terraconstructs 0.0.8

package/lib/aws/compute/function-alias.d.ts

@@ -0,0 +1,148 @@
+import { lambdaAlias } from "@cdktf/provider-aws";
+import { Construct } from "constructs";
+import { Architecture } from "./architecture";
+import { EventInvokeConfigOptions } from "./event-invoke-config";
+import { IFunction, QualifiedFunctionBase } from "./function-base";
+/**
+ * Outputs that can be exposed through the grid
+ */
+export interface AliasOutputs {
+    /**
+     * The Amazon Resource Name (ARN) identifying your Lambda function alias.
+     */
+    readonly name: string;
+    /**
+     * The ARN to be used for invoking Lambda Function from API Gateway - to be used in `aws_api_gateway_integration`'s uri
+     */
+    readonly invokeArn: string;
+}
+export interface IAlias extends IFunction {
+    /** strongly typed aliasOutputs */
+    readonly aliasOutputs: AliasOutputs;
+    /**
+     * Name of this alias.
+     *
+     * @attribute
+     */
+    readonly aliasName: string;
+    /**
+     * The underlying Lambda function
+     */
+    readonly lambda: IFunction;
+    /**
+     * The underlying Lambda function version.
+     */
+    readonly version: string;
+}
+/**
+ * Options for `lambda.Alias`.
+ */
+export interface AliasOptions extends EventInvokeConfigOptions {
+    /**
+     * Description for the alias
+     *
+     * @default No description
+     */
+    readonly description?: string;
+    /**
+     * Additional versions with individual weights this alias points to
+     *
+     * Individual additional version weights specified here should add up to
+     * (less than) one. All remaining weight is routed to the default
+     * version.
+     *
+     * For example, the config is
+     *
+     *    version: "1"
+     *    additionalVersions: [{ version: "2", weight: 0.05 }]
+     *
+     * Then 5% of traffic will be routed to function version 2, while
+     * the remaining 95% of traffic will be routed to function version 1.
+     *
+     * @default No additional versions
+     */
+    readonly additionalVersions?: VersionWeight[];
+}
+/**
+ * Properties for a new Lambda alias
+ */
+export interface AliasProps extends AliasOptions {
+    /**
+     * Name of this alias
+     *
+     * Minimum length of 1. Maximum length of 128.
+     * Pattern: (?!^[0-9]+$)([a-zA-Z0-9-_]+)
+     *
+     */
+    readonly aliasName: string;
+    /**
+     * Function this alias refers to
+     */
+    readonly function: IFunction;
+    /**
+     * Function version this alias refers to
+     *
+     * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/aws/5.68.0/docs/resources/lambda_alias#function_version LambdaAlias#function_version}
+     * pattern (\$LATEST|[0-9]+)
+     */
+    readonly version: string;
+}
+export interface AliasAttributes {
+    readonly aliasName: string;
+    readonly function: IFunction;
+}
+/**
+ * A new alias to a particular version of a Lambda function.
+ */
+export declare class Alias extends QualifiedFunctionBase implements IAlias {
+    static fromAliasAttributes(scope: Construct, id: string, attrs: AliasAttributes): IAlias;
+    readonly resource: lambdaAlias.LambdaAlias;
+    private readonly _aliasOutputs;
+    get aliasOutputs(): AliasOutputs;
+    get outputs(): Record<string, any>;
+    /**
+     * Name of this alias.
+     *
+     * @attribute
+     */
+    readonly aliasName: string;
+    /**
+     * Name of this alias
+     *
+     * Used to be able to use Alias in place of a regular Lambda. Lambda accepts
+     * ARNs everywhere it accepts function names.
+     */
+    readonly functionName: string;
+    readonly lambda: IFunction;
+    readonly architecture: Architecture;
+    readonly version: string;
+    /**
+     * ARN of this alias
+     *
+     * Used to be able to use Alias in place of a regular Lambda. Lambda accepts
+     * ARNs everywhere it accepts function names.
+     */
+    readonly functionArn: string;
+    protected readonly qualifier: string;
+    protected readonly canCreatePermissions: boolean;
+    constructor(scope: Construct, id: string, props: AliasProps);
+    get grantPrincipal(): import("../iam").IPrincipal;
+    get role(): import("../iam").IRole | undefined;
+    /**
+     * Calculate the routingConfig parameter from the input props
+     */
+    private determineRoutingConfig;
+}
+/**
+ * A version/weight pair for routing traffic to Lambda functions
+ */
+export interface VersionWeight {
+    /**
+     * The version to route traffic to
+     */
+    readonly version: string;
+    /**
+     * How much weight to assign to this version (0..1)
+     */
+    readonly weight: number;
+}

package/lib/aws/compute/function-alias.js

@@ -0,0 +1,176 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Alias = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const provider_aws_1 = require("@cdktf/provider-aws");
+const function_base_1 = require("./function-base");
+/**
+ * A new alias to a particular version of a Lambda function.
+ */
+class Alias extends function_base_1.QualifiedFunctionBase {
+    static fromAliasAttributes(scope, id, attrs) {
+        class Imported extends function_base_1.QualifiedFunctionBase {
+            /**
+             * Lambda function version which the alias uses.
+             */
+            get version() {
+                return this.resource.functionVersion;
+            }
+            get aliasOutputs() {
+                return {
+                    name: attrs.aliasName,
+                    invokeArn: this.resource.invokeArn,
+                };
+            }
+            get outputs() {
+                return this.aliasOutputs;
+            }
+            constructor(s, i) {
+                super(s, i);
+                this.aliasName = attrs.aliasName;
+                this.lambda = attrs.function;
+                this.functionArn = `${attrs.function.functionArn}:${attrs.aliasName}`;
+                this.functionName = `${attrs.function.functionName}:${attrs.aliasName}`;
+                this.grantPrincipal = attrs.function.grantPrincipal;
+                this.role = attrs.function.role;
+                this.architecture = attrs.function.architecture;
+                this.canCreatePermissions = this._isStackAccount();
+                this.qualifier = attrs.aliasName;
+                this.resource = new provider_aws_1.dataAwsLambdaAlias.DataAwsLambdaAlias(this, "Resource", {
+                    name: this.aliasName,
+                    functionName: attrs.function.functionName,
+                });
+            }
+        }
+        return new Imported(scope, id);
+    }
+    get aliasOutputs() {
+        return this._aliasOutputs;
+    }
+    get outputs() {
+        return this._aliasOutputs;
+    }
+    // // TODO: Re-Add scalable functions
+    // private scalableAlias?: ScalableFunctionAttribute;
+    // private readonly scalingRole: iam.IRole;
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        this.canCreatePermissions = true;
+        this.lambda = props.function;
+        // TODO: Does it make sense to just prefix aliasName with GridUUID?
+        // should use this.stack.uniqueResourceName instead?
+        this.aliasName = `${this.gridUUID}-${props.aliasName}`;
+        this.version = props.version;
+        this.architecture = this.lambda.architecture;
+        this.resource = new provider_aws_1.lambdaAlias.LambdaAlias(this, "Resource", {
+            name: this.aliasName,
+            description: props.description,
+            functionName: this.lambda.functionName,
+            functionVersion: props.version,
+            routingConfig: this.determineRoutingConfig(props),
+        });
+        // TODO: Add aws_lambda_provisioned_concurrency_config
+        // // Use a Service Linked Role
+        // // https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-service-linked-roles.html
+        // this.scalingRole = iam.Role.fromRoleArn(
+        //   this,
+        //   "ScalingRole",
+        //   this.stack.formatArn({
+        //     service: "iam",
+        //     region: "",
+        //     resource:
+        //       "role/aws-service-role/lambda.application-autoscaling.amazonaws.com",
+        //     resourceName:
+        //       "AWSServiceRoleForApplicationAutoScaling_LambdaConcurrency",
+        //   }),
+        // );
+        // includes qualifier
+        this.functionArn = this.resource.invokeArn;
+        // this.getResourceArnAttribute(alias.ref, {
+        //   service: "lambda",
+        //   resource: "function",
+        //   resourceName: `${this.lambda.functionName}:${this.aliasName}`,
+        //   arnFormat: ArnFormat.COLON_RESOURCE_NAME,
+        // });
+        this.qualifier = this.aliasName;
+        if (props.onFailure ||
+            props.onSuccess ||
+            props.maxEventAge ||
+            props.retryAttempts !== undefined) {
+            this.configureAsyncInvoke({
+                onFailure: props.onFailure,
+                onSuccess: props.onSuccess,
+                maxEventAge: props.maxEventAge,
+                retryAttempts: props.retryAttempts,
+            });
+        }
+        // ARN parsing splits on `:`, so we can only get the function's name from the ARN as resourceName...
+        // And we're parsing it out (instead of using the underlying function directly) in order to have use of it incur
+        // an implicit dependency on the resource.
+        //`${this.stack.splitArn(this.functionArn, ArnFormat.COLON_RESOURCE_NAME).resourceName!}:${this.aliasName}`;
+        this.functionName = this.resource.functionName;
+        this._aliasOutputs = {
+            invokeArn: this.resource.invokeArn,
+            name: this.aliasName,
+        };
+    }
+    get grantPrincipal() {
+        return this.lambda.grantPrincipal;
+    }
+    get role() {
+        return this.lambda.role;
+    }
+    // /**
+    //  * Configure provisioned concurrency autoscaling on a function alias. Returns a scalable attribute that can call
+    //  * `scaleOnUtilization()` and `scaleOnSchedule()`.
+    //  *
+    //  * @param options Autoscaling options
+    //  */
+    // public addAutoScaling(
+    //   options: AutoScalingOptions,
+    // ): IScalableFunctionAttribute {
+    //   if (this.scalableAlias) {
+    //     throw new Error("AutoScaling already enabled for this alias");
+    //   }
+    //   return (this.scalableAlias = new ScalableFunctionAttribute(
+    //     this,
+    //     "AliasScaling",
+    //     {
+    //       minCapacity: options.minCapacity ?? 1,
+    //       maxCapacity: options.maxCapacity,
+    //       resourceId: `function:${this.functionName}`,
+    //       dimension: "lambda:function:ProvisionedConcurrency",
+    //       serviceNamespace: appscaling.ServiceNamespace.LAMBDA,
+    //       role: this.scalingRole,
+    //     },
+    //   ));
+    // }
+    /**
+     * Calculate the routingConfig parameter from the input props
+     */
+    determineRoutingConfig(props) {
+        if (!props.additionalVersions || props.additionalVersions.length === 0) {
+            return undefined;
+        }
+        let total = 0;
+        const additionalVersionWeights = {};
+        for (const vw of props.additionalVersions) {
+            if (vw.weight < 0 || vw.weight > 1) {
+                throw new Error(`Additional version weight must be between 0 and 1, got: ${vw.weight}`);
+            }
+            total += vw.weight;
+            additionalVersionWeights[vw.version] = vw.weight;
+        }
+        if (total > 1) {
+            throw new Error(`Sum of additional version weights must not exceed 1, got: ${total}`);
+        }
+        return {
+            additionalVersionWeights,
+        };
+    }
+}
+exports.Alias = Alias;
+_a = JSII_RTTI_SYMBOL_1;
+Alias[_a] = { fqn: "terraconstructs.aws.compute.Alias", version: "0.0.8" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/aws/compute/function-base.d.ts

@@ -0,0 +1,314 @@
+import { IResolvable } from "cdktf";
+import { Node } from "constructs";
+import { AwsConstructBase, IAwsConstruct } from "../aws-construct";
+import { Architecture } from "./architecture";
+import { EventInvokeConfigOptions } from "./event-invoke-config";
+import { EventSourceMapping, EventSourceMappingOptions } from "./event-source-mapping";
+import { Permission } from "./function-permission";
+import { FunctionUrlOptions, FunctionUrl } from "./function-url";
+import * as iam from "../iam";
+/**
+ * Represents a Lambda function defined outside of this stack.
+ */
+export interface FunctionAttributes {
+    /**
+     * The ARN of the Lambda function.
+     *
+     * Format: arn:<partition>:lambda:<region>:<account-id>:function:<function-name>
+     */
+    readonly functionArn: string;
+    /**
+     * The IAM execution role associated with this function.
+     *
+     * If the role is not specified, any role-related operations will no-op.
+     */
+    readonly role?: iam.IRole;
+    /**
+     * The security group of this Lambda, if in a VPC.
+     *
+     * This needs to be given in order to support allowing connections
+     * to this Lambda.
+     */
+    readonly securityGroup?: string | IResolvable;
+    /**
+     * Setting this property informs the CDK that the imported function is in the same environment as the stack.
+     * This affects certain behaviours such as, whether this function's permission can be modified.
+     * When not configured, the CDK attempts to auto-determine this. For environment agnostic stacks, i.e., stacks
+     * where the account is not specified with the `env` property, this is determined to be false.
+     *
+     * Set this to property *ONLY IF* the imported function is in the same account as the stack
+     * it's imported in.
+     * @default - depends: true, if the Stack is configured with an explicit `env` (account and region) and the account is the same as this function.
+     * For environment-agnostic stacks this will default to `false`.
+     */
+    readonly sameEnvironment?: boolean;
+    /**
+     * Setting this property informs the TerraConstruct that the imported function ALREADY HAS the necessary permissions
+     * for what you are trying to do. When not configured, E.T, attempts to auto-determine whether or not
+     * additional permissions are necessary on the function when grant APIs are used. If TerraConstruct tried to add
+     * permissions on an imported lambda, it will fail.
+     *
+     * Set this property *ONLY IF* you are committing to manage the imported function's permissions outside of
+     * this TerraConstruct stack. You are acknowledging that your TerraConstruct code alone will have insufficient permissions to access the
+     * imported function.
+     *
+     * @default false
+     */
+    readonly skipPermissions?: boolean;
+    /**
+     * The architecture of this Lambda Function (this is an optional attribute and defaults to X86_64).
+     * @default - Architecture.X86_64
+     */
+    readonly architecture?: Architecture;
+}
+/**
+ * A Lambda function.
+ */
+export interface IFunction extends IAwsConstruct, iam.IGrantable {
+    /**
+     * The name of the function.
+     *
+     * @attribute
+     */
+    readonly functionName: string;
+    /**
+     * The ARN of the function.
+     *
+     * @attribute
+     */
+    readonly functionArn: string;
+    /**
+     * The IAM role associated with this function.
+     */
+    readonly role?: iam.IRole;
+    /**
+     * The construct node where permissions are attached.
+     */
+    readonly permissionsNode: Node;
+    /**
+     * The system architectures compatible with this lambda function.
+     */
+    readonly architecture: Architecture;
+    /**
+     * Adds an event source that maps to this AWS Lambda function.
+     * @param id construct ID
+     * @param options mapping options
+     */
+    addEventSourceMapping(id: string, options: EventSourceMappingOptions): EventSourceMapping;
+    /**
+     * Adds an event source to this function.
+     *
+     * The following example adds an SQS Queue as an event source:
+     * ```
+     * import { compute } from 'terraconstructs';
+     * myFunction.addEventSource(new compute.SqsEventSource(myQueue));
+     * ```
+     */
+    addEventSource(source: IEventSource): void;
+    /**
+     * Adds a permission to the Lambda resource policy.
+     * @param id The id for the permission construct
+     * @param permission The permission to grant to this Lambda function. @see Permission for details.
+     */
+    addPermission(id: string, permission: Permission): void;
+    /**
+     * Adds a statement to the IAM role assumed by the instance.
+     */
+    addToRolePolicy(statement: iam.PolicyStatement): void;
+    /**
+     * Grant the given identity permissions to invoke this Lambda
+     */
+    grantInvoke(identity: iam.IGrantable): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke the $LATEST version or
+     * unqualified version of this Lambda
+     */
+    grantInvokeLatestVersion(identity: iam.IGrantable): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke the given (or latest) version of this Lambda
+     */
+    grantInvokeVersion(identity: iam.IGrantable, version: string): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke this Lambda Function URL
+     */
+    grantInvokeUrl(identity: iam.IGrantable): iam.Grant;
+    /**
+     * Grant multiple principals the ability to invoke this Lambda via CompositePrincipal
+     */
+    grantInvokeCompositePrincipal(compositePrincipal: iam.CompositePrincipal): iam.Grant[];
+    /**
+     * Configures options for asynchronous invocation.
+     */
+    configureAsyncInvoke(options: EventInvokeConfigOptions): void;
+    /**
+     * Adds a url to this lambda function.
+     */
+    addFunctionUrl(options?: FunctionUrlOptions): FunctionUrl;
+}
+export declare abstract class LambdaFunctionBase extends AwsConstructBase implements IFunction {
+    /**
+     * The name of the function.
+     */
+    abstract readonly functionName: string;
+    /**
+     * The principal this Lambda Function is running as
+     */
+    abstract readonly grantPrincipal: iam.IPrincipal;
+    /**
+     * The ARN fo the function.
+     *
+     * Should include version (if versioning is enabled via publish = true)
+     */
+    abstract readonly functionArn: string;
+    /**
+     * Latest published version of your Lambda Function.
+     *
+     * Used as qualifier of the version or alias of this function.
+     * A qualifier is the identifier that's appended to a version or alias ARN.
+     * @see https://docs.aws.amazon.com/lambda/latest/dg/API_GetFunctionConfiguration.html#API_GetFunctionConfiguration_RequestParameters
+     */
+    abstract readonly version: string;
+    /**
+     * The qualifier of the version or alias of this function.
+     * A qualifier is the identifier that's appended to a version or alias ARN.
+     * @see https://docs.aws.amazon.com/lambda/latest/dg/API_GetFunctionConfiguration.html#API_GetFunctionConfiguration_RequestParameters
+     */
+    /**
+     * The IAM role associated with this function.
+     *
+     * Undefined if the function was imported without a role.
+     */
+    abstract readonly role?: iam.IRole;
+    /**
+     * The construct node where permissions are attached.
+     */
+    abstract readonly permissionsNode: Node;
+    /**
+     * The architecture of this Lambda Function.
+     */
+    abstract readonly architecture: Architecture;
+    /**
+     * Whether the addPermission() call adds any permissions
+     *
+     * True for new Lambdas, false for version $LATEST and imported Lambdas
+     * from different accounts.
+     */
+    protected abstract readonly canCreatePermissions: boolean;
+    /**
+     * The ARN(s) to put into the resource field of the generated IAM policy for grantInvoke()
+     */
+    abstract readonly resourceArnsForGrantInvoke: string[];
+    /**
+     * Whether the user decides to skip adding permissions.
+     * The only use case is for cross-account, imported lambdas
+     * where the user commits to modifying the permisssions
+     * on the imported lambda outside this TerraConstruct Spec.
+     * @internal
+     */
+    protected readonly _skipPermissions?: boolean;
+    /**
+     * Mapping of invocation principals to grants. Used to de-dupe `grantInvoke()` calls.
+     * @internal
+     */
+    protected _invocationGrants: Record<string, iam.Grant>;
+    /**
+     * Mapping of fucntion URL invocation principals to grants. Used to de-dupe `grantInvokeUrl()` calls.
+     * @internal
+     */
+    protected _functionUrlInvocationGrants: Record<string, iam.Grant>;
+    /**
+     * Adds a permission to the Lambda resource policy.
+     * @param id The id for the permission construct
+     * @param permission The permission to grant to this Lambda function. @see Permission for details.
+     */
+    addPermission(id: string, permission: Permission): void;
+    /**
+     * Adds a statement to the IAM role assumed by the instance.
+     */
+    addToRolePolicy(statement: iam.PolicyStatement): void;
+    addEventSourceMapping(id: string, options: EventSourceMappingOptions): EventSourceMapping;
+    /**
+     * Grant the given identity permissions to invoke this Lambda
+     */
+    grantInvoke(grantee: iam.IGrantable): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke the $LATEST version or
+     * unqualified version of this Lambda
+     */
+    grantInvokeLatestVersion(grantee: iam.IGrantable): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke the given version of this Lambda
+     */
+    grantInvokeVersion(grantee: iam.IGrantable, version: string): iam.Grant;
+    /**
+     * Grant the given identity permissions to invoke this Lambda Function URL
+     */
+    grantInvokeUrl(grantee: iam.IGrantable): iam.Grant;
+    /**
+     * Grant multiple principals the ability to invoke this Lambda via CompositePrincipal
+     */
+    grantInvokeCompositePrincipal(compositePrincipal: iam.CompositePrincipal): iam.Grant[];
+    addEventSource(source: IEventSource): void;
+    configureAsyncInvoke(options: EventInvokeConfigOptions): void;
+    /**
+     * A function URL is a dedicated HTTP(S) endpoint for a Lambda function.
+     */
+    addFunctionUrl(options?: FunctionUrlOptions): FunctionUrl;
+    /**
+     * Returns the construct tree node that corresponds to the lambda function.
+     * For use internally for constructs, when the tree is set up in non-standard ways. Ex: SingletonFunction.
+     * @internal
+     */
+    protected _functionNode(): Node;
+    /**
+     * Given the function arn, check if the account id matches this account
+     *
+     * Function ARNs look like this:
+     *
+     *   arn:aws:lambda:region:account-id:function:function-name
+     *
+     * ..which means that in order to extract the `account-id` component from the ARN, we can
+     * split the ARN using ":" and select the component in index 4.
+     *
+     * @returns true if account id of function matches the account specified on the stack, false otherwise.
+     *
+     * @internal
+     */
+    protected _isStackAccount(): boolean;
+    private grant;
+    /**
+     * Translate IPrincipal to something we can pass to aws_lambda_permission
+     * https://docs.aws.amazon.com/lambda/latest/api/API_AddPermission.html#lambda-AddPermission-request-Principal
+     * https://registry.terraform.io/providers/hashicorp/aws/5.68.0/docs/resources/lambda_permission#principal
+     *
+     * Do some nasty things because `Permission` supports a subset of what the
+     * full IAM principal language supports, and we may not be able to parse strings
+     * outright because they may be tokens.
+     *
+     * Try to recognize some specific Principal classes first, then try a generic
+     * fallback.
+     */
+    private parsePermissionPrincipal;
+    private validateConditionCombinations;
+    private validateConditions;
+    private isPrincipalWithConditions;
+}
+export declare abstract class QualifiedFunctionBase extends LambdaFunctionBase {
+    /** The underlying `IFunction` */
+    abstract readonly lambda: IFunction;
+    readonly permissionsNode: Node;
+    get resourceArnsForGrantInvoke(): string[];
+    configureAsyncInvoke(options: EventInvokeConfigOptions): void;
+}
+/**
+ * An abstract class which represents an AWS Lambda event source.
+ */
+export interface IEventSource {
+    /**
+     * Called by `lambda.addEventSource` to allow the event source to bind to this
+     * function.
+     *
+     * @param target That lambda function to bind to.
+     */
+    bind(target: IFunction): void;
+}