constructor()

in deployment-stack-cdk/lib/deployment-cdk-resources-stack.ts [18:151]
116 lines of code
1 McCabe index (conditional complexity)

  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);
    
    cdk.Stack.of(this).addTransform('AWS::Serverless-2016-10-31')

    var ccpUrlParameter = new cdk.CfnParameter(this, 'CcpUrl', {
      type: "String",
      description: "The URL of your softphone."
    });

    var samlUrlParameter = new cdk.CfnParameter(this, 'SamlUrl', {
      type: "String",
      description: "The SAML URL for your instance. Leave empty if you aren't using SAML.",
      default: ''
    });

    var splunkUrlParameter = new cdk.CfnParameter(this, 'SplunkUrl', {
      type: "String",
      description: "The Splunk URL to send data to. Leave empty if you aren't using Splunk.",
      default: ''
    });

    var splunkTokenParameter = new cdk.CfnParameter(this, 'SplunkToken', {
      type: "String",
      description: "Your Splunk HEC token. Leave empty if you aren't using Splunk",
      default: ''
    });

    var cdkProject = new codebuild.Project(this, 'CDK Builder', {
      buildSpec: codebuild.BuildSpec.fromObject(buildSpecJson),
      environmentVariables: {
        "CCP_URL": {value: ccpUrlParameter.valueAsString},
        "SAML_URL": {value: samlUrlParameter.valueAsString},
        "SPLUNK_ENDPOINT": {value: splunkUrlParameter.valueAsString},
        "SPLUNK_TOKEN": {value: splunkTokenParameter.valueAsString}
      },
    });

  
    
    const managedPolicies = [
      'CloudFrontFullAccess',
      'AWSCloudFormationFullAccess',
      'AmazonCognitoPowerUser',
      'CloudWatchLogsFullAccess',
      'AmazonESFullAccess',
      'CloudWatchEventsFullAccess',
      'IAMFullAccess',
      'AWSKeyManagementServicePowerUser',
      'AWSLambda_FullAccess',
    ]

    const suffix = cdk.Fn.select(3, cdk.Fn.split('-', cdk.Fn.select(2, cdk.Fn.split('/', this.stackId))));

    const codeBuildPolicy = new iam.ManagedPolicy(this, 'CDK Deployer Policy', {
      managedPolicyName: 'ConnectMonitoringArtifactAccess' + suffix
    });

    codeBuildPolicy.addStatements(
      iam.PolicyStatement.fromJson({
        "Action": "firehose:*",
        "Resource": "*",
        "Effect": "Allow"
      }),
      iam.PolicyStatement.fromJson({
        "Action": [
          "s3:GetObject",
          "s3:ListBucket",
          "s3:GetObjectVersion"
        ],
        "Resource": "arn:aws:s3:::amazon-connect-monitoring-test-artifact-bucket",
        "Effect": "Allow"
      }),
      iam.PolicyStatement.fromJson({  
        "Effect": "Allow",
        "Action": [
            "apigateway:*"
        ],
        "Resource": "arn:aws:apigateway:*::/*"
      }),
      iam.PolicyStatement.fromJson({
        "Action": [
          "s3:PutObject",
          "s3:GetObject",
          "s3:ListBucket",
          "s3:GetBucketLocation",
          "s3:CreateBucket",
          "s3:GetEncryptionConfiguration",
          "s3:PutEncryptionConfiguration",
          "s3:PutBucketVersioning",
          "s3:GetBucketVersioning",
          "s3:PutBucketWebsite",
          "s3:PutBucketPolicy",
          "s3:GetBucketPolicy",
          "s3:PutBucketPublicAccessBlock"
        ],
        "Resource": "arn:aws:s3:::*",
        "Effect": "Allow"
      })
    );

    managedPolicies.forEach(function(policyName) {
      cdkProject.role!.addManagedPolicy(
        iam.ManagedPolicy.fromAwsManagedPolicyName(policyName)
      );
    })
    codeBuildPolicy.attachToRole(cdkProject.role!)

    var codeBuildTrigger = new lambda.Function(this, "Code Build Trigger", {
      runtime: lambda.Runtime.NODEJS_12_X,
      code: lambda.Code.fromInline(fs.readFileSync('./resources/lambda-functions/cdk-builder/cdkBuilder.js', 'utf-8')),
      handler: 'index.handler',
      environment: {
        'ProjectName': cdkProject.projectName
      },
      timeout: cdk.Duration.minutes(15)
    });
    codeBuildTrigger.role!.addToPolicy(new iam.PolicyStatement({
      resources: [ cdkProject.projectArn ],
      actions: [ "codebuild:StartBuild"]
    }));

    var provider = cloudformation.CustomResourceProvider.fromLambda(codeBuildTrigger);

    var codeBuildResource = new cdk.CfnCustomResource(this, 'CodeBuild Trigger Invoke', {
      serviceToken: provider.serviceToken,
    });

    var name = cdk.Stack.of(this).stackName;

    this.generateOutputAndParam(`UserCreationUrl-${name}`, 'CognitoUrl', codeBuildResource);
    this.generateOutputAndParam(`KibanaUrl-${name}`, 'KibanaUrl', codeBuildResource);
    this.generateOutputAndParam(`CloudfrontUrl-${name}`, 'CloudfrontUrl', codeBuildResource);
  }