cdk-nuxt 2.0.1 → 2.2.0

package/lib/stack/access-logs-analysis/AccessLogsAnalysis.ts

@@ -0,0 +1,331 @@
+import {Bucket, EventType, NotificationKeyFilter} from 'aws-cdk-lib/aws-s3';
+import {Construct} from 'constructs';
+import {CfnWorkGroup} from 'aws-cdk-lib/aws-athena';
+import {CloudFrontAccessLogsByDateTable} from './CloudFrontAccessLogsByDateTable';
+import {AccessLogsParquetTable} from './AccessLogsParquetTable';
+import {Architecture, Code, Function, LayerVersion, Runtime} from 'aws-cdk-lib/aws-lambda';
+import {Rule, RuleTargetInput, Schedule} from 'aws-cdk-lib/aws-events';
+import {CfnTag, Duration, RemovalPolicy, Stack} from 'aws-cdk-lib';
+import {Column, Database} from '@aws-cdk/aws-glue-alpha';
+import {S3EventSource} from 'aws-cdk-lib/aws-lambda-event-sources';
+import {RetentionDays} from 'aws-cdk-lib/aws-logs';
+import {Effect, PolicyStatement} from 'aws-cdk-lib/aws-iam';
+import {LambdaFunction} from 'aws-cdk-lib/aws-events-targets';
+import * as path from 'path';
+import {AccessLogsAnalysisProps} from "./AccessLogsAnalysisProps";
+import {ColumnTransformationRules} from "../../functions/access-logs-analysis/partitioning/types";
+
+/**
+ * Provides the AWS resources to analyze access logs. This construct is derived from the official AWS sample
+ * CloudFormation stack:
+ * {@link https://github.com/aws-samples/amazon-cloudfront-access-logs-queries/blob/mainline/template.yaml}
+ */
+export abstract class AccessLogsAnalysis extends Construct {
+
+    protected static readonly ACCESS_LOGS_FOLDER_UNPROCESSED = 'unprocessed';
+    protected static readonly ACCESS_LOGS_FOLDER_GROUPED_BY_DATE = 'by-date';
+    protected static readonly ACCESS_LOGS_FOLDER_TRANSFORMED = 'transformed';
+    protected static readonly ACCESS_LOGS_FOLDER_ATHENA_RESULTS = 'athena-query-results';
+
+    protected readonly resourceIdPrefix: string;
+    protected readonly bucket: Bucket;
+    protected readonly workgroup: CfnWorkGroup;
+    protected readonly database: Database;
+    protected readonly accessLogsByDateTable: CloudFrontAccessLogsByDateTable;
+    protected readonly accessLogsParquetTable: AccessLogsParquetTable;
+    protected readonly groupByDateLayer: LayerVersion;
+    protected readonly groupByDateLambda: Function;
+    protected readonly partitioningLayer: LayerVersion;
+    protected readonly createPartitionLambda: Function;
+    protected readonly transformPartitionLambda: Function;
+    protected readonly createPartitionsScheduler: Rule;
+    protected readonly transformPartitionsScheduler: Rule;
+
+    protected constructor(scope: Construct, id: string, props: AccessLogsAnalysisProps) {
+        super(scope, id);
+        this.resourceIdPrefix = props.resourcePrefix;
+        this.bucket = props.bucket;
+        this.setupLifecycleRules(props);
+        this.workgroup = this.createWorkgroup();
+        this.database = this.createGlueDatabase();
+        this.accessLogsByDateTable = this.createAccessLogsByDateTable();
+        this.accessLogsParquetTable = this.createAccessLogsParquetTable();
+        this.groupByDateLayer = this.createGroupByDateLayer();
+        this.groupByDateLambda = this.createGroupByDateLambda();
+        this.partitioningLayer = this.createPartitioningLayer();
+        this.createPartitionLambda = this.createCreatePartitionLambda();
+        this.transformPartitionLambda = this.createTransformPartitionLambda();
+        this.createPartitionsScheduler = this.createCreatePartitionsScheduler();
+        this.transformPartitionsScheduler = this.createTransformPartitionsScheduler(props);
+    }
+
+    private setupLifecycleRules(props: AccessLogsAnalysisProps): void {
+        // cleanup raw and partitioned access logs after a configurable time range
+
+        this.bucket.addLifecycleRule({
+            id: `${this.resourceIdPrefix}-cleanup-unprocessed`,
+            prefix: `${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_UNPROCESSED}/*`,
+            expiration: props.expireRawLogsAfter ?? Duration.days(7),
+        });
+
+        this.bucket.addLifecycleRule({
+            id: `${this.resourceIdPrefix}-cleanup-grouped`,
+            prefix: `${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_GROUPED_BY_DATE}/*`,
+            expiration: props.expireIntermediateLogsAfter ?? Duration.days(7),
+        });
+
+        this.bucket.addLifecycleRule({
+            id: `${this.resourceIdPrefix}-cleanup-transformed`,
+            prefix: `${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_TRANSFORMED}/*`,
+            expiration: props.expireTransformedLogsAfter ?? Duration.days(180),
+        });
+
+        /* CHECKME: delete query results after 1 week
+        this.bucket.addLifecycleRule({
+          id: `${this.resourceIdPrefix}-cleanup-query-results`,
+          prefix: `${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_ATHENA_RESULTS}/*`,
+          expiration: Duration.days(7),
+        });
+        */
+    }
+
+    private createWorkgroup(): CfnWorkGroup {
+        const workgroupName = `${this.resourceIdPrefix}-workgroup`;
+
+        // due to a current bug, the tags are not automatically assigned to the workgroup
+        // note, that the keys must be converted to lower case
+        const tags: CfnTag[] = Stack.of(this)
+            .tags.renderTags()
+            .map((tag: { Key: string; Value: string }) => ({key: tag.Key, value: tag.Value}));
+
+        return new CfnWorkGroup(this, workgroupName, {
+            name: workgroupName,
+            recursiveDeleteOption: true,
+            workGroupConfiguration: {
+                publishCloudWatchMetricsEnabled: false,
+                resultConfiguration: {
+                    outputLocation: `s3://${this.bucket.bucketName}/${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_ATHENA_RESULTS}`,
+                },
+                enforceWorkGroupConfiguration: true
+            },
+            tags,
+        });
+    }
+
+    private createGlueDatabase(): Database {
+        const databaseName = `${this.resourceIdPrefix}-database`;
+        return new Database(this, databaseName, {
+            // Athena doesn't support dashes in database/table names
+            databaseName: databaseName.replace(/-/g, '_'),
+        });
+    }
+
+    protected abstract createAccessLogsByDateTable(): CloudFrontAccessLogsByDateTable;
+
+    protected abstract createAccessLogsParquetTable(): CloudFrontAccessLogsByDateTable;
+
+    private createGroupByDateLayer(): LayerVersion {
+        const layerVersionName = `${this.resourceIdPrefix}-group-by-date-dependencies`;
+        return new LayerVersion(this, layerVersionName, {
+            layerVersionName,
+            compatibleArchitectures: [Architecture.ARM_64, Architecture.X86_64],
+            compatibleRuntimes: [Runtime.NODEJS_14_X, Runtime.NODEJS_16_X],
+            code: Code.fromAsset(path.join(__dirname, '../../functions/access-logs-analysis/group-by-date/build/layer')),
+            removalPolicy: RemovalPolicy.DESTROY,
+        });
+    }
+
+    private createPartitioningLayer(): LayerVersion {
+        const layerVersionName = `${this.resourceIdPrefix}-partitioning-dependencies`;
+        return new LayerVersion(this, layerVersionName, {
+            layerVersionName,
+            compatibleArchitectures: [Architecture.ARM_64, Architecture.X86_64],
+            compatibleRuntimes: [Runtime.NODEJS_14_X, Runtime.NODEJS_16_X],
+            code: Code.fromAsset(path.join(__dirname, '../../functions/access-logs-analysis/partitioning/build/layer')),
+            removalPolicy: RemovalPolicy.DESTROY,
+        });
+    }
+
+    /**
+     * A Lambda function to be triggered whenever a new access log is created.
+     * It moves the raw access logs into a sub folder hierarchy by year, month, day and hour.
+     */
+    private createGroupByDateLambda(): Function {
+        const functionName = `${this.resourceIdPrefix}-group-by-date`;
+
+        const lambda = new Function(this, functionName, {
+            functionName,
+            architecture: Architecture.ARM_64,
+            runtime: Runtime.NODEJS_16_X,
+            code: Code.fromAsset(path.join(__dirname, '../../functions/access-logs-analysis/group-by-date/build/app')),
+            memorySize: 512,
+            timeout: Duration.seconds(20),
+            handler: 'index.handler',
+            layers: [this.groupByDateLayer],
+            events: [
+                new S3EventSource(this.bucket, {
+                    events: [EventType.OBJECT_CREATED],
+                    filters: [this.getUnprocessedObjectsFilter()],
+                }),
+            ],
+            logRetention: RetentionDays.TWO_WEEKS,
+            environment: {
+                AWS_NODEJS_CONNECTION_REUSE_ENABLED: '1',
+                NODE_OPTIONS: '--enable-source-maps',
+                TARGET_FOLDER: AccessLogsAnalysis.ACCESS_LOGS_FOLDER_GROUPED_BY_DATE,
+                RAW_ACCESS_LOG_FILE_PATTERN: this.getRawAccessLogFilePattern().source,
+            },
+        });
+
+        this.bucket.grantReadWrite(lambda);
+        this.bucket.grantDelete(lambda, `${AccessLogsAnalysis.ACCESS_LOGS_FOLDER_UNPROCESSED}/*`);
+
+        return lambda;
+    }
+
+    protected abstract getUnprocessedObjectsFilter(): NotificationKeyFilter;
+
+    /** The pattern to identify unprocessed access logs depends on the producing source */
+    protected abstract getRawAccessLogFilePattern(): RegExp;
+
+    /**
+     * Creates a new partition for the upcoming hour in the access log database.
+     */
+    private createCreatePartitionLambda(): Function {
+        const functionName = `${this.resourceIdPrefix}-create-part`;
+
+        const lambda = new Function(this, functionName, {
+            functionName,
+            architecture: Architecture.ARM_64,
+            runtime: Runtime.NODEJS_16_X,
+            code: Code.fromAsset(path.join(__dirname, '../../functions/access-logs-analysis/partitioning/build/app'), {
+                exclude: ['transform-partition*', '*.d.ts'],
+            }),
+            memorySize: 128,
+            timeout: Duration.seconds(20),
+            handler: 'create-partition.handler',
+            layers: [this.partitioningLayer],
+            logRetention: RetentionDays.TWO_WEEKS,
+            environment: {
+                AWS_NODEJS_CONNECTION_REUSE_ENABLED: '1',
+                NODE_OPTIONS: '--enable-source-maps',
+                WORKGROUP: this.workgroup.name,
+                DATABASE: this.database.databaseName,
+                TABLE: this.accessLogsByDateTable.tableName,
+            },
+        });
+
+        // grant access to S3 bucket and to execute Athena queries which create new partitions
+        this.bucket.grantReadWrite(lambda);
+        lambda.addToRolePolicy(
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: [
+                    'athena:StartQueryExecution',
+                    'athena:GetQueryExecution',
+                    'glue:CreateDatabase',
+                    'glue:CreatePartition',
+                    'glue:GetDatabase',
+                    'glue:GetTable',
+                    'glue:BatchCreatePartition',
+                ],
+                resources: ['*'],
+            })
+        );
+
+        return lambda;
+    }
+
+    /**
+     * Transforms partitions from the Hive format to Parquet.
+     */
+    private createTransformPartitionLambda(): Function {
+        const functionName = `${this.resourceIdPrefix}-transform-part`;
+
+        const lambda = new Function(this, functionName, {
+            functionName,
+            architecture: Architecture.ARM_64,
+            runtime: Runtime.NODEJS_16_X,
+            code: Code.fromAsset(path.join(__dirname, '../../functions/access-logs-analysis/partitioning/build/app'), {
+                exclude: ['create-partition*', '*.d.ts'],
+            }),
+            memorySize: 128,
+            timeout: Duration.seconds(20),
+            handler: 'transform-partition.handler',
+            layers: [this.partitioningLayer],
+            logRetention: RetentionDays.TWO_WEEKS,
+            environment: {
+                AWS_NODEJS_CONNECTION_REUSE_ENABLED: '1',
+                NODE_OPTIONS: '--enable-source-maps',
+                WORKGROUP: this.workgroup.name,
+                DATABASE: this.database.databaseName,
+                SOURCE_TABLE: this.accessLogsByDateTable.tableName,
+                TARGET_TABLE: this.accessLogsParquetTable.tableName,
+            },
+        });
+
+        // grant access to S3 bucket and to execute Athena queries which create new partitions
+        this.bucket.grantReadWrite(lambda);
+        lambda.addToRolePolicy(
+            new PolicyStatement({
+                effect: Effect.ALLOW,
+                actions: [
+                    'athena:StartQueryExecution',
+                    'athena:GetQueryExecution',
+                    'glue:CreateDatabase',
+                    'glue:CreatePartition',
+                    'glue:GetDatabase',
+                    'glue:GetTable',
+                    'glue:BatchCreatePartition',
+                    'glue:GetPartition',
+                    'glue:GetPartitions',
+                    'glue:CreateTable',
+                    'glue:DeleteTable',
+                    'glue:DeletePartition',
+                ],
+                resources: ['*'],
+            })
+        );
+
+        return lambda;
+    }
+
+    private createCreatePartitionsScheduler(): Rule {
+        const ruleName = `${this.resourceIdPrefix}-create-part-sched`;
+        return new Rule(this, ruleName, {
+            ruleName,
+            schedule: Schedule.cron({minute: '55'}),
+            targets: [new LambdaFunction(this.createPartitionLambda, {retryAttempts: 10})],
+        });
+    }
+
+    private createTransformPartitionsScheduler(props: AccessLogsAnalysisProps): Rule {
+        const ruleName = `${this.resourceIdPrefix}-transform-part-sched`;
+        return new Rule(this, ruleName, {
+            ruleName,
+            schedule: Schedule.cron({minute: '1'}),
+            targets: [
+                new LambdaFunction(this.transformPartitionLambda, {
+                    event: this.getTransformPartitionInvocationProps(props),
+                    retryAttempts: 10,
+                }),
+            ],
+        });
+    }
+
+    private getTransformPartitionInvocationProps(props: AccessLogsAnalysisProps): RuleTargetInput {
+        return RuleTargetInput.fromObject({
+            columnNames: [
+                ...this.accessLogsParquetTable.columns,
+                ...(this.accessLogsParquetTable.partitionKeys as Column[]),
+            ].map(column => column.name),
+            columnTransformations: this.getColumnTransformationRules(props),
+        });
+    }
+
+    /**
+     * Needs to return the log source specific column transformation rules
+     * (e.g. to anonymize IP addresses).
+     */
+    protected abstract getColumnTransformationRules(props: AccessLogsAnalysisProps): ColumnTransformationRules;
+}

package/lib/stack/access-logs-analysis/AccessLogsAnalysisProps.d.ts

@@ -0,0 +1,21 @@
+import { Bucket } from "aws-cdk-lib/aws-s3";
+import { Duration } from "aws-cdk-lib";
+export interface AccessLogsAnalysisProps {
+    /**
+     * Expression to prepend to any created resources
+     */
+    readonly resourcePrefix: string;
+    readonly bucket: Bucket;
+    /**
+     * Logs in the raw table will be deleted after this period. Default: 7 days.
+     */
+    readonly expireRawLogsAfter?: Duration;
+    /**
+     * Logs in the intermediate date group table will be deleted after this period. Default: 7 days.
+     */
+    readonly expireIntermediateLogsAfter?: Duration;
+    /**
+     * Logs in the transformed table will be deleted after this period. Default: 180 days.
+     */
+    readonly expireTransformedLogsAfter?: Duration;
+}

package/lib/stack/access-logs-analysis/AccessLogsAnalysisProps.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/lib/stack/access-logs-analysis/AccessLogsAnalysisProps.ts

@@ -0,0 +1,26 @@
+import {Bucket} from "aws-cdk-lib/aws-s3";
+import {Duration} from "aws-cdk-lib";
+
+export interface AccessLogsAnalysisProps {
+    /**
+     * Expression to prepend to any created resources
+     */
+    readonly resourcePrefix: string;
+
+    readonly bucket: Bucket;
+
+    /**
+     * Logs in the raw table will be deleted after this period. Default: 7 days.
+     */
+    readonly expireRawLogsAfter?: Duration;
+
+    /**
+     * Logs in the intermediate date group table will be deleted after this period. Default: 7 days.
+     */
+    readonly expireIntermediateLogsAfter?: Duration;
+
+    /**
+     * Logs in the transformed table will be deleted after this period. Default: 180 days.
+     */
+    readonly expireTransformedLogsAfter?: Duration;
+}

package/lib/stack/access-logs-analysis/AccessLogsParquetTable.d.ts

@@ -0,0 +1,9 @@
+import { Table } from '@aws-cdk/aws-glue-alpha';
+import { Construct } from 'constructs';
+import { AccessLogsTableProps } from "./AccessLogsTableProps";
+/**
+ * Contains the transformed access logs in Apache Parquet format (which is cheaper to query).
+ */
+export declare class AccessLogsParquetTable extends Table {
+    constructor(scope: Construct, id: string, props: AccessLogsTableProps);
+}

package/lib/stack/access-logs-analysis/AccessLogsParquetTable.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessLogsParquetTable = void 0;
+const AccessLogsTableConfig_1 = require("./AccessLogsTableConfig");
+const aws_glue_alpha_1 = require("@aws-cdk/aws-glue-alpha");
+/**
+ * Contains the transformed access logs in Apache Parquet format (which is cheaper to query).
+ */
+class AccessLogsParquetTable extends aws_glue_alpha_1.Table {
+    constructor(scope, id, props) {
+        super(scope, id, {
+            database: props.database,
+            // Athena doesn't support dashes in database/table names
+            tableName: id.replace(/-/g, '_'),
+            columns: AccessLogsTableConfig_1.AccessLogsTableConfig.getTableColumns(),
+            bucket: props.accessLogsBucket,
+            description: 'Contains the access logs transformed to Apache Parquet format',
+            partitionKeys: AccessLogsTableConfig_1.AccessLogsTableConfig.getPartitionKeys(),
+            dataFormat: aws_glue_alpha_1.DataFormat.PARQUET,
+            s3Prefix: props.folderName,
+        });
+    }
+}
+exports.AccessLogsParquetTable = AccessLogsParquetTable;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/stack/access-logs-analysis/AccessLogsParquetTable.ts

@@ -0,0 +1,23 @@
+import {AccessLogsTableConfig} from './AccessLogsTableConfig';
+import {DataFormat, Table} from '@aws-cdk/aws-glue-alpha';
+import {Construct} from 'constructs';
+import {AccessLogsTableProps} from "./AccessLogsTableProps";
+
+/**
+ * Contains the transformed access logs in Apache Parquet format (which is cheaper to query).
+ */
+export class AccessLogsParquetTable extends Table {
+  constructor(scope: Construct, id: string, props: AccessLogsTableProps) {
+    super(scope, id, {
+      database: props.database,
+      // Athena doesn't support dashes in database/table names
+      tableName: id.replace(/-/g, '_'),
+      columns: AccessLogsTableConfig.getTableColumns(),
+      bucket: props.accessLogsBucket,
+      description: 'Contains the access logs transformed to Apache Parquet format',
+      partitionKeys: AccessLogsTableConfig.getPartitionKeys(),
+      dataFormat: DataFormat.PARQUET,
+      s3Prefix: props.folderName,
+    });
+  }
+}

package/lib/stack/access-logs-analysis/AccessLogsTableConfig.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Provides the column descriptions for both of the access log tables.
+ */
+import { Column } from '@aws-cdk/aws-glue-alpha';
+export declare class AccessLogsTableConfig {
+    static getPartitionKeys(): Column[];
+    static getTableColumns(): Column[];
+}

package/lib/stack/access-logs-analysis/AccessLogsTableConfig.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessLogsTableConfig = void 0;
+/**
+ * Provides the column descriptions for both of the access log tables.
+ */
+const aws_glue_alpha_1 = require("@aws-cdk/aws-glue-alpha");
+class AccessLogsTableConfig {
+    static getPartitionKeys() {
+        return [
+            {
+                name: 'year',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'month',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'day',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'hour',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+        ];
+    }
+    static getTableColumns() {
+        return [
+            {
+                name: 'date',
+                type: aws_glue_alpha_1.Schema.DATE,
+            },
+            {
+                name: 'time',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'location',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'bytes',
+                type: aws_glue_alpha_1.Schema.BIG_INT,
+            },
+            {
+                name: 'request_ip',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'method',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'host',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'uri',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'status',
+                type: aws_glue_alpha_1.Schema.INTEGER,
+            },
+            {
+                name: 'referrer',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'user_agent',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'query_string',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'cookie',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'result_type',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'request_id',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'host_header',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'request_protocol',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'request_bytes',
+                type: aws_glue_alpha_1.Schema.BIG_INT,
+            },
+            {
+                name: 'time_taken',
+                type: aws_glue_alpha_1.Schema.FLOAT,
+            },
+            {
+                name: 'xforwarded_for',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'ssl_protocol',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'ssl_cipher',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'response_result_type',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'http_version',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'fle_status',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'fle_encrypted_fields',
+                type: aws_glue_alpha_1.Schema.INTEGER,
+            },
+            {
+                name: 'c_port',
+                type: aws_glue_alpha_1.Schema.INTEGER,
+            },
+            {
+                name: 'time_to_first_byte',
+                type: aws_glue_alpha_1.Schema.FLOAT,
+            },
+            {
+                name: 'x_edge_detailed_result_type',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'sc_content_type',
+                type: aws_glue_alpha_1.Schema.STRING,
+            },
+            {
+                name: 'sc_content_len',
+                type: aws_glue_alpha_1.Schema.BIG_INT,
+            },
+            {
+                name: 'sc_range_start',
+                type: aws_glue_alpha_1.Schema.BIG_INT,
+            },
+            {
+                name: 'sc_range_end',
+                type: aws_glue_alpha_1.Schema.BIG_INT,
+            },
+        ];
+    }
+}
+exports.AccessLogsTableConfig = AccessLogsTableConfig;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQWNjZXNzTG9nc1RhYmxlQ29uZmlnLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiQWNjZXNzTG9nc1RhYmxlQ29uZmlnLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBOztHQUVHO0FBQ0gsNERBQXVEO0FBRXZELE1BQWEscUJBQXFCO0lBQ3pCLE1BQU0sQ0FBQyxnQkFBZ0I7UUFDNUIsT0FBTztZQUNMO2dCQUNFLElBQUksRUFBRSxNQUFNO2dCQUNaLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsT0FBTztnQkFDYixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLEtBQUs7Z0JBQ1gsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxNQUFNO2dCQUNaLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7U0FDRixDQUFDO0lBQ0osQ0FBQztJQUVNLE1BQU0sQ0FBQyxlQUFlO1FBQzNCLE9BQU87WUFDTDtnQkFDRSxJQUFJLEVBQUUsTUFBTTtnQkFDWixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxJQUFJO2FBQ2xCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLE1BQU07Z0JBQ1osSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxVQUFVO2dCQUNoQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLE9BQU87Z0JBQ2IsSUFBSSxFQUFFLHVCQUFNLENBQUMsT0FBTzthQUNyQjtZQUNEO2dCQUNFLElBQUksRUFBRSxZQUFZO2dCQUNsQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxNQUFNO2dCQUNaLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsS0FBSztnQkFDWCxJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLHVCQUFNLENBQUMsT0FBTzthQUNyQjtZQUNEO2dCQUNFLElBQUksRUFBRSxVQUFVO2dCQUNoQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFlBQVk7Z0JBQ2xCLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsY0FBYztnQkFDcEIsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxRQUFRO2dCQUNkLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsYUFBYTtnQkFDbkIsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxZQUFZO2dCQUNsQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsa0JBQWtCO2dCQUN4QixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGVBQWU7Z0JBQ3JCLElBQUksRUFBRSx1QkFBTSxDQUFDLE9BQU87YUFDckI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsWUFBWTtnQkFDbEIsSUFBSSxFQUFFLHVCQUFNLENBQUMsS0FBSzthQUNuQjtZQUNEO2dCQUNFLElBQUksRUFBRSxnQkFBZ0I7Z0JBQ3RCLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsY0FBYztnQkFDcEIsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxZQUFZO2dCQUNsQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLHNCQUFzQjtnQkFDNUIsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxjQUFjO2dCQUNwQixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFlBQVk7Z0JBQ2xCLElBQUksRUFBRSx1QkFBTSxDQUFDLE1BQU07YUFDcEI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsc0JBQXNCO2dCQUM1QixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxPQUFPO2FBQ3JCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFFBQVE7Z0JBQ2QsSUFBSSxFQUFFLHVCQUFNLENBQUMsT0FBTzthQUNyQjtZQUNEO2dCQUNFLElBQUksRUFBRSxvQkFBb0I7Z0JBQzFCLElBQUksRUFBRSx1QkFBTSxDQUFDLEtBQUs7YUFDbkI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsNkJBQTZCO2dCQUNuQyxJQUFJLEVBQUUsdUJBQU0sQ0FBQyxNQUFNO2FBQ3BCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGlCQUFpQjtnQkFDdkIsSUFBSSxFQUFFLHVCQUFNLENBQUMsTUFBTTthQUNwQjtZQUNEO2dCQUNFLElBQUksRUFBRSxnQkFBZ0I7Z0JBQ3RCLElBQUksRUFBRSx1QkFBTSxDQUFDLE9BQU87YUFDckI7WUFDRDtnQkFDRSxJQUFJLEVBQUUsZ0JBQWdCO2dCQUN0QixJQUFJLEVBQUUsdUJBQU0sQ0FBQyxPQUFPO2FBQ3JCO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGNBQWM7Z0JBQ3BCLElBQUksRUFBRSx1QkFBTSxDQUFDLE9BQU87YUFDckI7U0FDRixDQUFDO0lBQ0osQ0FBQztDQUNGO0FBOUpELHNEQThKQyIsInNvdXJjZXNDb250ZW50IjpbIi8qKlxuICogUHJvdmlkZXMgdGhlIGNvbHVtbiBkZXNjcmlwdGlvbnMgZm9yIGJvdGggb2YgdGhlIGFjY2VzcyBsb2cgdGFibGVzLlxuICovXG5pbXBvcnQge0NvbHVtbiwgU2NoZW1hfSBmcm9tICdAYXdzLWNkay9hd3MtZ2x1ZS1hbHBoYSc7XG5cbmV4cG9ydCBjbGFzcyBBY2Nlc3NMb2dzVGFibGVDb25maWcge1xuICBwdWJsaWMgc3RhdGljIGdldFBhcnRpdGlvbktleXMoKTogQ29sdW1uW10ge1xuICAgIHJldHVybiBbXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICd5ZWFyJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdtb250aCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnZGF5JyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdob3VyJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgXTtcbiAgfVxuXG4gIHB1YmxpYyBzdGF0aWMgZ2V0VGFibGVDb2x1bW5zKCk6IENvbHVtbltdIHtcbiAgICByZXR1cm4gW1xuICAgICAge1xuICAgICAgICBuYW1lOiAnZGF0ZScsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5EQVRFLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3RpbWUnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ2xvY2F0aW9uJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdieXRlcycsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5CSUdfSU5ULFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3JlcXVlc3RfaXAnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ21ldGhvZCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnaG9zdCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAndXJpJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdzdGF0dXMnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuSU5URUdFUixcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdyZWZlcnJlcicsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAndXNlcl9hZ2VudCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAncXVlcnlfc3RyaW5nJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdjb29raWUnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3Jlc3VsdF90eXBlJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdyZXF1ZXN0X2lkJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdob3N0X2hlYWRlcicsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAncmVxdWVzdF9wcm90b2NvbCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAncmVxdWVzdF9ieXRlcycsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5CSUdfSU5ULFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3RpbWVfdGFrZW4nLFxuICAgICAgICB0eXBlOiBTY2hlbWEuRkxPQVQsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAneGZvcndhcmRlZF9mb3InLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3NzbF9wcm90b2NvbCcsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnc3NsX2NpcGhlcicsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAncmVzcG9uc2VfcmVzdWx0X3R5cGUnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ2h0dHBfdmVyc2lvbicsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnZmxlX3N0YXR1cycsXG4gICAgICAgIHR5cGU6IFNjaGVtYS5TVFJJTkcsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnZmxlX2VuY3J5cHRlZF9maWVsZHMnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuSU5URUdFUixcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdjX3BvcnQnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuSU5URUdFUixcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICd0aW1lX3RvX2ZpcnN0X2J5dGUnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuRkxPQVQsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAneF9lZGdlX2RldGFpbGVkX3Jlc3VsdF90eXBlJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLlNUUklORyxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdzY19jb250ZW50X3R5cGUnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuU1RSSU5HLFxuICAgICAgfSxcbiAgICAgIHtcbiAgICAgICAgbmFtZTogJ3NjX2NvbnRlbnRfbGVuJyxcbiAgICAgICAgdHlwZTogU2NoZW1hLkJJR19JTlQsXG4gICAgICB9LFxuICAgICAge1xuICAgICAgICBuYW1lOiAnc2NfcmFuZ2Vfc3RhcnQnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuQklHX0lOVCxcbiAgICAgIH0sXG4gICAgICB7XG4gICAgICAgIG5hbWU6ICdzY19yYW5nZV9lbmQnLFxuICAgICAgICB0eXBlOiBTY2hlbWEuQklHX0lOVCxcbiAgICAgIH0sXG4gICAgXTtcbiAgfVxufVxuIl19