cdk-rds-sql 7.0.2 → 7.1.0

package/lambda/handler.ts

@@ -24,6 +24,7 @@ import {
   EngineRoleProperties,
   EngineSchemaProperties,
   EngineSqlProperties,
+  EngineIamGrantProperties,
 } from "./types"
 import { RdsSqlResource } from "../src/enum"
 
@@ -70,6 +71,13 @@ function toSqlEngineProps(props: ResourceProperties): EngineSqlProperties {
   return props
 }
 
+function toIamGrantEngineProps(props: ResourceProperties): EngineIamGrantProperties {
+  if (props.Resource !== RdsSqlResource.IAM_GRANT) {
+    throw new Error(`Expected IAM_GRANT resource, got ${props.Resource}`)
+  }
+  return props
+}
+
 export const handler = async (
   event:
     | CloudFormationCustomResourceCreateEvent<ResourceProperties>
@@ -86,37 +94,58 @@ export const handler = async (
   if (!Object.values(RdsSqlResource).includes(resource)) {
     throw `Resource type '${resource}' not recognised.`
   }
-  if (!event.ResourceProperties.SecretArn) {
-    throw "SecretArn is a required property"
-  }
+  // Check if we're dealing with DSQL based on environment variables
+  const dsqlEndpoint = process.env.DSQL_ENDPOINT
+  const dsqlPort = process.env.DSQL_PORT
 
-  const command = new GetSecretValueCommand({
-    SecretId: event.ResourceProperties.SecretArn,
-  })
+  let engine: string
+  let secretValues: any = {}
 
-  log(`Fetching secret ${event.ResourceProperties.SecretArn}`)
-  const secret: GetSecretValueCommandOutput = await backOff(
-    async () => {
-      try {
-        const result = await secrets_client.send(command)
-        return result
-      } catch (e) {
-        log("Error fetching secret %o", e)
-        throw e
+  if (dsqlEndpoint) {
+    // DSQL configuration - use environment variables
+    log(`Using DSQL endpoint: ${dsqlEndpoint}`)
+    engine = "dsql"
+    secretValues = {
+      host: dsqlEndpoint,
+      port: parseInt(dsqlPort || "5432", 10),
+      username: "admin", // DSQL always uses admin user
+      engine: "dsql",
+    }
+  } else {
+    // Traditional RDS configuration - use secrets
+    if (!event.ResourceProperties.SecretArn) {
+      throw "SecretArn is a required property"
+    }
+
+    const command = new GetSecretValueCommand({
+      SecretId: event.ResourceProperties.SecretArn,
+    })
+
+    log(`Fetching secret ${event.ResourceProperties.SecretArn}`)
+    const secret: GetSecretValueCommandOutput = await backOff(
+      async () => {
+        try {
+          const result = await secrets_client.send(command)
+          return result
+        } catch (e) {
+          log("Error fetching secret %o", e)
+          throw e
+        }
+      },
+      {
+        numOfAttempts: 10,
+        startingDelay: 500,
       }
-    },
-    {
-      numOfAttempts: 10,
-      startingDelay: 500,
+    )
+    if (!secret.SecretString) {
+      throw `No secret string in ${event.ResourceProperties.SecretArn}`
     }
-  )
-  if (!secret.SecretString) {
-    throw `No secret string in ${event.ResourceProperties.SecretArn}`
+    secretValues = JSON.parse(secret.SecretString)
+
+    // Determine the database engine type
+    engine = secretValues.engine || "postgresql" // Default to postgresql if not specified
   }
-  const secretValues = JSON.parse(secret.SecretString)
 
-  // Determine the database engine type
-  const engine = secretValues.engine || "postgresql" // Default to postgresql if not specified
   const dbEngine = EngineFactory.createEngine(engine)
 
   let sql: string | string[] | undefined
@@ -144,6 +173,12 @@ export const handler = async (
         case RdsSqlResource.SQL:
           sql = dbEngine.createSql(resourceId, toSqlEngineProps(event.ResourceProperties))
           break
+        case RdsSqlResource.IAM_GRANT:
+          sql = dbEngine.createIamGrant(
+            resourceId,
+            toIamGrantEngineProps(event.ResourceProperties)
+          )
+          break
         case RdsSqlResource.PARAMETER_PASSWORD:
           await handleParameterPassword(event.ResourceProperties)
           break
@@ -185,6 +220,16 @@ export const handler = async (
             toSqlEngineProps(event.ResourceProperties)
           )
           break
+        case RdsSqlResource.IAM_GRANT:
+          const iamUpdateEvent =
+            event as CloudFormationCustomResourceUpdateEvent<ResourceProperties>
+          sql = dbEngine.updateIamGrant(
+            resourceId,
+            oldResourceId,
+            toIamGrantEngineProps(event.ResourceProperties),
+            toIamGrantEngineProps(iamUpdateEvent.OldResourceProperties)
+          )
+          break
         case RdsSqlResource.PARAMETER_PASSWORD:
           await handleParameterPassword(event.ResourceProperties)
           sql = undefined // No SQL to execute
@@ -212,6 +257,12 @@ export const handler = async (
         case RdsSqlResource.SQL:
           sql = dbEngine.deleteSql(resourceId, toSqlEngineProps(event.ResourceProperties))
           break
+        case RdsSqlResource.IAM_GRANT:
+          sql = dbEngine.deleteIamGrant(
+            resourceId,
+            toIamGrantEngineProps(event.ResourceProperties)
+          )
+          break
         case RdsSqlResource.PARAMETER_PASSWORD:
           await deleteParameterPassword(event.ResourceProperties)
           break
@@ -222,7 +273,10 @@ export const handler = async (
 
   if (sql) {
     let database: string
-    if (resource === RdsSqlResource.ROLE) {
+    if (engine === "dsql") {
+      // DSQL always uses 'postgres' database
+      database = "postgres"
+    } else if (resource === RdsSqlResource.ROLE) {
       database = secretValues.dbname
     } else {
       database = databaseName ?? secretValues.dbname // connect to given database if possible, else to database mentioned in secret
@@ -232,7 +286,7 @@ export const handler = async (
       host: secretValues.host,
       port: secretValues.port,
       user: secretValues.username,
-      password: secretValues.password,
+      password: secretValues.password || "", // DSQL will generate token in engine
       database: database,
     }
 

package/lambda/types.ts

@@ -24,6 +24,10 @@ export interface EngineSqlProperties {
   readonly Rollback?: string
 }
 
+export interface EngineIamGrantProperties {
+  readonly ResourceArn?: string
+}
+
 // Common CloudFormation properties shared by all resources
 export interface CommonProperties
   extends CloudFormationCustomResourceResourcePropertiesCommon {
@@ -52,6 +56,11 @@ export interface SqlProperties extends CommonProperties, EngineSqlProperties {
   readonly Resource: RdsSqlResource.SQL
 }
 
+export interface IamGrantProperties extends CommonProperties, EngineIamGrantProperties {
+  readonly Resource: RdsSqlResource.IAM_GRANT
+  readonly ResourceArn: string
+}
+
 // Parameter password specific properties
 export interface ParameterPasswordProperties extends CommonProperties {
   readonly Resource: RdsSqlResource.PARAMETER_PASSWORD
@@ -65,6 +74,7 @@ export type ResourceProperties =
   | RoleProperties
   | SchemaProperties
   | SqlProperties
+  | IamGrantProperties
   | ParameterPasswordProperties
 
 // Custom resource response interface

package/lib/database.js

@@ -4,8 +4,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Database = void 0;
 const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 const aws_cdk_lib_1 = require("aws-cdk-lib");
+const dsql = require("aws-cdk-lib/aws-dsql");
 const constructs_1 = require("constructs");
 const enum_1 = require("./enum");
+/**
+ * Helper function to determine if a cluster is a DSQL cluster
+ */
+function isDsqlCluster(cluster) {
+    return cluster instanceof dsql.CfnCluster;
+}
 class ImportedDatabase extends constructs_1.Construct {
     constructor(scope, id, props) {
         super(scope, id);
@@ -22,12 +29,16 @@ class Database extends aws_cdk_lib_1.CustomResource {
         });
     }
     constructor(scope, id, props) {
+        // Check if using DSQL provider and forbid database creation
+        if (isDsqlCluster(props.provider.cluster)) {
+            throw new Error("Database creation is not supported with DSQL. DSQL always uses 'postgres' database.");
+        }
         super(scope, id, {
             serviceToken: props.provider.serviceToken,
             properties: {
                 Resource: enum_1.RdsSqlResource.DATABASE,
                 ResourceId: props.databaseName,
-                SecretArn: props.provider.secret.secretArn,
+                ...(props.provider.secret ? { SecretArn: props.provider.secret.secretArn } : {}),
                 Owner: props.owner?.roleName,
             },
         });
@@ -40,5 +51,5 @@ class Database extends aws_cdk_lib_1.CustomResource {
 }
 exports.Database = Database;
 _a = JSII_RTTI_SYMBOL_1;
-Database[_a] = { fqn: "cdk-rds-sql.Database", version: "7.0.2" };
-//# sourceMappingURL=data:application/json;base64,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
+Database[_a] = { fqn: "cdk-rds-sql.Database", version: "7.1.0" };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGF0YWJhc2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvZGF0YWJhc2UudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFBQSw2Q0FBNEM7QUFDNUMsNkNBQTRDO0FBRTVDLDJDQUFzQztBQUN0QyxpQ0FBdUM7QUFJdkM7O0dBRUc7QUFDSCxTQUFTLGFBQWEsQ0FDcEIsT0FBK0Q7SUFFL0QsT0FBTyxPQUFPLFlBQVksSUFBSSxDQUFDLFVBQVUsQ0FBQTtBQUMzQyxDQUFDO0FBeUJELE1BQU0sZ0JBQWlCLFNBQVEsc0JBQVM7SUFHdEMsWUFBWSxLQUFnQixFQUFFLEVBQVUsRUFBRSxLQUF5QjtRQUNqRSxLQUFLLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFBO1FBQ2hCLElBQUksQ0FBQyxZQUFZLEdBQUcsS0FBSyxDQUFDLFlBQVksQ0FBQTtJQUN4QyxDQUFDO0NBQ0Y7QUFFRCxNQUFhLFFBQVMsU0FBUSw0QkFBYztJQUMxQzs7T0FFRztJQUNILE1BQU0sQ0FBQyxnQkFBZ0IsQ0FBQyxLQUFnQixFQUFFLEVBQVUsRUFBRSxZQUFvQjtRQUN4RSxPQUFPLElBQUksZ0JBQWdCLENBQUMsS0FBSyxFQUFFLEVBQUUsRUFBRTtZQUNyQyxZQUFZLEVBQUUsWUFBWTtTQUMzQixDQUFDLENBQUE7SUFDSixDQUFDO0lBSUQsWUFBWSxLQUFnQixFQUFFLEVBQVUsRUFBRSxLQUFvQjtRQUM1RCw0REFBNEQ7UUFDNUQsSUFBSSxhQUFhLENBQUMsS0FBSyxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsRUFBRSxDQUFDO1lBQzFDLE1BQU0sSUFBSSxLQUFLLENBQ2IscUZBQXFGLENBQ3RGLENBQUE7UUFDSCxDQUFDO1FBRUQsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLEVBQUU7WUFDZixZQUFZLEVBQUUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxZQUFZO1lBQ3pDLFVBQVUsRUFBRTtnQkFDVixRQUFRLEVBQUUscUJBQWMsQ0FBQyxRQUFRO2dCQUNqQyxVQUFVLEVBQUUsS0FBSyxDQUFDLFlBQVk7Z0JBQzlCLEdBQUcsQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsRUFBRSxTQUFTLEVBQUUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsU0FBUyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztnQkFDaEYsS0FBSyxFQUFFLEtBQUssQ0FBQyxLQUFLLEVBQUUsUUFBUTthQUM3QjtTQUNGLENBQUMsQ0FBQTtRQUNGLElBQUksQ0FBQyxJQUFJLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsQ0FBQTtRQUN2QyxJQUFJLENBQUMsWUFBWSxHQUFHLEtBQUssQ0FBQyxZQUFZLENBQUE7UUFDdEMsSUFBSSxLQUFLLENBQUMsS0FBSyxFQUFFLENBQUM7WUFDaEIsSUFBSSxDQUFDLElBQUksQ0FBQyxhQUFhLENBQUMsS0FBSyxDQUFDLEtBQUssQ0FBQyxDQUFBO1FBQ3RDLENBQUM7SUFDSCxDQUFDOztBQWxDSCw0QkFtQ0MiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgeyBDdXN0b21SZXNvdXJjZSB9IGZyb20gXCJhd3MtY2RrLWxpYlwiXG5pbXBvcnQgKiBhcyBkc3FsIGZyb20gXCJhd3MtY2RrLWxpYi9hd3MtZHNxbFwiXG5pbXBvcnQgeyBJRGF0YWJhc2VDbHVzdGVyLCBJRGF0YWJhc2VJbnN0YW5jZSB9IGZyb20gXCJhd3MtY2RrLWxpYi9hd3MtcmRzXCJcbmltcG9ydCB7IENvbnN0cnVjdCB9IGZyb20gXCJjb25zdHJ1Y3RzXCJcbmltcG9ydCB7IFJkc1NxbFJlc291cmNlIH0gZnJvbSBcIi4vZW51bVwiXG5pbXBvcnQgeyBQcm92aWRlciB9IGZyb20gXCIuL3Byb3ZpZGVyXCJcbmltcG9ydCB7IFJvbGUgfSBmcm9tIFwiLi9yb2xlXCJcblxuLyoqXG4gKiBIZWxwZXIgZnVuY3Rpb24gdG8gZGV0ZXJtaW5lIGlmIGEgY2x1c3RlciBpcyBhIERTUUwgY2x1c3RlclxuICovXG5mdW5jdGlvbiBpc0RzcWxDbHVzdGVyKFxuICBjbHVzdGVyOiBJRGF0YWJhc2VDbHVzdGVyIHwgSURhdGFiYXNlSW5zdGFuY2UgfCBkc3FsLkNmbkNsdXN0ZXJcbik6IGNsdXN0ZXIgaXMgZHNxbC5DZm5DbHVzdGVyIHtcbiAgcmV0dXJuIGNsdXN0ZXIgaW5zdGFuY2VvZiBkc3FsLkNmbkNsdXN0ZXJcbn1cblxuaW50ZXJmYWNlIERhdGFiYXNlQXR0cmlidXRlcyB7XG4gIC8qKlxuICAgKiBOYW1lIG9mIGRhdGFiYXNlIHRvIGNyZWF0ZS5cbiAgICovXG4gIHJlYWRvbmx5IGRhdGFiYXNlTmFtZTogc3RyaW5nXG5cbiAgLyoqXG4gICAqIE9wdGlvbmFsIGRhdGFiYXNlIG93bmVyLlxuICAgKi9cbiAgcmVhZG9ubHkgb3duZXI/OiBSb2xlXG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgRGF0YWJhc2VQcm9wcyBleHRlbmRzIERhdGFiYXNlQXR0cmlidXRlcyB7XG4gIC8qKlxuICAgKiBQcm92aWRlci5cbiAgICovXG4gIHJlYWRvbmx5IHByb3ZpZGVyOiBQcm92aWRlclxufVxuXG5leHBvcnQgaW50ZXJmYWNlIElEYXRhYmFzZSB7XG4gIHJlYWRvbmx5IGRhdGFiYXNlTmFtZTogc3RyaW5nXG59XG5cbmNsYXNzIEltcG9ydGVkRGF0YWJhc2UgZXh0ZW5kcyBDb25zdHJ1Y3QgaW1wbGVtZW50cyBJRGF0YWJhc2Uge1xuICBwdWJsaWMgcmVhZG9ubHkgZGF0YWJhc2VOYW1lOiBzdHJpbmdcblxuICBjb25zdHJ1Y3RvcihzY29wZTogQ29uc3RydWN0LCBpZDogc3RyaW5nLCBwcm9wczogRGF0YWJhc2VBdHRyaWJ1dGVzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkKVxuICAgIHRoaXMuZGF0YWJhc2VOYW1lID0gcHJvcHMuZGF0YWJhc2VOYW1lXG4gIH1cbn1cblxuZXhwb3J0IGNsYXNzIERhdGFiYXNlIGV4dGVuZHMgQ3VzdG9tUmVzb3VyY2UgaW1wbGVtZW50cyBJRGF0YWJhc2Uge1xuICAvKipcbiAgICogUmV0dXJuIGEgRGF0YWJhc2UgYmFzZWQgdXBvbiBuYW1lIG9ubHkuIFVzZSBmb3IgaW1wb3J0aW5nIGV4aXN0aW5nIGRhdGFiYXNlcy5cbiAgICovXG4gIHN0YXRpYyBmcm9tRGF0YWJhc2VOYW1lKHNjb3BlOiBDb25zdHJ1Y3QsIGlkOiBzdHJpbmcsIGRhdGFiYXNlTmFtZTogc3RyaW5nKTogSURhdGFiYXNlIHtcbiAgICByZXR1cm4gbmV3IEltcG9ydGVkRGF0YWJhc2Uoc2NvcGUsIGlkLCB7XG4gICAgICBkYXRhYmFzZU5hbWU6IGRhdGFiYXNlTmFtZSxcbiAgICB9KVxuICB9XG5cbiAgcHVibGljIHJlYWRvbmx5IGRhdGFiYXNlTmFtZTogc3RyaW5nXG5cbiAgY29uc3RydWN0b3Ioc2NvcGU6IENvbnN0cnVjdCwgaWQ6IHN0cmluZywgcHJvcHM6IERhdGFiYXNlUHJvcHMpIHtcbiAgICAvLyBDaGVjayBpZiB1c2luZyBEU1FMIHByb3ZpZGVyIGFuZCBmb3JiaWQgZGF0YWJhc2UgY3JlYXRpb25cbiAgICBpZiAoaXNEc3FsQ2x1c3Rlcihwcm9wcy5wcm92aWRlci5jbHVzdGVyKSkge1xuICAgICAgdGhyb3cgbmV3IEVycm9yKFxuICAgICAgICBcIkRhdGFiYXNlIGNyZWF0aW9uIGlzIG5vdCBzdXBwb3J0ZWQgd2l0aCBEU1FMLiBEU1FMIGFsd2F5cyB1c2VzICdwb3N0Z3JlcycgZGF0YWJhc2UuXCJcbiAgICAgIClcbiAgICB9XG5cbiAgICBzdXBlcihzY29wZSwgaWQsIHtcbiAgICAgIHNlcnZpY2VUb2tlbjogcHJvcHMucHJvdmlkZXIuc2VydmljZVRva2VuLFxuICAgICAgcHJvcGVydGllczoge1xuICAgICAgICBSZXNvdXJjZTogUmRzU3FsUmVzb3VyY2UuREFUQUJBU0UsXG4gICAgICAgIFJlc291cmNlSWQ6IHByb3BzLmRhdGFiYXNlTmFtZSxcbiAgICAgICAgLi4uKHByb3BzLnByb3ZpZGVyLnNlY3JldCA/IHsgU2VjcmV0QXJuOiBwcm9wcy5wcm92aWRlci5zZWNyZXQuc2VjcmV0QXJuIH0gOiB7fSksXG4gICAgICAgIE93bmVyOiBwcm9wcy5vd25lcj8ucm9sZU5hbWUsXG4gICAgICB9LFxuICAgIH0pXG4gICAgdGhpcy5ub2RlLmFkZERlcGVuZGVuY3kocHJvcHMucHJvdmlkZXIpXG4gICAgdGhpcy5kYXRhYmFzZU5hbWUgPSBwcm9wcy5kYXRhYmFzZU5hbWVcbiAgICBpZiAocHJvcHMub3duZXIpIHtcbiAgICAgIHRoaXMubm9kZS5hZGREZXBlbmRlbmN5KHByb3BzLm93bmVyKVxuICAgIH1cbiAgfVxufVxuIl19

package/lib/enum.d.ts

@@ -3,5 +3,6 @@ export declare enum RdsSqlResource {
     ROLE = "role",
     SQL = "sql",
     DATABASE = "database",
-    PARAMETER_PASSWORD = "parameter_password"
+    PARAMETER_PASSWORD = "parameter_password",
+    IAM_GRANT = "iam_grant"
 }

package/lib/enum.js

@@ -8,5 +8,6 @@ var RdsSqlResource;
     RdsSqlResource["SQL"] = "sql";
     RdsSqlResource["DATABASE"] = "database";
     RdsSqlResource["PARAMETER_PASSWORD"] = "parameter_password";
+    RdsSqlResource["IAM_GRANT"] = "iam_grant";
 })(RdsSqlResource || (exports.RdsSqlResource = RdsSqlResource = {}));
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW51bS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3NyYy9lbnVtLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLElBQVksY0FNWDtBQU5ELFdBQVksY0FBYztJQUN4QixtQ0FBaUIsQ0FBQTtJQUNqQiwrQkFBYSxDQUFBO0lBQ2IsNkJBQVcsQ0FBQTtJQUNYLHVDQUFxQixDQUFBO0lBQ3JCLDJEQUF5QyxDQUFBO0FBQzNDLENBQUMsRUFOVyxjQUFjLDhCQUFkLGNBQWMsUUFNekIiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgZW51bSBSZHNTcWxSZXNvdXJjZSB7XG4gIFNDSEVNQSA9IFwic2NoZW1hXCIsXG4gIFJPTEUgPSBcInJvbGVcIixcbiAgU1FMID0gXCJzcWxcIixcbiAgREFUQUJBU0UgPSBcImRhdGFiYXNlXCIsXG4gIFBBUkFNRVRFUl9QQVNTV09SRCA9IFwicGFyYW1ldGVyX3Bhc3N3b3JkXCIsXG59XG4iXX0=
+//# sourceMappingURL=data:application/json;base64,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