raindancers-cloudfront 0.0.31 → 0.0.32

package/lib/cloudfront/auth/cognitoAuthSecretManager.d.ts

@@ -1,4 +1,4 @@
-import { aws_cloudfront as cloudfront, aws_secretsmanager as secretsmanager, aws_kms as kms } from 'aws-cdk-lib';
+import { aws_cloudfront as cloudfront, aws_secretsmanager as secretsmanager, aws_kms as kms, RemovalPolicy } from 'aws-cdk-lib';
 import * as constructs from 'constructs';
 export interface CognitoAuthSecretManagerProps {
     readonly domainName: string;
@@ -13,6 +13,11 @@ export interface CognitoAuthSecretManagerProps {
     readonly securityAlertsTopicArn?: string;
     readonly autoRevokeOnReuse?: boolean;
     readonly jwtClaimsWhitelist?: string[];
+    /**
+     * Removal policy for the auth-secret KMS key.
+     * @default RemovalPolicy.RETAIN_ON_UPDATE_OR_DELETE
+     */
+    readonly removalPolicy?: RemovalPolicy;
 }
 export declare class CognitoAuthSecretManager extends constructs.Construct {
     readonly kmsKey: kms.Key;

package/lib/cloudfront/auth/cognitoAuthSecretManager.js

@@ -43,7 +43,10 @@ class CognitoAuthSecretManager extends constructs.Construct {
         this.kmsKey = new aws_cdk_lib_1.aws_kms.Key(this, 'KmsKey', {
             description: 'KMS key for CloudFront Cognito auth secret encryption',
             enableKeyRotation: true,
-            removalPolicy: aws_cdk_lib_1.RemovalPolicy.RETAIN,
+            // RETAIN_ON_UPDATE_OR_DELETE, not RETAIN: keep the key on a real
+            // update/delete, but let a rolled-back CREATE self-delete instead of
+            // orphaning a key that blocks the next deploy's import.
+            removalPolicy: props.removalPolicy ?? aws_cdk_lib_1.RemovalPolicy.RETAIN_ON_UPDATE_OR_DELETE,
         });
         this.kmsKey.addToResourcePolicy(new aws_cdk_lib_1.aws_iam.PolicyStatement({
             sid: 'AllowCloudWatchLogs',
@@ -90,4 +93,4 @@ class CognitoAuthSecretManager extends constructs.Construct {
     }
 }
 exports.CognitoAuthSecretManager = CognitoAuthSecretManager;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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