package com.amazonaws.wafv2.webacl; import com.amazonaws.util.CollectionUtils; import com.amazonaws.util.StringUtils; import com.amazonaws.wafv2.commons.CommonVariables; import com.amazonaws.wafv2.commons.CustomerAPIClientBuilder; import com.amazonaws.wafv2.commons.ExceptionTranslationWrapper; import com.amazonaws.wafv2.commons.HandlerHelper; import com.amazonaws.wafv2.webacl.converters.Converter; import com.amazonaws.wafv2.webacl.converters.StatementCommonsConverter; import com.google.common.collect.ImmutableList; import lombok.RequiredArgsConstructor; import org.apache.commons.collections.MapUtils; import software.amazon.awssdk.services.wafv2.Wafv2Client; import software.amazon.awssdk.services.wafv2.model.CreateWebAclRequest; import software.amazon.awssdk.services.wafv2.model.CreateWebAclResponse; import software.amazon.awssdk.services.wafv2.model.WafUnavailableEntityException; import software.amazon.cloudformation.proxy.AmazonWebServicesClientProxy; import software.amazon.cloudformation.proxy.HandlerErrorCode; import software.amazon.cloudformation.proxy.Logger; import software.amazon.cloudformation.proxy.OperationStatus; import software.amazon.cloudformation.proxy.ProgressEvent; import software.amazon.cloudformation.proxy.ResourceHandlerRequest; import java.util.Optional; import java.util.stream.Collectors; @RequiredArgsConstructor public class CreateHandler extends BaseHandler { private final Wafv2Client client; public CreateHandler() { this.client = CustomerAPIClientBuilder.getClient(); } @Override public ProgressEvent handleRequest( final AmazonWebServicesClientProxy proxy, final ResourceHandlerRequest request, final CallbackContext callbackContext, final Logger logger) { final ResourceModel model = request.getDesiredResourceState(); if (StringUtils.isNullOrEmpty(model.getName())) { model.setName(HandlerHelper.generateName(request)); } final CallbackContext currentContext = callbackContext == null ? CallbackContext.builder() .stabilizationRetriesRemaining(CommonVariables.NUMBER_OF_STATE_POLL_RETRIES) .build() : callbackContext; if (currentContext.getStabilizationRetriesRemaining() <= 0) { return ProgressEvent.builder() .status(OperationStatus.FAILED) .errorCode(HandlerErrorCode.NotStabilized) .build(); } try { final CreateWebAclResponse response = createWebACLExceptionWrapper(proxy, model).execute(); final ResourceModel readResourceModel = ResourceModel.builder() .id(response.summary().id()) .name(response.summary().name()) .scope(model.getScope()) .build(); return new ReadHandler(client).handleRequest(proxy, ResourceHandlerRequest.builder().desiredResourceState(readResourceModel).build(), null, logger); } catch (WafUnavailableEntityException e) { // entity still being sequenced return ProgressEvent.builder() .resourceModel(model) .status(OperationStatus.IN_PROGRESS) .callbackContext(CallbackContext.builder() .stabilizationRetriesRemaining(currentContext.getStabilizationRetriesRemaining() - 1) .build()) .callbackDelaySeconds(CommonVariables.CALLBACK_DELAY_SECONDS) .resourceModel(request.getDesiredResourceState()) .build(); } catch (RuntimeException e) { // handle error code return ProgressEvent.builder() .status(OperationStatus.FAILED) .errorCode(ExceptionTranslationWrapper.translateExceptionIntoErrorCode(e)) .message(e.getMessage()) .build(); } } private ExceptionTranslationWrapper createWebACLExceptionWrapper( final AmazonWebServicesClientProxy proxy, final ResourceModel model) { return new ExceptionTranslationWrapper() { @Override public CreateWebAclResponse doWithTranslation() throws RuntimeException { final CreateWebAclRequest.Builder createWebAclRequest = CreateWebAclRequest.builder() .name(model.getName()) .scope(model.getScope()) .description(model.getDescription()) .defaultAction(StatementCommonsConverter.INSTANCE.convert(model.getDefaultAction())) .visibilityConfig(StatementCommonsConverter.INSTANCE.convert(model.getVisibilityConfig())) .rules(Optional.ofNullable(model.getRules()).orElse(ImmutableList.of()).stream() .map(rule -> Converter.INSTANCE.convert(rule)) .collect(Collectors.toList())); if (MapUtils.isNotEmpty(model.getCustomResponseBodies())) { createWebAclRequest.customResponseBodies( Converter.INSTANCE.convert(model.getCustomResponseBodies())); } if (!CollectionUtils.isNullOrEmpty(model.getTags())) { createWebAclRequest.tags(model.getTags().stream() .map(Converter.INSTANCE::convert) .collect(Collectors.toList())); } final CreateWebAclResponse response = proxy.injectCredentialsAndInvokeV2( createWebAclRequest.build(), client::createWebACL); return response; } }; } }