terraconstructs 0.0.8

package/lib/aws/edge/certificate.js

@@ -0,0 +1,191 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationMethod = exports.PublicCertificate = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const provider_aws_1 = require("@cdktf/provider-aws");
+const cdktf_1 = require("cdktf");
+const _1 = require(".");
+const duration_1 = require("../../duration");
+const aws_construct_1 = require("../aws-construct");
+/**
+ * Amazon issued certificate
+ */
+class PublicCertificate extends aws_construct_1.AwsConstructBase {
+    get certificateOutputs() {
+        return this._outputs;
+    }
+    get outputs() {
+        return this.certificateOutputs;
+    }
+    get domainName() {
+        return this._domainName;
+    }
+    get certificateArn() {
+        return this._certificateArn;
+    }
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        this._domainName = props.domainName;
+        // check if domain name is 64 characters or less
+        if (!cdktf_1.Token.isUnresolved(props.domainName) && props.domainName.length > 64) {
+            throw new Error("Domain name must be 64 characters or less");
+        }
+        let { validation } = props;
+        if (!validation) {
+            validation = {
+                method: ValidationMethod.EMAIL,
+                validationDomains: {
+                    [props.domainName]: props.domainName,
+                },
+            };
+        }
+        const allDomainNames = [props.domainName].concat(props.subjectAlternativeNames || []);
+        const domainValidation = renderDomainValidation(validation, allDomainNames);
+        this.resource = new provider_aws_1.acmCertificate.AcmCertificate(this, "Resource", {
+            ...props,
+            validationMethod: validation.method,
+            validationOption: domainValidation?.Options,
+        });
+        if (domainValidation && validation.method === ValidationMethod.DNS) {
+            const records = new Array();
+            // TODO: Test use case where certificates exist across multiple zones (validation record should allow override)
+            const sortedZones = Object.entries(domainValidation.zoneLookup).sort(([a], [b]) => a.localeCompare(b));
+            for (const [domainName, zone] of sortedZones) {
+                const index = records.length;
+                records.push(new _1.RecordSet(this, `ValidationRecord-${domainName}`, {
+                    recordType: this.resource.domainValidationOptions.get(index)
+                        .resourceRecordType,
+                    recordName: this.resource.domainValidationOptions.get(index)
+                        .resourceRecordName,
+                    target: _1.RecordTarget.fromValues(this.resource.domainValidationOptions.get(index)
+                        .resourceRecordValue),
+                    ttl: duration_1.Duration.seconds(60),
+                    zone,
+                    allowOverwrite: true, // required to prevent cross region wildcard errors
+                }));
+            }
+            new provider_aws_1.acmCertificateValidation.AcmCertificateValidation(this, "Validation", {
+                certificateArn: this.resource.arn,
+                validationRecordFqdns: records.map((record) => record.fqdn),
+            });
+            // // terraform-provider-aws bug, can't use TerraformIterator (`for_each`) here:
+            // // https://github.com/hashicorp/terraform-cdk/issues/3713
+            // const zoneLookup: TerraformLocal = new TerraformLocal( this, "zoneLookup", domainValidation.zoneLookup);
+            // const domainValidationIterator = TerraformIterator.fromComplexList( this.resource.domainValidationOptions, "domain_name");
+            // // RecordSet doesn't work with zone = IResolvable
+            // // using Route53Record resource directly
+            // const records = new route53Record.Route53Record( this, "ValidationRecords", {
+            //   forEach: domainValidationIterator,
+            //   allowOverwrite: true,
+            //   name: domainValidationIterator.getString("resource_record_name"),
+            //   records: [
+            //     domainValidationIterator.getString("resource_record_value"),
+            //   ],
+            //   ttl: 60,
+            //   type: domainValidationIterator.getString("resource_record_type"),
+            //   zoneId: Fn.lookup(zoneLookup, domainValidationIterator.key),
+            // });
+            // const recordsIterator = TerraformIterator.fromResources(records);
+            // new acmCertificateValidation.AcmCertificateValidation( this, "Validation", {
+            //   certificateArn: this.resource.arn,
+            //   validationRecordFqdns: Token.asList(
+            //     recordsIterator.pluckProperty("fqdn"),
+            //   ),
+            // });
+        }
+        this._certificateArn = this.resource.arn;
+        this._outputs = {
+            arn: this.resource.arn,
+            status: this.resource.status,
+            domainValidationOptions: this.resource.domainValidationOptions,
+        };
+    }
+}
+exports.PublicCertificate = PublicCertificate;
+_a = JSII_RTTI_SYMBOL_1;
+PublicCertificate[_a] = { fqn: "terraconstructs.aws.edge.PublicCertificate", version: "0.0.8" };
+/**
+ * Method used to assert ownership of the domain
+ */
+var ValidationMethod;
+(function (ValidationMethod) {
+    /**
+     * Send email to a number of email addresses associated with the domain
+     *
+     * IMPORTANT: if you are creating a certificate as part of your stack, the stack
+     * will not complete creating until you read and follow the instructions in the
+     * email that you will receive.
+     *
+     * ACM will send validation emails to the following addresses:
+     *
+     *  admin@domain.com
+     *  administrator@domain.com
+     *  hostmaster@domain.com
+     *  postmaster@domain.com
+     *  webmaster@domain.com
+     *
+     * For every domain that you register.
+     *
+     * @see https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html
+     */
+    ValidationMethod["EMAIL"] = "EMAIL";
+    /**
+     * Validate ownership by adding appropriate DNS records
+     *
+     * IMPORTANT: If `hostedZone` is not specified, DNS records must be added
+     * manually and the stack will not complete creating until the records are
+     * added.
+     *
+     * @see https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html
+     */
+    ValidationMethod["DNS"] = "DNS";
+})(ValidationMethod || (exports.ValidationMethod = ValidationMethod = {}));
+function renderDomainValidation(validation, domainNames) {
+    const result = {
+        Options: [],
+        zoneLookup: {},
+    };
+    switch (validation.method) {
+        case ValidationMethod.DNS:
+            for (const domainName of getUniqueDnsDomainNames(domainNames)) {
+                const hostedZone = validation.hostedZones?.[domainName] ?? validation.hostedZone;
+                if (hostedZone) {
+                    result.Options.push({
+                        domainName,
+                        validationDomain: hostedZone.zoneName,
+                    });
+                    result.zoneLookup[domainName] = hostedZone; // .zoneId;
+                }
+            }
+            break;
+        case ValidationMethod.EMAIL:
+            for (const domainName of domainNames) {
+                const validationDomain = validation.validationDomains?.[domainName];
+                if (!validationDomain) {
+                    throw new Error("When using email for validation, 'validationDomains' needs to be supplied");
+                }
+                result.Options.push({
+                    domainName,
+                    validationDomain: validationDomain,
+                });
+            }
+            break;
+        default:
+            throw new Error(`Unknown validation method ${validation.method}`);
+    }
+    return result.Options.length !== 0 ? result : undefined;
+}
+/**
+ * Removes wildcard domains (*.example.com) where the base domain (example.com) is present.
+ * This is because the DNS validation treats them as the same thing, and the Route53 records
+ * resources would be duplicated causing apply-time errors.
+ */
+function getUniqueDnsDomainNames(domainNames) {
+    return domainNames.filter((domain) => {
+        return (cdktf_1.Token.isUnresolved(domain) ||
+            !domain.startsWith("*.") ||
+            !domainNames.includes(domain.replace("*.", "")));
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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