return {
+        AWSTemplateFormatVersion: '2010-09-09',
+        Resources: {
+            [CODE_BUILD_PROJECT_LOGS_LOGICAL_ID]: {
+                Type: 'AWS::Logs::LogGroup',
+                DeletionPolicy: 'Delete',
+                Properties: {},
+            },
+            [CODE_BUILD_PROJECT_SERVICE_ROLE_LOGICAL_ID]: {
+                Type: 'AWS::IAM::Role',
+                Properties: {
+                    AssumeRolePolicyDocument: {
+                        Version: '2012-10-17',
+                        Statement: [
+                            {
+                                Effect: 'Allow',
+                                Principal: {
+                                    Service: 'codebuild.amazonaws.com',
+                                },
+                                Action: 'sts:AssumeRole',
+                            },
+                        ],
+                    },
+                    Path: (0, utils_1.getIamPath)(),
+                    Policies: [
+                        {
+                            PolicyName: `${CODE_BUILD_PROJECT_SERVICE_ROLE_LOGICAL_ID}Policy`,
+                            PolicyDocument: {
+                                Version: '2012-10-17',
+                                Statement: [
+                                    {
+                                        Effect: 'Allow',
+                                        Action: ['logs:CreateLogStream', 'logs:PutLogEvents'],
+                                        Resource: '*',
+                                    },
+                                    {
+                                        Effect: 'Allow',
+                                        Action: ['ecr:GetAuthorizationToken'],
+                                        Resource: '*',
+                                    },
+                                    {
+                                        Effect: 'Allow',
+                                        Action: [
+                                            'ecr:BatchCheckLayerAvailability',
+                                            'ecr:CompleteLayerUpload',
+                                            'ecr:InitiateLayerUpload',
+                                            'ecr:PutImage',
+                                            'ecr:UploadLayerPart',
+                                        ],
+                                        Resource: '*',
+                                    },
+                                    {
+                                        Effect: 'Allow',
+                                        Action: 's3:GetObject',
+                                        Resource: [
+                                            {
+                                                'Fn::Sub': [
+                                                    // eslint-disable-next-line no-template-curly-in-string
+                                                    'arn:aws:s3:::${BucketName}/*',
+                                                    {
+                                                        BucketName: {
+                                                            Ref: config_1.BASE_STACK_BUCKET_LOGICAL_NAME,
+                                                        },
+                                                    },
+                                                ],
+                                            },
+                                        ],
+                                    },
+                                ],
+                            },
+                        },
+                    ],
+                },
+            },
+            [config_1.BASE_STACK_LAMBDA_IMAGE_BUILDER_LOGICAL_NAME]: {
+                Type: 'AWS::CodeBuild::Project',
+                Properties: {
+                    Artifacts: {
+                        Type: 'NO_ARTIFACTS',
+                    },
+                    Cache: {
+                        Location: 'LOCAL',
+                        Modes: ['LOCAL_DOCKER_LAYER_CACHE'],
+                        Type: 'LOCAL',
+                    },
+                    Description: 'Create Lambda image.',
+                    Environment: {
+                        ComputeType: 'BUILD_GENERAL1_SMALL',
+                        EnvironmentVariables: [
+                            {
+                                Name: 'AWS_ACCOUNT_ID',
+                                Value: { Ref: 'AWS::AccountId' },
+                            },
+                            {
+                                Name: 'AWS_REGION',
+                                Value: { Ref: 'AWS::Region' },
+                            },
+                            {
+                                Name: 'IMAGE_TAG',
+                                Value: 'latest',
+                            },
+                            {
+                                Name: 'LAMBDA_EXTERNALS',
+                                Value: '',
+                            },
+                        ],
+                        Image: 'aws/codebuild/standard:3.0',
+                        ImagePullCredentialsType: 'CODEBUILD',
+                        PrivilegedMode: true,
+                        Type: 'LINUX_CONTAINER',
+                    },
+                    LogsConfig: {
+                        CloudWatchLogs: {
+                            Status: 'ENABLED',
+                            GroupName: { Ref: CODE_BUILD_PROJECT_LOGS_LOGICAL_ID },
+                        },
+                    },
+                    ServiceRole: {
+                        'Fn::GetAtt': [CODE_BUILD_PROJECT_SERVICE_ROLE_LOGICAL_ID, 'Arn'],
+                    },
+                    Source: {
+                        BuildSpec: js_yaml_1.default.dump({
+                            version: '0.2',
+                            phases: {
+                                install: {
+                                    commands: [
+                                        'echo install started on `date`',
+                                        'npm init -y',
+                                        /**
+                                         * https://stackoverflow.com/a/51433146/8786986
+                                         */
+                                        'npm install --save --package-lock-only --no-package-lock $LAMBDA_EXTERNALS',
+                                        'ls',
+                                    ],
+                                },
+                                pre_build: {
+                                    commands: [
+                                        'echo pre_build started on `date`',
+                                        '$(aws ecr get-login --no-include-email --region $AWS_REGION)',
+                                    ],
+                                },
+                                build: {
+                                    commands: [
+                                        'echo build started on `date`',
+                                        'echo Building the repository image...',
+                                        'echo "$DOCKERFILE" > Dockerfile',
+                                        'docker build -t $REPOSITORY_ECR_REPOSITORY:$IMAGE_TAG -f Dockerfile .',
+                                        'docker tag $REPOSITORY_ECR_REPOSITORY:$IMAGE_TAG $AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com/$REPOSITORY_ECR_REPOSITORY:$IMAGE_TAG',
+                                    ],
+                                },
+                                post_build: {
+                                    commands: [
+                                        'echo post_build completed on `date`',
+                                        'echo Pushing the repository image...',
+                                        'docker push $AWS_ACCOUNT_ID.dkr.ecr.$AWS_REGION.amazonaws.com/$REPOSITORY_ECR_REPOSITORY:$IMAGE_TAG',
+                                    ],
+                                },
+                            },
+                        }),
+                        Type: 'NO_SOURCE',
+                    },
+                    TimeoutInMinutes: 60,
+                },
+            },
+        },
+        Outputs: {
+            [config_1.BASE_STACK_LAMBDA_IMAGE_BUILDER_LOGICAL_NAME]: {
+                Value: { Ref: config_1.BASE_STACK_LAMBDA_IMAGE_BUILDER_LOGICAL_NAME },
+                Export: {
+                    Name: config_1.BASE_STACK_LAMBDA_IMAGE_BUILDER_EXPORTED_NAME,
+                },
+            },
+        },
+    };
+};
+exports.getLambdaImageBuilderTemplate = getLambdaImageBuilderTemplate;

package/dist/deploy/baseStack/getLambdaLayerBuilder.template.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLambdaLayerBuilderTemplate = exports.getBuildSpec = void 0;
+const utils_1 = require("../../utils");
+const config_1 = require("./config");
+const CODE_BUILD_PROJECT_LOGS_GROUP_LOGICAL_ID = `${config_1.BASE_STACK_LAMBDA_LAYER_BUILDER_LOGICAL_NAME}LogsLogGroup`;
+const CODE_BUILD_PROJECT_IAM_ROLE_LOGICAL_ID = `${config_1.BASE_STACK_LAMBDA_LAYER_BUILDER_LOGICAL_NAME}Role`;
+/**
+ * https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html
+ */
+const getBuildSpec = () => `
+version: 0.2
+phases:
+  install:
+    runtime-versions:
+      nodejs: 12
+    commands:
+      - npm i --no-bin-links --no-optional --no-package-lock --no-save --no-shrinkwrap $PACKAGE_NAME
+      - mkdir nodejs
+      - mv node_modules nodejs/node_modules
+artifacts:
+  files:
+    - nodejs/**/*
+  name: $PACKAGE_NAME.zip
+`.trim();
+exports.getBuildSpec = getBuildSpec;
+/**
+ * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html
+ */
+const getLambdaLayerBuilderTemplate = () => {
+    return {
+        Resources: {
+            [CODE_BUILD_PROJECT_IAM_ROLE_LOGICAL_ID]: {
+                Type: 'AWS::IAM::Role',
+                Properties: {
+                    AssumeRolePolicyDocument: {
+                        Version: '2012-10-17',
+                        Statement: [
+                            {
+                                Effect: 'Allow',
+                                Principal: {
+                                    Service: ['codebuild.amazonaws.com'],
+                                },
+                                Action: ['sts:AssumeRole'],
+                            },
+                        ],
+                    },
+                    Path: (0, utils_1.getIamPath)(),
+                    Policies: [
+                        {
+                            PolicyName: `${CODE_BUILD_PROJECT_IAM_ROLE_LOGICAL_ID}Policy`,
+                            PolicyDocument: {
+                                Version: '2012-10-17',
+                                Statement: [
+                                    {
+                                        Effect: 'Allow',
+                                        Action: ['logs:CreateLogStream', 'logs:PutLogEvents'],
+                                        Resource: '*',
+                                    },
+                                    {
+                                        Effect: 'Allow',
+                                        Action: ['s3:*'],
+                                        Resource: [
+                                            {
+                                                'Fn::Sub': [
+                                                    // eslint-disable-next-line no-template-curly-in-string
+                                                    'arn:aws:s3:::${BucketName}',
+                                                    {
+                                                        BucketName: {
+                                                            Ref: config_1.BASE_STACK_BUCKET_LOGICAL_NAME,
+                                                        },
+                                                    },
+                                                ],
+                                            },
+                                            {
+                                                'Fn::Sub': [
+                                                    // eslint-disable-next-line no-template-curly-in-string
+                                                    'arn:aws:s3:::${BucketName}/*',
+                                                    {
+                                                        BucketName: {
+                                                            Ref: config_1.BASE_STACK_BUCKET_LOGICAL_NAME,
+                                                        },
+                                                    },
+                                                ],
+                                            },
+                                        ],
+                                    },
+                                ],
+                            },
+                        },
+                    ],
+                },
+            },
+            [CODE_BUILD_PROJECT_LOGS_GROUP_LOGICAL_ID]: {
+                Type: 'AWS::Logs::LogGroup',
+                DeletionPolicy: 'Delete',
+                Properties: {},
+            },
+            [config_1.BASE_STACK_LAMBDA_LAYER_BUILDER_LOGICAL_NAME]: {
+                Type: 'AWS::CodeBuild::Project',
+                Properties: {
+                    Artifacts: {
+                        Location: { Ref: config_1.BASE_STACK_BUCKET_LOGICAL_NAME },
+                        NamespaceType: 'NONE',
+                        OverrideArtifactName: true,
+                        Packaging: 'ZIP',
+                        Path: 'lambda-layers/packages',
+                        Type: 'S3',
+                    },
+                    Environment: {
+                        ComputeType: 'BUILD_GENERAL1_SMALL',
+                        Image: 'aws/codebuild/standard:3.0',
+                        Type: 'LINUX_CONTAINER',
+                    },
+                    LogsConfig: {
+                        CloudWatchLogs: {
+                            GroupName: {
+                                Ref: `${CODE_BUILD_PROJECT_LOGS_GROUP_LOGICAL_ID}`,
+                            },
+                            Status: 'ENABLED',
+                        },
+                    },
+                    ServiceRole: {
+                        'Fn::GetAtt': `${CODE_BUILD_PROJECT_IAM_ROLE_LOGICAL_ID}.Arn`,
+                    },
+                    Source: {
+                        BuildSpec: (0, exports.getBuildSpec)(),
+                        Type: 'NO_SOURCE',
+                    },
+                },
+            },
+        },
+        Outputs: {
+            [config_1.BASE_STACK_LAMBDA_LAYER_BUILDER_LOGICAL_NAME]: {
+                Value: { Ref: config_1.BASE_STACK_LAMBDA_LAYER_BUILDER_LOGICAL_NAME },
+            },
+        },
+    };
+};
+exports.getLambdaLayerBuilderTemplate = getLambdaLayerBuilderTemplate;

package/dist/deploy/baseStack/getVpc.template.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getVpcTemplate = void 0;
+const change_case_1 = require("change-case");
+const config_1 = require("../../config");
+const config_2 = require("./config");
+const getVpcTemplate = () => {
+    const vpcName = `${(0, change_case_1.pascalCase)(config_1.NAME)}VPC`;
+    const EC2_INTERNET_GATEWAY_LOGICAL_ID = 'EC2InternetGateway';
+    const EC2_ROUTE_TABLE_LOGICAL_ID = 'EC2RouteTable';
+    const EC2_VPC_LOGICAL_ID = 'EC2VCP';
+    const template = {
+        AWSTemplateFormatVersion: '2010-09-09',
+        Mappings: {
+            CidrMappings: {
+                VPC: {
+                    CIDR: '10.0.0.0/16',
+                },
+            },
+        },
+        Resources: {
+            [EC2_VPC_LOGICAL_ID]: {
+                Type: 'AWS::EC2::VPC',
+                Properties: {
+                    CidrBlock: {
+                        'Fn::FindInMap': ['CidrMappings', 'VPC', 'CIDR'],
+                    },
+                    EnableDnsHostnames: true,
+                    EnableDnsSupport: true,
+                    Tags: [
+                        {
+                            Key: 'Name',
+                            Value: vpcName,
+                        },
+                    ],
+                },
+            },
+            [EC2_INTERNET_GATEWAY_LOGICAL_ID]: {
+                Type: 'AWS::EC2::InternetGateway',
+                Properties: {},
+            },
+            EC2VPCGatewayAttachment: {
+                Type: 'AWS::EC2::VPCGatewayAttachment',
+                Properties: {
+                    InternetGatewayId: {
+                        Ref: EC2_INTERNET_GATEWAY_LOGICAL_ID,
+                    },
+                    VpcId: {
+                        Ref: EC2_VPC_LOGICAL_ID,
+                    },
+                },
+            },
+            [EC2_ROUTE_TABLE_LOGICAL_ID]: {
+                Type: 'AWS::EC2::RouteTable',
+                Properties: {
+                    Tags: [
+                        {
+                            Key: 'Name',
+                            Value: {
+                                'Fn::Join': [' ', [vpcName, '-', EC2_ROUTE_TABLE_LOGICAL_ID]],
+                            },
+                        },
+                    ],
+                    VpcId: {
+                        Ref: EC2_VPC_LOGICAL_ID,
+                    },
+                },
+            },
+            EC2Route: {
+                Type: 'AWS::EC2::Route',
+                Properties: {
+                    DestinationCidrBlock: '0.0.0.0/0',
+                    GatewayId: {
+                        Ref: EC2_INTERNET_GATEWAY_LOGICAL_ID,
+                    },
+                    RouteTableId: {
+                        Ref: EC2_ROUTE_TABLE_LOGICAL_ID,
+                    },
+                },
+            },
+        },
+        Outputs: {
+            VPCId: {
+                Value: {
+                    Ref: EC2_VPC_LOGICAL_ID,
+                },
+                Export: {
+                    Name: config_2.BASE_STACK_VPC_ID_EXPORTED_NAME,
+                },
+            },
+            VPCDefaultSecurityGroup: {
+                Value: {
+                    'Fn::GetAtt': [EC2_VPC_LOGICAL_ID, 'DefaultSecurityGroup'],
+                },
+                Export: {
+                    Name: config_2.BASE_STACK_VPC_DEFAULT_SECURITY_GROUP_EXPORTED_NAME,
+                },
+            },
+        },
+    };
+    [
+        config_2.BASE_STACK_VPC_PUBLIC_SUBNET_0_EXPORTED_NAME,
+        config_2.BASE_STACK_VPC_PUBLIC_SUBNET_1_EXPORTED_NAME,
+        config_2.BASE_STACK_VPC_PUBLIC_SUBNET_2_EXPORTED_NAME,
+    ].forEach((publicSubnetExportedName, index) => {
+        const publicSubnetLogicalId = `PublicSubnet${index}EC2Subnet`;
+        const publicSubnetCidrMappings = `PublicSubnet${index}`;
+        template.Mappings.CidrMappings[publicSubnetCidrMappings] = {
+            CIDR: `10.0.${index}.0/24`,
+        };
+        template.Resources[publicSubnetLogicalId] = {
+            Type: 'AWS::EC2::Subnet',
+            Properties: {
+                AvailabilityZone: {
+                    'Fn::Select': [
+                        index,
+                        {
+                            'Fn::GetAZs': {
+                                Ref: 'AWS::Region',
+                            },
+                        },
+                    ],
+                },
+                CidrBlock: {
+                    'Fn::FindInMap': ['CidrMappings', publicSubnetCidrMappings, 'CIDR'],
+                },
+                MapPublicIpOnLaunch: true,
+                Tags: [
+                    {
+                        Key: 'Name',
+                        Value: {
+                            'Fn::Join': [
+                                ' ',
+                                [EC2_VPC_LOGICAL_ID, '-', publicSubnetLogicalId],
+                            ],
+                        },
+                    },
+                ],
+                VpcId: {
+                    Ref: EC2_VPC_LOGICAL_ID,
+                },
+            },
+        };
+        template.Resources[`PublicSubnet${index}EC2SubnetRouteTableAssociation`] = {
+            Type: 'AWS::EC2::SubnetRouteTableAssociation',
+            Properties: {
+                RouteTableId: {
+                    Ref: EC2_ROUTE_TABLE_LOGICAL_ID,
+                },
+                SubnetId: {
+                    Ref: publicSubnetLogicalId,
+                },
+            },
+        };
+        if (!template.Outputs) {
+            template.Outputs = {};
+        }
+        template.Outputs[publicSubnetLogicalId] = {
+            Value: {
+                Ref: publicSubnetLogicalId,
+            },
+            Export: {
+                Name: publicSubnetExportedName,
+            },
+        };
+    });
+    return template;
+};
+exports.getVpcTemplate = getVpcTemplate;