Class MacieVerificationFactory

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
com.cloudforgeci.api.core.annotation.BaseFactory
com.cloudforgeci.api.observability.MacieVerificationFactory
All Implemented Interfaces:
software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
public class MacieVerificationFactory extends BaseFactory
Verifies Amazon Macie is already enabled in this account/Region, instead of enabling it from the application stack.

Same reasoning as SecurityHubVerificationFactory: Macie is an account/Region singleton an org may already own centrally, and an application deploy role enabling it account-wide is a real IAM-blast-radius concern on top of the collision risk MacieFactory already solves with idempotent adoption. This calls macie2:GetMacieSession, which throws (failing this stack's deploy) when no session exists for the account/Region, and succeeds otherwise -- nothing here enables Macie.

MacieFactory is left in place, unused, for the case a future deployment model wants CFC to own provisioning again.

  • Nested Class Summary

    Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

    software.amazon.jsii.JsiiObject.InitializationMode

    Nested classes/interfaces inherited from interface software.constructs.IConstruct

    software.constructs.IConstruct.Jsii$Default, software.constructs.IConstruct.Jsii$Proxy

  • Field Summary

    Fields inherited from class BaseFactory

    cfc, config, ctx

  • Constructor Summary

    Constructors
    Constructor
    Description
    MacieVerificationFactory(software.constructs.Construct scope, String id)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    create()
    Resolves whether Macie is required, then fails this stack's deploy if the account/Region session isn't already enabled centrally.

    Methods inherited from class BaseFactory

    getDeploymentContext, getSecurityProfileConfiguration, getSystemContext

    Methods inherited from class software.constructs.Construct

    getNode, isConstruct, toString

    Methods inherited from class software.amazon.jsii.JsiiObject

    jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

    Methods inherited from interface software.amazon.jsii.JsiiSerializable

    $jsii$toJson

  • Constructor Details

    • MacieVerificationFactory

      public MacieVerificationFactory(software.constructs.Construct scope, String id)
      Parameters:
      scope - parent construct
      id - construct ID

  • Method Details

    • create

      public void create()
      Resolves whether Macie is required, then fails this stack's deploy if the account/Region session isn't already enabled centrally.
      Specified by:
      create in class BaseFactory