quidproquo-deploy-awscdk 0.0.76 → 0.0.78

package/lib/constructs/feature/core/eventBus/QpqCoreEventBusConstruct.d.ts

@@ -0,0 +1,18 @@
+import { EventBusQPQConfigSetting, QPQConfig } from 'quidproquo-core';
+import { QpqConstructBlock, QpqConstructBlockProps } from '../../../base/QpqConstructBlock';
+import { Construct } from 'constructs';
+import { aws_sns, aws_iam } from 'aws-cdk-lib';
+export interface QpqCoreEventBusConstructProps extends QpqConstructBlockProps {
+    eventBusConfig: EventBusQPQConfigSetting;
+}
+export declare abstract class QpqCoreEventBusConstructBase extends QpqConstructBlock {
+    abstract topic: aws_sns.ITopic;
+    grantRead(grantee: aws_iam.IGrantable): void;
+    grantWrite(grantee: aws_iam.IGrantable): void;
+    grantAll(grantee: aws_iam.IGrantable): void;
+}
+export declare class QpqCoreEventBusConstruct extends QpqCoreEventBusConstructBase {
+    topic: aws_sns.ITopic;
+    static fromOtherStack(scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string, eventBusName: string, applicationOverride?: string): QpqCoreEventBusConstructBase;
+    constructor(scope: Construct, id: string, props: QpqCoreEventBusConstructProps);
+}

package/lib/constructs/feature/core/eventBus/QpqCoreEventBusConstruct.js

@@ -0,0 +1,62 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QpqCoreEventBusConstruct = exports.QpqCoreEventBusConstructBase = void 0;
+const quidproquo_actionprocessor_awslambda_1 = require("quidproquo-actionprocessor-awslambda");
+const QpqConstructBlock_1 = require("../../../base/QpqConstructBlock");
+const qpqDeployAwsCdkUtils = __importStar(require("../../../../utils"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+class QpqCoreEventBusConstructBase extends QpqConstructBlock_1.QpqConstructBlock {
+    grantRead(grantee) { }
+    grantWrite(grantee) {
+        this.topic.grantPublish(grantee);
+    }
+    grantAll(grantee) {
+        this.grantRead(grantee);
+        this.grantWrite(grantee);
+    }
+}
+exports.QpqCoreEventBusConstructBase = QpqCoreEventBusConstructBase;
+class QpqCoreEventBusConstruct extends QpqCoreEventBusConstructBase {
+    static fromOtherStack(scope, id, qpqConfig, awsAccountId, eventBusName, applicationOverride) {
+        const topicArn = qpqDeployAwsCdkUtils.importStackValue(quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getCFExportNameSnsTopicArnFromConfig(eventBusName, qpqConfig, applicationOverride));
+        class Import extends QpqCoreEventBusConstructBase {
+            constructor() {
+                super(...arguments);
+                this.topic = aws_cdk_lib_1.aws_sns.Topic.fromTopicArn(this, 'topic-arn', topicArn);
+            }
+        }
+        return new Import(scope, id, { qpqConfig, awsAccountId });
+    }
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        this.topic = new aws_cdk_lib_1.aws_sns.Topic(this, 'topic', {
+            topicName: this.resourceName(props.eventBusConfig.name),
+            displayName: props.eventBusConfig.name,
+        });
+        qpqDeployAwsCdkUtils.exportStackValue(this, quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getCFExportNameSnsTopicArnFromConfig(props.eventBusConfig.name, props.qpqConfig), this.topic.topicArn);
+    }
+}
+exports.QpqCoreEventBusConstruct = QpqCoreEventBusConstruct;

package/lib/constructs/feature/core/eventBus/index.d.ts

@@ -0,0 +1 @@
+export * from './QpqCoreEventBusConstruct';

package/lib/constructs/feature/core/eventBus/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./QpqCoreEventBusConstruct"), exports);

package/lib/constructs/feature/core/index.d.ts

@@ -1,4 +1,5 @@
 export * from './auth';
+export * from './eventBus';
 export * from './parameter';
 export * from './queue';
 export * from './schedule';

package/lib/constructs/feature/core/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./auth"), exports);
+__exportStar(require("./eventBus"), exports);
 __exportStar(require("./parameter"), exports);
 __exportStar(require("./queue"), exports);
 __exportStar(require("./schedule"), exports);

package/lib/constructs/feature/core/queue/QpqApiCoreQueueConstruct.js

@@ -27,6 +27,7 @@ exports.QpqApiCoreQueueConstruct = void 0;
 const quidproquo_core_1 = require("quidproquo-core");
 const QpqConstructBlock_1 = require("../../../base/QpqConstructBlock");
 const QpqCoreQueueConstruct_1 = require("./QpqCoreQueueConstruct");
+const QpqCoreEventBusConstruct_1 = require("../eventBus/QpqCoreEventBusConstruct");
 const Function_1 = require("../../../basic/Function");
 const qpqDeployAwsCdkUtils = __importStar(require("../../../../utils"));
 const aws_cdk_lib_1 = require("aws-cdk-lib");
@@ -53,6 +54,20 @@ class QpqApiCoreQueueConstruct extends QpqConstructBlock_1.QpqConstructBlock {
         });
         // ///////// end todo
         const queueResource = QpqCoreQueueConstruct_1.QpqCoreQueueConstruct.fromOtherStack(this, 'queue', props.qpqConfig, props.queueConfig, props.awsAccountId);
+        props.queueConfig.eventBusSubscriptions.forEach((eventBusName) => {
+            const eventBus = QpqCoreEventBusConstruct_1.QpqCoreEventBusConstruct.fromOtherStack(this, `event-bus-${eventBusName}`, props.qpqConfig, props.awsAccountId, eventBusName);
+            eventBus.topic.addSubscription(new aws_cdk_lib_1.aws_sns_subscriptions.SqsSubscription(queueResource.queue, {
+                rawMessageDelivery: true,
+                // No wildcard support :(
+                // filterPolicy: {
+                //   type: aws_sns.SubscriptionFilter.stringFilter({
+                //     allowlist: Object.keys(props.queueConfig.qpqQueueProcessors).map((type) =>
+                //       type.replaceAll(/{(.+?)}/g, '*'),
+                //     ),
+                //   }),
+                // },
+            }));
+        });
         queueFunction.lambdaFunction.addEventSource(new aws_cdk_lib_1.aws_lambda_event_sources.SqsEventSource(queueResource.queue, {
             batchSize: props.queueConfig.batchSize,
             maxBatchingWindow: cdk.Duration.seconds(props.queueConfig.batchWindowInSeconds),

package/lib/constructs/feature/core/queue/QpqCoreQueueConstruct.js

@@ -67,6 +67,20 @@ class QpqCoreQueueConstruct extends QpqCoreQueueConstructBase {
                 }),
             },
         });
+        // This has to be any topic arn as we want other services / apps to be able
+        // to publish to this queue
+        this.queue.addToResourcePolicy(new aws_cdk_lib_1.aws_iam.PolicyStatement({
+            sid: 'AllowSNSServicePrincipal',
+            effect: aws_cdk_lib_1.aws_iam.Effect.ALLOW,
+            principals: [new aws_cdk_lib_1.aws_iam.ServicePrincipal('sns.amazonaws.com')],
+            actions: ['sqs:SendMessage'],
+            resources: [this.queue.queueArn],
+            conditions: {
+                ArnEquals: {
+                    'aws:SourceArn': `arn:aws:sns:*:${props.awsAccountId}:*`,
+                },
+            },
+        }));
     }
 }
 exports.QpqCoreQueueConstruct = QpqCoreQueueConstruct;

package/lib/constructs/feature/core/storageDrive/QpqCoreStorageDriveConstruct.js

@@ -62,6 +62,7 @@ class QpqCoreStorageDriveConstruct extends QpqCoreStorageDriveConstructBase {
             removalPolicy: cdk.RemovalPolicy.DESTROY,
             autoDeleteObjects: true,
         });
+        // TODO: Only do this IF a cloud front dist wants to use it
         this.bucket.addToResourcePolicy(new aws_cdk_lib_1.aws_iam.PolicyStatement({
             sid: 'AllowCloudFrontServicePrincipal',
             effect: aws_cdk_lib_1.aws_iam.Effect.ALLOW,

package/lib/lambdas/lambdaAPIGatewayEvent.js

@@ -45,7 +45,7 @@ const getAPIGatewayEventExecutor = (dynamicModuleLoader, getCustomActionProcesso
         const cdkConfig = yield (0, lambdaConfig_1.getLambdaConfigs)();
         // Build a processor for the session and stuff
         // Remove the non route ones ~ let the story execute action add them
-        const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getAPIGatewayEventActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
+        const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getAPIGatewayEventActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getEventBusActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
         const logger = (result) => __awaiter(void 0, void 0, void 0, function* () {
             // addResult(
             //   envConfig.appName,

package/lib/lambdas/lambdaEventBridgeEvent.js

@@ -30,7 +30,7 @@ const getEventBridgeEventExecutor = (dynamicModuleLoader, getCustomActionProcess
         const lambdaRuntimeConfig = JSON.parse(process.env.lambdaRuntimeConfig || '{}');
         // Build a processor for the session and stuff
         // Remove the  non event ones
-        const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getEventBridgeEventActionProcessor)(lambdaRuntimeConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
+        const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getEventBridgeEventActionProcessor)(lambdaRuntimeConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getEventBusActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
         const logger = (result) => __awaiter(void 0, void 0, void 0, function* () { });
         // Run the callback
         const resolveStory = (0, quidproquo_core_1.createRuntime)({}, storyActionProcessor, getDateNow, logger, quidproquo_actionprocessor_awslambda_1.awsLambdaUtils.randomGuid);

package/lib/lambdas/lambdaSQSEvent.js

@@ -28,7 +28,7 @@ const getStoryActionRuntime = (dynamicModuleLoader, getCustomActionProcessors =
     const cdkConfig = yield (0, lambdaConfig_1.getLambdaConfigs)();
     // Build a processor for the session and stuff
     // Remove the non route ones ~ let the story execute action add them
-    const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getSQSEventRecordActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
+    const storyActionProcessor = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, quidproquo_actionprocessor_node_1.coreActionProcessor), quidproquo_actionprocessor_node_1.webserverActionProcessor), (0, quidproquo_actionprocessor_awslambda_1.getSQSEventRecordActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetSecretActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParameterActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getConfigGetParametersActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getSystemActionProcessor)(dynamicModuleLoader)), (0, quidproquo_actionprocessor_awslambda_1.getFileActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_node_2.getConfigActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getQueueActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getEventBusActionProcessor)(cdkConfig.qpqConfig)), (0, quidproquo_actionprocessor_awslambda_1.getUserDirectoryActionProcessor)(cdkConfig.qpqConfig)), getCustomActionProcessors(cdkConfig.qpqConfig)), (0, qpq_custom_action_processors_loader_1.default)());
     const logger = (result) => __awaiter(void 0, void 0, void 0, function* () { });
     // Run the callback
     const resolveStory = (0, quidproquo_core_1.createRuntime)({}, storyActionProcessor, getDateNow, logger, quidproquo_actionprocessor_awslambda_1.awsLambdaUtils.randomGuid);

package/lib/stacks/InfQpqServiceStack.js

@@ -50,6 +50,12 @@ class InfQpqServiceStack extends QpqServiceStack_1.QpqServiceStack {
             qpqConfig: props.qpqConfig,
             apiKeyConfig: setting,
         }));
+        // Event Busses
+        const busses = quidproquo_core_1.qpqCoreUtils.getAllEventBusConfigs(props.qpqConfig).map((setting) => new constructs_1.QpqCoreEventBusConstruct(this, quidproquo_core_1.qpqCoreUtils.getUniqueKeyForSetting(setting), {
+            awsAccountId: props.awsAccountId,
+            qpqConfig: props.qpqConfig,
+            eventBusConfig: setting,
+        }));
     }
 }
 exports.InfQpqServiceStack = InfQpqServiceStack;

package/lib/utils/qpqDeployAwsCdkUtils.d.ts

@@ -8,6 +8,7 @@ export declare const getQqpParameterGrantables: (scope: Construct, id: string, q
 export declare const getQqpStorageDriveGrantables: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string) => QpqResource[];
 export declare const getQqpQueueGrantables: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string) => QpqResource[];
 export declare const getQqpUserPoolGrantables: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string) => QpqResource[];
+export declare const getQqpTopicGrantables: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string) => QpqResource[];
 export declare const getQqpUserPoolGrantablesForApiConfig: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string, config: ApiQPQWebServerConfigSetting) => QpqResource[];
 export declare const serviceNeedsServiceHostedZone: (qpqConfig: QPQConfig) => boolean;
 export declare const getQqpGrantableResources: (scope: Construct, id: string, qpqConfig: QPQConfig, awsAccountId: string) => QpqResource[];

package/lib/utils/qpqDeployAwsCdkUtils.js

@@ -23,7 +23,7 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.importStackValue = exports.exportStackValue = exports.getQqpGrantableResourcesForApiConfig = exports.getQqpGrantableResources = exports.serviceNeedsServiceHostedZone = exports.getQqpUserPoolGrantablesForApiConfig = exports.getQqpUserPoolGrantables = exports.getQqpQueueGrantables = exports.getQqpStorageDriveGrantables = exports.getQqpParameterGrantables = exports.getQqpSecretGrantables = void 0;
+exports.importStackValue = exports.exportStackValue = exports.getQqpGrantableResourcesForApiConfig = exports.getQqpGrantableResources = exports.serviceNeedsServiceHostedZone = exports.getQqpUserPoolGrantablesForApiConfig = exports.getQqpTopicGrantables = exports.getQqpUserPoolGrantables = exports.getQqpQueueGrantables = exports.getQqpStorageDriveGrantables = exports.getQqpParameterGrantables = exports.getQqpSecretGrantables = void 0;
 const cdk = __importStar(require("aws-cdk-lib"));
 const quidproquo_core_1 = require("quidproquo-core");
 const quidproquo_webserver_1 = require("quidproquo-webserver");
@@ -76,6 +76,16 @@ const getQqpUserPoolGrantables = (scope, id, qpqConfig, awsAccountId) => {
     return userDirectoryResources;
 };
 exports.getQqpUserPoolGrantables = getQqpUserPoolGrantables;
+const getQqpTopicGrantables = (scope, id, qpqConfig, awsAccountId) => {
+    const eventBusConfigs = quidproquo_core_1.qpqCoreUtils
+        .getAllEventBusConfigs(qpqConfig)
+        .filter((ebc) => !ebc.deprecated);
+    const eventBuses = eventBusConfigs.map((eventBus) => {
+        return constructs_1.QpqCoreEventBusConstruct.fromOtherStack(scope, `${id}-${quidproquo_core_1.qpqCoreUtils.getUniqueKeyForSetting(eventBus)}-grantable`, qpqConfig, awsAccountId, eventBus.name);
+    });
+    return eventBuses;
+};
+exports.getQqpTopicGrantables = getQqpTopicGrantables;
 const getQqpUserPoolGrantablesForApiConfig = (scope, id, qpqConfig, awsAccountId, config) => {
     const routesWithAuth = quidproquo_webserver_1.qpqWebServerUtils
         .getAllRoutesForApi(config.apiName, qpqConfig)
@@ -109,6 +119,7 @@ const getQqpGrantableResources = (scope, id, qpqConfig, awsAccountId) => {
         ...(0, exports.getQqpStorageDriveGrantables)(scope, id, qpqConfig, awsAccountId),
         ...(0, exports.getQqpQueueGrantables)(scope, id, qpqConfig, awsAccountId),
         ...(0, exports.getQqpUserPoolGrantables)(scope, id, qpqConfig, awsAccountId),
+        ...(0, exports.getQqpTopicGrantables)(scope, id, qpqConfig, awsAccountId),
     ];
 };
 exports.getQqpGrantableResources = getQqpGrantableResources;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-deploy-awscdk",
-  "version": "0.0.76",
+  "version": "0.0.78",
   "description": "",
   "main": "./lib/index.js",
   "types": "./lib/index.d.js",

package/src/constructs/feature/core/eventBus/QpqCoreEventBusConstruct.ts

@@ -0,0 +1,74 @@
+import { awsNamingUtils } from 'quidproquo-actionprocessor-awslambda';
+import { EventBusQPQConfigSetting, qpqCoreUtils, QPQConfig } from 'quidproquo-core';
+
+import { QpqConstructBlock, QpqConstructBlockProps } from '../../../base/QpqConstructBlock';
+import { QpqResource } from '../../../base/QpqResource';
+
+import * as qpqDeployAwsCdkUtils from '../../../../utils';
+
+import { Construct } from 'constructs';
+import { aws_sns, aws_iam } from 'aws-cdk-lib';
+
+export interface QpqCoreEventBusConstructProps extends QpqConstructBlockProps {
+  eventBusConfig: EventBusQPQConfigSetting;
+}
+
+export abstract class QpqCoreEventBusConstructBase extends QpqConstructBlock {
+  abstract topic: aws_sns.ITopic;
+
+  public grantRead(grantee: aws_iam.IGrantable) {}
+
+  public grantWrite(grantee: aws_iam.IGrantable): void {
+    this.topic.grantPublish(grantee);
+  }
+
+  public grantAll(grantee: aws_iam.IGrantable): void {
+    this.grantRead(grantee);
+    this.grantWrite(grantee);
+  }
+}
+
+export class QpqCoreEventBusConstruct extends QpqCoreEventBusConstructBase {
+  topic: aws_sns.ITopic;
+
+  static fromOtherStack(
+    scope: Construct,
+    id: string,
+    qpqConfig: QPQConfig,
+    awsAccountId: string,
+    eventBusName: string,
+    applicationOverride?: string,
+  ): QpqCoreEventBusConstructBase {
+    const topicArn = qpqDeployAwsCdkUtils.importStackValue(
+      awsNamingUtils.getCFExportNameSnsTopicArnFromConfig(
+        eventBusName,
+        qpqConfig,
+        applicationOverride,
+      ),
+    );
+
+    class Import extends QpqCoreEventBusConstructBase {
+      topic = aws_sns.Topic.fromTopicArn(this, 'topic-arn', topicArn);
+    }
+
+    return new Import(scope, id, { qpqConfig, awsAccountId });
+  }
+
+  constructor(scope: Construct, id: string, props: QpqCoreEventBusConstructProps) {
+    super(scope, id, props);
+
+    this.topic = new aws_sns.Topic(this, 'topic', {
+      topicName: this.resourceName(props.eventBusConfig.name),
+      displayName: props.eventBusConfig.name,
+    });
+
+    qpqDeployAwsCdkUtils.exportStackValue(
+      this,
+      awsNamingUtils.getCFExportNameSnsTopicArnFromConfig(
+        props.eventBusConfig.name,
+        props.qpqConfig,
+      ),
+      this.topic.topicArn,
+    );
+  }
+}

package/src/constructs/feature/core/eventBus/index.ts

@@ -0,0 +1 @@
+export * from './QpqCoreEventBusConstruct';

package/src/constructs/feature/core/index.ts

@@ -1,4 +1,5 @@
 export * from './auth';
+export * from './eventBus';
 export * from './parameter';
 export * from './queue';
 export * from './schedule';

package/src/constructs/feature/core/queue/QpqApiCoreQueueConstruct.ts

@@ -2,13 +2,14 @@ import { QueueQPQConfigSetting, qpqCoreUtils, QPQConfig } from 'quidproquo-core'
 
 import { QpqConstructBlock, QpqConstructBlockProps } from '../../../base/QpqConstructBlock';
 import { QpqCoreQueueConstruct } from './QpqCoreQueueConstruct';
+import { QpqCoreEventBusConstruct } from '../eventBus/QpqCoreEventBusConstruct';
 
 import { Function } from '../../../basic/Function';
 
 import * as qpqDeployAwsCdkUtils from '../../../../utils';
 
 import { Construct } from 'constructs';
-import { aws_lambda_event_sources, aws_lambda } from 'aws-cdk-lib';
+import { aws_lambda_event_sources, aws_lambda, aws_sns, aws_sns_subscriptions } from 'aws-cdk-lib';
 import * as cdk from 'aws-cdk-lib';
 
 export interface QpqApiCoreQueueConstructProps extends QpqConstructBlockProps {
@@ -58,6 +59,31 @@ export class QpqApiCoreQueueConstruct extends QpqConstructBlock {
       props.awsAccountId,
     );
 
+    props.queueConfig.eventBusSubscriptions.forEach((eventBusName) => {
+      const eventBus = QpqCoreEventBusConstruct.fromOtherStack(
+        this,
+        `event-bus-${eventBusName}`,
+        props.qpqConfig,
+        props.awsAccountId,
+        eventBusName,
+      );
+
+      eventBus.topic.addSubscription(
+        new aws_sns_subscriptions.SqsSubscription(queueResource.queue, {
+          rawMessageDelivery: true,
+
+          // No wildcard support :(
+          // filterPolicy: {
+          //   type: aws_sns.SubscriptionFilter.stringFilter({
+          //     allowlist: Object.keys(props.queueConfig.qpqQueueProcessors).map((type) =>
+          //       type.replaceAll(/{(.+?)}/g, '*'),
+          //     ),
+          //   }),
+          // },
+        }),
+      );
+    });
+
     queueFunction.lambdaFunction.addEventSource(
       new aws_lambda_event_sources.SqsEventSource(queueResource.queue, {
         batchSize: props.queueConfig.batchSize,

package/src/constructs/feature/core/queue/QpqCoreQueueConstruct.ts

@@ -72,5 +72,22 @@ export class QpqCoreQueueConstruct extends QpqCoreQueueConstructBase {
         }),
       },
     });
+
+    // This has to be any topic arn as we want other services / apps to be able
+    // to publish to this queue
+    this.queue.addToResourcePolicy(
+      new aws_iam.PolicyStatement({
+        sid: 'AllowSNSServicePrincipal',
+        effect: aws_iam.Effect.ALLOW,
+        principals: [new aws_iam.ServicePrincipal('sns.amazonaws.com')],
+        actions: ['sqs:SendMessage'],
+        resources: [this.queue.queueArn],
+        conditions: {
+          ArnEquals: {
+            'aws:SourceArn': `arn:aws:sns:*:${props.awsAccountId}:*`,
+          },
+        },
+      }),
+    );
   }
 }

package/src/constructs/feature/core/storageDrive/QpqCoreStorageDriveConstruct.ts

@@ -67,6 +67,7 @@ export class QpqCoreStorageDriveConstruct extends QpqCoreStorageDriveConstructBa
       autoDeleteObjects: true,
     });
 
+    // TODO: Only do this IF a cloud front dist wants to use it
     this.bucket.addToResourcePolicy(
       new aws_iam.PolicyStatement({
         sid: 'AllowCloudFrontServicePrincipal',

package/src/lambdas/lambdaAPIGatewayEvent.ts

@@ -5,6 +5,7 @@ import {
   getSystemActionProcessor,
   getFileActionProcessor,
   getQueueActionProcessor,
+  getEventBusActionProcessor,
   getConfigGetSecretActionProcessor,
   getConfigGetParameterActionProcessor,
   getConfigGetParametersActionProcessor,
@@ -70,6 +71,7 @@ export const getAPIGatewayEventExecutor = (
       ...getFileActionProcessor(cdkConfig.qpqConfig),
       ...getConfigActionProcessor(cdkConfig.qpqConfig),
       ...getQueueActionProcessor(cdkConfig.qpqConfig),
+      ...getEventBusActionProcessor(cdkConfig.qpqConfig),
       ...getUserDirectoryActionProcessor(cdkConfig.qpqConfig),
 
       ...getCustomActionProcessors(cdkConfig.qpqConfig),

package/src/lambdas/lambdaEventBridgeEvent.ts

@@ -5,6 +5,7 @@ import {
   getSystemActionProcessor,
   getFileActionProcessor,
   getQueueActionProcessor,
+  getEventBusActionProcessor,
   getUserDirectoryActionProcessor,
   getConfigGetSecretActionProcessor,
   getConfigGetParameterActionProcessor,
@@ -57,6 +58,7 @@ export const getEventBridgeEventExecutor = (
       ...getConfigGetParametersActionProcessor(cdkConfig.qpqConfig),
       ...getConfigActionProcessor(cdkConfig.qpqConfig),
       ...getQueueActionProcessor(cdkConfig.qpqConfig),
+      ...getEventBusActionProcessor(cdkConfig.qpqConfig),
       ...getUserDirectoryActionProcessor(cdkConfig.qpqConfig),
 
       ...getCustomActionProcessors(cdkConfig.qpqConfig),

package/src/lambdas/lambdaSQSEvent.ts

@@ -7,6 +7,7 @@ import {
   getSystemActionProcessor,
   getFileActionProcessor,
   getQueueActionProcessor,
+  getEventBusActionProcessor,
   getConfigGetSecretActionProcessor,
   getConfigGetParameterActionProcessor,
   getConfigGetParametersActionProcessor,
@@ -58,6 +59,7 @@ export const getStoryActionRuntime = async (
     ...getFileActionProcessor(cdkConfig.qpqConfig),
     ...getConfigActionProcessor(cdkConfig.qpqConfig),
     ...getQueueActionProcessor(cdkConfig.qpqConfig),
+    ...getEventBusActionProcessor(cdkConfig.qpqConfig),
     ...getUserDirectoryActionProcessor(cdkConfig.qpqConfig),
 
     ...getCustomActionProcessors(cdkConfig.qpqConfig),

package/src/stacks/InfQpqServiceStack.ts

@@ -9,6 +9,7 @@ import {
   QpqCoreParameterConstruct,
   QpqCoreQueueConstruct,
   QpqCoreSecretConstruct,
+  QpqCoreEventBusConstruct,
   QpqWebserverDomainConstruct,
   QpqCoreUserDirectoryConstruct,
   QpqWebserverApiKeyConstruct,
@@ -96,5 +97,16 @@ export class InfQpqServiceStack extends QpqServiceStack {
           apiKeyConfig: setting,
         }),
     );
+
+    // Event Busses
+    const busses = qpqCoreUtils.getAllEventBusConfigs(props.qpqConfig).map(
+      (setting) =>
+        new QpqCoreEventBusConstruct(this, qpqCoreUtils.getUniqueKeyForSetting(setting), {
+          awsAccountId: props.awsAccountId,
+          qpqConfig: props.qpqConfig,
+
+          eventBusConfig: setting,
+        }),
+    );
   }
 }

package/src/utils/qpqDeployAwsCdkUtils.ts

@@ -24,6 +24,7 @@ import {
   QpqCoreStorageDriveConstruct,
   QpqCoreQueueConstruct,
   QpqCoreUserDirectoryConstruct,
+  QpqCoreEventBusConstruct,
 } from '../constructs';
 
 export const getQqpSecretGrantables = (
@@ -151,6 +152,29 @@ export const getQqpUserPoolGrantables = (
   return userDirectoryResources;
 };
 
+export const getQqpTopicGrantables = (
+  scope: Construct,
+  id: string,
+  qpqConfig: QPQConfig,
+  awsAccountId: string,
+): QpqResource[] => {
+  const eventBusConfigs = qpqCoreUtils
+    .getAllEventBusConfigs(qpqConfig)
+    .filter((ebc) => !ebc.deprecated);
+
+  const eventBuses = eventBusConfigs.map((eventBus) => {
+    return QpqCoreEventBusConstruct.fromOtherStack(
+      scope,
+      `${id}-${qpqCoreUtils.getUniqueKeyForSetting(eventBus)}-grantable`,
+      qpqConfig,
+      awsAccountId,
+      eventBus.name,
+    );
+  });
+
+  return eventBuses;
+};
+
 export const getQqpUserPoolGrantablesForApiConfig = (
   scope: Construct,
   id: string,
@@ -206,6 +230,7 @@ export const getQqpGrantableResources = (
     ...getQqpStorageDriveGrantables(scope, id, qpqConfig, awsAccountId),
     ...getQqpQueueGrantables(scope, id, qpqConfig, awsAccountId),
     ...getQqpUserPoolGrantables(scope, id, qpqConfig, awsAccountId),
+    ...getQqpTopicGrantables(scope, id, qpqConfig, awsAccountId),
   ];
 };