infra-foundry 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.3.0] - 2025-01-29
+
+### Added
+
+- Initial public release
+- AWS Amplify components for static site hosting
+- AWS S3 components with CloudFront CDN integration
+- AWS ECS Fargate components for container orchestration
+- AWS ECR components for container registry
+- AWS Route53 components for DNS management
+- AWS SES components for email services
+- AWS VPC components for networking
+- AWS Secrets Manager components
+- Cloudflare components for DNS and CDN
+- Docker image building components
+- Utility functions for environment management and tagging
+
+[Unreleased]: https://github.com/0xhssn/infra-foundry/compare/v0.3.0...HEAD
+[0.3.0]: https://github.com/0xhssn/infra-foundry/releases/tag/v0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Hamza Hassan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,207 @@
+# 🏗️ Infra Foundry
+
+A platform-agnostic cloud infrastructure components library for modern applications. Built with TypeScript and Pulumi, Infra Foundry provides reusable, composable infrastructure components that work across AWS, Cloudflare, and other cloud providers.
+
+## 📊 Version
+
+Current version: **0.3.0**
+
+## ✨ Features
+
+- **🔧 Reusable Components** - Pre-built factories for common cloud services
+- **🌍 Platform Agnostic** - Works with AWS, Cloudflare, and other providers
+- **📦 TypeScript First** - Full type safety and IntelliSense support
+- **⚡ Pulumi Powered** - Leverages Pulumi's infrastructure as code capabilities
+- **🎯 Production Ready** - Battle-tested components used in production environments
+
+## 🚀 Quick Start
+
+- Create a new Pulumi project
+  ```bash
+  mkdir my-infrastructure && cd my-infrastructure
+  pulumi new typescript
+  ```
+- In your infra project repo
+
+  ```bash
+  # Install directly from GitHub
+  yarn add git+ssh://git@github.com/0xhssn/infra-foundry.git
+
+  # or add as dependency in package.json
+  "dependencies": {
+    ...
+    "infra-foundry": "git+ssh://git@github.com/0xhssn/infra-foundry.git",
+    ...
+  }
+  # and then install
+  yarn install
+  ```
+
+- Create a Pulumi Organisation via Pulumi console
+- Create and select a stack in your organization
+
+  ```bash
+  # stack-name refers to the environment to be deployed ex. `prod`, `dev`
+  pulumi stack init <your-org>/<stack-name>
+  ```
+
+- Preview your infrastructure changes
+
+  ```bash
+  pulumi preview --stack <your-org>/<stack-name>
+  ```
+
+- Deploy your infrastructure
+  ```bash
+  pulumi up --stack <your-org>/<stack-name>
+  ```
+
+## 📦 Available Components
+
+- **Amplify** - Static site hosting and CI/CD
+- **S3** - Object storage buckets and configurations
+- **Route53** - DNS hosting and record management
+- **Cloudflare** - CDN and DNS records
+- **Amazon SES** - Automated Emails
+
+## 🏗️ Project Structure
+
+```
+src/
+├── amplify/           # AWS Amplify components
+│   ├── component.ts
+│   ├── types.ts
+│   ├── iam.ts
+│   └── index.ts
+├── route53/           # AWS Route53 components
+├── s3/                # AWS S3 components
+├── cloudflare/        # Cloudflare components
+└── utils/             # Shared utilities
+    ├── addEnvSuffix.ts
+    ├── domain.ts
+    └── tags.ts
+```
+
+## 🛠️ Development
+
+### Prerequisites
+
+- Node.js >= 20.0.0
+- TypeScript >= 5.0.0
+- Pulumi CLI
+
+### Setup
+
+```bash
+# Clone the repository
+git clone https://github.com/0xhssn/infra-foundry.git
+cd infra-foundry
+
+# Install dependencies
+yarn install
+
+# Build the project
+yarn build
+```
+
+### Code Quality
+
+```bash
+# Run linting
+yarn lint
+
+# Fix linting issues
+yarn lint:fix
+
+# Format code
+yarn format
+
+# Check formatting
+yarn format:check
+```
+
+## 🔗 Linking your Repository for CI
+
+To set up continuous integration for your infrastructure repository:
+
+### 1. Create a new SSH key pair
+
+```bash
+# Generate a new SSH key pair for CI/CD
+ssh-keygen -t ed25519 -C "your_name@flatout.solutions" -f ~/.ssh/ci_deploy_key
+```
+
+### 2. Add private key to repository secrets
+
+- Go to your repository settings on GitHub
+- Navigate to "Secrets and variables" → "Actions"
+- Add the private key content as a repository secret named `SSH_PRIVATE_KEY`
+- Copy the content of `~/.ssh/ci_deploy_key` (the private key)
+
+### 3. Share public key with contributors
+
+- Copy the content of `~/.ssh/ci_deploy_key.pub` (the public key)
+- Share this public key with contributors of this repository
+
+## 🚀 Release Automation
+
+Infra Foundry uses [semantic-release](https://semantic-release.gitbook.io/) for fully automated version management and package publishing. Versions are determined automatically based on commit messages following [Conventional Commits](https://www.conventionalcommits.org/).
+
+### How It Works
+
+1. **Commit Analysis**: Commits are analyzed to determine the next version bump
+2. **Changelog Generation**: CHANGELOG.md is automatically updated
+3. **NPM Publishing**: Package is published to npm registry
+4. **GitHub Release**: A GitHub release is created with release notes
+
+### Release Channels
+
+| Branch  | Channel     | Example Version |
+| ------- | ----------- | --------------- |
+| `main`  | Stable      | `1.2.3`         |
+| `beta`  | Pre-release | `1.2.3-beta.1`  |
+| `alpha` | Pre-release | `1.2.3-alpha.1` |
+
+### Setting Up NPM_TOKEN
+
+To enable automated npm publishing, add the `NPM_TOKEN` secret to your repository:
+
+1. Go to [npmjs.com](https://www.npmjs.com/) → Access Tokens
+2. Generate New Token → Select "Automation" type
+3. Copy the token
+4. In GitHub: Repository → Settings → Secrets and variables → Actions
+5. Add new secret: Name = `NPM_TOKEN`, Value = your token
+
+### Version Bump Rules
+
+| Commit Type     | Example             | Version Bump  |
+| --------------- | ------------------- | ------------- |
+| Breaking change | `feat(s3)!: ...`    | Major (1.0.0) |
+| Feature         | `feat(ecs): ...`    | Minor (0.1.0) |
+| Fix             | `fix(amplify): ...` | Patch (0.0.1) |
+
+## 📖 Examples
+
+Check out the [examples directory](./examples) for complete infrastructure setups:
+
+- **MFS Infrastructure** - Multi-app Amplify deployment with custom domains
+- **Basic Setup** - Simple single-app deployment
+- **Advanced Configuration** - Complex multi-environment setup
+
+## 🤝 Contributing
+
+We welcome contributions! Please see our [Contributing Guidelines](./CONTRIBUTING.md) for details.
+
+## 📄 License
+
+This project is licensed under the MIT License - see the [LICENSE](./LICENSE) file for details.
+
+## 🔗 Links
+
+- [Documentation](https://github.com/0xhssn/infra-foundry#readme)
+- [Issue Tracker](https://github.com/0xhssn/infra-foundry/issues)
+- [Pulumi Documentation](https://www.pulumi.com/docs/)
+
+---
+
+Built with ❤️ by [Hamza Hassan](https://linkedin.com/in/hhssnn)

package/dist/amplify/component.d.ts

@@ -0,0 +1,11 @@
+import { amplify } from '@pulumi/aws';
+import { ComponentResource, ComponentResourceOptions } from '@pulumi/pulumi';
+import { AmplifyAppConfig } from './types';
+export declare class AmplifyApp extends ComponentResource {
+    readonly app: amplify.App;
+    branch: amplify.Branch;
+    domainAssociation?: amplify.DomainAssociation;
+    constructor({ name, repository, githubAccessToken, appRoot, branchName, domainName, environmentVariables, }: AmplifyAppConfig, opts?: ComponentResourceOptions);
+    private createDomainAssociation;
+}
+//# sourceMappingURL=component.d.ts.map

package/dist/amplify/component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/amplify/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAI5E,OAAO,EAAE,gBAAgB,EAAkC,MAAM,SAAS,CAAA;AAI1E,qBAAa,UAAW,SAAQ,iBAAiB;IAC/C,SAAgB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAA;IACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAA;gBAGlD,EACE,IAAI,EACJ,UAAU,EACV,iBAAiB,EACjB,OAAa,EACb,UAAU,EACV,UAAU,EACV,oBAAoB,GACrB,EAAE,gBAAgB,EACnB,IAAI,CAAC,EAAE,wBAAwB;IAwEjC,OAAO,CAAC,uBAAuB;CAuBhC"}

package/dist/amplify/component.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AmplifyApp = void 0;
+const aws_1 = require("@pulumi/aws");
+const pulumi_1 = require("@pulumi/pulumi");
+const constants_1 = require("./constants");
+const iam_1 = require("./iam");
+const commonTags_1 = require("../utils/commonTags");
+const context_1 = require("../utils/context");
+class AmplifyApp extends pulumi_1.ComponentResource {
+    constructor({ name, repository, githubAccessToken, appRoot = '.', branchName, domainName, environmentVariables, }, opts) {
+        super('infra-foundry:amplify:AmplifyApp', name, {}, opts);
+        const amplifyServiceRole = (0, iam_1.createAmplifyServiceRole)(name, this);
+        this.app = new aws_1.amplify.App(`${name}-app`, {
+            name,
+            repository,
+            iamServiceRoleArn: amplifyServiceRole.arn,
+            accessToken: githubAccessToken,
+            buildSpec: (0, constants_1.createMonorepoBuildSpec)(appRoot),
+            platform: 'WEB_COMPUTE',
+            environmentVariables: {
+                NODE_ENV: context_1.context.environment,
+                AMPLIFY_DIFF_DEPLOY: 'true',
+                AMPLIFY_DIFF_DEPLOY_ROOT: appRoot,
+                AMPLIFY_MONOREPO_APP_ROOT: appRoot,
+                _LIVE_UPDATES: '[{"name":"Amplify CLI","pkg":"@aws-amplify/cli","type":"npm","version":"latest"}]',
+                ...(environmentVariables !== null && environmentVariables !== void 0 ? environmentVariables : {}),
+            },
+            tags: {
+                ...commonTags_1.commonTags,
+                Component: 'Amplify',
+                AppRoot: appRoot,
+            },
+        }, { parent: this, dependsOn: [amplifyServiceRole] });
+        this.branch = new aws_1.amplify.Branch(`${name}-branch`, {
+            appId: this.app.id,
+            branchName,
+            enableAutoBuild: true,
+            framework: 'Next.js - SSR',
+            stage: context_1.context.isProduction ? 'PRODUCTION' : 'DEVELOPMENT',
+            environmentVariables: {
+                NODE_ENV: context_1.context.environment,
+                AMPLIFY_MONOREPO_APP_ROOT: appRoot,
+                AMPLIFY_DIFF_DEPLOY: 'true',
+                AMPLIFY_DIFF_DEPLOY_ROOT: appRoot,
+                ...(environmentVariables !== null && environmentVariables !== void 0 ? environmentVariables : {}),
+            },
+            tags: {
+                ...commonTags_1.commonTags,
+                Component: 'AmplifyBranch',
+            },
+        }, {
+            parent: this.app,
+            dependsOn: [amplifyServiceRole, this.app],
+        });
+        if (domainName) {
+            this.domainAssociation = this.createDomainAssociation({ name: `${name}-app`, domainName });
+        }
+        this.registerOutputs({
+            app: this.app,
+            branch: this.branch,
+            domainAssociation: this.domainAssociation,
+        });
+    }
+    createDomainAssociation({ name, domainName, }) {
+        return new aws_1.amplify.DomainAssociation(`${name}-domain`, {
+            domainName,
+            appId: this.app.id,
+            subDomains: [
+                {
+                    branchName: this.branch.branchName,
+                    prefix: '',
+                },
+            ],
+            waitForVerification: false,
+        }, {
+            parent: this.app,
+            dependsOn: [this.app, this.branch],
+        });
+    }
+}
+exports.AmplifyApp = AmplifyApp;
+//# sourceMappingURL=component.js.map

package/dist/amplify/component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../src/amplify/component.ts"],"names":[],"mappings":";;;AAAA,qCAAqC;AACrC,2CAA4E;AAE5E,2CAAqD;AACrD,+BAAgD;AAEhD,oDAAgD;AAChD,8CAA0C;AAE1C,MAAa,UAAW,SAAQ,0BAAiB;IAK/C,YACE,EACE,IAAI,EACJ,UAAU,EACV,iBAAiB,EACjB,OAAO,GAAG,GAAG,EACb,UAAU,EACV,UAAU,EACV,oBAAoB,GACH,EACnB,IAA+B;QAE/B,KAAK,CAAC,kCAAkC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;QACzD,MAAM,kBAAkB,GAAG,IAAA,8BAAwB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAE/D,IAAI,CAAC,GAAG,GAAG,IAAI,aAAO,CAAC,GAAG,CACxB,GAAG,IAAI,MAAM,EACb;YACE,IAAI;YACJ,UAAU;YACV,iBAAiB,EAAE,kBAAkB,CAAC,GAAG;YACzC,WAAW,EAAE,iBAAiB;YAC9B,SAAS,EAAE,IAAA,mCAAuB,EAAC,OAAO,CAAC;YAC3C,QAAQ,EAAE,aAAa;YACvB,oBAAoB,EAAE;gBACpB,QAAQ,EAAE,iBAAO,CAAC,WAAW;gBAC7B,mBAAmB,EAAE,MAAM;gBAC3B,wBAAwB,EAAE,OAAO;gBACjC,yBAAyB,EAAE,OAAO;gBAElC,aAAa,EACX,mFAAmF;gBAErF,GAAG,CAAC,oBAAoB,aAApB,oBAAoB,cAApB,oBAAoB,GAAI,EAAE,CAAC;aAChC;YACD,IAAI,EAAE;gBACJ,GAAG,uBAAU;gBACb,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,OAAO;aACjB;SACF,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAClD,CAAA;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,aAAO,CAAC,MAAM,CAC9B,GAAG,IAAI,SAAS,EAChB;YACE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;YAClB,UAAU;YACV,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,eAAe;YAC1B,KAAK,EAAE,iBAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;YAC1D,oBAAoB,EAAE;gBACpB,QAAQ,EAAE,iBAAO,CAAC,WAAW;gBAC7B,yBAAyB,EAAE,OAAO;gBAClC,mBAAmB,EAAE,MAAM;gBAC3B,wBAAwB,EAAE,OAAO;gBAEjC,GAAG,CAAC,oBAAoB,aAApB,oBAAoB,cAApB,oBAAoB,GAAI,EAAE,CAAC;aAChC;YACD,IAAI,EAAE;gBACJ,GAAG,uBAAU;gBACb,SAAS,EAAE,eAAe;aAC3B;SACF,EACD;YACE,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,SAAS,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC;SAC1C,CACF,CAAA;QAED,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,IAAI,CAAC,eAAe,CAAC;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAA;IACJ,CAAC;IAEO,uBAAuB,CAAC,EAC9B,IAAI,EACJ,UAAU,GACqB;QAC/B,OAAO,IAAI,aAAO,CAAC,iBAAiB,CAClC,GAAG,IAAI,SAAS,EAChB;YACE,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;YAClB,UAAU,EAAE;gBACV;oBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;oBAClC,MAAM,EAAE,EAAE;iBACX;aACF;YACD,mBAAmB,EAAE,KAAK;SAC3B,EACD;YACE,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;SACnC,CACF,CAAA;IACH,CAAC;CACF;AA9GD,gCA8GC"}

package/dist/amplify/constants.d.ts

@@ -0,0 +1,2 @@
+export declare function createMonorepoBuildSpec(appRoot: string): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/amplify/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/amplify/constants.ts"],"names":[],"mappings":"AAAA,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsD/D"}

package/dist/amplify/constants.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMonorepoBuildSpec = createMonorepoBuildSpec;
+function createMonorepoBuildSpec(appRoot) {
+    if (appRoot !== '.') {
+        return `
+      version: 1
+      applications:
+        - appRoot: "${appRoot}"
+          frontend:
+            phases:
+              preBuild:
+                commands:
+                  - yarn install --frozen-lockfile
+              build:
+                commands:
+                  - yarn build
+            artifacts:
+              baseDirectory: .next
+              files:
+                - '**/*'
+            cache:
+              paths:
+                - node_modules/**/*
+                - .yarn-cache/**/*
+      customHeaders:
+        - pattern: '**/*'
+          headers:
+            - key: 'Cache-Control'
+              value: 'public, max-age=0, must-revalidate'
+    `;
+    }
+    else {
+        return `
+      version: 1
+      frontend:
+        phases:
+          preBuild:
+            commands:
+              - yarn install --frozen-lockfile
+          build:
+            commands:
+              - yarn build
+        artifacts:
+          baseDirectory: .next
+          files:
+            - '**/*'
+        cache:
+          paths:
+            - node_modules/**/*
+            - .yarn-cache/**/*
+      customHeaders:
+        - pattern: '**/*'
+          headers:
+            - key: 'Cache-Control'
+              value: 'public, max-age=0, must-revalidate'
+    `;
+    }
+}
+//# sourceMappingURL=constants.js.map

package/dist/amplify/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/amplify/constants.ts"],"names":[],"mappings":";;AAAA,0DAsDC;AAtDD,SAAgB,uBAAuB,CAAC,OAAe;IACrD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO;;;sBAGW,OAAO;;;;;;;;;;;;;;;;;;;;;;KAsBxB,CAAA;IACH,CAAC;SAAM,CAAC;QACN,OAAO;;;;;;;;;;;;;;;;;;;;;;;KAuBN,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/amplify/iam.d.ts

@@ -0,0 +1,3 @@
+import { ComponentResource } from '@pulumi/pulumi';
+export declare function createAmplifyServiceRole(name: string, parent: ComponentResource): import("@pulumi/aws/iam/role").Role;
+//# sourceMappingURL=iam.d.ts.map

package/dist/amplify/iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../../src/amplify/iam.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAIlD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,uCAyJ/E"}

package/dist/amplify/iam.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAmplifyServiceRole = createAmplifyServiceRole;
+const aws_1 = require("@pulumi/aws");
+const commonTags_1 = require("../utils/commonTags");
+function createAmplifyServiceRole(name, parent) {
+    const role = new aws_1.iam.Role(`${name}-amplify-service-role`, {
+        name: `${name}-amplify-service-role`,
+        assumeRolePolicy: JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Principal: { Service: 'amplify.amazonaws.com' },
+                    Action: 'sts:AssumeRole',
+                },
+            ],
+        }),
+        managedPolicyArns: [aws_1.iam.ManagedPolicy.AmplifyBackendDeployFullAccess],
+        tags: { ...commonTags_1.commonTags, Component: 'AmplifyServiceRole' },
+    }, { parent });
+    const domainsPolicy = new aws_1.iam.Policy(`${name}-amplify-domains-policy`, {
+        name: `${name}-amplify-domains-policy`,
+        policy: JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Action: [
+                        'route53:ListHostedZones',
+                        'route53:GetHostedZone',
+                        'route53:ListResourceRecordSets',
+                        'route53:ChangeResourceRecordSets',
+                        'route53:GetChange',
+                        'route53:ListTagsForResource',
+                    ],
+                    Resource: '*',
+                },
+                {
+                    Effect: 'Allow',
+                    Action: [
+                        'acm:ListCertificates',
+                        'acm:RequestCertificate',
+                        'acm:DescribeCertificate',
+                        'acm:GetCertificate',
+                    ],
+                    Resource: '*',
+                },
+                {
+                    Effect: 'Allow',
+                    Action: ['cloudfront:CreateInvalidation'],
+                    Resource: '*',
+                },
+            ],
+        }),
+        tags: { ...commonTags_1.commonTags, Component: 'AmplifyDomainsPolicy' },
+    }, { parent: role });
+    const amplifyPolicy = new aws_1.iam.Policy(`${name}-amplify-policy`, {
+        name: `${name}-amplify-policy`,
+        policy: JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Action: [
+                        'amplify:StartJob',
+                        'amplify:StopJob',
+                        'amplify:GetApp',
+                        'amplify:UpdateApp',
+                        'amplify:GetBranch',
+                        'amplify:UpdateBranch',
+                        'amplify:GetJob',
+                        'amplify:CreateDeployment',
+                        'amplify:StartDeployment',
+                        'amplify:StopDeployment',
+                    ],
+                    Resource: '*',
+                },
+            ],
+        }),
+        tags: { ...commonTags_1.commonTags, Component: 'AmplifyPolicy' },
+    }, { parent });
+    const logsPolicy = new aws_1.iam.Policy(`${name}-amplify-logs-policy`, {
+        name: `${name}-amplify-logs-policy`,
+        policy: JSON.stringify({
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Effect: 'Allow',
+                    Action: [
+                        'logs:CreateLogGroup',
+                        'logs:CreateLogStream',
+                        'logs:PutLogEvents',
+                        'logs:DescribeLogStreams',
+                        'logs:PutRetentionPolicy',
+                    ],
+                    Resource: [
+                        'arn:aws:logs:*:*:log-group:/aws/amplify/*',
+                        'arn:aws:logs:*:*:log-group:/aws/amplify/*:log-stream:*',
+                    ],
+                },
+                {
+                    Effect: 'Allow',
+                    Action: ['logs:DescribeLogGroups'],
+                    Resource: '*',
+                },
+            ],
+        }),
+        tags: { ...commonTags_1.commonTags, Component: 'AmplifyLogsPolicy' },
+    }, { parent: role });
+    new aws_1.iam.RolePolicyAttachment(`${name}-amplify-domains-policy-attachment`, {
+        role: role.name,
+        policyArn: domainsPolicy.arn,
+    }, { parent: role });
+    new aws_1.iam.RolePolicyAttachment(`${name}-amplify-policy-attachment`, {
+        role: role.name,
+        policyArn: amplifyPolicy.arn,
+    }, { parent: role });
+    new aws_1.iam.RolePolicyAttachment(`${name}-amplify-logs-policy-attachment`, {
+        role: role.name,
+        policyArn: logsPolicy.arn,
+    }, { parent: role });
+    return role;
+}
+//# sourceMappingURL=iam.js.map

package/dist/amplify/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../../src/amplify/iam.ts"],"names":[],"mappings":";;AAKA,4DAyJC;AA9JD,qCAAiC;AAGjC,oDAAgD;AAEhD,SAAgB,wBAAwB,CAAC,IAAY,EAAE,MAAyB;IAC9E,MAAM,IAAI,GAAG,IAAI,SAAG,CAAC,IAAI,CACvB,GAAG,IAAI,uBAAuB,EAC9B;QACE,IAAI,EAAE,GAAG,IAAI,uBAAuB;QACpC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC;YAC/B,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBAC/C,MAAM,EAAE,gBAAgB;iBACzB;aACF;SACF,CAAC;QACF,iBAAiB,EAAE,CAAC,SAAG,CAAC,aAAa,CAAC,8BAA8B,CAAC;QACrE,IAAI,EAAE,EAAE,GAAG,uBAAU,EAAE,SAAS,EAAE,oBAAoB,EAAE;KACzD,EACD,EAAE,MAAM,EAAE,CACX,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,SAAG,CAAC,MAAM,CAClC,GAAG,IAAI,yBAAyB,EAChC;QACE,IAAI,EAAE,GAAG,IAAI,yBAAyB;QACtC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE;wBACN,yBAAyB;wBACzB,uBAAuB;wBACvB,gCAAgC;wBAChC,kCAAkC;wBAClC,mBAAmB;wBACnB,6BAA6B;qBAC9B;oBACD,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE;wBACN,sBAAsB;wBACtB,wBAAwB;wBACxB,yBAAyB;wBACzB,oBAAoB;qBACrB;oBACD,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,CAAC,+BAA+B,CAAC;oBACzC,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC;QACF,IAAI,EAAE,EAAE,GAAG,uBAAU,EAAE,SAAS,EAAE,sBAAsB,EAAE;KAC3D,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,SAAG,CAAC,MAAM,CAClC,GAAG,IAAI,iBAAiB,EACxB;QACE,IAAI,EAAE,GAAG,IAAI,iBAAiB;QAC9B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE;wBACN,kBAAkB;wBAClB,iBAAiB;wBACjB,gBAAgB;wBAChB,mBAAmB;wBACnB,mBAAmB;wBACnB,sBAAsB;wBACtB,gBAAgB;wBAChB,0BAA0B;wBAC1B,yBAAyB;wBACzB,wBAAwB;qBACzB;oBACD,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC;QACF,IAAI,EAAE,EAAE,GAAG,uBAAU,EAAE,SAAS,EAAE,eAAe,EAAE;KACpD,EACD,EAAE,MAAM,EAAE,CACX,CAAA;IAED,MAAM,UAAU,GAAG,IAAI,SAAG,CAAC,MAAM,CAC/B,GAAG,IAAI,sBAAsB,EAC7B;QACE,IAAI,EAAE,GAAG,IAAI,sBAAsB;QACnC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE;wBACN,qBAAqB;wBACrB,sBAAsB;wBACtB,mBAAmB;wBACnB,yBAAyB;wBACzB,yBAAyB;qBAC1B;oBACD,QAAQ,EAAE;wBACR,2CAA2C;wBAC3C,wDAAwD;qBACzD;iBACF;gBACD;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,CAAC,wBAAwB,CAAC;oBAClC,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC;QACF,IAAI,EAAE,EAAE,GAAG,uBAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE;KACxD,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;IAED,IAAI,SAAG,CAAC,oBAAoB,CAC1B,GAAG,IAAI,oCAAoC,EAC3C;QACE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,aAAa,CAAC,GAAG;KAC7B,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;IAED,IAAI,SAAG,CAAC,oBAAoB,CAC1B,GAAG,IAAI,4BAA4B,EACnC;QACE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,aAAa,CAAC,GAAG;KAC7B,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;IAED,IAAI,SAAG,CAAC,oBAAoB,CAC1B,GAAG,IAAI,iCAAiC,EACxC;QACE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,UAAU,CAAC,GAAG;KAC1B,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/amplify/index.d.ts

@@ -0,0 +1,3 @@
+export * from './component';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/amplify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/amplify/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,SAAS,CAAA"}

package/dist/amplify/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./component"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/amplify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/amplify/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA2B;AAC3B,0CAAuB"}

package/dist/amplify/types.d.ts

@@ -0,0 +1,24 @@
+import { iam } from '@pulumi/aws';
+import { EnvironmentVariablesType } from '../utils/environment';
+export interface AmplifyAppConfig {
+    name: string;
+    appRoot?: string;
+    repository: string;
+    branchName: string;
+    domainName?: string;
+    githubAccessToken: string;
+    environmentVariables?: EnvironmentVariablesType;
+}
+export interface AmplifyDomainAssociationConfig {
+    name: string;
+    domainName: string;
+}
+export interface AmplifyDomainRolePolicy {
+    amplifyDomainRole: iam.Role;
+    amplifyDomainPolicy: iam.Policy;
+}
+export interface AmplifyCicdRolePolicy {
+    amplifyCicdRole: iam.Role;
+    amplifyCicdPolicy: iam.Policy;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/amplify/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/amplify/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAElB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,oBAAoB,CAAC,EAAE,wBAAwB,CAAA;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAA;IAC3B,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAA;IACzB,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAA;CAC9B"}

package/dist/amplify/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/amplify/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/amplify/types.ts"],"names":[],"mappings":""}

package/dist/cloudflare/component.d.ts

@@ -0,0 +1,12 @@
+import { DnsRecord, GetZoneResult } from '@pulumi/cloudflare';
+import { Output, ComponentResource, ComponentResourceOptions } from '@pulumi/pulumi';
+import { CloudflareNameserverConfig } from './types';
+export declare class CloudflareNameserver extends ComponentResource {
+    readonly nameserverRecords: Output<DnsRecord[]>;
+    readonly zoneInfo: Output<GetZoneResult> | undefined;
+    constructor(name: string, config: CloudflareNameserverConfig, opts?: ComponentResourceOptions);
+    private _createNsRecordsOnCloudflare;
+    private _createNsRecordsOnCloudflareWithZoneId;
+    private _createNameserverRecords;
+}
+//# sourceMappingURL=component.d.ts.map

package/dist/cloudflare/component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/cloudflare/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAW,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAS,MAAM,EAAU,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAGnG,OAAO,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAA;AAGpD,qBAAa,oBAAqB,SAAQ,iBAAiB;IACzD,SAAgB,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;IACtD,SAAgB,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,SAAS,CAAA;gBAE/C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,CAAC,EAAE,wBAAwB;IAe7F,OAAO,CAAC,4BAA4B;IAuBpC,OAAO,CAAC,sCAAsC;IAW9C,OAAO,CAAC,wBAAwB;CAuBjC"}