terraconstructs 0.0.11 → 0.0.12

package/lib/aws/compute/nat.js

@@ -0,0 +1,455 @@
+"use strict";
+var _a, _b, _c, _d, _e;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NatInstanceImage = exports.NatInstanceProviderV2 = exports.NatInstanceProvider = exports.NatGatewayProvider = exports.NatProvider = exports.NatTrafficDirection = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+// https://github.com/aws/aws-cdk/blob/v2.175.1/packages/aws-cdk-lib/aws-ec2/lib/nat.ts
+const cdktf_1 = require("cdktf");
+const connections_1 = require("./connections");
+const instance_1 = require("./instance");
+const instance_types_1 = require("./instance-types");
+const machine_image_1 = require("./machine-image");
+const port_1 = require("./port");
+const security_group_1 = require("./security-group");
+const user_data_1 = require("./user-data");
+const vpc_1 = require("./vpc");
+const iam = require("../iam");
+/**
+ * Direction of traffic to allow all by default.
+ */
+var NatTrafficDirection;
+(function (NatTrafficDirection) {
+    /**
+     * Allow all outbound traffic and disallow all inbound traffic.
+     */
+    NatTrafficDirection["OUTBOUND_ONLY"] = "OUTBOUND_ONLY";
+    /**
+     * Allow all outbound and inbound traffic.
+     */
+    NatTrafficDirection["INBOUND_AND_OUTBOUND"] = "INBOUND_AND_OUTBOUND";
+    /**
+     * Disallow all outbound and inbound traffic.
+     */
+    NatTrafficDirection["NONE"] = "NONE";
+})(NatTrafficDirection || (exports.NatTrafficDirection = NatTrafficDirection = {}));
+/**
+ * NAT providers
+ *
+ * Determines what type of NAT provider to create, either NAT gateways or NAT
+ * instance.
+ *
+ *
+ */
+class NatProvider {
+    /**
+     * Use NAT Gateways to provide NAT services for your VPC
+     *
+     * NAT gateways are managed by AWS.
+     *
+     * @see https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
+     */
+    static gateway(props = {}) {
+        return new NatGatewayProvider(props);
+    }
+    /**
+     * Use NAT instances to provide NAT services for your VPC
+     *
+     * NAT instances are managed by you, but in return allow more configuration.
+     *
+     * Be aware that instances created using this provider will not be
+     * automatically replaced if they are stopped for any reason. You should implement
+     * your own NatProvider based on AutoScaling groups if you need that.
+     *
+     * @see https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html
+     *
+     * @deprecated use instanceV2. 'instance' is deprecated since NatInstanceProvider
+     * uses a instance image that has reached EOL on Dec 31 2023
+     */
+    static instance(props) {
+        return new NatInstanceProvider(props);
+    }
+    /**
+     * Use NAT instances to provide NAT services for your VPC
+     *
+     * NAT instances are managed by you, but in return allow more configuration.
+     *
+     * Be aware that instances created using this provider will not be
+     * automatically replaced if they are stopped for any reason. You should implement
+     * your own NatProvider based on AutoScaling groups if you need that.
+     *
+     * @see https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html
+     */
+    static instanceV2(props) {
+        return new NatInstanceProviderV2(props);
+    }
+}
+exports.NatProvider = NatProvider;
+_a = JSII_RTTI_SYMBOL_1;
+NatProvider[_a] = { fqn: "terraconstructs.aws.compute.NatProvider", version: "0.0.12" };
+/**
+ * Provider for NAT Gateways
+ */
+class NatGatewayProvider extends NatProvider {
+    constructor(props = {}) {
+        super();
+        this.props = props;
+        this.gateways = new PrefSet();
+    }
+    configureNat(options) {
+        if (this.props.eipAllocationIds != null &&
+            !cdktf_1.Token.isUnresolved(this.props.eipAllocationIds) &&
+            this.props.eipAllocationIds.length < options.natSubnets.length) {
+            throw new Error(`Not enough NAT gateway EIP allocation IDs (${this.props.eipAllocationIds.length} provided) for the requested subnet count (${options.natSubnets.length} needed).`);
+        }
+        // Create the NAT gateways
+        let i = 0;
+        for (const sub of options.natSubnets) {
+            const eipAllocationId = this.props.eipAllocationIds
+                ? pickN(i, this.props.eipAllocationIds)
+                : undefined;
+            const gateway = sub.addNatGateway(eipAllocationId);
+            this.gateways.add(sub.availabilityZone, gateway.id);
+            i++;
+        }
+        // Add routes to them in the private subnets
+        for (const sub of options.privateSubnets) {
+            this.configureSubnet(sub);
+        }
+    }
+    configureSubnet(subnet) {
+        const az = subnet.availabilityZone;
+        const gatewayId = this.gateways.pick(az);
+        subnet.addRoute("DefaultRoute", {
+            routerType: vpc_1.RouterType.NAT_GATEWAY,
+            routerId: gatewayId,
+            enablesInternetConnectivity: true,
+        });
+    }
+    get configuredGateways() {
+        return this.gateways.values().map((x) => ({ az: x[0], gatewayId: x[1] }));
+    }
+}
+exports.NatGatewayProvider = NatGatewayProvider;
+_b = JSII_RTTI_SYMBOL_1;
+NatGatewayProvider[_b] = { fqn: "terraconstructs.aws.compute.NatGatewayProvider", version: "0.0.12" };
+/**
+ * NAT provider which uses NAT Instances
+ *
+ * @deprecated use NatInstanceProviderV2. NatInstanceProvider is deprecated since
+ * the instance image used has reached EOL on Dec 31 2023
+ */
+class NatInstanceProvider extends NatProvider {
+    constructor(props) {
+        super();
+        this.props = props;
+        this.gateways = new PrefSet();
+        if (props.defaultAllowedTraffic !== undefined &&
+            props.allowAllTraffic !== undefined) {
+            throw new Error("Can not specify both of 'defaultAllowedTraffic' and 'defaultAllowedTraffic'; prefer 'defaultAllowedTraffic'");
+        }
+        if (props.keyName && props.keyPair) {
+            throw new Error("Cannot specify both of 'keyName' and 'keyPair'; prefer 'keyPair'");
+        }
+    }
+    configureNat(options) {
+        const defaultDirection = this.props.defaultAllowedTraffic ??
+            ((this.props.allowAllTraffic ?? true)
+                ? NatTrafficDirection.INBOUND_AND_OUTBOUND
+                : NatTrafficDirection.OUTBOUND_ONLY);
+        // Create the NAT instances. They can share a security group and a Role.
+        const machineImage = this.props.machineImage ?? new NatInstanceImage();
+        this._securityGroup =
+            this.props.securityGroup ??
+                new security_group_1.SecurityGroup(options.vpc, "NatSecurityGroup", {
+                    vpc: options.vpc,
+                    description: "Security Group for NAT instances",
+                    allowAllOutbound: isOutboundAllowed(defaultDirection),
+                });
+        this._connections = new connections_1.Connections({
+            securityGroups: [this._securityGroup],
+        });
+        if (isInboundAllowed(defaultDirection)) {
+            this.connections.allowFromAnyIpv4(port_1.Port.allTraffic());
+        }
+        // FIXME: Ideally, NAT instances don't have a role at all, but
+        // 'Instance' does not allow that right now.
+        const role = new iam.Role(options.vpc, "NatRole", {
+            assumedBy: new iam.ServicePrincipal("compute.amazonaws.com"),
+        });
+        for (const sub of options.natSubnets) {
+            const natInstance = new instance_1.Instance(sub, "NatInstance", {
+                instanceType: this.props.instanceType,
+                machineImage,
+                sourceDestCheck: false, // Required for NAT
+                vpc: options.vpc,
+                vpcSubnets: { subnets: [sub] },
+                securityGroup: this._securityGroup,
+                role,
+                keyPair: this.props.keyPair,
+                keyName: this.props.keyName,
+                creditSpecification: this.props.creditSpecification,
+            });
+            // NAT instance routes all traffic, both ways
+            this.gateways.add(sub.availabilityZone, natInstance);
+        }
+        // Add routes to them in the private subnets
+        for (const sub of options.privateSubnets) {
+            this.configureSubnet(sub);
+        }
+    }
+    /**
+     * The Security Group associated with the NAT instances
+     */
+    get securityGroup() {
+        if (!this._securityGroup) {
+            throw new Error("Pass the NatInstanceProvider to a Vpc before accessing 'securityGroup'");
+        }
+        return this._securityGroup;
+    }
+    /**
+     * Manage the Security Groups associated with the NAT instances
+     */
+    get connections() {
+        if (!this._connections) {
+            throw new Error("Pass the NatInstanceProvider to a Vpc before accessing 'connections'");
+        }
+        return this._connections;
+    }
+    get configuredGateways() {
+        return this.gateways
+            .values()
+            .map((x) => ({ az: x[0], gatewayId: x[1].instanceId }));
+    }
+    configureSubnet(subnet) {
+        const az = subnet.availabilityZone;
+        const gatewayInstance = this.gateways.pick(az);
+        // TODO: Terraform provider does not support RouterType.INSTANCE
+        // subnet.addRoute("DefaultRoute", {
+        //   routerType: RouterType.INSTANCE,
+        //   routerId: gatewayInstance.instanceId,
+        //   enablesInternetConnectivity: true,
+        // });
+        // if (!gatewayInstance.primaryNetworkInterfaceId) {
+        //   throw new Error(
+        //     `Primary network interface not found for gateway instance ${gatewayInstance.node.path}`,
+        //   );
+        // }
+        // If there is no primary network interface, the value is ""
+        // https://github.com/hashicorp/terraform-provider-aws/blob/v5.88.0/internal/service/ec2/ec2_instance.go#L1340
+        subnet.addRoute("DefaultRoute", {
+            routerType: vpc_1.RouterType.NETWORK_INTERFACE,
+            routerId: gatewayInstance.primaryNetworkInterfaceId,
+            enablesInternetConnectivity: true,
+        });
+    }
+}
+exports.NatInstanceProvider = NatInstanceProvider;
+_c = JSII_RTTI_SYMBOL_1;
+NatInstanceProvider[_c] = { fqn: "terraconstructs.aws.compute.NatInstanceProvider", version: "0.0.12" };
+/**
+ * Preferential set
+ *
+ * Picks the value with the given key if available, otherwise distributes
+ * evenly among the available options.
+ */
+class PrefSet {
+    constructor() {
+        this.map = {};
+        this.vals = new Array();
+        this.next = 0;
+    }
+    add(pref, value) {
+        this.map[pref] = value;
+        this.vals.push([pref, value]);
+    }
+    pick(pref) {
+        if (this.vals.length === 0) {
+            throw new Error("Cannot pick, set is empty");
+        }
+        if (pref in this.map) {
+            return this.map[pref];
+        }
+        return this.vals[this.next++ % this.vals.length][1];
+    }
+    values() {
+        return this.vals;
+    }
+}
+/**
+ * Modern NAT provider which uses NAT Instances.
+ * The instance uses Amazon Linux 2023 as the operating system.
+ */
+class NatInstanceProviderV2 extends NatProvider {
+    /**
+     * Array of gateway instances spawned by the provider after internal configuration
+     */
+    get gatewayInstances() {
+        return this.gateways.values().map(([, instance]) => instance);
+    }
+    constructor(props) {
+        super();
+        this.props = props;
+        this.gateways = new PrefSet();
+        if (props.defaultAllowedTraffic !== undefined &&
+            props.allowAllTraffic !== undefined) {
+            throw new Error("Can not specify both of 'defaultAllowedTraffic' and 'defaultAllowedTraffic'; prefer 'defaultAllowedTraffic'");
+        }
+        if (props.keyName && props.keyPair) {
+            throw new Error("Cannot specify both of 'keyName' and 'keyPair'; prefer 'keyPair'");
+        }
+    }
+    configureNat(options) {
+        const defaultDirection = this.props.defaultAllowedTraffic ??
+            ((this.props.allowAllTraffic ?? true)
+                ? NatTrafficDirection.INBOUND_AND_OUTBOUND
+                : NatTrafficDirection.OUTBOUND_ONLY);
+        // Create the NAT instances. They can share a security group and a Role. The new NAT instance created uses latest
+        // Amazon Linux 2023 image. This is important since the original NatInstanceProvider uses an instance image that has
+        // reached EOL on Dec 31 2023
+        const machineImage = this.props.machineImage ||
+            new machine_image_1.AmazonLinuxImage({
+                generation: machine_image_1.AmazonLinuxGeneration.AMAZON_LINUX_2023,
+                cpuType: this.props.instanceType.architecture == instance_types_1.InstanceArchitecture.ARM_64
+                    ? machine_image_1.AmazonLinuxCpuType.ARM_64
+                    : undefined,
+            });
+        this._securityGroup =
+            this.props.securityGroup ??
+                new security_group_1.SecurityGroup(options.vpc, "NatSecurityGroup", {
+                    vpc: options.vpc,
+                    description: "Security Group for NAT instances",
+                    allowAllOutbound: isOutboundAllowed(defaultDirection),
+                });
+        this._connections = new connections_1.Connections({
+            securityGroups: [this._securityGroup],
+        });
+        if (isInboundAllowed(defaultDirection)) {
+            this.connections.allowFromAnyIpv4(port_1.Port.allTraffic());
+        }
+        let userData = this.props.userData;
+        if (!userData) {
+            userData = user_data_1.UserData.forLinux();
+            userData.addCommands(...NatInstanceProviderV2.DEFAULT_USER_DATA_COMMANDS);
+        }
+        for (const sub of options.natSubnets) {
+            const natInstance = new instance_1.Instance(sub, "NatInstance", {
+                instanceType: this.props.instanceType,
+                machineImage,
+                sourceDestCheck: false, // Required for NAT
+                vpc: options.vpc,
+                vpcSubnets: { subnets: [sub] },
+                associatePublicIpAddress: this.props.associatePublicIpAddress,
+                securityGroup: this._securityGroup,
+                keyPair: this.props.keyPair,
+                keyName: this.props.keyName,
+                creditSpecification: this.props.creditSpecification,
+                userData,
+            });
+            // NAT instance routes all traffic, both ways
+            this.gateways.add(sub.availabilityZone, natInstance);
+        }
+        // Add routes to them in the private subnets
+        for (const sub of options.privateSubnets) {
+            this.configureSubnet(sub);
+        }
+    }
+    /**
+     * The Security Group associated with the NAT instances
+     */
+    get securityGroup() {
+        if (!this._securityGroup) {
+            throw new Error("Pass the NatInstanceProvider to a Vpc before accessing 'securityGroup'");
+        }
+        return this._securityGroup;
+    }
+    /**
+     * Manage the Security Groups associated with the NAT instances
+     */
+    get connections() {
+        if (!this._connections) {
+            throw new Error("Pass the NatInstanceProvider to a Vpc before accessing 'connections'");
+        }
+        return this._connections;
+    }
+    get configuredGateways() {
+        return this.gateways
+            .values()
+            .map((x) => ({ az: x[0], gatewayId: x[1].instanceId }));
+    }
+    configureSubnet(subnet) {
+        const az = subnet.availabilityZone;
+        const gatewayInstance = this.gateways.pick(az);
+        // TODO: Terraform provider does not support RouterType.INSTANCE
+        // subnet.addRoute("DefaultRoute", {
+        //   routerType: RouterType.INSTANCE,
+        //   routerId: gatewayInstance.instanceId,
+        //   enablesInternetConnectivity: true,
+        // });
+        // if (!gatewayInstance.primaryNetworkInterface) {
+        //   throw new Error(
+        //     `Primary network interface not found for gateway instance ${gatewayInstance.node.path}`,
+        //   );
+        // }
+        // If there is no primary network interface, the value is ""
+        // https://github.com/hashicorp/terraform-provider-aws/blob/v5.88.0/internal/service/ec2/ec2_instance.go#L1340
+        subnet.addRoute("DefaultRoute", {
+            routerType: vpc_1.RouterType.NETWORK_INTERFACE,
+            routerId: gatewayInstance.primaryNetworkInterfaceId,
+            enablesInternetConnectivity: true,
+        });
+    }
+}
+exports.NatInstanceProviderV2 = NatInstanceProviderV2;
+_d = JSII_RTTI_SYMBOL_1;
+NatInstanceProviderV2[_d] = { fqn: "terraconstructs.aws.compute.NatInstanceProviderV2", version: "0.0.12" };
+/**
+ * Amazon Linux 2023 NAT instance user data commands
+ * Enable iptables on the instance, enable persistent IP forwarding, configure NAT on instance
+ * @see https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html#create-nat-ami
+ */
+NatInstanceProviderV2.DEFAULT_USER_DATA_COMMANDS = [
+    "yum install iptables-services -y",
+    "systemctl enable iptables",
+    "systemctl start iptables",
+    'echo "net.ipv4.ip_forward=1" > /etc/sysctl.d/custom-ip-forwarding.conf',
+    "sudo sysctl -p /etc/sysctl.d/custom-ip-forwarding.conf",
+    "sudo /sbin/iptables -t nat -A POSTROUTING -o $(route | awk '/^default/{print $NF}') -j MASQUERADE",
+    "sudo /sbin/iptables -F FORWARD",
+    "sudo service iptables save",
+];
+/**
+ * Machine image representing the latest NAT instance image
+ *
+ *
+ */
+class NatInstanceImage extends machine_image_1.LookupMachineImage {
+    constructor() {
+        super({
+            name: "amzn-ami-vpc-nat-*",
+            owners: ["amazon"],
+        });
+    }
+}
+exports.NatInstanceImage = NatInstanceImage;
+_e = JSII_RTTI_SYMBOL_1;
+NatInstanceImage[_e] = { fqn: "terraconstructs.aws.compute.NatInstanceImage", version: "0.0.12" };
+function isOutboundAllowed(direction) {
+    return (direction === NatTrafficDirection.INBOUND_AND_OUTBOUND ||
+        direction === NatTrafficDirection.OUTBOUND_ONLY);
+}
+function isInboundAllowed(direction) {
+    return direction === NatTrafficDirection.INBOUND_AND_OUTBOUND;
+}
+/**
+ * Token-aware pick index function
+ */
+function pickN(i, xs) {
+    if (cdktf_1.Token.isUnresolved(xs)) {
+        return cdktf_1.Fn.element(xs, i);
+    }
+    if (i >= xs.length) {
+        throw new Error(`Cannot get element ${i} from ${xs}`);
+    }
+    return xs[i];
+}
+//# sourceMappingURL=data:application/json;base64,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