task 2 completed

README.md

@@ -1,5 +1,28 @@
 # React-shop-cloudfront
 
+
+## Task 2.1. 30 points Done
+
+#### S3 bucket: https://task-2-nodejs-aws-shop-react-la2.s3.eu-central-1.amazonaws.com/index.html
+#### CloudFront: https://d15i4rkskrmwoo.cloudfront.net
+
+
+## Task 2.2. 40 points Done
+
+#### S3 bucket: https://rs-aws-cloud-developer-task-2-la-s3.s3.eu-central-1.amazonaws.com/index.html
+#### CloudFront: https://d29wggx04pesfp.cloudfront.net
+
+## Task 2.3 Done
+
+#### Readme added
+
+## Additional (optional) tasks. 30 points. Done
+
+Run `npm run deployment`
+
+
+## Total points: 100
+
 This is frontend starter project for nodejs-aws mentoring program. It uses the following technologies:
 
 - [Vite](https://vitejs.dev/) as a project bundler
@@ -35,4 +58,4 @@ Runs tests in console, in browser or with coverage.
 
 ### `lint`, `prettier`
 
-Runs linting and formatting for all files in `src` folder.
+Runs linting and formatting for all files in `src` folder.

cdk-deployment/.gitignore

@@ -0,0 +1,5 @@
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out

cdk-deployment/.npmignore

@@ -0,0 +1,3 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out

cdk-deployment/README.md

@@ -0,0 +1,12 @@
+# Welcome to your CDK JavaScript project
+
+This is a blank project for CDK development with JavaScript.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app. The build step is not required when using JavaScript.
+
+## Useful commands
+
+* `npm run test`         perform the jest unit tests
+* `npx cdk deploy`       deploy this stack to your default AWS account/region
+* `npx cdk diff`         compare deployed stack with current state
+* `npx cdk synth`        emits the synthesized CloudFormation template

cdk-deployment/bin/cdk-deployment.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+
+const cdk = require('aws-cdk-lib');
+const { CdkDeploymentStack } = require('../lib/cdk-deployment-stack');
+
+const app = new cdk.App();
+new CdkDeploymentStack(app, 'CdkDeploymentStack', {
+  /* If you don't specify 'env', this stack will be environment-agnostic.
+   * Account/Region-dependent features and context lookups will not work,
+   * but a single synthesized template can be deployed anywhere. */
+
+  /* Uncomment the next line to specialize this stack for the AWS Account
+   * and Region that are implied by the current CLI configuration. */
+  // env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },
+
+  /* Uncomment the next line if you know exactly what Account and Region you
+   * want to deploy the stack to. */
+  // env: { account: '123456789012', region: 'us-east-1' },
+
+  /* For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html */
+});

cdk-deployment/cdk.json

@@ -0,0 +1,70 @@
+{
+  "app": "node bin/cdk-deployment.js",
+  "watch": {
+    "include": [
+      "**"
+    ],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "jest.config.js",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk/core:checkSecretUsage": true,
+    "@aws-cdk/core:target-partitions": [
+      "aws",
+      "aws-cn"
+    ],
+    "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk/aws-iam:minimizePolicies": true,
+    "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+    "@aws-cdk/core:enablePartitionLiterals": true,
+    "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk/aws-route53-patters:useCertificate": true,
+    "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+    "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+    "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+    "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+    "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+    "@aws-cdk/aws-redshift:columnId": true,
+    "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+    "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+    "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+    "@aws-cdk/aws-kms:aliasNameRef": true,
+    "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+    "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+    "@aws-cdk/aws-efs:denyAnonymousAccess": true,
+    "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true,
+    "@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion": true,
+    "@aws-cdk/aws-efs:mountTargetOrderInsensitiveLogicalId": true,
+    "@aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters": true,
+    "@aws-cdk/aws-appsync:useArnForSourceApiAssociationIdentifier": true,
+    "@aws-cdk/aws-rds:preventRenderingDeprecatedCredentials": true,
+    "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource": true,
+    "@aws-cdk/aws-cloudwatch-actions:changeLambdaPermissionLogicalIdForLambdaAction": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeysDefaultValueToFalse": true,
+    "@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2": true,
+    "@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope": true,
+    "@aws-cdk/aws-eks:nodegroupNameAttribute": true,
+    "@aws-cdk/aws-ec2:ebsDefaultGp3Volume": true,
+    "@aws-cdk/aws-ecs:removeDefaultDeploymentAlarm": true,
+    "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": false
+  }
+}

cdk-deployment/jest.config.js

@@ -0,0 +1,3 @@
+module.exports = {
+  testEnvironment: 'node'
+}

cdk-deployment/lib/cdk-deployment-stack.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+
+const { Stack } = require('aws-cdk-lib');
+const s3 = require('aws-cdk-lib/aws-s3');
+const cloudFront = require('aws-cdk-lib/aws-cloudfront');
+const iam = require('aws-cdk-lib/aws-iam');
+const s3Deployment = require('aws-cdk-lib/aws-s3-deployment');
+
+class CdkDeploymentStack extends Stack {
+  /**
+   *
+   * @param {Construct} scope
+   * @param {string} id
+   * @param {StackProps=} props
+   */
+  constructor(scope, id, props) {
+    super(scope, id, props);
+
+
+    const siteBucket = new s3.Bucket(this, 'rs-aws-cloud-developer-task-2-la', {
+      bucketName: 'rs-aws-cloud-developer-task-2-la-s3',
+      websiteIndexDocument: 'index.html',
+      publicReadAccess: false,
+      blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
+    });
+
+    const cloudfrontOAI = new cloudFront.OriginAccessIdentity(this, 'rs-aws-cloud-developer-task-2-la-OAI');
+
+    siteBucket.addToResourcePolicy(new iam.PolicyStatement({
+        actions: ['s3:GetObject'],
+        resources: [siteBucket.arnForObjects('*')],
+        principals: [new iam.CanonicalUserPrincipal(cloudfrontOAI.cloudFrontOriginAccessIdentityS3CanonicalUserId)],
+      }),
+    );
+
+    const distribution = new cloudFront.CloudFrontWebDistribution(this, 'rs-aws-cloud-developer-task-2-cloudfront-distribution-la', {
+      originConfigs: [{
+        s3OriginSource: {
+          s3BucketSource: siteBucket,
+          originAccessIdentity: cloudfrontOAI,
+        },
+        behaviors: [{ 
+          isDefaultBehavior: true 
+        }],
+      }],
+    });
+
+    new s3Deployment.BucketDeployment(this, 'rs-aws-cloud-developer-task-2-bucket-deployment-la', {
+      sources: [s3Deployment.Source.asset('../dist')],
+      destinationBucket: siteBucket,
+      distribution,
+      distributionPaths: ['/*'],
+    });
+  }
+}
+
+module.exports = { CdkDeploymentStack }