fix frontend

cisagov · May 2, 2024 · 9b777df · 9b777df
1 parent 233b2cf
commit 9b777df
Show file tree

Hide file tree

Showing 11 changed files with 119 additions and 332 deletions.
diff --git a/frontend/env.yml b/frontend/env.yml
@@ -1,21 +1,74 @@
+---
 dev:
   FRONTEND_DOMAIN: ''
 
 staging:
-  DOMAIN: 'staging-cd.crossfeed.cyber.dhs.gov'
-  VPC_ENDPOINT: ${ssm:/crossfeed/staging/BACKEND_VPC_ENDPOINT}
+  REGION: us-east-1
+  ENDPOINT_TYPE: REGIONAL
+  RESOURCE_POLICY:
+    - Effect: Allow
+      Principal: '*'
+      Action: execute-api:Invoke
+      Resource: execute-api:/${self:provider.stage}/*/*
+  DOMAIN: staging-cd.crossfeed.cyber.dhs.gov
+  COGNITO_URL: https://cognito-idp.us-east-1.amazonaws.com
+  BACKEND_DOMAIN: https://api.staging-cd.crossfeed.cyber.dhs.gov
+  EMAIL_REGION: us-east-1
 
 prod:
-  DOMAIN: 'crossfeed.cyber.dhs.gov'
-  VPC_ENDPOINT: ${ssm:/crossfeed/prod/BACKEND_VPC_ENDPOINT}
+  REGION: us-east-1
+  ENDPOINT_TYPE: REGIONAL
+  RESOURCE_POLICY:
+    - Effect: Allow
+      Principal: '*'
+      Action: execute-api:Invoke
+      Resource: execute-api:/${self:provider.stage}/*/*
+  DOMAIN: crossfeed.cyber.dhs.gov
+  COGNITO_URL: https://cognito-idp.us-east-1.amazonaws.com
+  BACKEND_DOMAIN: https://api.crossfeed.cyber.dhs.gov
+  EMAIL_REGION: us-east-1
 
 staging-lz:
-  DOMAIN: 'staging.crossfeed.cyber.dhs.gov'
+  REGION: us-gov-east-1
+  ENDPOINT_TYPE: PRIVATE
+  RESOURCE_POLICY:
+    - Effect: Deny
+      Principal: '*'
+      Action: 'execute-api:Invoke'
+      Resource: 'execute-api:/${self:provider.stage}/*/*'
+      Condition:
+        StringNotEquals:
+          'aws:sourceVpce': ${file(env.yml):${self:provider.stage}.VPC_ENDPOINT, ''}
+    - Effect: Allow
+      Principal: '*'
+      Action: execute-api:Invoke
+      Resource: execute-api:/${self:provider.stage}/*/*
+  DOMAIN: staging.crossfeed.cyber.dhs.gov
   VPC_ENDPOINT: ${ssm:/crossfeed/staging/BACKEND_VPC_ENDPOINT}
+  COGNITO_URL: https://cognito-idp.us-gov-west-1.amazonaws.com
+  BACKEND_DOMAIN: https://api.staging.crossfeed.cyber.dhs.gov
+  EMAIL_REGION: us-gov-west-1
 
 prod-lz:
-  DOMAIN: 'crossfeed.cyber.dhs.gov'
+  REGION: us-gov-east-1
+  ENDPOINT_TYPE: PRIVATE
+  RESOURCE_POLICY:
+    - Effect: Deny
+      Principal: '*'
+      Action: 'execute-api:Invoke'
+      Resource: 'execute-api:/${self:provider.stage}/*/*'
+      Condition:
+        StringNotEquals:
+          'aws:sourceVpce': ${file(env.yml):${self:provider.stage}.VPC_ENDPOINT, ''}
+    - Effect: Allow
+      Principal: '*'
+      Action: execute-api:Invoke
+      Resource: execute-api:/${self:provider.stage}/*/*
+  DOMAIN: crossfeed.cyber.dhs.gov
   VPC_ENDPOINT: ${ssm:/crossfeed/prod/BACKEND_VPC_ENDPOINT}
+  COGNITO_URL: https://cognito-idp.us-gov-west-1.amazonaws.com
+  BACKEND_DOMAIN: https://api.crossfeed.cyber.dhs.gov
+  EMAIL_REGION: us-gov-west-1
 
 dev-vpc:
   securityGroupIds: