Add Privacy Review

1-StackSet-Shared.yml

@@ -16,6 +16,9 @@ Parameters:
 
   LockdownDomain:
     Type: String
+
+  PrivacyReviewDomain:
+    Type: String
 
 Mappings: 
 
@@ -228,6 +231,20 @@ Resources:
       Name: !Join [ '/', [ "", !Ref Environment, "TEST", "COMMON", "LD_DOMAIN" ] ]
       Type: String
       Value: !Ref LockdownDomain
+
+  PrivacyReviewDomainParameter:
+    Type: AWS::SSM::Parameter
+    Properties:
+      Name: !Join [ '/', [ "", !Ref Environment, "COMMON", "PR_DOMAIN" ] ]
+      Type: String
+      Value: !Ref PrivacyReviewDomain
+
+  PrivacyReviewDomainTestParameter:
+    Type: AWS::SSM::Parameter
+    Properties:
+      Name: !Join [ '/', [ "", !Ref Environment, "TEST", "COMMON", "PR_DOMAIN" ] ]
+      Type: String
+      Value: !Ref PrivacyReviewDomain
 
   # ==================================================
   # ============ CODEPIPELINE ROLES ==================
@@ -927,6 +944,10 @@ Outputs:
     Value: !Ref LockdownDomain
     Export:
       Name: !Join [ '-', [ !Ref Environment, LD-Domain ] ]
+  PrivacyReviewDomain:
+    Value: !Ref PrivacyReviewDomain
+    Export:
+      Name: !Join [ '-', [ !Ref Environment, PR-Domain ] ]
   ParameterStoreFunctionArn:
     Value: !GetAtt ParameterStoreFunction.Arn
     Export:

2-Base-Shared.yml

@@ -237,6 +237,28 @@ Resources:
         - Key: Environment
           Value: !Ref Environment
 
+  PRDomainCertificate:
+    Type: AWS::CertificateManager::Certificate
+    Properties:
+      DomainName: !Sub
+                    - "*.${PRDomain}"
+                    - PRDomain: 
+                        Fn::ImportValue: !Sub ${Environment}-PR-Domain
+      DomainValidationOptions:
+        - DomainName: !Sub
+                    - "*.${PRDomain}"
+                    - PRDomain: 
+                        Fn::ImportValue: !Sub ${Environment}-PR-Domain
+          ValidationDomain:
+            Fn::ImportValue: !Sub ${Environment}-PR-Domain
+      SubjectAlternativeNames:
+        - Fn::ImportValue: !Sub ${Environment}-PR-Domain
+      Tags:
+        - Key: Name
+          Value: PRDomainCertificate
+        - Key: Environment
+          Value: !Ref Environment
+
   # Write Admin Postgres queries to this Log Group/Stream
 
   AdminAuditLogGroup:
@@ -309,6 +331,11 @@ Resources:
     Properties:
       RepositoryName: !Sub ${Environment}-LD-Main
 
+  PrMainCodeCommit:
+    Type: AWS::CodeCommit::Repository
+    Properties:
+      RepositoryName: !Sub ${Environment}-PR-Main
+
   # ==================================================
   # ================ S3 BUCKETS ======================
   # ==================================================
@@ -3009,6 +3036,10 @@ Outputs:
     Value: !Ref LDDomainCertificate
     Export:
       Name: !Join [ '-', [ !Ref Environment, LD-DomainCertificate ] ]
+  PRDomainCertificate:
+    Value: !Ref PRDomainCertificate
+    Export:
+      Name: !Join [ '-', [ !Ref Environment, PR-DomainCertificate ] ]
   ClientBucket:
     Value: !Ref ClientBucket
     Export: