feat!: BLEA v3 (#298)

* feat(base-ct-audit)!: delete base-ct-audit (#221)

Delete Audit account baseline. This is discussed in #237.

* feat(base-standalone)!: compose into 1 stack, and use parameter.ts (#161)

* refactor(base-standalone): compose into 1 stack and use parameter.ts

* feat(base-standalone): refactor file and construct names

* build: fix eslint fails on jest.config.js

* fix(base-standalone): remove chatbot params

* test(base-standalone): fix snapshot test

* Revert "build: fix eslint fails on jest.config.js"

This reverts commit 18f4275.

* build(base-standalone): remove unused settings from package.json

* update package-lock.json

* feat(base-ct-guest)!: compose into 1 stack, and use parameter.ts (#220)

* feat(base-ct-guest)!: compose into 1 stack and use parameter.ts

* feat(base-ct-guest)!: rename usecase

* build(base-ct-guest): remove lint, format npm tasks

* test(base-ct-guest): fix snapshot test

* feat(base-ct-guest): deploy baseline via Service Catalog / AFC

* remove product-stack-snapshots

* add CDK Pipelines into blea-base-ct-guest

---------

Co-authored-by: Yukitaka Ohmura <[email protected]>

* refactor(guest-apiapp-sample): merge into single stack and change method to access parameter (#240)

* Merge multiple stacks to one stack.
* Merge two language (Python, Node.js) sample applications into single application.
* Change method to access parameters to use parameter.ts

* refactor(guest-webapp-sample)!: split into 2 usecases, and decrease number of stacks (#239)

* refactor(guest-webapp-sample)!: split into 2 usecases, and decrease number of stacks

* delete .gitignore from ec2app-sample

* Update package-lock.json

---------

Co-authored-by: Yukitaka Ohmura <[email protected]>

* refactor(blea-base-ct-guest): Separate deploy parameter from pipeline

* doc: Update Japanese docs to align v3 procedure

* refactor: renew deprecated method and class on CloudWatch

* fix: delete unnecessary information (#245)

* refactor: rename Construct IDs and variable names

* refactor: set different names to ct/standalone

* refactor: rename packages

* test: add missing snapshot tests for gov-base-ct and fix formats

* refactor: remove "security" prefix

* build: refactor npm packages and build scripts

* ci: remove product-stack-snapshots generated by test

* ci: fix escape

* refactor: fix ecs-app class names

* fix: pass env parameter to stacks

* test: update snapshots

* fix: specify env

* build: remove parameter.js when clean, and update snapshots

* feat: re-add Chatbot to gov-base when deploy via CLI

* test: fix tests

* feat(ecs-app): deploy without custom domain

* refactor: rename Construct IDs and variable names for consistent use in this project (#286)

* refactor: rename Construct IDs and variable names

* refactor: set different names to ct/standalone

* refactor: rename packages

* test: add missing snapshot tests for gov-base-ct and fix formats

* refactor: remove "security" prefix

* build: refactor npm packages and build scripts

* ci: remove product-stack-snapshots generated by test

* ci: fix escape

* refactor: fix ecs-app class names

* fix: pass env parameter to stacks

* test: update snapshots

* fix: specify env

* build: remove parameter.js when clean, and update snapshots

---------

Co-authored-by: Yukitaka Ohmura <[email protected]>

* docs: restore codes to use custom domain on CloudFront as a comment

* fix(gov-base-ct, gov-base-standalone): adopt s3's new bucket default security policy (#296)

* fix(gov-base-ct, gov-base-standalone): adopt s3's new bucket default security policy

* doc: Update English docs to align v3 (#297)

* docs: add versioning policy and some fixes

* build: remove cdk

---------

Co-authored-by: Kenji Kono <[email protected]>
Co-authored-by: Kenji Kono <[email protected]>

.depcheckrc.yml

@@ -0,0 +1,22 @@
+skip-missing: true
+ignore-patterns:
+  - cdk.out
+specials:
+  - eslint
+  - prettier
+  - jest
+  - lint-staged
+ignores:
+  - eslint*
+  - prettier
+  - ts-node
+  - esbuild
+  - depcheck
+  - '@types/node'
+  - '@types/jest'
+  - '@typescript-eslint/*'
+  - aws-cdk
+  - source-map-support
+  - simple-git-hooks
+  - standard-version
+  - typescript

.github/workflows/build.yml

@@ -35,8 +35,12 @@ jobs:
           echo "node: $(node --version)"
           echo "npm: $(npm --version)"
       - run: npm ci
+      - run: npm run depcheck && npm run depcheck --workspaces
       - run: npm run lint:ci
       - run: npm run format:ci
       - run: npm run build --workspaces
       - run: npm run test --workspaces
-      - run: npm run synth:dev --workspaces
+      # Delete product-stack-snapshots which is created by test.
+      # Without this step, synth fails.
+      - run: npm run clean:product --workspace usecases/blea-gov-base-ct
+      - run: npm run synth --workspaces

.gitlab-ci.yml

@@ -21,11 +21,15 @@ variables:
   AWS_SECRET_ACCESS_KEY: ''
 
 .node-build: &node-build
+  - npm run depcheck && npm run depcheck --workspaces
   - npm run lint:ci
   - npm run format:ci
   - npm run build --workspaces
   - npm run test --workspaces
-  - npm run synth:dev --workspaces
+  # Delete product-stack-snapshots which is created by test.
+  # Without this step, synth fails.
+  - npm run clean:product --workspace usecases/blea-gov-base-ct
+  - npm run synth --workspaces
 
 build-node14:
   stage: build

.prettierignore

@@ -3,3 +3,5 @@ CHANGELOG.md
 CODE_OF_CONDUCT.md
 CONTRIBUTING.md
 .github/PULL_REQUEST_TEMPLATE.md
+cdk.out
+cdk.context.json

CHANGELOG.md

@@ -15,7 +15,7 @@ All notable changes to this project will be documented in this file. See [standa
 
 ### Bug Fixes
 
-* **base-ct-guest:** Fix to support ControlTower LZ v3.0 ([#70](https://github.com/aws-samples/baseline-environment-on-aws/issues/70)) ([9067290](https://github.com/aws-samples/baseline-environment-on-aws/commit/9067290883a9216765eeb6fddf9ac9aa06a28fca))
+* **base-ct-guest:** Fix to support Control Tower LZ v3.0 ([#70](https://github.com/aws-samples/baseline-environment-on-aws/issues/70)) ([9067290](https://github.com/aws-samples/baseline-environment-on-aws/commit/9067290883a9216765eeb6fddf9ac9aa06a28fca))
 * **base-standalone:** Replace deprecated IAM Policy `AWSConfigRole` with `AWS_ConfigRole` ([#46](https://github.com/aws-samples/baseline-environment-on-aws/issues/46)) ([47cadcc](https://github.com/aws-samples/baseline-environment-on-aws/commit/47cadcce43b8173b9cd1b346010a7263469fe313))
 * enable bucket-enforce-ssl on all buckets ([#47](https://github.com/aws-samples/baseline-environment-on-aws/issues/47)) ([dac02d5](https://github.com/aws-samples/baseline-environment-on-aws/commit/dac02d5179acdf39add6ced45fa27b9b373521a8))
 * vulnerabilities in minimist ([#42](https://github.com/aws-samples/baseline-environment-on-aws/issues/42)) ([2fcef62](https://github.com/aws-samples/baseline-environment-on-aws/commit/2fcef62706443dc202de2a095bced9346484692c))
@@ -68,7 +68,7 @@ All notable changes to this project will be documented in this file. See [standa
 - Update CDK version to 1.129.0 and its dependencies.
 - **guest-webapp-sample** generalize ECS sample. now we don't use aws-ecs-patterns.
 - **guest-webapp-sample** re-organize KMS keys
-- **base-ct-guest** **base-standalone** refine notification settings for SecurityHub
+- **gov-base-ct** **gov-base-standalone** refine notification settings for SecurityHub
 
 ## [1.1.1] - 2021-06-07