cloudstructs 0.6.31 → 0.6.33

package/.gitattributes

@@ -11,6 +11,7 @@
 /.gitignore linguist-generated
 /.mergify.yml linguist-generated
 /.npmignore linguist-generated
+/.npmrc linguist-generated
 /.projen/** linguist-generated
 /.projen/deps.json linguist-generated
 /.projen/files.json linguist-generated

package/.jsii

@@ -3162,6 +3162,344 @@
       ],
       "symbolId": "src/codecommit-mirror/index:CodeCommitMirrorSourceRepository"
     },
+    "cloudstructs.DmarcAlignment": {
+      "assembly": "cloudstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "The DMARC alignment mode."
+      },
+      "fqn": "cloudstructs.DmarcAlignment",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/dmarc/index.ts",
+        "line": 29
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Relaxed alignment mode."
+          },
+          "name": "RELAXED"
+        },
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Strict alignment mode."
+          },
+          "name": "STRICT"
+        }
+      ],
+      "name": "DmarcAlignment",
+      "symbolId": "src/dmarc/index:DmarcAlignment"
+    },
+    "cloudstructs.DmarcPolicy": {
+      "assembly": "cloudstructs",
+      "docs": {
+        "stability": "stable",
+        "summary": "The DMARC policy to apply to messages that fail DMARC compliance."
+      },
+      "fqn": "cloudstructs.DmarcPolicy",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "src/dmarc/index.ts",
+        "line": 11
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "stable",
+            "summary": "Do not apply any special handling to messages that fail DMARC compliance."
+          },
+          "name": "NONE"
+        },
+        {
+          "docs": {
+            "remarks": "(usually by sending them to spam)",
+            "stability": "stable",
+            "summary": "Quarantine messages that fail DMARC compliance."
+          },
+          "name": "QUARANTINE"
+        },
+        {
+          "docs": {
+            "remarks": "(usually by rejecting them outright)",
+            "stability": "stable",
+            "summary": "Reject messages that fail DMARC compliance."
+          },
+          "name": "REJECT"
+        }
+      ],
+      "name": "DmarcPolicy",
+      "symbolId": "src/dmarc/index:DmarcPolicy"
+    },
+    "cloudstructs.DmarcReporter": {
+      "assembly": "cloudstructs",
+      "base": "constructs.Construct",
+      "docs": {
+        "stability": "stable",
+        "summary": "Creates a DMARC record in Route 53 and invokes a Lambda function to process incoming reports."
+      },
+      "fqn": "cloudstructs.DmarcReporter",
+      "initializer": {
+        "docs": {
+          "stability": "stable"
+        },
+        "locationInModule": {
+          "filename": "src/dmarc/index.ts",
+          "line": 129
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "cloudstructs.DmarcReporterProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/dmarc/index.ts",
+        "line": 128
+      },
+      "name": "DmarcReporter",
+      "symbolId": "src/dmarc/index:DmarcReporter"
+    },
+    "cloudstructs.DmarcReporterProps": {
+      "assembly": "cloudstructs",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Properties for a DmarcReporter."
+      },
+      "fqn": "cloudstructs.DmarcReporterProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/dmarc/index.ts",
+        "line": 43
+      },
+      "name": "DmarcReporterProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "This can be one of the following values:\n- none: Do not apply any special handling to messages that fail DMARC compliance.\n- quarantine: Quarantine messages that fail DMARC compliance.\n- reject: Reject messages that fail DMARC compliance.",
+            "stability": "stable",
+            "summary": "The DMARC policy to apply to messages that fail DMARC compliance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 67
+          },
+          "name": "dmarcPolicy",
+          "type": {
+            "fqn": "cloudstructs.DmarcPolicy"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "The Lambda\nfunction will be invoked with a SESMessage as event.",
+            "stability": "stable",
+            "summary": "A Lambda function to invoke after the message is saved to S3."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 110
+          },
+          "name": "function",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_lambda.IFunction"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The Route 53 hosted zone to create the DMARC record in."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 47
+          },
+          "name": "hostedZone",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_route53.IHostedZone"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "The SES receipt rule set where a receipt rule will be added."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 122
+          },
+          "name": "receiptRuleSet",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ses.IReceiptRuleSet"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "stable",
+            "summary": "Additional email addresses to send DMARC reports to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 58
+          },
+          "name": "additionalEmailAddresses",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- The new rule is inserted at the beginning of the rule list.",
+            "stability": "stable",
+            "summary": "An existing rule after which the new rule will be placed in the rule set."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 117
+          },
+          "name": "afterRule",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ses.IReceiptRule"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "relaxed",
+            "remarks": "This can be one of the following values:\n- relaxed: Use relaxed alignment mode.\n- strict: Use strict alignment mode.",
+            "stability": "stable",
+            "summary": "The alignment mode to use for DKIM signatures."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 94
+          },
+          "name": "dmarcDkimAlignment",
+          "optional": true,
+          "type": {
+            "fqn": "cloudstructs.DmarcAlignment"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "100",
+            "remarks": "This is a value between 0 and 100.",
+            "stability": "stable",
+            "summary": "The percentage of messages that should be checked for DMARC compliance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 84
+          },
+          "name": "dmarcPercentage",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "relaxed",
+            "remarks": "This can be one of the following values:\n- relaxed: Use relaxed alignment mode.\n- strict: Use strict alignment mode.",
+            "stability": "stable",
+            "summary": "The alignment mode to use for SPF signatures."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 104
+          },
+          "name": "dmarcSpfAlignment",
+          "optional": true,
+          "type": {
+            "fqn": "cloudstructs.DmarcAlignment"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "inherited from dmarcPolicy",
+            "remarks": "This can be one of the following values:\n- none: Do not apply any special handling to messages that fail DMARC compliance.\n- quarantine: Quarantine messages that fail DMARC compliance.\n- reject: Reject messages that fail DMARC compliance.",
+            "stability": "stable",
+            "summary": "The DMARC policy to apply to messages that fail DMARC compliance for subdomains."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 77
+          },
+          "name": "dmarcSubdomainPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "cloudstructs.DmarcPolicy"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "$": "{hostedZone.zoneName}"
+            },
+            "default": "dmarc-reports",
+            "remarks": "This email address must be verified in SES.",
+            "stability": "stable",
+            "summary": "The email address to send DMARC reports to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/dmarc/index.ts",
+            "line": 53
+          },
+          "name": "emailAddress",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/dmarc/index:DmarcReporterProps"
+    },
     "cloudstructs.EcsServiceRoller": {
       "assembly": "cloudstructs",
       "base": "constructs.Construct",
@@ -6453,6 +6791,6 @@
       "symbolId": "src/url-shortener/index:UrlShortenerProps"
     }
   },
-  "version": "0.6.31",
-  "fingerprint": "AvDkUQ+EWrnpcR36o5OfisS7KU7+3O62yTRCSMjc/5E="
+  "version": "0.6.33",
+  "fingerprint": "jgcSOPfKApzH8Q0nzPfP2BNQWF+sX9fiRglB5Wta0CY="
 }

package/API.md

@@ -6,6 +6,7 @@ Name|Description
 ----|-----------
 [CodeCommitMirror](#cloudstructs-codecommitmirror)|Mirror a repository to AWS CodeCommit on schedule.
 [CodeCommitMirrorSourceRepository](#cloudstructs-codecommitmirrorsourcerepository)|A source repository for AWS CodeCommit mirroring.
+[DmarcReporter](#cloudstructs-dmarcreporter)|Creates a DMARC record in Route 53 and invokes a Lambda function to process incoming reports.
 [EcsServiceRoller](#cloudstructs-ecsserviceroller)|Roll your ECS service tasks on schedule or with a rule.
 [EmailReceiver](#cloudstructs-emailreceiver)|Receive emails through SES, save them to S3 and invokes a Lambda function.
 [RollTrigger](#cloudstructs-rolltrigger)|The rule or schedule that should trigger a roll.
@@ -28,6 +29,7 @@ Name|Description
 Name|Description
 ----|-----------
 [CodeCommitMirrorProps](#cloudstructs-codecommitmirrorprops)|Properties for a CodeCommitMirror.
+[DmarcReporterProps](#cloudstructs-dmarcreporterprops)|Properties for a DmarcReporter.
 [EcsServiceRollerProps](#cloudstructs-ecsservicerollerprops)|Properties for a EcsServiceRoller.
 [EmailReceiverProps](#cloudstructs-emailreceiverprops)|Properties for an EmailReceiver.
 [SamlIdentityProviderProps](#cloudstructs-samlidentityproviderprops)|Properties for a SamlProvider.
@@ -62,6 +64,8 @@ Name|Description
 
 Name|Description
 ----|-----------
+[DmarcAlignment](#cloudstructs-dmarcalignment)|The DMARC alignment mode.
+[DmarcPolicy](#cloudstructs-dmarcpolicy)|The DMARC policy to apply to messages that fail DMARC compliance.
 [SlackAppManifestShortcutType](#cloudstructs-slackappmanifestshortcuttype)|Type of shortcuts.
 [SslServerTestGrade](#cloudstructs-sslservertestgrade)|SSL Server test grade.
 
@@ -153,6 +157,40 @@ __Returns__:
 
 
 
+## class DmarcReporter  <a id="cloudstructs-dmarcreporter"></a>
+
+Creates a DMARC record in Route 53 and invokes a Lambda function to process incoming reports.
+
+__Implements__: [IConstruct](#constructs-iconstruct), [IDependable](#constructs-idependable)
+__Extends__: [Construct](#constructs-construct)
+
+### Initializer
+
+
+
+
+```ts
+new DmarcReporter(scope: Construct, id: string, props: DmarcReporterProps)
+```
+
+* **scope** (<code>[Construct](#constructs-construct)</code>)  *No description*
+* **id** (<code>string</code>)  *No description*
+* **props** (<code>[DmarcReporterProps](#cloudstructs-dmarcreporterprops)</code>)  *No description*
+  * **dmarcPolicy** (<code>[DmarcPolicy](#cloudstructs-dmarcpolicy)</code>)  The DMARC policy to apply to messages that fail DMARC compliance. 
+  * **function** (<code>[aws_lambda.IFunction](#aws-cdk-lib-aws-lambda-ifunction)</code>)  A Lambda function to invoke after the message is saved to S3. 
+  * **hostedZone** (<code>[aws_route53.IHostedZone](#aws-cdk-lib-aws-route53-ihostedzone)</code>)  The Route 53 hosted zone to create the DMARC record in. 
+  * **receiptRuleSet** (<code>[aws_ses.IReceiptRuleSet](#aws-cdk-lib-aws-ses-ireceiptruleset)</code>)  The SES receipt rule set where a receipt rule will be added. 
+  * **additionalEmailAddresses** (<code>Array<string></code>)  Additional email addresses to send DMARC reports to. __*Optional*__
+  * **afterRule** (<code>[aws_ses.IReceiptRule](#aws-cdk-lib-aws-ses-ireceiptrule)</code>)  An existing rule after which the new rule will be placed in the rule set. __*Default*__: The new rule is inserted at the beginning of the rule list.
+  * **dmarcDkimAlignment** (<code>[DmarcAlignment](#cloudstructs-dmarcalignment)</code>)  The alignment mode to use for DKIM signatures. __*Default*__: relaxed
+  * **dmarcPercentage** (<code>number</code>)  The percentage of messages that should be checked for DMARC compliance. __*Default*__: 100
+  * **dmarcSpfAlignment** (<code>[DmarcAlignment](#cloudstructs-dmarcalignment)</code>)  The alignment mode to use for SPF signatures. __*Default*__: relaxed
+  * **dmarcSubdomainPolicy** (<code>[DmarcPolicy](#cloudstructs-dmarcpolicy)</code>)  The DMARC policy to apply to messages that fail DMARC compliance for subdomains. __*Default*__: inherited from dmarcPolicy
+  * **emailAddress** (<code>string</code>)  The email address to send DMARC reports to. __*Default*__: dmarc-reports
+
+
+
+
 ## class EcsServiceRoller  <a id="cloudstructs-ecsserviceroller"></a>
 
 Roll your ECS service tasks on schedule or with a rule.
@@ -766,6 +804,29 @@ Name | Type | Description
 
 
 
+## struct DmarcReporterProps  <a id="cloudstructs-dmarcreporterprops"></a>
+
+
+Properties for a DmarcReporter.
+
+
+
+Name | Type | Description 
+-----|------|-------------
+**dmarcPolicy** | <code>[DmarcPolicy](#cloudstructs-dmarcpolicy)</code> | The DMARC policy to apply to messages that fail DMARC compliance.
+**function** | <code>[aws_lambda.IFunction](#aws-cdk-lib-aws-lambda-ifunction)</code> | A Lambda function to invoke after the message is saved to S3.
+**hostedZone** | <code>[aws_route53.IHostedZone](#aws-cdk-lib-aws-route53-ihostedzone)</code> | The Route 53 hosted zone to create the DMARC record in.
+**receiptRuleSet** | <code>[aws_ses.IReceiptRuleSet](#aws-cdk-lib-aws-ses-ireceiptruleset)</code> | The SES receipt rule set where a receipt rule will be added.
+**additionalEmailAddresses**? | <code>Array<string></code> | Additional email addresses to send DMARC reports to.<br/>__*Optional*__
+**afterRule**? | <code>[aws_ses.IReceiptRule](#aws-cdk-lib-aws-ses-ireceiptrule)</code> | An existing rule after which the new rule will be placed in the rule set.<br/>__*Default*__: The new rule is inserted at the beginning of the rule list.
+**dmarcDkimAlignment**? | <code>[DmarcAlignment](#cloudstructs-dmarcalignment)</code> | The alignment mode to use for DKIM signatures.<br/>__*Default*__: relaxed
+**dmarcPercentage**? | <code>number</code> | The percentage of messages that should be checked for DMARC compliance.<br/>__*Default*__: 100
+**dmarcSpfAlignment**? | <code>[DmarcAlignment](#cloudstructs-dmarcalignment)</code> | The alignment mode to use for SPF signatures.<br/>__*Default*__: relaxed
+**dmarcSubdomainPolicy**? | <code>[DmarcPolicy](#cloudstructs-dmarcpolicy)</code> | The DMARC policy to apply to messages that fail DMARC compliance for subdomains.<br/>__*Default*__: inherited from dmarcPolicy
+**emailAddress**? | <code>string</code> | The email address to send DMARC reports to.<br/>__*Default*__: dmarc-reports
+
+
+
 ## struct EcsServiceRollerProps  <a id="cloudstructs-ecsservicerollerprops"></a>
 
 
@@ -1123,6 +1184,27 @@ Name | Type | Description
 
 
 
+## enum DmarcAlignment  <a id="cloudstructs-dmarcalignment"></a>
+
+The DMARC alignment mode.
+
+Name | Description
+-----|-----
+**RELAXED** |Relaxed alignment mode.
+**STRICT** |Strict alignment mode.
+
+
+## enum DmarcPolicy  <a id="cloudstructs-dmarcpolicy"></a>
+
+The DMARC policy to apply to messages that fail DMARC compliance.
+
+Name | Description
+-----|-----
+**NONE** |Do not apply any special handling to messages that fail DMARC compliance.
+**QUARANTINE** |Quarantine messages that fail DMARC compliance.
+**REJECT** |Reject messages that fail DMARC compliance.
+
+
 ## enum SlackAppManifestShortcutType  <a id="cloudstructs-slackappmanifestshortcuttype"></a>
 
 Type of shortcuts.

package/lib/codecommit-mirror/index.js

@@ -41,7 +41,7 @@ class CodeCommitMirrorSourceRepository {
 }
 exports.CodeCommitMirrorSourceRepository = CodeCommitMirrorSourceRepository;
 _a = JSII_RTTI_SYMBOL_1;
-CodeCommitMirrorSourceRepository[_a] = { fqn: "cloudstructs.CodeCommitMirrorSourceRepository", version: "0.6.31" };
+CodeCommitMirrorSourceRepository[_a] = { fqn: "cloudstructs.CodeCommitMirrorSourceRepository", version: "0.6.33" };
 /**
  * Mirror a repository to AWS CodeCommit on schedule
  */
@@ -89,5 +89,5 @@ class CodeCommitMirror extends constructs_1.Construct {
 }
 exports.CodeCommitMirror = CodeCommitMirror;
 _b = JSII_RTTI_SYMBOL_1;
-CodeCommitMirror[_b] = { fqn: "cloudstructs.CodeCommitMirror", version: "0.6.31" };
+CodeCommitMirror[_b] = { fqn: "cloudstructs.CodeCommitMirror", version: "0.6.33" };
 //# sourceMappingURL=data:application/json;base64,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

package/lib/dmarc/index.d.ts

@@ -0,0 +1,115 @@
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import * as route53 from 'aws-cdk-lib/aws-route53';
+import * as ses from 'aws-cdk-lib/aws-ses';
+import { Construct } from 'constructs';
+/**
+ * The DMARC policy to apply to messages that fail DMARC compliance.
+ */
+export declare enum DmarcPolicy {
+    /**
+     * Do not apply any special handling to messages that fail DMARC compliance.
+     */
+    NONE = "none",
+    /**
+     * Quarantine messages that fail DMARC compliance. (usually by sending them to spam)
+     */
+    QUARANTINE = "quarantine",
+    /**
+     * Reject messages that fail DMARC compliance. (usually by rejecting them outright)
+     */
+    REJECT = "reject"
+}
+/**
+ * The DMARC alignment mode.
+ */
+export declare enum DmarcAlignment {
+    /**
+     * Relaxed alignment mode.
+     */
+    RELAXED = "relaxed",
+    /**
+     * Strict alignment mode.
+     */
+    STRICT = "strict"
+}
+/**
+ * Properties for a DmarcReporter
+ */
+export interface DmarcReporterProps {
+    /**
+     * The Route 53 hosted zone to create the DMARC record in.
+     */
+    readonly hostedZone: route53.IHostedZone;
+    /**
+     * The email address to send DMARC reports to.
+     * This email address must be verified in SES.
+     * @default dmarc-reports@${hostedZone.zoneName}
+     */
+    readonly emailAddress?: string;
+    /**
+     * Additional email addresses to send DMARC reports to.
+     */
+    readonly additionalEmailAddresses?: string[];
+    /**
+     * The DMARC policy to apply to messages that fail DMARC compliance.
+     * This can be one of the following values:
+     * - none: Do not apply any special handling to messages that fail DMARC compliance.
+     * - quarantine: Quarantine messages that fail DMARC compliance.
+     * - reject: Reject messages that fail DMARC compliance.
+     */
+    readonly dmarcPolicy: DmarcPolicy;
+    /**
+     * The DMARC policy to apply to messages that fail DMARC compliance for subdomains.
+     * This can be one of the following values:
+     * - none: Do not apply any special handling to messages that fail DMARC compliance.
+     * - quarantine: Quarantine messages that fail DMARC compliance.
+     * - reject: Reject messages that fail DMARC compliance.
+     * @default inherited from dmarcPolicy
+     */
+    readonly dmarcSubdomainPolicy?: DmarcPolicy;
+    /**
+     * The percentage of messages that should be checked for DMARC compliance.
+     * This is a value between 0 and 100.
+     * @default 100
+     */
+    readonly dmarcPercentage?: number;
+    /**
+     * The alignment mode to use for DKIM signatures.
+     * This can be one of the following values:
+     * - relaxed: Use relaxed alignment mode.
+     * - strict: Use strict alignment mode.
+     *
+     * @default relaxed
+     */
+    readonly dmarcDkimAlignment?: DmarcAlignment;
+    /**
+     * The alignment mode to use for SPF signatures.
+     * This can be one of the following values:
+     * - relaxed: Use relaxed alignment mode.
+     * - strict: Use strict alignment mode.
+     *
+     * @default relaxed
+     */
+    readonly dmarcSpfAlignment?: DmarcAlignment;
+    /**
+     * A Lambda function to invoke after the message is saved to S3. The Lambda
+     * function will be invoked with a SESMessage as event.
+     */
+    readonly function: lambda.IFunction;
+    /**
+     * An existing rule after which the new rule will be placed in the rule set.
+     *
+     * @default - The new rule is inserted at the beginning of the rule list.
+     */
+    readonly afterRule?: ses.IReceiptRule;
+    /**
+     * The SES receipt rule set where a receipt rule will be added
+     */
+    readonly receiptRuleSet: ses.IReceiptRuleSet;
+}
+/**
+ * Creates a DMARC record in Route 53 and invokes a Lambda function to process incoming reports.
+ */
+export declare class DmarcReporter extends Construct {
+    constructor(scope: Construct, id: string, props: DmarcReporterProps);
+}