more props for ReplicatedSecret, conditionally use it in EntraIDApplication

Author: joshbalfour

packages/constructs/entra-id-application/package.json

@@ -33,6 +33,8 @@
     "types": "dist/index.d.ts"
   },
   "peerDependencies": {
+    "@reapit-cdk/replicated-key": "^0.0.2",
+    "@reapit-cdk/replicated-secret": "^0.0.4",
     "aws-cdk-lib": "^2.96.2",
     "constructs": "^10.2.70"
   },
@@ -42,6 +44,8 @@
     "@reapit-cdk/eslint-config": "workspace:^",
     "@reapit-cdk/integration-tests": "workspace:^",
     "@reapit-cdk/jsii": "workspace:^",
+    "@reapit-cdk/replicated-key": "workspace:^",
+    "@reapit-cdk/replicated-secret": "workspace:^",
     "@reapit-cdk/tsup": "workspace:^",
     "@reapit-cdk/version-package": "workspace:^",
     "aws-cdk-lib": "^2.96.2",

packages/constructs/entra-id-application/src/entra-id-application.ts

@@ -7,6 +7,8 @@ import * as path from 'path'
 import { KeyInfo } from './lambdas/entra-app-key'
 import { ISecret, Secret } from 'aws-cdk-lib/aws-secretsmanager'
 import { SecretObject } from './lambdas/types'
+import { ReplicatedSecret } from '@reapit-cdk/replicated-secret'
+import { ReplicatedKey } from '@reapit-cdk/replicated-key'
 
 export interface EntraIDApplicationProps {
   config: Application
@@ -18,6 +20,8 @@ export interface CreateKeyProps {
   keyInfo: Omit<Omit<KeyInfo, 'endDateTime'>, 'startDateTime'>
   validFor: Duration
   removalPolicy?: RemovalPolicy
+  replicatedKey?: ReplicatedKey
+  replicaRegions?: string[]
 }
 
 export class EntraIDApplication extends Construct {
@@ -124,9 +128,17 @@ export class EntraIDApplication extends Construct {
         jsonField: 'tenantId',
       }),
     }
-    const secret = new Secret(scope, `${id}-secret`, {
-      secretObjectValue,
-    })
+
+    const secret =
+      props.replicaRegions && props.replicatedKey
+        ? new ReplicatedSecret(scope, `${id}-secret`, {
+            secretObjectValue,
+            replicaRegions: props.replicaRegions,
+            replicatedKey: props.replicatedKey,
+          })
+        : new Secret(scope, `${id}-secret`, {
+            secretObjectValue,
+          })
 
     secret.addRotationSchedule(`${id}-secret-rotation`, {
       automaticallyAfter: props.validFor.minus(Duration.days(7)),

packages/constructs/replicated-secret/src/replicated-secret.ts

@@ -1,5 +1,5 @@
 import { Arn, ArnFormat, CustomResource, Duration, PhysicalName, Stack, Token } from 'aws-cdk-lib'
-import { ISecret, Secret } from 'aws-cdk-lib/aws-secretsmanager'
+import { ISecret, Secret, SecretProps } from 'aws-cdk-lib/aws-secretsmanager'
 import { Construct, IDependable } from 'constructs'
 import { ReplicatedKey } from '@reapit-cdk/replicated-key'
 import { Grant, IGrantable, PolicyStatement } from 'aws-cdk-lib/aws-iam'
@@ -10,6 +10,8 @@ import * as path from 'path'
 export interface MultiRegionSecretProps {
   replicatedKey: ReplicatedKey
   replicaRegions: string[]
+  secretObjectValue?: SecretProps['secretObjectValue']
+  secretStringValue?: SecretProps['secretStringValue']
 }
 
 const secretArnToNameWithSuffix = (secret: ISecret) => {
@@ -65,6 +67,8 @@ export class ReplicatedSecret extends Secret {
           encryptionKey,
         }
       }),
+      secretObjectValue: props.secretObjectValue,
+      secretStringValue: props.secretStringValue,
     })
 
     this.masterRegion = stackRegion

yarn.lock

@@ -3007,6 +3007,8 @@ __metadata:
     "@reapit-cdk/eslint-config": "workspace:^"
     "@reapit-cdk/integration-tests": "workspace:^"
     "@reapit-cdk/jsii": "workspace:^"
+    "@reapit-cdk/replicated-key": "workspace:^"
+    "@reapit-cdk/replicated-secret": "workspace:^"
     "@reapit-cdk/tsup": "workspace:^"
     "@reapit-cdk/version-package": "workspace:^"
     aws-cdk-lib: "npm:^2.96.2"
@@ -3016,6 +3018,8 @@ __metadata:
     constructs: "npm:^10.2.70"
     ts-node: "npm:^10.9.1"
   peerDependencies:
+    "@reapit-cdk/replicated-key": ^0.0.2
+    "@reapit-cdk/replicated-secret": ^0.0.4
     aws-cdk-lib: ^2.96.2
     constructs: ^10.2.70
   languageName: unknown
@@ -3077,7 +3081,7 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@reapit-cdk/replicated-key@workspace:packages/constructs/replicated-key":
+"@reapit-cdk/replicated-key@workspace:^, @reapit-cdk/replicated-key@workspace:packages/constructs/replicated-key":
   version: 0.0.0-use.local
   resolution: "@reapit-cdk/replicated-key@workspace:packages/constructs/replicated-key"
   dependencies:
@@ -3098,7 +3102,7 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@reapit-cdk/replicated-secret@workspace:packages/constructs/replicated-secret":
+"@reapit-cdk/replicated-secret@workspace:^, @reapit-cdk/replicated-secret@workspace:packages/constructs/replicated-secret":
   version: 0.0.0-use.local
   resolution: "@reapit-cdk/replicated-secret@workspace:packages/constructs/replicated-secret"
   dependencies: