Add tags support

Author: miensol

API.md

@@ -1,12 +1,14 @@
 import * as path from 'node:path';
 import { CustomResource, CustomResourceProvider, CustomResourceProviderRuntime } from 'aws-cdk-lib';
 import { Construct } from 'constructs';
+import { CustomResourceProps } from './self-signed-certificate-lambda';
 
 export interface SelfSignedCertificateProps {
   readonly certificateDetails: {
     commonName: string;
     [key: string]: string;
   };
+  readonly tags?: Record<string, string>;
 }
 
 
@@ -54,10 +56,16 @@ export class SelfSignedCertificate extends Construct {
       }],
     });
 
+    const tags = props.tags ?? {};
+    const resourceProps: CustomResourceProps = {
+      certificateDetails: props.certificateDetails,
+      tags: Object.keys(tags).map((key) => ({ key: key, value: tags[key] })),
+    };
+
     new CustomResource(this, 'resource', {
       serviceToken: this.provider.serviceToken,
       resourceType: CustomResourceType,
-      properties: props,
+      properties: resourceProps,
     });
   }
 

src/index.ts

@@ -1,17 +1,25 @@
-import type { CdkCustomResourceHandler } from 'aws-lambda';
+import { ACMClient, ImportCertificateCommand } from '@aws-sdk/client-acm';
+import type { CdkCustomResourceEvent, CdkCustomResourceHandler } from 'aws-lambda';
 import type { pki } from 'node-forge';
 import { generate } from 'selfsigned';
-import { ACMClient, ImportCertificateCommand } from '@aws-sdk/client-acm';
 
 const acmClient = new ACMClient({});
 
+export type CustomResourceProps = {
+  certificateDetails: { commonName: string; [key: string]: string };
+  tags?: { key: string; value: string }[];
+};
+
+type ResourceProps = CdkCustomResourceEvent['ResourceProperties'] & CustomResourceProps
+
 export const handler: CdkCustomResourceHandler = async (event) => {
   if (event.RequestType == 'Delete') {
     // TODO: remove from imports?
     return {};
   }
 
-  const certificateDetails = event.ResourceProperties.certificateDetails;
+  const resourceProps = event.ResourceProperties as ResourceProps;
+  const certificateDetails = resourceProps.certificateDetails;
   const certFields: pki.CertificateField[] = Object.keys(certificateDetails).map(key => ({
     name: key,
     value: certificateDetails[key],
@@ -25,7 +33,13 @@ export const handler: CdkCustomResourceHandler = async (event) => {
     CertificateArn: event.RequestType == 'Update' ? event.PhysicalResourceId : undefined,
     Certificate: new Uint8Array(Buffer.from(generatedCertificate.cert, 'utf-8')),
     PrivateKey: new Uint8Array(Buffer.from(generatedCertificate.private, 'utf-8')),
-    Tags: event.ResourceProperties.tags,
+    Tags: resourceProps.tags?.map(({
+      key,
+      value,
+    }) => ({
+      Key: key,
+      Value: value,
+    })),
   }));
 
   console.log('Import result', importResult.CertificateArn);