Add storage bucket

Author: mnapoli

src/storage/StorageBucket.ts

@@ -0,0 +1,32 @@
+import { BlockPublicAccess, Bucket, BucketEncryption, StorageClass } from 'aws-cdk-lib/aws-s3';
+import { Duration } from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+import { BucketProps } from 'aws-cdk-lib/aws-s3/lib/bucket';
+
+export class StorageBucket extends Bucket {
+    constructor(scope: Construct, id: string, props?: BucketProps) {
+        const defaults: Partial<BucketProps> = {
+            // Encrypted at rest
+            encryption: BucketEncryption.S3_MANAGED,
+            // Versioned
+            versioned: true,
+            blockPublicAccess: BlockPublicAccess.BLOCK_ALL,
+            enforceSSL: true,
+            lifecycleRules: [
+                {
+                    transitions: [
+                        {
+                            storageClass: StorageClass.INTELLIGENT_TIERING,
+                            transitionAfter: Duration.days(0),
+                        },
+                    ],
+                },
+                {
+                    noncurrentVersionExpiration: Duration.days(30),
+                },
+            ],
+        };
+
+        super(scope, id, Object.assign({}, defaults, props));
+    }
+}

test/storage/StorageBucket.test.ts

@@ -0,0 +1,13 @@
+import { describe, expect, it } from 'vitest';
+import { cleanupTemplate, compileTestStack } from '../helper';
+import { StorageBucket } from '../../src/storage/StorageBucket';
+
+describe('StorageBucket', () => {
+    it('builds', () => {
+        const template = compileTestStack((stack) => {
+            new StorageBucket(stack, 'Files');
+        }).toJSON();
+
+        expect(cleanupTemplate(template).Resources).toMatchSnapshot();
+    });
+});

test/storage/__snapshots__/StorageBucket.test.ts.snap

@@ -0,0 +1,97 @@
+// Vitest Snapshot v1
+
+exports[`StorageBucket > builds 1`] = `
+{
+  "Files8E6940B8": {
+    "DeletionPolicy": "Retain",
+    "Properties": {
+      "BucketEncryption": {
+        "ServerSideEncryptionConfiguration": [
+          {
+            "ServerSideEncryptionByDefault": {
+              "SSEAlgorithm": "AES256",
+            },
+          },
+        ],
+      },
+      "LifecycleConfiguration": {
+        "Rules": [
+          {
+            "Status": "Enabled",
+            "Transitions": [
+              {
+                "StorageClass": "INTELLIGENT_TIERING",
+                "TransitionInDays": 0,
+              },
+            ],
+          },
+          {
+            "NoncurrentVersionExpiration": {
+              "NoncurrentDays": 30,
+            },
+            "Status": "Enabled",
+          },
+        ],
+      },
+      "PublicAccessBlockConfiguration": {
+        "BlockPublicAcls": true,
+        "BlockPublicPolicy": true,
+        "IgnorePublicAcls": true,
+        "RestrictPublicBuckets": true,
+      },
+      "VersioningConfiguration": {
+        "Status": "Enabled",
+      },
+    },
+    "Type": "AWS::S3::Bucket",
+    "UpdateReplacePolicy": "Retain",
+  },
+  "FilesPolicyCFAB4773": {
+    "Properties": {
+      "Bucket": {
+        "Ref": "Files8E6940B8",
+      },
+      "PolicyDocument": {
+        "Statement": [
+          {
+            "Action": "s3:*",
+            "Condition": {
+              "Bool": {
+                "aws:SecureTransport": "false",
+              },
+            },
+            "Effect": "Deny",
+            "Principal": {
+              "AWS": "*",
+            },
+            "Resource": [
+              {
+                "Fn::GetAtt": [
+                  "Files8E6940B8",
+                  "Arn",
+                ],
+              },
+              {
+                "Fn::Join": [
+                  "",
+                  [
+                    {
+                      "Fn::GetAtt": [
+                        "Files8E6940B8",
+                        "Arn",
+                      ],
+                    },
+                    "/*",
+                  ],
+                ],
+              },
+            ],
+          },
+        ],
+        "Version": "2012-10-17",
+      },
+    },
+    "Type": "AWS::S3::BucketPolicy",
+  },
+}
+`;