Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EREGCSC-2858: Convert Static Assets Stack from Serverless to CDK #1507

Closed
wants to merge 4 commits into from

Conversation

addis-samtek
Copy link
Contributor

Convert Static Assets Stack from Serverless to CDK

Resolves #EREGCSC-2858

Description

This PR migrates the Static Assets infrastructure from Serverless Framework to AWS CDK. This is part of our broader initiative to standardize our infrastructure as code using CDK.

This pull request changes...

  • Introduces new StaticAssetsStack CDK construct
  • Migrates CloudFront distribution configuration to CDK
  • Converts S3 bucket configuration for static assets
  • Implements WAF rules using CDK constructs
  • Adds Python Lambda layer for dependencies
  • Configures proper resource naming using StageConfig
  • Implements cross-stack resource sharing (exports/imports)

Verify Deployment

Create MR, verify deployment in ephemeral environment through GitHub Actions pipeline (check CloudFront distribution, S3 bucket and cache invalidation in AWS Console after pipeline completes).

dependabot bot and others added 4 commits December 23, 2024 14:20
Bumps [Enterprise-CMCS/mac-fc-security-hub-visibility](https://github.com/enterprise-cmcs/mac-fc-security-hub-visibility) from 2.0.9 to 2.1.3.
- [Release notes](https://github.com/enterprise-cmcs/mac-fc-security-hub-visibility/releases)
- [Commits](Enterprise-CMCS/mac-fc-security-hub-visibility@v2.0.9...v2.1.3)

---
updated-dependencies:
- dependency-name: Enterprise-CMCS/mac-fc-security-hub-visibility
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1502)

* chore: update package locks

* feat: add DOMPurify library and use with all v-html directives

* feat: add custom directive

* chore: remove dompurify where it is not needed

* docs: add comment/link for custom directive docs
…#1505)

Bumps [dkershner6/aws-ssm-getparameters-action](https://github.com/dkershner6/aws-ssm-getparameters-action) from 1 to 2.
- [Release notes](https://github.com/dkershner6/aws-ssm-getparameters-action/releases)
- [Commits](dkershner6/aws-ssm-getparameters-action@v1...v2)

---
updated-dependencies:
- dependency-name: dkershner6/aws-ssm-getparameters-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ge on admin panel (#1506)

* fix: escape vulnerability in text extraction user message

* fix: unneeded escape for object verbose_name
@peggles2 peggles2 temporarily deployed to prod-security-hub January 3, 2025 01:55 — with GitHub Actions Inactive
@peggles2 peggles2 temporarily deployed to prod-security-hub January 4, 2025 01:53 — with GitHub Actions Inactive
@peggles2 peggles2 temporarily deployed to prod-security-hub January 5, 2025 01:59 — with GitHub Actions Inactive
@peggles2 peggles2 temporarily deployed to prod-security-hub January 6, 2025 01:58 — with GitHub Actions Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants