feat: Add cloudfront connection to cloudwatch service

Author: m-pizarro

README.md

@@ -80,9 +80,9 @@ CloudGraph AWS Provider will ask you what regions you would like to crawl and wi
 | cloud9                      |                                                                                                                                                                                                                                                                                                                                                                               |
 | cloudformationStack         | cloudformationStack, iamRole, sns                                                                                                                                                                                                                                                                                                                                             |
 | cloudformationStackSet      | iamRole                                                                                                                                                                                                                                                                                                                                                                       |
-| cloudfront                  | elb, s3                                                                                                                                                                                                                                                                                                                                                                       |
+| cloudfront                  | cloudwatch, elb, s3                                                                                                                                                                                                                                                                                                                                                                       |
 | cloudtrail                  | cloudwatch, cloudwatchLog, kms, s3, sns                                                                                                                                                                                                                                                                                                                                       |
-| cloudwatch                  | cloudtrail, cloudwatchLog, sns                                                                                                                                                                                                                                                                                                                                                |
+| cloudwatch                  | cloudfront, cloudtrail, cloudwatchLog, sns                                                                                                                                                                                                                                                                                                                                                |
 | cloudwatchLog               | cloudtrail, cloudwatch, ecsCluster, elasticSearchDomain, kms, managedAirflow, rdsDbInstance                                                                                                                                                                                                                                                                                   |
 | codebuild                   | iamRole, kms, vpc, securityGroup, subnet                                                                                                                                                                                                                                                                                                                                      |
 | cognitoIdentityPool         | iamRole, iamOpenIdConnectProvider, iamSamlProvider, elasticSearchDomain                                                                                                                                                                                                                                                                                                       |

src/services/cloudfront/schema.graphql

@@ -21,6 +21,7 @@ type awsCloudfront implements awsBaseService @key(fields: "id") {
   s3: [awsS3] @hasInverse(field: cloudfrontDistributions)
   tags: [awsRawTag]
   webAcl: [awsWafV2WebAcl] @hasInverse(field: cloudfront)
+  cloudwatch: [awsCloudwatch] @hasInverse(field: cloudfront)
 }
 
 type awsCloudfrontOriginData {

src/services/cloudwatch/connections.ts

@@ -1,7 +1,9 @@
 import { ServiceConnection } from '@cloudgraph/sdk'
 import { isEmpty } from 'lodash'
 import { RawAwsCloudwatch } from './data'
+import { RawAwsCloudfront } from '../cloudfront/data'
 import services from '../../enums/services'
+import { globalRegionName } from '../../enums/regions'
 
 export default ({
   service: cloudwatch,
@@ -15,7 +17,11 @@ export default ({
 }): {
   [property: string]: ServiceConnection[]
 } => {
-  const { AlarmName: id, AlarmActions: alarmActions } = cloudwatch
+  const {
+    AlarmName: id,
+    AlarmActions: alarmActions,
+    Dimensions: dimensions,
+  } = cloudwatch
   const connections: ServiceConnection[] = []
 
   /**
@@ -40,6 +46,33 @@ export default ({
     }
   }
 
+  /**
+   * Find Cloudfront
+   * related to the cloudwatch
+   */
+  const cloudfronts = data.find(({ name }) => name === services.cloudfront)
+  if (cloudfronts?.data?.[globalRegionName]) {
+    const cloudfrontsInRegion: RawAwsCloudfront[] = cloudfronts.data[
+      globalRegionName
+    ].filter(({ summary: { Id: cloudfrontId } }: RawAwsCloudfront) =>
+      dimensions?.some(d => d.Value === cloudfrontId)
+    )
+
+    if (!isEmpty(cloudfrontsInRegion)) {
+      for (const cf of cloudfrontsInRegion) {
+        const {
+          summary: { Id: cloudfrontId },
+        }: RawAwsCloudfront = cf
+        connections.push({
+          id: cloudfrontId,
+          resourceType: services.cloudfront,
+          relation: 'child',
+          field: 'cloudfront',
+        })
+      }
+    }
+  }
+
   const result = {
     [id]: connections,
   }

src/services/cloudwatch/schema.graphql

@@ -14,6 +14,7 @@ type awsCloudwatch implements awsBaseService @key(fields: "arn") {
   cloudwatchLog: [awsCloudwatchLog] @hasInverse(field: cloudwatch)
   sns: [awsSns] @hasInverse(field: cloudwatch)
   cloudtrail: [awsCloudtrail] @hasInverse(field: cloudwatch)
+  cloudfront: [awsCloudfront] @hasInverse(field: cloudwatch)
 }
 
 type awsCloudwatchDimensions

src/types/generated.ts

@@ -741,6 +741,7 @@ export type AwsCloudFormationStackSetParameter = {
 
 export type AwsCloudfront = AwsBaseService & {
   callerReference?: Maybe<Scalars['String']>;
+  cloudwatch?: Maybe<Array<Maybe<AwsCloudwatch>>>;
   customErrorResponses?: Maybe<Array<Maybe<AwsCloudfrontCustomErrorResponse>>>;
   defaultCacheBehavior?: Maybe<AwsCloudfrontCacheBehavior>;
   defaultRootObject?: Maybe<Scalars['String']>;
@@ -896,6 +897,7 @@ export type AwsCloudtrailStatus = {
 export type AwsCloudwatch = AwsBaseService & {
   actions?: Maybe<Array<Maybe<Scalars['String']>>>;
   actionsEnabled?: Maybe<Scalars['String']>;
+  cloudfront?: Maybe<Array<Maybe<AwsCloudfront>>>;
   cloudtrail?: Maybe<Array<Maybe<AwsCloudtrail>>>;
   cloudwatchLog?: Maybe<Array<Maybe<AwsCloudwatchLog>>>;
   comparisonOperator?: Maybe<Scalars['String']>;