cdk-factory 0.19.22__tar.gz → 0.19.23__tar.gz

{cdk_factory-0.19.22 → cdk_factory-0.19.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cdk_factory
-Version: 0.19.22
+Version: 0.19.23
 Summary: CDK Factory. A QuickStarter and best practices setup for CDK projects
 Author-email: Eric Wilson <eric.wilson@geekcafe.com>
 License: MIT License

{cdk_factory-0.19.22 → cdk_factory-0.19.23}/pyproject.toml

@@ -33,7 +33,7 @@ markers = [
 [project]
 
 name = "cdk_factory"
-version = "0.19.22"
+version = "0.19.23"
 authors = [
   { name="Eric Wilson", email="eric.wilson@geekcafe.com" }
 ]

{cdk_factory-0.19.22 → cdk_factory-0.19.23}/src/cdk_factory/stack_library/lambda_edge/lambda_edge_stack.py

@@ -326,11 +326,43 @@ class LambdaEdgeStack(IStack, StandardizedSsmMixin):
                 actions=[
                     "elasticloadbalancing:DescribeTargetHealth",
                     "elasticloadbalancing:DescribeTargetGroups",
-                    "elasticloadbalancing:DescribeLoadBalancers"
+                    "elasticloadbalancing:DescribeLoadBalancers",
+                    "elasticloadbalancing:DescribeListeners",
+                    "elasticloadbalancing:DescribeTags"
                 ],
                 resources=[
                     f"arn:aws:elasticloadbalancing:*:{self.deployment.account}:targetgroup/*/*",
-                    f"arn:aws:elasticloadbalancing:*:{self.deployment.account}:loadbalancer/*/*"
+                    f"arn:aws:elasticloadbalancing:*:{self.deployment.account}:loadbalancer/*/*",
+                    f"arn:aws:elasticloadbalancing:*:{self.deployment.account}:listener/*/*/*/*"
+                ]
+            )
+        )
+        
+        # Add ACM permissions for certificate validation
+        execution_role.add_to_policy(
+            iam.PolicyStatement(
+                effect=iam.Effect.ALLOW,
+                actions=[
+                    "acm:DescribeCertificate",
+                    "acm:ListCertificates"
+                ],
+                resources=[
+                    f"arn:aws:acm:*:{self.deployment.account}:certificate/*"
+                ]
+            )
+        )
+        
+        # Add Route 53 permissions for health check access
+        execution_role.add_to_policy(
+            iam.PolicyStatement(
+                effect=iam.Effect.ALLOW,
+                actions=[
+                    "route53:GetHealthCheckStatus",
+                    "route53:ListHealthChecks",
+                    "route53:GetHealthCheck"
+                ],
+                resources=[
+                    f"arn:aws:route53:::{self.deployment.account}:health-check/*"
                 ]
             )
         )
@@ -484,8 +516,11 @@ class LambdaEdgeStack(IStack, StandardizedSsmMixin):
         configuration = self.edge_config.dictionary.get("configuration", {})
         environment_variables = configuration.get("environment_variables", {})
         
+        # Build full configuration that Lambda@Edge expects
         full_config = {
-            "environment_variables": environment_variables
+            "environment_variables": environment_variables,
+            "runtime": configuration.get("runtime", {}),
+            "ui": configuration.get("ui", {})
         }
         
         self.export_ssm_parameter(

cdk_factory-0.19.23/src/cdk_factory/version.py

@@ -0,0 +1 @@
+__version__ = "0.19.23"

cdk_factory-0.19.22/src/cdk_factory/version.py

@@ -1 +0,0 @@
-__version__ = "0.19.22"