feat(cloudfront): add attachWebAclId method for Distribution

go-to-k · Jun 17, 2024 · 0900148 · 0900148
1 parent 0fa3b1e
commit 0900148
Show file tree

Hide file tree

Showing 13 changed files with 591 additions and 9 deletions.
diff --git a/.../test/integ.cloudfront-with-webacl.js.snapshot/aws-cdk-cloudfront-with-webacl.assets.json b/.../test/integ.cloudfront-with-webacl.js.snapshot/aws-cdk-cloudfront-with-webacl.assets.json
diff --git a/...est/integ.cloudfront-with-webacl.js.snapshot/aws-cdk-cloudfront-with-webacl.template.json b/...est/integ.cloudfront-with-webacl.js.snapshot/aws-cdk-cloudfront-with-webacl.template.json
@@ -0,0 +1,83 @@
+{
+ "Resources": {
+  "WebAcl": {
+   "Type": "AWS::WAFv2::WebACL",
+   "Properties": {
+    "DefaultAction": {
+     "Allow": {}
+    },
+    "Scope": "CLOUDFRONT",
+    "VisibilityConfig": {
+     "CloudWatchMetricsEnabled": false,
+     "MetricName": "webAclMetric",
+     "SampledRequestsEnabled": false
+    }
+   }
+  },
+  "Distribution830FAC52": {
+   "Type": "AWS::CloudFront::Distribution",
+   "Properties": {
+    "DistributionConfig": {
+     "DefaultCacheBehavior": {
+      "CachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6",
+      "Compress": true,
+      "TargetOriginId": "awscdkcloudfrontwithwebaclDistributionOrigin11CAC3663",
+      "ViewerProtocolPolicy": "allow-all"
+     },
+     "Enabled": true,
+     "HttpVersion": "http2",
+     "IPV6Enabled": true,
+     "Origins": [
+      {
+       "CustomOriginConfig": {
+        "OriginProtocolPolicy": "https-only"
+       },
+       "DomainName": "www.example.com",
+       "Id": "awscdkcloudfrontwithwebaclDistributionOrigin11CAC3663"
+      }
+     ],
+     "WebACLId": {
+      "Fn::GetAtt": [
+       "WebAcl",
+       "Arn"
+      ]
+     }
+    }
+   }
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}
diff --git a/...framework-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/cdk.out b/...framework-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/cdk.out
diff --git a/...mework-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/integ.json b/...mework-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/integ.json
diff --git a/...h-webacl.js.snapshot/integcloudfrontwithwebaclDefaultTestDeployAssert166CAFCF.assets.json b/...h-webacl.js.snapshot/integcloudfrontwithwebaclDefaultTestDeployAssert166CAFCF.assets.json
diff --git a/...webacl.js.snapshot/integcloudfrontwithwebaclDefaultTestDeployAssert166CAFCF.template.json b/...webacl.js.snapshot/integcloudfrontwithwebaclDefaultTestDeployAssert166CAFCF.template.json
diff --git a/...ork-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/manifest.json b/...ork-integ/test/aws-cloudfront/test/integ.cloudfront-with-webacl.js.snapshot/manifest.json