feat(access): ensure non-empty arrays

type NonEmptyArray<T> = [T, ...T[]] https://www.typescriptlang.org/play?#code/C4TwDgpgBAcg9gOwKIFsygIICcsEMRQC8UA2gM7BYCWCA5gDRQB0LF1dJAupwFA8DGiClFoRgAGQh1gACyJQAFLhz4AXLESp0IbHhABKIgD4oyvUwA2U2rL6iJ12Qq76A3FAD0HqAGU4AVyx+aBlcMigABigIKxQpYAUyQwAjf2AoYGV7KCwIAEd-KlzwgEYmRQAmAGYAFgBWfR57SWkZZwByRAh2zjcmsRabNpJOhG7GduAAdzgevqA
guardian · Jan 8, 2024 · 5c92098 · 5c92098
1 parent 6146dfc
commit 5c92098
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.changeset/cuddly-carrots-lay.md b/.changeset/cuddly-carrots-lay.md
@@ -0,0 +1,5 @@
+---
+"@guardian/cdk": major
+---
+
+Users must now provide at least one valid CIDR range when using the restricted and internal access scopes
diff --git a/src/types/access.ts b/src/types/access.ts
@@ -34,7 +34,7 @@ export interface PublicAccess extends Access {
  */
 export interface RestrictedAccess extends Access {
   scope: AccessScope.RESTRICTED;
-  cidrRanges: IPeer[];
+  cidrRanges: [IPeer, ...IPeer[]];
 }
 
 /**
@@ -53,7 +53,7 @@ export interface RestrictedAccess extends Access {
  */
 export interface InternalAccess extends Access {
   scope: AccessScope.INTERNAL;
-  cidrRanges: IPeer[];
+  cidrRanges: [IPeer, ...IPeer[]];
 }
 
 export type AppAccess = PublicAccess | RestrictedAccess | InternalAccess;