mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-09-30 08:53:15 +00:00
091c5fcb44
BLOCK-01: Add API Gateway JWT authorizer with Cognito, route internal Lambda calls through Function URL to bypass gateway auth BLOCK-02/03: Prevent proposal number race condition with pg_advisory_xact_lock and filter revision numbers from max-number query BLOCK-04: Restrict VendorProposals and GeneratedPdfs to admins/sysadmins BLOCK-05: Sum all vendor costs instead of overwriting with single vendor BLOCK-06: Enable ValidateAudience on JWT, add Auth env vars to API Lambda BLOCK-07: Validate ID token signature in AuthController via OIDC discovery BLOCK-08: Use batchItemFailures in all Lambda SQS handlers BLOCK-09: Increase SQS visibility timeout from 180s to 720s FIX-10: Scope dispatcher queries to own proposals (IDOR fix)
39 lines
1.2 KiB
TypeScript
39 lines
1.2 KiB
TypeScript
import * as cdk from 'aws-cdk-lib';
|
|
import { FoundationStack } from '../lib/foundation-stack';
|
|
import { ComputeStack } from '../lib/compute-stack';
|
|
import { FrontendStack } from '../lib/frontend-stack';
|
|
|
|
const app = new cdk.App();
|
|
|
|
const env: cdk.Environment = {
|
|
account: '328440206208',
|
|
region: 'us-east-1',
|
|
};
|
|
|
|
const foundation = new FoundationStack(app, 'proposal-system-foundation', {
|
|
stackName: 'proposal-system-foundation',
|
|
env,
|
|
description: 'Proposal System - VPC, RDS, S3, SQS, Cognito',
|
|
});
|
|
|
|
const compute = new ComputeStack(app, 'proposal-system-compute', {
|
|
stackName: 'proposal-system-compute',
|
|
env,
|
|
description: 'Proposal System - API Lambda, Python Lambdas, Bedrock KB',
|
|
vpc: foundation.vpc,
|
|
lambdaSecurityGroup: foundation.lambdaSecurityGroup,
|
|
dbSecret: foundation.dbSecret,
|
|
uploadsBucket: foundation.uploadsBucket,
|
|
generatedBucket: foundation.generatedBucket,
|
|
libraryBucket: foundation.libraryBucket,
|
|
jobsQueue: foundation.jobsQueue,
|
|
userPool: foundation.userPool,
|
|
webClientId: foundation.webClientId,
|
|
mobileClientId: foundation.mobileClientId,
|
|
});
|
|
|
|
new FrontendStack(app, 'proposal-system-frontend', {
|
|
stackName: 'proposal-system-frontend',
|
|
env,
|
|
description: 'Proposal System - CloudFront + S3 web hosting',
|
|
});
|