package awscloudfront import ( _init_ "github.com/aws/aws-cdk-go/awscdk/v2/jsii" _jsii_ "github.com/aws/jsii-runtime-go/runtime" "github.com/aws/aws-cdk-go/awscdk/v2" "github.com/aws/aws-cdk-go/awscdk/v2/awscloudfront/internal" "github.com/aws/constructs-go/constructs/v10" ) // A Response Headers Policy configuration. // // Example: // // Using an existing managed response headers policy // var bucketOrigin s3Origin // // cloudfront.NewDistribution(this, jsii.String("myDistManagedPolicy"), &DistributionProps{ // DefaultBehavior: &BehaviorOptions{ // Origin: bucketOrigin, // ResponseHeadersPolicy: cloudfront.ResponseHeadersPolicy_CORS_ALLOW_ALL_ORIGINS(), // }, // }) // // // Creating a custom response headers policy -- all parameters optional // myResponseHeadersPolicy := cloudfront.NewResponseHeadersPolicy(this, jsii.String("ResponseHeadersPolicy"), &ResponseHeadersPolicyProps{ // ResponseHeadersPolicyName: jsii.String("MyPolicy"), // Comment: jsii.String("A default policy"), // CorsBehavior: &ResponseHeadersCorsBehavior{ // AccessControlAllowCredentials: jsii.Boolean(false), // AccessControlAllowHeaders: []*string{ // jsii.String("X-Custom-Header-1"), // jsii.String("X-Custom-Header-2"), // }, // AccessControlAllowMethods: []*string{ // jsii.String("GET"), // jsii.String("POST"), // }, // AccessControlAllowOrigins: []*string{ // jsii.String("*"), // }, // AccessControlExposeHeaders: []*string{ // jsii.String("X-Custom-Header-1"), // jsii.String("X-Custom-Header-2"), // }, // AccessControlMaxAge: awscdk.Duration_Seconds(jsii.Number(600)), // OriginOverride: jsii.Boolean(true), // }, // CustomHeadersBehavior: &ResponseCustomHeadersBehavior{ // CustomHeaders: []responseCustomHeader{ // &responseCustomHeader{ // Header: jsii.String("X-Amz-Date"), // Value: jsii.String("some-value"), // Override: jsii.Boolean(true), // }, // &responseCustomHeader{ // Header: jsii.String("X-Amz-Security-Token"), // Value: jsii.String("some-value"), // Override: jsii.Boolean(false), // }, // }, // }, // SecurityHeadersBehavior: &ResponseSecurityHeadersBehavior{ // ContentSecurityPolicy: &ResponseHeadersContentSecurityPolicy{ // ContentSecurityPolicy: jsii.String("default-src https:;"), // Override: jsii.Boolean(true), // }, // ContentTypeOptions: &ResponseHeadersContentTypeOptions{ // Override: jsii.Boolean(true), // }, // FrameOptions: &ResponseHeadersFrameOptions{ // FrameOption: cloudfront.HeadersFrameOption_DENY, // Override: jsii.Boolean(true), // }, // ReferrerPolicy: &ResponseHeadersReferrerPolicy{ // ReferrerPolicy: cloudfront.HeadersReferrerPolicy_NO_REFERRER, // Override: jsii.Boolean(true), // }, // StrictTransportSecurity: &ResponseHeadersStrictTransportSecurity{ // AccessControlMaxAge: awscdk.Duration_*Seconds(jsii.Number(600)), // IncludeSubdomains: jsii.Boolean(true), // Override: jsii.Boolean(true), // }, // XssProtection: &ResponseHeadersXSSProtection{ // Protection: jsii.Boolean(true), // ModeBlock: jsii.Boolean(true), // ReportUri: jsii.String("https://example.com/csp-report"), // Override: jsii.Boolean(true), // }, // }, // RemoveHeaders: []*string{ // jsii.String("Server"), // }, // ServerTimingSamplingRate: jsii.Number(50), // }) // cloudfront.NewDistribution(this, jsii.String("myDistCustomPolicy"), &DistributionProps{ // DefaultBehavior: &BehaviorOptions{ // Origin: bucketOrigin, // ResponseHeadersPolicy: myResponseHeadersPolicy, // }, // }) // type ResponseHeadersPolicy interface { awscdk.Resource IResponseHeadersPolicy // The environment this resource belongs to. // // For resources that are created and managed by the CDK // (generally, those created by creating new class instances like Role, Bucket, etc.), // this is always the same as the environment of the stack they belong to; // however, for imported resources // (those obtained from static methods like fromRoleArn, fromBucketName, etc.), // that might be different than the stack they were imported into. Env() *awscdk.ResourceEnvironment // The tree node. Node() constructs.Node // Returns a string-encoded token that resolves to the physical name that should be passed to the CloudFormation resource. // // This value will resolve to one of the following: // - a concrete value (e.g. `"my-awesome-bucket"`) // - `undefined`, when a name should be generated by CloudFormation // - a concrete name generated automatically during synthesis, in // cross-environment scenarios. PhysicalName() *string // The ID of the response headers policy. ResponseHeadersPolicyId() *string // The stack in which this resource is defined. Stack() awscdk.Stack // Apply the given removal policy to this resource. // // The Removal Policy controls what happens to this resource when it stops // being managed by CloudFormation, either because you've removed it from the // CDK application or because you've made a change that requires the resource // to be replaced. // // The resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS // account for data recovery and cleanup later (`RemovalPolicy.RETAIN`). ApplyRemovalPolicy(policy awscdk.RemovalPolicy) GeneratePhysicalName() *string // Returns an environment-sensitive token that should be used for the resource's "ARN" attribute (e.g. `bucket.bucketArn`). // // Normally, this token will resolve to `arnAttr`, but if the resource is // referenced across environments, `arnComponents` will be used to synthesize // a concrete ARN with the resource's physical name. Make sure to reference // `this.physicalName` in `arnComponents`. GetResourceArnAttribute(arnAttr *string, arnComponents *awscdk.ArnComponents) *string // Returns an environment-sensitive token that should be used for the resource's "name" attribute (e.g. `bucket.bucketName`). // // Normally, this token will resolve to `nameAttr`, but if the resource is // referenced across environments, it will be resolved to `this.physicalName`, // which will be a concrete name. GetResourceNameAttribute(nameAttr *string) *string // Returns a string representation of this construct. ToString() *string } // The jsii proxy struct for ResponseHeadersPolicy type jsiiProxy_ResponseHeadersPolicy struct { internal.Type__awscdkResource jsiiProxy_IResponseHeadersPolicy } func (j *jsiiProxy_ResponseHeadersPolicy) Env() *awscdk.ResourceEnvironment { var returns *awscdk.ResourceEnvironment _jsii_.Get( j, "env", &returns, ) return returns } func (j *jsiiProxy_ResponseHeadersPolicy) Node() constructs.Node { var returns constructs.Node _jsii_.Get( j, "node", &returns, ) return returns } func (j *jsiiProxy_ResponseHeadersPolicy) PhysicalName() *string { var returns *string _jsii_.Get( j, "physicalName", &returns, ) return returns } func (j *jsiiProxy_ResponseHeadersPolicy) ResponseHeadersPolicyId() *string { var returns *string _jsii_.Get( j, "responseHeadersPolicyId", &returns, ) return returns } func (j *jsiiProxy_ResponseHeadersPolicy) Stack() awscdk.Stack { var returns awscdk.Stack _jsii_.Get( j, "stack", &returns, ) return returns } func NewResponseHeadersPolicy(scope constructs.Construct, id *string, props *ResponseHeadersPolicyProps) ResponseHeadersPolicy { _init_.Initialize() if err := validateNewResponseHeadersPolicyParameters(scope, id, props); err != nil { panic(err) } j := jsiiProxy_ResponseHeadersPolicy{} _jsii_.Create( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", []interface{}{scope, id, props}, &j, ) return &j } func NewResponseHeadersPolicy_Override(r ResponseHeadersPolicy, scope constructs.Construct, id *string, props *ResponseHeadersPolicyProps) { _init_.Initialize() _jsii_.Create( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", []interface{}{scope, id, props}, r, ) } // Import an existing Response Headers Policy from its ID. func ResponseHeadersPolicy_FromResponseHeadersPolicyId(scope constructs.Construct, id *string, responseHeadersPolicyId *string) IResponseHeadersPolicy { _init_.Initialize() if err := validateResponseHeadersPolicy_FromResponseHeadersPolicyIdParameters(scope, id, responseHeadersPolicyId); err != nil { panic(err) } var returns IResponseHeadersPolicy _jsii_.StaticInvoke( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "fromResponseHeadersPolicyId", []interface{}{scope, id, responseHeadersPolicyId}, &returns, ) return returns } // Checks if `x` is a construct. // // Use this method instead of `instanceof` to properly detect `Construct` // instances, even when the construct library is symlinked. // // Explanation: in JavaScript, multiple copies of the `constructs` library on // disk are seen as independent, completely different libraries. As a // consequence, the class `Construct` in each copy of the `constructs` library // is seen as a different class, and an instance of one class will not test as // `instanceof` the other class. `npm install` will not create installations // like this, but users may manually symlink construct libraries together or // use a monorepo tool: in those cases, multiple copies of the `constructs` // library can be accidentally installed, and `instanceof` will behave // unpredictably. It is safest to avoid using `instanceof`, and using // this type-testing method instead. // // Returns: true if `x` is an object created from a class which extends `Construct`. func ResponseHeadersPolicy_IsConstruct(x interface{}) *bool { _init_.Initialize() if err := validateResponseHeadersPolicy_IsConstructParameters(x); err != nil { panic(err) } var returns *bool _jsii_.StaticInvoke( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "isConstruct", []interface{}{x}, &returns, ) return returns } // Returns true if the construct was created by CDK, and false otherwise. func ResponseHeadersPolicy_IsOwnedResource(construct constructs.IConstruct) *bool { _init_.Initialize() if err := validateResponseHeadersPolicy_IsOwnedResourceParameters(construct); err != nil { panic(err) } var returns *bool _jsii_.StaticInvoke( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "isOwnedResource", []interface{}{construct}, &returns, ) return returns } // Check whether the given construct is a Resource. func ResponseHeadersPolicy_IsResource(construct constructs.IConstruct) *bool { _init_.Initialize() if err := validateResponseHeadersPolicy_IsResourceParameters(construct); err != nil { panic(err) } var returns *bool _jsii_.StaticInvoke( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "isResource", []interface{}{construct}, &returns, ) return returns } func ResponseHeadersPolicy_CORS_ALLOW_ALL_ORIGINS() IResponseHeadersPolicy { _init_.Initialize() var returns IResponseHeadersPolicy _jsii_.StaticGet( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "CORS_ALLOW_ALL_ORIGINS", &returns, ) return returns } func ResponseHeadersPolicy_CORS_ALLOW_ALL_ORIGINS_AND_SECURITY_HEADERS() IResponseHeadersPolicy { _init_.Initialize() var returns IResponseHeadersPolicy _jsii_.StaticGet( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "CORS_ALLOW_ALL_ORIGINS_AND_SECURITY_HEADERS", &returns, ) return returns } func ResponseHeadersPolicy_CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT() IResponseHeadersPolicy { _init_.Initialize() var returns IResponseHeadersPolicy _jsii_.StaticGet( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT", &returns, ) return returns } func ResponseHeadersPolicy_CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT_AND_SECURITY_HEADERS() IResponseHeadersPolicy { _init_.Initialize() var returns IResponseHeadersPolicy _jsii_.StaticGet( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "CORS_ALLOW_ALL_ORIGINS_WITH_PREFLIGHT_AND_SECURITY_HEADERS", &returns, ) return returns } func ResponseHeadersPolicy_SECURITY_HEADERS() IResponseHeadersPolicy { _init_.Initialize() var returns IResponseHeadersPolicy _jsii_.StaticGet( "aws-cdk-lib.aws_cloudfront.ResponseHeadersPolicy", "SECURITY_HEADERS", &returns, ) return returns } func (r *jsiiProxy_ResponseHeadersPolicy) ApplyRemovalPolicy(policy awscdk.RemovalPolicy) { if err := r.validateApplyRemovalPolicyParameters(policy); err != nil { panic(err) } _jsii_.InvokeVoid( r, "applyRemovalPolicy", []interface{}{policy}, ) } func (r *jsiiProxy_ResponseHeadersPolicy) GeneratePhysicalName() *string { var returns *string _jsii_.Invoke( r, "generatePhysicalName", nil, // no parameters &returns, ) return returns } func (r *jsiiProxy_ResponseHeadersPolicy) GetResourceArnAttribute(arnAttr *string, arnComponents *awscdk.ArnComponents) *string { if err := r.validateGetResourceArnAttributeParameters(arnAttr, arnComponents); err != nil { panic(err) } var returns *string _jsii_.Invoke( r, "getResourceArnAttribute", []interface{}{arnAttr, arnComponents}, &returns, ) return returns } func (r *jsiiProxy_ResponseHeadersPolicy) GetResourceNameAttribute(nameAttr *string) *string { if err := r.validateGetResourceNameAttributeParameters(nameAttr); err != nil { panic(err) } var returns *string _jsii_.Invoke( r, "getResourceNameAttribute", []interface{}{nameAttr}, &returns, ) return returns } func (r *jsiiProxy_ResponseHeadersPolicy) ToString() *string { var returns *string _jsii_.Invoke( r, "toString", nil, // no parameters &returns, ) return returns }