from aws_cdk import CfnOutput, Duration, Stack, Tags
from aws_cdk import aws_cloudtrail as cloudtrail
from aws_cdk import aws_ec2 as ec2
from aws_cdk import aws_glue_alpha as glue
from aws_cdk import aws_iam as iam
from aws_cdk import aws_kms as kms
from aws_cdk import aws_lakeformation as lf
from aws_cdk import aws_logs as logs
from aws_cdk import aws_s3 as s3
from aws_cdk import aws_ssm as ssm
from constructs import Construct


class BaseStack(Stack):  # type: ignore
    def __init__(self, scope: Construct, construct_id: str, **kwargs: str) -> None:
        super().__init__(scope, construct_id, **kwargs)

        self.vpc = ec2.Vpc(
            self,
            "aws-sdk-pandas-vpc",
            cidr="11.19.224.0/19",
            enable_dns_hostnames=True,
            enable_dns_support=True,
            gateway_endpoints={
                "S3": {
                    "service": ec2.GatewayVpcEndpointAwsService.S3,
                },
            },
        )
        Tags.of(self.vpc).add("Name", "aws-sdk-pandas")

        # Add outputs for the EIPs generated by the VPC construct
        for public_subnet in self.vpc.public_subnets:
            elastic_ip: ec2.CfnEIP = public_subnet.node.find_child("EIP")  # type:ignore
            ssm.StringParameter(
                self,
                f"{public_subnet.node.id} EIP SSM",
                string_value=elastic_ip.ref,
                parameter_name=f"/SDKPandas/VPC/{public_subnet.node.id}/EIP",
                description=f"Elastic IP associated with public subnet {public_subnet.subnet_id}",
            )

        self.key = kms.Key(
            self,
            id="aws-sdk-pandas-key",
            description="AWS SDK for pandas Test Key.",
            policy=iam.PolicyDocument(
                statements=[
                    iam.PolicyStatement(
                        sid="Enable IAM User Permissions",
                        effect=iam.Effect.ALLOW,
                        actions=["kms:*"],
                        principals=[iam.AccountRootPrincipal()],
                        resources=["*"],
                    )
                ]
            ),
        )
        kms.Alias(
            self,
            "aws-sdk-pandas-key-alias",
            alias_name="alias/aws-sdk-pandas-key",
            target_key=self.key,
        )
        self.bucket = s3.Bucket(
            self,
            id="aws-sdk-pandas",
            block_public_access=s3.BlockPublicAccess(
                block_public_acls=True,
                block_public_policy=True,
                ignore_public_acls=True,
                restrict_public_buckets=True,
            ),
            lifecycle_rules=[
                s3.LifecycleRule(
                    id="CleaningUp",
                    enabled=True,
                    expiration=Duration.days(1),
                    abort_incomplete_multipart_upload_after=Duration.days(1),
                ),
            ],
            versioned=True,
        )
        lf.CfnResource(
            self,
            id="bucket-lf-registration",
            resource_arn=self.bucket.bucket_arn,
            use_service_linked_role=True,
        )
        inline_lf_policies = {
            "GetDataAccess": iam.PolicyDocument(
                statements=[
                    iam.PolicyStatement(
                        actions=["lakeformation:GetDataAccess"],
                        resources=["*"],
                    ),
                ]
            ),
        }
        glue_data_quality_role = iam.Role(
            self,
            "aws-sdk-pandas-glue-data-quality-role",
            role_name="GlueDataQualityRole",
            assumed_by=iam.ServicePrincipal("glue.amazonaws.com"),
            managed_policies=[
                iam.ManagedPolicy.from_aws_managed_policy_name("AmazonS3FullAccess"),
                iam.ManagedPolicy.from_aws_managed_policy_name("AWSGlueConsoleFullAccess"),
            ],
            inline_policies=inline_lf_policies,
        )
        emr_serverless_exec_role = iam.Role(
            self,
            "aws-sdk-pandas-emr-serverless-exec-role",
            role_name="EMRServerlessExecutionRole",
            assumed_by=iam.ServicePrincipal("emr-serverless.amazonaws.com"),
            managed_policies=[
                iam.ManagedPolicy.from_aws_managed_policy_name("AmazonS3FullAccess"),
                iam.ManagedPolicy.from_aws_managed_policy_name("AWSGlueConsoleFullAccess"),
            ],
            inline_policies=inline_lf_policies,
        )
        athena_spark_exec_role = iam.Role(
            self,
            "aws-sdk-pandas-athena-spark-exec-role",
            role_name="AthenaSparkExecutionRole",
            assumed_by=iam.ServicePrincipal("athena.amazonaws.com"),
            managed_policies=[
                iam.ManagedPolicy.from_aws_managed_policy_name("AmazonS3FullAccess"),
                iam.ManagedPolicy.from_aws_managed_policy_name("AWSGlueConsoleFullAccess"),
                iam.ManagedPolicy.from_aws_managed_policy_name("AmazonAthenaFullAccess"),
            ],
            inline_policies=inline_lf_policies,
        )
        glue_db = glue.Database(
            self,
            id="aws_sdk_pandas_glue_database",
            database_name="aws_sdk_pandas",
            location_uri=f"s3://{self.bucket.bucket_name}",
        )
        log_group = logs.LogGroup(
            self,
            id="aws_sdk_pandas_log_group",
            retention=logs.RetentionDays.ONE_MONTH,
        )
        log_stream = logs.LogStream(
            self,
            id="aws_sdk_pandas_log_stream",
            log_group=log_group,
        )

        self.trail = cloudtrail.Trail(
            self,
            id="Bucket Trail",
        )
        self.trail.add_s3_event_selector(
            [
                cloudtrail.S3EventSelector(bucket=self.bucket),
            ]
        )

        CfnOutput(self, "Region", value=self.region)
        CfnOutput(
            self,
            "VPC",
            value=self.vpc.vpc_id,
        )
        CfnOutput(
            self,
            "PublicSubnet1",
            value=self.vpc.public_subnets[0].subnet_id,
        )
        CfnOutput(
            self,
            "PublicSubnet2",
            value=self.vpc.public_subnets[1].subnet_id,
        )
        CfnOutput(
            self,
            "PublicSubnet3",
            value=self.vpc.public_subnets[2].subnet_id,
        )
        CfnOutput(
            self,
            "PrivateSubnet",
            value=self.vpc.private_subnets[0].subnet_id,
        )
        CfnOutput(
            self,
            "KmsKeyArn",
            value=self.key.key_arn,
        )
        CfnOutput(
            self,
            "BucketName",
            value=self.bucket.bucket_name,
        )
        ssm.StringParameter(
            self,
            "SSM BucketName",
            parameter_name="/sdk-pandas/base/BucketName",
            string_value=self.bucket.bucket_name,
        )
        CfnOutput(self, "GlueDatabaseName", value=glue_db.database_name)
        CfnOutput(self, "GlueDataQualityRole", value=glue_data_quality_role.role_arn)
        CfnOutput(self, "EMRServerlessExecutionRoleArn", value=emr_serverless_exec_role.role_arn)
        CfnOutput(self, "AthenaSparkExecutionRoleArn", value=athena_spark_exec_role.role_arn)
        CfnOutput(self, "LogGroupName", value=log_group.log_group_name)
        CfnOutput(self, "LogStream", value=log_stream.log_stream_name)

    @property
    def get_bucket(self) -> s3.Bucket:
        return self.bucket

    @property
    def get_vpc(self) -> ec2.Vpc:
        return self.vpc

    @property
    def get_key(self) -> kms.Key:
        return self.key