update to version v1.0.1

update to version v1.0.1

Author: tabdunabi

.gitignore

@@ -1 +1,55 @@
-.DS_Store
+deployment/global-s3-assets
+deployment/regional-s3-assets
+deployment/open-source
+
+**/coverage/
+**/coverage-reports/
+.coverage
+
+node_modules/
+
+cfn_nag_suppressions.log
+
+**.DS_STORE**
+
+**/.venv*/**
+__pycache__/
+*.egg-info
+*.egg
+
+codebuild_build.sh
+.vscode/settings.json
+.vscode/launch.json
+*tmp*
+.pytest_cache
+
+.idea/**
+
+aws_lambda_powertools/
+aws_xray_sdk/
+boto3/
+botocore/
+build/lib/
+dateutil/
+urllib3/
+jmespath/
+python_dateutil/
+s3transfer/
+coverage/
+coverage-reports/
+six.py
+typing_extensions.py
+wrapt
+THIRD-PARTY-LICENSES
+
+target/
+*.jar
+source/infrastructure/test/mock-lambda-func/java-lambda/checkstyle-result.xml
+**/*dependency-reduced-pom.xml
+.coverage.*
+
+*.log
+.venv/**
+source/ui/public/pdf.worker.min.js
+.viperlightrc
+source/test/coverage-reports

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.1] - 2023-10-18
+
+### Updated
+
+- Library upgrades to address security vulnerabilities
+
 ## [1.0.0] - 2023-08-30
 
 ### Added

NOTICE.txt

@@ -56,6 +56,7 @@ aws-sdk-mock                                             Apache-2.0
 aws-xray-sdk                                             Apache-2.0
 awscli                                                   Apache-2.0 
 babel-jest                                               MIT
+boolean.py                                               BSD-2-Clause
 bootstrap                                                MIT
 boto3                                                    Apache-2.0
 botocore                                                 Apache-2.0
@@ -77,6 +78,7 @@ jest                                                     MIT
 jmespath                                                 MIT 
 jwt-decode                                               MIT
 lodash                                                   MIT
+license-expression                                       Apache-2.0
 mock                                                     BSD License
 mock-fs                                                  MIT
 moto                                                     Apache-2.0
@@ -118,6 +120,7 @@ tomli                                                    MIT
 ts-jest                                                  MIT
 ts-node                                                  MIT
 typescript                                               Apache-2.0
+typing-extensions                                        Python 2.0
 uk.org.webcompere>>system-stubs-core                     MIT
 uk.org.webcompere>>system-stubs-jupiter                  MIT
 uuid                                                     MIT

source/images/ui-components.png

@@ -1,9 +1,7 @@
 {
   "app": "../pre-build-jars.sh && npx ts-node --prefer-ts-exts bin/dus.ts",
   "watch": {
-    "include": [
-      "**"
-    ],
+    "include": ["**"],
     "exclude": [
       "README.md",
       "cdk*.json",
@@ -27,17 +25,13 @@
     "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
     "@aws-cdk/core:checkSecretUsage": true,
     "@aws-cdk/aws-iam:minimizePolicies": true,
-    "@aws-cdk/core:target-partitions": [
-      "aws",
-      "aws-cn",
-      "aws-us-gov"
-    ],
+    "@aws-cdk/core:target-partitions": ["aws", "aws-cn", "aws-us-gov"],
     "solution_id": "SO0281",
     "solution_name": "enhanced-document-understanding-on-aws",
-    "solution_version": "v1.0.0",
+    "solution_version": "v1.0.1",
     "app_namespace": "app.idp",
     "app_registry_name": "enhanced-document-understanding",
     "application_type": "AWS-Solutions",
     "application_trademark_name": "Enhanced Document Understanding on AWS"
   }
-}
+}

source/infrastructure/cdk.json

@@ -142,7 +142,7 @@ export function getJavaLayerLocalBundling(entry: string): ILocalBundling {
                 `cd ${entry}`,
                 'rm -fr target',
                 'echo "Trying local bundling of assets"',
-                'mvn clean package --quiet --no-transfer-progress',
+                'mvn clean package --quiet --no-transfer-progress -DskipTests',
                 'echo "--------------------------------------------------------------------------------"',
                 'echo "Reporting stale dependencies/ dependencies that need to be upgraded for Java runtimes"',
                 'echo "--------------------------------------------------------------------------------"',

source/infrastructure/lib/utils/common-utils.ts

@@ -62,7 +62,7 @@ export class CustomInfraSetup extends Construct {
                         new iam.PolicyStatement({
                             actions: ['logs:PutLogEvents'],
                             resources: [
-                                `arn:${cdk.Aws.PARTITION}:logs:${cdk.Aws.REGION}:${cdk.Aws.ACCOUNT_ID}:log-group:/aws/lambda/*:log_stream:*`
+                                `arn:${cdk.Aws.PARTITION}:logs:${cdk.Aws.REGION}:${cdk.Aws.ACCOUNT_ID}:log-group:/aws/lambda/*:log-stream:*`
                             ]
                         })
                     ]
@@ -189,7 +189,7 @@ export class CustomInfraSetup extends Construct {
                 id: 'AwsSolutions-IAM5',
                 reason: 'Lambda function has the required permission to write CloudWatch Log streams. It uses custom policy instead of arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole with tighter permissions.',
                 appliesTo: [
-                    'Resource::arn:<AWS::Partition>:logs:<AWS::Region>:<AWS::AccountId>:log-group:/aws/lambda/*:log_stream:*'
+                    'Resource::arn:<AWS::Partition>:logs:<AWS::Region>:<AWS::AccountId>:log-group:/aws/lambda/*:log-stream:*'
                 ]
             }
         ]);