cdk-rds-sql 4.1.1 → 6.0.0

package/package.json

@@ -7,13 +7,18 @@
   },
   "scripts": {
     "build": "npx projen build",
+    "build:handler": "npx projen build:handler",
     "bump": "npx projen bump",
     "clobber": "npx projen clobber",
     "compat": "npx projen compat",
     "compile": "npx projen compile",
+    "copy:handler": "npx projen copy:handler",
     "default": "npx projen default",
     "eject": "npx projen eject",
     "eslint": "npx projen eslint",
+    "integ:deploy:mysql:serverless": "npx projen integ:deploy:mysql:serverless",
+    "integ:deploy:postgresql:serverless": "npx projen integ:deploy:postgresql:serverless",
+    "integ:destroy:serverless": "npx projen integ:destroy:serverless",
     "package": "npx projen package",
     "package-all": "npx projen package-all",
     "package:js": "npx projen package:js",
@@ -34,60 +39,50 @@
     "organization": false
   },
   "devDependencies": {
-    "@types/jest": "^27",
-    "@types/ms": "^0.7.34",
-    "@types/node": "^16 <= 16.18.78",
+    "@aws-sdk/client-secrets-manager": "^3.782.0",
+    "@aws-sdk/client-ssm": "^3.787.0",
+    "@types/jest": "~29",
+    "@types/node": "^22",
     "@types/pg": "^8.11.11",
-    "@typescript-eslint/eslint-plugin": "^7",
-    "@typescript-eslint/parser": "^7",
-    "aws-cdk-lib": "2.144.0",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk-lib": "2.171.1",
     "commit-and-tag-version": "^12",
     "constructs": "10.3.0",
-    "esbuild": "0.25.1",
-    "eslint": "^8",
+    "esbuild": "0.25.2",
+    "eslint": "^9",
     "eslint-config-prettier": "^8.10.0",
-    "eslint-import-resolver-typescript": "^3.6.3",
-    "eslint-plugin-import": "^2.30.0",
+    "eslint-import-resolver-typescript": "^3.10.0",
+    "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-prettier": "^4.2.1",
-    "jest": "^27",
-    "jest-junit": "^15",
-    "jsii": "1.x",
-    "jsii-diff": "^1.103.1",
-    "jsii-pacmak": "^1.103.1",
-    "jsii-rosetta": "1.x",
+    "exponential-backoff": "^3.1.2",
+    "jest": "~29",
+    "jest-junit": "^16",
+    "jsii": "~5.7.0",
+    "jsii-diff": "^1.111.0",
+    "jsii-pacmak": "^1.111.0",
+    "jsii-rosetta": "~5.7.0",
+    "mysql2": "^3.14.0",
+    "node-pg-format": "^1.3.5",
+    "pg": "^8.13.3",
     "prettier": "^2.8.8",
-    "projen": "^0.87.2",
-    "testcontainers": "^8.16.0",
-    "ts-jest": "^27",
+    "projen": "^0.91.20",
+    "source-map-support": "^0.5.21",
+    "testcontainers": "10",
+    "ts-jest": "~29",
     "ts-node": "^10.9.2",
-    "typescript": "^4.9.5"
+    "typescript": "~5.8"
   },
   "peerDependencies": {
-    "aws-cdk-lib": "^2.144.0",
+    "aws-cdk-lib": "^2.171.1",
     "constructs": "^10.3.0"
   },
   "dependencies": {
-    "@aws-sdk/client-secrets-manager": "^3.650.0",
-    "@types/aws-lambda": "^8.10.145",
-    "exponential-backoff": "^3.1.1",
-    "ms": "^2.1.3",
-    "node-pg-format": "^1.3.5",
-    "pg": "^8.13.3",
-    "source-map-support": "^0.5.21"
+    "@types/aws-lambda": "^8.10.148"
   },
   "bundledDependencies": [
-    "@aws-sdk/client-secrets-manager",
-    "@types/aws-lambda",
-    "exponential-backoff",
-    "ms",
-    "node-pg-format",
-    "pg",
-    "source-map-support"
+    "@types/aws-lambda"
   ],
-  "overrides": {
-    "@types/babel__traverse": "7.18.2",
-    "@types/prettier": "2.6.0"
-  },
   "keywords": [
     "aurora",
     "aws",
@@ -95,20 +90,33 @@
     "cdk",
     "rds"
   ],
+  "engines": {
+    "node": ">= 22.14"
+  },
   "main": "lib/index.js",
   "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
   },
-  "version": "4.1.1",
+  "version": "6.0.0",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [
+      "test/*.test.ts",
+      "lambda/*.test.ts",
       "<rootDir>/@(src|test)/**/*(*.)@(spec|test).ts?(x)",
       "<rootDir>/@(src|test)/**/__tests__/**/*.ts?(x)",
       "<rootDir>/@(projenrc)/**/*(*.)@(spec|test).ts?(x)",
       "<rootDir>/@(projenrc)/**/__tests__/**/*.ts?(x)"
     ],
+    "testPathIgnorePatterns": [
+      "/node_modules/",
+      "/cdk.out/",
+      "/.github/",
+      "/dist/"
+    ],
+    "maxConcurrency": 2,
+    "maxWorkers": 2,
     "clearMocks": true,
     "collectCoverage": true,
     "coverageReporters": [
@@ -120,10 +128,10 @@
     ],
     "coverageDirectory": "coverage",
     "coveragePathIgnorePatterns": [
-      "/node_modules/"
-    ],
-    "testPathIgnorePatterns": [
-      "/node_modules/"
+      "/node_modules/",
+      "/cdk.out/",
+      "/.github/",
+      "/dist/"
     ],
     "watchPathIgnorePatterns": [
       "/node_modules/"
@@ -137,11 +145,13 @@
         }
       ]
     ],
-    "preset": "ts-jest",
-    "globals": {
-      "ts-jest": {
-        "tsconfig": "tsconfig.dev.json"
-      }
+    "transform": {
+      "^.+\\.[t]sx?$": [
+        "ts-jest",
+        {
+          "tsconfig": "tsconfig.dev.json"
+        }
+      ]
     }
   },
   "types": "lib/index.d.ts",

package/lib/handler.d.ts

@@ -1,2 +0,0 @@
-import { CloudFormationCustomResourceCreateEvent, CloudFormationCustomResourceUpdateEvent, CloudFormationCustomResourceDeleteEvent } from "aws-lambda";
-export declare const handler: (event: CloudFormationCustomResourceCreateEvent | CloudFormationCustomResourceUpdateEvent | CloudFormationCustomResourceDeleteEvent) => Promise<any>;

package/lib/handler.js

@@ -1,311 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handler = void 0;
-const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
-const exponential_backoff_1 = require("exponential-backoff");
-const node_pg_format_1 = require("node-pg-format");
-const pg_1 = require("pg");
-const enum_1 = require("./enum");
-const maxAttempts = 20;
-const jumpTable = {
-    sql: {
-        Create: (_, props) => {
-            return props.Statement;
-        },
-        Update: (_, __, props) => {
-            return props.Statement;
-        },
-        Delete: (_, props) => {
-            return props.Rollback;
-        },
-    },
-    schema: {
-        Create: async (resourceId, props) => {
-            const sql = [node_pg_format_1.format("create schema if not exists %I", resourceId)];
-            if (props.RoleName) {
-                grantRoleForSchema(resourceId, props.RoleName).forEach((stmt) => sql.push(stmt));
-            }
-            return sql;
-        },
-        Update: async (resourceId, oldResourceId, props) => {
-            const sql = [];
-            // TODO: revoke old role-name if props.RoleName was removed or changed
-            if (props.RoleName) {
-                revokeRoleFromSchema(oldResourceId, props.RoleName).forEach((stmt) => sql.push(stmt));
-            }
-            sql.push(node_pg_format_1.format("alter schema %I rename to %I", oldResourceId, resourceId));
-            if (props.RoleName) {
-                grantRoleForSchema(resourceId, props.RoleName).forEach((stmt) => sql.push(stmt));
-            }
-            return sql;
-        },
-        Delete: (resourceId, props) => {
-            const sql = [];
-            if (props.RoleName) {
-                revokeRoleFromSchema(resourceId, props.RoleName).forEach((stmt) => sql.push(stmt));
-            }
-            sql.push(node_pg_format_1.format("drop schema if exists %I cascade", resourceId));
-            return sql;
-        },
-    },
-    role: {
-        Create: async (resourceId, props) => {
-            if (!props.PasswordArn)
-                throw "No PasswordArn provided";
-            const password = await getPassword(props.PasswordArn);
-            if (password) {
-                const sql = [
-                    "start transaction",
-                    node_pg_format_1.format("create role %I with login password %L", resourceId, password),
-                ];
-                if (props.DatabaseName) {
-                    // grant connect to database if database already exists
-                    sql.push(node_pg_format_1.format(`DO $$
-BEGIN
-  IF EXISTS (select from pg_database where datname = '%s' and datistemplate = false) THEN
-    grant connect on database %I to %I;
-  END IF;
-END$$;`, props.DatabaseName, props.DatabaseName, resourceId));
-                }
-                sql.push("commit");
-                return sql;
-            }
-            else {
-                throw `Cannot parse password from ${props.PasswordArn}`;
-            }
-        },
-        Update: async (resourceId, oldResourceId, props) => {
-            // TODO: if database name has changed in OldResourceProperties, revoke connect
-            if (props && props.PasswordArn) {
-                const password = await getPassword(props.PasswordArn);
-                if (password) {
-                    const sql = ["start transaction"];
-                    if (oldResourceId !== resourceId) {
-                        sql.push(node_pg_format_1.format("alter role %I rename to %I", oldResourceId, resourceId));
-                    }
-                    sql.push(node_pg_format_1.format("alter role %I with password %L", resourceId, password));
-                    if (props.DatabaseName) {
-                        sql.push(node_pg_format_1.format("grant connect on database %I to %I", props.DatabaseName, resourceId));
-                    }
-                    sql.push("commit");
-                    return sql;
-                }
-                else {
-                    throw `Cannot parse password from ${props.PasswordArn}`;
-                }
-            }
-            else {
-                const sql = ["start transaction"];
-                if (oldResourceId !== resourceId) {
-                    sql.push(node_pg_format_1.format("alter role %I rename to %I", oldResourceId, resourceId));
-                }
-                sql.push(node_pg_format_1.format(`DO $$
-BEGIN
-  IF EXISTS (select from pg_database where datname = '%s' and datistemplate = false) THEN
-    grant connect on database %I to %I;
-  END IF;
-END$$;`, props.DatabaseName, props.DatabaseName, resourceId));
-                sql.push("commit");
-                return sql;
-            }
-        },
-        Delete: (resourceId, props) => {
-            // TODO: if user is owner of a database, assign ownership to master user
-            // This will require a specified inheritor on role creation
-            return [
-                "start transaction",
-                node_pg_format_1.format(`DO $$
-BEGIN
-  IF EXISTS (select from pg_catalog.pg_roles WHERE rolname = '%s') AND EXISTS (select from pg_database WHERE datname = '%s') THEN
-    revoke all privileges on database %I from %I;
-  END IF;
-END$$;`, resourceId, props.DatabaseName, props.DatabaseName, resourceId),
-                node_pg_format_1.format("drop role if exists %I", resourceId),
-                "commit",
-            ];
-        },
-    },
-    database: {
-        Create: async (resourceId, props) => {
-            const owner = props.Owner;
-            if (owner) {
-                return [
-                    node_pg_format_1.format("create database %I", resourceId),
-                    node_pg_format_1.format("alter database %I owner to %I", resourceId, owner),
-                ];
-            }
-            else {
-                return node_pg_format_1.format("create database %I", resourceId);
-            }
-        },
-        Update: async (resourceId, oldResourceId, props) => {
-            const statements = [];
-            if (resourceId !== oldResourceId) {
-                if (props.MasterOwner) {
-                    statements.push(node_pg_format_1.format("alter database %I owner to %I", oldResourceId, props.MasterOwner));
-                }
-                statements.push(node_pg_format_1.format("alter database %I rename to %I", oldResourceId, resourceId));
-            }
-            const owner = props.Owner;
-            if (owner) {
-                statements.push(node_pg_format_1.format("alter database %I owner to %I", resourceId, props.Owner));
-            }
-            return statements;
-        },
-        Delete: (resourceId, newOwner) => {
-            return [
-                node_pg_format_1.format("select pg_terminate_backend(pg_stat_activity.pid) from pg_stat_activity where datname = %L", resourceId),
-                node_pg_format_1.format("DO $$BEGIN\nIF EXISTS (select from pg_database WHERE datname = '%s') THEN alter database %I owner to %I; END IF;\nEND$$;", resourceId, resourceId, newOwner),
-                node_pg_format_1.format("drop database if exists %I", resourceId),
-            ];
-        },
-    },
-};
-const grantRoleForSchema = (schema, roleName) => [
-    node_pg_format_1.format("GRANT USAGE ON SCHEMA %I TO %I", schema, roleName),
-    node_pg_format_1.format("GRANT CREATE ON SCHEMA %I TO %I", schema, roleName),
-];
-const revokeRoleFromSchema = (schema, roleName) => [
-    node_pg_format_1.format("REVOKE CREATE ON SCHEMA %I FROM %I", schema, roleName),
-    node_pg_format_1.format("REVOKE ALL ON SCHEMA %I FROM %I", schema, roleName),
-];
-const log = process.env.LOGGER === "true"
-    ? console.debug
-    : (_message, ..._optionalParams) => { };
-exports.handler = async (event) => {
-    log(event);
-    const requestType = event.RequestType;
-    const resource = event.ResourceProperties.Resource;
-    const resourceId = event.ResourceProperties.ResourceId;
-    const databaseName = event.ResourceProperties.DatabaseName;
-    if (!Object.keys(jumpTable).includes(event.ResourceProperties.Resource)) {
-        throw `Resource type '${resource}' not recognised.`;
-    }
-    const secrets_client = new client_secrets_manager_1.SecretsManagerClient({});
-    const command = new client_secrets_manager_1.GetSecretValueCommand({
-        SecretId: event.ResourceProperties.SecretArn,
-    });
-    // As the IAM credentials can be cached, an update makde very recent
-    // could not yet be available.
-    // So we retry this a bit.
-    log("Fetching secret");
-    const secret = await exponential_backoff_1.backOff(async () => {
-        try {
-            const result = await secrets_client.send(command);
-            return result;
-        }
-        catch (e) {
-            log("Error fetching secret %o", e);
-            throw e;
-        }
-    }, {
-        numOfAttempts: 10,
-        startingDelay: 500,
-    });
-    if (!secret.SecretString)
-        throw "No secret string";
-    const secretValues = JSON.parse(secret.SecretString);
-    let sql;
-    switch (requestType) {
-        case "Create": {
-            sql = await jumpTable[resource][requestType](resourceId, event.ResourceProperties);
-            break;
-        }
-        case "Update": {
-            const oldResourceId = event
-                .PhysicalResourceId;
-            sql = await jumpTable[resource][requestType](resourceId, oldResourceId, {
-                ...event.ResourceProperties,
-                MasterOwner: secretValues.username,
-            });
-            break;
-        }
-        case "Delete": {
-            if (resource === enum_1.RdsSqlResource.DATABASE) {
-                sql = jumpTable[resource][requestType](resourceId, secretValues.username);
-            }
-            else {
-                sql = jumpTable[resource][requestType](resourceId, event.ResourceProperties);
-            }
-            break;
-        }
-    }
-    if (sql) {
-        let database;
-        if (resource === enum_1.RdsSqlResource.ROLE) {
-            database = secretValues.dbname;
-        }
-        else {
-            database = databaseName ?? secretValues.dbname; // connect to given database if possible, else to database mentioned in secret
-        }
-        const ssl = process.env.SSL ? JSON.parse(process.env.SSL) : false;
-        const params = {
-            host: secretValues.host,
-            port: secretValues.port,
-            user: secretValues.username,
-            password: secretValues.password,
-            database: database,
-            connectionTimeoutMillis: 30000,
-            ssl: ssl,
-        };
-        log(`Connecting to host ${params.host}: ${params.port}, database ${params.database} as ${params.user}`);
-        log("Executing SQL", sql);
-        const pg_client = new pg_1.Client(params);
-        await pg_client.connect();
-        try {
-            await exponential_backoff_1.backOff(async () => {
-                if (typeof sql === "string") {
-                    return pg_client.query(sql);
-                }
-                else {
-                    if (sql) {
-                        return Promise.all(sql.map((statement) => {
-                            return pg_client.query(statement);
-                        }));
-                    }
-                    else {
-                        return;
-                    }
-                }
-            }, {
-                retry: errorFilter,
-                numOfAttempts: maxAttempts,
-            });
-        }
-        finally {
-            await pg_client.end();
-        }
-    }
-    let response = {};
-    // Except for the SQL resource, return the new resource id. This
-    // will cause a delete to be send for the old resource.
-    if (resource !== enum_1.RdsSqlResource.SQL) {
-        response.PhysicalResourceId = resourceId;
-    }
-    return response;
-};
-// Custom error filter, mainly to retry role creation.
-// Frequently see "tuple concurrently updated", and adding
-// dependencies is very hard to make work.
-const errorFilter = (error, nextAttemptNumber) => {
-    // Retry only if the error message contains "tuple concurrently"
-    // This will cover concurrent updates and deletes
-    const willRetry = error.message.includes("tuple concurrently");
-    log("Encountered an error on attempt %d/%d retry=%s error=[%o]", nextAttemptNumber - 1, maxAttempts, willRetry, error);
-    return willRetry;
-};
-/**
- * Parse password field from secret. Returns void on error.
- */
-const getPassword = async (arn) => {
-    const secrets_client = new client_secrets_manager_1.SecretsManagerClient({});
-    const command = new client_secrets_manager_1.GetSecretValueCommand({
-        SecretId: arn,
-    });
-    const secret = await secrets_client.send(command);
-    if (secret.SecretString) {
-        const json = JSON.parse(secret.SecretString);
-        return json.password;
-    }
-};
-//# sourceMappingURL=data:application/json;base64,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