aws-cdk-lib
Version:
Version 2 of the AWS Cloud Development Kit library
2 lines (1 loc) • 16.1 kB
JavaScript
"use strict";var __runInitializers=exports&&exports.__runInitializers||function(thisArg,initializers,value){for(var useValue=arguments.length>2,i=0;i<initializers.length;i++)value=useValue?initializers[i].call(thisArg,value):initializers[i].call(thisArg);return useValue?value:void 0},__esDecorate=exports&&exports.__esDecorate||function(ctor,descriptorIn,decorators,contextIn,initializers,extraInitializers){function accept(f){if(f!==void 0&&typeof f!="function")throw new TypeError("Function expected");return f}for(var kind=contextIn.kind,key=kind==="getter"?"get":kind==="setter"?"set":"value",target=!descriptorIn&&ctor?contextIn.static?ctor:ctor.prototype:null,descriptor=descriptorIn||(target?Object.getOwnPropertyDescriptor(target,contextIn.name):{}),_,done=!1,i=decorators.length-1;i>=0;i--){var context={};for(var p in contextIn)context[p]=p==="access"?{}:contextIn[p];for(var p in contextIn.access)context.access[p]=contextIn.access[p];context.addInitializer=function(f){if(done)throw new TypeError("Cannot add initializers after decoration has completed");extraInitializers.push(accept(f||null))};var result=(0,decorators[i])(kind==="accessor"?{get:descriptor.get,set:descriptor.set}:descriptor[key],context);if(kind==="accessor"){if(result===void 0)continue;if(result===null||typeof result!="object")throw new TypeError("Object expected");(_=accept(result.get))&&(descriptor.get=_),(_=accept(result.set))&&(descriptor.set=_),(_=accept(result.init))&&initializers.unshift(_)}else(_=accept(result))&&(kind==="field"?initializers.unshift(_):descriptor[key]=_)}target&&Object.defineProperty(target,contextIn.name,descriptor),done=!0};Object.defineProperty(exports,"__esModule",{value:!0}),exports.Instance=exports.HttpTokens=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var aspects_1=()=>{var tmp=require("./aspects");return aspects_1=()=>tmp,tmp},connections_1=()=>{var tmp=require("./connections");return connections_1=()=>tmp,tmp},ec2_generated_1=()=>{var tmp=require("./ec2.generated");return ec2_generated_1=()=>tmp,tmp},ebs_util_1=()=>{var tmp=require("./private/ebs-util");return ebs_util_1=()=>tmp,tmp},security_group_1=()=>{var tmp=require("./security-group");return security_group_1=()=>tmp,tmp},vpc_1=()=>{var tmp=require("./vpc");return vpc_1=()=>tmp,tmp},iam=()=>{var tmp=require("../../aws-iam");return iam=()=>tmp,tmp},core_1=()=>{var tmp=require("../../core");return core_1=()=>tmp,tmp},helpers_internal_1=()=>{var tmp=require("../../core/lib/helpers-internal");return helpers_internal_1=()=>tmp,tmp},metadata_resource_1=()=>{var tmp=require("../../core/lib/metadata-resource");return metadata_resource_1=()=>tmp,tmp},aspect_prio_1=()=>{var tmp=require("../../core/lib/private/aspect-prio");return aspect_prio_1=()=>tmp,tmp},prop_injectable_1=()=>{var tmp=require("../../core/lib/prop-injectable");return prop_injectable_1=()=>tmp,tmp},cxapi=()=>{var tmp=require("../../cx-api");return cxapi=()=>tmp,tmp},HttpTokens;(function(HttpTokens2){HttpTokens2.OPTIONAL="optional",HttpTokens2.REQUIRED="required"})(HttpTokens||(exports.HttpTokens=HttpTokens={}));const NAME_TAG="Name";let Instance=(()=>{let _classDecorators=[prop_injectable_1().propertyInjectable],_classDescriptor,_classExtraInitializers=[],_classThis,_classSuper=core_1().Resource,_instanceExtraInitializers=[],_addSecurityGroup_decorators,_addUserData_decorators,_addToRolePolicy_decorators,_applyCloudFormationInit_decorators;var Instance2=class extends _classSuper{static{_classThis=this}static{const _metadata=typeof Symbol=="function"&&Symbol.metadata?Object.create(_classSuper[Symbol.metadata]??null):void 0;_addSecurityGroup_decorators=[(0,metadata_resource_1().MethodMetadata)()],_addUserData_decorators=[(0,metadata_resource_1().MethodMetadata)()],_addToRolePolicy_decorators=[(0,metadata_resource_1().MethodMetadata)()],_applyCloudFormationInit_decorators=[(0,metadata_resource_1().MethodMetadata)()],__esDecorate(this,null,_addSecurityGroup_decorators,{kind:"method",name:"addSecurityGroup",static:!1,private:!1,access:{has:obj=>"addSecurityGroup"in obj,get:obj=>obj.addSecurityGroup},metadata:_metadata},null,_instanceExtraInitializers),__esDecorate(this,null,_addUserData_decorators,{kind:"method",name:"addUserData",static:!1,private:!1,access:{has:obj=>"addUserData"in obj,get:obj=>obj.addUserData},metadata:_metadata},null,_instanceExtraInitializers),__esDecorate(this,null,_addToRolePolicy_decorators,{kind:"method",name:"addToRolePolicy",static:!1,private:!1,access:{has:obj=>"addToRolePolicy"in obj,get:obj=>obj.addToRolePolicy},metadata:_metadata},null,_instanceExtraInitializers),__esDecorate(this,null,_applyCloudFormationInit_decorators,{kind:"method",name:"applyCloudFormationInit",static:!1,private:!1,access:{has:obj=>"applyCloudFormationInit"in obj,get:obj=>obj.applyCloudFormationInit},metadata:_metadata},null,_instanceExtraInitializers),__esDecorate(null,_classDescriptor={value:_classThis},_classDecorators,{kind:"class",name:_classThis.name,metadata:_metadata},null,_classExtraInitializers),Instance2=_classThis=_classDescriptor.value,_metadata&&Object.defineProperty(_classThis,Symbol.metadata,{enumerable:!0,configurable:!0,writable:!0,value:_metadata})}static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_ec2.Instance",version:"2.233.0"};static PROPERTY_INJECTION_ID="aws-cdk-lib.aws-ec2.Instance";osType=__runInitializers(this,_instanceExtraInitializers);connections;role;grantPrincipal;userData;instance;instanceId;instanceAvailabilityZone;instancePrivateDnsName;instancePrivateIp;instancePublicDnsName;instancePublicIp;securityGroup;securityGroups=[];constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings().aws_cdk_lib_aws_ec2_InstanceProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Instance2),error}if((0,metadata_resource_1().addConstructMetadata)(this,props),props.initOptions&&!props.init)throw new(core_1()).ValidationError("Setting 'initOptions' requires that 'init' is also set",this);if(props.keyName&&props.keyPair)throw new(core_1()).ValidationError("Cannot specify both of 'keyName' and 'keyPair'; prefer 'keyPair'",this);if(props.creditSpecification&&!props.instanceType.isBurstable())throw new(core_1()).ValidationError(`creditSpecification is supported only for T4g, T3a, T3, T2 instance type, got: ${props.instanceType.toString()}`,this);if(props.securityGroup?this.securityGroup=props.securityGroup:this.securityGroup=new(security_group_1()).SecurityGroup(this,"InstanceSecurityGroup",{vpc:props.vpc,allowAllOutbound:props.allowAllOutbound!==!1,allowAllIpv6Outbound:props.allowAllIpv6Outbound}),this.connections=new(connections_1()).Connections({securityGroups:[this.securityGroup]}),this.securityGroups.push(this.securityGroup),core_1().Tags.of(this).add(NAME_TAG,props.instanceName||this.node.path),props.instanceProfile&&props.role)throw new(core_1()).ValidationError("You cannot provide both instanceProfile and role",this);let iamInstanceProfile;props.instanceProfile?.role?(this.role=props.instanceProfile.role,iamInstanceProfile=props.instanceProfile.instanceProfileName):(this.role=props.role||new(iam()).Role(this,"InstanceRole",{assumedBy:new(iam()).ServicePrincipal("ec2.amazonaws.com")}),iamInstanceProfile=new(iam()).CfnInstanceProfile(this,"InstanceProfile",{roles:[this.role.roleName]}).ref),this.grantPrincipal=this.role,props.ssmSessionPermissions&&this.role.addManagedPolicy(iam().ManagedPolicy.fromAwsManagedPolicyName("AmazonSSMManagedInstanceCore"));const imageConfig=props.machineImage.getImage(this);this.userData=props.userData??imageConfig.userData;const userDataToken=core_1().Lazy.string({produce:()=>core_1().Fn.base64(this.userData.render())}),securityGroupsToken=core_1().Lazy.list({produce:()=>this.securityGroups.map(sg=>sg.securityGroupId)}),{subnets,hasPublic}=props.vpc.selectSubnets(props.vpcSubnets);let subnet;if(props.availabilityZone){const selected=subnets.filter(sn=>sn.availabilityZone===props.availabilityZone);selected.length===1?subnet=selected[0]:core_1().Annotations.of(this).addError(`Need exactly 1 subnet to match AZ '${props.availabilityZone}', found ${selected.length}. Use a different availabilityZone.`)}else subnets.length>0?subnet=subnets[0]:core_1().Annotations.of(this).addError(`Did not find any subnets matching '${JSON.stringify(props.vpcSubnets)}', please use a different selection.`);subnet||(subnet=vpc_1().Subnet.fromSubnetAttributes(this,"DummySubnet",{subnetId:"s-notfound",availabilityZone:"az-notfound"}));const networkInterfaces=props.associatePublicIpAddress!==void 0?[{deviceIndex:"0",associatePublicIpAddress:props.associatePublicIpAddress,subnetId:subnet.subnetId,groupSet:securityGroupsToken,privateIpAddress:props.privateIpAddress}]:void 0;if(props.keyPair&&!props.keyPair._isOsCompatible(imageConfig.osType))throw new(core_1()).ValidationError(`${props.keyPair.type} keys are not compatible with the chosen AMI`,this);if(props.enclaveEnabled&&props.hibernationEnabled)throw new(core_1()).ValidationError("You can't set both `enclaveEnabled` and `hibernationEnabled` to true on the same instance",this);if(props.ipv6AddressCount!==void 0&&!core_1().Token.isUnresolved(props.ipv6AddressCount)&&(props.ipv6AddressCount<0||!Number.isInteger(props.ipv6AddressCount)))throw new(core_1()).ValidationError(`'ipv6AddressCount' must be a non-negative integer, got: ${props.ipv6AddressCount}`,this);if(props.ipv6AddressCount!==void 0&&props.associatePublicIpAddress!==void 0)throw new(core_1()).ValidationError("You can't set both 'ipv6AddressCount' and 'associatePublicIpAddress'",this);if(this.instance=new(ec2_generated_1()).CfnInstance(this,"Resource",{imageId:imageConfig.imageId,keyName:props.keyPair?.keyPairName??props?.keyName,instanceType:props.instanceType.toString(),subnetId:networkInterfaces?void 0:subnet.subnetId,securityGroupIds:networkInterfaces?void 0:securityGroupsToken,networkInterfaces,iamInstanceProfile,userData:userDataToken,availabilityZone:subnet.availabilityZone,sourceDestCheck:props.sourceDestCheck,blockDeviceMappings:props.blockDevices!==void 0?(0,ebs_util_1().instanceBlockDeviceMappings)(this,props.blockDevices):void 0,privateIpAddress:networkInterfaces?void 0:props.privateIpAddress,propagateTagsToVolumeOnCreation:props.propagateTagsToVolumeOnCreation,monitoring:props.detailedMonitoring,creditSpecification:props.creditSpecification?{cpuCredits:props.creditSpecification}:void 0,ebsOptimized:props.ebsOptimized,disableApiTermination:props.disableApiTermination,instanceInitiatedShutdownBehavior:props.instanceInitiatedShutdownBehavior,placementGroupName:props.placementGroup?.placementGroupRef.groupName,enclaveOptions:props.enclaveEnabled!==void 0?{enabled:props.enclaveEnabled}:void 0,hibernationOptions:props.hibernationEnabled!==void 0?{configured:props.hibernationEnabled}:void 0,ipv6AddressCount:props.ipv6AddressCount,metadataOptions:this.renderMetadataOptions(props)}),this.instance.node.addDependency(this.role),props.associatePublicIpAddress!==void 0&&props.associatePublicIpAddress){const internetConnected=props.vpc.selectSubnets(props.vpcSubnets).internetConnectivityEstablished;this.instance.node.addDependency(internetConnected)}if(!hasPublic&&props.associatePublicIpAddress)throw new(core_1()).ValidationError("To set 'associatePublicIpAddress: true' you must select Public subnets (vpcSubnets: { subnetType: SubnetType.PUBLIC })",this);this.osType=imageConfig.osType,this.node.defaultChild=this.instance,this.instanceId=this.instance.ref,this.instanceAvailabilityZone=this.instance.attrAvailabilityZone,this.instancePrivateDnsName=this.instance.attrPrivateDnsName,this.instancePrivateIp=this.instance.attrPrivateIp,this.instancePublicDnsName=this.instance.attrPublicDnsName,this.instancePublicIp=this.instance.attrPublicIp,core_1().FeatureFlags.of(this).isEnabled(cxapi().EC2_SUM_TIMEOUT_ENABLED)?(this.applyUpdatePolicies(props),props.init&&this.applyCloudFormationInit(props.init,props.initOptions)):(props.init&&this.applyCloudFormationInit(props.init,props.initOptions),this.applyUpdatePolicies(props));const originalLogicalId=core_1().Stack.of(this).getLogicalId(this.instance);let recursing=!1;this.instance.overrideLogicalId(core_1().Lazy.uncachedString({produce:context=>{if(recursing||!(props.userDataCausesReplacement??props.initOptions))return originalLogicalId;const fragments=new Array;recursing=!0;try{fragments.push(JSON.stringify(context.resolve(this.userData.render())))}finally{recursing=!1}const digest=(0,helpers_internal_1().md5hash)(fragments.join("")).slice(0,16);return`${originalLogicalId}${digest}`}})),props.requireImdsv2&&core_1().Aspects.of(this).add(new(aspects_1()).InstanceRequireImdsv2Aspect,{priority:(0,aspect_prio_1().mutatingAspectPrio32333)(this)})}get instanceRef(){return{instanceId:this.instanceId}}addSecurityGroup(securityGroup){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_ec2_ISecurityGroup(securityGroup)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addSecurityGroup),error}this.securityGroups.push(securityGroup)}addUserData(...commands){this.userData.addCommands(...commands)}addToRolePolicy(statement){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToRolePolicy),error}this.role.addToPrincipalPolicy(statement)}applyCloudFormationInit(init,options={}){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_ec2_CloudFormationInit(init),jsiiDeprecationWarnings().aws_cdk_lib_aws_ec2_ApplyCloudFormationInitOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.applyCloudFormationInit),error}init.attach(this.instance,{platform:this.osType,instanceRole:this.role,userData:this.userData,configSets:options.configSets,embedFingerprint:options.embedFingerprint,printLog:options.printLog,ignoreFailures:options.ignoreFailures,includeRole:options.includeRole,includeUrl:options.includeUrl}),this.waitForResourceSignal(options.timeout??core_1().Duration.minutes(5))}waitForResourceSignal(timeout){const oldResourceSignal=this.instance.cfnOptions.creationPolicy?.resourceSignal;this.instance.cfnOptions.creationPolicy={...this.instance.cfnOptions.creationPolicy,resourceSignal:{count:(oldResourceSignal?.count??0)+1,timeout:(oldResourceSignal?.timeout?core_1().Duration.parse(oldResourceSignal?.timeout).plus(timeout):timeout).toIsoString()}}}applyUpdatePolicies(props){props.resourceSignalTimeout!==void 0&&(this.instance.cfnOptions.creationPolicy={...this.instance.cfnOptions.creationPolicy,resourceSignal:{...this.instance.cfnOptions.creationPolicy?.resourceSignal,timeout:props.resourceSignalTimeout&&props.resourceSignalTimeout.toIsoString()}})}renderMetadataOptions(props){if(!(props.httpEndpoint===void 0&&props.httpProtocolIpv6===void 0&&props.httpPutResponseHopLimit===void 0&&props.httpTokens===void 0&&props.instanceMetadataTags===void 0)){if(props.requireImdsv2)throw new(core_1()).ValidationError("Cannot use both requireImdsv2 and metadata options. Use requireImdsv2 for simple IMDSv2 enforcement or individual metadata option properties for advanced configuration, but not both.",this);if(props.httpPutResponseHopLimit!==void 0&&(props.httpPutResponseHopLimit<1||props.httpPutResponseHopLimit>64))throw new(core_1()).ValidationError("httpPutResponseHopLimit must be between 1 and 64",this);return{httpEndpoint:props.httpEndpoint===!0?"enabled":props.httpEndpoint===!1?"disabled":void 0,httpProtocolIpv6:props.httpProtocolIpv6===!0?"enabled":props.httpProtocolIpv6===!1?"disabled":void 0,httpPutResponseHopLimit:props.httpPutResponseHopLimit,httpTokens:props.httpTokens,instanceMetadataTags:props.instanceMetadataTags===!0?"enabled":props.instanceMetadataTags===!1?"disabled":void 0}}}static{__runInitializers(_classThis,_classExtraInitializers)}};return Instance2=_classThis})();exports.Instance=Instance;