@aws-amplify/graphql-transformer-interfaces - npm Package Compare versions

Comparing version 3.9.0 to 3.10.0

API.md

@@ -241,2 +241,5 @@ ## API Report File for "@aws-amplify/graphql-transformer-interfaces"
 // @public (undocumented)
+export const isSslCertSsmPathConfig: (obj: any) => obj is SslCertSsmPathConfig;
+
+// @public (undocumented)
 export type MappingTemplateProvider = InlineMappingTemplateProvider | S3MappingTemplateProvider;
@@ -419,2 +422,4 @@
     readonly secretArn: string;
+    // (undocumented)
+    readonly sslCertConfig?: SslCertConfig;
 }
@@ -433,2 +438,4 @@
     // (undocumented)
+    readonly sslCertConfig?: SslCertConfig;
+    // (undocumented)
     readonly usernameSsmPath: string;
@@ -441,5 +448,17 @@ }
     readonly connectionUriSsmPath: string | string[];
+    // (undocumented)
+    readonly sslCertConfig?: SslCertConfig;
 }
 
 // @public (undocumented)
+export interface SslCertConfig {
+}
+
+// @public (undocumented)
+export interface SslCertSsmPathConfig extends SslCertConfig {
+    // (undocumented)
+    readonly ssmPath: string | string[];
+}
+
+// @public (undocumented)
 export interface StackManagerProvider {
@@ -446,0 +465,0 @@ // (undocumented)

CHANGELOG.md

@@ -6,2 +6,8 @@ # Change Log
 
+# [3.10.0](https://github.com/aws-amplify/amplify-category-api/compare/@aws-amplify/graphql-transformer-interfaces@3.9.0...@aws-amplify/graphql-transformer-interfaces@3.10.0) (2024-07-01)
+
+### Features
+
+- support custom SSL certs in SQL lambda handler ([#2631](https://github.com/aws-amplify/amplify-category-api/issues/2631)) ([f444517](https://github.com/aws-amplify/amplify-category-api/commit/f444517f2deebdb16dcc16257ed083ead4af9c9b))
+
 # [3.9.0](https://github.com/aws-amplify/amplify-category-api/compare/@aws-amplify/graphql-transformer-interfaces@3.8.0...@aws-amplify/graphql-transformer-interfaces@3.9.0) (2024-06-25)
@@ -8,0 +14,0 @@

lib/model-datasource/types.d.ts

@@ -35,4 +35,10 @@ export type ModelDataSourceStrategy = DefaultDynamoDbModelDataSourceStrategy | AmplifyDynamoDbModelDataSourceStrategy | SQLLambdaModelDataSourceStrategy;
 export type SqlModelDataSourceDbConnectionConfig = SqlModelDataSourceSecretsManagerDbConnectionConfig | SqlModelDataSourceSsmDbConnectionConfig | SqlModelDataSourceSsmDbConnectionStringConfig;
+export interface SslCertConfig {
+}
+export interface SslCertSsmPathConfig extends SslCertConfig {
+    readonly ssmPath: string | string[];
+}
 export interface SqlModelDataSourceSsmDbConnectionStringConfig {
     readonly connectionUriSsmPath: string | string[];
+    readonly sslCertConfig?: SslCertConfig;
 }
@@ -45,2 +51,3 @@ export interface SqlModelDataSourceSecretsManagerDbConnectionConfig {
     readonly hostname: string;
+    readonly sslCertConfig?: SslCertConfig;
 }
@@ -53,2 +60,3 @@ export interface SqlModelDataSourceSsmDbConnectionConfig {
     readonly databaseNameSsmPath: string;
+    readonly sslCertConfig?: SslCertConfig;
 }
@@ -85,2 +93,3 @@ export interface SqlDirectiveDataSourceStrategy {
 export declare const isSqlModelDataSourceSsmDbConnectionStringConfig: (obj: any) => obj is SqlModelDataSourceSsmDbConnectionStringConfig;
+export declare const isSslCertSsmPathConfig: (obj: any) => obj is SslCertSsmPathConfig;
 //# sourceMappingURL=types.d.ts.map

lib/model-datasource/types.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isSqlModelDataSourceSsmDbConnectionStringConfig = exports.isSqlModelDataSourceSecretsManagerDbConnectionConfig = exports.isSqlModelDataSourceSsmDbConnectionConfig = exports.isSqlModelDataSourceDbConnectionConfig = void 0;
+exports.isSslCertSsmPathConfig = exports.isSqlModelDataSourceSsmDbConnectionStringConfig = exports.isSqlModelDataSourceSecretsManagerDbConnectionConfig = exports.isSqlModelDataSourceSsmDbConnectionConfig = exports.isSqlModelDataSourceDbConnectionConfig = void 0;
 const isSqlModelDataSourceDbConnectionConfig = (obj) => {
@@ -30,2 +30,4 @@ return (0, exports.isSqlModelDataSourceSsmDbConnectionConfig)(obj) || (0, exports.isSqlModelDataSourceSecretsManagerDbConnectionConfig)(obj);
 exports.isSqlModelDataSourceSsmDbConnectionStringConfig = isSqlModelDataSourceSsmDbConnectionStringConfig;
+const isSslCertSsmPathConfig = (obj) => obj && typeof obj === 'object' && 'ssmPath' in obj && (Array.isArray(obj.ssmPath) || typeof obj.ssmPath === 'string');
+exports.isSslCertSsmPathConfig = isSslCertSsmPathConfig;
 //# sourceMappingURL=types.js.map

package.json

 {
   "name": "@aws-amplify/graphql-transformer-interfaces",
-  "version": "3.9.0",
+  "version": "3.10.0",
   "description": "Amplify GraphQL transformer interface definitions",
@@ -63,3 +63,3 @@ "repository": {
   },
-  "gitHead": "eb2582338abd3e8337cad283b2cb973af1d4f5fd"
+  "gitHead": "25f293039b3430194e038725e71b3526ae1204d4"
 }

src/model-datasource/types.ts

@@ -128,2 +128,24 @@ // #########################################################################################################################################
 /**
+ * Marker interface. Although we can't declare it in the actual interface definition because it results in invalid C#, each conforming type
+ * must have a `configType: string` field to allow for discriminated union behavior.
+ */
+// eslint-disable-next-line @typescript-eslint/no-empty-interface
+export interface SslCertConfig {}
+
+export interface SslCertSsmPathConfig extends SslCertConfig {
+  /**
+   * The SSM path to a custom SSL certificate to use instead of the default. Amplify resolves the trust store to use as follows:
+   * - If the `ssmPath` parameter is provided, use it.
+   *   - If the parameter is a single string, use it.
+   *   - If the parameter is an array, iterate over them in order
+   *   - In either case, if the parameter is provided but the certificate content isn't retrievable, fails with an error.
+   * - If the database host is an RDS cluster, instance, or proxy (in other words, if the database host ends with "rds.amazonaws.com"), use
+   *   an RDS-specific trust store vended by AWS. See
+   *   https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.CertificatesAllRegions
+   * - Otherwise, use the trust store vended with the NodeJS runtime version that the SQL lambda is running on
+   */
+  readonly ssmPath: string | string[];
+}
+
+/**
  * The configuration option to use a Secure Systems Manager parameter to store the connection string to the database.
@@ -135,2 +157,7 @@ * @experimental
   readonly connectionUriSsmPath: string | string[];
+
+  /**
+   * An optional configuration for a custom SSL certificate authority to use when connecting to the database.
+   */
+  readonly sslCertConfig?: SslCertConfig;
 }
@@ -148,3 +175,6 @@
 
-  /** The ARN of the customer managed encryption key for the secret. If not supplied, the secret is expected to be encrypted with the default AWS-managed key. **/
+  /**
+   * The ARN of the customer managed encryption key for the secret. If not supplied, the secret is expected to be encrypted with the default
+   * AWS-managed key.
+   **/
   readonly keyArn?: string;
@@ -160,2 +190,7 @@
   readonly hostname: string;
+
+  /**
+   * An optional configuration for a custom SSL certificate authority to use when connecting to the database.
+   */
+  readonly sslCertConfig?: SslCertConfig;
 }
@@ -186,2 +221,7 @@
   readonly databaseNameSsmPath: string;
+
+  /**
+   * An optional configuration for a custom SSL certificate authority to use when connecting to the database.
+   */
+  readonly sslCertConfig?: SslCertConfig;
 }
@@ -317,1 +357,4 @@
 };
+
+export const isSslCertSsmPathConfig = (obj: any): obj is SslCertSsmPathConfig =>
+  obj && typeof obj === 'object' && 'ssmPath' in obj && (Array.isArray(obj.ssmPath) || typeof obj.ssmPath === 'string');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

573178

increased by0.72%

Lines of code

2088

increased by2.35%

No dependency changes