sst 2.0.0-rc.8 → 2.0.0

package/constructs/Api.js

@@ -127,9 +127,7 @@ export class Api extends Construct {
         const route = this.routesData[this.normalizeRouteKey(routeKey)];
         if (!route)
             return;
-        if (route.type === "function" ||
-            route.type === "pothos" ||
-            route.type === "graphql") {
+        if (route.type === "function" || route.type === "graphql") {
             return route.function;
         }
     }
@@ -144,9 +142,7 @@ export class Api extends Construct {
      */
     bind(constructs) {
         for (const route of Object.values(this.routesData)) {
-            if (route.type === "function" ||
-                route.type === "pothos" ||
-                route.type === "graphql") {
+            if (route.type === "function" || route.type === "graphql") {
                 route.function.bind(constructs);
             }
         }
@@ -185,9 +181,7 @@ export class Api extends Construct {
      */
     attachPermissions(permissions) {
         for (const route of Object.values(this.routesData)) {
-            if (route.type === "function" ||
-                route.type === "pothos" ||
-                route.type === "graphql") {
+            if (route.type === "function" || route.type === "graphql") {
                 route.function.attachPermissions(permissions);
             }
         }
@@ -230,15 +224,6 @@ export class Api extends Construct {
                             route: key,
                             fn: getFunctionRef(data.function),
                         };
-                    if (data.type === "pothos")
-                        return {
-                            type: "pothos",
-                            route: key,
-                            fn: getFunctionRef(data.function),
-                            schema: data.schema,
-                            output: data.output,
-                            commands: data.commands,
-                        };
                     if (data.type === "graphql")
                         return {
                             type: "graphql",
@@ -465,12 +450,6 @@ export class Api extends Construct {
                     this.createHttpIntegration(scope, routeKey, routeValue, postfixName),
                 ];
             }
-            if (routeValue.type === "pothos") {
-                return [
-                    routeValue,
-                    this.createPothosIntegration(scope, routeKey, routeValue, postfixName),
-                ];
-            }
             if (routeValue.type === "graphql") {
                 return [
                     routeValue,
@@ -541,24 +520,6 @@ export class Api extends Construct {
         };
         return integration;
     }
-    createPothosIntegration(scope, routeKey, routeProps, postfixName) {
-        const result = this.createFunctionIntegration(scope, routeKey, {
-            ...routeProps,
-            type: "function",
-            payloadFormatVersion: "2.0",
-        }, postfixName);
-        const data = this.routesData[routeKey];
-        if (data.type === "function") {
-            this.routesData[routeKey] = {
-                ...data,
-                type: "pothos",
-                output: routeProps.output,
-                schema: routeProps.schema,
-                commands: routeProps.commands,
-            };
-        }
-        return result;
-    }
     createGraphQLIntegration(scope, routeKey, routeProps, postfixName) {
         const result = this.createFunctionIntegration(scope, routeKey, {
             ...routeProps,

package/constructs/ApiGatewayV1Api.d.ts

@@ -203,7 +203,7 @@ export interface ApiGatewayV1ApiProps<Authorizers extends Record<string, ApiGate
         };
     };
 }
-export declare type ApiGatewayV1ApiRouteProps<AuthorizerKeys> = FunctionInlineDefinition | ApiGatewayV1ApiFunctionRouteProps<AuthorizerKeys>;
+export type ApiGatewayV1ApiRouteProps<AuthorizerKeys> = FunctionInlineDefinition | ApiGatewayV1ApiFunctionRouteProps<AuthorizerKeys>;
 /**
  * Specify a function route handler and configure additional options
  *
@@ -230,7 +230,7 @@ export interface ApiGatewayV1ApiFunctionRouteProps<AuthorizerKeys = never> {
         function?: lambda.IFunction;
     };
 }
-export declare type ApiGatewayV1ApiAuthorizer = ApiGatewayV1ApiUserPoolsAuthorizer | ApiGatewayV1ApiLambdaTokenAuthorizer | ApiGatewayV1ApiLambdaRequestAuthorizer;
+export type ApiGatewayV1ApiAuthorizer = ApiGatewayV1ApiUserPoolsAuthorizer | ApiGatewayV1ApiLambdaTokenAuthorizer | ApiGatewayV1ApiLambdaRequestAuthorizer;
 interface ApiGatewayV1ApiBaseAuthorizer {
     /**
      * The name of the authorizer.
@@ -491,7 +491,7 @@ export declare class ApiGatewayV1Api<Authorizers extends Record<string, ApiGatew
         /**
          * The internally created certificate
          */
-        certificate?: acm.Certificate | acm.DnsValidatedCertificate;
+        certificate?: acm.ICertificate;
     };
     private _deployment?;
     private _customDomainUrl?;

package/constructs/ApiGatewayV1Api.js

@@ -9,6 +9,7 @@ import * as apigV1AccessLog from "./util/apiGatewayV1AccessLog.js";
 import { Stack } from "./Stack.js";
 import { toCdkDuration } from "./util/duration.js";
 import { getFunctionRef, isCDKConstruct } from "./Construct.js";
+import { DnsValidatedCertificate } from "./cdk/dns-validated-certificate.js";
 import { Function as Fn, } from "./Function.js";
 const allowedMethods = [
     "ANY",
@@ -447,7 +448,7 @@ export class ApiGatewayV1Api extends Construct {
         /////////////////////
         if (!apigDomainName && !certificate) {
             if (endpointType === "edge") {
-                certificate = new acm.DnsValidatedCertificate(this, "CrossRegionCertificate", {
+                certificate = new DnsValidatedCertificate(this, "CrossRegionCertificate", {
                     domainName: domainName,
                     hostedZone: hostedZone,
                     region: "us-east-1",
@@ -665,7 +666,7 @@ export class ApiGatewayV1Api extends Construct {
         const [routeProps, lambda] = (() => {
             if (Fn.isInlineDefinition(routeValue)) {
                 const routeProps = {
-                    function: routeValue
+                    function: routeValue,
                 };
                 return [
                     routeProps,
@@ -709,7 +710,7 @@ export class ApiGatewayV1Api extends Construct {
         const root = scope.node.root;
         if (root.local) {
             lambda.addEnvironment("SST_DEBUG_IS_API_ROUTE", "1", {
-                removeInEdge: true
+                removeInEdge: true,
             });
         }
         this.functions[routeKey] = lambda;

package/constructs/App.d.ts

@@ -3,11 +3,9 @@ import * as lambda from "aws-cdk-lib/aws-lambda";
 import * as cxapi from "aws-cdk-lib/cx-api";
 import { SSTConstruct } from "./Construct.js";
 import { FunctionProps } from "./Function.js";
-import * as Config from "./Config.js";
 import { Permissions } from "./util/permission.js";
 import { StackProps } from "./Stack.js";
 import { FunctionalStack } from "./FunctionalStack.js";
-import { useBootstrap } from "../bootstrap.js";
 /**
  * @internal
  */
@@ -40,10 +38,9 @@ export interface AppDeployProps {
     readonly debugBridge?: string;
     readonly debugIncreaseTimeout?: boolean;
     readonly mode: "deploy" | "dev" | "remove";
-    readonly bootstrap: Awaited<ReturnType<typeof useBootstrap>>;
 }
-declare type AppRemovalPolicy = Lowercase<keyof typeof cdk.RemovalPolicy>;
-export declare type AppProps = cdk.AppProps;
+type AppRemovalPolicy = Lowercase<keyof typeof cdk.RemovalPolicy>;
+export type AppProps = cdk.AppProps;
 /**
  * The App construct extends cdk.App and is used internally by SST.
  */
@@ -87,8 +84,6 @@ export declare class App extends cdk.App {
     /** @internal */
     readonly appPath: string;
     /** @internal */
-    readonly bootstrap: AppDeployProps["bootstrap"];
-    /** @internal */
     defaultFunctionProps: (FunctionProps | ((stack: cdk.Stack) => FunctionProps))[];
     private _defaultRemovalPolicy?;
     /** @internal */
@@ -164,21 +159,6 @@ export declare class App extends cdk.App {
      * ```
      */
     addDefaultFunctionEnv(environment: Record<string, string>): void;
-    /**
-     * Adds additional default config to be applied to all Lambda functions in the app.
-     *
-     * @deprecated The "addDefaultFunctionConfig" method will be removed in SST v2. Pass Parameters and Secrets in through the "addDefaultFunctionBinding" function. Read more about how to upgrade here — https://docs.serverless-stack.com/upgrade-guide#upgrade-to-v116
-     *
-     * @example
-     * ```js
-     * // Change
-     * app.addDefaultFunctionConfig([STRIPE_KEY]);
-     *
-     * // To
-     * app.addDefaultFunctionBinding([STRIPE_KEY]);
-     * ```
-     */
-    addDefaultFunctionConfig(config: (Config.Secret | Config.Parameter)[]): void;
     /**
      * Binds additional default resources to be applied to all Lambda functions in the app.
      *

package/constructs/App.js

@@ -14,7 +14,7 @@ import { createRequire } from "module";
 import { Auth } from "./Auth.js";
 import { useDeferredTasks } from "./deferred_task.js";
 import { AppContext } from "./context.js";
-import { useProject } from "../app.js";
+import { useProject } from "../project.js";
 import { Logger } from "../logger.js";
 import { SiteEnv } from "../site-env.js";
 const require = createRequire(import.meta.url);
@@ -65,8 +65,6 @@ export class App extends cdk.App {
     /** @internal */
     appPath;
     /** @internal */
-    bootstrap;
-    /** @internal */
     defaultFunctionProps;
     _defaultRemovalPolicy;
     /** @internal */
@@ -93,7 +91,6 @@ export class App extends cdk.App {
         super(props);
         AppContext.provide(this);
         SiteEnv.reset();
-        this.bootstrap = deployProps.bootstrap;
         this.appPath = process.cwd();
         this.mode = deployProps.mode;
         this.local = this.mode === "dev";
@@ -186,23 +183,6 @@ export class App extends cdk.App {
             environment,
         });
     }
-    /**
-     * Adds additional default config to be applied to all Lambda functions in the app.
-     *
-     * @deprecated The "addDefaultFunctionConfig" method will be removed in SST v2. Pass Parameters and Secrets in through the "addDefaultFunctionBinding" function. Read more about how to upgrade here — https://docs.serverless-stack.com/upgrade-guide#upgrade-to-v116
-     *
-     * @example
-     * ```js
-     * // Change
-     * app.addDefaultFunctionConfig([STRIPE_KEY]);
-     *
-     * // To
-     * app.addDefaultFunctionBinding([STRIPE_KEY]);
-     * ```
-     */
-    addDefaultFunctionConfig(config) {
-        this.defaultFunctionProps.push({ config });
-    }
     /**
      * Binds additional default resources to be applied to all Lambda functions in the app.
      *
@@ -226,7 +206,6 @@ export class App extends cdk.App {
         Auth.injectConfig();
         this.ensureUniqueConstructIds();
         this.codegenTypes();
-        this.buildConstructsMetadata();
         this.createBindingSsmParameters();
         this.removeGovCloudUnsupportedResourceProperties();
         for (const child of this.node.children) {
@@ -250,6 +229,7 @@ export class App extends cdk.App {
     }
     async finish() {
         await useDeferredTasks().run();
+        this.buildConstructsMetadata();
     }
     isRunningSSTTest() {
         // Check the env var set inside test/setup-tests.js
@@ -304,7 +284,14 @@ export class App extends cdk.App {
         for (const child of this.node.children) {
             if (child instanceof Stack) {
                 const stackName = child.node.id;
-                child.setStackMetadata(byStack[stackName] || []);
+                child.addOutputs({
+                    SSTMetadata: JSON.stringify({
+                        app: this.name,
+                        stage: this.stage,
+                        version: useProject().version,
+                        metadata: byStack[stackName] || [],
+                    }),
+                });
             }
         }
     }
@@ -452,7 +439,7 @@ export class App extends cdk.App {
         fs.mkdirSync(typesPath, {
             recursive: true,
         });
-        fs.writeFileSync(`${typesPath}/index.ts`, [
+        fs.appendFileSync(`${typesPath}/index.ts`, [
             `import "sst/node/config";`,
             `declare module "sst/node/config" {`,
             `  export interface ConfigTypes {`,
@@ -476,7 +463,7 @@ export class App extends cdk.App {
                 const className = c.constructor.name;
                 const id = c.id;
                 // Case 1: variable does not have properties, ie. Secrets and Parameters
-                fs.writeFileSync(`${typesPath}/${className}-${id}.ts`, (binding.variables[0] === "."
+                fs.appendFileSync(`${typesPath}/index.ts`, (binding.variables[0] === "."
                     ? [
                         `import "sst/node/${binding.clientPackage}";`,
                         `declare module "sst/node/${binding.clientPackage}" {`,

package/constructs/AppSyncApi.d.ts

@@ -1,8 +1,7 @@
 export declare function weakImport(pkg: string): Promise<any>;
 import { Construct } from "constructs";
 import * as rds from "aws-cdk-lib/aws-rds";
-import * as cfnAppsync from "aws-cdk-lib/aws-appsync";
-import * as appsync from "@aws-cdk/aws-appsync-alpha";
+import * as appsync from "aws-cdk-lib/aws-appsync";
 import * as dynamodb from "aws-cdk-lib/aws-dynamodb";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
@@ -178,7 +177,7 @@ export interface MappingTemplateInline {
      */
     inline: string;
 }
-export declare type MappingTemplate = MappingTemplateFile | MappingTemplateInline;
+export type MappingTemplate = MappingTemplateFile | MappingTemplateInline;
 /**
  * Used to define full resolver config
  */
@@ -246,7 +245,7 @@ export interface AppSyncApiProps {
      * });
      * ```
      */
-    schema: string | string[];
+    schema?: string | string[];
     /**
      * Specify a custom domain to use in addition to the automatically generated one. SST currently supports domains that are configured using [Route 53](https://aws.amazon.com/route53/)
      *
@@ -372,7 +371,7 @@ export declare class AppSyncApi extends Construct implements SSTConstruct {
     };
     private readonly props;
     private _customDomainUrl?;
-    _cfnDomainName?: cfnAppsync.CfnDomainName;
+    _cfnDomainName?: appsync.CfnDomainName;
     private readonly functionsByDsKey;
     private readonly dataSourcesByDsKey;
     private readonly dsKeysByResKey;

package/constructs/AppSyncApi.js

@@ -11,11 +11,11 @@ export async function weakImport(pkg) {
 const { print, buildSchema } = await weakImport("graphql");
 const { mergeTypeDefs } = await weakImport("@graphql-tools/merge");
 import { Construct } from "constructs";
-import * as appsync from "@aws-cdk/aws-appsync-alpha";
+import * as appsync from "aws-cdk-lib/aws-appsync";
 import * as appSyncApiDomain from "./util/appSyncApiDomain.js";
 import { getFunctionRef, isCDKConstruct } from "./Construct.js";
 import { Function as Fn, } from "./Function.js";
-import { useProject } from "../app.js";
+import { useProject } from "../project.js";
 /////////////////////
 // Construct
 /////////////////////
@@ -278,7 +278,10 @@ export class AppSyncApi extends Construct {
                 {});
             // build schema
             let mainSchema;
-            if (typeof schema === "string") {
+            if (!schema) {
+                throw new Error(`Missing "schema" in "${id}" AppSyncApi`);
+            }
+            else if (typeof schema === "string") {
                 mainSchema = appsync.SchemaFile.fromAsset(schema);
             }
             else {
@@ -314,8 +317,8 @@ export class AppSyncApi extends Construct {
             if (domainData) {
                 this._cfnDomainName = this.cdk.graphqlApi.node.children.find((child) => child.cfnResourceType ===
                     "AWS::AppSync::DomainName");
-                const cfnDomainNameApiAssociation = this.cdk.graphqlApi.node.children.find((child) => child
-                    .cfnResourceType === "AWS::AppSync::DomainNameApiAssociation");
+                const cfnDomainNameApiAssociation = this.cdk.graphqlApi.node.children.find((child) => child.cfnResourceType ===
+                    "AWS::AppSync::DomainNameApiAssociation");
                 if (this._cfnDomainName && cfnDomainNameApiAssociation) {
                     cfnDomainNameApiAssociation.node.addDependency(this._cfnDomainName);
                 }

package/constructs/AstroSite.d.ts

@@ -1,4 +1,4 @@
-import * as lambda from "aws-cdk-lib/aws-lambda";
+import { Function as CdkFunction } from "aws-cdk-lib/aws-lambda";
 import { SsrSite } from "./SsrSite.js";
 import { EdgeFunction } from "./EdgeFunction.js";
 /**
@@ -17,9 +17,8 @@ export declare class AstroSite extends SsrSite {
         serverBuildOutputFile: string;
         clientBuildOutputDir: string;
         clientBuildVersionedSubDir: string;
-        siteStub: string;
     };
     protected validateBuildOutput(): void;
-    protected createFunctionForRegional(): lambda.Function;
+    protected createFunctionForRegional(): CdkFunction;
     protected createFunctionForEdge(): EdgeFunction;
 }

package/constructs/AstroSite.js

@@ -1,9 +1,11 @@
 import fs from "fs";
 import url from "url";
 import path from "path";
-import * as esbuild from "esbuild";
+import { buildSync } from "esbuild";
+import { Architecture } from "aws-cdk-lib/aws-lambda";
 import { SsrSite } from "./SsrSite.js";
 import { Function } from "./Function.js";
+import { useProject } from "../project.js";
 import { EdgeFunction } from "./EdgeFunction.js";
 const __dirname = url.fileURLToPath(new URL(".", import.meta.url));
 /**
@@ -23,7 +25,6 @@ export class AstroSite extends SsrSite {
             serverBuildOutputFile: "dist/server/entry.mjs",
             clientBuildOutputDir: "dist/client",
             clientBuildVersionedSubDir: "assets",
-            siteStub: path.resolve(__dirname, "../support/astro-site-html-stub"),
         };
     }
     validateBuildOutput() {
@@ -35,75 +36,64 @@ export class AstroSite extends SsrSite {
         super.validateBuildOutput();
     }
     createFunctionForRegional() {
-        const { defaults, environment } = this.props;
-        // Bundle code
-        const handler = this.isPlaceholder
-            ? path.resolve(__dirname, "../support/ssr-site-function-stub/index.handler")
-            : path.join(this.props.path, "dist", "server", "entry.handler");
+        const { memorySize, timeout, environment, bind, cdk } = this.props;
         // Create function
         const fn = new Function(this, `ServerFunction`, {
             description: "Server handler",
-            handler,
+            handler: path.join(this.props.path, "dist", "server", "entry.handler"),
+            bind,
             logRetention: "three_days",
             runtime: "nodejs16.x",
-            memorySize: defaults?.function?.memorySize || "512 MB",
-            timeout: defaults?.function?.timeout || "10 seconds",
+            memorySize,
+            timeout,
             nodejs: {
                 format: "esm",
             },
-            enableLiveDev: false,
             environment,
+            ...cdk?.server,
+            architecture: cdk?.server?.architecture === Architecture.ARM_64 ? "arm_64" : "x86_64",
         });
         fn._disableBind = true;
         return fn;
     }
     createFunctionForEdge() {
-        const { defaults, environment } = this.props;
-        // Bundle code
-        let bundlePath;
-        let handler;
-        if (this.isPlaceholder) {
-            bundlePath = path.resolve(__dirname, "../support/ssr-site-function-stub");
-            handler = "index.handler";
-        }
-        else {
-            // Create a directory that we will use to create the bundled version
-            // of the "core server build" along with our custom Lamba server handler.
-            const outputPath = path.resolve(path.join(this.sstBuildDir, `AstroSiteFunction-${this.node.id}-${this.node.addr}`));
-            const result = esbuild.buildSync({
-                entryPoints: [path.join(this.props.path, this.buildConfig.serverBuildOutputFile)],
-                target: "esnext",
-                format: "esm",
-                platform: "node",
-                metafile: true,
-                bundle: true,
-                write: true,
-                allowOverwrite: true,
-                outfile: path.join(outputPath, "entry.mjs"),
-                banner: {
-                    js: [
-                        `import { createRequire as topLevelCreateRequire } from 'module';`,
-                        `const require = topLevelCreateRequire(import.meta.url);`,
-                    ].join(""),
-                },
-            });
-            if (result.errors.length > 0) {
-                result.errors.forEach((error) => console.error(error));
-                throw new Error(`There was a problem bundling the function code for the ${this.id} AstroSite.`);
-            }
-            // Create package.json
-            fs.writeFileSync(path.join(outputPath, "package.json"), `{"type":"module"}`);
-            bundlePath = outputPath;
-            handler = "entry.handler";
+        const { timeout, memorySize, permissions, environment } = this.props;
+        // Create a directory that we will use to create the bundled version
+        // of the "core server build" along with our custom Lamba server handler.
+        const outputPath = path.resolve(path.join(useProject().paths.artifacts, `AstroSiteFunction-${this.node.id}-${this.node.addr}`));
+        const result = buildSync({
+            entryPoints: [
+                path.join(this.props.path, this.buildConfig.serverBuildOutputFile),
+            ],
+            target: "esnext",
+            format: "esm",
+            platform: "node",
+            metafile: true,
+            bundle: true,
+            write: true,
+            allowOverwrite: true,
+            outfile: path.join(outputPath, "entry.mjs"),
+            banner: {
+                js: [
+                    `import { createRequire as topLevelCreateRequire } from 'module';`,
+                    `const require = topLevelCreateRequire(import.meta.url);`,
+                ].join(""),
+            },
+        });
+        if (result.errors.length > 0) {
+            result.errors.forEach((error) => console.error(error));
+            throw new Error(`There was a problem bundling the function code for the ${this.id} AstroSite.`);
         }
+        // Create package.json
+        fs.writeFileSync(path.join(outputPath, "package.json"), `{"type":"module"}`);
         // Create function
         return new EdgeFunction(this, `Server`, {
             scopeOverride: this,
-            bundlePath,
-            handler,
-            timeout: defaults?.function?.timeout,
-            memory: defaults?.function?.memorySize,
-            permissions: defaults?.function?.permissions,
+            bundlePath: outputPath,
+            handler: "entry.handler",
+            timeout,
+            memorySize,
+            permissions,
             environment,
             format: "esm",
         });

package/constructs/Auth.js

@@ -2,7 +2,7 @@ import * as ssm from "aws-cdk-lib/aws-ssm";
 import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
 import { Construct } from "constructs";
 import { Stack } from "./Stack.js";
-import { ENVIRONMENT_PLACEHOLDER, getEnvironmentKey, getParameterPath } from "./util/functionBinding.js";
+import { ENVIRONMENT_PLACEHOLDER, getEnvironmentKey, getParameterPath, } from "./util/functionBinding.js";
 import { CustomResource } from "aws-cdk-lib";
 const PUBLIC_KEY_PROP = "publicKey";
 const PRIVATE_KEY_PROP = "privateKey";
@@ -42,15 +42,25 @@ export class Auth extends Construct {
             resourceType: "Custom::AuthKeys",
             properties: {
                 publicPath: getParameterPath(this, PUBLIC_KEY_PROP),
-                privatePath: getParameterPath(this, PRIVATE_KEY_PROP)
-            }
+                privatePath: getParameterPath(this, PRIVATE_KEY_PROP),
+            },
         });
+        stack.customResourceHandler.role?.addToPrincipalPolicy(new PolicyStatement({
+            actions: [
+                "ssm:GetParameter",
+                "ssm:PutParameter",
+                "ssm:DeleteParameter",
+            ],
+            resources: [
+                `arn:${stack.partition}:ssm:${stack.region}:${stack.account}:parameter/*`,
+            ],
+        }));
     }
     /** @internal */
     getConstructMetadata() {
         return {
             type: "Auth",
-            data: {}
+            data: {},
         };
     }
     /** @internal */
@@ -62,14 +72,14 @@ export class Auth extends Construct {
                 publicKey: {
                     environment: ENVIRONMENT_PLACEHOLDER,
                     // SSM parameters will be created by the custom resource
-                    parameter: undefined
-                }
+                    parameter: undefined,
+                },
             },
             permissions: {
                 "ssm:GetParameters": [
-                    `arn:aws:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, PUBLIC_KEY_PROP)}`
-                ]
-            }
+                    `arn:${Stack.of(this).partition}:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, PUBLIC_KEY_PROP)}`,
+                ],
+            },
         };
     }
     /**
@@ -93,7 +103,7 @@ export class Auth extends Construct {
             throw new Error("This Auth construct has already been attached to this Api construct.");
         }
         // Validate: one Api can only have one Auth attached to it
-        if (Array.from(Auth.list).some(auth => auth.apis.has(props.api))) {
+        if (Array.from(Auth.list).some((auth) => auth.apis.has(props.api))) {
             throw new Error("This Api construct already has an Auth construct attached.");
         }
         const prefix = props.prefix || "/auth";
@@ -101,8 +111,9 @@ export class Auth extends Construct {
             props.api.addRoutes(scope, {
                 [path]: {
                     type: "function",
-                    function: this.authenticator
-                }
+                    function: this.authenticator,
+                    authorizer: "none",
+                },
             });
             // Auth construct has two types of Function bindinds:
             // - Api routes: bindings defined in `getFunctionBinding()`
@@ -117,9 +128,9 @@ export class Auth extends Construct {
                     actions: ["ssm:GetParameters"],
                     effect: Effect.ALLOW,
                     resources: [
-                        `arn:aws:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, "*")}`
-                    ]
-                })
+                        `arn:${Stack.of(this).partition}:ssm:${app.region}:${app.account}:parameter${getParameterPath(this, "*")}`,
+                    ],
+                }),
             ]);
         }
         // Create a parameter for prefix
@@ -128,7 +139,7 @@ export class Auth extends Construct {
         if (this.apis.size === 0) {
             new ssm.StringParameter(this, "prefix", {
                 parameterName: getParameterPath(this, PREFIX_PROP),
-                stringValue: prefix
+                stringValue: prefix,
             });
         }
         this.apis.add(props.api);