Merge branch 'main' into feature/CCM-13475-pdf-analysis

Author: tdroza-nhs

infrastructure/terraform/components/dl/README.md

@@ -11,12 +11,13 @@ No requirements.
 |------|-------------|------|---------|:--------:|
 | <a name="input_apim_auth_token_schedule"></a> [apim\_auth\_token\_schedule](#input\_apim\_auth\_token\_schedule) | Schedule to renew the APIM auth token | `string` | `"rate(9 minutes)"` | no |
 | <a name="input_apim_auth_token_url"></a> [apim\_auth\_token\_url](#input\_apim\_auth\_token\_url) | URL to generate an APIM auth token | `string` | `"https://int.api.service.nhs.uk/oauth2/token"` | no |
-| <a name="input_apim_base_url"></a> [apim\_base\_url](#input\_apim\_base\_url) | The URL used to send requests to Notify and PDM | `string` | `"https://sandbox.api.service.nhs.uk"` | no |
+| <a name="input_apim_base_url"></a> [apim\_base\_url](#input\_apim\_base\_url) | The URL used to send requests to Notify and PDM | `string` | `"https://int.api.service.nhs.uk"` | no |
 | <a name="input_apim_keygen_schedule"></a> [apim\_keygen\_schedule](#input\_apim\_keygen\_schedule) | Schedule to refresh key pairs if necessary | `string` | `"cron(0 14 * * ? *)"` | no |
 | <a name="input_aws_account_id"></a> [aws\_account\_id](#input\_aws\_account\_id) | The AWS Account ID (numeric) | `string` | n/a | yes |
 | <a name="input_component"></a> [component](#input\_component) | The variable encapsulating the name of this component | `string` | `"dl"` | no |
 | <a name="input_default_tags"></a> [default\_tags](#input\_default\_tags) | A map of default tags to apply to all taggable resources within the component | `map(string)` | `{}` | no |
 | <a name="input_enable_dynamodb_delete_protection"></a> [enable\_dynamodb\_delete\_protection](#input\_enable\_dynamodb\_delete\_protection) | Enable DynamoDB Delete Protection on all Tables | `bool` | `true` | no |
+| <a name="input_enable_pdm_mock"></a> [enable\_pdm\_mock](#input\_enable\_pdm\_mock) | Flag indicating whether to deploy PDM mock API (should be false in production environments) | `bool` | `true` | no |
 | <a name="input_environment"></a> [environment](#input\_environment) | The name of the tfscaffold environment | `string` | n/a | yes |
 | <a name="input_force_destroy"></a> [force\_destroy](#input\_force\_destroy) | Flag to force deletion of S3 buckets | `bool` | `false` | no |
 | <a name="input_force_lambda_code_deploy"></a> [force\_lambda\_code\_deploy](#input\_force\_lambda\_code\_deploy) | If the lambda package in s3 has the same commit id tag as the terraform build branch, the lambda will not update automatically. Set to True if making changes to Lambda code from on the same commit for example during development | `bool` | `false` | no |
@@ -26,6 +27,8 @@ No requirements.
 | <a name="input_log_retention_in_days"></a> [log\_retention\_in\_days](#input\_log\_retention\_in\_days) | The retention period in days for the Cloudwatch Logs events to be retained, default of 0 is indefinite | `number` | `0` | no |
 | <a name="input_mesh_poll_schedule"></a> [mesh\_poll\_schedule](#input\_mesh\_poll\_schedule) | Schedule to poll MESH for messages | `string` | `"cron(0,30 8-16 ? * MON-FRI *)"` | no |
 | <a name="input_parent_acct_environment"></a> [parent\_acct\_environment](#input\_parent\_acct\_environment) | Name of the environment responsible for the acct resources used, affects things like DNS zone. Useful for named dev environments | `string` | `"main"` | no |
+| <a name="input_pdm_mock_access_token"></a> [pdm\_mock\_access\_token](#input\_pdm\_mock\_access\_token) | Mock access token for PDM API authentication (used in local/dev environments) | `string` | `"mock-pdm-token"` | no |
+| <a name="input_pdm_use_non_mock_token"></a> [pdm\_use\_non\_mock\_token](#input\_pdm\_use\_non\_mock\_token) | Whether to use the shared APIM access token from SSM (/component/environment/apim/access\_token) instead of the mock token | `bool` | `false` | no |
 | <a name="input_project"></a> [project](#input\_project) | The name of the tfscaffold project | `string` | n/a | yes |
 | <a name="input_queue_batch_size"></a> [queue\_batch\_size](#input\_queue\_batch\_size) | maximum number of queue items to process | `number` | `10` | no |
 | <a name="input_queue_batch_window_seconds"></a> [queue\_batch\_window\_seconds](#input\_queue\_batch\_window\_seconds) | maximum time in seconds between processing events | `number` | `10` | no |
@@ -40,10 +43,13 @@ No requirements.
 | <a name="module_lambda_apim_key_generation"></a> [lambda\_apim\_key\_generation](#module\_lambda\_apim\_key\_generation) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |
 | <a name="module_lambda_lambda_apim_refresh_token"></a> [lambda\_lambda\_apim\_refresh\_token](#module\_lambda\_lambda\_apim\_refresh\_token) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |
 | <a name="module_mesh_poll"></a> [mesh\_poll](#module\_mesh\_poll) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |
+| <a name="module_pdm_mock"></a> [pdm\_mock](#module\_pdm\_mock) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |
+| <a name="module_pdm_uploader"></a> [pdm\_uploader](#module\_pdm\_uploader) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |
 | <a name="module_s3bucket_cf_logs"></a> [s3bucket\_cf\_logs](#module\_s3bucket\_cf\_logs) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-s3bucket.zip | n/a |
 | <a name="module_s3bucket_letters"></a> [s3bucket\_letters](#module\_s3bucket\_letters) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-s3bucket.zip | n/a |
 | <a name="module_s3bucket_static_assets"></a> [s3bucket\_static\_assets](#module\_s3bucket\_static\_assets) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-s3bucket.zip | n/a |
 | <a name="module_sqs_event_publisher_errors"></a> [sqs\_event\_publisher\_errors](#module\_sqs\_event\_publisher\_errors) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-sqs.zip | n/a |
+| <a name="module_sqs_pdm_uploader"></a> [sqs\_pdm\_uploader](#module\_sqs\_pdm\_uploader) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-sqs.zip | n/a |
 | <a name="module_sqs_ttl"></a> [sqs\_ttl](#module\_sqs\_ttl) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-sqs.zip | n/a |
 | <a name="module_sqs_ttl_handle_expiry_errors"></a> [sqs\_ttl\_handle\_expiry\_errors](#module\_sqs\_ttl\_handle\_expiry\_errors) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-sqs.zip | n/a |
 | <a name="module_ttl_create"></a> [ttl\_create](#module\_ttl\_create) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.24/terraform-lambda.zip | n/a |

infrastructure/terraform/components/dl/aws_api_gateway_deployment_pdm_mock.tf

@@ -0,0 +1,28 @@
+resource "aws_api_gateway_deployment" "pdm_mock" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  depends_on = [
+    aws_api_gateway_integration.create_document_reference,
+    aws_api_gateway_integration.get_document_reference,
+  ]
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+
+  triggers = {
+    redeployment = sha1(jsonencode([
+      aws_api_gateway_resource.patient_data_manager[0].id,
+      aws_api_gateway_resource.fhir[0].id,
+      aws_api_gateway_resource.r4[0].id,
+      aws_api_gateway_resource.document_reference[0].id,
+      aws_api_gateway_resource.document_reference_id[0].id,
+      aws_api_gateway_method.create_document_reference[0].id,
+      aws_api_gateway_method.get_document_reference[0].id,
+      aws_api_gateway_integration.create_document_reference[0].id,
+      aws_api_gateway_integration.get_document_reference[0].id,
+    ]))
+  }
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}

infrastructure/terraform/components/dl/aws_api_gateway_integration_create_document_reference.tf

@@ -0,0 +1,11 @@
+resource "aws_api_gateway_integration" "create_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id = aws_api_gateway_resource.document_reference[0].id
+  http_method = aws_api_gateway_method.create_document_reference[0].http_method
+
+  integration_http_method = "POST"
+  type                    = "AWS_PROXY"
+  uri                     = module.pdm_mock[0].function_invoke_arn
+}

infrastructure/terraform/components/dl/aws_api_gateway_integration_get_document_reference.tf

@@ -0,0 +1,11 @@
+resource "aws_api_gateway_integration" "get_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id = aws_api_gateway_resource.document_reference_id[0].id
+  http_method = aws_api_gateway_method.get_document_reference[0].http_method
+
+  integration_http_method = "POST"
+  type                    = "AWS_PROXY"
+  uri                     = module.pdm_mock[0].function_invoke_arn
+}

infrastructure/terraform/components/dl/aws_api_gateway_method_create_document_reference.tf

@@ -0,0 +1,8 @@
+resource "aws_api_gateway_method" "create_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id   = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id   = aws_api_gateway_resource.document_reference[0].id
+  http_method   = "POST"
+  authorization = "AWS_IAM"
+}

infrastructure/terraform/components/dl/aws_api_gateway_method_get_document_reference.tf

@@ -0,0 +1,8 @@
+resource "aws_api_gateway_method" "get_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id   = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id   = aws_api_gateway_resource.document_reference_id[0].id
+  http_method   = "GET"
+  authorization = "AWS_IAM"
+}

infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference.tf

@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.r4[0].id
+  path_part   = "DocumentReference"
+}

infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference_id.tf

@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "document_reference_id" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.document_reference[0].id
+  path_part   = "{id}"
+}

infrastructure/terraform/components/dl/aws_api_gateway_resource_fhir.tf

@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "fhir" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.patient_data_manager[0].id
+  path_part   = "FHIR"
+}

infrastructure/terraform/components/dl/aws_api_gateway_resource_patient_data_manager.tf

@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "patient_data_manager" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_rest_api.pdm_mock[0].root_resource_id
+  path_part   = "patient-data-manager"
+}