terraconstructs 0.0.8

package/lib/aws/edge/origin.d.ts

@@ -0,0 +1,160 @@
+import { cloudfrontDistribution } from "@cdktf/provider-aws";
+import { Duration } from "../../";
+import { IBucket } from "../storage";
+/**
+ * Represents the concept of a CloudFront Origin.
+ * You provide one or more origins when creating a Distribution.
+ */
+export interface IOrigin {
+    /**
+     * The method called when a given Origin is added
+     * (for the first time) to a Distribution.
+     */
+    render(id: string): cloudfrontDistribution.CloudfrontDistributionOrigin;
+}
+/**
+ * Options to define an Origin.
+ */
+export interface OriginOptions {
+    /**
+     * The number of seconds that CloudFront waits when trying to establish a connection to the origin.
+     * Valid values are 1-10 seconds, inclusive.
+     *
+     * @default Duration.seconds(10)
+     */
+    readonly connectionTimeout?: Duration;
+    /**
+     * The number of times that CloudFront attempts to connect to the origin; valid values are 1, 2, or 3 attempts.
+     *
+     * @default 3
+     */
+    readonly connectionAttempts?: number;
+    /**
+     * A list of HTTP header names and values that CloudFront adds to requests it sends to the origin.
+     *
+     * @default {}
+     */
+    readonly customHeaders?: Record<string, string>;
+}
+/**
+ * Properties to define an Origin.
+ */
+export interface OriginProps extends OriginOptions {
+    /**
+     * An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.
+     * Must begin, but not end, with '/' (e.g., '/production/images').
+     *
+     * @default '/'
+     */
+    readonly originPath?: string;
+}
+/**
+ * Defines what protocols CloudFront will use to connect to an origin.
+ */
+export declare enum OriginProtocolPolicy {
+    /** Connect on HTTP only */
+    HTTP_ONLY = "http-only",
+    /** Connect with the same protocol as the viewer */
+    MATCH_VIEWER = "match-viewer",
+    /** Connect on HTTPS only */
+    HTTPS_ONLY = "https-only"
+}
+export declare enum OriginSslPolicy {
+    SSL_V3 = "SSLv3",
+    TLS_V1 = "TLSv1",
+    TLS_V1_1 = "TLSv1.1",
+    TLS_V1_2 = "TLSv1.2"
+}
+/**
+ * Represents a distribution origin, that describes the Amazon S3 bucket, HTTP server (for example, a web server),
+ * Amazon MediaStore, or other server from which CloudFront gets your files.
+ */
+export declare abstract class OriginBase implements IOrigin {
+    private readonly domainName;
+    private readonly originPath?;
+    private readonly connectionTimeout?;
+    private readonly connectionAttempts?;
+    private readonly customHeaders?;
+    protected constructor(domainName: string, props?: OriginProps);
+    /**
+     * Called internally by the Distribution to render the origin.
+     */
+    render(originId: string): cloudfrontDistribution.CloudfrontDistributionOrigin;
+    protected renderS3OriginConfig(): cloudfrontDistribution.CloudfrontDistributionOriginS3OriginConfig | undefined;
+    protected renderCustomOriginConfig(): cloudfrontDistribution.CloudfrontDistributionOriginCustomOriginConfig | undefined;
+    private renderCustomHeaders;
+    /**
+     * If the path is defined, it must start with a '/' and not end with a '/'.
+     * This method takes in the originPath, and returns it back (if undefined) or adds/removes the '/' as appropriate.
+     */
+    private validateOriginPath;
+}
+/**
+ * An Origin that is backed by an S3 bucket.
+ *
+ * If the bucket is configured for website hosting, this origin will be configured to use the bucket as an
+ * HTTP server origin and will use the bucket's configured website redirects and error handling. Otherwise,
+ * the origin is created as a bucket origin and will use CloudFront's redirect and error handling.
+ */
+export declare class S3Origin implements IOrigin {
+    private readonly origin;
+    constructor(bucket: IBucket, props?: OriginProps);
+    render(originId: string): cloudfrontDistribution.CloudfrontDistributionOrigin;
+}
+/**
+ * Properties for an Origin backed by an S3 website-configured bucket, load balancer, or custom HTTP server.
+ */
+export interface HttpOriginProps extends OriginProps {
+    /**
+     * Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin.
+     *
+     * @default OriginProtocolPolicy.HTTPS_ONLY
+     */
+    readonly protocolPolicy?: OriginProtocolPolicy;
+    /**
+     * The SSL versions to use when interacting with the origin.
+     *
+     * @default OriginSslPolicy.TLS_V1_2
+     */
+    readonly originSslProtocols?: OriginSslPolicy[];
+    /**
+     * The HTTP port that CloudFront uses to connect to the origin.
+     *
+     * @default 80
+     */
+    readonly httpPort?: number;
+    /**
+     * The HTTPS port that CloudFront uses to connect to the origin.
+     *
+     * @default 443
+     */
+    readonly httpsPort?: number;
+    /**
+     * Specifies how long, in seconds, CloudFront waits for a response from the origin, also known as the origin response timeout.
+     * The valid range is from 1 to 180 seconds, inclusive.
+     *
+     * Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota
+     * has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time.
+     *
+     * @default Duration.seconds(30)
+     */
+    readonly readTimeout?: Duration;
+    /**
+     * Specifies how long, in seconds, CloudFront persists its connection to the origin.
+     * The valid range is from 1 to 180 seconds, inclusive.
+     *
+     * Note that values over 60 seconds are possible only after a limit increase request for the origin response timeout quota
+     * has been approved in the target account; otherwise, values over 60 seconds will produce an error at deploy time.
+     *
+     * @default Duration.seconds(5)
+     */
+    readonly keepaliveTimeout?: Duration;
+}
+/**
+ * An Origin for an HTTP server or S3 bucket configured for website hosting.
+ */
+export declare class HttpOrigin extends OriginBase {
+    private readonly props;
+    constructor(domainName: string, props?: HttpOriginProps);
+    protected renderCustomOriginConfig(): cloudfrontDistribution.CloudfrontDistributionOriginCustomOriginConfig | undefined;
+}

package/lib/aws/edge/origin.js

@@ -0,0 +1,245 @@
+"use strict";
+var _a, _b, _c;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpOrigin = exports.S3Origin = exports.OriginBase = exports.OriginSslPolicy = exports.OriginProtocolPolicy = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const cdktf_1 = require("cdktf");
+/**
+ * Defines what protocols CloudFront will use to connect to an origin.
+ */
+var OriginProtocolPolicy;
+(function (OriginProtocolPolicy) {
+    /** Connect on HTTP only */
+    OriginProtocolPolicy["HTTP_ONLY"] = "http-only";
+    /** Connect with the same protocol as the viewer */
+    OriginProtocolPolicy["MATCH_VIEWER"] = "match-viewer";
+    /** Connect on HTTPS only */
+    OriginProtocolPolicy["HTTPS_ONLY"] = "https-only";
+})(OriginProtocolPolicy || (exports.OriginProtocolPolicy = OriginProtocolPolicy = {}));
+var OriginSslPolicy;
+(function (OriginSslPolicy) {
+    OriginSslPolicy["SSL_V3"] = "SSLv3";
+    OriginSslPolicy["TLS_V1"] = "TLSv1";
+    OriginSslPolicy["TLS_V1_1"] = "TLSv1.1";
+    OriginSslPolicy["TLS_V1_2"] = "TLSv1.2";
+})(OriginSslPolicy || (exports.OriginSslPolicy = OriginSslPolicy = {}));
+/**
+ * Represents a distribution origin, that describes the Amazon S3 bucket, HTTP server (for example, a web server),
+ * Amazon MediaStore, or other server from which CloudFront gets your files.
+ */
+class OriginBase {
+    constructor(domainName, props = {}) {
+        validateIntInRangeOrUndefined("connectionTimeout", 1, 10, props.connectionTimeout?.toSeconds());
+        validateIntInRangeOrUndefined("connectionAttempts", 1, 3, props.connectionAttempts, false);
+        validateCustomHeaders(props.customHeaders);
+        this.domainName = domainName;
+        this.originPath = this.validateOriginPath(props.originPath);
+        this.connectionTimeout = props.connectionTimeout;
+        this.connectionAttempts = props.connectionAttempts;
+        this.customHeaders = props.customHeaders;
+    }
+    /**
+     * Called internally by the Distribution to render the origin.
+     */
+    render(originId) {
+        const s3OriginConfig = this.renderS3OriginConfig();
+        const customOriginConfig = this.renderCustomOriginConfig();
+        if (!s3OriginConfig && !customOriginConfig) {
+            throw new Error("Subclass must override and provide either s3OriginConfig or customOriginConfig");
+        }
+        return {
+            originId,
+            domainName: this.domainName,
+            originPath: this.originPath,
+            connectionAttempts: this.connectionAttempts,
+            connectionTimeout: this.connectionTimeout?.toSeconds(),
+            customHeader: this.renderCustomHeaders(),
+            s3OriginConfig,
+            customOriginConfig,
+        };
+    }
+    // Overridden by sub-classes to provide S3 origin config.
+    renderS3OriginConfig() {
+        return undefined;
+    }
+    // Overridden by sub-classes to provide custom origin config.
+    renderCustomOriginConfig() {
+        return undefined;
+    }
+    renderCustomHeaders() {
+        if (!this.customHeaders ||
+            Object.entries(this.customHeaders).length === 0) {
+            return undefined;
+        }
+        return Object.entries(this.customHeaders).map(([name, value]) => {
+            return { name, value };
+        });
+    }
+    /**
+     * If the path is defined, it must start with a '/' and not end with a '/'.
+     * This method takes in the originPath, and returns it back (if undefined) or adds/removes the '/' as appropriate.
+     */
+    validateOriginPath(originPath) {
+        if (cdktf_1.Token.isUnresolved(originPath)) {
+            return originPath;
+        }
+        if (originPath === undefined) {
+            return undefined;
+        }
+        let path = originPath;
+        if (!path.startsWith("/")) {
+            path = "/" + path;
+        }
+        if (path.endsWith("/")) {
+            path = path.slice(0, -1);
+        }
+        return path;
+    }
+}
+exports.OriginBase = OriginBase;
+_a = JSII_RTTI_SYMBOL_1;
+OriginBase[_a] = { fqn: "terraconstructs.aws.edge.OriginBase", version: "0.0.8" };
+/**
+ * Throws an error if a value is defined and not an integer or not in a range.
+ */
+function validateIntInRangeOrUndefined(name, min, max, value, isDuration = true) {
+    if (value === undefined) {
+        return;
+    }
+    if (!Number.isInteger(value) || value < min || value > max) {
+        const seconds = isDuration ? " seconds" : "";
+        throw new Error(`${name}: Must be an int between ${min} and ${max}${seconds} (inclusive); received ${value}.`);
+    }
+}
+/**
+ * Throws an error if custom header assignment is prohibited by CloudFront.
+ * @link: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/add-origin-custom-headers.html#add-origin-custom-headers-denylist
+ */
+function validateCustomHeaders(customHeaders) {
+    if (!customHeaders || Object.entries(customHeaders).length === 0) {
+        return;
+    }
+    const customHeaderKeys = Object.keys(customHeaders);
+    const prohibitedHeaderKeys = [
+        "Cache-Control",
+        "Connection",
+        "Content-Length",
+        "Cookie",
+        "Host",
+        "If-Match",
+        "If-Modified-Since",
+        "If-None-Match",
+        "If-Range",
+        "If-Unmodified-Since",
+        "Max-Forwards",
+        "Pragma",
+        "Proxy-Authorization",
+        "Proxy-Connection",
+        "Range",
+        "Request-Range",
+        "TE",
+        "Trailer",
+        "Transfer-Encoding",
+        "Upgrade",
+        "Via",
+        "X-Real-Ip",
+    ];
+    const prohibitedHeaderKeyPrefixes = ["X-Amz-", "X-Edge-"];
+    const prohibitedHeadersKeysMatches = customHeaderKeys.filter((customKey) => {
+        return prohibitedHeaderKeys
+            .map((prohibitedKey) => prohibitedKey.toLowerCase())
+            .includes(customKey.toLowerCase());
+    });
+    const prohibitedHeaderPrefixMatches = customHeaderKeys.filter((customKey) => {
+        return prohibitedHeaderKeyPrefixes.some((prohibitedKeyPrefix) => customKey.toLowerCase().startsWith(prohibitedKeyPrefix.toLowerCase()));
+    });
+    if (prohibitedHeadersKeysMatches.length !== 0) {
+        throw new Error(`The following headers cannot be configured as custom origin headers: ${prohibitedHeadersKeysMatches.join(", ")}`);
+    }
+    if (prohibitedHeaderPrefixMatches.length !== 0) {
+        throw new Error(`The following headers cannot be used as prefixes for custom origin headers: ${prohibitedHeaderPrefixMatches.join(", ")}`);
+    }
+}
+// ref: https://github.com/aws/aws-cdk/blob/v2.156.0/packages/aws-cdk-lib/aws-cloudfront-origins/lib/s3-origin.ts
+/**
+ * An Origin that is backed by an S3 bucket.
+ *
+ * If the bucket is configured for website hosting, this origin will be configured to use the bucket as an
+ * HTTP server origin and will use the bucket's configured website redirects and error handling. Otherwise,
+ * the origin is created as a bucket origin and will use CloudFront's redirect and error handling.
+ */
+class S3Origin {
+    constructor(bucket, props = {}) {
+        this.origin = bucket.isWebsite()
+            ? new HttpOrigin(bucket.bucketOutputs.websiteDomainName, {
+                protocolPolicy: OriginProtocolPolicy.HTTP_ONLY, // S3 only supports HTTP for website buckets
+                ...props,
+            })
+            : new S3BucketOrigin(bucket, props);
+    }
+    render(originId) {
+        return this.origin.render(originId);
+    }
+}
+exports.S3Origin = S3Origin;
+_b = JSII_RTTI_SYMBOL_1;
+S3Origin[_b] = { fqn: "terraconstructs.aws.edge.S3Origin", version: "0.0.8" };
+/**
+ * An Origin specific to a S3 bucket (not configured for website hosting).
+ *
+ * Contains additional logic around bucket permissions and origin access identities.
+ */
+class S3BucketOrigin extends OriginBase {
+    constructor(bucket, props) {
+        super(bucket.bucketOutputs.regionalDomainName, props);
+        this.bucket = bucket;
+        if (!this.bucket.bucketOutputs.originAccessIdentity) {
+            throw new Error("The bucket must have an origin access identity to be used as a CloudFront origin.");
+        }
+    }
+    renderS3OriginConfig() {
+        return {
+            // constructor throws if undefined, so this is safe?
+            originAccessIdentity: this.bucket.bucketOutputs.originAccessIdentity,
+        };
+    }
+}
+/**
+ * An Origin for an HTTP server or S3 bucket configured for website hosting.
+ */
+class HttpOrigin extends OriginBase {
+    constructor(domainName, props = {}) {
+        super(domainName, props);
+        this.props = props;
+        validateSecondsInRangeOrUndefined("readTimeout", 1, 180, props.readTimeout);
+        validateSecondsInRangeOrUndefined("keepaliveTimeout", 1, 180, props.keepaliveTimeout);
+    }
+    renderCustomOriginConfig() {
+        return {
+            originSslProtocols: this.props.originSslProtocols ?? [
+                OriginSslPolicy.TLS_V1_2,
+            ],
+            originProtocolPolicy: this.props.protocolPolicy ?? OriginProtocolPolicy.HTTPS_ONLY,
+            httpPort: this.props.httpPort ?? 80,
+            httpsPort: this.props.httpsPort ?? 443,
+            originReadTimeout: this.props.readTimeout?.toSeconds(),
+            originKeepaliveTimeout: this.props.keepaliveTimeout?.toSeconds(),
+        };
+    }
+}
+exports.HttpOrigin = HttpOrigin;
+_c = JSII_RTTI_SYMBOL_1;
+HttpOrigin[_c] = { fqn: "terraconstructs.aws.edge.HttpOrigin", version: "0.0.8" };
+/**
+ * Throws an error if a duration is defined and not an integer number of seconds within a range.
+ */
+function validateSecondsInRangeOrUndefined(name, min, max, duration) {
+    if (duration === undefined) {
+        return;
+    }
+    const value = duration.toSeconds();
+    if (!Number.isInteger(value) || value < min || value > max) {
+        throw new Error(`${name}: Must be an int between ${min} and ${max} seconds (inclusive); received ${value}.`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/aws/encryption/alias.d.ts

@@ -0,0 +1,137 @@
+import { kmsAlias } from "@cdktf/provider-aws";
+import { Construct } from "constructs";
+import { AwsConstructProps, AwsConstructBase } from "../aws-construct";
+import { IKey, KeyOutputs } from "./key";
+import * as iam from "../iam";
+/**
+ * Outputs which may be registered for output via the Grid.
+ */
+export interface AliasOutputs {
+    /**
+     * The name of the alias.
+     *
+     * @attribute
+     */
+    readonly aliasName: string;
+    /**
+     * The Key to which the Alias refers.
+     *
+     * @attribute
+     */
+    readonly aliasTargetKey: KeyOutputs;
+}
+/**
+ * A KMS Key alias.
+ * An alias can be used in all places that expect a key.
+ */
+export interface IAlias extends IKey {
+    /** Strongly typed outputs */
+    readonly aliasOutputs: AliasOutputs;
+    /**
+     * The name of the alias.
+     *
+     * @attribute
+     */
+    readonly aliasName: string;
+    /**
+     * The Key to which the Alias refers.
+     *
+     * @attribute
+     */
+    readonly aliasTargetKey: IKey;
+}
+/**
+ * Construction properties for a KMS Key Alias object.
+ */
+export interface AliasProps extends AwsConstructProps {
+    /**
+     * The name of the alias. The name must start with alias followed by a
+     * forward slash, such as alias/. You can't specify aliases that begin with
+     * alias/AWS. These aliases are reserved.
+     */
+    readonly aliasName: string;
+    /**
+     * The ID of the key for which you are creating the alias. Specify the key's
+     * globally unique identifier or Amazon Resource Name (ARN). You can't
+     * specify another alias.
+     */
+    readonly targetKey: IKey;
+}
+declare abstract class AliasBase extends AwsConstructBase implements IAlias {
+    abstract readonly aliasName: string;
+    abstract readonly aliasTargetKey: IKey;
+    get aliasOutputs(): AliasOutputs;
+    get keyOutputs(): KeyOutputs;
+    get outputs(): Record<string, any>;
+    /**
+     * The ARN of the alias.
+     *
+     * @attribute
+     * @deprecated use `aliasArn` instead
+     */
+    get keyArn(): string;
+    /**
+     * The ARN of the alias.
+     *
+     * @attribute
+     */
+    get aliasArn(): string;
+    get keyId(): string;
+    addAlias(alias: string): Alias;
+    addToResourcePolicy(statement: iam.PolicyStatement, allowNoOp?: boolean): iam.AddToResourcePolicyResult;
+    grant(grantee: iam.IGrantable, ...actions: string[]): iam.Grant;
+    grantDecrypt(grantee: iam.IGrantable): iam.Grant;
+    grantEncrypt(grantee: iam.IGrantable): iam.Grant;
+    grantEncryptDecrypt(grantee: iam.IGrantable): iam.Grant;
+    grantGenerateMac(grantee: iam.IGrantable): iam.Grant;
+    grantVerifyMac(grantee: iam.IGrantable): iam.Grant;
+}
+/**
+ * Properties of a reference to an existing KMS Alias
+ */
+export interface AliasAttributes {
+    /**
+     * Specifies the alias name. This value must begin with alias/ followed by a name (i.e. alias/ExampleAlias)
+     */
+    readonly aliasName: string;
+    /**
+     * The customer master key (CMK) to which the Alias refers.
+     */
+    readonly aliasTargetKey: IKey;
+}
+/**
+ * Defines a display name for a customer master key (CMK) in AWS Key Management
+ * Service (AWS KMS). Using an alias to refer to a key can help you simplify key
+ * management. For example, when rotating keys, you can just update the alias
+ * mapping instead of tracking and changing key IDs. For more information, see
+ * Working with Aliases in the AWS Key Management Service Developer Guide.
+ *
+ * You can also add an alias for a key by calling `key.addAlias(alias)`.
+ *
+ * @resource AWS::KMS::Alias
+ */
+export declare class Alias extends AliasBase {
+    /**
+     * Import an existing KMS Alias defined outside the CDK app.
+     *
+     * @param scope The parent creating construct (usually `this`).
+     * @param id The construct's name.
+     * @param attrs the properties of the referenced KMS Alias
+     */
+    static fromAliasAttributes(scope: Construct, id: string, attrs: AliasAttributes): IAlias;
+    /**
+     * Import an existing KMS Alias defined outside the CDK app, by the alias name. This method should be used
+     * instead of 'fromAliasAttributes' when the underlying KMS Key ARN is not available.
+     * This Alias will not have a direct reference to the KMS Key, so addAlias and grant* methods are not supported.
+     *
+     * @param scope The parent creating construct (usually `this`).
+     * @param id The construct's name.
+     * @param aliasName The full name of the KMS Alias (e.g., 'alias/aws/s3', 'alias/myKeyAlias').
+     */
+    static fromAliasName(scope: Construct, id: string, aliasName: string): IAlias;
+    readonly aliasName: string;
+    readonly aliasTargetKey: IKey;
+    readonly resource: kmsAlias.KmsAlias;
+    constructor(scope: Construct, id: string, props: AliasProps);
+}
+export {};