cdk-factory 0.11.0__py3-none-any.whl → 0.13.0__py3-none-any.whl

cdk_factory/stack_library/lambda_edge/lambda_edge_stack.py

@@ -8,6 +8,7 @@ MIT License. See Project Root for the license information.
 
 from typing import Optional, Dict
 from pathlib import Path
+import json
 
 import aws_cdk as cdk
 from aws_cdk import aws_lambda as _lambda
@@ -139,6 +140,22 @@ class LambdaEdgeStack(IStack, EnhancedSsmParameterMixin):
         
         logger.info(f"Loading Lambda code from: {code_path}")
         
+        # Create runtime configuration file for Lambda@Edge
+        # Since Lambda@Edge doesn't support environment variables, we bundle a config file
+        runtime_config = {
+            'environment': self.deployment.environment,
+            'function_name': self.edge_config.name,
+            'region': self.deployment.region
+        }
+        
+        runtime_config_path = code_path / 'runtime_config.json'
+        logger.info(f"Creating runtime config at: {runtime_config_path}")
+        
+        with open(runtime_config_path, 'w') as f:
+            json.dump(runtime_config, f, indent=2)
+        
+        logger.info(f"Runtime config: {runtime_config}")
+        
         # Map runtime string to CDK Runtime
         runtime_map = {
             "python3.11": _lambda.Runtime.PYTHON_3_11,
@@ -154,10 +171,23 @@ class LambdaEdgeStack(IStack, EnhancedSsmParameterMixin):
             _lambda.Runtime.PYTHON_3_11
         )
         
-        # Resolve environment variables (handles SSM parameter references)
-        resolved_environment = self._resolve_environment_variables()
+        # Lambda@Edge does NOT support environment variables
+        # Configuration must be handled via:
+        # 1. Hardcoded in the function code
+        # 2. Fetched from SSM Parameter Store at runtime
+        # 3. Other configuration mechanisms
         
-        # Create execution role with CloudWatch Logs permissions
+        # Log warning if environment variables are configured
+        if self.edge_config.environment:
+            logger.warning(
+                f"Lambda@Edge function '{function_name}' has environment variables configured, "
+                "but Lambda@Edge does not support environment variables. "
+                "The function must fetch these values from SSM Parameter Store at runtime."
+            )
+            for key, value in self.edge_config.environment.items():
+                logger.warning(f"  - {key}: {value}")
+        
+        # Create execution role with CloudWatch Logs and SSM permissions
         execution_role = iam.Role(
             self,
             f"{function_name}-Role",
@@ -173,7 +203,23 @@ class LambdaEdgeStack(IStack, EnhancedSsmParameterMixin):
             ]
         )
         
-        # Create the Lambda function
+        # Add SSM read permissions if environment variables reference SSM parameters
+        if self.edge_config.environment:
+            execution_role.add_to_policy(
+                iam.PolicyStatement(
+                    effect=iam.Effect.ALLOW,
+                    actions=[
+                        "ssm:GetParameter",
+                        "ssm:GetParameters",
+                        "ssm:GetParametersByPath"
+                    ],
+                    resources=[
+                        f"arn:aws:ssm:*:{cdk.Aws.ACCOUNT_ID}:parameter/*"
+                    ]
+                )
+            )
+        
+        # Create the Lambda function WITHOUT environment variables
         self.function = _lambda.Function(
             self,
             function_name,
@@ -185,7 +231,7 @@ class LambdaEdgeStack(IStack, EnhancedSsmParameterMixin):
             timeout=cdk.Duration.seconds(self.edge_config.timeout),
             description=self.edge_config.description,
             role=execution_role,
-            environment=resolved_environment,
+            # Lambda@Edge does NOT support environment variables
             log_retention=logs.RetentionDays.ONE_WEEK,
         )
         
@@ -256,3 +302,30 @@ class LambdaEdgeStack(IStack, EnhancedSsmParameterMixin):
                         param_path,
                         description=f"{key} for Lambda@Edge function {function_name}"
                     )
+        
+        # Export environment variables as SSM parameters
+        # Since Lambda@Edge doesn't support environment variables, we export them
+        # to SSM so the Lambda function can fetch them at runtime
+        if self.edge_config.environment:
+            logger.info("Exporting Lambda@Edge environment variables as SSM parameters")
+            env_ssm_exports = self.edge_config.dictionary.get("environment_ssm_exports", {})
+            
+            # If no explicit environment_ssm_exports, create default SSM paths
+            if not env_ssm_exports:
+                # Auto-generate SSM parameter names based on environment variable names
+                for env_key in self.edge_config.environment.keys():
+                    # Use snake_case version of the key for SSM path
+                    ssm_key = env_key.lower().replace('_', '-')
+                    env_ssm_exports[env_key] = f"/{self.deployment.environment}/{function_name}/{ssm_key}"
+            
+            # Resolve and export environment variables to SSM
+            resolved_env = self._resolve_environment_variables()
+            for env_key, ssm_path in env_ssm_exports.items():
+                if env_key in resolved_env:
+                    self.export_ssm_parameter(
+                        self,
+                        f"env-{env_key}-param",
+                        resolved_env[env_key],
+                        ssm_path,
+                        description=f"Configuration for Lambda@Edge: {env_key}"
+                    )

cdk_factory/stack_library/websites/static_website_stack.py

@@ -169,6 +169,13 @@ class StaticWebSiteStack(IStack):
                 aliases=aliases,
                 distribution=cloudfront_distribution.distribution,
             )
+        
+        # Export SSM parameters if configured
+        self.__export_ssm_parameters(
+            stack_config=stack_config,
+            bucket=bucket,
+            cloudfront_distribution=cloudfront_distribution,
+        )
 
     def __setup_route53_records(
         self,
@@ -200,6 +207,58 @@ class StaticWebSiteStack(IStack):
             zone_name=hosted_zone_name,
         )
 
+    def __export_ssm_parameters(
+        self,
+        stack_config: StackConfig,
+        bucket: s3.IBucket,
+        cloudfront_distribution: CloudFrontDistributionConstruct,
+    ) -> None:
+        """
+        Export stack outputs to SSM Parameter Store if ssm_exports is configured.
+        
+        Args:
+            stack_config: Stack configuration containing ssm_exports
+            bucket: The S3 bucket
+            cloudfront_distribution: The CloudFront distribution construct
+        """
+        ssm_exports = stack_config.dictionary.get("ssm_exports", {})
+        
+        if not ssm_exports:
+            logger.debug("No SSM exports configured for this stack")
+            return
+        
+        # Export bucket name if configured
+        if "bucket_name" in ssm_exports:
+            self.export_ssm_parameter(
+                scope=self,
+                id="SsmExportBucketName",
+                value=bucket.bucket_name,
+                parameter_name=ssm_exports["bucket_name"],
+                description=f"S3 bucket name for {stack_config.name}",
+            )
+        
+        # Export CloudFront domain if configured
+        if "cloudfront_domain" in ssm_exports and cloudfront_distribution.distribution:
+            self.export_ssm_parameter(
+                scope=self,
+                id="SsmExportCloudFrontDomain",
+                value=cloudfront_distribution.dns_name,
+                parameter_name=ssm_exports["cloudfront_domain"],
+                description=f"CloudFront domain name for {stack_config.name}",
+            )
+        
+        # Export CloudFront distribution ID if configured
+        if "cloudfront_distribution_id" in ssm_exports and cloudfront_distribution.distribution:
+            self.export_ssm_parameter(
+                scope=self,
+                id="SsmExportCloudFrontDistributionId",
+                value=cloudfront_distribution.distribution_id,
+                parameter_name=ssm_exports["cloudfront_distribution_id"],
+                description=f"CloudFront distribution ID for {stack_config.name}",
+            )
+        
+        logger.info(f"Exported {len(ssm_exports)} SSM parameters for stack {stack_config.name}")
+
     def __get_version_number(self, assets_path: str) -> str:
         version = "0.0.1.ckd.factory"
 

cdk_factory/version.py

@@ -1 +1 @@
-__version__ = "0.11.0"
+__version__ = "0.13.0"

{cdk_factory-0.11.0.dist-info → cdk_factory-0.13.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cdk_factory
-Version: 0.11.0
+Version: 0.13.0
 Summary: CDK Factory. A QuickStarter and best practices setup for CDK projects
 Author-email: Eric Wilson <eric.wilson@geekcafe.com>
 License: MIT License

{cdk_factory-0.11.0.dist-info → cdk_factory-0.13.0.dist-info}/RECORD

@@ -2,7 +2,7 @@ cdk_factory/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cdk_factory/app.py,sha256=RnX0-pwdTAPAdKJK_j13Zl8anf9zYKBwboR0KA8K8xM,10346
 cdk_factory/cdk.json,sha256=SKZKhJ2PBpFH78j-F8S3VDYW-lf76--Q2I3ON-ZIQfw,3106
 cdk_factory/cli.py,sha256=FGbCTS5dYCNsfp-etshzvFlGDCjC28r6rtzYbe7KoHI,6407
-cdk_factory/version.py,sha256=raMu9XA9JEjvdoTmFqcOw7qhJX24rYDP7XmS59TAO-Q,23
+cdk_factory/version.py,sha256=DgpLNbv0e1LIEOOe54Db8_390i9pelMEFEnsBsNmyhA,23
 cdk_factory/builds/README.md,sha256=9BBWd7bXpyKdMU_g2UljhQwrC9i5O_Tvkb6oPvndoZk,90
 cdk_factory/commands/command_loader.py,sha256=QbLquuP_AdxtlxlDy-2IWCQ6D-7qa58aphnDPtp_uTs,3744
 cdk_factory/configurations/base_config.py,sha256=JKjhNsy0RCUZy1s8n5D_aXXI-upR9izaLtCTfKYiV9k,9624
@@ -95,7 +95,7 @@ cdk_factory/stack_library/ecr/ecr_stack.py,sha256=1xA68sxFVyqreYjXrP_7U9I8RF9RtF
 cdk_factory/stack_library/ecs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cdk_factory/stack_library/ecs/ecs_service_stack.py,sha256=zuGdZEP5KmeVDTJb-H47LYhvs-85-Fi4Xb78nsA-lF4,24685
 cdk_factory/stack_library/lambda_edge/__init__.py,sha256=ByBJ_CWdc4UtTmFBZH-6pzBMNkjkdtE65AmnB0Fs6lM,156
-cdk_factory/stack_library/lambda_edge/lambda_edge_stack.py,sha256=KWef9HgwZV6NZGql0cYOAm1hG85PtHFklzlQgcUBuIc,9963
+cdk_factory/stack_library/lambda_edge/lambda_edge_stack.py,sha256=WDLoARmn-ehGnfm8m9Kt88Mp1GQ6ZdqkQaDWE65hXD4,13478
 cdk_factory/stack_library/load_balancer/__init__.py,sha256=wZpKw2OecLJGdF5mPayCYAEhu2H3c2gJFFIxwXftGDU,52
 cdk_factory/stack_library/load_balancer/load_balancer_stack.py,sha256=t5JUe5lMUbQCRFZR08k8nO-g-53yWY8gKB9v8ZnedBs,24391
 cdk_factory/stack_library/monitoring/__init__.py,sha256=k1G_KDx47Aw0UugaL99PN_TKlyLK4nkJVApCaAK7GJg,153
@@ -112,7 +112,7 @@ cdk_factory/stack_library/security_group/security_group_stack.py,sha256=2zxd5ozg
 cdk_factory/stack_library/simple_queue_service/sqs_stack.py,sha256=jJksWrvrvgZUMM01RZ317DOIxqIJbkYYSYu38w0jHpc,6039
 cdk_factory/stack_library/vpc/__init__.py,sha256=7pIqP97Gf2AJbv9Ebp1WbQGHYhgEbWJ52L1MzeXBybA,42
 cdk_factory/stack_library/vpc/vpc_stack.py,sha256=zdDiGilf03esxuya5Z8zVYSVMAIuZBeD-ZKgfnEd6aw,10077
-cdk_factory/stack_library/websites/static_website_stack.py,sha256=KBQiV6PI09mpHGtH-So5Hk3uhfFLDepoXInGbfin0cY,7938
+cdk_factory/stack_library/websites/static_website_stack.py,sha256=VoQOUZ_HFdRErBo0mpw73uXSNbjftxqdF5vbnZQHq4A,10351
 cdk_factory/stages/websites/static_website_stage.py,sha256=X4fpKXkhb0zIbSHx3QyddBhVSLBryb1vf1Cg2fMTqog,755
 cdk_factory/templates/README.md,sha256=ATBEjG6beYvbEAdLtZ_8xnxgFD5X0cgZoI_6pToqH90,2679
 cdk_factory/templates/app.py.template,sha256=aM60x0nNV80idtCL8jm1EddY63F5tDITYOlavg-BPMU,1069
@@ -129,8 +129,8 @@ cdk_factory/utilities/lambda_function_utilities.py,sha256=S1GvBsY_q2cyUiaud3HORJ
 cdk_factory/utilities/os_execute.py,sha256=5Op0LY_8Y-pUm04y1k8MTpNrmQvcLmQHPQITEP7EuSU,1019
 cdk_factory/utils/api_gateway_utilities.py,sha256=If7Xu5s_UxmuV-kL3JkXxPLBdSVUKoLtohm0IUFoiV8,4378
 cdk_factory/workload/workload_factory.py,sha256=mM8GU_5mKq_0OyK060T3JrUSUiGAcKf0eqNlT9mfaws,6028
-cdk_factory-0.11.0.dist-info/METADATA,sha256=rAWDht64P0RmvfM8FqV47xUsRr3scdyA6f70NXYzr1w,2451
-cdk_factory-0.11.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-cdk_factory-0.11.0.dist-info/entry_points.txt,sha256=S1DPe0ORcdiwEALMN_WIo3UQrW_g4YdQCLEsc_b0Swg,53
-cdk_factory-0.11.0.dist-info/licenses/LICENSE,sha256=NOtdOeLwg2il_XBJdXUPFPX8JlV4dqTdDGAd2-khxT8,1066
-cdk_factory-0.11.0.dist-info/RECORD,,
+cdk_factory-0.13.0.dist-info/METADATA,sha256=u2EL937XENu8doeidJ_nCCJIY0h18_KGWwTk2nQ7ADQ,2451
+cdk_factory-0.13.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+cdk_factory-0.13.0.dist-info/entry_points.txt,sha256=S1DPe0ORcdiwEALMN_WIo3UQrW_g4YdQCLEsc_b0Swg,53
+cdk_factory-0.13.0.dist-info/licenses/LICENSE,sha256=NOtdOeLwg2il_XBJdXUPFPX8JlV4dqTdDGAd2-khxT8,1066
+cdk_factory-0.13.0.dist-info/RECORD,,