constructor()

in resources/cdk/javascript_example_code_transcribe_demo/setup.ts [31:164]

• 121 lines of code
• 1 McCabe index (conditional complexity)

  constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const transcriptionBucket = new Bucket(this, 'transciptions', {
      removalPolicy: cdk.RemovalPolicy.DESTROY,
      publicReadAccess: true,
      accessControl: BucketAccessControl.PUBLIC_READ,

    });

    transcriptionBucket.addToResourcePolicy(new iam.PolicyStatement({
      effect: Effect.ALLOW,
      actions: ["*"],
      resources: [transcriptionBucket.arnForObjects('*')],
      principals: [new iam.AccountRootPrincipal()],
    }));
    transcriptionBucket.grantPublicAccess('*', 's3:GetObject');
    transcriptionBucket.grantPublicAccess('*', 's3:PutObject');
    transcriptionBucket.grantPublicAccess('*', 's3:DeleteObject');

    const cfnBucket = transcriptionBucket.node.findChild('Resource') as s3.CfnBucket
    cfnBucket.addPropertyOverride('CorsConfiguration', {
      CorsRules: [
        {
          "AllowedHeaders": [
            "*"
          ],
          "AllowedMethods": [
            "GET",
            "POST",
            "PUT",
            "DELETE"
          ],
          "AllowedOrigins": [
            "*"
          ],
        }
      ]
    });

    const appBucket = new s3.Bucket(this, 'appbucket',{
      removalPolicy: cdk.RemovalPolicy.DESTROY,
      websiteIndexDocument: 'index.html',
      websiteErrorDocument: 'index.html',
      blockPublicAccess:  {
        blockPublicAcls: true,
        blockPublicPolicy: false,
        ignorePublicAcls: true,
        restrictPublicBuckets: false
      }
    });
    appBucket.grantPublicAccess('*', 's3:GetObject');
    appBucket.grantPublicAccess('*', 's3:PutObject');

    const randomUserPoolName = `ExampleUserPoolName-${Math.ceil(Math.random() * 10 ** 10)}`;

    const myUserPool = new cognito.UserPool(this, 'exampleuserpoolid', {
      userPoolName: randomUserPoolName,
      selfSignUpEnabled: true,
      autoVerify: {
        email: true
      },
      userVerification: {
        emailSubject: 'Verify your email for our awesome app!',
        emailBody: 'Hello, Thanks for signing up to our awesome app! Your verification code is {####}',
        smsMessage: 'Hello, Thanks for signing up to our awesome app! Your verification code is {####}',
      },
      standardAttributes: {
        email: {
          required: true,
          mutable: false,
        }
      }
    });

    const randomUserPoolClientName = `ExampleUserPoolName-${Math.ceil(Math.random() * 10 ** 10)}`;

    const userPoolClient = new cognito.UserPoolClient(this, 'ExampleUserPoolClient', {
      userPool: myUserPool,
      userPoolClientName: randomUserPoolClientName,
      oAuth: {
        callbackUrls: [appBucket.urlForObject('index.html')]
      }
    });

    const randomDomain = `exampleuserpoolname-${Math.ceil(Math.random() * 10 ** 10)}`;

    myUserPool.addDomain('CognitoDomain', {
      cognitoDomain: {
        domainPrefix: randomDomain
      }
    });

    const myIdentityPool = new cognito.CfnIdentityPool(this, "ExampleIdentityPool", {
      allowUnauthenticatedIdentities: false,
      cognitoIdentityProviders: [{
        clientId: userPoolClient.userPoolClientId,
        providerName: myUserPool.userPoolProviderName,
      }]
    });
    const authenticatedRole = new iam.Role(this, 'ExampleCognitoDefaultAuthenticatedRole', {
      assumedBy: new iam.FederatedPrincipal('cognito-identity.amazonaws.com', {
        "StringEquals": {"cognito-identity.amazonaws.com:aud": myIdentityPool.ref},
        "ForAnyValue:StringLike": {"cognito-identity.amazonaws.com:amr": "authenticated"},
      }, "sts:AssumeRoleWithWebIdentity"),
    });
    authenticatedRole.addToPolicy(new PolicyStatement({
      effect: Effect.ALLOW,
      actions: [
        "mobileanalytics:PutEvents",
        "cognito-sync:*",
        "cognito-identity:*"
      ],
      resources: ["*"]
    }));

    authenticatedRole.addToPolicy(new PolicyStatement({
      effect: Effect.ALLOW,
      actions: ["sns:*"],
      resources: ["*"]
    }));
    authenticatedRole.addToPolicy(new PolicyStatement({
      effect: Effect.ALLOW,
      actions: ["transcribe:StartTranscriptionJob",
        "transcribe:GetTranscriptionJob"],
      resources: ["*"]
    }));
    const defaultPolicy = new cognito.CfnIdentityPoolRoleAttachment(this, 'DefaultValid', {
      identityPoolId: myIdentityPool.ref,
      roles: {
        'authenticated': authenticatedRole.roleArn
      }
    });
  }