Index

A B C D E F G H I J K L M N O P R S T U V W Z 
All Classes and Interfaces|All Packages|Constant Field Values

A

accept(A, B, C) - Method in interface com.cloudforgeci.api.core.rules.RuleKit.TriConsumer
 
accept(A, B, C, D) - Method in interface com.cloudforgeci.api.core.rules.RuleKit.QuadConsumer
 
accept(A, B, C, D, E) - Method in interface com.cloudforgeci.api.core.rules.RuleKit.PentaConsumer
 
ACCESS_CONTROL - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
ACCESS_KEYS_ROTATED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
accessPointId() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns the EFS access point ID if EFS is available.
accessPointId() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
ACM_CERTIFICATE_EXPIRATION_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ACM_CERTIFICATE_RSA_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
addCommand(String) - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Add a single custom command to the UserData script.
addCommand(String) - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
addCommands(String...) - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Add custom commands to the UserData script.
addCommands(String...) - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
addSystemUpdate() - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Add system update commands (handles both dnf and yum).
addSystemUpdate() - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
AdvancedMonitoringRules - Class in com.cloudforgeci.api.core.rules
Advanced security monitoring and compliance dashboard validation rules.
AdvancedMonitoringRules() - Constructor for class com.cloudforgeci.api.core.rules.AdvancedMonitoringRules
 
advisory(String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
 
ADVISORY - Enum constant in enum class com.cloudforge.core.enums.ComplianceMode
Validation failures logged as warnings only.
ADVISORY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.RequirementLevel
Recommended but not mandatory - always advisory regardless of mode
ADVISORY Mode - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
AF_SOUTH_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AFRICA - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
AlarmFactory - Class in com.cloudforgeci.api.observability
Creates CloudWatch alarms for application health monitoring.
AlarmFactory(Construct, String, AlarmFactory.Props) - Constructor for class com.cloudforgeci.api.observability.AlarmFactory
Creates a new alarm factory.
AlarmFactory.Props - Class in com.cloudforgeci.api.observability
Configuration properties for alarm creation.
alarms() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns the value of the alarms record component.
Alarms and Notifications - Search tag in package com.cloudforgeci.api.observability
Section
Alarms Created - Search tag in class com.cloudforgeci.api.observability.AlarmFactory
Section
alb - Variable in class com.cloudforgeci.api.core.SystemContext
 
alb() - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Returns the value of the alb record component.
alb() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns the value of the alb record component.
ALB - Enum constant in enum class com.cloudforge.core.enums.LoadBalancerType
Application Load Balancer (Layer 7).
ALB_HTTPS_ONLY - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ALB_OIDC - Enum constant in enum class com.cloudforge.core.enums.AuthMode
ALB handles OIDC authentication.
ALB_PERMISSIONS - Static variable in class com.cloudforgeci.api.core.iam.PermissionMatrix
ALB permissions based on IAM profile.
ALB_WAF_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
albAccessLogging - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable ALB access logs to S3
albAccessLogging() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
AlbFactory - Class in com.cloudforgeci.api.ingress
ALB Factory using annotation-based context injection.
AlbFactory(Construct, String) - Constructor for class com.cloudforgeci.api.ingress.AlbFactory
 
ALB-OIDC Benefits - Search tag in enum class com.cloudforge.core.enums.AuthMode
Section
albSg - Variable in class com.cloudforgeci.api.core.SystemContext
 
albTargetGroup - Variable in class com.cloudforgeci.api.core.SystemContext
 
allocatedStorageGB() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the allocatedStorageGB record component.
allowedValues() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Allowed values for enum-like fields with constrained choices.
allowedValues() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the allowedValues record component.
ALWAYS - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
alwaysLoad() - Element in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Whether this framework should always be loaded regardless of complianceFrameworks config.
alwaysLoad() - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Check if this framework should always be loaded.
antiMalwareEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable anti-malware scanning
antiMalwareEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ap - Variable in class com.cloudforgeci.api.core.SystemContext
 
AP_EAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_NORTHEAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_NORTHEAST_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_NORTHEAST_3 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTH_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTH_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTHEAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTHEAST_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTHEAST_3 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
AP_SOUTHEAST_4 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
APAC - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
API_GW_ASSOCIATED_WITH_WAF - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
API_GW_EXECUTION_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
API_GW_SSL_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
API_GW_XRAY_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
API_SECURITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
APPLICATION_OIDC - Enum constant in enum class com.cloudforge.core.enums.AuthMode
Application handles OIDC internally.
APPLICATION_SERVICE - Enum constant in enum class com.cloudforge.core.enums.TopologyType
 
Application Categories: - Search tag in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Section
ApplicationFactory - Class in com.cloudforgeci.api.compute
Universal factory class for deploying any application using ApplicationSpec.
ApplicationFactory(Construct, String, RuntimeType, ApplicationSpec) - Constructor for class com.cloudforgeci.api.compute.ApplicationFactory
 
ApplicationFactory.ApplicationSystem - Record Class in com.cloudforgeci.api.compute
Container for application system components created by the factory.
applicationId - Variable in class com.cloudforge.core.config.DeploymentConfig
Application identifier (e.g., "jenkins", "gitlab", "vault")
applicationId() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns a unique identifier for this application.
applicationId() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
applicationId() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
ApplicationInfo - Class in com.cloudforge.core.config
Application metadata for display and configuration purposes.
ApplicationInfo(String, String, String, boolean, boolean, boolean) - Constructor for class com.cloudforge.core.config.ApplicationInfo
Creates ApplicationInfo with default resource requirements.
ApplicationInfo(String, String, String, boolean, boolean, boolean, int, int, String) - Constructor for class com.cloudforge.core.config.ApplicationInfo
Creates ApplicationInfo with explicit resource requirements.
ApplicationLoader - Class in com.cloudforgeci.api.compute
Auto-discovery utility for ApplicationSpec implementations using Java ServiceLoader.
applicationName - Variable in class com.cloudforge.core.config.DeploymentConfig
Human-readable application name
applicationOidcClientSecretResource - Variable in class com.cloudforgeci.api.core.SystemContext
 
applicationOidcConfig - Variable in class com.cloudforgeci.api.core.SystemContext
 
ApplicationOidcFactory - Class in com.cloudforgeci.api.security
Application-level OIDC Authentication Factory.
ApplicationOidcFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.ApplicationOidcFactory
 
ApplicationPlugin - Annotation Interface in com.cloudforge.core.annotation
Marks a class as a pluggable application specification.
applicationPort() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the primary application port.
applicationPort() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
applicationPort() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
ApplicationSamlFactory - Class in com.cloudforgeci.api.security
Application SAML Factory - configures SAML authentication for applications.
ApplicationSamlFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.ApplicationSamlFactory
 
ApplicationServiceTopologyConfiguration - Class in com.cloudforgeci.api.core.topology
Universal application service topology configuration.
ApplicationServiceTopologyConfiguration() - Constructor for class com.cloudforgeci.api.core.topology.ApplicationServiceTopologyConfiguration
 
applicationSpec - Variable in class com.cloudforge.core.config.DeploymentConfig
ApplicationSpec instance (not serialized to JSON)
applicationSpec - Variable in class com.cloudforgeci.api.core.SystemContext
 
ApplicationSpec - Interface in com.cloudforge.core.interfaces
Application specification interface defining application-specific configuration.
ApplicationSpec.OptionalPort - Record Class in com.cloudforge.core.interfaces
Optional service port that can be enabled via deployment configuration.
Application-Specific - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
ApplicationSpec Plugin Integration - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
ApplicationSystem(VpcFactory, AlbFactory, EfsFactory) - Constructor for record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Creates an instance of a ApplicationSystem record class.
appliesToFramework(String) - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Check if this control applies to a specific framework.
Arn - Annotation Interface in com.cloudforge.core.utilities
 
Arn.Validator - Class in com.cloudforge.core.utilities
 
artifactsBucket - Variable in class com.cloudforge.core.config.DeploymentConfig
S3 bucket for artifacts
artifactsBucket - Variable in class com.cloudforgeci.api.core.SystemContext
 
artifactsBucket() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
artifactsPrefix - Variable in class com.cloudforge.core.config.DeploymentConfig
S3 prefix for artifacts
artifactsPrefix - Variable in class com.cloudforgeci.api.core.SystemContext
 
artifactsPrefix() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
asg - Variable in class com.cloudforgeci.api.core.SystemContext
 
asgAddedToTargetGroup - Variable in class com.cloudforgeci.api.core.SystemContext
 
AUDIT_LOGGING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
AUDIT_MANAGER - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
AuditManagerControl - Record Class in com.cloudforgeci.api.core.rules
Maps compliance controls to AWS infrastructure monitoring and Audit Manager evidence.
AuditManagerControl(String, String, List<String>, List<AuditManagerControl.FrameworkControl>, List<String>) - Constructor for record class com.cloudforgeci.api.core.rules.AuditManagerControl
Creates an instance of a AuditManagerControl record class.
AuditManagerControl.FrameworkControl - Record Class in com.cloudforgeci.api.core.rules
Framework-specific control mapping.
AuditManagerControlRegistry - Class in com.cloudforgeci.api.core.rules
Central registry mapping infrastructure controls to multiple compliance frameworks.
auditManagerEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable AWS Audit Manager
auditManagerEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
AUTHENTICATION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
Authentication Modes Comparison: - Search tag in class com.cloudforgeci.api.security.ApplicationOidcFactory
Section
authMode - Variable in class com.cloudforge.core.config.DeploymentConfig
Authentication mode
authMode - Variable in class com.cloudforgeci.api.core.SystemContext
 
authMode() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
AuthMode - Enum Class in com.cloudforge.core.enums
Authentication mode for application access control.
automatedBackupEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable automated backups (null = use security profile default)
automatedBackupEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
autoProvisionIdentityCenter - Variable in class com.cloudforge.core.config.DeploymentConfig
Auto-provision SAML application in IAM Identity Center
autoProvisionIdentityCenter() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
availabilityZones - Variable in class com.cloudforge.core.config.DeploymentConfig
Availability zones for deployment
AWS Audit Manager Setup - Search tag in class com.cloudforgeci.api.observability.ComplianceFactory
Section
awsConfigEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable AWS Config
awsConfigEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
AwsConfigRule - Enum Class in com.cloudforgeci.api.core.rules
AWS Config managed rules mapped to ComplianceMatrix SecurityControls.
AwsRegion - Enum Class in com.cloudforge.core.enums
AWS Regions enumeration with metadata for disaster recovery and compliance.
AwsRegion.GeoArea - Enum Class in com.cloudforge.core.enums
Geographic areas for data residency requirements.

B

BACKUP_RECOVERY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
BackupFactory - Class in com.cloudforgeci.api.storage
Factory for creating AWS Backup resources for EFS and RDS.
BackupFactory(Construct, String) - Constructor for class com.cloudforgeci.api.storage.BackupFactory
 
backupRetentionDays() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Database backup retention requirements.
backupRetentionDays() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
backupRetentionDays() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
backupRetentionDays() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
backupRetentionDays() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
backupRetentionDays() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
BaseConfiguration - Interface in com.cloudforgeci.api.interfaces
 
BaseFactory - Class in com.cloudforgeci.api.core.annotation
Base class for factory classes that provides convenient access to SystemContext, DeploymentContext, and SecurityProfileConfiguration.
BaseFactory(Construct, String) - Constructor for class com.cloudforgeci.api.core.annotation.BaseFactory
Constructor that initializes contexts and automatically extracts annotated field values.
BaseSlot<T> - Interface in com.cloudforgeci.api.interfaces
 
Basic Field - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
bastionCidr - Variable in class com.cloudforge.core.config.DeploymentConfig
CIDR for bastion/VPN SSH access
bastionCidr() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
BILLING_IMPACT - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
Changing this field impacts AWS costs.
Built-in Validators: - Search tag in interface com.cloudforge.core.config.FieldValidator
Section

C

CA_CENTRAL_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
CA_WEST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
CANADA - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
CapacityValidator - Class in com.cloudforge.core.config
Validates that maxCapacity >= minCapacity for scaling configurations.
CapacityValidator() - Constructor for class com.cloudforge.core.config.CapacityValidator
 
category() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Application category for grouping and discovery.
category() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Field category for grouping related configuration options.
category() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the category record component.
category() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the application category from the ApplicationPlugin annotation.
CdkNagControlMapper - Class in com.cloudforgeci.api.core.rules
Maps cdk-nag rule IDs to CloudForge SecurityControl enums for unified compliance reporting.
CDN_SECURITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
CdnApiSecurityRules - Class in com.cloudforgeci.api.core.rules
CDN and API security compliance validation rules.
CdnApiSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.CdnApiSecurityRules
 
cert - Variable in class com.cloudforgeci.api.core.SystemContext
 
CERTIFICATE_EXPIRATION_MONITORING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
CERTIFICATE_MANAGEMENT - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
certificateExpirationMonitoring - Variable in class com.cloudforge.core.config.DeploymentConfig
Certificate expiration monitoring enabled
certificateExpirationMonitoring() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CertificateFactory - Class in com.cloudforgeci.api.security
 
CertificateFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.CertificateFactory
 
cfc - Variable in class com.cloudforgeci.api.core.annotation.BaseFactory
 
cfc - Variable in class com.cloudforgeci.api.core.SystemContext
 
CfnStringUtils - Class in com.cloudforgeci.api.util
CloudFormation string utilities using intrinsic functions.
CHANGE_MANAGEMENT - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
check(SystemContext) - Method in interface com.cloudforgeci.api.interfaces.Rule
 
citation() - Method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Returns the value of the citation record component.
cloudfront - Variable in class com.cloudforgeci.api.core.SystemContext
 
cloudfront() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Returns the value of the cloudfront record component.
CLOUDFRONT_ACCESSLOGS_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDFRONT_ASSOCIATED_WITH_WAF - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDFRONT_DEFAULT_ROOT_OBJECT_CONFIGURED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDFRONT_NO_DEPRECATED_SSL_PROTOCOLS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDFRONT_ORIGIN_ACCESS_IDENTITY_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDFRONT_VIEWER_POLICY_HTTPS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
cloudfrontEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudFront CDN
cloudfrontEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CLOUDTRAIL_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDTRAIL_ENCRYPTION_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDTRAIL_INSIGHTS - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
CLOUDTRAIL_LOG_FILE_VALIDATION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
cloudTrailEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudTrail for API audit logging
cloudTrailEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cloudTrailInsightsEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudTrail Insights
cloudTrailInsightsEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CLOUDWATCH_LOG_GROUP_ENCRYPTED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CLOUDWATCH_LOGS_KMS_ENCRYPTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
cloudWatchLogsKmsEncryptionEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudWatch Logs KMS encryption
cloudWatchLogsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CMK_BACKING_KEY_ROTATION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
code() - Method in enum class com.cloudforge.core.enums.AwsRegion
Gets the region code (e.g., "us-east-1").
CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
CODEBUILD_PROJECT_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
cognitoAdminGroupName - Variable in class com.cloudforge.core.config.DeploymentConfig
Admin group name
cognitoAdminGroupName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoAppClientId - Variable in class com.cloudforge.core.config.DeploymentConfig
Existing Cognito App Client ID
cognitoAppClientId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CognitoAuthenticationFactory - Class in com.cloudforgeci.api.security
Manages AWS Cognito User Pools for OIDC authentication.
CognitoAuthenticationFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.CognitoAuthenticationFactory
 
cognitoAuthorizationEndpoint - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoAutoProvision - Variable in class com.cloudforge.core.config.DeploymentConfig
Auto-provision new Cognito User Pool
cognitoAutoProvision() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoClientId - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoClientSecretName - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoClientSecretResourceInternal - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoCreateGroups - Variable in class com.cloudforge.core.config.DeploymentConfig
Create admin and user groups in Cognito
cognitoCreateGroups() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoDomainPrefix - Variable in class com.cloudforge.core.config.DeploymentConfig
Cognito domain prefix (must be globally unique)
cognitoDomainPrefix - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoDomainPrefix() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoInitialAdminEmail - Variable in class com.cloudforge.core.config.DeploymentConfig
Initial admin email address
cognitoInitialAdminEmail() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoInitialAdminPhone - Variable in class com.cloudforge.core.config.DeploymentConfig
Initial admin phone number (E.164 format)
cognitoInitialAdminPhone() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoIssuer - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoLogoutEndpoint - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoMfaEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable MFA for Cognito
cognitoMfaEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoMfaMethod - Variable in class com.cloudforge.core.config.DeploymentConfig
Cognito MFA method
cognitoMfaMethod() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CognitoOidcConfiguration - Class in com.cloudforge.core.oidc
OIDC configuration for Amazon Cognito User Pools.
CognitoOidcConfiguration(String, String, String, String, String, String, String) - Constructor for class com.cloudforge.core.oidc.CognitoOidcConfiguration
Creates a Cognito OIDC configuration.
CognitoSamlFactory - Class in com.cloudforgeci.api.security
Cognito SAML Factory for applications requiring SAML authentication.
CognitoSamlFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.CognitoSamlFactory
 
cognitoTokenEndpoint - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserGroupName - Variable in class com.cloudforge.core.config.DeploymentConfig
User group name
cognitoUserGroupName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoUserInfoEndpoint - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserPool - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserPoolClient - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserPoolDomain - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserPoolId - Variable in class com.cloudforge.core.config.DeploymentConfig
Existing Cognito User Pool ID
cognitoUserPoolId - Variable in class com.cloudforgeci.api.core.SystemContext
 
cognitoUserPoolId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cognitoUserPoolName - Variable in class com.cloudforge.core.config.DeploymentConfig
Cognito User Pool name
cognitoUserPoolName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
com.cloudforge.core.annotation - package com.cloudforge.core.annotation
 
com.cloudforge.core.config - package com.cloudforge.core.config
 
com.cloudforge.core.enums - package com.cloudforge.core.enums
 
com.cloudforge.core.iam - package com.cloudforge.core.iam
 
com.cloudforge.core.interfaces - package com.cloudforge.core.interfaces
 
com.cloudforge.core.oidc - package com.cloudforge.core.oidc
 
com.cloudforge.core.utilities - package com.cloudforge.core.utilities
 
com.cloudforgeci.api.api - package com.cloudforgeci.api.api
 
com.cloudforgeci.api.application - package com.cloudforgeci.api.application
 
com.cloudforgeci.api.application.analytics - package com.cloudforgeci.api.application.analytics
 
com.cloudforgeci.api.application.artifactregistry - package com.cloudforgeci.api.application.artifactregistry
 
com.cloudforgeci.api.application.cicd - package com.cloudforgeci.api.application.cicd
 
com.cloudforgeci.api.application.collaboration - package com.cloudforgeci.api.application.collaboration
 
com.cloudforgeci.api.application.database - package com.cloudforgeci.api.application.database
 
com.cloudforgeci.api.application.monitoring - package com.cloudforgeci.api.application.monitoring
 
com.cloudforgeci.api.application.secrets - package com.cloudforgeci.api.application.secrets
 
com.cloudforgeci.api.application.vcs - package com.cloudforgeci.api.application.vcs
 
com.cloudforgeci.api.compute - package com.cloudforgeci.api.compute
 
com.cloudforgeci.api.core - package com.cloudforgeci.api.core
 
com.cloudforgeci.api.core.annotation - package com.cloudforgeci.api.core.annotation
 
com.cloudforgeci.api.core.iam - package com.cloudforgeci.api.core.iam
 
com.cloudforgeci.api.core.rules - package com.cloudforgeci.api.core.rules
 
com.cloudforgeci.api.core.runtime - package com.cloudforgeci.api.core.runtime
 
com.cloudforgeci.api.core.security - package com.cloudforgeci.api.core.security
 
com.cloudforgeci.api.core.topology - package com.cloudforgeci.api.core.topology
 
com.cloudforgeci.api.core.util - package com.cloudforgeci.api.core.util
Utility classes for CloudForge API core functionality.
com.cloudforgeci.api.core.utilities - package com.cloudforgeci.api.core.utilities
 
com.cloudforgeci.api.database - package com.cloudforgeci.api.database
 
com.cloudforgeci.api.examples - package com.cloudforgeci.api.examples
 
com.cloudforgeci.api.ingress - package com.cloudforgeci.api.ingress
 
com.cloudforgeci.api.interfaces - package com.cloudforgeci.api.interfaces
 
com.cloudforgeci.api.network - package com.cloudforgeci.api.network
 
com.cloudforgeci.api.observability - package com.cloudforgeci.api.observability
Observability and security monitoring components for CloudForge infrastructure.
com.cloudforgeci.api.scaling - package com.cloudforgeci.api.scaling
 
com.cloudforgeci.api.security - package com.cloudforgeci.api.security
 
com.cloudforgeci.api.storage - package com.cloudforgeci.api.storage
 
com.cloudforgeci.api.util - package com.cloudforgeci.api.util
 
COMPLEX - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
Complex Expression with Grouping - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
Compliance and Auditing - Search tag in package com.cloudforgeci.api.observability
Section
Compliance Coverage - Search tag in class com.cloudforgeci.api.database.RdsFactory
Section
ComplianceFactory - Class in com.cloudforgeci.api.observability
Factory for creating compliance and audit resources (CloudTrail, AWS Config, AWS Audit Manager).
ComplianceFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.ComplianceFactory
 
ComplianceFramework - Annotation Interface in com.cloudforge.core.annotation
Marks a class as a pluggable compliance framework validator.
ComplianceFrameworkListConverter - Class in com.cloudforge.core.config
Jackson serializer/deserializer for converting between comma-separated strings and List<ComplianceFrameworkType>.
ComplianceFrameworkListConverter.Deserializer - Class in com.cloudforge.core.config
Deserializes a comma-separated string to List<ComplianceFrameworkType>.
ComplianceFrameworkListConverter.Serializer - Class in com.cloudforge.core.config
Serializes List<ComplianceFrameworkType> to a comma-separated string.
complianceFrameworks - Variable in class com.cloudforge.core.config.DeploymentConfig
Compliance frameworks to enable.
complianceFrameworks() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ComplianceFrameworkType - Enum Class in com.cloudforge.core.enums
Defines the supported compliance frameworks for CloudForge deployments.
Compliance Impact - Search tag in enum class com.cloudforge.core.enums.NetworkMode
Section
ComplianceMatrix - Class in com.cloudforgeci.api.core.rules
Multi-framework compliance control mapping matrix.
ComplianceMatrix.FrameworkRequirement - Record Class in com.cloudforgeci.api.core.rules
Framework-specific requirement with enforcement level.
ComplianceMatrix.RequirementLevel - Enum Class in com.cloudforgeci.api.core.rules
Requirement enforcement level for a control within a compliance framework.
ComplianceMatrix.SecurityControl - Enum Class in com.cloudforgeci.api.core.rules
Security control definitions mapped to framework requirements.
ComplianceMatrix.ValidationResult - Enum Class in com.cloudforgeci.api.core.rules
Validation result for a control check.
complianceMode - Variable in class com.cloudforge.core.config.DeploymentConfig
Compliance validation mode controlling how validation failures are handled.
complianceMode() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ComplianceMode - Enum Class in com.cloudforge.core.enums
Compliance validation mode controlling how validation failures are handled.
ComplianceRule - Record Class in com.cloudforgeci.api.core.rules
Represents a compliance rule with its validation status and AWS Config rule mapping.
ComplianceRule(String, String, Optional<String>, boolean, Optional<String>) - Constructor for record class com.cloudforgeci.api.core.rules.ComplianceRule
Creates an instance of a ComplianceRule record class.
Compound Condition (AND) - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
Compound Condition (OR) - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
ComputeSecurityRules - Class in com.cloudforgeci.api.core.rules
Compute security compliance validation rules.
ComputeSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.ComputeSecurityRules
 
Conditional Field (Application-Specific) - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
config - Variable in class com.cloudforgeci.api.core.annotation.BaseFactory
 
ConfigField - Annotation Interface in com.cloudforge.core.annotation
Marks a field in DeploymentConfig as user-configurable with metadata for automatic prompt generation, validation, and JSON schema generation.
ConfigFieldInfo - Record Class in com.cloudforge.core.config
Runtime metadata for a configuration field discovered via introspection.
ConfigFieldInfo(String, String, String, String, String, String, boolean, String, String[], double, double, String, String, boolean, String, FieldTag[], String[], int, Class<?>, Field) - Constructor for record class com.cloudforge.core.config.ConfigFieldInfo
Creates an instance of a ConfigFieldInfo record class.
configKey() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns the value of the configKey record component.
configRuleId() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns the value of the configRuleId record component.
configRuleIds() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns the value of the configRuleIds record component.
Configuration - Search tag in class com.cloudforgeci.api.observability.ComplianceFactory
Section
Configuration - Search tag in enum class com.cloudforge.core.enums.AuthMode
Section
Configuration - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
Configuration - Search tag in enum class com.cloudforge.core.enums.LoadBalancerType
Section
Configuration - Search tag in enum class com.cloudforge.core.enums.NetworkMode
Section
Configuration: - Search tag in class com.cloudforgeci.api.security.ApplicationOidcFactory
Section
ConfigurationIntrospector - Class in com.cloudforge.core.config
Discovers and filters configuration fields using reflection and annotations.
ConfigurationIntrospector() - Constructor for class com.cloudforge.core.config.ConfigurationIntrospector
 
ConfigurationValidationRules - Class in com.cloudforgeci.api.core.rules
General configuration validation rules that apply to all deployments.
ConfigurationValidationRules() - Constructor for class com.cloudforgeci.api.core.rules.ConfigurationValidationRules
 
configureUserData(UserDataBuilder, Ec2Context) - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Configure EC2 UserData script for application installation and setup.
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
configureUserData(UserDataBuilder, Ec2Context) - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
Constants - Interface in com.cloudforgeci.api.interfaces
 
Constants.Jenkins - Interface in com.cloudforgeci.api.interfaces
 
container - Variable in class com.cloudforgeci.api.core.SystemContext
 
container() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns the value of the container record component.
CONTAINER_SECURITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
containerDataPath() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the container path where application data is stored.
containerDataPath() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
containerDataPath() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Configures application-specific environment variables for the container.
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
containerEnvironmentVariables(String, boolean, String) - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
Container environment variables with database connection support.
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
Container environment variables with database connection support.
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
Container environment variables with database connection support.
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
Container environment variables with database connection support.
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
Container environment variables with database connection support.
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
containerEnvironmentVariables(String, boolean, String, DatabaseSpec.DatabaseConnection) - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
Container environment variables with database connection support.
ContainerFactory - Class in com.cloudforgeci.api.storage
 
ContainerFactory(Construct, String, ContainerImage) - Constructor for class com.cloudforgeci.api.storage.ContainerFactory
 
containerImage - Variable in class com.cloudforge.core.config.DeploymentConfig
Override container image tag
containerImage() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
containerImageScanning - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable container image vulnerability scanning
containerImageScanningEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
containerRuntimeSecurity - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable container runtime security monitoring
containerRuntimeSecurityEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
containerUser() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the container user (UID:GID) to run as.
containerUser() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
containerUser() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
ContextInjector - Class in com.cloudforgeci.api.core.annotation
Standalone utility for injecting context values into annotated fields.
controlId() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns the value of the controlId record component.
controlId() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Returns the value of the controlId record component.
controlName() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Returns the value of the controlName record component.
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.AdvancedMonitoringRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.CdnApiSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.ComputeSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.DatabaseSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.ElbSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.GdprOrganizationalRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.HipaaOrganizationalRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.IamSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.IncidentResponseRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.KeyManagementRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.LambdaSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.MessagingSecurityRules
Section
Controls Implemented - Search tag in class com.cloudforgeci.api.core.rules.ThreatProtectionRules
Section
Convention-Based Lookup - Search tag in class com.cloudforge.core.config.DefaultValueResolver
Section
CORE_PERMISSIONS - Static variable in class com.cloudforgeci.api.core.iam.PermissionMatrix
Core permissions required for all Jenkins deployments regardless of topology/runtime.
Cost Considerations - Search tag in enum class com.cloudforge.core.enums.NetworkMode
Section
cpu - Variable in class com.cloudforge.core.config.DeploymentConfig
Fargate CPU units (256, 512, 1024, 2048, 4096)
cpu - Variable in class com.cloudforgeci.api.core.SystemContext
 
cpu() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
cpuTargetUtilization - Variable in class com.cloudforge.core.config.DeploymentConfig
CPU target utilization percentage for auto-scaling
cpuTargetUtilization - Variable in class com.cloudforgeci.api.core.SystemContext
 
cpuTargetUtilization() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
create() - Method in class com.cloudforgeci.api.compute.ApplicationFactory
Creates the application deployment infrastructure.
create() - Method in class com.cloudforgeci.api.compute.Ec2Factory
 
create() - Method in class com.cloudforgeci.api.compute.FargateFactory
 
create() - Method in class com.cloudforgeci.api.core.annotation.BaseFactory
Abstract method that must be implemented by all factory subclasses.
create() - Method in class com.cloudforgeci.api.core.security.SecurityProfileFactory
 
create() - Method in class com.cloudforgeci.api.examples.SecurityProfileExample
 
create() - Method in class com.cloudforgeci.api.ingress.AlbFactory
 
create() - Method in class com.cloudforgeci.api.network.DomainFactory
 
create() - Method in class com.cloudforgeci.api.network.VpcFactory
Creates the VPC infrastructure.
create() - Method in class com.cloudforgeci.api.observability.AlarmFactory
Creates CloudWatch alarms for the application load balancer.
create() - Method in class com.cloudforgeci.api.observability.ComplianceFactory
 
create() - Method in class com.cloudforgeci.api.observability.FlowLogFactory
 
create() - Method in class com.cloudforgeci.api.observability.GuardDutyFactory
 
create() - Method in class com.cloudforgeci.api.observability.LoggingCwFactory
 
create() - Method in class com.cloudforgeci.api.observability.SecurityMonitoringFactory
 
create() - Method in class com.cloudforgeci.api.observability.WafFactory
 
create() - Method in class com.cloudforgeci.api.scaling.ScalingFactory
 
create() - Method in class com.cloudforgeci.api.security.ApplicationOidcFactory
 
create() - Method in class com.cloudforgeci.api.security.ApplicationSamlFactory
 
create() - Method in class com.cloudforgeci.api.security.CertificateFactory
 
create() - Method in class com.cloudforgeci.api.security.CognitoAuthenticationFactory
 
create() - Method in class com.cloudforgeci.api.security.CognitoSamlFactory
 
create() - Method in class com.cloudforgeci.api.security.IdentityCenterFactory
 
create() - Method in class com.cloudforgeci.api.security.IdentityCenterSamlFactory
 
create() - Method in class com.cloudforgeci.api.security.KeycloakFactory
 
create() - Method in class com.cloudforgeci.api.security.OidcAuthenticationFactory
 
create() - Method in class com.cloudforgeci.api.storage.BackupFactory
 
create() - Method in class com.cloudforgeci.api.storage.ContainerFactory
 
create() - Method in class com.cloudforgeci.api.storage.EfsFactory
 
createAlbFactory(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates an ALB factory with proper context injection.
createConfigInfrastructure - Variable in class com.cloudforge.core.config.DeploymentConfig
Create AWS Config infrastructure
createConfigInfrastructure() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
createDatabase(SystemContext, DatabaseSpec.DatabaseRequirement, IVpc, String) - Static method in class com.cloudforgeci.api.database.RdsFactory
Create RDS database instance from DatabaseSpec requirement.
createDatabase(SystemContext, DatabaseSpec.DatabaseRequirement, IVpc, String, Integer, Boolean, Boolean) - Static method in class com.cloudforgeci.api.database.RdsFactory
Create RDS database instance with optional DeploymentConfig overrides.
createDevJenkins(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.SecurityExample
Example of creating a Jenkins deployment with development security settings.
createEc2(Construct, String, DeploymentContext, SecurityProfile, IAMProfile, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Static helper method for creating an EC2-based application deployment with explicit IAM profile.
createEc2(Construct, String, DeploymentContext, SecurityProfile, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Creates an EC2-based application deployment with specific security profile.
createEc2(Construct, String, DeploymentContext, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Creates an EC2-based application deployment.
createEfsFactory(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates an EFS factory with proper context injection.
createFargate(Construct, String, DeploymentContext, SecurityProfile, IAMProfile, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Static helper method for creating a Fargate-based application deployment with explicit IAM profile.
createFargate(Construct, String, DeploymentContext, SecurityProfile, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Static helper method for creating a Fargate-based application deployment with specific security profile.
createFargate(Construct, String, DeploymentContext, ApplicationSpec) - Static method in class com.cloudforgeci.api.compute.ApplicationFactory
Static helper method for creating a Fargate-based application deployment.
createGuardDutyDetector - Variable in class com.cloudforge.core.config.DeploymentConfig
Create GuardDuty detector (account-region singleton)
createGuardDutyDetector() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
createGuardDutyFactory(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates GuardDuty threat detection factory.
createInfrastructureFactories(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates infrastructure factories in the correct order with proper context injection.
createInstanceSecurityGroup(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates instance security group for EC2 deployments.
createJenkinsDeployment(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates a complete Jenkins deployment with infrastructure and Jenkins-specific resources.
createLoggingFactory(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates a logging factory with proper context injection.
createProductionJenkins(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.SecurityExample
Example of creating a Jenkins deployment with production security settings.
createS3CloudFrontDeployment(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates a complete S3 + CloudFront deployment for static web applications.
createSecurityFactories(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates security-related factories (Certificate, OIDC, Identity Center).
createStagingJenkins(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.SecurityExample
Example of creating a Jenkins deployment with staging security settings.
createTargetGroups(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates target groups orchestrated by SystemContext.
createVpcFactory(Construct, String) - Method in class com.cloudforgeci.api.core.SystemContext
Creates a VPC factory with proper context injection.
createWithAutomaticIAM(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.IAMExample
Example of creating Jenkins deployments with automatic IAM profile mapping.
createWithExplicitIAM(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.IAMExample
Example of creating Jenkins deployments with explicit IAM profile selection.
createZone - Variable in class com.cloudforge.core.config.DeploymentConfig
Create Route53 hosted zone
createZone() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
CREDENTIAL_ROTATION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
crossRegionBackupEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable cross-region backups (null = use security profile default)
crossRegionBackupEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ctx - Variable in class com.cloudforgeci.api.core.annotation.BaseFactory
 

D

DATABASE_ACCESS_CONTROL - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
DATABASE_AND_PROVISION - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
DATABASE_LOGGING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
DATABASE_MULTI_AZ - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
DATABASE_PITR - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
databaseAllocatedStorageGB - Variable in class com.cloudforge.core.config.DeploymentConfig
Allocated storage in GB.
databaseBackupRetentionDays - Variable in class com.cloudforge.core.config.DeploymentConfig
Backup retention period in days.
DatabaseConnection(String, int, String, String, String, String, String, List<String>) - Constructor for record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Creates an instance of a DatabaseConnection record class.
databaseEngine - Variable in class com.cloudforge.core.config.DeploymentConfig
Database engine (e.g., postgres, mysql, mariadb).
databaseInitScripts() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Database initialization SQL scripts to run after creation.
databaseInstanceClass - Variable in class com.cloudforge.core.config.DeploymentConfig
RDS instance class (e.g., db.t3.small, db.m5.large).
databaseMultiAz - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Multi-AZ deployment for high availability.
databaseName - Variable in class com.cloudforge.core.config.DeploymentConfig
Database name.
databaseName() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the databaseName record component.
databaseName() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the databaseName record component.
databaseParameters() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Database configuration overrides for specific engines.
databaseParameters() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
databaseParameters() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
databaseParameters() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
databaseParameters() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
databaseParameters() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
databaseRequirement() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Database requirement for this application.
databaseRequirement() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
databaseRequirement() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
DatabaseRequirement(DatabaseSpec.DatabaseRequirement.RequirementType, String, String, String, int, String, boolean) - Constructor for record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Creates an instance of a DatabaseRequirement record class.
DatabaseSecurityRules - Class in com.cloudforgeci.api.core.rules
Database security compliance validation rules.
DatabaseSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.DatabaseSecurityRules
 
DatabaseSpec - Interface in com.cloudforge.core.interfaces
Database specification interface for applications requiring external databases.
DatabaseSpec.DatabaseConnection - Record Class in com.cloudforge.core.interfaces
Database connection information provided to applications.
DatabaseSpec.DatabaseRequirement - Record Class in com.cloudforge.core.interfaces
Database requirement specification.
DatabaseSpec.DatabaseRequirement.RequirementType - Enum Class in com.cloudforge.core.interfaces
 
databaseVersion - Variable in class com.cloudforge.core.config.DeploymentConfig
Database engine version.
DB_INSTANCE_BACKUP_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
dbConnection - Variable in class com.cloudforgeci.api.core.SystemContext
 
dbConnectionStringComponents - Variable in class com.cloudforgeci.api.core.SystemContext
 
dbCredentials - Variable in class com.cloudforgeci.api.core.SystemContext
 
dbDatasourceParameter - Variable in class com.cloudforgeci.api.core.SystemContext
 
dbSecurityGroup - Variable in class com.cloudforgeci.api.core.SystemContext
 
debugPath(Construct) - Method in class com.cloudforgeci.api.core.SystemContext
 
defaultContainerImage() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the default container image for this application.
defaultContainerImage() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
defaultContainerImage() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
defaultCpu() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Default Fargate CPU units when not specified in deployment context.
defaultCpu() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the default Fargate CPU units.
defaultForProfile(SecurityProfile) - Static method in enum class com.cloudforge.core.enums.ComplianceMode
Get default compliance mode for a security profile.
defaultForProfile(SecurityProfile) - Static method in enum class com.cloudforge.core.enums.NetworkMode
Get default network mode for a security profile.
defaultFrom() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Method name or expression for resolving default value from ApplicationSpec.
defaultFrom() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the defaultFrom record component.
defaultHealthCheckGracePeriod() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the recommended health check grace period for this application.
defaultHealthCheckGracePeriod() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
defaultInstanceType() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Default EC2 instance type when not specified in deployment context.
defaultInstanceType() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the default EC2 instance type.
defaultMemory() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Default Fargate memory in MB when not specified in deployment context.
defaultMemory() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the default Fargate memory in MB.
DefaultValueResolver - Class in com.cloudforge.core.config
Resolves default values for configuration fields using layered priority.
DefaultValueResolver() - Constructor for class com.cloudforge.core.config.DefaultValueResolver
 
DELETION_PROTECTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
demonstrateAllFeatures(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.IAMExample
Complete example showing all IAM features.
demonstrateIAMValidation(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.IAMExample
Example demonstrating IAM profile validation and mapping.
demonstratePermissionMatrix() - Static method in class com.cloudforgeci.api.examples.IAMExample
Example showing permission matrix usage.
demonstrateSecurityProfiles(Construct, String, DeploymentContext) - Static method in class com.cloudforgeci.api.examples.SecurityExample
Example showing how different security profiles affect the deployment: DEV Security Profile: - SSH access from anywhere (0.0.0.0/0) - Jenkins port accessible from anywhere - HTTP/HTTPS accessible from anywhere - Minimal security restrictions for development convenience STAGING Security Profile: - SSH access restricted to VPC CIDR - Jenkins port only accessible from ALB security group - HTTP/HTTPS accessible from anywhere (needed for external testing) - Moderate security restrictions PRODUCTION Security Profile: - SSH access restricted to specific bastion/VPN CIDR (10.0.1.0/24) - Jenkins port only accessible from ALB security group - HTTPS only (HTTP redirects to HTTPS) - Maximum security restrictions for compliance - WAF protection can be added (placeholder for future implementation)
dependsOn() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Name of parent field that this field depends on.
dependsOn() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the dependsOn record component.
DeploymentConfig - Class in com.cloudforge.core.config
Universal deployment configuration for CloudForge applications.
DeploymentConfig() - Constructor for class com.cloudforge.core.config.DeploymentConfig
 
DeploymentContext - Class in com.cloudforgeci.api.core
Typed configuration interface for CDK deployment context.
DeploymentContext - Annotation Interface in com.cloudforge.core.annotation
Annotation to extract specific values from DeploymentContext.
DeploymentContext(Map<String, Object>) - Constructor for class com.cloudforgeci.api.core.DeploymentContext
 
deploymentId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
DeploymentValidation - Annotation Interface in com.cloudforge.core.utilities
 
DeploymentValidation.Validator - Class in com.cloudforge.core.utilities
 
deploymentVersion() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
description - Variable in class com.cloudforge.core.config.ApplicationInfo
Application description
description() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Brief description of the application's purpose.
description() - Element in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Description of the compliance framework for documentation purposes.
description() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Detailed description shown to users explaining the purpose and behavior.
description() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the description record component.
description() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the application description.
description() - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Get the framework description.
description() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns the value of the description record component.
description() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns the value of the description record component.
deserialize(JsonParser, DeserializationContext) - Method in class com.cloudforge.core.config.ComplianceFrameworkListConverter.Deserializer
 
Deserializer() - Constructor for class com.cloudforge.core.config.ComplianceFrameworkListConverter.Deserializer
 
DESTRUCTIVE - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
Changing this field requires resource replacement.
DEV - Enum constant in enum class com.cloudforge.core.enums.SecurityProfile
 
Development with Advisory Warnings - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
DevSecurityConfiguration - Class in com.cloudforgeci.api.core.security
Development security configuration with relaxed security settings.
DevSecurityConfiguration() - Constructor for class com.cloudforgeci.api.core.security.DevSecurityConfiguration
 
DevSecurityProfileConfiguration - Class in com.cloudforgeci.api.core.security
Development security profile configuration with minimal security constraints.
DevSecurityProfileConfiguration() - Constructor for class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
Create DevSecurityProfileConfiguration with no deployment context.
DevSecurityProfileConfiguration(DeploymentContext) - Constructor for class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
Create DevSecurityProfileConfiguration.
DISABLED - Enum constant in enum class com.cloudforge.core.enums.ComplianceMode
No compliance validation performed.
discover() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover all ApplicationSpec implementations via ServiceLoader.
discover() - Static method in class com.cloudforgeci.api.core.rules.FrameworkLoader
Discover all compliance frameworks available on the classpath.
discoverAsList() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover all ApplicationSpec implementations as a list.
discoverByCategory(String) - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover ApplicationSpec implementations filtered by category.
discoverCategories() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover all available categories.
discoverEc2Supported() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover applications that support EC2 deployment.
discoverFargateSupported() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover applications that support Fargate deployment.
discoverFields(ApplicationSpec) - Static method in class com.cloudforge.core.config.ConfigurationIntrospector
Discovers all configuration fields from DeploymentConfig.
discoverFields(ApplicationSpec, String) - Static method in class com.cloudforge.core.config.ConfigurationIntrospector
Discovers configuration fields for a specific category.
discoverGroupedByCategory() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Get applications grouped by category.
discoverOidcEnabled() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Discover applications that support OIDC integration.
discoverVisibleFields(ApplicationSpec, Object) - Static method in class com.cloudforge.core.config.ConfigurationIntrospector
Discovers visible fields only (based on application capabilities and configuration state).
discoverVisibleFields(ApplicationSpec, Object, String) - Static method in class com.cloudforge.core.config.ConfigurationIntrospector
Discovers fields by category with visibility filtering.
Discovery: - Search tag in interface com.cloudforge.core.interfaces.FrameworkRules
Section
Discovery Mechanism (v2.0): - Search tag in class com.cloudforgeci.api.core.rules.FrameworkLoader
Section
displayName() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Human-readable display name for the application.
displayName() - Element in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Human-readable display name for logging and documentation.
displayName() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Display name shown to users in interactive prompts.
displayName() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the displayName record component.
displayName() - Method in enum class com.cloudforge.core.enums.AwsRegion
Gets the display name (e.g., "US East (N.
displayName() - Method in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
displayName() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Get the human-readable display name for this application.
displayName() - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Get the human-readable display name for this framework.
distribution - Variable in class com.cloudforgeci.api.core.SystemContext
 
DnsLabel - Annotation Interface in com.cloudforge.core.utilities
 
DnsLabel.Validator - Class in com.cloudforge.core.utilities
 
DnsName - Annotation Interface in com.cloudforge.core.utilities
 
DnsName.Validator - Class in com.cloudforge.core.utilities
 
dnsRecordsCallbackRegistered - Variable in class com.cloudforgeci.api.core.SystemContext
 
dnsRecordsCreated - Variable in class com.cloudforgeci.api.core.SystemContext
 
domain - Variable in class com.cloudforge.core.config.DeploymentConfig
Primary domain (e.g., "example.com")
domain - Variable in class com.cloudforgeci.api.core.SystemContext
 
domain() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
domain() - Method in record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Returns the value of the domain record component.
DomainAndSslFactories(DomainFactory, Object) - Constructor for record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Creates an instance of a DomainAndSslFactories record class.
DomainFactory - Class in com.cloudforgeci.api.network
Domain Factory using annotation-based context extraction.
DomainFactory(Construct, String) - Constructor for class com.cloudforgeci.api.network.DomainFactory
 
domainSsl() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Returns the value of the domainSsl record component.
domainSsl() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Returns the value of the domainSsl record component.
DroneApplicationSpec - Class in com.cloudforgeci.api.application.cicd
Drone CI ApplicationSpec implementation.
DroneApplicationSpec() - Constructor for class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
drRegion() - Method in enum class com.cloudforge.core.enums.AwsRegion
Gets the disaster recovery region enum.
drRegionCode() - Method in enum class com.cloudforge.core.enums.AwsRegion
Gets the disaster recovery region code.
DYNAMODB_AUTOSCALING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
DYNAMODB_PITR_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
DYNAMODB_TABLE_ENCRYPTED_KMS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 

E

EBS_ENCRYPTION_BY_DEFAULT - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ebsDeviceName() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the EBS device name for EC2 instances when not using EFS.
ebsDeviceName() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
ebsDeviceName() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
ec2() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns the value of the ec2 record component.
EC2 - Enum constant in enum class com.cloudforge.core.enums.RuntimeType
 
EC2_IMDSV2 - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
EC2_IMDSV2_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EC2_INSTANCE_PROFILE_ATTACHED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EC2_INSTANCES_IN_VPC - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EC2_LAUNCH_TEMPLATE_PUBLIC_IP_DISABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EC2_PERMISSIONS - Static variable in class com.cloudforgeci.api.core.iam.PermissionMatrix
EC2-specific permissions based on IAM profile.
ec2AutoscalingCallbackRegistered - Variable in class com.cloudforgeci.api.core.SystemContext
 
Ec2Context - Interface in com.cloudforge.core.interfaces
Runtime context information for EC2 UserData configuration.
Ec2ContextImpl - Class in com.cloudforgeci.api.core
Implementation of Ec2Context providing runtime information for UserData configuration.
Ec2ContextImpl(String, String, String, boolean, String, String) - Constructor for class com.cloudforgeci.api.core.Ec2ContextImpl
 
ec2DataPath() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the EC2 data path where application stores persistent data.
ec2DataPath() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
ec2DataPath() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
Ec2Factory - Class in com.cloudforgeci.api.compute
Factory for creating EC2-based Jenkins compute infrastructure.
Ec2Factory(Construct, String) - Constructor for class com.cloudforgeci.api.compute.Ec2Factory
 
ec2Instance - Variable in class com.cloudforgeci.api.core.SystemContext
 
ec2InstanceRole - Variable in class com.cloudforgeci.api.core.SystemContext
 
ec2LogPaths() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns CloudWatch log file paths for EC2 monitoring.
ec2LogPaths() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
ec2LogPaths() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
Ec2RuntimeConfiguration - Class in com.cloudforgeci.api.core.runtime
 
Ec2RuntimeConfiguration() - Constructor for class com.cloudforgeci.api.core.runtime.Ec2RuntimeConfiguration
 
ECR_PRIVATE_IMAGE_SCANNING - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
efs - Variable in class com.cloudforgeci.api.core.SystemContext
 
efs() - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Returns the value of the efs record component.
efs() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns the value of the efs record component.
EFS_ENCRYPTED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EFS_PERMISSIONS - Static variable in class com.cloudforgeci.api.core.iam.PermissionMatrix
EFS permissions based on IAM profile.
efsDataPath() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the EFS path for this application's data.
efsDataPath() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
efsDataPath() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
efsEncryptionInTransitEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable EFS encryption in transit
efsEncryptionInTransitEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
EfsFactory - Class in com.cloudforgeci.api.storage
Factory for creating EFS file systems with support for persistence and reuse.
EfsFactory(Construct, String) - Constructor for class com.cloudforgeci.api.storage.EfsFactory
 
efsId() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns the EFS filesystem ID if EFS is available.
efsId() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
efsPermissions() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the EFS permissions for the access point.
efsPermissions() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
efsPermissions() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
efsSg - Variable in class com.cloudforgeci.api.core.SystemContext
 
EKS_CLUSTER_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EKS_CLUSTER_OLDEST_SUPPORTED_VERSION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EKS_ENDPOINT_NO_PUBLIC_ACCESS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
EKS_SECRETS_ENCRYPTED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ELB_DELETION_PROTECTION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ELB_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ELB_TLS_HTTPS_LISTENERS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ElbSecurityRules - Class in com.cloudforgeci.api.core.rules
Elastic Load Balancer security compliance validation rules.
ElbSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.ElbSecurityRules
 
enableAgents - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable JNLP build agent port (Jenkins: 50000)
enableAutoScaling - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable auto-scaling
enableCloudTrailBucketAccessRemediation - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudTrail bucket access logging remediation
enableCloudTrailBucketAccessRemediation() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableCluster - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Redis Cluster bus port (Redis: 16379)
enableClustering - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable clustering ports (Mattermost: 8074-8075, Vault: 8201)
enableDockerRegistry - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable container registry port (GitLab: 5050, Nexus: 5000-5002)
enableDomainAndSsl - Variable in class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 
enableEncryption - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable encryption at rest
enableEncryption() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableFlowlogs - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable VPC flow logs
enableFlowlogs - Variable in class com.cloudforgeci.api.core.SystemContext
 
enableFlowlogs() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableMetrics - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Prometheus metrics port (GitLab: 9090)
enableMonitoring - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable CloudWatch monitoring
enableMonitoring() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableNotary - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Notary content trust port (Harbor: 4443)
enableRdsAutoMinorVersionUpgradeRemediation - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable RDS auto minor version upgrade remediation
enableRdsAutoMinorVersionUpgradeRemediation() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableRdsDeletionProtectionRemediation - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable RDS deletion protection remediation
enableRdsDeletionProtectionRemediation() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableS3VersioningRemediation - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable S3 versioning remediation
enableS3VersioningRemediation() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableSentinel - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Redis Sentinel port (Redis: 26379)
enableSmtp - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable SMTP email port (Mattermost: 587)
enableSmtps - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable SMTP TLS email port (Mattermost: 465)
enableSsh - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Git SSH port (GitLab: 22, Gitea: 2222)
enableSsl - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable SSL certificate via ACM
enableSsl() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
enableTrivy - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Trivy vulnerability scanner port (Harbor: 8080)
ENCRYPTION_AT_REST - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
ENCRYPTION_IN_TRANSIT - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
endpoint() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the endpoint record component.
ENFORCE - Enum constant in enum class com.cloudforge.core.enums.ComplianceMode
Validation failures block CDK synthesis.
ENFORCE Mode - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
engine() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the engine record component.
engine() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the engine record component.
env() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
environment - Variable in class com.cloudforge.core.config.DeploymentConfig
Environment name (e.g., "dev", "staging", "production")
equals(Object) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Indicates whether some other object is "equal to" this one.
equals(Object) - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Indicates whether some other object is "equal to" this one.
error(String) - Static method in class com.cloudforge.core.config.ValidationResult
Creates a failed validation result with error message.
Error Handling - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
Error Handling - Search tag in class com.cloudforgeci.api.core.annotation.ContextInjector
Section
errorMessage() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns the value of the errorMessage record component.
EU - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
EU_CENTRAL_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_CENTRAL_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_NORTH_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_SOUTH_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_SOUTH_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_WEST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_WEST_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
EU_WEST_3 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
evaluate() - Method in class com.cloudforge.core.config.VisibilityExpressionEvaluator
Evaluates the visibility expression.
evidenceSources() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns the value of the evidenceSources record component.
example() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Example value shown to users as guidance.
example() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the example record component.
Example Framework: - Search tag in class com.cloudforgeci.api.core.rules.FrameworkLoader
Section
Examples - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
Examples: - Search tag in class com.cloudforge.core.config.VisibilityExpressionEvaluator
Section
Example Usage - Search tag in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Section
executeDeferredActions() - Method in class com.cloudforgeci.api.core.SystemContext
Execute all deferred actions.
existingFileSystemId - Variable in class com.cloudforge.core.config.DeploymentConfig
Reuse existing EFS by ID (for disaster recovery workflows)
existingFileSystemId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
EXPERIMENTAL - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
This feature is experimental and not production-ready.
EXTENDED - Enum constant in enum class com.cloudforge.core.enums.IAMProfile
EXTENDED: Broader permissions for development and debugging.
ExtendedIAMConfiguration - Class in com.cloudforgeci.api.core.iam
Extended IAM configuration with broader permissions for development.
ExtendedIAMConfiguration() - Constructor for class com.cloudforgeci.api.core.iam.ExtendedIAMConfiguration
 

F

fail(String, String, String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Create a failing compliance rule with error message.
fail(String, String, String, String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Create a failing compliance rule with Config rule mapping.
FAIL - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.ValidationResult
 
fargate() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns the value of the fargate record component.
FARGATE - Enum constant in enum class com.cloudforge.core.enums.RuntimeType
 
FARGATE_PERMISSIONS - Static variable in class com.cloudforgeci.api.core.iam.PermissionMatrix
Fargate-specific permissions based on IAM profile.
fargateAutoscalingCallbackRegistered - Variable in class com.cloudforgeci.api.core.SystemContext
 
fargateAutoscalingConfigured - Variable in class com.cloudforgeci.api.core.SystemContext
 
FargateCpuMemoryValidator - Class in com.cloudforge.core.config
Validates AWS Fargate CPU/memory combinations.
FargateCpuMemoryValidator() - Constructor for class com.cloudforge.core.config.FargateCpuMemoryValidator
 
fargateExecutionRole - Variable in class com.cloudforgeci.api.core.SystemContext
 
FargateFactory - Class in com.cloudforgeci.api.compute
Factory for creating Fargate-based Jenkins compute infrastructure.
FargateFactory(Construct, String) - Constructor for class com.cloudforgeci.api.compute.FargateFactory
Creates a new FargateFactory instance.
FargateRuntimeConfiguration - Class in com.cloudforgeci.api.core.runtime
 
FargateRuntimeConfiguration() - Constructor for class com.cloudforgeci.api.core.runtime.FargateRuntimeConfiguration
 
fargateService - Variable in class com.cloudforgeci.api.core.SystemContext
 
fargateServiceSg - Variable in class com.cloudforgeci.api.core.SystemContext
 
fargateTaskDef - Variable in class com.cloudforgeci.api.core.SystemContext
 
fargateTaskRole - Variable in class com.cloudforgeci.api.core.SystemContext
 
Feature Comparison - Search tag in enum class com.cloudforge.core.enums.LoadBalancerType
Section
field() - Element in annotation interface com.cloudforge.core.annotation.FieldEquals
DeploymentConfig field name to check.
field() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the field record component.
Field Categories - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
Field Equality - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
FieldEquals - Annotation Interface in com.cloudforge.core.annotation
Field equality check for visibility conditions.
fieldName() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the fieldName record component.
Field References - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
FieldTag - Enum Class in com.cloudforge.core.annotation
Tags that describe the impact and characteristics of configuration field changes.
FieldValidator - Interface in com.cloudforge.core.config
Custom validator for configuration field cross-field validation.
fileIntegrityMonitoring - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable file integrity monitoring
fileIntegrityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
findById(String) - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Find a specific ApplicationSpec by application ID.
FlowLogFactory - Class in com.cloudforgeci.api.observability
VPC Flow Log Factory using annotation-based context injection.
FlowLogFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.FlowLogFactory
 
flowlogs - Variable in class com.cloudforgeci.api.core.SystemContext
 
forbid(String, Function<SystemContext, ? extends Slot<?>>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
For Sales and Business Users - Search tag in package com.cloudforgeci.api.observability
Section
fqdn - Variable in class com.cloudforge.core.config.DeploymentConfig
Fully qualified domain name (computed from domain+subdomain if not provided)
fqdn - Variable in class com.cloudforgeci.api.core.SystemContext
 
fqdn() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
framework() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Returns the value of the framework record component.
FrameworkControl(String, String, String) - Constructor for record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Creates an instance of a FrameworkControl record class.
frameworkId() - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Get the framework identifier from the ComplianceFramework annotation.
FrameworkLoader - Class in com.cloudforgeci.api.core.rules
Discovers and loads compliance framework validators using Java ServiceLoader.
frameworkMappings() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns the value of the frameworkMappings record component.
FrameworkRequirement(String, ComplianceMatrix.RequirementLevel) - Constructor for record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Creates an instance of a FrameworkRequirement record class.
FrameworkRules<T> - Interface in com.cloudforge.core.interfaces
Interface for pluggable compliance framework validators.
FrameworkRules Plugin Integration - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
from(Field) - Static method in record class com.cloudforge.core.config.ConfigFieldInfo
Creates ConfigFieldInfo from a field with @ConfigField annotation.
from(App) - Static method in class com.cloudforgeci.api.core.DeploymentContext
Build from the 'cfc' context object on the App.
from(Construct) - Static method in class com.cloudforgeci.api.core.DeploymentContext
Build from the 'cfc' context object on any Construct scope.
fromCode(String) - Static method in enum class com.cloudforge.core.enums.AwsRegion
Finds a region by its code.
fromDays(int) - Static method in class com.cloudforgeci.api.core.util.RetentionDaysConverter
Convert integer days to RetentionDays enum.
fromDaysOrNull(Integer) - Static method in class com.cloudforgeci.api.core.util.RetentionDaysConverter
Convert integer days to RetentionDays enum, returning null for null input.
fromFile(String) - Static method in class com.cloudforge.core.config.DeploymentConfig
Load DeploymentConfig from a JSON file path string.
fromFile(Path) - Static method in class com.cloudforge.core.config.DeploymentConfig
Load DeploymentConfig from a JSON file (e.g., deployment-context.json).
fromJson(String) - Static method in class com.cloudforge.core.config.DeploymentConfig
Load DeploymentConfig from a JSON string.
fromJson(String) - Static method in enum class com.cloudforge.core.enums.ComplianceMode
Parse compliance mode from string (case-insensitive) for Jackson deserialization.
fromMap(Map<String, Object>) - Static method in class com.cloudforge.core.config.DeploymentConfig
Load DeploymentConfig from a Map (e.g., CDK context).
fromRuleName(String) - Static method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Find a Config rule by its AWS rule name.
fromString(String) - Static method in enum class com.cloudforge.core.enums.AuthMode
Parse auth mode from string (case-insensitive).
fromString(String) - Static method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Creates a ComplianceFrameworkType from its JSON value.
fromString(String) - Static method in enum class com.cloudforge.core.enums.LoadBalancerType
Parse load balancer type from string (case-insensitive).
fromString(String) - Static method in enum class com.cloudforge.core.enums.NetworkMode
Parse network mode from string (case-insensitive).
fromString(String) - Static method in enum class com.cloudforge.core.enums.SecurityProfile
Parse security profile from string (case-insensitive).
fromString(String) - Static method in enum class com.cloudforge.core.enums.TopologyType
Parse topology type from string (case-insensitive).
fromString(String, ComplianceMode) - Static method in enum class com.cloudforge.core.enums.ComplianceMode
Parse compliance mode from string (case-insensitive).
fullDomainName - Variable in class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 

G

GDPR - Enum constant in enum class com.cloudforge.core.enums.ComplianceFrameworkType
 
gdprDataTransferApproved - Variable in class com.cloudforge.core.config.DeploymentConfig
GDPR data transfer approval flag for non-EU deployments.
gdprDataTransferApproved() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
GdprOrganizationalRules - Class in com.cloudforgeci.api.core.rules
GDPR organizational and data protection validation rules.
GdprOrganizationalRules() - Constructor for class com.cloudforgeci.api.core.rules.GdprOrganizationalRules
 
GdprRules - Class in com.cloudforgeci.api.core.rules
GDPR (General Data Protection Regulation) compliance validation.
GdprRules() - Constructor for class com.cloudforgeci.api.core.rules.GdprRules
 
generateComplianceReport(SystemContext) - Method in class com.cloudforgeci.api.core.rules.GdprRules
Generate GDPR technical safeguards compliance report.
generateComplianceReport(SystemContext) - Method in class com.cloudforgeci.api.core.rules.HipaaRules
Generate HIPAA Security Rule compliance report.
generateComplianceReport(SystemContext) - Method in class com.cloudforgeci.api.core.rules.PciDssRules
Generate PCI-DSS compliance report showing which requirements are met.
generateComplianceReport(SystemContext) - Method in class com.cloudforgeci.api.core.rules.Soc2Rules
Generate SOC 2 Trust Services Criteria compliance report.
generateDeploymentReport(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Generate a deployment-specific compliance report showing which controls are enabled.
generateFrameworkChecklist(String) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Generate a framework-specific requirements checklist.
generateMappingReport() - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Generates a human-readable report of the mapping coverage.
generateMatrixReport() - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Generate a comprehensive compliance matrix report showing all controls and their mappings across frameworks.
geoArea() - Method in enum class com.cloudforge.core.enums.AwsRegion
Gets the geographic area for data residency.
get() - Method in class com.cloudforgeci.api.core.Slot
 
get() - Method in interface com.cloudforgeci.api.interfaces.BaseSlot
 
getAccessTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getAccessTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getAccessTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getAccessTokenValidityHours() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the OAuth 2.0 access token validity duration in hours.
getAdditionalProperties() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns additional OIDC configuration properties.
getAdminGroupName() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the admin group name for role mapping.
getAdminGroupName() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getAdminGroupName() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getAlbAccessLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getAlbAccessLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getAlbAccessLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getAlbAccessLogRetentionDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the ALB access log retention period in days.
getAllControls() - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get all controls.
getAllMappedRules() - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Gets all supported cdk-nag rule IDs.
getApplicationUrl() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the application root URL.
getAuthenticationType() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the authentication type this integration uses.
getAuthenticationType() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getAuthenticationType() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getAuthorizationEndpoint() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC authorization endpoint.
getAuthorizationEndpoint() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getAuthorizationEndpoint() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getBackupRetentionDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getBackupRetentionDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getBackupRetentionDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getBackupRetentionDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the backup retention period in days.
getBucketParameterName(String) - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Get SSM parameter name for a retained S3 bucket.
getClientId() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OAuth 2.0 client ID.
getClientId() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getClientId() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getClientSecretArn() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the AWS Secrets Manager ARN for the client secret.
getClientSecretArn() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getClientSecretArn() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getCloudTrailParameterName() - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Get SSM parameter name for CloudTrail in this stack.
getCognitoUserPoolParameterName(String) - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Get SSM parameter name for a Cognito User Pool.
getComplianceFrameworksAsString() - Method in class com.cloudforge.core.config.DeploymentConfig
Returns the compliance frameworks as a comma-separated string.
getConfigDeliveryChannelParameterName() - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Get SSM parameter name for Config Delivery Channel in this region.
getConfigRecorderParameterName() - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Get SSM parameter name for Config Recorder in this region.
getConfigRulesForFramework(String) - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Get Config rule IDs for a specific framework.
getConfigRulesForFramework(String) - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get all AWS Config rule IDs needed for a specific framework.
getConfigurationFile(OidcConfiguration) - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns configuration file content for OIDC setup.
getConfigurationFile(OidcConfiguration) - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getConfigurationFile(OidcConfiguration) - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getConfigurationFile(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getConfigurationFile(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getConfigurationFilePath() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the file path where configuration should be written.
getConfigurationFilePath() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getConfigurationFilePath() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getConfigurationFilePath() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getConfigurationFilePath() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getContainerStartupCommand() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the application startup command for Fargate containers.
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getContainerStartupCommand() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getContextValue(String, String) - Method in class com.cloudforgeci.api.core.DeploymentContext
Get a context value by key with default.
getControl(String) - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get a control by its ID.
getControlsForFramework(String) - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get all controls that apply to a specific framework.
getDefaultMfaMethod() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getDefaultMfaMethod() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getDefaultMfaMethod() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getDefaultMfaMethod() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the default MFA method for the security profile.
getDeploymentContext() - Method in class com.cloudforgeci.api.core.annotation.BaseFactory
Convenience method to get DeploymentContext.
getDescription() - Method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Get a human-readable description of what this rule checks.
getDescription() - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
getDeveloperGroupName() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the developer group name for role mapping.
getDisplayName() - Method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Returns the human-readable display name.
getDomain() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
Returns the Cognito domain.
getEmailClaim() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the claim name for user's email.
getEnvironmentVariables(OidcConfiguration) - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns environment variables needed for OIDC configuration.
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getEnvironmentVariables(OidcConfiguration) - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getEvidenceSourcesForFramework(String) - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get all evidence sources needed for a specific framework.
getFlowLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getFlowLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getFlowLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getFlowLogRetentionDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the CloudWatch log retention period for VPC flow logs.
getFlowLogTrafficType() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getFlowLogTrafficType() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getFlowLogTrafficType() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getFlowLogTrafficType() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the flow log traffic type to capture.
getFrameworkControl(String) - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Get framework control by framework name.
getFrameworkControlMap(String) - Static method in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Get framework control mapping for evidence documentation.
getFrameworkMappings() - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
getFullNameClaim() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the claim name for user's full name.
getGroupsClaim() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the claim name for group membership.
getGroupsClaim() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getGroupsClaim() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getIdentityStoreId() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
Returns the Identity Store ID.
getIdTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getIdTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getIdTokenValidityHours() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getIdTokenValidityHours() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the OAuth 2.0 ID token validity duration in hours.
getInfrastructure() - Method in class com.cloudforgeci.api.compute.ApplicationFactory
Gets the infrastructure factories created during deployment.
getIntegrationMethod() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the OIDC integration method for this application.
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getIntegrationMethod() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getIssuerUrl() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC issuer URL.
getIssuerUrl() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getIssuerUrl() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getIssuesAsString() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
 
getJsonValue() - Method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Returns the JSON-serialized value (lowercase with hyphens).
getJsonValue() - Method in enum class com.cloudforge.core.enums.SecurityProfile
Returns the JSON-serialized value (lowercase).
getJsonValue() - Method in enum class com.cloudforge.core.enums.TopologyType
Returns the JSON-serialized value (kebab-case).
getJwksUri() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC JWKS (JSON Web Key Set) endpoint.
getJwksUri() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getJwksUri() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getLicenseEnvVarName() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
Get the environment variable name for the Metabase license token.
getLicenseSecretName(String) - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
Get the Secrets Manager secret name for the Metabase license token.
getLogoutEndpoint() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC logout endpoint.
getLogRemovalPolicy() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getLogRemovalPolicy() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getLogRemovalPolicy() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getLogRemovalPolicy() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the removal policy for log groups.
getLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getLogRetentionDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getLogRetentionDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the CloudWatch log retention period for application logs.
getMappingStatistics() - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Gets statistics about the mapping coverage.
getMatrixKey() - Method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Returns the key used in ComplianceMatrix requirements map.
getMaxInstanceCount() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getMaxInstanceCount() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getMaxInstanceCount() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getMaxInstanceCount() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the maximum number of instances for auto-scaling.
getMessage() - Method in class com.cloudforge.core.config.ValidationResult
Gets the error message (null if validation succeeded).
getMinimumPasswordLength() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getMinimumPasswordLength() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getMinimumPasswordLength() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getMinimumPasswordLength() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the minimum password length required for user accounts.
getMinInstanceCount() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getMinInstanceCount() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getMinInstanceCount() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getMinInstanceCount() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the minimum number of instances for auto-scaling.
getNatGatewayCount(TopologyType, RuntimeType, NetworkMode) - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getNatGatewayCount(TopologyType, RuntimeType, NetworkMode) - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getNatGatewayCount(TopologyType, RuntimeType, NetworkMode) - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getNatGatewayCount(TopologyType, RuntimeType, NetworkMode) - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the number of NAT gateways to create based on topology, runtime, and security profile.
getOidcCallbackPath() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the OIDC callback path for this application.
getOidcCallbackPath() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getOidcCallbackPath() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getOidcIntegration() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the OIDC integration handler for this application.
getOidcIntegration() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
getOidcIntegration() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
getPostDeploymentInstructions() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns post-deployment instructions for completing OIDC setup.
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getPostDeploymentInstructions() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getProviderType() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC provider type.
getProviderType() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getProviderType() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getRecommended(SecurityProfile) - Static method in class com.cloudforge.core.iam.IAMProfileMapper
Gets the recommended IAM profile for a given security profile.
getRecommendedAuthMode() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the recommended (default) authentication mode for this application.
getRedirectUrl() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the redirect URL for this application.
getRedirectUrl() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getRedirectUrl() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getRefreshTokenValidityDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getRefreshTokenValidityDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getRefreshTokenValidityDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getRefreshTokenValidityDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the OAuth 2.0 refresh token validity duration in days.
getRegion() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
Returns the AWS region.
getRegion() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
Returns the AWS region.
getRequiredConfigRules() - Method in class com.cloudforgeci.api.core.SystemContext
Get all required AWS Config rules collected from factories.
getRequiredPermissions(TopologyType, RuntimeType, IAMProfile) - Static method in class com.cloudforgeci.api.core.iam.PermissionMatrix
Gets the required permissions for a specific topology/runtime/iam combination.
getRequiredRules(String, ComplianceMode) - Static method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Get all Config rules required for the given compliance frameworks and mode.
getRequirement(String) - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
getRequirementLevel(String) - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
getRuleName() - Method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Get the AWS Config rule identifier.
getRulesForControl(ComplianceMatrix.SecurityControl) - Static method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Get all Config rules that validate a specific SecurityControl.
getRulesForControl(ComplianceMatrix.SecurityControl) - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Gets all cdk-nag rules mapped to a specific SecurityControl.
getRuntime() - Method in class com.cloudforgeci.api.core.DeploymentContext
Get the runtime type.
getSamlCertificateEnvVar() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the environment variable name for the SAML certificate path.
getSamlCertificateEnvVar() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getSamlCertificateEnvVar() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getSamlCertificateFilePath() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the full file path for the SAML IdP certificate.
getSamlCertificateFilePath() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getSamlCertificateFilePath() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getSamlCertificateMountPath() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns the directory path where SAML certificate should be mounted.
getSamlCertificateMountPath() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getSamlCertificateMountPath() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getSatisfiedFrameworks(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Get frameworks satisfied by current deployment configuration.
getScopes() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OAuth 2.0 scopes requested by this application.
getScopes() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getScopes() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getSecondaryRegion(String) - Static method in enum class com.cloudforge.core.enums.AwsRegion
Gets the secondary (DR) region for a given region code.
getSecurityControl() - Method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Get the SecurityControl this rule validates.
getSecurityProfile() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getSecurityProfile() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getSecurityProfile() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getSecurityProfile() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the security profile this configuration applies to.
getSecurityProfileConfiguration() - Method in class com.cloudforgeci.api.core.annotation.BaseFactory
Convenience method to get SecurityProfileConfiguration.
getSupportedAuthModes() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the list of supported authentication modes for this application.
getSystemContext() - Method in class com.cloudforgeci.api.core.annotation.BaseFactory
Convenience method to get SystemContext.
getTempPasswordValidityDays() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
getTempPasswordValidityDays() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
getTempPasswordValidityDays() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
getTempPasswordValidityDays() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Get the temporary password validity duration in days.
getTenant() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
Returns the Identity Center tenant.
Getting Started - Search tag in package com.cloudforgeci.api.observability
Section
getTokenEndpoint() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC token endpoint.
getTokenEndpoint() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getTokenEndpoint() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getTopology() - Method in class com.cloudforgeci.api.core.DeploymentContext
Get the topology type.
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns UserData commands for setting up OIDC integration.
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
getUserDataCommands(OidcConfiguration, Ec2Context) - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
getUserInfoEndpoint() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the OIDC userinfo endpoint.
getUserInfoEndpoint() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getUserInfoEndpoint() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getUsernameClaim() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the claim name for username mapping.
getUsernameClaim() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
getUsernameClaim() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
getUserPoolId() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
Returns the Cognito User Pool ID.
getValue() - Method in enum class com.cloudforge.core.enums.AuthMode
Returns the JSON/string value for this auth mode.
getValue() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Returns the JSON/string value for this load balancer type.
getValue() - Method in enum class com.cloudforge.core.enums.NetworkMode
Returns the JSON/string value for this network mode.
getValue(Object) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Gets the current value of this field from the config object.
getViewerGroupName() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns the viewer group name for role mapping.
GiteaApplicationSpec - Class in com.cloudforgeci.api.application.vcs
Gitea ApplicationSpec implementation.
GiteaApplicationSpec() - Constructor for class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
GitLabApplicationSpec - Class in com.cloudforgeci.api.application.cicd
GitLab ApplicationSpec implementation.
GitLabApplicationSpec() - Constructor for class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
GitLabOidcIntegration - Class in com.cloudforge.core.oidc
OIDC integration for GitLab using OmniAuth OpenID Connect.
GitLabOidcIntegration() - Constructor for class com.cloudforge.core.oidc.GitLabOidcIntegration
 
GrafanaApplicationSpec - Class in com.cloudforgeci.api.application.monitoring
Grafana ApplicationSpec implementation.
GrafanaApplicationSpec() - Constructor for class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
GrafanaOidcIntegration - Class in com.cloudforge.core.oidc
OIDC integration for Grafana using generic_oauth provider.
GrafanaOidcIntegration() - Constructor for class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
Grammar (BNF): - Search tag in class com.cloudforge.core.config.VisibilityExpressionEvaluator
Section
Grammar Specification - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
groups() - Element in annotation interface com.cloudforge.core.utilities.Arn
 
groups() - Element in annotation interface com.cloudforge.core.utilities.DeploymentValidation
 
groups() - Element in annotation interface com.cloudforge.core.utilities.DnsLabel
 
groups() - Element in annotation interface com.cloudforge.core.utilities.DnsName
 
groups() - Element in annotation interface com.cloudforge.core.utilities.OneOf
 
GUARDDUTY_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
guardDutyAlertsConfigured - Variable in class com.cloudforge.core.config.DeploymentConfig
GuardDuty alerts configured (EventBridge to SNS/SIEM)
guardDutyAlertsConfigured() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
guardDutyEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable GuardDuty threat detection
guardDutyEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
GuardDutyFactory - Class in com.cloudforgeci.api.observability
Factory for AWS GuardDuty threat detection and compliance automation.
GuardDutyFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.GuardDutyFactory
 

H

HarborApplicationSpec - Class in com.cloudforgeci.api.application.artifactregistry
Harbor Container Registry ApplicationSpec implementation.
HarborApplicationSpec() - Constructor for class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
hasAnyComplianceFramework() - Method in class com.cloudforge.core.config.DeploymentConfig
Checks if any compliance framework is enabled.
hasComplianceFramework(ComplianceFrameworkType) - Method in class com.cloudforge.core.config.DeploymentConfig
Checks if a specific compliance framework is enabled.
hasEfs() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns whether EFS is available in this deployment.
hasEfs() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
hashCode() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Returns a hash code value for this object.
hashCode() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Returns a hash code value for this object.
hasInternetAccess() - Method in enum class com.cloudforge.core.enums.NetworkMode
Check if this mode has outbound internet access.
hasIssues() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
 
hasMappingForRule(String) - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Checks if a cdk-nag rule has a mapping to a SecurityControl.
hasReadReplicas() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
 
hasStaticIp() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Check if this load balancer type provides static IPs.
hasTag(FieldTag) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Checks if this field has a specific tag.
healthCheckGracePeriod - Variable in class com.cloudforge.core.config.DeploymentConfig
 
healthCheckGracePeriod() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
healthCheckInterval - Variable in class com.cloudforge.core.config.DeploymentConfig
 
healthCheckInterval() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
healthCheckPath() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the health check path for ALB/ELB health checks.
healthCheckPath() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
healthCheckPath() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
healthCheckTimeout - Variable in class com.cloudforge.core.config.DeploymentConfig
 
healthCheckTimeout() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
healthyThreshold - Variable in class com.cloudforge.core.config.DeploymentConfig
 
healthyThreshold() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
HIGH_AVAILABILITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
HIPAA - Enum constant in enum class com.cloudforge.core.enums.ComplianceFrameworkType
 
HipaaOrganizationalRules - Class in com.cloudforgeci.api.core.rules
HIPAA organizational and administrative safeguard validation rules.
HipaaOrganizationalRules() - Constructor for class com.cloudforgeci.api.core.rules.HipaaOrganizationalRules
 
HipaaRules - Class in com.cloudforgeci.api.core.rules
HIPAA Security Rule compliance validation.
HipaaRules() - Constructor for class com.cloudforgeci.api.core.rules.HipaaRules
 
hostedZoneDomain - Variable in class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 
http - Variable in class com.cloudforgeci.api.core.SystemContext
 
httpRedirectEnabled - Variable in class com.cloudforgeci.api.core.SystemContext
 
https - Variable in class com.cloudforgeci.api.core.SystemContext
 
HTTPS_STRICT - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
httpsStrictEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
HTTPS-only mode (no HTTP listener when SSL enabled)
httpsStrictEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
httpsTargetsAdded - Variable in class com.cloudforgeci.api.core.SystemContext
 

I

IAM_NO_ADMIN_ACCESS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAM_PASSWORD_POLICY - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAM_ROOT_ACCESS_KEY_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAM_USER_GROUP_MEMBERSHIP - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAM_USER_MFA_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAM_USER_UNUSED_CREDENTIALS_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
IAMConfiguration - Interface in com.cloudforgeci.api.interfaces
IAM Configuration interface that extends the base BaseConfiguration interface.
IAMExample - Class in com.cloudforgeci.api.examples
Example demonstrating how to use the IAM Rules system with different permission profiles.
IAMExample() - Constructor for class com.cloudforgeci.api.examples.IAMExample
 
iamProfile - Variable in class com.cloudforgeci.api.core.SystemContext
 
IAMProfile - Enum Class in com.cloudforge.core.enums
IAM Profile enum defining different levels of permissions for AWS resources.
IAMProfileMapper - Class in com.cloudforge.core.iam
Maps Security Profiles to appropriate IAM Profiles following security best practices.
IAMRules - Class in com.cloudforgeci.api.core.rules
 
IAMRules() - Constructor for class com.cloudforgeci.api.core.rules.IAMRules
 
IamSecurityRules - Class in com.cloudforgeci.api.core.rules
IAM security compliance validation rules.
IamSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.IamSecurityRules
 
id - Variable in class com.cloudforge.core.config.ApplicationInfo
Application identifier (e.g., "jenkins", "gitlab")
id() - Method in class com.cloudforgeci.api.core.iam.ExtendedIAMConfiguration
 
id() - Method in class com.cloudforgeci.api.core.iam.MinimalIAMConfiguration
 
id() - Method in class com.cloudforgeci.api.core.iam.StandardIAMConfiguration
 
id() - Method in class com.cloudforgeci.api.core.runtime.Ec2RuntimeConfiguration
 
id() - Method in class com.cloudforgeci.api.core.runtime.FargateRuntimeConfiguration
 
id() - Method in class com.cloudforgeci.api.core.security.DevSecurityConfiguration
 
id() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityConfiguration
 
id() - Method in class com.cloudforgeci.api.core.security.StagingSecurityConfiguration
 
id() - Method in class com.cloudforgeci.api.core.topology.ApplicationServiceTopologyConfiguration
 
id() - Method in class com.cloudforgeci.api.core.topology.JenkinsServiceTopologyConfiguration
 
id() - Method in class com.cloudforgeci.api.core.topology.S3WebsiteTopologyConfiguration
 
id() - Method in interface com.cloudforgeci.api.interfaces.BaseConfiguration
 
identityCenter - Variable in class com.cloudforgeci.api.core.SystemContext
 
IdentityCenterFactory - Class in com.cloudforgeci.api.security
Identity Center Factory for AWS IAM Identity Center (formerly AWS SSO) setup.
IdentityCenterFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.IdentityCenterFactory
 
identityCenterGroupName - Variable in class com.cloudforge.core.config.DeploymentConfig
Identity Center group name for user assignment
identityCenterGroupName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
IdentityCenterOidcConfiguration - Class in com.cloudforge.core.oidc
OIDC configuration for AWS IAM Identity Center (formerly AWS SSO).
IdentityCenterOidcConfiguration(String, String, String, String, String, String, String) - Constructor for class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
Creates an IAM Identity Center OIDC configuration.
IdentityCenterSamlFactory - Class in com.cloudforgeci.api.security
IAM Identity Center SAML Factory for automated SAML 2.0 application provisioning.
IdentityCenterSamlFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.IdentityCenterSamlFactory
 
IL_CENTRAL_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
IMMUTABLE - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
This field cannot be changed after resource creation.
Implementation Pattern: - Search tag in interface com.cloudforge.core.interfaces.FrameworkRules
Section
Implementing Custom Validators: - Search tag in interface com.cloudforge.core.config.FieldValidator
Section
Important Note - Search tag in class com.cloudforgeci.api.core.rules.GdprOrganizationalRules
Section
Important Note - Search tag in class com.cloudforgeci.api.core.rules.HipaaOrganizationalRules
Section
inbound() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns the value of the inbound record component.
inboundTcp(int, String, String) - Static method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Convenience constructor for inbound TCP ports.
IncidentResponseRules - Class in com.cloudforgeci.api.core.rules
Incident response and disaster recovery compliance validation rules.
IncidentResponseRules() - Constructor for class com.cloudforgeci.api.core.rules.IncidentResponseRules
 
infrastructure() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Returns the value of the infrastructure record component.
InfrastructureFactories(VpcFactory, AlbFactory, EfsFactory, LoggingCwFactory) - Constructor for record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Creates an instance of a InfrastructureFactories record class.
initialize(Arn) - Method in class com.cloudforge.core.utilities.Arn.Validator
 
initialize(OneOf) - Method in class com.cloudforge.core.utilities.OneOf.Validator
 
inject(Object, SystemContext, DeploymentContext) - Static method in class com.cloudforgeci.api.core.annotation.ContextInjector
Inject context values into all annotated fields of the given object.
inject(Object, Construct) - Static method in class com.cloudforgeci.api.core.annotation.ContextInjector
Inject context values into all annotated fields of the given object.
inspectorEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Amazon Inspector for vulnerability scanning
inspectorEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.AdvancedMonitoringRules
Install advanced monitoring validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.CdnApiSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.ComputeSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.ConfigurationValidationRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.DatabaseSecurityRules
Install database security validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.ElbSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.GdprOrganizationalRules
Install GDPR organizational validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.GdprRules
Install GDPR compliance validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.HipaaOrganizationalRules
Install HIPAA organizational validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.HipaaRules
Install HIPAA compliance validation rules for production and staging environments.
install(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.IAMRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.IamSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.IncidentResponseRules
Install incident response validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.Iso27001Rules
Install ISO 27001 compliance validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.KeyManagementRules
Install key management validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.LambdaSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.MessagingSecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.PciDssRules
Install PCI-DSS compliance validation rules.
install(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.RuntimeRules
 
install(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.SecurityRules
 
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.Soc2Rules
Install SOC 2 compliance validation rules.
install(SystemContext) - Method in class com.cloudforgeci.api.core.rules.ThreatProtectionRules
Install threat protection validation rules.
install(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.TopologyRules
 
install(T) - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Install compliance validation rules into the CDK construct tree.
installAll(SystemContext) - Static method in class com.cloudforgeci.api.core.rules.Rules
 
installCloudWatchAgent(String, List<String>) - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Install and configure CloudWatch Agent for log streaming.
installCloudWatchAgent(String, List<String>) - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
INSTANCE_METADATA_SECURITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
instanceClass() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the instanceClass record component.
instanceSg - Variable in class com.cloudforgeci.api.core.SystemContext
 
instanceType - Variable in class com.cloudforge.core.config.DeploymentConfig
EC2 instance type (e.g., "t3.micro", "t3.small")
instanceType() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
Integration with Plugin Systems - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
InteractivePrompter - Class in com.cloudforge.core.config
Interactive prompting utility that generates questions from @ConfigField annotations.
InteractivePrompter(InputStream, PrintStream) - Constructor for class com.cloudforge.core.config.InteractivePrompter
Creates a new InteractivePrompter with the specified input and output streams.
isAccessKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAccessKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAccessKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAccessKeyRotationRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether access key rotation remediation should be enabled.
isAdvancedSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAdvancedSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAdvancedSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAdvancedSecurityEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether advanced security features (risk-based authentication) should be enabled.
isAdvisory(String) - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
isAlbAccessLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAlbAccessLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAlbAccessLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAlbAccessLoggingEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether access logging should be enabled for ALB.
isAlbAuthenticated() - Method in enum class com.cloudforge.core.enums.AuthMode
Check if authentication is handled at ALB level.
isAntiMalwareEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAntiMalwareEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAntiMalwareEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAntiMalwareEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether anti-malware protection should be enabled on EC2 instances.
isAuditManagerEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAuditManagerEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAuditManagerEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAuditManagerEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether AWS Audit Manager should be enabled for continuous auditing.
isAutoCreateUsers() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns whether to automatically create users on first login.
isAutomatedBackupEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAutomatedBackupEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAutomatedBackupEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAutomatedBackupEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether automated backups should be enabled.
isAutoScalingEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAutoScalingEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAutoScalingEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAutoScalingEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether auto-scaling should be enabled.
isAwsConfigEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isAwsConfigEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isAwsConfigEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isAwsConfigEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether AWS Config should be enabled for compliance monitoring.
isBackupVaultLockEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isBackupVaultLockEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isBackupVaultLockEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isBackupVaultLockEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether backup vault lock should be enabled.
isBackupVaultRetentionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isBackupVaultRetentionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isBackupVaultRetentionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isBackupVaultRetentionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether backup vault should be retained on stack deletion.
isCloudFrontEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCloudFrontEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCloudFrontEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCloudFrontEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether CloudFront should be enabled for DDoS protection.
isCloudTrailBucketAccessRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCloudTrailBucketAccessRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCloudTrailBucketAccessRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCloudTrailBucketAccessRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether CloudTrail bucket access remediation should be enabled.
isCloudTrailEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCloudTrailEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCloudTrailEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCloudTrailEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether CloudTrail should be enabled for audit logging.
isCloudTrailInsightsEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCloudTrailInsightsEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCloudTrailInsightsEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCloudTrailInsightsEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether CloudTrail Insights should be enabled for anomaly detection.
isCloudWatchLogsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCloudWatchLogsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCloudWatchLogsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCloudWatchLogsKmsEncryptionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether CloudWatch Logs should be encrypted with KMS.
isContainerImageScanningEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isContainerImageScanningEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isContainerImageScanningEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isContainerImageScanningEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether container image scanning should be enabled.
isContainerRuntimeSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isContainerRuntimeSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isContainerRuntimeSecurityEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isContainerRuntimeSecurityEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether container runtime security monitoring should be enabled.
isControlRequired(String, ComplianceMode, ComplianceMatrix.SecurityControl) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Check if a security control should be enforced based on compliance requirements.
isCrossRegionBackupEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isCrossRegionBackupEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isCrossRegionBackupEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isCrossRegionBackupEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether cross-region backup replication should be enabled.
isDetailedBillingEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isDetailedBillingEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isDetailedBillingEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isDetailedBillingEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether detailed billing should be enabled.
isDistroless() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether the container image is distroless (has no shell).
isDistroless() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
isDynamoDbPitrRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isDynamoDbPitrRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isDynamoDbPitrRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isDynamoDbPitrRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether DynamoDB point-in-time recovery remediation should be enabled.
isEbsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isEbsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isEbsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isEbsEncryptionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether EBS volumes should be encrypted.
isEbsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isEbsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isEbsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isEbsEncryptionRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether EBS encryption remediation should be enabled.
isEcrImageScanningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isEcrImageScanningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isEcrImageScanningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isEcrImageScanningRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether ECR image scanning remediation should be enabled.
isEfsEncryptionAtRestEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isEfsEncryptionAtRestEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isEfsEncryptionAtRestEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isEfsEncryptionAtRestEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether EFS should be encrypted at rest.
isEfsEncryptionInTransitEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isEfsEncryptionInTransitEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isEfsEncryptionInTransitEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isEfsEncryptionInTransitEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether EFS should be encrypted in transit.
isElbDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isElbDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isElbDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isElbDeletionProtectionRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether ELB deletion protection remediation should be enabled.
isEnterprise() - Method in class com.cloudforgeci.api.core.DeploymentContext
True if enterprise features should be enabled.
isError() - Method in class com.cloudforge.core.config.ValidationResult
Returns true if validation failed.
isFileIntegrityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isFileIntegrityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isFileIntegrityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isFileIntegrityMonitoringEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether file integrity monitoring should be enabled on EC2 instances.
isFlowLogsEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isFlowLogsEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isFlowLogsEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isFlowLogsEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether flow logs should be enabled for this security profile.
isGroupBasedAccessEnabled() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns whether group-based access control is enabled.
isGuardDutyEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isGuardDutyEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isGuardDutyEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isGuardDutyEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether GuardDuty should be enabled for threat detection.
isGuardDutyRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isGuardDutyRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isGuardDutyRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isGuardDutyRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether GuardDuty remediation should be enabled.
isHttpsStrictEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isHttpsStrictEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isHttpsStrictEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isHttpsStrictEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether HTTPS-only mode should be enforced (no HTTP listener).
isImdsv2Required() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isImdsv2Required() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isImdsv2Required() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isImdsv2Required() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether EC2 instances must use IMDSv2 (Instance Metadata Service Version 2).
isInspectorEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isInspectorEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isInspectorEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isInspectorEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Amazon Inspector should be enabled for vulnerability scanning.
isInspectorRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isInspectorRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isInspectorRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isInspectorRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Inspector remediation should be enabled.
isKmsKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isKmsKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isKmsKeyRotationRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isKmsKeyRotationRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether KMS key rotation remediation should be enabled.
isMacieAutomatedDiscoveryEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isMacieAutomatedDiscoveryEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isMacieAutomatedDiscoveryEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isMacieAutomatedDiscoveryEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Macie automated discovery jobs should be enabled.
isMacieEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isMacieEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isMacieEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isMacieEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Amazon Macie should be enabled for sensitive data discovery.
isMacieRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isMacieRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isMacieRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isMacieRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Macie remediation should be enabled.
isMfaRequired() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isMfaRequired() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isMfaRequired() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isMfaRequired() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether MFA (Multi-Factor Authentication) is required for user authentication.
isMultiAzEnforced() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isMultiAzEnforced() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isMultiAzEnforced() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isMultiAzEnforced() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether multi-AZ deployment should be enforced.
isNatGatewayEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isNatGatewayEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isNatGatewayEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isNatGatewayEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether NAT Gateway should be used for outbound internet access.
ISO 27001 Coverage: - Search tag in class com.cloudforgeci.api.core.rules.Iso27001Rules
Section
Iso27001Rules - Class in com.cloudforgeci.api.core.rules
ISO/IEC 27001:2022 Information Security Management compliance validation.
Iso27001Rules() - Constructor for class com.cloudforgeci.api.core.rules.Iso27001Rules
 
ISOLATED - Enum constant in enum class com.cloudforge.core.enums.NetworkMode
Isolated subnets with no internet access.
isPreventUserExistenceErrorsEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isPreventUserExistenceErrorsEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isPreventUserExistenceErrorsEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isPreventUserExistenceErrorsEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether to prevent user existence errors in authentication responses.
isPrivate() - Method in enum class com.cloudforge.core.enums.NetworkMode
Check if this mode uses private subnets (no public IPs on instances).
isPrivateWithNat() - Method in class com.cloudforgeci.api.core.DeploymentContext
True if the service should run in private subnets without public IPs.
isRdsDatabaseMultiAzEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRdsDatabaseMultiAzEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRdsDatabaseMultiAzEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRdsDatabaseMultiAzEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether RDS database Multi-AZ deployment should be enabled.
isRdsDeletionProtectionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRdsDeletionProtectionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRdsDeletionProtectionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRdsDeletionProtectionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether RDS deletion protection should be enabled.
isRdsDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRdsDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRdsDeletionProtectionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRdsDeletionProtectionRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether RDS deletion protection remediation should be enabled.
isRdsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRdsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRdsEncryptionRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRdsEncryptionRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether RDS encryption remediation should be enabled.
isRdsMultiAzRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRdsMultiAzRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRdsMultiAzRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRdsMultiAzRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether RDS Multi-AZ remediation should be enabled.
isRequired(String) - Method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
isRequired(String, ComplianceMode) - Method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Check if this Config rule is required based on compliance frameworks and mode.
isRestrictSecurityGroupEgressEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRestrictSecurityGroupEgressEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRestrictSecurityGroupEgressEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRestrictSecurityGroupEgressEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether security group egress should be restricted to VPC CIDR only.
isRoute53QueryLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isRoute53QueryLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isRoute53QueryLoggingEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isRoute53QueryLoggingEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Route53 DNS query logging should be enabled.
isS3EncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isS3EncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isS3EncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isS3EncryptionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether S3 buckets should be encrypted.
isS3ObjectLockEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isS3ObjectLockEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isS3ObjectLockEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isS3ObjectLockEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether S3 Object Lock should be enabled for compliance audit buckets.
isS3VersioningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isS3VersioningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isS3VersioningRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isS3VersioningRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether S3 bucket versioning remediation should be enabled.
isSecurityHubEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSecurityHubEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSecurityHubEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSecurityHubEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether AWS Security Hub should be enabled for centralized security findings.
isSecurityHubRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSecurityHubRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSecurityHubRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSecurityHubRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether Security Hub remediation should be enabled.
isSecurityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSecurityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSecurityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSecurityMonitoringEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether security monitoring and alerting should be enabled.
isSelfSignupEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSelfSignupEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSelfSignupEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSelfSignupEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether self-service user registration is allowed.
isSnsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSnsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSnsKmsEncryptionEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSnsKmsEncryptionEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether SNS topics should be encrypted with KMS.
isSshRemovalRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isSshRemovalRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isSshRemovalRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isSshRemovalRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether SSH removal remediation should be enabled.
isSuccess() - Method in class com.cloudforge.core.config.ValidationResult
Returns true if validation succeeded.
issues() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Returns the value of the issues record component.
isSupported() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application supports OIDC integration.
isSupported() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
isSupported() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
isValid() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Returns the value of the isValid record component.
isValid(DeploymentContext, ConstraintValidatorContext) - Method in class com.cloudforge.core.utilities.DeploymentValidation.Validator
 
isValid(String, ConstraintValidatorContext) - Method in class com.cloudforge.core.utilities.Arn.Validator
 
isValid(String, ConstraintValidatorContext) - Method in class com.cloudforge.core.utilities.DnsLabel.Validator
 
isValid(String, ConstraintValidatorContext) - Method in class com.cloudforge.core.utilities.DnsName.Validator
 
isValid(String, ConstraintValidatorContext) - Method in class com.cloudforge.core.utilities.OneOf.Validator
 
isValidCombination(SecurityProfile, IAMProfile) - Static method in class com.cloudforge.core.iam.IAMProfileMapper
Validates that the IAM profile is appropriate for the security profile.
isValidRegion(String) - Static method in enum class com.cloudforge.core.enums.AwsRegion
Checks if a region code is valid.
isVisible(Object, Object) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Checks if this field is visible based on the current configuration.
isVpcDefaultSgRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isVpcDefaultSgRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isVpcDefaultSgRemediationEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isVpcDefaultSgRemediationEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether VPC default security group remediation should be enabled.
isVpcEndpointsEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isVpcEndpointsEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isVpcEndpointsEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isVpcEndpointsEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether VPC endpoints should be used for AWS services.
isWafEnabled() - Method in class com.cloudforgeci.api.core.security.DevSecurityProfileConfiguration
 
isWafEnabled() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
 
isWafEnabled() - Method in class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
 
isWafEnabled() - Method in interface com.cloudforgeci.api.interfaces.SecurityProfileConfiguration
Whether WAF should be enabled for web application protection.

J

jenkins() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Returns the value of the jenkins record component.
JENKINS_CONTAINER_PATH - Static variable in interface com.cloudforgeci.api.interfaces.Constants.Jenkins
 
JENKINS_HOME - Static variable in interface com.cloudforgeci.api.interfaces.Constants.Jenkins
 
JENKINS_PATH - Static variable in interface com.cloudforgeci.api.interfaces.Constants.Jenkins
 
JENKINS_PORT - Static variable in interface com.cloudforgeci.api.interfaces.Constants.Jenkins
 
JENKINS_SERVICE - Enum constant in enum class com.cloudforge.core.enums.TopologyType
 
JenkinsApplicationSpec - Class in com.cloudforgeci.api.application
Jenkins ApplicationSpec implementation.
JenkinsApplicationSpec() - Constructor for class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
JenkinsConfig - Class in com.cloudforgeci.api.api
Deprecated, for removal: This API element is subject to removal in a future version.
JenkinsConfig(String, boolean, String, String, StackProps) - Constructor for class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 
JenkinsDeployment(SystemContext.InfrastructureFactories, SystemContext.JenkinsSpecificFactories, SystemContext.DomainAndSslFactories) - Constructor for record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Creates an instance of a JenkinsDeployment record class.
JenkinsOidcIntegration - Class in com.cloudforge.core.oidc
OIDC integration for Jenkins using the OpenID Connect Authentication Plugin.
JenkinsOidcIntegration() - Constructor for class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
JenkinsServiceTopologyConfiguration - Class in com.cloudforgeci.api.core.topology
 
JenkinsServiceTopologyConfiguration() - Constructor for class com.cloudforgeci.api.core.topology.JenkinsServiceTopologyConfiguration
 
JenkinsSpecificFactories(FargateFactory, ContainerFactory, AlarmFactory, Ec2Factory, Object) - Constructor for record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Creates an instance of a JenkinsSpecificFactories record class.
JSON Serialization - Search tag in enum class com.cloudforge.core.enums.SecurityProfile
Section
JSON Serialization - Search tag in enum class com.cloudforge.core.enums.TopologyType
Section

K

keycloakDeployed - Variable in class com.cloudforgeci.api.core.SystemContext
 
KeycloakFactory - Class in com.cloudforgeci.api.security
Keycloak SAML Bridge Factory.
KeycloakFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.KeycloakFactory
 
keycloakServiceUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
KeyManagementRules - Class in com.cloudforgeci.api.core.rules
Key Management compliance validation rules.
KeyManagementRules() - Constructor for class com.cloudforgeci.api.core.rules.KeyManagementRules
 
kind() - Method in class com.cloudforgeci.api.core.iam.ExtendedIAMConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.iam.MinimalIAMConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.iam.StandardIAMConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.runtime.Ec2RuntimeConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.runtime.FargateRuntimeConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.security.DevSecurityConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.security.ProductionSecurityConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.security.StagingSecurityConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.topology.ApplicationServiceTopologyConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.topology.JenkinsServiceTopologyConfiguration
 
kind() - Method in class com.cloudforgeci.api.core.topology.S3WebsiteTopologyConfiguration
 
kind() - Method in interface com.cloudforgeci.api.interfaces.IAMConfiguration
Returns the IAM profile type for this configuration.
kind() - Method in interface com.cloudforgeci.api.interfaces.RuntimeConfiguration
 
kind() - Method in interface com.cloudforgeci.api.interfaces.SecurityConfiguration
 
kind() - Method in interface com.cloudforgeci.api.interfaces.TopologyConfiguration
 
KMS_CMK_NOT_SCHEDULED_FOR_DELETION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
KMS_KEY_ROTATION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 

L

LAMBDA_DLQ_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
LAMBDA_FUNCTION_SETTINGS_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
LAMBDA_INSIDE_VPC - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
LAMBDA_SECURITY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
LambdaSecurityRules - Class in com.cloudforgeci.api.core.rules
Lambda security compliance validation rules.
LambdaSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.LambdaSecurityRules
 
lbType - Variable in class com.cloudforge.core.config.DeploymentConfig
Load balancer type
lbType - Variable in class com.cloudforgeci.api.core.SystemContext
 
lbType() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
level() - Method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Returns the value of the level record component.
LICENSE_SECRET_SUFFIX - Static variable in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
The Secrets Manager secret name for Metabase Pro/Enterprise license token.
LoadBalancerType - Enum Class in com.cloudforge.core.enums
Load balancer type for application ingress.
LOG_RETENTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
logging() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns the value of the logging record component.
Logging - Search tag in package com.cloudforgeci.api.observability
Section
LoggingCwFactory - Class in com.cloudforgeci.api.observability
CloudWatch Logging Factory using annotation-based context injection.
LoggingCwFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.LoggingCwFactory
 
logRetentionDays - Variable in class com.cloudforge.core.config.DeploymentConfig
CloudWatch Logs retention days
logRetentionDays() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
logs - Variable in class com.cloudforgeci.api.core.SystemContext
 

M

macieAutomatedDiscovery - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Macie automated discovery jobs
macieAutomatedDiscoveryEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
macieEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Amazon Macie for PII/PHI discovery (HIPAA/GDPR)
macieEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
mapFromSecurity(SecurityProfile) - Static method in class com.cloudforge.core.iam.IAMProfileMapper
Maps a Security Profile to the appropriate IAM Profile.
mapFromSecurity(SecurityProfile, IAMProfile) - Static method in class com.cloudforge.core.iam.IAMProfileMapper
Maps a Security Profile to the appropriate IAM Profile with override capability.
mapRuleToControl(String) - Static method in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Maps a cdk-nag rule ID to the corresponding CloudForge SecurityControl.
MattermostApplicationSpec - Class in com.cloudforgeci.api.application.collaboration
Mattermost Enterprise Edition ApplicationSpec implementation.
MattermostApplicationSpec() - Constructor for class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
MattermostGitLabOidcIntegration - Class in com.cloudforge.core.oidc
OIDC integration for Mattermost Team Edition using GitLab OAuth provider.
MattermostGitLabOidcIntegration() - Constructor for class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
MattermostOidcIntegration - Class in com.cloudforge.core.oidc
OIDC integration for Mattermost using native OpenID Connect.
MattermostOidcIntegration() - Constructor for class com.cloudforge.core.oidc.MattermostOidcIntegration
 
MattermostSamlIntegration - Class in com.cloudforge.core.oidc
SAML 2.0 integration for Mattermost.
MattermostSamlIntegration() - Constructor for class com.cloudforge.core.oidc.MattermostSamlIntegration
 
MattermostTeamApplicationSpec - Class in com.cloudforgeci.api.application.collaboration
Mattermost Team Edition ApplicationSpec implementation (FREE).
MattermostTeamApplicationSpec() - Constructor for class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
max() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Maximum value for numeric fields (int, double, float).
max() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the max record component.
maxInstanceCapacity - Variable in class com.cloudforge.core.config.DeploymentConfig
Maximum instance capacity for auto-scaling
maxInstanceCapacity - Variable in class com.cloudforgeci.api.core.SystemContext
 
maxInstanceCapacity() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ME - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
ME_CENTRAL_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
ME_SOUTH_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
memory - Variable in class com.cloudforge.core.config.DeploymentConfig
Fargate memory in MB
memory - Variable in class com.cloudforgeci.api.core.SystemContext
 
memory() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
message() - Element in annotation interface com.cloudforge.core.utilities.Arn
 
message() - Element in annotation interface com.cloudforge.core.utilities.DeploymentValidation
 
message() - Element in annotation interface com.cloudforge.core.utilities.DnsLabel
 
message() - Element in annotation interface com.cloudforge.core.utilities.DnsName
 
message() - Element in annotation interface com.cloudforge.core.utilities.OneOf
 
MessagingSecurityRules - Class in com.cloudforgeci.api.core.rules
Messaging security compliance validation rules.
MessagingSecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.MessagingSecurityRules
 
MetabaseApplicationSpec - Class in com.cloudforgeci.api.application.analytics
Metabase Business Intelligence ApplicationSpec implementation.
MetabaseApplicationSpec() - Constructor for class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
MetabaseSamlIntegration - Class in com.cloudforge.core.oidc
SAML integration for Metabase (Pro/Enterprise editions).
MetabaseSamlIntegration() - Constructor for class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
MigrationGuide - Class in com.cloudforge.core.annotation
Migration guide for converting existing factory classes to use annotation-based context injection.
MigrationGuide() - Constructor for class com.cloudforge.core.annotation.MigrationGuide
 
min() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Minimum value for numeric fields (int, double, float).
min() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the min record component.
minCpu - Variable in class com.cloudforge.core.config.ApplicationInfo
Minimum CPU units (Fargate)
MINIMAL - Enum constant in enum class com.cloudforge.core.enums.IAMProfile
MINIMAL: Only essential permissions required for basic operation.
MinimalIAMConfiguration - Class in com.cloudforgeci.api.core.iam
Minimal IAM configuration with least privilege permissions.
MinimalIAMConfiguration() - Constructor for class com.cloudforgeci.api.core.iam.MinimalIAMConfiguration
 
minInstanceCapacity - Variable in class com.cloudforge.core.config.DeploymentConfig
Minimum instance capacity for auto-scaling
minInstanceCapacity - Variable in class com.cloudforgeci.api.core.SystemContext
 
minInstanceCapacity() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
minInstanceType - Variable in class com.cloudforge.core.config.ApplicationInfo
Minimum instance type (EC2)
minMemory - Variable in class com.cloudforge.core.config.ApplicationInfo
Minimum memory MB (Fargate)
Modes - Search tag in enum class com.cloudforge.core.enums.AuthMode
Section
Modes - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
Modes - Search tag in enum class com.cloudforge.core.enums.NetworkMode
Section
mountEbs(String, String, String, String) - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Format and mount EBS volume.
mountEbs(String, String, String, String) - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
mountEfs(String, String, String, String, String) - Method in interface com.cloudforge.core.interfaces.UserDataBuilder
Mount EFS filesystem with IAM authentication.
mountEfs(String, String, String, String, String) - Method in class com.cloudforgeci.api.core.UserDataBuilderImpl
 
MULTI_REGION_CLOUDTRAIL - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 

N

name - Variable in class com.cloudforge.core.config.ApplicationInfo
Human-readable name (e.g., "Jenkins", "GitLab")
needsSamlCertificate() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application needs a SAML IdP certificate at startup.
Negation - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
NETWORK_FLOW_LOGS - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
NETWORK_SEGMENTATION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
networkMode - Variable in class com.cloudforge.core.config.DeploymentConfig
Network mode for VPC topology
networkMode - Variable in class com.cloudforgeci.api.core.SystemContext
 
networkMode() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
NetworkMode - Enum Class in com.cloudforge.core.enums
Network topology mode for VPC configuration.
NexusApplicationSpec - Class in com.cloudforgeci.api.application.artifactregistry
Sonatype Nexus Repository Manager ApplicationSpec implementation.
NexusApplicationSpec() - Constructor for class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
NLB - Enum constant in enum class com.cloudforge.core.enums.LoadBalancerType
Network Load Balancer (Layer 4).
none() - Static method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 
NONE - Enum constant in enum class com.cloudforge.core.enums.AuthMode
No CloudForge-managed authentication.
NONE - Enum constant in enum class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement.RequirementType
Application does not support external database (simple apps)
NOT_APPLICABLE - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.RequirementLevel
Not applicable to this framework
notApplicable() - Static method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
 
Numeric Field with Constraints - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section

O

of(Construct) - Static method in class com.cloudforgeci.api.core.SystemContext
Fetch the already-started context anywhere down the tree.
OidcAuthenticationFactory - Class in com.cloudforgeci.api.security
OIDC Authentication Factory for ALB-based authentication with AWS IAM Identity Center.
OidcAuthenticationFactory(Construct, String) - Constructor for class com.cloudforgeci.api.security.OidcAuthenticationFactory
 
oidcAuthorizationEndpoint - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC authorization endpoint
oidcAuthorizationEndpoint() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
oidcClientId - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC client ID
oidcClientId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
oidcClientSecretName - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC client secret name in Secrets Manager
oidcClientSecretName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
OidcConfiguration - Interface in com.cloudforge.core.interfaces
OIDC configuration for application-level authentication.
OidcIntegration - Interface in com.cloudforge.core.interfaces
Application-level OIDC integration interface.
oidcIssuer - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC issuer URL
oidcIssuer() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
oidcProvider - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC provider (none, cognito, identity-center, external-idp)
oidcTokenEndpoint - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC token endpoint
oidcTokenEndpoint() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
oidcUserInfoEndpoint - Variable in class com.cloudforge.core.config.DeploymentConfig
OIDC user info endpoint
oidcUserInfoEndpoint() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ok() - Static method in class com.cloudforge.core.config.ValidationResult
Creates a successful validation result.
once(String, Runnable) - Method in class com.cloudforgeci.api.core.SystemContext
Guard to register a wiring block only once per Stack.
OneOf - Annotation Interface in com.cloudforge.core.utilities
 
OneOf.Validator - Class in com.cloudforge.core.utilities
 
onSet(Consumer<T>) - Method in class com.cloudforgeci.api.core.Slot
 
onSet(Consumer<T>) - Method in interface com.cloudforgeci.api.interfaces.BaseSlot
 
Operator Precedence - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
optional() - Element in annotation interface com.cloudforge.core.utilities.Arn
 
optional(String, String) - Static method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 
OPTIONAL - Enum constant in enum class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement.RequirementType
Application CAN use external database or embedded (Metabase, Grafana)
OptionalPort(int, String, String, String, boolean) - Constructor for record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Creates an instance of a OptionalPort record class.
optionalPorts() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns optional ports that can be enabled via deployment configuration.
optionalPorts() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
optionalPorts() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
order() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Order hint for field display within a category.
order() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the order record component.
outboundTcp(int, String, String) - Static method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Convenience constructor for outbound TCP ports (no security group rule needed).

P

parseCommaSeparated(String) - Static method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Parses a delimited string of frameworks into a list.
pass(String, String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Create a passing compliance rule without Config rule mapping.
pass(String, String, String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Create a passing compliance rule.
PASS - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.ValidationResult
 
passed() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns the value of the passed record component.
passwordSecretArn() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the passwordSecretArn record component.
pattern() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Regular expression pattern for string validation.
pattern() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the pattern record component.
payload() - Element in annotation interface com.cloudforge.core.utilities.Arn
 
payload() - Element in annotation interface com.cloudforge.core.utilities.DeploymentValidation
 
payload() - Element in annotation interface com.cloudforge.core.utilities.DnsLabel
 
payload() - Element in annotation interface com.cloudforge.core.utilities.DnsName
 
payload() - Element in annotation interface com.cloudforge.core.utilities.OneOf
 
PCI_DSS - Enum constant in enum class com.cloudforge.core.enums.ComplianceFrameworkType
 
PciDssRules - Class in com.cloudforgeci.api.core.rules
PCI-DSS compliance validation rules.
PciDssRules() - Constructor for class com.cloudforgeci.api.core.rules.PciDssRules
 
PermissionMatrix - Class in com.cloudforgeci.api.core.iam
Permission Matrix defining the minimum required permissions for each topology/runtime combination.
PermissionMatrix.ValidationResult - Record Class in com.cloudforgeci.api.core.iam
Validation result containing success status and any issues found.
Plugin Metadata: - Search tag in interface com.cloudforge.core.interfaces.ApplicationSpec
Section
port() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns the value of the port record component.
port() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the port record component.
Post-Deployment Steps: - Search tag in class com.cloudforgeci.api.security.ApplicationOidcFactory
Section
PostgreSQLApplicationSpec - Class in com.cloudforgeci.api.application.database
PostgreSQL ApplicationSpec implementation.
PostgreSQLApplicationSpec() - Constructor for class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
presentSlots() - Method in class com.cloudforgeci.api.core.SystemContext
 
printCatalog() - Static method in class com.cloudforgeci.api.compute.ApplicationLoader
Print a formatted catalog of all discovered applications.
priority() - Element in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Load priority for ordering framework installation (lower values load first).
priority() - Method in interface com.cloudforge.core.interfaces.FrameworkRules
Get the load priority for this framework.
Priority Ordering: - Search tag in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Section
PRIVATE_WITH_NAT - Enum constant in enum class com.cloudforge.core.enums.NetworkMode
Private subnets with NAT Gateway for outbound internet access.
privateCa - Variable in class com.cloudforgeci.api.core.SystemContext
 
PRODUCTION - Enum constant in enum class com.cloudforge.core.enums.SecurityProfile
 
PRODUCTION_ONLY - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
Production-Only Feature - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
ProductionSecurityConfiguration - Class in com.cloudforgeci.api.core.security
Production security configuration with hardened security settings.
ProductionSecurityConfiguration() - Constructor for class com.cloudforgeci.api.core.security.ProductionSecurityConfiguration
 
ProductionSecurityProfileConfiguration - Class in com.cloudforgeci.api.core.security
Production security profile configuration with comprehensive security measures.
ProductionSecurityProfileConfiguration() - Constructor for class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
Create ProductionSecurityProfileConfiguration with no deployment context.
ProductionSecurityProfileConfiguration(DeploymentContext) - Constructor for class com.cloudforgeci.api.core.security.ProductionSecurityProfileConfiguration
Create ProductionSecurityProfileConfiguration.
Production with Strict Enforcement - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
PrometheusApplicationSpec - Class in com.cloudforgeci.api.application.monitoring
Prometheus ApplicationSpec implementation.
PrometheusApplicationSpec() - Constructor for class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
promptForCategory(DeploymentConfig, ApplicationSpec, String) - Method in class com.cloudforge.core.config.InteractivePrompter
Prompts for fields in a specific category.
promptForConfiguration(DeploymentConfig, ApplicationSpec) - Method in class com.cloudforge.core.config.InteractivePrompter
Prompts for all visible configuration fields.
Props() - Constructor for class com.cloudforgeci.api.observability.AlarmFactory.Props
 
protectedPaths() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns paths that require authentication when using ALB-level OIDC.
protocol() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns the value of the protocol record component.
provisionDatabase - Variable in class com.cloudforge.core.config.DeploymentConfig
Provision RDS database for application.
provisionDatabase() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
PUBLIC - Enum constant in enum class com.cloudforge.core.enums.NetworkMode
Public subnets with direct internet access.
publiclyAccessible() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the publiclyAccessible record component.
publicPaths() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns paths that should always be public (no authentication required).

R

raw() - Method in class com.cloudforgeci.api.core.DeploymentContext
Raw immutable view of all context keys.
RDS_CLUSTER_DELETION_PROTECTION_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_CLUSTER_IAM_AUTHENTICATION_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_CLUSTER_PUBLIC_ACCESS_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_INSTANCE_DELETION_PROTECTION_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_INSTANCE_IAM_AUTHENTICATION_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_INSTANCE_PUBLIC_ACCESS_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_MULTI_AZ - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
RDS_STORAGE_ENCRYPTED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
rdsDatabase - Variable in class com.cloudforgeci.api.core.SystemContext
 
RdsFactory - Class in com.cloudforgeci.api.database
Factory for provisioning AWS RDS database instances based on DatabaseSpec requirements.
RdsFactory() - Constructor for class com.cloudforgeci.api.database.RdsFactory
 
readReplicaCount() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Number of read replicas for production.
readReplicaEndpoints() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the readReplicaEndpoints record component.
REDIS_SPECIFIC - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
RedisApplicationSpec - Class in com.cloudforgeci.api.application.database
Redis ApplicationSpec implementation.
RedisApplicationSpec() - Constructor for class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
REDSHIFT_AUDIT_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
REDSHIFT_CLUSTER_KMS_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
REDSHIFT_REQUIRE_TLS_SSL - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
region - Variable in class com.cloudforge.core.config.DeploymentConfig
AWS region (e.g., "us-east-1", "us-west-2")
region() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
require(String, Function<SystemContext, ? extends Slot<?>>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
requireConfigRule(AwsConfigRule) - Method in class com.cloudforgeci.api.core.SystemContext
Register an AWS Config rule as required for this deployment.
requireConfigRulesForControl(ComplianceMatrix.SecurityControl) - Method in class com.cloudforgeci.api.core.SystemContext
Register all AWS Config rules for a specific security control.
required() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Whether this field is required to have a non-null value.
required() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the required record component.
required(String) - Static method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
 
required(String, String) - Static method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 
REQUIRED - Enum constant in enum class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement.RequirementType
Application MUST have external database (GitLab, Mattermost)
REQUIRED - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.RequirementLevel
Must be implemented - enforced in ENFORCE mode, warnings in ADVISORY mode
Requirements - Search tag in enum class com.cloudforge.core.enums.AuthMode
Section
REQUIRES_APPROVAL - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
Production changes require manual approval.
REQUIRES_DATABASE - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
REQUIRES_RESTART - Enum constant in enum class com.cloudforge.core.annotation.FieldTag
Changing this field requires service restart.
requiresAlb() - Method in enum class com.cloudforge.core.enums.AuthMode
Check if this mode requires ALB (not NLB).
requiresDatabase() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Whether this application requires an external database (RDS).
requiresNat() - Method in enum class com.cloudforge.core.enums.NetworkMode
Check if this mode requires NAT Gateway.
requiresReadReplicas() - Method in interface com.cloudforge.core.interfaces.DatabaseSpec
Whether this application requires read replicas for scaling.
requiresSsl() - Method in enum class com.cloudforge.core.enums.AuthMode
Check if this mode requires SSL.
resolve(ConfigFieldInfo, ApplicationSpec, List<FrameworkRules<?>>) - Static method in class com.cloudforge.core.config.DefaultValueResolver
Resolves the default value for a field using layered priority.
resolveWithFallback(ConfigFieldInfo, ApplicationSpec, List<FrameworkRules<?>>, Object) - Static method in class com.cloudforge.core.config.DefaultValueResolver
Resolves default with fallback to field's annotated default.
Resource Requirements: - Search tag in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Section
RESTRICTED_SSH - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
restrictSecurityGroupEgress - Variable in class com.cloudforge.core.config.DeploymentConfig
Restrict security group egress to VPC CIDR only (requires VPC endpoints for AWS service access)
restrictSecurityGroupEgress() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
retainStorage - Variable in class com.cloudforge.core.config.DeploymentConfig
Retain EFS/EBS volumes on stack deletion
retainStorage() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
RetentionDaysConverter - Class in com.cloudforgeci.api.core.util
Utility for converting integer day values to AWS CDK RetentionDays enum.
ROOT_ACCOUNT_HARDWARE_MFA_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ROOT_ACCOUNT_MFA_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
ROOT_ACCOUNT_PROTECTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
ROUTE53_QUERY_LOGGING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
route53QueryLoggingEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable Route53 Query Logging
route53QueryLoggingEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
Rule - Interface in com.cloudforgeci.api.interfaces
 
ruleId() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns the value of the ruleId record component.
RuleKit - Class in com.cloudforgeci.api.core.rules
 
RuleKit.PentaConsumer<A,B,C,D,E> - Interface in com.cloudforgeci.api.core.rules
 
RuleKit.QuadConsumer<A,B,C,D> - Interface in com.cloudforgeci.api.core.rules
 
RuleKit.TriConsumer<A,B,C> - Interface in com.cloudforgeci.api.core.rules
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.iam.ExtendedIAMConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.iam.MinimalIAMConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.iam.StandardIAMConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.runtime.Ec2RuntimeConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.runtime.FargateRuntimeConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.security.DevSecurityConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.security.ProductionSecurityConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.security.StagingSecurityConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.topology.ApplicationServiceTopologyConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.topology.JenkinsServiceTopologyConfiguration
 
rules(SystemContext) - Method in class com.cloudforgeci.api.core.topology.S3WebsiteTopologyConfiguration
 
rules(SystemContext) - Method in interface com.cloudforgeci.api.interfaces.BaseConfiguration
 
Rules - Class in com.cloudforgeci.api.core.rules
 
runtime - Variable in class com.cloudforge.core.config.DeploymentConfig
Runtime type (FARGATE or EC2)
runtime - Variable in class com.cloudforgeci.api.core.SystemContext
 
runtime() - Method in class com.cloudforgeci.api.core.DeploymentContext
Canonical axes (preferred).
RuntimeConfiguration - Interface in com.cloudforgeci.api.interfaces
 
runtimeRaw() - Method in class com.cloudforgeci.api.core.DeploymentContext
Deprecated.
RuntimeRules - Class in com.cloudforgeci.api.core.rules
 
RuntimeRules() - Constructor for class com.cloudforgeci.api.core.rules.RuntimeRules
 
runtimeType() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns the runtime type as a string.
runtimeType() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
RuntimeType - Enum Class in com.cloudforge.core.enums
Defines the compute runtime environments supported by CloudForge.

S

s3() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Returns the value of the s3 record component.
S3_BUCKET_DEFAULT_LOCK_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_BUCKET_ENCRYPTION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_BUCKET_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_BUCKET_REPLICATION - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_BUCKET_SSL_REQUESTS - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_BUCKET_VERSIONING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
S3_OBJECT_LOCK - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
S3_WEBSITE - Enum constant in enum class com.cloudforge.core.enums.TopologyType
 
s3CloudFront() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Returns the value of the s3CloudFront record component.
S3CloudFrontDeployment(SystemContext.S3CloudFrontFactories, SystemContext.DomainAndSslFactories) - Constructor for record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Creates an instance of a S3CloudFrontDeployment record class.
S3CloudFrontFactories(Object, Object) - Constructor for record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Creates an instance of a S3CloudFrontFactories record class.
s3ObjectLockEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable S3 Object Lock for audit buckets (HIPAA/PCI-DSS immutability requirement)
s3ObjectLockEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
S3WebsiteTopologyConfiguration - Class in com.cloudforgeci.api.core.topology
 
S3WebsiteTopologyConfiguration() - Constructor for class com.cloudforgeci.api.core.topology.S3WebsiteTopologyConfiguration
 
SA - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
SA_EAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
sameGeoArea(String, String) - Static method in enum class com.cloudforge.core.enums.AwsRegion
Checks if two regions are in the same geographic area.
SAML_CERTIFICATE_MOUNT_PATH - Static variable in class com.cloudforge.core.oidc.MattermostSamlIntegration
samlAcsUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlConfigSecretArn - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlIdpEntityId - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlIdpLogoutUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlIdpMetadataUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlIdpSsoUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlProviderType - Variable in class com.cloudforgeci.api.core.SystemContext
 
samlSiteUrl - Variable in class com.cloudforgeci.api.core.SystemContext
 
scale(AutoScalingGroup) - Method in class com.cloudforgeci.api.scaling.ScalingFactory
 
scale(FargateService) - Method in class com.cloudforgeci.api.scaling.ScalingFactory
 
ScalingFactory - Class in com.cloudforgeci.api.scaling
 
ScalingFactory(Construct, String) - Constructor for class com.cloudforgeci.api.scaling.ScalingFactory
 
scalingPoliciesApplied - Variable in class com.cloudforgeci.api.core.SystemContext
 
SECRETS_MANAGER - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
SECRETS_ROTATION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
security - Variable in class com.cloudforgeci.api.core.SystemContext
 
SECURITY_HUB - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
SECURITY_MONITORING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
SecurityConfiguration - Interface in com.cloudforgeci.api.interfaces
 
SecurityExample - Class in com.cloudforgeci.api.examples
Example demonstrating how to use the Security Rules system with different security profiles.
SecurityExample() - Constructor for class com.cloudforgeci.api.examples.SecurityExample
 
Security Features - Search tag in class com.cloudforgeci.api.database.RdsFactory
Section
SECURITYHUB_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
securityHubEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable AWS Security Hub for centralized security findings
securityHubEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
Security Monitoring - Search tag in package com.cloudforgeci.api.observability
Section
securityMonitoringEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable security monitoring
securityMonitoringEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
SecurityMonitoringFactory - Class in com.cloudforgeci.api.observability
Factory for creating security monitoring and alerting configurations.
SecurityMonitoringFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.SecurityMonitoringFactory
 
securityProfile - Variable in class com.cloudforge.core.config.DeploymentConfig
Security profile (DEV, STAGING, PRODUCTION)
securityProfile() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns the security profile as a string.
securityProfile() - Method in class com.cloudforgeci.api.core.DeploymentContext
Gets the security profile enum.
securityProfile() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
SecurityProfile - Enum Class in com.cloudforge.core.enums
Defines the security profile levels for CloudForge deployments.
securityProfileConfig - Variable in class com.cloudforgeci.api.core.SystemContext
 
SecurityProfileConfiguration - Interface in com.cloudforgeci.api.interfaces
Configuration interface for security profile settings.
SecurityProfileConfiguration - Annotation Interface in com.cloudforge.core.annotation
Annotation to extract specific values from SecurityProfileConfiguration.
SecurityProfileExample - Class in com.cloudforgeci.api.examples
Example demonstrating how to access SecurityProfileConfiguration from SystemContext.
SecurityProfileExample(Construct, String) - Constructor for class com.cloudforgeci.api.examples.SecurityProfileExample
 
SecurityProfileFactory - Class in com.cloudforgeci.api.core.security
Factory for creating security profile-based observability configurations.
SecurityProfileFactory(Construct, String) - Constructor for class com.cloudforgeci.api.core.security.SecurityProfileFactory
 
Security Profile Hierarchy - Search tag in enum class com.cloudforge.core.enums.SecurityProfile
Section
SecurityRules - Class in com.cloudforgeci.api.core.rules
Security rules installation and compliance framework orchestration.
SecurityRules() - Constructor for class com.cloudforgeci.api.core.rules.SecurityRules
 
sensitive() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Whether this field contains sensitive data (passwords, secrets, API keys).
sensitive() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the sensitive record component.
SENSITIVE_DATA_DISCOVERY - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
Sensitive Field - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
serialize(List<ComplianceFrameworkType>, JsonGenerator, SerializerProvider) - Method in class com.cloudforge.core.config.ComplianceFrameworkListConverter.Serializer
 
Serializer() - Constructor for class com.cloudforge.core.config.ComplianceFrameworkListConverter.Serializer
 
service() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns the value of the service record component.
set(T) - Method in class com.cloudforgeci.api.core.Slot
 
set(T) - Method in interface com.cloudforgeci.api.interfaces.BaseSlot
 
setValue(Object, Object) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Sets the value of this field in the config object.
SharedResourceRegistry - Class in com.cloudforgeci.api.observability
Registry for shared/account-level resources that should be reused across stacks.
SharedResourceRegistry(Construct, String, String) - Constructor for class com.cloudforgeci.api.observability.SharedResourceRegistry
 
shouldWarnForControl(String, ComplianceMode, ComplianceMatrix.SecurityControl, boolean) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Check if warnings should be logged for a disabled control.
Simple Capability Check - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
singleInstance() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns the value of the singleInstance record component.
Slot<T> - Class in com.cloudforgeci.api.core
 
Slot() - Constructor for class com.cloudforgeci.api.core.Slot
 
Slot Auto-Extraction - Search tag in class com.cloudforgeci.api.core.annotation.ContextInjector
Section
SNS_KMS_ENCRYPTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
SOC2 - Enum constant in enum class com.cloudforge.core.enums.ComplianceFrameworkType
 
Soc2Rules - Class in com.cloudforgeci.api.core.rules
SOC 2 (Service Organization Control 2) Trust Services Criteria compliance validation.
Soc2Rules() - Constructor for class com.cloudforgeci.api.core.rules.Soc2Rules
 
sourceConfig() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Configuration for sensitive field source strategy.
sourceConfig() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the sourceConfig record component.
ssl() - Method in record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Returns the value of the ssl record component.
sslEnabled - Variable in class com.cloudforgeci.api.core.SystemContext
 
ssoGroupId - Variable in class com.cloudforge.core.config.DeploymentConfig
SSO Group ID
ssoGroupId - Variable in class com.cloudforgeci.api.core.SystemContext
 
ssoGroupId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ssoInstanceArn - Variable in class com.cloudforge.core.config.DeploymentConfig
IAM Identity Center (SSO) Instance ARN
ssoInstanceArn - Variable in class com.cloudforgeci.api.core.SystemContext
 
ssoInstanceArn() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
ssoTargetAccountId - Variable in class com.cloudforge.core.config.DeploymentConfig
SSO Target Account ID
ssoTargetAccountId - Variable in class com.cloudforgeci.api.core.SystemContext
 
ssoTargetAccountId() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
stackName - Variable in class com.cloudforge.core.config.DeploymentConfig
CloudFormation stack name
stackName - Variable in class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 
stackName - Variable in class com.cloudforgeci.api.core.SystemContext
 
stackName() - Method in interface com.cloudforge.core.interfaces.Ec2Context
Returns the CloudFormation stack name.
stackName() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
stackName() - Method in class com.cloudforgeci.api.core.Ec2ContextImpl
 
stackProps - Variable in class com.cloudforgeci.api.api.JenkinsConfig
Deprecated.
 
STAGING - Enum constant in enum class com.cloudforge.core.enums.SecurityProfile
 
StagingSecurityConfiguration - Class in com.cloudforgeci.api.core.security
Staging security configuration with moderate security settings.
StagingSecurityConfiguration() - Constructor for class com.cloudforgeci.api.core.security.StagingSecurityConfiguration
 
StagingSecurityProfileConfiguration - Class in com.cloudforgeci.api.core.security
Staging security profile configuration for pre-production environments.
StagingSecurityProfileConfiguration() - Constructor for class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
Create StagingSecurityProfileConfiguration with no deployment context.
StagingSecurityProfileConfiguration(DeploymentContext) - Constructor for class com.cloudforgeci.api.core.security.StagingSecurityProfileConfiguration
Create StagingSecurityProfileConfiguration.
Staging - Test Compliance Configuration - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
STANDARD - Enum constant in enum class com.cloudforge.core.enums.IAMProfile
STANDARD: Balanced permissions for normal operation.
StandardIAMConfiguration - Class in com.cloudforgeci.api.core.iam
Standard IAM configuration with balanced permissions.
StandardIAMConfiguration() - Constructor for class com.cloudforgeci.api.core.iam.StandardIAMConfiguration
 
start(Construct, TopologyType, RuntimeType, SecurityProfile, IAMProfile, DeploymentContext) - Static method in class com.cloudforgeci.api.core.SystemContext
Start once at the entry point; installs runtime + topology + security + iam rules and wiring.
storeParameter(String, String, String) - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Store a shared resource ID in SSM Parameter Store for future reuse.
subdomain - Variable in class com.cloudforge.core.config.DeploymentConfig
Subdomain prefix (e.g., "ci", "gitlab")
subdomain - Variable in class com.cloudforgeci.api.core.SystemContext
 
subdomain() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
SupersetApplicationSpec - Class in com.cloudforgeci.api.application.analytics
Apache Superset Business Intelligence ApplicationSpec implementation.
SupersetApplicationSpec() - Constructor for class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
Supported Applications: - Search tag in class com.cloudforgeci.api.security.ApplicationOidcFactory
Section
Supported Capabilities - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
Supported Compliance Tools - Search tag in class com.cloudforgeci.api.observability.ComplianceFactory
Section
Supported Engines - Search tag in class com.cloudforgeci.api.database.RdsFactory
Section
SUPPORTS_DATABASE - Static variable in class com.cloudforge.core.annotation.VisibilityCondition.Examples
 
supportsAlbOidc() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application supports ALB-level OIDC authentication.
supportsApplicationOidc() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application supports application-level OIDC.
supportsCognito() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application supports Cognito as an identity provider.
supportsCognito() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
supportsCognito() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
supportsDatabase() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Whether this application supports optional external database (RDS).
supportsEc2 - Variable in class com.cloudforge.core.config.ApplicationInfo
Supports EC2 deployment
supportsEc2() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Whether this application supports AWS EC2 deployment.
supportsEc2() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Check if this application supports EC2 deployment.
supportsFargate - Variable in class com.cloudforge.core.config.ApplicationInfo
Supports Fargate deployment
supportsFargate() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Whether this application supports AWS Fargate deployment.
supportsFargate() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Check if this application supports Fargate deployment.
supportsIdentityCenterSaml() - Method in interface com.cloudforge.core.interfaces.OidcIntegration
Returns whether this application supports IAM Identity Center SAML.
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.GitLabOidcIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.GrafanaOidcIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.JenkinsOidcIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.MattermostGitLabOidcIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.MattermostOidcIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.MattermostSamlIntegration
 
supportsIdentityCenterSaml() - Method in class com.cloudforge.core.oidc.MetabaseSamlIntegration
 
supportsOidc - Variable in class com.cloudforge.core.config.ApplicationInfo
Supports OIDC integration
supportsOidc() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Whether this application supports OIDC authentication integration.
supportsOidc() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Check if this load balancer type supports OIDC authentication.
supportsOidcIntegration() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns whether this application supports OIDC integration.
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
supportsOidcIntegration() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
supportsPathRouting() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Check if this load balancer type supports path-based routing.
supportsWaf() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Check if this load balancer type supports WAF integration.
SystemContext - Class in com.cloudforgeci.api.core
 
SystemContext - Annotation Interface in com.cloudforge.core.annotation
Annotation to extract specific values from SystemContext.
SystemContext.DomainAndSslFactories - Record Class in com.cloudforgeci.api.core
Container for domain and SSL factories.
SystemContext.InfrastructureFactories - Record Class in com.cloudforgeci.api.core
Container for infrastructure factories created by the orchestration layer.
SystemContext.JenkinsDeployment - Record Class in com.cloudforgeci.api.core
Container for complete Jenkins deployment.
SystemContext.JenkinsSpecificFactories - Record Class in com.cloudforgeci.api.core
Container for Jenkins-specific factories.
SystemContext.S3CloudFrontDeployment - Record Class in com.cloudforgeci.api.core
Container for complete S3 + CloudFront deployment.
SystemContext.S3CloudFrontFactories - Record Class in com.cloudforgeci.api.core
Container for S3 and CloudFront factories.

T

tagList() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Gets all tags as a list.
tags() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Impact and characteristic tags for change analysis.
tags() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the tags record component.
tags() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
tagStack(Stack) - Method in class com.cloudforgeci.api.core.DeploymentContext
Tag a stack so you can see the config in the console.
THREAT_DETECTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
Threat Detection - Search tag in package com.cloudforgeci.api.observability
Section
ThreatProtectionRules - Class in com.cloudforgeci.api.core.rules
Threat protection compliance validation rules.
ThreatProtectionRules() - Constructor for class com.cloudforgeci.api.core.rules.ThreatProtectionRules
 
Threshold Examples - Search tag in class com.cloudforgeci.api.observability.AlarmFactory
Section
tier() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
toCommaSeparated(List<ComplianceFrameworkType>) - Static method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Converts a list of frameworks to a comma-separated string.
toContextMap() - Method in class com.cloudforge.core.config.DeploymentConfig
Convert this DeploymentConfig to a Map for CDK context.
toContextMap() - Method in class com.cloudforgeci.api.core.DeploymentContext
Export all deployment context fields to a Map for serialization.
toErrorString() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Convert to legacy string error format for CDK validation.
toFile(String) - Method in class com.cloudforge.core.config.DeploymentConfig
Save this DeploymentConfig to a JSON file path string.
toFile(Path) - Method in class com.cloudforge.core.config.DeploymentConfig
Save this DeploymentConfig to a JSON file.
toJson() - Method in class com.cloudforge.core.config.DeploymentConfig
Serialize this DeploymentConfig to a JSON string.
toLowerCase(String) - Static method in class com.cloudforgeci.api.util.CfnStringUtils
Convert a CloudFormation token to lowercase using Fn::Join/Fn::Split.
topology - Variable in class com.cloudforge.core.config.DeploymentConfig
Topology type (APPLICATION_SERVICE, etc.)
topology - Variable in class com.cloudforgeci.api.core.SystemContext
 
topology() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
TopologyConfiguration - Interface in com.cloudforgeci.api.interfaces
 
topologyRaw() - Method in class com.cloudforgeci.api.core.DeploymentContext
Deprecated.
TopologyRules - Class in com.cloudforgeci.api.core.rules
 
TopologyRules() - Constructor for class com.cloudforgeci.api.core.rules.TopologyRules
 
TopologyType - Enum Class in com.cloudforge.core.enums
Defines the deployment topology patterns supported by CloudForge.
toString() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns a string representation of this record class.
toString() - Method in class com.cloudforge.core.config.ValidationResult
 
toString() - Method in enum class com.cloudforge.core.enums.AuthMode
Returns the string representation.
toString() - Method in enum class com.cloudforge.core.enums.LoadBalancerType
Returns the string representation.
toString() - Method in enum class com.cloudforge.core.enums.NetworkMode
Returns the string representation (same as getValue for consistency).
toString() - Method in enum class com.cloudforge.core.enums.SecurityProfile
 
toString() - Method in enum class com.cloudforge.core.enums.TopologyType
 
toString() - Method in record class com.cloudforge.core.interfaces.ApplicationSpec.OptionalPort
Returns a string representation of this record class.
toString() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns a string representation of this record class.
toString() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns a string representation of this record class.
toString() - Method in class com.cloudforge.core.oidc.CognitoOidcConfiguration
 
toString() - Method in class com.cloudforge.core.oidc.IdentityCenterOidcConfiguration
 
toString() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
toString() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
toString() - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Returns a string representation of this record class.
toString() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
toString() - Method in record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl.FrameworkControl
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.rules.AuditManagerControl
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.rules.ComplianceMatrix.FrameworkRequirement
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.rules.ComplianceRule
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.DomainAndSslFactories
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsDeployment
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.JenkinsSpecificFactories
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontDeployment
Returns a string representation of this record class.
toString() - Method in record class com.cloudforgeci.api.core.SystemContext.S3CloudFrontFactories
Returns a string representation of this record class.
tryReadParameter(String) - Method in class com.cloudforgeci.api.observability.SharedResourceRegistry
Try to read a shared resource ID from SSM Parameter Store.
type() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the type record component.
type() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the type record component.
Types - Search tag in enum class com.cloudforge.core.enums.LoadBalancerType
Section

U

unhealthyThreshold - Variable in class com.cloudforge.core.config.DeploymentConfig
 
unhealthyThreshold() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
US - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
US_EAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
US_EAST_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
US_GOV - Enum constant in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
 
US_GOV_EAST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
US_GOV_WEST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
US_WEST_1 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
US_WEST_2 - Enum constant in enum class com.cloudforge.core.enums.AwsRegion
 
Usage - Search tag in class com.cloudforge.core.config.ConfigurationIntrospector
Section
Usage - Search tag in class com.cloudforge.core.config.InteractivePrompter
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.AdvancedMonitoringRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.DatabaseSecurityRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.GdprOrganizationalRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.HipaaOrganizationalRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.IncidentResponseRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.KeyManagementRules
Section
Usage - Search tag in class com.cloudforgeci.api.core.rules.ThreatProtectionRules
Section
Usage - Search tag in class com.cloudforgeci.api.observability.AlarmFactory
Section
Usage: - Search tag in class com.cloudforge.core.config.CapacityValidator
Section
Usage: - Search tag in class com.cloudforge.core.config.FargateCpuMemoryValidator
Section
Usage: - Search tag in class com.cloudforgeci.api.core.rules.Iso27001Rules
Section
Usage Example - Search tag in class com.cloudforgeci.api.database.RdsFactory
Section
Usage Example: - Search tag in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Section
Usage Example: - Search tag in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Section
Usage Example: - Search tag in class com.cloudforgeci.api.compute.ApplicationLoader
Section
Usage Example: - Search tag in class com.cloudforgeci.api.core.rules.CdkNagControlMapper
Section
Usage Examples - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
Usage Examples - Search tag in annotation interface com.cloudforge.core.annotation.FieldEquals
Section
Usage Examples - Search tag in class com.cloudforge.core.annotation.VisibilityCondition
Section
Usage in Annotations: - Search tag in interface com.cloudforge.core.config.FieldValidator
Section
Usage in ComplianceFactory - Search tag in class com.cloudforgeci.api.core.rules.AuditManagerControlRegistry
Section
Usage in Configuration Introspection - Search tag in enum class com.cloudforge.core.annotation.FieldTag
Section
Use Cases - Search tag in enum class com.cloudforge.core.enums.ComplianceMode
Section
usePkce() - Method in interface com.cloudforge.core.interfaces.OidcConfiguration
Returns whether to use PKCE (Proof Key for Code Exchange).
UserDataBuilder - Interface in com.cloudforge.core.interfaces
Builder interface for constructing EC2 UserData scripts.
UserDataBuilderImpl - Class in com.cloudforgeci.api.core
Implementation of UserDataBuilder that generates bash commands for EC2 UserData scripts.
UserDataBuilderImpl(UserData) - Constructor for class com.cloudforgeci.api.core.UserDataBuilderImpl
 
username() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the username record component.
usesOidc() - Method in enum class com.cloudforge.core.enums.AuthMode
Check if this mode uses OIDC authentication.

V

validate(ConfigFieldInfo, Object, Object) - Method in class com.cloudforge.core.config.CapacityValidator
 
validate(ConfigFieldInfo, Object, Object) - Method in class com.cloudforge.core.config.FargateCpuMemoryValidator
 
validate(ConfigFieldInfo, Object, Object) - Method in interface com.cloudforge.core.config.FieldValidator
Validates a field value in the context of the complete configuration.
validate(Object, Object) - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Validates the value according to field constraints and custom validators.
validateControl(ComplianceMatrix.SecurityControl, String, boolean, ComplianceMode) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Validates a control against framework requirements with complianceMode consideration.
validateControlMultiFramework(ComplianceMatrix.SecurityControl, String, boolean, ComplianceMode) - Static method in class com.cloudforgeci.api.core.rules.ComplianceMatrix
Validates multiple frameworks against a control.
validatePermissions(TopologyType, RuntimeType, IAMProfile, List<String>) - Static method in class com.cloudforgeci.api.core.iam.PermissionMatrix
Validates that the provided permissions are appropriate for the given combination.
Validation Logic: - Search tag in class com.cloudforge.core.config.CapacityValidator
Section
ValidationResult - Class in com.cloudforge.core.config
Result of field validation.
ValidationResult(boolean, List<String>) - Constructor for record class com.cloudforgeci.api.core.iam.PermissionMatrix.ValidationResult
Creates an instance of a ValidationResult record class.
Validator() - Constructor for class com.cloudforge.core.utilities.Arn.Validator
 
Validator() - Constructor for class com.cloudforge.core.utilities.DeploymentValidation.Validator
 
Validator() - Constructor for class com.cloudforge.core.utilities.DnsLabel.Validator
 
Validator() - Constructor for class com.cloudforge.core.utilities.DnsName.Validator
 
Validator() - Constructor for class com.cloudforge.core.utilities.OneOf.Validator
 
validators() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Custom validators for cross-field validation.
validators() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the validators record component.
Valid Combinations: - Search tag in class com.cloudforge.core.config.FargateCpuMemoryValidator
Section
value() - Element in annotation interface com.cloudforge.core.annotation.ApplicationPlugin
Application identifier used in deployment configuration.
value() - Element in annotation interface com.cloudforge.core.annotation.ComplianceFramework
Framework identifier matching the value in complianceFrameworks configuration.
value() - Element in annotation interface com.cloudforge.core.annotation.DeploymentContext
The property name to extract from DeploymentContext.
value() - Element in annotation interface com.cloudforge.core.annotation.FieldEquals
Expected value as string (converted to field type at runtime).
value() - Element in annotation interface com.cloudforge.core.annotation.SecurityProfileConfiguration
The property name to extract from SecurityProfileConfiguration.
value() - Element in annotation interface com.cloudforge.core.annotation.SystemContext
The property name to extract from SystemContext.
value() - Element in annotation interface com.cloudforge.core.utilities.OneOf
 
valueOf(String) - Static method in enum class com.cloudforge.core.annotation.FieldTag
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.AuthMode
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.AwsRegion
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.ComplianceMode
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.IAMProfile
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.LoadBalancerType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.NetworkMode
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.RuntimeType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.SecurityProfile
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.enums.TopologyType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement.RequirementType
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.RequirementLevel
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.ValidationResult
Returns the enum constant of this class with the specified name.
values() - Static method in enum class com.cloudforge.core.annotation.FieldTag
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.AuthMode
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.AwsRegion.GeoArea
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.AwsRegion
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.ComplianceFrameworkType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.ComplianceMode
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.IAMProfile
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.LoadBalancerType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.NetworkMode
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.RuntimeType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.SecurityProfile
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.enums.TopologyType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement.RequirementType
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.RequirementLevel
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.ValidationResult
Returns an array containing the constants of this enum class, in the order they are declared.
VaultApplicationSpec - Class in com.cloudforgeci.api.application.secrets
HashiCorp Vault ApplicationSpec implementation.
VaultApplicationSpec() - Constructor for class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
version() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseConnection
Returns the value of the version record component.
version() - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
Returns the value of the version record component.
Version History: - Search tag in class com.cloudforgeci.api.core.rules.SecurityRules
Section
VisibilityCondition - Class in com.cloudforge.core.annotation
Visibility condition expression language for configuration fields.
VisibilityCondition.Examples - Class in com.cloudforge.core.annotation
Example expressions for testing and documentation.
Visibility Condition Language - Search tag in annotation interface com.cloudforge.core.annotation.ConfigField
Section
VisibilityExpressionEvaluator - Class in com.cloudforge.core.config
Evaluates visibility expressions for configuration fields.
VisibilityExpressionEvaluator(ApplicationSpec, Object, String) - Constructor for class com.cloudforge.core.config.VisibilityExpressionEvaluator
Creates a new evaluator.
visibleWhen() - Element in annotation interface com.cloudforge.core.annotation.ConfigField
Visibility condition expression determining when this field should be shown.
visibleWhen() - Method in record class com.cloudforge.core.config.ConfigFieldInfo
Returns the value of the visibleWhen record component.
volumeName() - Method in interface com.cloudforge.core.interfaces.ApplicationSpec
Returns the volume name for this application.
volumeName() - Method in class com.cloudforgeci.api.application.analytics.MetabaseApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.analytics.SupersetApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.artifactregistry.HarborApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.cicd.DroneApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.cicd.GitLabApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.collaboration.MattermostApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.collaboration.MattermostTeamApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.database.PostgreSQLApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.database.RedisApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.JenkinsApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.monitoring.GrafanaApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.monitoring.PrometheusApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.secrets.VaultApplicationSpec
 
volumeName() - Method in class com.cloudforgeci.api.application.vcs.GiteaApplicationSpec
 
vpc - Variable in class com.cloudforgeci.api.core.SystemContext
 
vpc() - Method in record class com.cloudforgeci.api.compute.ApplicationFactory.ApplicationSystem
Returns the value of the vpc record component.
vpc() - Method in record class com.cloudforgeci.api.core.SystemContext.InfrastructureFactories
Returns the value of the vpc record component.
VPC_DEFAULT_SG_CLOSED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
VPC_FLOW_LOGS_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
VpcFactory - Class in com.cloudforgeci.api.network
Factory for creating VPC (Virtual Private Cloud) infrastructure.
VpcFactory(Construct, String) - Constructor for class com.cloudforgeci.api.network.VpcFactory
 
VULNERABILITY_MANAGEMENT - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
VULNERABILITY_SCANNING - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 

W

WAF_PROTECTION - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.SecurityControl
 
wafEnabled - Variable in class com.cloudforge.core.config.DeploymentConfig
Enable AWS WAF
wafEnabled - Variable in class com.cloudforgeci.api.core.SystemContext
 
wafEnabled() - Method in class com.cloudforgeci.api.core.DeploymentContext
 
WafFactory - Class in com.cloudforgeci.api.observability
Factory for creating AWS WAF WebACL resources.
WafFactory(Construct, String) - Constructor for class com.cloudforgeci.api.observability.WafFactory
 
WAFV2_LOGGING_ENABLED - Enum constant in enum class com.cloudforgeci.api.core.rules.AwsConfigRule
 
wafWebAcl - Variable in class com.cloudforgeci.api.core.SystemContext
 
WARN - Enum constant in enum class com.cloudforgeci.api.core.rules.ComplianceMatrix.ValidationResult
 
Web Application Firewall (WAF) - Search tag in package com.cloudforgeci.api.observability
Section
websiteBucket - Variable in class com.cloudforgeci.api.core.SystemContext
 
What's Included - Search tag in package com.cloudforgeci.api.observability
Section
when(boolean, Rule) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
whenAll(Slot<A>, Slot<B>, Slot<C>, RuleKit.TriConsumer<A, B, C>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
whenAll4(Slot<A>, Slot<B>, Slot<C>, Slot<D>, RuleKit.QuadConsumer<A, B, C, D>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
whenAll5(Slot<A>, Slot<B>, Slot<C>, Slot<D>, Slot<E>, RuleKit.PentaConsumer<A, B, C, D, E>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
whenBoth(Slot<A>, Slot<B>, BiConsumer<A, B>) - Static method in class com.cloudforgeci.api.core.rules.RuleKit
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.iam.ExtendedIAMConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.iam.MinimalIAMConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.iam.StandardIAMConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.runtime.Ec2RuntimeConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.runtime.FargateRuntimeConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.security.DevSecurityConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.security.ProductionSecurityConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.security.StagingSecurityConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.topology.ApplicationServiceTopologyConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.topology.JenkinsServiceTopologyConfiguration
 
wire(SystemContext) - Method in class com.cloudforgeci.api.core.topology.S3WebsiteTopologyConfiguration
 
wire(SystemContext) - Method in interface com.cloudforgeci.api.interfaces.BaseConfiguration
 
wired - Variable in class com.cloudforgeci.api.core.SystemContext
 
withDatabaseName(String) - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 
withInstanceClass(String) - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 
withStorage(int) - Method in record class com.cloudforge.core.interfaces.DatabaseSpec.DatabaseRequirement
 

Z

zone - Variable in class com.cloudforgeci.api.core.SystemContext
 
A B C D E F G H I J K L M N O P R S T U V W Z 
All Classes and Interfaces|All Packages|Constant Field Values