CCM-12875: split api gateway resources into their own files

Ian-Hodges · Ian-Hodges · commit b44007dd3d53 · 2025-12-18T17:18:12.000Z
diff --git a/infrastructure/terraform/components/dl/README.md b/infrastructure/terraform/components/dl/README.md
@@ -58,8 +58,6 @@ No requirements.
 | Name | Description |
 |------|-------------|
 | <a name="output_deployment"></a> [deployment](#output\_deployment) | Deployment details used for post-deployment scripts |
-| <a name="output_pdm_mock_endpoint"></a> [pdm\_mock\_endpoint](#output\_pdm\_mock\_endpoint) | The base URL of the PDM Mock (null when not deployed) |
-| <a name="output_pdm_mock_id"></a> [pdm\_mock\_id](#output\_pdm\_mock\_id) | The ID of the PDM Mock API Gateway (null when not deployed) |
 <!-- vale on -->
 <!-- markdownlint-enable -->
 <!-- END_TF_DOCS -->
diff --git a/infrastructure/terraform/components/dl/apigateway_pdm_mock.tf b/infrastructure/terraform/components/dl/apigateway_pdm_mock.tf
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_deployment_pdm_mock.tf b/infrastructure/terraform/components/dl/aws_api_gateway_deployment_pdm_mock.tf
@@ -0,0 +1,28 @@
+resource "aws_api_gateway_deployment" "pdm_mock" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  depends_on = [
+    aws_api_gateway_integration.create_document_reference,
+    aws_api_gateway_integration.get_document_reference,
+  ]
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+
+  triggers = {
+    redeployment = sha1(jsonencode([
+      aws_api_gateway_resource.patient_data_manager[0].id,
+      aws_api_gateway_resource.fhir[0].id,
+      aws_api_gateway_resource.r4[0].id,
+      aws_api_gateway_resource.document_reference[0].id,
+      aws_api_gateway_resource.document_reference_id[0].id,
+      aws_api_gateway_method.create_document_reference[0].id,
+      aws_api_gateway_method.get_document_reference[0].id,
+      aws_api_gateway_integration.create_document_reference[0].id,
+      aws_api_gateway_integration.get_document_reference[0].id,
+    ]))
+  }
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_integration_create_document_reference.tf b/infrastructure/terraform/components/dl/aws_api_gateway_integration_create_document_reference.tf
@@ -0,0 +1,11 @@
+resource "aws_api_gateway_integration" "create_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id = aws_api_gateway_resource.document_reference[0].id
+  http_method = aws_api_gateway_method.create_document_reference[0].http_method
+
+  integration_http_method = "POST"
+  type                    = "AWS_PROXY"
+  uri                     = module.pdm_mock[0].function_invoke_arn
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_integration_get_document_reference.tf b/infrastructure/terraform/components/dl/aws_api_gateway_integration_get_document_reference.tf
@@ -0,0 +1,11 @@
+resource "aws_api_gateway_integration" "get_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id = aws_api_gateway_resource.document_reference_id[0].id
+  http_method = aws_api_gateway_method.get_document_reference[0].http_method
+
+  integration_http_method = "POST"
+  type                    = "AWS_PROXY"
+  uri                     = module.pdm_mock[0].function_invoke_arn
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_method_create_document_reference.tf b/infrastructure/terraform/components/dl/aws_api_gateway_method_create_document_reference.tf
@@ -0,0 +1,8 @@
+resource "aws_api_gateway_method" "create_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id   = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id   = aws_api_gateway_resource.document_reference[0].id
+  http_method   = "POST"
+  authorization = "AWS_IAM"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_method_get_document_reference.tf b/infrastructure/terraform/components/dl/aws_api_gateway_method_get_document_reference.tf
@@ -0,0 +1,8 @@
+resource "aws_api_gateway_method" "get_document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id   = aws_api_gateway_rest_api.pdm_mock[0].id
+  resource_id   = aws_api_gateway_resource.document_reference_id[0].id
+  http_method   = "GET"
+  authorization = "AWS_IAM"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference.tf b/infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference.tf
@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "document_reference" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.r4[0].id
+  path_part   = "DocumentReference"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference_id.tf b/infrastructure/terraform/components/dl/aws_api_gateway_resource_document_reference_id.tf
@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "document_reference_id" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.document_reference[0].id
+  path_part   = "{id}"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_resource_fhir.tf b/infrastructure/terraform/components/dl/aws_api_gateway_resource_fhir.tf
@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "fhir" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.patient_data_manager[0].id
+  path_part   = "FHIR"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_resource_patient_data_manager.tf b/infrastructure/terraform/components/dl/aws_api_gateway_resource_patient_data_manager.tf
@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "patient_data_manager" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_rest_api.pdm_mock[0].root_resource_id
+  path_part   = "patient-data-manager"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_resource_r4.tf b/infrastructure/terraform/components/dl/aws_api_gateway_resource_r4.tf
@@ -0,0 +1,7 @@
+resource "aws_api_gateway_resource" "r4" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  rest_api_id = aws_api_gateway_rest_api.pdm_mock[0].id
+  parent_id   = aws_api_gateway_resource.fhir[0].id
+  path_part   = "R4"
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_rest_api_pdm_mock.tf b/infrastructure/terraform/components/dl/aws_api_gateway_rest_api_pdm_mock.tf
@@ -0,0 +1,17 @@
+resource "aws_api_gateway_rest_api" "pdm_mock" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  name        = "${var.project}-${var.environment}-pdm-mock"
+  description = "PDM Mock API for testing integration with Patient Data Manager"
+
+  endpoint_configuration {
+    types = ["REGIONAL"]
+  }
+
+  tags = {
+    Name        = "${var.project}-${var.environment}-pdm-mock"
+    Project     = var.project
+    Environment = var.environment
+    Component   = local.component
+  }
+}
diff --git a/infrastructure/terraform/components/dl/aws_api_gateway_stage_pdm_mock.tf b/infrastructure/terraform/components/dl/aws_api_gateway_stage_pdm_mock.tf
@@ -0,0 +1,32 @@
+resource "aws_api_gateway_stage" "pdm_mock" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  deployment_id = aws_api_gateway_deployment.pdm_mock[0].id
+  rest_api_id   = aws_api_gateway_rest_api.pdm_mock[0].id
+  stage_name    = var.environment
+
+  xray_tracing_enabled = true
+
+  access_log_settings {
+    destination_arn = aws_cloudwatch_log_group.pdm_mock_gateway[0].arn
+    format = jsonencode({
+      requestId      = "$context.requestId"
+      ip             = "$context.identity.sourceIp"
+      caller         = "$context.identity.caller"
+      user           = "$context.identity.user"
+      requestTime    = "$context.requestTime"
+      httpMethod     = "$context.httpMethod"
+      resourcePath   = "$context.resourcePath"
+      status         = "$context.status"
+      protocol       = "$context.protocol"
+      responseLength = "$context.responseLength"
+    })
+  }
+
+  tags = {
+    Name        = "${var.project}-${var.environment}-pdm-mock-stage"
+    Project     = var.project
+    Environment = var.environment
+    Component   = local.component
+  }
+}
diff --git a/infrastructure/terraform/components/dl/aws_cloudwatch_log_group_pdm_mock_gateway.tf b/infrastructure/terraform/components/dl/aws_cloudwatch_log_group_pdm_mock_gateway.tf
@@ -0,0 +1,14 @@
+resource "aws_cloudwatch_log_group" "pdm_mock_gateway" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  name              = "/aws/apigateway/${var.project}-${var.environment}-pdm-mock"
+  retention_in_days = var.log_retention_in_days
+  kms_key_id        = module.kms.key_arn
+
+  tags = {
+    Name        = "${var.project}-${var.environment}-pdm-mock-logs"
+    Project     = var.project
+    Environment = var.environment
+    Component   = local.component
+  }
+}
diff --git a/infrastructure/terraform/components/dl/aws_lambda_permission_pdm_mock_gateway.tf b/infrastructure/terraform/components/dl/aws_lambda_permission_pdm_mock_gateway.tf
@@ -0,0 +1,10 @@
+resource "aws_lambda_permission" "pdm_mock_gateway" {
+  count = local.deploy_pdm_mock ? 1 : 0
+
+  statement_id  = "AllowAPIGatewayInvoke"
+  action        = "lambda:InvokeFunction"
+  function_name = module.pdm_mock[0].function_name
+  principal     = "apigateway.amazonaws.com"
+
+  source_arn = "${aws_api_gateway_rest_api.pdm_mock[0].execution_arn}/*/*"
+}
