Uses of Class
com.cloudforgeci.api.core.SystemContext

Packages that use SystemContext

Package	Description
com.cloudforgeci.api.core
com.cloudforgeci.api.core.annotation
com.cloudforgeci.api.core.iam
com.cloudforgeci.api.core.rules
com.cloudforgeci.api.core.runtime
com.cloudforgeci.api.core.security
com.cloudforgeci.api.core.topology
com.cloudforgeci.api.database
com.cloudforgeci.api.interfaces

Uses of SystemContext in com.cloudforgeci.api.core

Methods in com.cloudforgeci.api.core that return SystemContext

Modifier and Type	Method	Description
static SystemContext	SystemContext.of(software.constructs.Construct scope)	Fetch the already-started context anywhere down the tree.
static SystemContext	SystemContext.start(software.constructs.Construct scope, TopologyType topology, RuntimeType runtime, SecurityProfile security, IAMProfile iamProfile, DeploymentContext cfc)	Start once at the entry point; installs runtime + topology + security + iam rules and wiring.

Uses of SystemContext in com.cloudforgeci.api.core.annotation

Fields in com.cloudforgeci.api.core.annotation declared as SystemContext

Modifier and Type	Field	Description
protected final SystemContext	BaseFactory.ctx

Methods in com.cloudforgeci.api.core.annotation that return SystemContext

Modifier and Type	Method	Description
protected SystemContext	BaseFactory.getSystemContext()	Convenience method to get SystemContext.

Methods in com.cloudforgeci.api.core.annotation with parameters of type SystemContext

Modifier and Type	Method	Description
static void	ContextInjector.inject(Object target, SystemContext systemContext, DeploymentContext deploymentContext)	Inject context values into all annotated fields of the given object.

Uses of SystemContext in com.cloudforgeci.api.core.iam

Methods in com.cloudforgeci.api.core.iam with parameters of type SystemContext

Modifier and Type	Method	Description
static void	ManagerOperatorIamSupport.addDeployCapabilitiesToStatements(SystemContext ctx, List<software.amazon.awscdk.services.iam.PolicyStatement> statements)	Deploy-capability statements safe to fold into a CALLER-assembled statements list — every one of ManagerOperatorIamSupport.deployStatements(SystemContext) except the two target-infrastructure statements (see ManagerOperatorIamSupport.attachDeployTargetInfrastructurePolicies(SystemContext, Role)'s javadoc for why those can't share a document with anything else).
static void	ManagerOperatorIamSupport.addOperatorBaselineToStatements(SystemContext ctx, List<software.amazon.awscdk.services.iam.PolicyStatement> statements)
static void	ManagerOperatorIamSupport.attachDeployCapabilities(SystemContext ctx, software.amazon.awscdk.services.iam.Role role)	Attaches ManagerOperatorIamSupport.deployStatements(SystemContext) and ManagerOperatorIamSupport.catalogProvisionStatement(SystemContext) to the role.
static void	ManagerOperatorIamSupport.attachDeployTargetInfrastructurePolicies(SystemContext ctx, software.amazon.awscdk.services.iam.Role role)	The two target-infrastructure statements from ManagerOperatorIamSupport.deployStatements(SystemContext), each attached to role as its own customer-managed policy — the companion role needs once its other deploy-capability statements arrived via ManagerOperatorIamSupport.addDeployCapabilitiesToStatements(SystemContext, List) instead of ManagerOperatorIamSupport.attachDeployCapabilities(SystemContext, Role).
static void	ManagerOperatorIamSupport.attachOperatorBaselinePolicies(SystemContext ctx, software.amazon.awscdk.services.iam.Role role)
static Optional<software.amazon.awscdk.services.iam.PolicyStatement>	ManagerOperatorIamSupport.catalogProvisionStatement(SystemContext ctx)	SC_PROVISION capability backing deploy:catalog — deliberately no conditions: Service Catalog's own portfolio/product/launch-constraint model is the guardrail here (a caller can only provision products actually shared with them), not a tag condition on Manager's role.
static Optional<software.amazon.awscdk.services.iam.PolicyStatement>	ManagerOperatorIamSupport.crossAccountAssumeRoleStatement(SystemContext ctx)	Lets Manager's own task role actually CALL sts:AssumeRole against a connected account's CloudForgeManagerAccess-* role — the other half of the cross-account connect feature (StsAssumeRoleService/CrossAccountRoleTemplateFactory): a correct trust policy on the TARGET role means nothing if Manager's own IAM policy never grants it permission to make the call in the first place.
static List<software.amazon.awscdk.services.iam.PolicyStatement>	ManagerOperatorIamSupport.deployStatements(SystemContext ctx)
static boolean	ManagerOperatorIamSupport.isCloudForgeManager(SystemContext ctx)
static Optional<software.amazon.awscdk.services.iam.PolicyStatement>	ManagerOperatorIamSupport.operatorBaselineStatement(SystemContext ctx)
List<Rule>	ExtendedIAMConfiguration.rules(SystemContext c)
List<Rule>	MinimalIAMConfiguration.rules(SystemContext c)
List<Rule>	StandardIAMConfiguration.rules(SystemContext c)
void	ExtendedIAMConfiguration.wire(SystemContext c)
void	MinimalIAMConfiguration.wire(SystemContext c)
void	StandardIAMConfiguration.wire(SystemContext c)

Uses of SystemContext in com.cloudforgeci.api.core.rules

Classes in com.cloudforgeci.api.core.rules that implement interfaces with type arguments of type SystemContext

Modifier and Type	Class	Description
class	AdvancedMonitoringRules	Advanced security monitoring and compliance dashboard validation rules.
class	CdnApiSecurityRules	CDN and API security compliance validation rules.
class	ComputeSecurityRules	Compute security compliance validation rules.
final class	ConfigurationValidationRules	General configuration validation rules that apply to all deployments.
class	DatabaseSecurityRules	Database security compliance validation rules.
class	ElbSecurityRules	Elastic Load Balancer security compliance validation rules.
class	GdprOrganizationalRules	GDPR organizational and data protection validation rules.
class	GdprRules	GDPR (General Data Protection Regulation) compliance validation.
class	HipaaOrganizationalRules	HIPAA organizational and administrative safeguard validation rules.
class	HipaaRules	HIPAA Security Rule compliance validation.
class	IamSecurityRules	IAM security compliance validation rules.
class	IncidentResponseRules	Incident response and disaster recovery compliance validation rules.
class	Iso27001Rules	ISO/IEC 27001:2022 Information Security Management compliance validation.
class	KeyManagementRules	Key Management compliance validation rules.
class	LambdaSecurityRules	Lambda security compliance validation rules.
class	MessagingSecurityRules	Messaging security compliance validation rules.
class	PciDssRules	PCI-DSS compliance validation rules.
class	Soc2Rules	SOC 2 (Service Organization Control 2) Trust Services Criteria compliance validation.
class	ThreatProtectionRules	Threat protection compliance validation rules.

Methods in com.cloudforgeci.api.core.rules that return types with arguments of type SystemContext

Modifier and Type	Method	Description
static List<FrameworkRules<SystemContext>>	FrameworkLoader.discover()	Discover all compliance frameworks available on the classpath.

Methods in com.cloudforgeci.api.core.rules with parameters of type SystemContext

Modifier and Type	Method	Description
String	GdprRules.generateComplianceReport(SystemContext ctx)	Generate GDPR technical safeguards compliance report.
String	HipaaRules.generateComplianceReport(SystemContext ctx)	Generate HIPAA Security Rule compliance report.
String	PciDssRules.generateComplianceReport(SystemContext ctx)	Generate PCI-DSS compliance report showing which requirements are met.
String	Soc2Rules.generateComplianceReport(SystemContext ctx)	Generate SOC 2 Trust Services Criteria compliance report.
static String	ComplianceMatrix.generateDeploymentReport(SystemContext ctx)	Generate a deployment-specific compliance report showing which controls are enabled.
static List<String>	ComplianceMatrix.getSatisfiedFrameworks(SystemContext ctx)	Get frameworks satisfied by current deployment configuration.
void	AdvancedMonitoringRules.install(SystemContext ctx)	Install advanced monitoring validation rules.
void	CdnApiSecurityRules.install(SystemContext ctx)
void	ComputeSecurityRules.install(SystemContext ctx)
void	ConfigurationValidationRules.install(SystemContext ctx)
void	DatabaseSecurityRules.install(SystemContext ctx)	Install database security validation rules.
void	ElbSecurityRules.install(SystemContext ctx)
void	GdprOrganizationalRules.install(SystemContext ctx)	Install GDPR organizational validation rules.
void	GdprRules.install(SystemContext ctx)	Install GDPR compliance validation rules.
void	HipaaOrganizationalRules.install(SystemContext ctx)	Install HIPAA organizational validation rules.
void	HipaaRules.install(SystemContext ctx)	Install HIPAA compliance validation rules for production and staging environments.
static void	IAMRules.install(SystemContext ctx)
void	IamSecurityRules.install(SystemContext ctx)
void	IncidentResponseRules.install(SystemContext ctx)	Install incident response validation rules.
void	Iso27001Rules.install(SystemContext ctx)	Install ISO 27001 compliance validation rules.
void	KeyManagementRules.install(SystemContext ctx)	Install key management validation rules.
void	LambdaSecurityRules.install(SystemContext ctx)
void	MessagingSecurityRules.install(SystemContext ctx)
void	PciDssRules.install(SystemContext ctx)	Install PCI-DSS compliance validation rules.
static void	RuntimeRules.install(SystemContext ctx)
static void	SecurityRules.install(SystemContext ctx)
void	Soc2Rules.install(SystemContext ctx)	Install SOC 2 compliance validation rules.
void	ThreatProtectionRules.install(SystemContext ctx)	Install threat protection validation rules.
static void	TopologyRules.install(SystemContext ctx)
static void	Rules.installAll(SystemContext ctx)

Method parameters in com.cloudforgeci.api.core.rules with type arguments of type SystemContext

Modifier and Type	Method	Description
static Rule	RuleKit.forbid(String name, Function<SystemContext, ? extends Slot<?>> get)
static Rule	RuleKit.require(String name, Function<SystemContext, ? extends Slot<?>> get)

Uses of SystemContext in com.cloudforgeci.api.core.runtime

Methods in com.cloudforgeci.api.core.runtime with parameters of type SystemContext

Modifier and Type	Method	Description
List<Rule>	Ec2RuntimeConfiguration.rules(SystemContext c)
List<Rule>	FargateRuntimeConfiguration.rules(SystemContext c)
void	Ec2RuntimeConfiguration.wire(SystemContext c)
void	FargateRuntimeConfiguration.wire(SystemContext c)

Uses of SystemContext in com.cloudforgeci.api.core.security

Methods in com.cloudforgeci.api.core.security with parameters of type SystemContext

Modifier and Type	Method	Description
List<Rule>	DevSecurityConfiguration.rules(SystemContext c)
List<Rule>	ProductionSecurityConfiguration.rules(SystemContext c)
List<Rule>	StagingSecurityConfiguration.rules(SystemContext c)
void	DevSecurityConfiguration.wire(SystemContext c)
void	ProductionSecurityConfiguration.wire(SystemContext c)
void	StagingSecurityConfiguration.wire(SystemContext c)

Uses of SystemContext in com.cloudforgeci.api.core.topology

Methods in com.cloudforgeci.api.core.topology with parameters of type SystemContext

Modifier and Type	Method	Description
static software.amazon.awscdk.services.cloudfront.Distribution	CmsCdnConfiguration.createCmsDistribution(SystemContext ctx, CmsSpec spec, software.amazon.awscdk.services.s3.Bucket mediaBucket, String albDnsName)	Create CloudFront distribution for CMS with media bucket and ALB origins.
static void	CmsCdnConfiguration.createDnsRecords(SystemContext ctx, software.amazon.awscdk.services.cloudfront.Distribution distribution)	Create Route53 alias records for CloudFront distribution.
static software.amazon.awscdk.services.s3.Bucket	CmsMediaStorageConfiguration.createMediaBucket(SystemContext ctx, CmsSpec spec)	Create S3 bucket for CMS media storage.
static software.amazon.awscdk.services.s3.Bucket	CmsMediaStorageConfiguration.createMediaBucket(SystemContext ctx, CmsSpec spec, boolean enableVersioning, boolean enableTransferAcceleration)	Create S3 bucket with custom configuration.
static software.amazon.awscdk.services.cloudfront.CachePolicy	CmsCdnConfiguration.createMediaCachePolicy(SystemContext ctx)	Create cache policy optimized for media files.
static software.amazon.awscdk.services.cloudfront.Distribution	CmsCdnConfiguration.createMediaOnlyDistribution(SystemContext ctx, CmsSpec spec, software.amazon.awscdk.services.s3.Bucket mediaBucket)	Create CloudFront distribution for media-only CDN (no ALB).
static software.amazon.awscdk.services.elasticache.CfnCacheCluster	CmsObjectCacheConfiguration.createMemcachedCluster(SystemContext ctx, ApplicationSpec spec)	Create ElastiCache Memcached cluster.
static software.amazon.awscdk.services.elasticache.CfnCacheCluster	CmsObjectCacheConfiguration.createRedisCluster(SystemContext ctx, ApplicationSpec spec)	Create ElastiCache Redis cluster for object caching (or, for non-CMS callers such as CloudForgeManagerApplicationSpec, a Redis-backed session store).
static software.amazon.awscdk.services.elasticache.CfnReplicationGroup	CmsObjectCacheConfiguration.createRedisReplicationGroup(SystemContext ctx, ApplicationSpec spec, int numReplicas)	Create ElastiCache Redis replication group for high availability.
static software.amazon.awscdk.services.cloudfront.CachePolicy	CmsCdnConfiguration.createStaticAssetsCachePolicy(SystemContext ctx)	Create cache policy optimized for static assets.
List<Rule>	ApplicationServiceTopologyConfiguration.rules(SystemContext c)
List<Rule>	CmsServiceTopologyConfiguration.rules(SystemContext c)
List<Rule>	JenkinsServiceTopologyConfiguration.rules(SystemContext c)
List<Rule>	S3WebsiteTopologyConfiguration.rules(SystemContext c)
void	ApplicationServiceTopologyConfiguration.wire(SystemContext c)
void	CmsServiceTopologyConfiguration.wire(SystemContext c)
void	JenkinsServiceTopologyConfiguration.wire(SystemContext c)
void	S3WebsiteTopologyConfiguration.wire(SystemContext c)

Uses of SystemContext in com.cloudforgeci.api.database

Methods in com.cloudforgeci.api.database with parameters of type SystemContext

Modifier and Type	Method	Description
static DatabaseSpec.DatabaseConnection	RdsFactory.createDatabase(SystemContext ctx, DatabaseSpec.DatabaseRequirement requirement, software.amazon.awscdk.services.ec2.IVpc vpc, String instanceId)	Create RDS database instance from DatabaseSpec requirement.
static DatabaseSpec.DatabaseConnection	RdsFactory.createDatabase(SystemContext ctx, DatabaseSpec.DatabaseRequirement requirement, software.amazon.awscdk.services.ec2.IVpc vpc, String instanceId, Integer backupRetentionDaysOverride, Boolean multiAzOverride, Boolean enableEncryptionOverride)	Create RDS database instance with optional DeploymentConfig overrides.
static DatabaseSpec.DatabaseConnection	RdsFactory.createDatabase(SystemContext ctx, DatabaseSpec.DatabaseRequirement requirement, software.amazon.awscdk.services.ec2.IVpc vpc, String instanceId, Integer backupRetentionDaysOverride, Boolean multiAzOverride, Boolean enableEncryptionOverride, int readReplicaCount)

Uses of SystemContext in com.cloudforgeci.api.interfaces

Methods in com.cloudforgeci.api.interfaces with parameters of type SystemContext

Modifier and Type	Method	Description
List<String>	Rule.check(SystemContext c)
List<Rule>	BaseConfiguration.rules(SystemContext c)
void	BaseConfiguration.wire(SystemContext c)