feature: enhanced search capability

source/common/changes/@cdf/assetlibrary-client/feature-enhanced-search_2022-06-30-16-47.json

@@ -0,0 +1,11 @@
+{
+  "changes": [
+    {
+      "packageName": "@cdf/assetlibrary-client",
+      "comment": "New \"enhanced mode\" for Asset Library",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@cdf/assetlibrary-client",
+  "email": "[email protected]"
+}

source/common/changes/@cdf/assetlibrary/feature-enhanced-search_2022-06-30-16-47.json

@@ -0,0 +1,11 @@
+{
+  "changes": [
+    {
+      "packageName": "@cdf/assetlibrary",
+      "comment": "New \"enhanced mode\" for Asset Library",
+      "type": "minor"
+    }
+  ],
+  "packageName": "@cdf/assetlibrary",
+  "email": "[email protected]"
+}

source/common/changes/@cdf/installer/feature-enhanced-search_2022-06-30-16-47.json

@@ -0,0 +1,11 @@
+{
+  "changes": [
+    {
+      "packageName": "@cdf/installer",
+      "comment": "New \"enhanced mode\" for Asset Library",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@cdf/installer",
+  "email": "[email protected]"
+}

source/common/changes/@cdf/integration-tests/feature-enhanced-search_2022-06-30-16-47.json

@@ -0,0 +1,11 @@
+{
+  "changes": [
+    {
+      "packageName": "@cdf/integration-tests",
+      "comment": "New \"enhanced mode\" for Asset Library",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@cdf/integration-tests",
+  "email": "[email protected]"
+}

source/docs/migration.md

@@ -2,6 +2,10 @@
 
 While we endeavor to always make backward compatible changes, there may be times when we need to make changes that are not backward compatible. If these changes are made at the API level then the affected modules REST API vendor mime types will be versioned supporting both new and old versions, as well as the modules minor version bumped. But if the change affect something else such as how configuration is handled, or how applications are deployed, then the major versions of the modules will be bumped with migration notes added here.
 
+## Migrating an existing Asset Library deployment to Enhanced Search
+
+Starting with CDF Asset Library version 6.0.10 (part of CDF version 1.0.13), a new "enhanced" mode is available for CDF Asset Library. See the section [Migrating from full mode to enhanced mode](../packages/services/assetlibrary/docs/enhanced-search.md#migrating-from-full-mode-to-enhanced-mode) for guidance on migrating to enanced mode.
+
 ## Migrating from Release <=1.0.10 to 1.0.11
 
 ### Asset Library is now optional modules

source/infrastructure/install-policy-3.json

@@ -108,12 +108,37 @@
                 }
             }
         },
+        {
+            "Sid": "OpenSearchServiceLinkedRoleCreate",
+            "Action": "iam:CreateServiceLinkedRole",
+            "Effect": "Allow",
+            "Resource": "arn:aws:iam::*:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService",
+            "Condition": {
+                "StringLike": {
+                    "iam:AWSServiceName": [
+                        "opensearchservice.amazonaws.com",
+                        "es.amazonaws.com"
+                    ]
+                }
+            }
+        },
+        {
+            "Sid": "OpenSearchServiceLinkedRoleGet",
+            "Action": "iam:GetRole",
+            "Effect": "Allow",
+            "Resource": "arn:aws:iam::*:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService"
+        },
+        {
+            "Sid": "OpenSearchLegacyServiceLinkedRoleGet",
+            "Action": "iam:GetRole",
+            "Effect": "Allow",
+            "Resource": "arn:aws:iam::*:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonElasticsearchService"
+        },
         {
             "Sid": "ECS",
             "Action": "ecs:*",
             "Effect": "Allow",
             "Resource": "*"
-        }
-
+        } 
     ]
-}
+}

source/packages/integration-tests/features/assetlibrary/README.md

@@ -1,38 +1,47 @@
-# Asset Library integration tests
+# Asset Library Integration Tests
 
-Note:  only the _full_ mode is tested as part of the CI/CD pipeline.  We need to add both the _full (witht FGAC)_ and _lite_ modes to it.  But for now, these need testing manually...
+After following the [general steps for setting up an environment for integration testing](../README.md), the commands below can be used to run integration tests for Asset Library in various configurations.
+The tests are executed locally on your development environment and send HTTP requests to an Asset Library API deployed in an AWS account.
 
-### Testing full-with-authz mode
+The subset of tests must match the mode and configuration of the Asset Library deployment at the URL configured in `ASSETLIBRARY_BASE_URL` in `path/to/local/.env`.
+For example, integration tests in the `full-with-authz` folder only pass with an Asset Library deployment that is configured with `AUTHORIZATION_ENABLED=true`.
 
-- Run asset library with FGAC enabled (only supported in _full_ mode):
-```sh
-$ assetlibrary> CONFIG_LOCATION="path/to/local/.env" ASSETLIBRARY_AUTHORIZATION_ENABLED=true  npm run start
-```
-- Run FGAC specific integration tests:
-```sh
-$ integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" pnpm run integration-test  -- features/assetlibrary/full-with-authz/*
-```
+Note: Only the _full_ mode is currently tested as part of the CI/CD pipeline.
 
-### Testing lite mode
+## Testing full/enhanced mode
 
-See the [special notes for running lite mode tests](./lite/README.md).
+To run integration tests for Asset Library in _full_ or _enhanced_ mode, irrespective of `AUTHORIZATION_ENABLED` setting:
 
-- Run asset library in _lite_ mode:
 ```sh
-$ assetlibrary> CONFIG_LOCATION="path/to/local/.env" ASSETLIBRARY_MODE=lite  npm run start
+$ source/packages/integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" pnpm run integration-test -- features/assetlibrary/full/*
 ```
-- Run FGAC specific integration tests:
+
+## Testing full-with-authz mode
+
+To run integration tests for Asset Library in _full_ mode, when `AUTHORIZATION_ENABLED` is set to `true`:
+
 ```sh
-$ integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" pnpm run integration-test  -- features/assetlibrary/lite/*
+$ source/packages/integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" npm run integration-test  -- features/assetlibrary/full-with-authz/*
 ```
 
-### Testing full mode
+These tests are an addition to, not a superset of, "Testing full/enhanced mode".
+
+## Testing enhanced mode
+
+To run integration tests for Asset Library in _enhanced_ mode, irrespective of `AUTHORIZATION_ENABLED` setting:
 
-- Run asset library in the default _full_ mode (requires a Neptune tunnel of running loc)
 ```sh
-$ assetlibrary> CONFIG_LOCATION="path/to/local/.env" npm run start
+$ source/packages/integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" npm run integration-test  -- features/assetlibrary/full-with-enhancedsearch/*
 ```
-- Run FGAC specific integration tests:
+
+These tests are an addition to, not a superset of, "Testing full/enhanced mode".
+
+## Testing lite mode
+
+See the [special notes for running lite mode tests](lite/README.md).
+
+To run integration tests for Asset Library in _lite_ mode:
+
 ```sh
-$ integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" pnpm run integration-test  -- features/assetlibrary/full/*
+$ source/packages/integration-tests> CONFIG_LOCATION="path/to/integrationtest/.env" npm run integration-test  -- features/assetlibrary/lite/*
 ```