CDK Constructs for Lambda@Edge pattern: HttpHeaders
Project description
@cloudcomponents/cdk-lambda-at-edge-pattern
CDK Constructs for Lambda@Edge pattern: HttpHeaders
Install
TypeScript/JavaScript:
npm i @cloudcomponents/cdk-lambda-at-edge-pattern
Python:
pip install cloudcomponents.cdk-lambda-at-edge-pattern
How to use
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
from aws_cdk.core import Construct, RemovalPolicy, Stack, StackProps
from aws_cdk.aws_ssm import StringParameter
from aws_cdk.aws_cloudfront import SecurityPolicyProtocol
from cloudcomponents.cdk_static_website import StaticWebsite
from cloudcomponents.cdk_lambda_at_edge_pattern import HttpHeaders
class StaticWebsiteStack(Stack):
def __init__(self, scope, id, *, description=None, env=None, stackName=None, tags=None, synthesizer=None, terminationProtection=None, analyticsReporting=None):
super().__init__(scope, id, description=description, env=env, stackName=stackName, tags=tags, synthesizer=synthesizer, terminationProtection=terminationProtection, analyticsReporting=analyticsReporting)
certificate_arn = StringParameter.value_from_lookup(self, "/certificate/cloudcomponents.org")
website = StaticWebsite(self, "StaticWebsite",
bucket_configuration=WebsiteBucketProps(
removal_policy=RemovalPolicy.DESTROY
),
alias_configuration=AliasProps(
domain_name="cloudcomponents.org",
names=["www.cloudcomponents.org", "cloudcomponents.org"],
acm_cert_ref=certificate_arn
)
)
# A us-east-1 stack is generated under the hood
http_headers = HttpHeaders(self, "HttpHeaders",
http_headers={
"Content-Security-Policy": "default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; connect-src 'self'",
"Strict-Transport-Security": "max-age=31536000; includeSubdomains; preload",
"Referrer-Policy": "same-origin",
"X-XSS-Protection": "1; mode=block",
"X-Frame-Options": "DENY",
"X-Content-Type-Options": "nosniff",
"Cache-Control": "no-cache"
}
)
website.add_lambda_function_association(http_headers)
Cloudfront Distribution
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
cloudfront.Distribution(self, "myDist",
default_behavior={
"origin": origins.S3Origin(my_bucket),
"edge_lambdas": [http_headers]
}
)
Cloudfront WebDistribution
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
cloudfront.CloudFrontWebDistribution(self, "MyDistribution",
origin_configs=[{
"s3_origin_source": {
"s3_bucket_source": source_bucket
},
"behaviors": [{
"is_default_behavior": True,
"lambda_function_associations": [http_headers]
}
]
}
]
)
HttpHeaders
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
http_headers = HttpHeaders(self, "HttpHeaders",
http_headers={
"Content-Security-Policy": "default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; connect-src 'self'",
"Strict-Transport-Security": "max-age=31536000; includeSubdomains; preload",
"Referrer-Policy": "same-origin",
"X-XSS-Protection": "1; mode=block",
"X-Frame-Options": "DENY",
"X-Content-Type-Options": "nosniff",
"Cache-Control": "no-cache"
}
)
OriginMutation
https://chrisschuld.com/2020/05/gatsby-hosting-on-cloudfront/
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
origin_mutation = OriginMutation(stack, "OriginMutation")
API Reference
See API.md.
Example
See more complete examples.
License
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for cloudcomponents.cdk-lambda-at-edge-pattern-1.40.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 7bd619e3be8103e92f85ee7c4e6dc2abbb3e5e4b3192653236b2b02599652eaa |
|
MD5 | 9b26036cc4988891692f416901f5a433 |
|
BLAKE2b-256 | 962f5410dafc960b542b031737e5f07e80b4d4ccfe732b9ed3f37b4461dbfd7a |
Close
Hashes for cloudcomponents.cdk_lambda_at_edge_pattern-1.40.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | a0f9382d8daf02e34ef28610ae014f11eecf9ea6056e6fee5a7946b21ca7deb2 |
|
MD5 | b19f0c2aadcac5d7847a27c6dc769092 |
|
BLAKE2b-256 | a2dd511bf7373a66704a4c818d49f4e151631576fb4bda4004e1757b8c15bce6 |