cdk-factory 0.14.0__tar.gz → 0.15.0__tar.gz

{cdk_factory-0.14.0 → cdk_factory-0.15.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cdk_factory
-Version: 0.14.0
+Version: 0.15.0
 Summary: CDK Factory. A QuickStarter and best practices setup for CDK projects
 Author-email: Eric Wilson <eric.wilson@geekcafe.com>
 License: MIT License

{cdk_factory-0.14.0 → cdk_factory-0.15.0}/pyproject.toml

@@ -33,7 +33,7 @@ markers = [
 [project]
 
 name = "cdk_factory"
-version = "0.14.0"
+version = "0.15.0"
 authors = [
   { name="Eric Wilson", email="eric.wilson@geekcafe.com" }
 ]

{cdk_factory-0.14.0 → cdk_factory-0.15.0}/src/cdk_factory/constructs/cloudfront/cloudfront_distribution_construct.py

@@ -292,8 +292,9 @@ class CloudFrontDistributionConstruct(Construct):
                 logger.info(f"Using IP gate Lambda ARN from SSM: {ip_gate_ssm_path}")
                 
                 # Add the IP gating Lambda@Edge association
+                # MUST use viewer-request to run BEFORE cache check!
                 lambda_edge_associations = [{
-                    "event_type": "origin-request",
+                    "event_type": "viewer-request",
                     "lambda_arn": f"{{{{ssm:{ip_gate_ssm_path}}}}}",
                     "include_body": False
                 }]

{cdk_factory-0.14.0 → cdk_factory-0.15.0}/src/cdk_factory/lambdas/edge/ip_gate/handler.py

@@ -178,7 +178,58 @@ def lambda_handler(event, context):
             print(f"IP {client_ip} is allowed")
             return request
         
-        # IP not allowed - redirect to maintenance page
+        # IP not allowed - either redirect or proxy maintenance page
+        # Check response mode from SSM (default: redirect for backward compatibility)
+        response_mode_param = f"/{function_name}/response-mode"
+        response_mode = get_ssm_parameter(response_mode_param, default='redirect')
+        
+        if response_mode == 'proxy':
+            # Proxy mode: Fetch and return maintenance content (keeps URL the same)
+            print(f"IP {client_ip} is NOT allowed, proxying content from {maint_cf_host}")
+            
+            try:
+                import urllib3
+                http = urllib3.PoolManager()
+                
+                # Fetch the maintenance page
+                maint_response = http.request(
+                    'GET', 
+                    f'https://{maint_cf_host}',
+                    headers={'User-Agent': 'CloudFront-IP-Gate-Proxy'},
+                    timeout=3.0
+                )
+                
+                # Return the maintenance content
+                response = {
+                    'status': str(maint_response.status),
+                    'statusDescription': 'OK' if maint_response.status == 200 else 'Service Unavailable',
+                    'headers': {
+                        'content-type': [{
+                            'key': 'Content-Type',
+                            'value': maint_response.headers.get('Content-Type', 'text/html')
+                        }],
+                        'cache-control': [{
+                            'key': 'Cache-Control',
+                            'value': 'no-cache, no-store, must-revalidate, max-age=0'
+                        }],
+                        'x-ip-gate-mode': [{
+                            'key': 'X-IP-Gate-Mode',
+                            'value': 'proxy'
+                        }]
+                    },
+                    'body': maint_response.data.decode('utf-8')
+                }
+                
+                print(f"Successfully proxied maintenance page (status {maint_response.status})")
+                return response
+                
+            except Exception as proxy_error:
+                print(f"Error proxying maintenance content: {str(proxy_error)}")
+                # Fall back to redirect if proxy fails
+                print(f"Falling back to redirect mode")
+                response_mode = 'redirect'
+        
+        # Redirect mode (default): HTTP 302 redirect to maintenance site
         print(f"IP {client_ip} is NOT allowed, redirecting to {maint_cf_host}")
         
         response = {
@@ -192,6 +243,10 @@ def lambda_handler(event, context):
                 'cache-control': [{
                     'key': 'Cache-Control',
                     'value': 'no-cache, no-store, must-revalidate'
+                }],
+                'x-ip-gate-mode': [{
+                    'key': 'X-IP-Gate-Mode',
+                    'value': 'redirect'
                 }]
             }
         }

{cdk_factory-0.14.0 → cdk_factory-0.15.0}/src/cdk_factory/stack_library/websites/static_website_stack.py

@@ -95,9 +95,8 @@ class StaticWebSiteStack(IStack):
             hosted_zone=hosted_zone,
         )
 
-        if stack_config.dependencies:
-            for dependency in stack_config.dependencies:
-                self.add_dependency(deployment.build_resource_name(dependency))
+        # Note: Stack dependencies are handled by pipeline_factory, not here
+        # Dependencies are resolved after all stacks are created so we have stack objects
 
     def __get_s3_website_bucket(
         self, stack_config: StackConfig, deployment: DeploymentConfig

cdk_factory-0.15.0/src/cdk_factory/version.py

@@ -0,0 +1 @@
+__version__ = "0.15.0"

cdk_factory-0.14.0/src/cdk_factory/version.py

@@ -1 +0,0 @@
-__version__ = "0.14.0"