@actsecurity/iam-collect 0.1.215

package/dist/cjs/syncs/kms/key.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeySync = void 0;
+const client_kms_1 = require("@aws-sdk/client-kms");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.KeySync = (0, typedSync_js_1.createTypedSyncOperation)('kms', 'keys', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_kms_1.KMSClient,
+    command: client_kms_1.ListKeysCommand,
+    key: 'Keys',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'kms',
+        resourceType: 'key',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        tags: async (client, key) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const tagResult = await client.send(new client_kms_1.ListResourceTagsCommand({ KeyId: key.KeyId }));
+                return tagResult.Tags;
+            });
+        },
+        policy: async (client, key) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const policyResult = await client.send(new client_kms_1.GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
+                if (policyResult.Policy) {
+                    return JSON.parse(policyResult.Policy);
+                }
+                return undefined;
+            });
+        }
+    },
+    tags: (func) => func.extraFields.tags,
+    arn: (func) => func.KeyArn,
+    results: (func) => ({
+        metadata: {
+            id: func.KeyId
+        },
+        policy: func.extraFields.policy
+    })
+}));
+//# sourceMappingURL=key.js.map

package/dist/cjs/syncs/kms/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAC5B,iEAA4D;AAC5D,kDAAkF;AAErE,QAAA,OAAO,GAAG,IAAA,uCAAwB,EAC7C,KAAK,EACL,MAAM,EACN,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,4BAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,oCAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,gCAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;gBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/lambda/lambda.d.ts

@@ -0,0 +1,4 @@
+import { type Sync } from '../sync.js';
+export declare const LambdaSync: Sync;
+export declare const LambdaLayerVersionsSync: Sync;
+//# sourceMappingURL=lambda.d.ts.map

package/dist/cjs/syncs/lambda/lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../../src/syncs/lambda/lambda.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AA4CjE,eAAO,MAAM,UAAU,EAAE,IAuDxB,CAAA;AAmDD,eAAO,MAAM,uBAAuB,EAAE,IAoErC,CAAA"}

package/dist/cjs/syncs/lambda/lambda.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LambdaLayerVersionsSync = exports.LambdaSync = void 0;
+const client_lambda_1 = require("@aws-sdk/client-lambda");
+const log_1 = require("@cloud-copilot/log");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const json_js_1 = require("../../utils/json.js");
+const tags_js_1 = require("../../utils/tags.js");
+const sync_js_1 = require("../sync.js");
+const typedSync_js_1 = require("../typedSync.js");
+const lambdaFunctionSync = (0, typedSync_js_1.createResourceSyncType)({
+    client: client_lambda_1.LambdaClient,
+    command: client_lambda_1.ListFunctionsCommand,
+    key: 'Functions',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'lambda',
+        resourceType: 'function',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        tags: async (client, resource) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const tagResult = await client.send(new client_lambda_1.ListTagsCommand({ Resource: resource.FunctionArn }));
+                return tagResult.Tags;
+            });
+        },
+        policy: async (client, resource) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const policyResult = await client.send(new client_lambda_1.GetPolicyCommand({ FunctionName: resource.FunctionName }));
+                return (0, json_js_1.parseIfPresent)(policyResult.Policy);
+            });
+        }
+    },
+    tags: (func) => func.extraFields.tags,
+    arn: (func) => func.FunctionArn,
+    results: (func) => ({
+        metadata: {
+            role: func.Role,
+            name: func.FunctionName
+        },
+        policy: func.extraFields.policy
+    })
+});
+exports.LambdaSync = {
+    awsService: 'lambda',
+    name: 'lambdaFunctions',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const functions = await (0, typedSync_js_1.paginateResourceConfig)(lambdaFunctionSync, credentials, region, endpoint, syncOptions.workerPool, 'lambda', 'lambdaFunctions', syncOptions.clientPool);
+        const records = functions.map((func) => {
+            const result = lambdaFunctionSync.results(func);
+            result.arn = lambdaFunctionSync.arn(func, region, credentials.accountId, credentials.partition);
+            result.metadata.arn = result.arn;
+            result.tags = (0, tags_js_1.convertTagsToRecord)(lambdaFunctionSync.tags(func));
+            return result;
+        });
+        const lambdaClient = syncOptions.clientPool.client(client_lambda_1.LambdaClient, credentials, region, endpoint);
+        const aliasJobs = functions.map((func) => ({
+            properties: { function: func },
+            execute: async () => collectAliasRecords(lambdaClient, func)
+        }));
+        const aliasResults = await Promise.all(syncOptions.workerPool.enqueueAll(aliasJobs));
+        for (const result of aliasResults) {
+            if (result.status === 'rejected') {
+                const func = result.properties.function;
+                log_1.log.error('Failed to collect Lambda function aliases', result.reason, {
+                    functionArn: func.FunctionArn
+                });
+                throw new Error(`Failed to collect aliases for Lambda function ${func.FunctionArn}`);
+            }
+            records.push(...result.value);
+        }
+        await (0, sync_js_1.syncData)(records, storage, accountId, lambdaFunctionSync.resourceTypeParts(credentials.accountId, region), syncOptions.writeOnly);
+    }
+};
+async function collectAliasRecords(lambdaClient, func) {
+    const aliases = await (0, client_tools_js_1.withDnsRetry)(() => (0, typedSync_js_1.paginateResource)(lambdaClient, client_lambda_1.ListAliasesCommand, 'Aliases', {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    }, { FunctionName: func.FunctionName }));
+    const records = [];
+    for (const alias of aliases) {
+        const policy = await (0, client_tools_js_1.withDnsRetry)(() => (0, client_tools_js_1.runAndCatchAccessDeniedWithLog)(alias.AliasArn, 'lambda', 'lambdaFunctions', 'policy', () => (0, client_tools_js_1.runAndCatch404)(async () => {
+            const policyResult = await lambdaClient.send(new client_lambda_1.GetPolicyCommand({
+                FunctionName: func.FunctionName,
+                Qualifier: alias.Name
+            }));
+            return (0, json_js_1.parseIfPresent)(policyResult.Policy);
+        })));
+        records.push({
+            arn: alias.AliasArn,
+            metadata: {
+                arn: alias.AliasArn,
+                role: func.Role,
+                name: func.FunctionName,
+                isAlias: 'true',
+                alias: alias.Name,
+                version: alias.FunctionVersion
+            },
+            policy
+        });
+    }
+    return records;
+}
+exports.LambdaLayerVersionsSync = {
+    awsService: 'lambda',
+    name: 'lambdaLayerVersions',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const lambdaClient = syncOptions.clientPool.client(client_lambda_1.LambdaClient, credentials, region, endpoint);
+        const allLayers = await (0, typedSync_js_1.paginateResource)(lambdaClient, client_lambda_1.ListLayersCommand, 'Layers', {
+            inputKey: 'Marker',
+            outputKey: 'NextMarker'
+        });
+        const allLayerVersions = [];
+        for (const layer of allLayers) {
+            const layerVersions = await (0, typedSync_js_1.paginateResource)(lambdaClient, client_lambda_1.ListLayerVersionsCommand, 'LayerVersions', {
+                inputKey: 'Marker',
+                outputKey: 'NextMarker'
+            }, {
+                LayerName: layer.LayerName
+            });
+            for (const version of layerVersions) {
+                const policy = await (0, client_tools_js_1.runAndCatchAccessDeniedWithLog)(layer.LayerArn, 'lambda', 'lambdaLayerVersion', 'policy', async () => {
+                    return (0, client_tools_js_1.runAndCatch404)(async () => {
+                        const policyResult = await lambdaClient.send(new client_lambda_1.GetLayerVersionPolicyCommand({
+                            LayerName: layer.LayerName,
+                            VersionNumber: version.Version
+                        }));
+                        return (0, json_js_1.parseIfPresent)(policyResult.Policy);
+                    });
+                });
+                allLayerVersions.push({
+                    arn: version.LayerVersionArn,
+                    metadata: {
+                        name: layer.LayerName,
+                        version: version.Version
+                    },
+                    policy: policy
+                });
+            }
+        }
+        await (0, sync_js_1.syncData)(allLayerVersions, storage, accountId, {
+            service: 'lambda',
+            resourceType: 'layer',
+            account: accountId,
+            region: region
+        }, syncOptions.writeOnly);
+    }
+};
+//# sourceMappingURL=lambda.js.map

package/dist/cjs/syncs/lambda/lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../../src/syncs/lambda/lambda.ts"],"names":[],"mappings":";;;AAAA,0DAU+B;AAE/B,4CAAwC;AACxC,iEAIoC;AACpC,iDAAoD;AACpD,iDAAyD;AACzD,wCAAiE;AACjE,kDAAkG;AAElG,MAAM,kBAAkB,GAAG,IAAA,qCAAsB,EAAC;IAChD,MAAM,EAAE,4BAAY;IACpB,OAAO,EAAE,oCAAoB;IAC7B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC/B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,+BAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;gBAC5F,OAAO,SAAS,CAAC,IAAI,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACjC,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,gCAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAC9D,CAAA;gBACD,OAAO,IAAA,wBAAc,EAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAY;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,YAAY;SACxB;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CAAA;AAEW,QAAA,UAAU,GAAS;IAC9B,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,SAAS,GAAG,MAAM,IAAA,qCAAsB,EAC5C,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,QAAQ,EACR,iBAAiB,EACjB,WAAW,CAAC,UAAU,CACvB,CAAA;QAED,MAAM,OAAO,GAAiB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAe,CAAA;YAC7D,MAAM,CAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CACjC,IAAI,EACJ,MAAM,EACN,WAAW,CAAC,SAAS,EACrB,WAAW,CAAC,SAAS,CACtB,CAAA;YACD,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YAChC,MAAM,CAAC,IAAI,GAAG,IAAA,6BAAmB,EAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAChE,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,4BAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC/F,MAAM,SAAS,GAA6D,SAAS,CAAC,GAAG,CACvF,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACT,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;SAC7D,CAAC,CACH,CAAA;QACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;QACpF,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAiC,CAAA;gBAChE,SAAG,CAAC,KAAK,CAAC,2CAA2C,EAAE,MAAM,CAAC,MAAM,EAAE;oBACpE,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAA;gBACF,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YACtF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,IAAA,kBAAQ,EACZ,OAAO,EACP,OAAO,EACP,SAAS,EACT,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EACnE,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED,KAAK,UAAU,mBAAmB,CAChC,YAA0B,EAC1B,IAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,IAAA,8BAAY,EAAC,GAAG,EAAE,CACtC,IAAA,+BAAgB,EACd,YAAY,EACZ,kCAAkB,EAClB,SAAS,EACT;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB,EACD,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CACpC,CACF,CAAA;IAED,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAY,EAAC,GAAG,EAAE,CACrC,IAAA,gDAA8B,EAAC,KAAK,CAAC,QAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAC1F,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;YACxB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,CAC1C,IAAI,gCAAgB,CAAC;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,KAAK,CAAC,IAAI;aACtB,CAAC,CACH,CAAA;YACD,OAAO,IAAA,wBAAc,EAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CACH,CACF,CAAA;QAED,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,KAAK,CAAC,QAAS;YACpB,QAAQ,EAAE;gBACR,GAAG,EAAE,KAAK,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,OAAO,EAAE,KAAK,CAAC,eAAe;aAC/B;YACD,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAEY,QAAA,uBAAuB,GAAS;IAC3C,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,4BAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC/F,MAAM,SAAS,GAAG,MAAM,IAAA,+BAAgB,EAAC,YAAY,EAAE,iCAAiB,EAAE,QAAQ,EAAE;YAClF,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,YAAY;SACxB,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAiB,EAAE,CAAA;QACzC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,MAAM,IAAA,+BAAgB,EAC1C,YAAY,EACZ,wCAAwB,EACxB,eAAe,EACf;gBACE,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,YAAY;aACxB,EACD;gBACE,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CACF,CAAA;YAED,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,IAAA,gDAA8B,EACjD,KAAK,CAAC,QAAS,EACf,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,KAAK,IAAI,EAAE;oBACT,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;wBAC/B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,CAC1C,IAAI,4CAA4B,CAAC;4BAC/B,SAAS,EAAE,KAAK,CAAC,SAAU;4BAC3B,aAAa,EAAE,OAAO,CAAC,OAAO;yBAC/B,CAAC,CACH,CAAA;wBACD,OAAO,IAAA,wBAAc,EAAC,YAAY,CAAC,MAAM,CAAC,CAAA;oBAC5C,CAAC,CAAC,CAAA;gBACJ,CAAC,CACF,CAAA;gBAED,gBAAgB,CAAC,IAAI,CAAC;oBACpB,GAAG,EAAE,OAAO,CAAC,eAAgB;oBAC7B,QAAQ,EAAE;wBACR,IAAI,EAAE,KAAK,CAAC,SAAS;wBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB;oBACD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAA,kBAAQ,EACZ,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,QAAQ;YACjB,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;SACf,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/cjs/syncs/opensearch/domains.d.ts

@@ -0,0 +1,2 @@
+export declare const OpenSearchDomainsSync: import("../sync.js").Sync;
+//# sourceMappingURL=domains.d.ts.map

package/dist/cjs/syncs/opensearch/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,qBAAqB,2BA8CjC,CAAA"}

package/dist/cjs/syncs/opensearch/domains.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenSearchDomainsSync = void 0;
+const client_opensearch_1 = require("@aws-sdk/client-opensearch");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const json_js_1 = require("../../utils/json.js");
+const typedSync_js_1 = require("../typedSync.js");
+function domainArn(domainName, region, accountId, partition) {
+    return `arn:${partition}:es:${region}:${accountId}:domain/${domainName}`;
+}
+exports.OpenSearchDomainsSync = (0, typedSync_js_1.createTypedSyncOperation)('es', 'domains', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_opensearch_1.OpenSearchClient,
+    command: client_opensearch_1.ListDomainNamesCommand,
+    key: 'DomainNames',
+    paginationConfig: '::no-pagination::',
+    resourceTypeParts: (accountId, region) => ({
+        service: 'es', // OpenSearch domains use 'es' service in ARNs
+        resourceType: 'domain',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        domainDetails: async (client, domain, accountId, region, partition) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const result = await client.send(new client_opensearch_1.DescribeDomainCommand({ DomainName: domain.DomainName }));
+                return result.DomainStatus;
+            });
+        },
+        tags: async (client, domain, accountId, region, partition) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const tagResult = await client.send(new client_opensearch_1.ListTagsCommand({
+                    ARN: domainArn(domain.DomainName, region, accountId, partition)
+                }));
+                return tagResult.TagList;
+            });
+        }
+    },
+    tags: (domain) => domain.extraFields.tags,
+    arn: (domain, region, accountId, partition) => domainArn(domain.DomainName, region, accountId, partition),
+    results: (domain) => ({
+        metadata: {
+            name: domain.DomainName,
+            keyId: domain.extraFields.domainDetails?.EncryptionAtRestOptions?.KmsKeyId
+        },
+        policy: (0, json_js_1.parseIfPresent)(domain.extraFields.domainDetails?.AccessPolicies)
+    })
+}));
+//# sourceMappingURL=domains.js.map

package/dist/cjs/syncs/opensearch/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":";;;AAAA,kEAKmC;AACnC,iEAA4D;AAC5D,iDAAoD;AACpD,kDAAkF;AAElF,SAAS,SAAS,CAChB,UAAkB,EAClB,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,OAAO,OAAO,SAAS,OAAO,MAAM,IAAI,SAAS,WAAW,UAAU,EAAE,CAAA;AAC1E,CAAC;AAEY,QAAA,qBAAqB,GAAG,IAAA,uCAAwB,EAC3D,IAAI,EACJ,SAAS,EACT,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,oCAAgB;IACxB,OAAO,EAAE,0CAAsB;IAC/B,GAAG,EAAE,aAAa;IAClB,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,8CAA8C;QAC7D,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACpE,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,yCAAqB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAC7D,CAAA;gBACD,OAAO,MAAM,CAAC,YAAY,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC3D,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,mCAAe,CAAC;oBAClB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;iBACjE,CAAC,CACH,CAAA;gBACD,OAAO,SAAS,CAAC,OAAO,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;IACzC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,uBAAuB,EAAE,QAAQ;SAC3E;QAED,MAAM,EAAE,IAAA,wBAAc,EAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC;KACzE,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/organizations/organizations.d.ts

@@ -0,0 +1,57 @@
+import { type Account, type Organization, type OrganizationalUnit, OrganizationsClient, type Root } from '@aws-sdk/client-organizations';
+import { type Sync } from '../sync.js';
+export declare const OrganizationSync: Sync;
+/**
+ * Get the details of an organization or an account.
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the details of the organization the account belongs to or undefined if the account is not part of an organization or does not have permission.
+ */
+export declare function getOrganizationDetails(client: OrganizationsClient): Promise<Organization | undefined>;
+/**
+ * Get the root Organizational Unit for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the root Organizational Unit for the organization if it exists
+ */
+export declare function getOrganizationRoot(client: OrganizationsClient): Promise<Root | undefined>;
+/**
+ * Get the delegated administrators for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @param organizationArn The ARN of the organization
+ * @returns a map of service principals to account IDs that are delegated administrators for those services
+ */
+export declare function getDelegatedAdministrators(client: OrganizationsClient, organizationArn: string): Promise<Record<string, string[]>>;
+/**
+ * Get the tags for an Organizational Unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param ouId The AWS id of the Organizational Unit to get the tags for
+ * @returns The tags for the Organizational Unit
+ */
+export declare function getTagsForOu(client: OrganizationsClient, ouId: string): Promise<Record<string, string> | undefined>;
+/**
+ * Get the tags for an account
+ * @param client The OrganizationsClient to use
+ * @param accountId The AWS id of the account to get the tags for
+ * @returns The tags for the account
+ */
+export declare function getTagsForAccount(client: OrganizationsClient, accountId: string): Promise<Record<string, string> | undefined>;
+/**
+ * Get the organizational units for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The organizational units directly under the parent
+ */
+export declare function getChildOrgUnits(client: OrganizationsClient, parentId: string): Promise<OrganizationalUnit[]>;
+/**
+ * Get the accounts for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The accounts directly under the parent
+ */
+export declare function getAccountsForParent(client: OrganizationsClient, parentId: string): Promise<Account[]>;
+//# sourceMappingURL=organizations.d.ts.map

package/dist/cjs/syncs/organizations/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../../src/syncs/organizations/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAYZ,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,mBAAmB,EAGnB,KAAK,IAAI,EACV,MAAM,+BAA+B,CAAA;AAStC,OAAO,EAAE,KAAK,IAAI,EAAoB,MAAM,YAAY,CAAA;AAgCxD,eAAO,MAAM,gBAAgB,EAAE,IA6O9B,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAenC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAchG;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAC3B,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CA2DnC;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAE7C;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAE7C;AAqBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC,CAYpB"}