@finnairoyj/cdk-constructs-lib
    Preparing search index...

    Class CommonLzResources

    CDK interface class for common LZ resources. Provides static getter methods to the resources created by the LandingZone and exported via CloudFormation stack outputs. Can be used within any CDK construct.

    Index

    Constructors

    constructor

    Methods

    getCloudFrontAccessLogsBucket getCommonPublicAcmCertificate getCommonPublicHostedZone getEicEndpointSecurityGroup getElbAccessLogsBucket getGitHubActionsOidcPrincipal getGitHubOidcProvider getNamedPublicHostedZone getPrivateSubnets getPublicSubnets getRestrictedSubnets getS3AccessLogsBucket getSubnetWithResourceName getVpc

    Constructors

    Methods

    • Return the LZ-managed CloudFront access logs bucket. CloudFront access logs are replicated to the centralized log archive account.

      Parameters

      • scope: Construct

      Returns IBucket

      IBucket instance of the common CloudFront access logs bucket

    • Return the LZ-managed public ACM certificate that is used for the public hosted zone. The certificate covers the domain name of the public hosted zone and any direct subdomains.

      Parameters

      • scope: Construct

      Returns ICertificate

      ICertificate instance of the common public ACM certificate

    • Import the EIC Endpoint SecurityGroup managed by LandingZone

      Parameters

      • scope: Construct

      Returns ISecurityGroup

      EICE security group as immutable SG (not possible to modify in CDK)

    • Return the LZ-managed ELB access logs bucket. ELB access logs are replicated to the centralized log archive account.

      Parameters

      • scope: Construct

      Returns IBucket

      IBucket instance of the common ELB access logs bucket

    • Get an OpenIdConnectPrincipal that allows assuming an IAM role from GitHub Actions that are run by the given repositories. Can be used as an input IAM Role assumedBy parameter

      Parameters

      • scope: Construct

        Construct

      • repositories: string[]

        List of GitHub repositories that are allowed to assume the role. Must include the organization name, for example: FinnairOyj/my-repo

      Returns OpenIdConnectPrincipal

      OpenIdConnectPrincipal that can be assumed from GitHub Actions

    • Import the GitHub Actions OIDC provider that is provisioned to all accounts and managed by LandingZone

      Parameters

      • scope: Construct

      Returns IOidcProvider

      IOidcProvider

    • Return a custom named public hosted zone managed by LZ

      Parameters

      • scope: Construct
      • zoneName: string

        Domain name of the custom hosted zone

      Returns IHostedZone

      IHostedZone instance of the custom public hosted zone

    • Returns all private subnets in the LZ VPC

      Parameters

      • scope: Construct
      • azCount: AZCount = AZCount.TWO_ZONES

        Number of AvailabilityZones configured for the VPC. Default to two zones

      Returns SubnetSelection

      SubnetSelection with all private subnets

    • Returns all public subnets in the LZ VPC

      Parameters

      • scope: Construct
      • azCount: AZCount = AZCount.TWO_ZONES

        Number of AvailabilityZones configured for the VPC. Default to two zones

      Returns SubnetSelection

      SubnetSelection with all public subnets

    • Returns all restricted subnets in the LZ VPC

      Parameters

      • scope: Construct
      • azCount: AZCount = AZCount.TWO_ZONES

        Number of AvailabilityZones configured for the VPC. Default to two zones

      Returns SubnetSelection

      SubnetSelection with all restricted subnets

    • Return the LZ-managed S3 access logs bucket. S3 access logs are replicated to the centralized log archive account.

      Parameters

      • scope: Construct

      Returns IBucket

      IBucket instance of the common S3 access logs bucket

    Settings

    Member Visibility

    On This Page

    Constructors
    Methods