package com.amazonaws.wafv2.webacl; import com.amazonaws.wafv2.commons.CommonVariables; import com.amazonaws.wafv2.commons.CustomerAPIClientBuilder; import com.amazonaws.wafv2.commons.ExceptionTranslationWrapper; import lombok.RequiredArgsConstructor; import software.amazon.awssdk.services.wafv2.Wafv2Client; import software.amazon.awssdk.services.wafv2.model.DeleteWebAclRequest; import software.amazon.awssdk.services.wafv2.model.DeleteWebAclResponse; import software.amazon.awssdk.services.wafv2.model.GetWebAclRequest; import software.amazon.awssdk.services.wafv2.model.GetWebAclResponse; import software.amazon.awssdk.services.wafv2.model.WafUnavailableEntityException; import software.amazon.cloudformation.proxy.AmazonWebServicesClientProxy; import software.amazon.cloudformation.proxy.HandlerErrorCode; import software.amazon.cloudformation.proxy.Logger; import software.amazon.cloudformation.proxy.OperationStatus; import software.amazon.cloudformation.proxy.ProgressEvent; import software.amazon.cloudformation.proxy.ResourceHandlerRequest; @RequiredArgsConstructor public class DeleteHandler extends BaseHandler { private final Wafv2Client client; public DeleteHandler() { this.client = CustomerAPIClientBuilder.getClient(); } @Override public ProgressEvent handleRequest( final AmazonWebServicesClientProxy proxy, final ResourceHandlerRequest request, final CallbackContext callbackContext, final Logger logger) { final ResourceModel model = request.getDesiredResourceState(); final CallbackContext currentContext = callbackContext == null ? CallbackContext.builder() .stabilizationRetriesRemaining(CommonVariables.NUMBER_OF_STATE_POLL_RETRIES) .build() : callbackContext; if (currentContext.getStabilizationRetriesRemaining() <= 0) { return ProgressEvent.builder() .status(OperationStatus.FAILED) .errorCode(HandlerErrorCode.NotStabilized) .build(); } try { deleteWebACLExceptionWrapper(proxy, model).execute(); return ProgressEvent.builder() .status(OperationStatus.SUCCESS) .build(); } catch (WafUnavailableEntityException e) { // entity still being sequenced return ProgressEvent.builder() .resourceModel(model) .status(OperationStatus.IN_PROGRESS) .callbackContext(CallbackContext.builder() .stabilizationRetriesRemaining(currentContext.getStabilizationRetriesRemaining() - 1) .build()) .callbackDelaySeconds(CommonVariables.CALLBACK_DELAY_SECONDS) .build(); } catch (RuntimeException e) { // handle error code return ProgressEvent.builder() .status(OperationStatus.FAILED) .errorCode(ExceptionTranslationWrapper.translateExceptionIntoErrorCode(e)) .message(e.getMessage()) .build(); } } private ExceptionTranslationWrapper deleteWebACLExceptionWrapper( final AmazonWebServicesClientProxy proxy, final ResourceModel model) { return new ExceptionTranslationWrapper() { @Override public DeleteWebAclResponse doWithTranslation() throws RuntimeException { final DeleteWebAclRequest deleteWebAclRequest = DeleteWebAclRequest.builder() .name(model.getName()) .id(model.getId()) .lockToken(getLockToken(proxy, model)) .scope(model.getScope()) .build(); final DeleteWebAclResponse response = proxy.injectCredentialsAndInvokeV2( deleteWebAclRequest, client::deleteWebACL); return response; } }; } private String getLockToken(final AmazonWebServicesClientProxy proxy, final ResourceModel model) { final GetWebAclRequest getWebAclRequest = GetWebAclRequest.builder() .name(model.getName()) .id(model.getId()) .scope(model.getScope()) .build(); final GetWebAclResponse response = proxy.injectCredentialsAndInvokeV2( getWebAclRequest, client::getWebACL); return response.lockToken(); } }