updates for release v1.0.8

- Fix an issue with CSP response header that caused the solution to fail deployment in AWS regions with longer names.

Author: tabdunabi

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 =======
 
+## [1.0.8] - 2024-05-14
+
+### Fixed
+
+- CSP response header name length longer than supported, causing stack failure in ap-southeast-1 and ap-south-east-2
+
 ## [1.0.7] - 2024-05-13
 
 ### Security

source/infrastructure/cdk.json

@@ -57,7 +57,7 @@
     "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource": true,
     "solution_id": "SO0281",
     "solution_name": "enhanced-document-understanding-on-aws",
-    "solution_version": "v1.0.7",
+    "solution_version": "v1.0.8",
     "app_namespace": "app.idp",
     "app_registry_name": "enhanced-document-understanding",
     "application_type": "AWS-Solutions",

source/infrastructure/lib/s3web/static-site.ts

@@ -82,12 +82,12 @@ export class StaticWebsite extends Construct {
         );
 
         const cspResponseHeadersPolicy = new cloudfront.ResponseHeadersPolicy(this, 'CSPResponseHeadersPolicy', {
-            responseHeadersPolicyName: `eDU-CSPResponseHeadersPolicy-${cdk.Aws.STACK_NAME}-${cdk.Aws.REGION}`,
+            responseHeadersPolicyName: `eDU-CSP-${cdk.Aws.STACK_NAME}-${cdk.Aws.REGION}`,
             comment: 'CSP Response Headers Policy',
             securityHeadersBehavior: {
                 contentSecurityPolicy: {
                     contentSecurityPolicy:
-                        "default-src 'self' data: https://*.amazonaws.com; img-src 'self' data: https://*.cloudfront.net https://*.amazonaws.com; script-src 'self' http://*.cloudfront.net https://*.amazonaws.com; style-src 'self' 'unsafe-inline' https://*.amazonaws.com; object-src 'self' https://*.amazonaws.com; worker-src 'self' blob:",
+                        "default-src 'self' data: https://*.amazonaws.com; img-src 'self' data: https://*.cloudfront.net https://*.amazonaws.com; script-src 'self' https://*.cloudfront.net https://*.amazonaws.com; style-src 'self' https://*.amazonaws.com; object-src 'self' https://*.amazonaws.com; worker-src 'self' blob:",
                     override: true
                 },
                 frameOptions: { frameOption: cloudfront.HeadersFrameOption.DENY, override: true }

source/infrastructure/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "enhanced-document-understanding-on-aws-infrastructure",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "bin": {
     "infrastructure": "bin/dus.js"
   },

source/infrastructure/package.json

@@ -6,7 +6,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>example</groupId>
     <artifactId>java-lambda</artifactId>
-    <version>1.0.7</version>
+    <version>1.0.8</version>
 
     <name>mock-java-lambda</name>
 

source/infrastructure/test/mock-lambda-func/java-lambda/pom.xml

@@ -1,6 +1,6 @@
 {
   "name": "node-lambda",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "A mock lambda implementation for CDK infrastructure unit",
   "main": "index.js",
   "scripts": {

source/infrastructure/test/mock-lambda-func/node-lambda/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "mock-react-app",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Mock Reactjs app used for unit testing constructs",
   "main": "index.js",
   "scripts": {
@@ -35,4 +35,4 @@
       "last 1 safari version"
     ]
   }
-}
+}