constructor()

in example/lib/private-s3-static-website-stack.ts [24:96]

• 50 lines of code
• 1 McCabe index (conditional complexity)

  constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // Private S3 Static Website

    const websiteBucket = new s3.Bucket(this, 's3-proxy-farm-website-bucket', {
      websiteIndexDocument: 'index.html',
      blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
    });

    new s3Deployment.BucketDeployment(this, 's3-proxy-farm-website-deployment', {
      sources: [s3Deployment.Source.asset('./website')],
      destinationBucket: websiteBucket,
    });

    // Proxy farm VPC
    // Use a VPC with a VPN connection or a Direct connection to your remote network

    const vpc = new ec2.Vpc(this, 's3-proxy-farm-vpc');

    // Create S3 VPC endpoint if it does not already exist and allow access to static website bucket from this endpoint

    const s3VpcEndpoint = vpc.addGatewayEndpoint('s3-proxy-farm-s3-vpc-endpoint', {
      service: ec2.GatewayVpcEndpointAwsService.S3,
    });

    websiteBucket.addToResourcePolicy(new iam.PolicyStatement({
      principals: [new iam.AnyPrincipal()],
      effect: iam.Effect.ALLOW,
      actions: ['s3:GetObject'],
      resources: [websiteBucket.arnForObjects('*')],
      conditions: {
        StringEquals: {
          "aws:SourceVpce": s3VpcEndpoint.vpcEndpointId,
        },
      },
    }));

    // Create proxy farm

    const s3ProxyFarmProps: S3ProxyFarmProps = {
      vpc,
      websiteBucket,
      autoScalingGroupProps: {
        maxCapacity: 4,
      },
      allowedCIDRRanges: ['0.0.0.0/0'],
    };

    const s3ProxyFarm = new S3ProxyFarm(this, 's3-proxy-farm', s3ProxyFarmProps);

    // Expose proxy farm using a private Network Load Balancer
    const lb = new elbv2.NetworkLoadBalancer(this, 's3-proxy-farm-load-balancer', {
      vpc,
      crossZoneEnabled: true,
      internetFacing: false,
      vpcSubnets: {
        subnetType: ec2.SubnetType.PRIVATE,
      },
    });

    s3ProxyFarm.createNetworkLoadBalancerListener(lb, {
      port: 80,
      protocol: elbv2.Protocol.TCP,
    })

    // Use this URL to access the S3 static website from your remote network

    new cdk.CfnOutput(this, 's3-proxy-farm-website-url', {
      value: `http://${lb.loadBalancerDnsName}`,
    });

  }