@actsecurity/iam-collect 0.1.215

package/dist/cjs/syncs/s3outposts/s3OutpostsSyncs.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S3OutpostsAccessPointsSync = exports.S3OutpostsBucketsSync = void 0;
+const client_s3_control_1 = require("@aws-sdk/client-s3-control");
+const client_s3outposts_1 = require("@aws-sdk/client-s3outposts");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const json_js_1 = require("../../utils/json.js");
+const log_1 = require("@cloud-copilot/log");
+const tags_js_1 = require("../../utils/tags.js");
+const sync_js_1 = require("../sync.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.S3OutpostsBucketsSync = {
+    awsService: 's3outposts',
+    name: 'buckets',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const outpostsClient = syncOptions.clientPool.client(client_s3outposts_1.S3OutpostsClient, credentials, region, endpoint);
+        const outposts = await listS3Outposts(outpostsClient);
+        const regionalBuckets = [];
+        for (const outpost of outposts) {
+            const controlClient = controlClientForOutpost(credentials, region, outpost.OutpostId);
+            const buckets = await (0, typedSync_js_1.paginateResource)(outpostsClient, client_s3_control_1.ListRegionalBucketsCommand, 'RegionalBucketList', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            }, {
+                OutpostId: outpost.OutpostId
+            });
+            for (const bucket of buckets) {
+                regionalBuckets.push({
+                    arn: bucket.BucketArn,
+                    metadata: {
+                        arn: bucket.BucketArn,
+                        name: bucket.Bucket,
+                        outpostId: bucket.OutpostId,
+                        publicAccessBlockEnabled: bucket.PublicAccessBlockEnabled,
+                        bucket: 'true'
+                    },
+                    policy: await (0, client_tools_js_1.runAndCatch404)(async () => {
+                        const result = await controlClient.send(new client_s3_control_1.GetBucketPolicyCommand({
+                            Bucket: bucket.Bucket
+                        }));
+                        return (0, json_js_1.parseIfPresent)(result.Policy);
+                    }),
+                    tags: await (0, client_tools_js_1.runAndCatch404)(async () => {
+                        const tags = await controlClient.send(new client_s3_control_1.GetBucketTaggingCommand({
+                            Bucket: bucket.Bucket
+                        }));
+                        return (0, tags_js_1.convertTagsToRecord)(tags.TagSet);
+                    })
+                });
+            }
+        }
+        await (0, sync_js_1.syncData)(regionalBuckets, storage, accountId, {
+            service: 's3outposts',
+            resourceType: 'outpost',
+            account: accountId,
+            region: region,
+            metadata: {
+                bucket: 'true'
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+exports.S3OutpostsAccessPointsSync = {
+    awsService: 's3outposts',
+    name: 'accessPoints',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const outpostsClient = syncOptions.clientPool.client(client_s3outposts_1.S3OutpostsClient, credentials, region, endpoint);
+        const outposts = await listS3Outposts(outpostsClient);
+        const accessPoints = [];
+        for (const outpost of outposts) {
+            const controlClient = controlClientForOutpost(credentials, region, outpost.OutpostId);
+            const points = await (0, typedSync_js_1.paginateResource)(controlClient, client_s3_control_1.ListAccessPointsCommand, 'AccessPointList', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            }, {
+                AccountId: accountId
+            });
+            for (const point of points) {
+                accessPoints.push({
+                    arn: point.AccessPointArn,
+                    metadata: {
+                        arn: point.AccessPointArn,
+                        name: point.Name,
+                        outpostId: outpost.OutpostId,
+                        networkOrigin: point.NetworkOrigin,
+                        vpc: point.VpcConfiguration?.VpcId,
+                        bucket: point.Bucket,
+                        bucketAccount: point.BucketAccountId,
+                        accesspoint: 'true'
+                    },
+                    policy: await (0, client_tools_js_1.runAndCatch404)(async () => {
+                        const result = await controlClient.send(new client_s3_control_1.GetAccessPointPolicyCommand({
+                            Name: point.Name,
+                            AccountId: accountId
+                        }));
+                        return (0, json_js_1.parseIfPresent)(result.Policy);
+                    })
+                });
+            }
+        }
+        await (0, sync_js_1.syncData)(accessPoints, storage, accountId, {
+            service: 's3outposts',
+            resourceType: 'outpost',
+            account: accountId,
+            region: region,
+            metadata: {
+                accesspoint: 'true'
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+/**
+ * List the Outposts in the account that have S3
+ *
+ * @param outpostsClient the S3OutpostsClient to use
+ * @returns and array of Outpost objects
+ */
+async function listS3Outposts(outpostsClient) {
+    return (0, typedSync_js_1.paginateResource)(outpostsClient, client_s3outposts_1.ListOutpostsWithS3Command, 'Outposts', {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    });
+}
+/**
+ * Create a new S3ControlClient with the Outpost ID set in the headers
+ *
+ * @param credentials the credentials to use for the client
+ * @param region the region to use for the client
+ * @param outpostId the Outpost ID to set in the headers
+ * @returns a new S3ControlClient with the Outpost ID set in the headers
+ */
+function controlClientForOutpost(credentials, region, outpostId) {
+    const controlClient = new client_s3_control_1.S3ControlClient({ credentials: credentials.provider, region });
+    controlClient.middlewareStack.add((next, context) => (args) => {
+        if (args.request) {
+            log_1.log.trace('Adding outpost ID to request headers');
+            args.request.headers['x-amz-outpost-id'] = outpostId;
+        }
+        return next(args);
+    }, {
+        step: 'build'
+    });
+    return controlClient;
+}
+//# sourceMappingURL=s3OutpostsSyncs.js.map

package/dist/cjs/syncs/s3outposts/s3OutpostsSyncs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3OutpostsSyncs.js","sourceRoot":"","sources":["../../../../src/syncs/s3outposts/s3OutpostsSyncs.ts"],"names":[],"mappings":";;;AAAA,kEAOmC;AACnC,kEAImC;AAEnC,iEAA4D;AAC5D,iDAAoD;AACpD,4CAAwC;AACxC,iDAAyD;AACzD,wCAAiE;AACjE,kDAAkD;AAErC,QAAA,qBAAqB,GAAS;IACzC,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAClD,oCAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAA;QAErD,MAAM,eAAe,GAAiB,EAAE,CAAA;QACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAAA;YACtF,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAgB,EACpC,cAAc,EACd,8CAA0B,EAC1B,oBAAoB,EACpB;gBACE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,EACD;gBACE,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CACF,CAAA;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAAC;oBACnB,GAAG,EAAE,MAAM,CAAC,SAAU;oBACtB,QAAQ,EAAE;wBACR,GAAG,EAAE,MAAM,CAAC,SAAU;wBACtB,IAAI,EAAE,MAAM,CAAC,MAAM;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;wBACzD,MAAM,EAAE,MAAM;qBACf;oBACD,MAAM,EAAE,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;wBACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CACrC,IAAI,0CAAsB,CAAC;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAO;yBACvB,CAAC,CACH,CAAA;wBACD,OAAO,IAAA,wBAAc,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtC,CAAC,CAAC;oBACF,IAAI,EAAE,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;wBACpC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CACnC,IAAI,2CAAuB,CAAC;4BAC1B,MAAM,EAAE,MAAM,CAAC,MAAO;yBACvB,CAAC,CACH,CAAA;wBACD,OAAO,IAAA,6BAAmB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBACzC,CAAC,CAAC;iBACH,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAA,kBAAQ,EACZ,eAAe,EACf,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,MAAM,EAAE,MAAM;aACf;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAEY,QAAA,0BAA0B,GAAS;IAC9C,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAClD,oCAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAA;QAErD,MAAM,YAAY,GAAiB,EAAE,CAAA;QACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAAA;YACtF,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAgB,EACnC,aAAa,EACb,2CAAuB,EACvB,iBAAiB,EACjB;gBACE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,EACD;gBACE,SAAS,EAAE,SAAS;aACrB,CACF,CAAA;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,KAAK,CAAC,cAAe;oBAC1B,QAAQ,EAAE;wBACR,GAAG,EAAE,KAAK,CAAC,cAAe;wBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,GAAG,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK;wBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,aAAa,EAAE,KAAK,CAAC,eAAe;wBACpC,WAAW,EAAE,MAAM;qBACpB;oBACD,MAAM,EAAE,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;wBACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CACrC,IAAI,+CAA2B,CAAC;4BAC9B,IAAI,EAAE,KAAK,CAAC,IAAK;4BACjB,SAAS,EAAE,SAAS;yBACrB,CAAC,CACH,CAAA;wBACD,OAAO,IAAA,wBAAc,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtC,CAAC,CAAC;iBACH,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAA,kBAAQ,EACZ,YAAY,EACZ,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,WAAW,EAAE,MAAM;aACpB;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED;;;;;GAKG;AAEH,KAAK,UAAU,cAAc,CAAC,cAAgC;IAC5D,OAAO,IAAA,+BAAgB,EAAC,cAAc,EAAE,6CAAyB,EAAE,UAAU,EAAE;QAC7E,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,WAA8C,EAC9C,MAA0B,EAC1B,SAAiB;IAEjB,MAAM,aAAa,GAAG,IAAI,mCAAe,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,aAAa,CAAC,eAAe,CAAC,GAAG,CAC/B,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,SAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAChD;YAAC,IAAI,CAAC,OAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAA;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC,EACD;QACE,IAAI,EAAE,OAAO;KACd,CACF,CAAA;IAED,OAAO,aAAa,CAAA;AACtB,CAAC"}

package/dist/cjs/syncs/s3tables/s3TablesSync.d.ts

@@ -0,0 +1,2 @@
+export declare const S3TableBucketsSync: import("../sync.js").Sync;
+//# sourceMappingURL=s3TablesSync.d.ts.map

package/dist/cjs/syncs/s3tables/s3TablesSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3TablesSync.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3tables/s3TablesSync.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,kBAAkB,2BA+C9B,CAAA"}

package/dist/cjs/syncs/s3tables/s3TablesSync.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.S3TableBucketsSync = void 0;
+const client_s3tables_1 = require("@aws-sdk/client-s3tables");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const json_js_1 = require("../../utils/json.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.S3TableBucketsSync = (0, typedSync_js_1.createTypedSyncOperation)('s3tables', 'tableBuckets', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_s3tables_1.S3TablesClient,
+    command: client_s3tables_1.ListTableBucketsCommand,
+    key: 'tableBuckets',
+    paginationConfig: {
+        inputKey: 'continuationToken',
+        outputKey: 'continuationToken'
+    },
+    arn: (bucket) => bucket.arn,
+    extraFields: {
+        policy: async (client, bucket) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const policy = await client.send(new client_s3tables_1.GetTableBucketPolicyCommand({ tableBucketARN: bucket.arn }));
+                return (0, json_js_1.parseIfPresent)(policy.resourcePolicy);
+            });
+        },
+        encryption: async (client, bucket) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const encryption = await client.send(new client_s3tables_1.GetTableBucketEncryptionCommand({ tableBucketARN: bucket.arn }));
+                return encryption.encryptionConfiguration;
+            });
+        }
+    },
+    tags: (bucket) => undefined,
+    resourceTypeParts: (account, region) => ({
+        service: 's3tables',
+        resourceType: 'bucket',
+        account,
+        region
+    }),
+    results: (bucket) => ({
+        metadata: {
+            name: bucket.name,
+            id: bucket.tableBucketId,
+            encryptionAlgorithm: bucket.extraFields.encryption?.sseAlgorithm,
+            key: bucket.extraFields.encryption?.kmsKeyArn
+        },
+        policy: bucket.extraFields.policy
+    })
+}));
+//# sourceMappingURL=s3TablesSync.js.map

package/dist/cjs/syncs/s3tables/s3TablesSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3TablesSync.js","sourceRoot":"","sources":["../../../../src/syncs/s3tables/s3TablesSync.ts"],"names":[],"mappings":";;;AAAA,8DAKiC;AACjC,iEAA4D;AAC5D,iDAAoD;AACpD,kDAAkF;AAErE,QAAA,kBAAkB,GAAG,IAAA,uCAAwB,EACxD,UAAU,EACV,cAAc,EACd,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,gCAAc;IACtB,OAAO,EAAE,yCAAuB;IAChC,GAAG,EAAE,cAAc;IACnB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,mBAAmB;KAC/B;IACD,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI;IAC5B,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC/B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,6CAA2B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAChE,CAAA;gBACD,OAAO,IAAA,wBAAc,EAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YAC9C,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACnC,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,iDAA+B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CACpE,CAAA;gBACD,OAAO,UAAU,CAAC,uBAAuB,CAAA;YAC3C,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS;IAC3B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,QAAQ;QACtB,OAAO;QACP,MAAM;KACP,CAAC;IACF,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,aAAa;YACxB,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY;YAChE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS;SAC9C;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/secretsmanager/secrets.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Sync AWS Secrets Manager secrets and their resource policies.
+ */
+export declare const SecretSync: import("../sync.js").Sync;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/cjs/syncs/secretsmanager/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/secretsmanager/secrets.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,eAAO,MAAM,UAAU,2BAwCtB,CAAA"}

package/dist/cjs/syncs/secretsmanager/secrets.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretSync = void 0;
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const typedSync_js_1 = require("../typedSync.js");
+/**
+ * Sync AWS Secrets Manager secrets and their resource policies.
+ */
+exports.SecretSync = (0, typedSync_js_1.createTypedSyncOperation)('secretsmanager', 'secrets', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_secrets_manager_1.SecretsManagerClient,
+    command: client_secrets_manager_1.ListSecretsCommand,
+    key: 'SecretList',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'secretsmanager',
+        resourceType: 'secret',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        policy: async (client, secret) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const response = await client.send(new client_secrets_manager_1.GetResourcePolicyCommand({ SecretId: secret.ARN }));
+                if (response.ResourcePolicy) {
+                    return JSON.parse(response.ResourcePolicy);
+                }
+                return undefined;
+            });
+        }
+    },
+    tags: (secret) => secret.Tags,
+    arn: (secret) => secret.ARN,
+    results: (secret) => ({
+        metadata: {
+            name: secret.Name,
+            kmsKey: secret.KmsKeyId
+        },
+        policy: secret.extraFields.policy
+    })
+}));
+//# sourceMappingURL=secrets.js.map

package/dist/cjs/syncs/secretsmanager/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/syncs/secretsmanager/secrets.ts"],"names":[],"mappings":";;;AAAA,4EAIwC;AACxC,iEAA4D;AAC5D,kDAAkF;AAElF;;GAEG;AACU,QAAA,UAAU,GAAG,IAAA,uCAAwB,EAChD,gBAAgB,EAChB,SAAS,EACT,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,6CAAoB;IAC5B,OAAO,EAAE,2CAAkB;IAC3B,GAAG,EAAE,YAAY;IACjB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,gBAAgB;QACzB,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC/B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,iDAAwB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAI,EAAE,CAAC,CACxD,CAAA;gBACD,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;gBAC5C,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI;IAC7B,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI;IAC5B,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAK;YAClB,MAAM,EAAE,MAAM,CAAC,QAAQ;SACxB;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/sns/topics.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const SnsTopicsSync: Sync;
+//# sourceMappingURL=topics.d.ts.map

package/dist/cjs/syncs/sns/topics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sns/topics.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,aAAa,EAAE,IA8C3B,CAAA"}

package/dist/cjs/syncs/sns/topics.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SnsTopicsSync = void 0;
+const client_sns_1 = require("@aws-sdk/client-sns");
+const log_1 = require("@cloud-copilot/log");
+const typedSync_js_1 = require("../typedSync.js");
+exports.SnsTopicsSync = (0, typedSync_js_1.createTypedSyncOperation)('sns', 'topics', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_sns_1.SNSClient,
+    command: client_sns_1.ListTopicsCommand,
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    key: 'Topics',
+    arn: (topic) => topic.TopicArn,
+    resourceTypeParts: (account, region) => ({
+        service: 'sns',
+        account,
+        region
+    }),
+    extraFields: {
+        tags: async (client, topic) => {
+            const tagResult = await client.send(new client_sns_1.ListTagsForResourceCommand({
+                ResourceArn: topic.TopicArn
+            }));
+            return tagResult.Tags;
+        },
+        attributes: async (client, topic) => {
+            const attributes = await client.send(new client_sns_1.GetTopicAttributesCommand({
+                TopicArn: topic.TopicArn
+            }));
+            return attributes.Attributes;
+        }
+    },
+    tags: (topic) => topic.extraFields.tags,
+    results: (topic) => ({
+        metadata: {
+            name: topic.TopicArn.split(':').pop(),
+            displayName: topic.extraFields.attributes?.DisplayName,
+            keyId: topic.extraFields.attributes?.KmsMasterKeyId,
+            owner: topic.extraFields.attributes?.Owner
+        },
+        policy: topicPolicy(topic.TopicArn, topic.extraFields.attributes)
+    })
+}));
+/**
+ * Parse the SNS topic policy from attributes.
+ *
+ * @param attributes the attributes of the SNS topic
+ * @returns the parsed policy or undefined if parsing fails or the policy is not present
+ */
+function topicPolicy(topicArn, attributes) {
+    if (attributes?.['Policy']) {
+        try {
+            return JSON.parse(attributes['Policy']);
+        }
+        catch (e) {
+            log_1.log.error('Failed to parse SNS topic policy', e, { topicArn });
+            return undefined;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=topics.js.map

package/dist/cjs/syncs/sns/topics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../../src/syncs/sns/topics.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAC5B,4CAAwC;AAExC,kDAAkF;AAErE,QAAA,aAAa,GAAS,IAAA,uCAAwB,EACzD,KAAK,EACL,QAAQ,EACR,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,8BAAiB;IAC1B,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,OAAO;QACP,MAAM;KACP,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,uCAA0B,CAAC;gBAC7B,WAAW,EAAE,KAAK,CAAC,QAAS;aAC7B,CAAC,CACH,CAAA;YACD,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,sCAAyB,CAAC;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAS;aAC1B,CAAC,CACH,CAAA;YACD,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC;KACF;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,QAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG;YACvC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW;YACtD,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,cAAc;YACnD,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK;SAC3C;QACD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,QAAS,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC;KACnE,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,QAAgB,EAChB,UAA8C;IAE9C,IAAI,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,SAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9D,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/cjs/syncs/sqs/queues.d.ts

@@ -0,0 +1,2 @@
+export declare const SqsQueueSync: import("../sync.js").Sync;
+//# sourceMappingURL=queues.d.ts.map

package/dist/cjs/syncs/sqs/queues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queues.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sqs/queues.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,YAAY,2BAkDxB,CAAA"}

package/dist/cjs/syncs/sqs/queues.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SqsQueueSync = void 0;
+const client_sqs_1 = require("@aws-sdk/client-sqs");
+const json_js_1 = require("../../utils/json.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.SqsQueueSync = (0, typedSync_js_1.createTypedSyncOperation)('sqs', 'queue', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_sqs_1.SQSClient,
+    command: client_sqs_1.ListQueuesCommand,
+    key: 'QueueUrls',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arguments: (accountId, region) => ({
+        MaxResults: 1000
+    }),
+    arn: (queue, region, account, partition) => {
+        return queueArn(queue, region, account, partition);
+    },
+    resourceTypeParts: (account, region) => ({
+        account,
+        region,
+        service: 'sqs'
+    }),
+    tags: (queue) => queue.extraFields.tags,
+    extraFields: {
+        tags: async (client, queue, account, region, partition) => {
+            const tagResult = await client.send(new client_sqs_1.ListQueueTagsCommand({
+                QueueUrl: queue.name
+            }));
+            return tagResult.Tags;
+        },
+        attributes: async (client, queue, account, region, partition) => {
+            const attributes = await client.send(new client_sqs_1.GetQueueAttributesCommand({
+                QueueUrl: queue.name,
+                AttributeNames: ['KmsMasterKeyId', 'Policy']
+            }));
+            return attributes.Attributes;
+        }
+    },
+    results: (queue) => ({
+        metadata: {
+            name: queue.name.split('/').pop() || '',
+            kmsKey: queue.extraFields.attributes?.KmsMasterKeyId
+        },
+        policy: (0, json_js_1.parseIfPresent)(queue.extraFields.attributes?.Policy)
+    })
+}));
+function queueArn(queue, region, account, partition) {
+    const queueName = queue.name.split('/').pop();
+    return `arn:${partition}:sqs:${region}:${account}:${queueName}`;
+}
+//# sourceMappingURL=queues.js.map

package/dist/cjs/syncs/sqs/queues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queues.js","sourceRoot":"","sources":["../../../../src/syncs/sqs/queues.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAC5B,iDAAoD;AACpD,kDAAkF;AAErE,QAAA,YAAY,GAAG,IAAA,uCAAwB,EAClD,KAAK,EACL,OAAO,EACP,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,8BAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,UAAU,EAAE,IAAI;KACjB,CAAC;IACF,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;QACzC,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;IACD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,OAAO,EAAE,KAAK;KACf,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACxD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,iCAAoB,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,IAAI;aACrB,CAAC,CACH,CAAA;YACD,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC9D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,sCAAyB,CAAC;gBAC5B,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,cAAc,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;aAC7C,CAAC,CACH,CAAA;YACD,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;YACvC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,cAAc;SACrD;QACD,MAAM,EAAE,IAAA,wBAAc,EAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7D,CAAC;CACH,CAAC,CACH,CAAA;AAED,SAAS,QAAQ,CAAC,KAAuB,EAAE,MAAc,EAAE,OAAe,EAAE,SAAiB;IAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC7C,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AACjE,CAAC"}

package/dist/cjs/syncs/sso/ssoInstances.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const SsoDataSync: Sync;
+//# sourceMappingURL=ssoInstances.d.ts.map

package/dist/cjs/syncs/sso/ssoInstances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssoInstances.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sso/ssoInstances.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AAGjE,eAAO,MAAM,WAAW,EAAE,IAkEzB,CAAA"}

package/dist/cjs/syncs/sso/ssoInstances.js

@@ -0,0 +1,189 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SsoDataSync = void 0;
+const client_sso_admin_1 = require("@aws-sdk/client-sso-admin");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const log_1 = require("@cloud-copilot/log");
+const tags_js_1 = require("../../utils/tags.js");
+const sync_js_1 = require("../sync.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.SsoDataSync = {
+    awsService: 'sso',
+    name: 'instances',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const client = syncOptions.clientPool.client(client_sso_admin_1.SSOAdminClient, credentials, region, endpoint);
+        const instances = await (0, client_tools_js_1.withDnsRetry)(async () => {
+            return (0, typedSync_js_1.paginateResource)(client, client_sso_admin_1.ListInstancesCommand, 'Instances', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            });
+        });
+        const accountInstances = instances.filter((instance) => instance.OwnerAccountId === accountId && instance.Status === 'ACTIVE');
+        log_1.log.trace('Found SSO instances', {
+            accountId,
+            region,
+            instances: accountInstances.length
+        });
+        const resourceTypeParts = {
+            service: 'sso',
+            resourceType: 'instance',
+            metadata: {
+                region
+            }
+        };
+        const data = [];
+        for (const instance of accountInstances) {
+            const command = new client_sso_admin_1.ListTagsForResourceCommand({
+                InstanceArn: instance.InstanceArn,
+                ResourceArn: instance.InstanceArn
+            });
+            const results = await (0, client_tools_js_1.runAndCatchAccessDenied)(async () => {
+                return client.send(command);
+            });
+            const tags = (0, tags_js_1.convertTagsToRecord)(results?.Tags);
+            data.push({
+                arn: instance.InstanceArn,
+                metadata: {
+                    name: instance.Name,
+                    identityStoreId: instance.IdentityStoreId,
+                    ownerAccountId: instance.OwnerAccountId,
+                    status: instance.Status,
+                    region,
+                    arn: instance.InstanceArn
+                },
+                tags
+            });
+        }
+        await (0, sync_js_1.syncData)(data, storage, accountId, resourceTypeParts, syncOptions.writeOnly);
+        for (const instance of accountInstances) {
+            const dataSyncs = createSsoInstanceResourceSyncs(instance, region);
+            for (const dataSync of dataSyncs) {
+                await dataSync.execute(accountId, region, credentials, storage, endpoint, syncOptions);
+            }
+        }
+    }
+};
+function createSsoInstanceResourceSyncs(ssoInstance, region) {
+    return [
+        (0, typedSync_js_1.createTypedSyncOperation)('sso', 'permissionSets', (0, typedSync_js_1.createResourceSyncType)({
+            client: client_sso_admin_1.SSOAdminClient,
+            command: client_sso_admin_1.ListPermissionSetsCommand,
+            arguments: (awsId, region) => ({
+                InstanceArn: ssoInstance.InstanceArn
+            }),
+            key: 'PermissionSets',
+            paginationConfig: {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            },
+            resourceTypeParts: (accountId, region) => ({
+                service: 'sso',
+                resourceType: 'permissionset',
+                account: accountId,
+                metadata: {
+                    region
+                }
+            }),
+            arn: (permissionSet) => permissionSet.name,
+            extraFields: {
+                tags: async (client, permissionSet) => {
+                    const command = new client_sso_admin_1.ListTagsForResourceCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        ResourceArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results?.Tags;
+                },
+                details: async (client, permissionSet) => {
+                    const command = new client_sso_admin_1.DescribePermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results?.PermissionSet;
+                },
+                awsManagedPolicies: async (client, permissionSet) => {
+                    const command = new client_sso_admin_1.ListManagedPoliciesInPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results.AttachedManagedPolicies;
+                },
+                customerManagedPolicies: async (client, permissionSet, account, region, partition) => {
+                    const results = await (0, typedSync_js_1.paginateResource)(client, client_sso_admin_1.ListCustomerManagedPolicyReferencesInPermissionSetCommand, 'CustomerManagedPolicyReferences', {
+                        inputKey: 'NextToken',
+                        outputKey: 'NextToken'
+                    }, {
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    return results?.map((policy) => ({
+                        ...policy,
+                        arn: `arn:${partition}:iam::${account}:policy/${policy.Name}`
+                    }));
+                },
+                inlinePolicy: async (client, permissionSet) => {
+                    const command = new client_sso_admin_1.GetInlinePolicyForPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await (0, client_tools_js_1.runAndCatch404)(async () => {
+                        const result = await client.send(command);
+                        if (result?.InlinePolicy) {
+                            return JSON.parse(result.InlinePolicy);
+                        }
+                        return undefined;
+                    });
+                    return results;
+                },
+                permissionBoundary: async (client, permissionSet) => {
+                    const command = new client_sso_admin_1.GetPermissionsBoundaryForPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const permissionBoundary = await (async () => {
+                        try {
+                            const result = await client.send(command);
+                            if (result?.PermissionsBoundary) {
+                                return result.PermissionsBoundary;
+                            }
+                            return undefined;
+                        }
+                        catch (e) {
+                            if (e.name === 'ResourceNotFoundException') {
+                                return undefined;
+                            }
+                            throw e;
+                        }
+                    })();
+                    return permissionBoundary;
+                },
+                accounts: async (client, permissionSet) => {
+                    const results = await (0, typedSync_js_1.paginateResource)(client, client_sso_admin_1.ListAccountsForProvisionedPermissionSetCommand, 'AccountIds', {
+                        inputKey: 'NextToken',
+                        outputKey: 'NextToken'
+                    }, {
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    return results;
+                }
+            },
+            tags: (permissionSet) => permissionSet.extraFields.tags,
+            results: (permissionSet) => ({
+                metadata: {
+                    name: permissionSet.extraFields.details?.Name,
+                    description: permissionSet.extraFields.details?.Description,
+                    region
+                },
+                awsManagedPolicies: permissionSet.extraFields.awsManagedPolicies,
+                customerManagedPolicies: permissionSet.extraFields.customerManagedPolicies,
+                inlinePolicy: permissionSet.extraFields.inlinePolicy,
+                permissionBoundary: permissionSet.extraFields.permissionBoundary,
+                accounts: permissionSet.extraFields.accounts
+            })
+        }))
+    ];
+}
+//# sourceMappingURL=ssoInstances.js.map

package/dist/cjs/syncs/sso/ssoInstances.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssoInstances.js","sourceRoot":"","sources":["../../../../src/syncs/sso/ssoInstances.ts"],"names":[],"mappings":";;;AAAA,gEAYkC;AAClC,iEAAmG;AACnG,4CAAwC;AACxC,iDAAyD;AACzD,wCAAiE;AACjE,kDAAoG;AAEvF,QAAA,WAAW,GAAS;IAC/B,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,iCAAc,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE3F,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAY,EAAC,KAAK,IAAI,EAAE;YAC9C,OAAO,IAAA,+BAAgB,EAAC,MAAM,EAAE,uCAAoB,EAAE,WAAW,EAAE;gBACjE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CACpF,CAAA;QAED,SAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;YAC/B,SAAS;YACT,MAAM;YACN,SAAS,EAAE,gBAAgB,CAAC,MAAM;SACnC,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAG;YACxB,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE;gBACR,MAAM;aACP;SACF,CAAA;QAED,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,6CAA0B,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAY;gBAClC,WAAW,EAAE,QAAQ,CAAC,WAAY;aACnC,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,MAAM,IAAA,yCAAuB,EAAC,KAAK,IAAI,EAAE;gBACvD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,IAAA,6BAAmB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAE/C,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,QAAQ,CAAC,WAAY;gBAC1B,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ,CAAC,IAAK;oBACpB,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM;oBACN,GAAG,EAAE,QAAQ,CAAC,WAAY;iBAC3B;gBACD,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,IAAA,kBAAQ,EAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;QAElF,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAElE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAED,SAAS,8BAA8B,CAAC,WAA6B,EAAE,MAAc;IACnF,OAAO;QACL,IAAA,uCAAwB,EACtB,KAAK,EACL,gBAAgB,EAChB,IAAA,qCAAsB,EAAC;YACrB,MAAM,EAAE,iCAAc;YACtB,OAAO,EAAE,4CAAyB;YAClC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7B,WAAW,EAAE,WAAW,CAAC,WAAY;aACtC,CAAC;YACF,GAAG,EAAE,gBAAgB;YACrB,gBAAgB,EAAE;gBAChB,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB;YACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,eAAe;gBAC7B,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE;oBACR,MAAM;iBACP;aACF,CAAC;YACF,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,IAAK;YAC3C,WAAW,EAAE;gBACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACpC,MAAM,OAAO,GAAG,IAAI,6CAA0B,CAAC;wBAC7C,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,WAAW,EAAE,aAAa,CAAC,IAAK;qBACjC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,EAAE,IAAI,CAAA;gBACtB,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACvC,MAAM,OAAO,GAAG,IAAI,+CAA4B,CAAC;wBAC/C,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,EAAE,aAAa,CAAA;gBAC/B,CAAC;gBACD,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAClD,MAAM,OAAO,GAAG,IAAI,4DAAyC,CAAC;wBAC5D,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,CAAC,uBAAuB,CAAA;gBACxC,CAAC;gBACD,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;oBACnF,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAgB,EACpC,MAAM,EACN,4EAAyD,EACzD,iCAAiC,EACjC;wBACE,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,WAAW;qBACvB,EACD;wBACE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CACF,CAAA;oBACD,OAAO,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;wBAC/B,GAAG,MAAM;wBACT,GAAG,EAAE,OAAO,SAAS,SAAS,OAAO,WAAW,MAAM,CAAC,IAAI,EAAE;qBAC9D,CAAC,CAAC,CAAA;gBACL,CAAC;gBACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAC5C,MAAM,OAAO,GAAG,IAAI,yDAAsC,CAAC;wBACzD,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;wBAC9C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;wBACzC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;4BACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;wBACxC,CAAC;wBACD,OAAO,SAAS,CAAA;oBAClB,CAAC,CAAC,CAAA;oBACF,OAAO,OAAO,CAAA;gBAChB,CAAC;gBACD,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAClD,MAAM,OAAO,GAAG,IAAI,gEAA6C,CAAC;wBAChE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;wBAC3C,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;4BACzC,IAAI,MAAM,EAAE,mBAAmB,EAAE,CAAC;gCAChC,OAAO,MAAM,CAAC,mBAAmB,CAAA;4BACnC,CAAC;4BACD,OAAO,SAAS,CAAA;wBAClB,CAAC;wBAAC,OAAO,CAAM,EAAE,CAAC;4BAChB,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gCAC3C,OAAO,SAAS,CAAA;4BAClB,CAAC;4BACD,MAAM,CAAC,CAAA;wBACT,CAAC;oBACH,CAAC,CAAC,EAAE,CAAA;oBAEJ,OAAO,kBAAkB,CAAA;gBAC3B,CAAC;gBAED,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACxC,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAgB,EACpC,MAAM,EACN,iEAA8C,EAC9C,YAAY,EACZ;wBACE,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,WAAW;qBACvB,EACD;wBACE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CACF,CAAA;oBACD,OAAO,OAAO,CAAA;gBAChB,CAAC;aACF;YACD,IAAI,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI;YACvD,OAAO,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAC3B,QAAQ,EAAE;oBACR,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;oBAC7C,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW;oBAC3D,MAAM;iBACP;gBACD,kBAAkB,EAAE,aAAa,CAAC,WAAW,CAAC,kBAAkB;gBAChE,uBAAuB,EAAE,aAAa,CAAC,WAAW,CAAC,uBAAuB;gBAC1E,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,YAAY;gBACpD,kBAAkB,EAAE,aAAa,CAAC,WAAW,CAAC,kBAAkB;gBAChE,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,QAAQ;aAC7C,CAAC;SACH,CAAC,CACH;KACF,CAAA;AACH,CAAC"}