update to version v6.2.4 (#524)

Author: dougtoppin

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.2.4] - 2023-12-06
+
+### Changed
+
+- node 20.x Lambda runtimes
+- cdk update to 2.111.0
+- disable gzip compression in cloudfront cache option to improve cache hit ratio [#373](https://github.com/aws-solutions/serverless-image-handler/pull/373)
+- requests for webp images supported for upper/lower case Accept header [#490](https://github.com/aws-solutions/serverless-image-handler/pull/490)
+- changed axios version to 1.6.2 for github dependabot reported vulnerability CVE-2023-45857
+- enabled thumbor filter chaining [#343](https://github.com/aws-solutions/serverless-image-handler/issues/343)
+
 ## [6.2.3] - 2023-10-20
 
 ### Fixed

README.md

@@ -44,7 +44,7 @@ In addition to the AWS Solutions Constructs, the solution uses AWS CDK directly
 ## Prerequisites for Customization
 
 - [AWS Command Line Interface](https://aws.amazon.com/cli/)
-- Node.js 16.x or later
+- Node.js 20.x or later
 
 ### 1. Clone the repository
 
@@ -102,6 +102,9 @@ This solution collects anonymous operational metrics to help AWS improve the qua
 - [@njtmead](https://github.com/njtmead) for [#276](https://github.com/aws-solutions/serverless-image-handler/pull/276)
 - [@StaymanHou](https://github.com/StaymanHou) for [#320](https://github.com/aws-solutions/serverless-image-handler/pull/320)
 - [@alenpaulvarghese](https://github.com/alenpaulvarghese) for [#392](https://github.com/aws-solutions/serverless-image-handler/pull/392)
+- [@Fjool](https://github.com/Fjool) for [#489](https://github.com/aws-solutions/serverless-image-handler/pull/489)
+- [@fvsnippets](https://github.com/fvsnippets) for [#373](https://github.com/aws-solutions/serverless-image-handler/pull/373), [#380](https://github.com/aws-solutions/serverless-image-handler/pull/380)
+- [@ccchapman](https://github.com/ccchapman) for [#490](https://github.com/aws-solutions/serverless-image-handler/pull/490)
 
 # License
 

deployment/cdk-solution-helper/package-lock.json

@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "adm-zip": "^0.5.10",
-    "aws-cdk-lib": "^2.102.0"
+    "aws-cdk-lib": "^2.111.0"
   },
   "overrides": {
     "semver": "7.5.4"

deployment/cdk-solution-helper/package.json

@@ -2,7 +2,7 @@
   "app": "npx ts-node --prefer-ts-exts bin/constructs.ts",
   "context": {
     "solutionId": "SO0023",
-    "solutionVersion": "custom-v6.2.3",
+    "solutionVersion": "custom-v6.2.4",
     "solutionName": "serverless-image-handler"
   }
 }

source/constructs/cdk.json

@@ -27,6 +27,7 @@ import { CloudFrontToApiGatewayToLambda } from "@aws-solutions-constructs/aws-cl
 
 import { addCfnSuppressRules } from "../../utils/utils";
 import { SolutionConstructProps } from "../types";
+import * as api from "aws-cdk-lib/aws-apigateway";
 
 export interface BackEndProps extends SolutionConstructProps {
   readonly solutionVersion: string;
@@ -88,8 +89,8 @@ export class BackEnd extends Construct {
     const imageHandlerLambdaFunction = new NodejsFunction(this, "ImageHandlerLambdaFunction", {
       description: `${props.solutionName} (${props.solutionVersion}): Performs image edits and manipulations`,
       memorySize: 1024,
-      runtime: Runtime.NODEJS_16_X,
-      timeout: Duration.minutes(15),
+      runtime: Runtime.NODEJS_20_X,
+      timeout: Duration.seconds(29),
       role: imageHandlerLambdaFunctionRole,
       entry: path.join(__dirname, "../../../image-handler/index.ts"),
       environment: {
@@ -140,7 +141,7 @@ export class BackEnd extends Construct {
       defaultTtl: Duration.days(1),
       minTtl: Duration.seconds(1),
       maxTtl: Duration.days(365),
-      enableAcceptEncodingGzip: true,
+      enableAcceptEncodingGzip: false,
       headerBehavior: CacheHeaderBehavior.allowList("origin", "accept"),
       queryStringBehavior: CacheQueryStringBehavior.allowList("signature"),
     });
@@ -196,6 +197,9 @@ export class BackEnd extends Construct {
         stageName: "image",
       },
       binaryMediaTypes: ["*/*"],
+      defaultMethodOptions: {
+        authorizationType: api.AuthorizationType.NONE,
+      },
     };
 
     const imageHandlerCloudFrontApiGatewayLambda = new CloudFrontToApiGatewayToLambda(
@@ -210,6 +214,14 @@ export class BackEnd extends Construct {
       }
     );
 
+    addCfnSuppressRules(imageHandlerCloudFrontApiGatewayLambda.apiGateway, [
+      {
+        id: "W59",
+        reason:
+          "AWS::ApiGateway::Method AuthorizationType is set to 'NONE' because API Gateway behind CloudFront does not support AWS_IAM authentication",
+      },
+    ]);
+
     imageHandlerCloudFrontApiGatewayLambda.apiGateway.node.tryRemoveChild("Endpoint"); // we don't need the RestApi endpoint in the outputs
 
     this.domainName = imageHandlerCloudFrontApiGatewayLambda.cloudFrontWebDistribution.distributionDomainName;

source/constructs/lib/back-end/back-end-construct.ts

@@ -123,7 +123,7 @@ export class CustomResourcesConstruct extends Construct {
 
     this.customResourceLambda = new NodejsFunction(this, "CustomResourceFunction", {
       description: `${props.solutionName} (${props.solutionVersion}): Custom resource`,
-      runtime: Runtime.NODEJS_16_X,
+      runtime: Runtime.NODEJS_20_X,
       timeout: Duration.minutes(1),
       memorySize: 128,
       role: this.customResourceRole,