stacktape 3.2.7 → 3.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stacktape",
-  "version": "3.2.7",
+  "version": "3.3.1",
   "description": "PaaS 2.0 that deploys to your own AWS account.",
   "author": "Stacktape team <support@stacktape.com>",
   "license": "MIT",

package/plain.d.ts

@@ -9707,6 +9707,7 @@ export interface UserAuthPoolProps {
    * Stacktape does this by creating a `WebACLAssociation` between the user pool and the referenced firewall.
    */
   useFirewall?: string;
+  customDomain?: UserPoolCustomDomainConfiguration;
   /**
    * #### Generate a client secret
    *
@@ -10130,6 +10131,49 @@ export interface IdentityProvider {
  * In most cases you don't need to set this – Stacktape configures sensible defaults for common providers.
  */
 export interface RecordStringAny {}
+/**
+ * #### Custom Domain
+ *
+ * ---
+ *
+ * Configures a custom domain for the Cognito Hosted UI (e.g., `auth.example.com`).
+ *
+ * When configured, Cognito creates a CloudFront distribution to serve your custom domain.
+ * Stacktape automatically:
+ * - Configures the user pool domain with your custom domain and an ACM certificate from us-east-1
+ * - Creates a DNS record pointing to the CloudFront distribution
+ *
+ * The domain must be registered and verified in your Stacktape account with a valid ACM certificate in us-east-1.
+ */
+export interface UserPoolCustomDomainConfiguration {
+  /**
+   * #### Domain Name
+   *
+   * ---
+   *
+   * Fully qualified domain name for the Cognito Hosted UI (e.g., `auth.example.com`).
+   */
+  domainName: string;
+  /**
+   * #### Custom Certificate ARN
+   *
+   * ---
+   *
+   * ARN of an ACM certificate in **us-east-1** to use for this domain.
+   * By default, Stacktape uses the certificate associated with your domain in us-east-1.
+   *
+   * The certificate must be in us-east-1 because Cognito uses CloudFront for custom domains.
+   */
+  customCertificateArn?: string;
+  /**
+   * #### Disable DNS Record Creation
+   *
+   * ---
+   *
+   * If `true`, Stacktape will not create a DNS record for this domain.
+   */
+  disableDnsRecordCreation?: boolean;
+}
 /**
  * #### Event Bus
  *