Merge remote-tracking branch 'remote/main' into main

Author: hickeydh-aws

.eslintrc.js

@@ -17,7 +17,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: 12
+          node-version: 14
       - name: Cache Node.js modules
         uses: actions/cache@v1
         with:
@@ -28,7 +28,7 @@ jobs:
             ${{ runner.OS }}-
       - name: Install Node.js modules
         run: |
-          npm install -g pnpm@5.18.9
+          npm install -g pnpm@6.2.3
           pnpm install --unsafe-perm --frozen-lockfile
       - name: Fix nasty bug in CDK
         run: |

.github/workflows/build.yml

@@ -17,7 +17,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: 12
+          node-version: 14
       - name: Cache Node.js modules
         uses: actions/cache@v1
         with:
@@ -28,7 +28,7 @@ jobs:
             ${{ runner.OS }}-
       - name: Install Node.js modules
         run: |
-          npm install -g pnpm@5.18.9
+          npm install -g pnpm@6.2.3
           pnpm install --frozen-lockfile
       - name: Analyze TypeScript files
         run: |
@@ -42,10 +42,10 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v1
         with:
-          node-version: 12
+          node-version: 14
       - name: Install Prettier
         run: |
-          npm install -g prettier@2.2.0
+          npm install -g prettier@2.2.1
       - name: Analyze TypeScript files
         run: |
           prettier --check **/*.ts

.github/workflows/lint-prettier.yml

@@ -28,10 +28,10 @@ jobs:
         env:
           RUNNER_TEMP: /tmp/runner
         with:
-          node-version: 12
+          node-version: 14
       - name: Install pnpm
         run: |
-          npm install -g pnpm@5.18.9
+          npm install -g pnpm@6.2.3
       - name: Generate Changelog
         id: changelog
         env:

.github/workflows/release.yml

@@ -1,8 +1,8 @@
-cdk.out
-node_modules
-.DS_Store
-*.log
-config.json
-aws-landing-zone-configuration.zip
-**/dist
-.idea
+cdk.out
+node_modules
+.DS_Store
+*.log
+config.json
+aws-landing-zone-configuration.zip
+**/dist
+.idea

.gitignore

@@ -0,0 +1,55 @@
+image: public.ecr.aws/bitnami/node:14
+
+workflow:
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_COMMIT_BRANCH == 'main'
+
+stages:
+  - build
+
+default:
+  before_script:
+    - export NODE_OPTIONS=--max_old_space_size=4096
+    - npm install -g pnpm@6.2.3
+    - pnpm recursive install
+    - pnpm -w build
+
+test:
+  stage: build
+  script:
+    - pnpm -w test
+  timeout: 3h
+
+eslint:
+  stage: build
+  script:
+    - pnpm -w lint:eslint
+  timeout: 3h
+
+typecheck:
+  stage: build
+  script:
+    - pnpm -w lint:typecheck
+  timeout: 3h
+
+ui:
+  stage: build
+  script:
+    - apt-get update
+    - cd src/ui
+    - pnpm build:ui
+  artifacts:
+    expire_in: 30 days
+    paths:
+      - src/ui/build
+
+docs-gen:
+  stage: build
+  script:
+    - cd src/lib/docs-gen
+    - pnpm build
+  artifacts:
+    expire_in: 30 days
+    paths:
+      - src/lib/docs-gen/output-docs

.gitlab-ci.yml

@@ -0,0 +1,50 @@
+## Confirmation
+The ASEA is supported by a resource-constrained team within AWS. Our Community of Practice (COP) Slack channel should be your first point of contact before raising a bug via the GitLab repo. This ensures that we preserve the core team's attention and helps rule out misconfiguration as a source of the problem.
+
+* COP Channel: https://amzn-aws.slack.com/archives/C0260BGSH3L
+
+Please confirm you have explored this issue via the COP channel **OR** confirm you have a high level of confidence your issue warrants immediate developer attention due to customer impact:
+(yes|no)
+
+
+## Summary
+(Summarize the bug encountered concisely)
+
+
+## Steps to reproduce
+(How one can reproduce the issue)
+
+
+## Relevant Details
+(Provide as much information as possible, including your accelerator version, configuration file, environment/region details, etc)
+- Accelerator Version: 
+- Issue during NEW Install? 
+- Issue during UPGRADE? 
+- Issue with existing deployment? 
+- Which step or Phase in the State Machine did it fail?
+- Please provide error message per the Operations Guide Troubeshooting section:
+
+- All other relevant details:
+
+
+## What is the current bug behavior?
+(What actually happens)
+
+
+## What is the expected correct behavior?
+(What you should see instead)
+
+
+## Relevant logs and/or screenshots
+(Any log output you feel is relevant. Feel free to attach a screenshot)
+
+
+```
+please use code blocks (```) to format console output, logs, etc for the sake of readability.
+```
+
+## Any other details?
+
+
+/label ~Bug ~Accelerator
+/cc @bmycroft

.gitlab/issue_templates/Bug.md

@@ -0,0 +1,34 @@
+## Confirmation
+The ASEA is supported by a resource-constrained team within AWS. Our Community of Practice (COP) Slack channel should be your first point of contact before raising a feature request via the GitLab repo. This ensures that we preserve the core team's attention and helps verify that the feature under request is not already achievable via configuration.
+
+* COP Channel: https://amzn-aws.slack.com/archives/C0260BGSH3L
+
+Please confirm you have explored this feature request via the COP channel:
+(yes|no)
+
+
+## Summary
+(Summarize the feature request concisely)
+
+
+## Customer Benefit
+(What is the customer benefit of this feature request)
+
+
+## Relevant Details
+(Provide as much information as possible, including your accelerator version, configuration file, environment/region details, etc)
+
+
+## Relevant logs and/or screenshots
+(Any log output you feel is relevant. Feel free to attach a screenshot)
+
+
+```
+please use code blocks (```) to format console output, logs, etc for the sake of readability.
+```
+
+## Any other details?
+
+
+/label ~Accelerator
+/cc @bmycroft

.gitlab/issue_templates/Feature Request.md

@@ -0,0 +1,62 @@
+# Ignore Config used with code.amazon.com
+Config
+
+^dist/
+
+.github/workflows/publish.yml:31
+.github/workflows/release.yml:53
+CODE_OF_CONDUCT.md
+CONTRIBUTING.md
+docs/architectures/pbmm/architecture.md
+docs/architectures/pbmm/log-file-locations.md
+docs/architectures/pbmm/AWS_PBMM_Accel_Account_Network_VPC.pdf
+docs/developer/developer-guide.md
+docs/faq/faq.md
+docs/installation/customization-index.md
+docs/installation/installation.md
+docs/installation/sm_inputs.md
+docs/operations/operations-import-ALZAccount.md
+pnpm-lock.yaml:3142
+reference-artifacts/Certs-Sample/example1-cert.key
+reference-artifacts/Certs-Sample/example2-cert.key
+reference-artifacts/config-rules/ec2-instance-profile-permissions.zip
+reference-artifacts/config-rules/ec2-instance-profile.zip
+reference-artifacts/Custom-Scripts/SEA-uninstall/aws-sea-cleanup.py:67
+reference-artifacts/Custom-Scripts/SEA-uninstall/aws-sea-cleanup.py:66
+reference-artifacts/SAMPLE_CONFIGS/config.*.json
+reference-artifacts/SAMPLE_CONFIGS/sample_snippets.md
+reference-artifacts/SCPs/ASEA-Guardrails-Sensitive.json:57
+reference-artifacts/SCPs/ASEA-Guardrails-Sensitive.json:173
+reference-artifacts/iam-policies/key-policy-basic.txt:9
+src/core/cdk/src/index.ts:43
+src/core/runtime/src/create-stack-set/create-stack-set.ts:116
+src/core/runtime/src/create-stack-set/create-stack-set.ts:115
+src/core/runtime/test/load-configuration-step.mocks.ts:70
+src/core/runtime/test/load-configuration-step.spec.ts:139
+src/deployments/cdk/README.md
+src/deployments/cdk/test/apps/unsupported-changes.mocks.ts
+src/deployments/cdk/test/deployments/alb/step-1.spec.ts:24
+src/installer/cdk/test/start-execution.spec.ts:98
+src/installer/cdk/test/start-execution.spec.ts:97
+src/installer/cdk/test/start-execution.spec.ts:86
+src/installer/cdk/test/start-execution.spec.ts:86
+src/lib/cdk-plugin-assume-role/src/assume-role-provider-source.ts:59
+src/lib/cdk-plugin-assume-role/src/assume-role-provider-source.ts:58
+src/lib/common/src/aws/sts.ts:54
+src/lib/common/src/aws/sts.ts:53
+src/lib/common-config/test/config/compare/validate.spec.ts:54
+src/lib/custom-resources/cdk-associate-hosted-zones/runtime/src/index.ts:72
+src/lib/custom-resources/cdk-associate-hosted-zones/runtime/src/index.ts:71
+src/lib/custom-resources/cdk-disassociate-hosted-zones/runtime/src/index.ts:67
+src/lib/custom-resources/cdk-disassociate-hosted-zones/runtime/src/index.ts:66
+src/lib/custom-resources/cdk-ec2-image-finder/README.md
+src/ui/src/components/aws-credentials-context.tsx:53
+src/ui/src/components/aws-credentials-context.tsx:44
+src/ui/src/components/aws-credentials-context.tsx:43
+src/ui/src/pages/wizards/components/account-table.tsx:89
+src/ui/src/pages/wizards/components/organizational-unit-table.tsx:68
+src/ui/src/pages/wizards/steps/configure-global-settings.tsx:309
+src/ui/src/pages/wizards/steps/configure-global-settings.tsx:308
+test/config.example.json:563
+test/config.example.json:69
+

.viperlightignore

@@ -0,0 +1,4 @@
+{
+  "all": true,
+  "failOn": "medium"
+}