@actsecurity/iam-collect 0.1.215

package/dist/esm/aws/ClientPool.d.ts

@@ -0,0 +1,49 @@
+import type { Client } from '@smithy/smithy-client';
+import { type AwsService } from '../services.js';
+import { type AwsCredentialProviderWithMetaData } from './coreAuth.js';
+export type ClientConstructor<T> = new (args: any) => T;
+export type AnyClient = Client<any, any, any, any>;
+export declare class AwsClientPool {
+    static defaultInstance: AwsClientPool;
+    private clientCache;
+    private defaultRetryStrategy;
+    constructor();
+    /**
+     * Returns a client of the specified type with the specified credentials and region.
+     * Will create a new client if one does not already exist in the cache.
+     *
+     * @param ClientType The client constructor to create an instance of.
+     * @param credentials The credentials to use for the client.
+     * @param region The region to use for the client.
+     * @returns A client of the specified type with the specified credentials and region.
+     */
+    client<T extends AnyClient>(ClientType: ClientConstructor<T>, credentials: AwsCredentialProviderWithMetaData, region: string | undefined, endpoint: string | undefined): T;
+    private getCacheKey;
+    /**
+     * Destroys all clients in the pool and empties the cache.
+     *
+     * NOT THREAD SAFE, this should only be called when all other operations are complete.
+     */
+    clear(): void;
+    /**
+     * Do any async initialization required for the client pool. Should be called
+     * before the first use of the pool.
+     */
+    init(): Promise<void>;
+    /**
+     * Whether this client pool requires valid AWS credentials for each instance.
+     */
+    requiresAwsCredentials(): boolean;
+    /**
+     * Determine if a given sync is supported by this client pool for the given service and region.
+     *
+     * @param service the AWS service
+     * @param syncName the name of the sync operation
+     * @param region the AWS region
+     * @returns true if the sync is supported, false otherwise
+     */
+    isSyncSupported(service: AwsService, syncName: string, region: string): boolean;
+    private retryStrategyForClient;
+    private makeRetryStrategy;
+}
+//# sourceMappingURL=ClientPool.d.ts.map

package/dist/esm/aws/ClientPool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientPool.d.ts","sourceRoot":"","sources":["../../../src/aws/ClientPool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAMnD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,eAAe,CAAA;AAEtE,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,CAAA;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAWlD,qBAAa,aAAa;IACxB,OAAc,eAAe,gBAAsB;IAEnD,OAAO,CAAC,WAAW,CAA+B;IAClD,OAAO,CAAC,oBAAoB,CAAiB;;IAU7C;;;;;;;;OAQG;IACI,MAAM,CAAC,CAAC,SAAS,SAAS,EAC/B,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAChC,WAAW,EAAE,iCAAiC,EAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,CAAC;IAoBJ,OAAO,CAAC,WAAW;IASnB;;;;OAIG;IACI,KAAK,IAAI,IAAI;IASpB;;;OAGG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAElC;;OAEG;IACI,sBAAsB,IAAI,OAAO;IAIxC;;;;;;;OAOG;IACI,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAItF,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,iBAAiB;CAK1B"}

package/dist/esm/aws/ClientPool.js

@@ -0,0 +1,103 @@
+import { LambdaClient } from '@aws-sdk/client-lambda';
+import {} from '@aws-sdk/types';
+import { NodeHttpHandler } from '@smithy/node-http-handler';
+import { AdaptiveRetryStrategy, DefaultRateLimiter } from '@smithy/util-retry';
+import {} from '../services.js';
+import {} from './coreAuth.js';
+const retrySettings = {
+    [LambdaClient.name]: {
+        beta: 0.4, // cut harder on throttle (default 0.7)
+        minFillRate: 0.2, // lower baseline QPS (default 0.5)
+        scaleConstant: 0.1, // slower cubic ramp (default 0.4)
+        smooth: 0.5 // dampen measured rate (default 0.8)
+    }
+};
+export class AwsClientPool {
+    constructor() {
+        this.clientCache = new Map();
+        this.defaultRetryStrategy = this.makeRetryStrategy({
+            beta: 0.5, // cut harder on throttle (default 0.7)
+            minFillRate: 0.25, // lower baseline QPS (default 0.5)
+            scaleConstant: 0.2, // slower cubic ramp (default 0.4)
+            smooth: 0.6 // dampen measured rate (default 0.8)
+        });
+    }
+    /**
+     * Returns a client of the specified type with the specified credentials and region.
+     * Will create a new client if one does not already exist in the cache.
+     *
+     * @param ClientType The client constructor to create an instance of.
+     * @param credentials The credentials to use for the client.
+     * @param region The region to use for the client.
+     * @returns A client of the specified type with the specified credentials and region.
+     */
+    client(ClientType, credentials, region, endpoint) {
+        const cacheKey = this.getCacheKey(ClientType, credentials, region, endpoint);
+        if (!this.clientCache.has(cacheKey)) {
+            const client = new ClientType({
+                credentials: credentials.provider,
+                region,
+                maxAttempts: 10,
+                requestHandler: new NodeHttpHandler({
+                    connectionTimeout: 5000,
+                    socketTimeout: 15000
+                }),
+                retryStrategy: this.retryStrategyForClient(ClientType)
+            });
+            this.clientCache.set(cacheKey, client);
+        }
+        return this.clientCache.get(cacheKey);
+    }
+    getCacheKey(ClientType, credentials, region, endpoint) {
+        return `${ClientType.name}:${credentials.accountId}:${credentials.cacheKey}:${region}:${endpoint}`;
+    }
+    /**
+     * Destroys all clients in the pool and empties the cache.
+     *
+     * NOT THREAD SAFE, this should only be called when all other operations are complete.
+     */
+    clear() {
+        this.clientCache.forEach((client) => {
+            if (typeof client.destroy === 'function') {
+                client.destroy();
+            }
+        });
+        this.clientCache.clear();
+    }
+    /**
+     * Do any async initialization required for the client pool. Should be called
+     * before the first use of the pool.
+     */
+    async init() { }
+    /**
+     * Whether this client pool requires valid AWS credentials for each instance.
+     */
+    requiresAwsCredentials() {
+        return true;
+    }
+    /**
+     * Determine if a given sync is supported by this client pool for the given service and region.
+     *
+     * @param service the AWS service
+     * @param syncName the name of the sync operation
+     * @param region the AWS region
+     * @returns true if the sync is supported, false otherwise
+     */
+    isSyncSupported(service, syncName, region) {
+        return true;
+    }
+    retryStrategyForClient(client) {
+        const settings = retrySettings[client.name];
+        if (settings) {
+            return this.makeRetryStrategy(settings);
+        }
+        return this.defaultRetryStrategy;
+    }
+    makeRetryStrategy(rateLimiterOptions) {
+        return new AdaptiveRetryStrategy(async () => 20, {
+            rateLimiter: new DefaultRateLimiter(rateLimiterOptions)
+        });
+    }
+}
+AwsClientPool.defaultInstance = new AwsClientPool();
+//# sourceMappingURL=ClientPool.js.map

package/dist/esm/aws/ClientPool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientPool.js","sourceRoot":"","sources":["../../../src/aws/ClientPool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAwB,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAEnB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAmB,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAA0C,MAAM,eAAe,CAAA;AAKtE,MAAM,aAAa,GAA8C;IAC/D,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE;QACnB,IAAI,EAAE,GAAG,EAAE,uCAAuC;QAClD,WAAW,EAAE,GAAG,EAAE,mCAAmC;QACrD,aAAa,EAAE,GAAG,EAAE,kCAAkC;QACtD,MAAM,EAAE,GAAG,CAAC,qCAAqC;KAClD;CACF,CAAA;AAED,MAAM,OAAO,aAAa;IAKxB;QAFQ,gBAAW,GAAG,IAAI,GAAG,EAAqB,CAAA;QAGhD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACjD,IAAI,EAAE,GAAG,EAAE,uCAAuC;YAClD,WAAW,EAAE,IAAI,EAAE,mCAAmC;YACtD,aAAa,EAAE,GAAG,EAAE,kCAAkC;YACtD,MAAM,EAAE,GAAG,CAAC,qCAAqC;SAClD,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CACX,UAAgC,EAChC,WAA8C,EAC9C,MAA0B,EAC1B,QAA4B;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE5E,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;gBAC5B,WAAW,EAAE,WAAW,CAAC,QAAQ;gBACjC,MAAM;gBACN,WAAW,EAAE,EAAE;gBACf,cAAc,EAAE,IAAI,eAAe,CAAC;oBAClC,iBAAiB,EAAE,IAAK;oBACxB,aAAa,EAAE,KAAM;iBACtB,CAAC;gBACF,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC;aACvD,CAAC,CAAA;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACxC,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAM,CAAA;IAC5C,CAAC;IAEO,WAAW,CACjB,UAAgC,EAChC,WAA8C,EAC9C,MAA0B,EAC1B,QAA4B;QAE5B,OAAO,GAAG,UAAU,CAAC,IAAI,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAA;IACpG,CAAC;IAED;;;;OAIG;IACI,KAAK;QACV,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACzC,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,IAAI,KAAmB,CAAC;IAErC;;OAEG;IACI,sBAAsB;QAC3B,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACI,eAAe,CAAC,OAAmB,EAAE,QAAgB,EAAE,MAAc;QAC1E,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,sBAAsB,CAAC,MAA8B;QAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;QACzC,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAEO,iBAAiB,CAAC,kBAA6C;QACrE,OAAO,IAAI,qBAAqB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YAC/C,WAAW,EAAE,IAAI,kBAAkB,CAAC,kBAAkB,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;;AA3Ga,6BAAe,GAAG,IAAI,aAAa,EAAE,AAAtB,CAAsB"}

package/dist/esm/aws/auth.d.ts

@@ -0,0 +1,11 @@
+import { type AuthConfig } from '../config/config.js';
+import { type AwsCredentialProviderWithMetaData } from './coreAuth.js';
+/**
+ * Get credentials for the given account ID and auth configuration.
+ *
+ * @param accountId the AWS account ID for which to get credentials
+ * @param authConfig the authentication configuration to use for the account
+ * @returns new or cached credentials based on the provided account ID and auth configuration
+ */
+export declare function getCredentials(accountId: string, authConfig: AuthConfig | undefined): Promise<AwsCredentialProviderWithMetaData>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/esm/aws/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/aws/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,EAAE,KAAK,iCAAiC,EAA0B,MAAM,eAAe,CAAA;AA6D9F;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,OAAO,CAAC,iCAAiC,CAAC,CAuB5C"}

package/dist/esm/aws/auth.js

@@ -0,0 +1,78 @@
+import {} from '../config/config.js';
+import { log } from '@cloud-copilot/log';
+import { getNewCredentials, now } from './coreAuth.js';
+/**
+ * We cache credentials with a timeout
+ */
+const credentialsCache = new Map();
+// Currently using a static timeout
+const CREDENTIAL_CACHE_TIMEOUT = 300 * 1000;
+/**
+ * We cache requests for credentials to avoid multiple requests for the same accountId and authConfig.
+ */
+const credentialRequestCache = {};
+/**
+ * Generate a cache key for the given account ID and auth configuration.
+ *
+ * @param accountId the AWS account ID
+ * @param authConfig the authentication configuration, if any
+ * @returns a unique cache key for the credentials
+ */
+function credentialsCacheKey(accountId, authConfig) {
+    return authConfig ? `${accountId}:${JSON.stringify(authConfig)}` : accountId;
+}
+/**
+ * Get cached credentials for the given cache key, if they exist and are not expired.
+ *
+ * @param cacheKey the cache key to get credentials for
+ * @returns the cached credentials if they exist and are not expired, otherwise undefined
+ */
+function getCachedCredentials(cacheKey) {
+    const cached = credentialsCache.get(cacheKey);
+    if (cached && cached.expiration > Date.now()) {
+        return cached.credentials;
+    }
+    credentialsCache.delete(cacheKey);
+    return undefined;
+}
+/**
+ * Cache a set of credentials
+ *
+ * @param cacheKey the cache key to use for the credentials
+ * @param credentials the credentials to cache
+ */
+function setCachedCredentials(cacheKey, credentials) {
+    const expiration = now() + CREDENTIAL_CACHE_TIMEOUT;
+    credentialsCache.set(cacheKey, { expiration, credentials });
+}
+/**
+ * Get credentials for the given account ID and auth configuration.
+ *
+ * @param accountId the AWS account ID for which to get credentials
+ * @param authConfig the authentication configuration to use for the account
+ * @returns new or cached credentials based on the provided account ID and auth configuration
+ */
+export async function getCredentials(accountId, authConfig) {
+    const cacheKey = credentialsCacheKey(accountId, authConfig);
+    const cachedCredentials = getCachedCredentials(cacheKey);
+    if (cachedCredentials) {
+        log.trace({ accountId }, 'Using cached credentials');
+        return cachedCredentials;
+    }
+    if (credentialRequestCache[cacheKey] !== undefined) {
+        return credentialRequestCache[cacheKey];
+    }
+    //Create a new promise and store it in case another request comes in while this one is being processed.
+    return (credentialRequestCache[cacheKey] = (async () => {
+        try {
+            log.trace({ accountId }, 'Creating new credentials');
+            const newCredentials = await getNewCredentials(accountId, authConfig);
+            setCachedCredentials(cacheKey, newCredentials);
+            return newCredentials;
+        }
+        finally {
+            delete credentialRequestCache[cacheKey]; // Clean up the queue regardless of success or failure.
+        }
+    })());
+}
+//# sourceMappingURL=auth.js.map

package/dist/esm/aws/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/aws/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAA0C,iBAAiB,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAE9F;;GAEG;AACH,MAAM,gBAAgB,GAMlB,IAAI,GAAG,EAAE,CAAA;AAEb,mCAAmC;AACnC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAA;AAE3C;;GAEG;AACH,MAAM,sBAAsB,GAA+D,EAAE,CAAA;AAE7F;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,SAAiB,EAAE,UAAkC;IAChF,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9E,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,WAAW,CAAA;IAC3B,CAAC;IACD,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACjC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,WAA8C;IAE9C,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,wBAAwB,CAAA;IACnD,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,UAAkC;IAElC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAA;QACpD,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAED,IAAI,sBAAsB,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACzC,CAAC;IAED,uGAAuG;IACvG,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QACrD,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAA;YACpD,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YACrE,oBAAoB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;YAC9C,OAAO,cAAc,CAAA;QACvB,CAAC;gBAAS,CAAC;YACT,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAA,CAAC,uDAAuD;QACjG,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,CAAA;AACP,CAAC"}

package/dist/esm/aws/coreAuth.d.ts

@@ -0,0 +1,71 @@
+import { type AwsCredentialIdentity, type IdentityProvider, type RuntimeConfigIdentityProvider } from '@aws-sdk/types';
+import { type AuthConfig } from '../config/config.js';
+/**
+ * Credentials with additional metadata, including the AWS account ID and partition.
+ */
+export interface AwsCredentialIdentityWithMetaData extends AwsCredentialIdentity {
+    /**
+     * The AWS partition (e.g., 'aws', 'aws-cn', 'aws-us-gov').
+     */
+    partition: string;
+    /**
+     * The AWS account ID associated with these credentials.
+     */
+    accountId: string;
+}
+type AwsCredentialProviders = IdentityProvider<AwsCredentialIdentity> | RuntimeConfigIdentityProvider<AwsCredentialIdentity>;
+export type AwsCredentialProviderWithMetaData = {
+    provider: AwsCredentialProviders;
+    /**
+     * The AWS partition (e.g., 'aws', 'aws-cn', 'aws-us-gov').
+     */
+    partition: string;
+    /**
+     * The AWS account ID associated with these credentials.
+     */
+    accountId: string;
+    /**
+     * A unique cache key for these credentials.
+     */
+    cacheKey: string;
+};
+/**
+ * What time is it now?
+ *
+ * This exists to make unit tests of caching behavior easier.
+ *
+ * @returns the current timestamp in milliseconds since the Unix epoch
+ */
+export declare function now(): number;
+/**
+ * Get brand new credentials for the given account ID and auth configuration.
+ *
+ * DO NOT USE THIS DIRECTLY. Use `getCredentials` in `auth.ts` instead
+ *
+ * @param accountId the AWS account ID for which to get credentials
+ * @param authConfig the authentication configuration to use for the account
+ * @returns new credentials based on the provided account ID and auth configuration
+ */
+export declare function getNewCredentials(accountId: string, authConfig: AuthConfig | undefined): Promise<AwsCredentialProviderWithMetaData>;
+/**
+ * This gets a new set of initial credentials for an auth configuration. These are the initial
+ * credentials that are the default credentials are used to then assume a role if one is specified.
+ * There are very few cases where this should be used directly, and in most cases you should use
+ * getNewCredentials instead.
+ *
+ * @param authConfig the authentication configuration to use
+ * @param logInfo any additional information to log while getting the credentials
+ * @returns new credentials based on the provided auth configuration
+ */
+export declare function getNewInitialCredentials(authConfig: AuthConfig | undefined, logInfo?: Record<string, unknown>): Promise<AwsCredentialProviderWithMetaData>;
+/**
+ * Get the ARN for an IAM role.
+ *
+ * @param partition The partition the role is in (e.g. "aws", "aws-us-gov", "aws-cn").
+ * @param accountId The ID of the account the role is in.
+ * @param rolePathAndName The path and name of the role.
+ * @returns The ARN of the role.
+ */
+export declare function buildRoleArn(partition: string, accountId: string, rolePathAndName: string): string;
+export {};
+//# sourceMappingURL=coreAuth.d.ts.map

package/dist/esm/aws/coreAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coreAuth.d.ts","sourceRoot":"","sources":["../../../src/aws/coreAuth.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EACnC,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAKrD;;GAEG;AACH,MAAM,WAAW,iCAAkC,SAAQ,qBAAqB;IAC9E;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,KAAK,sBAAsB,GACzB,gBAAgB,CAAC,qBAAqB,CAAC,GAAG,6BAA6B,CAAC,qBAAqB,CAAC,CAAA;AAEhG,MAAM,MAAM,iCAAiC,GAAG;IAC9C,QAAQ,EAAE,sBAAsB,CAAA;IAEhC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,IAAI,MAAM,CAE5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,UAAU,GAAG,SAAS,GACjC,OAAO,CAAC,iCAAiC,CAAC,CAyC5C;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,UAAU,GAAG,SAAS,EAClC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,OAAO,CAAC,iCAAiC,CAAC,CAqD5C;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,MAAM,CAKR"}

package/dist/esm/aws/coreAuth.js

@@ -0,0 +1,129 @@
+import { fromIni, fromNodeProviderChain, fromTemporaryCredentials } from '@aws-sdk/credential-providers';
+import {} from '@aws-sdk/types';
+import {} from '../config/config.js';
+import { log } from '@cloud-copilot/log';
+import { randomCharacters, shortHash } from '../utils/strings.js';
+import { getTokenInfo } from './tokens.js';
+/**
+ * What time is it now?
+ *
+ * This exists to make unit tests of caching behavior easier.
+ *
+ * @returns the current timestamp in milliseconds since the Unix epoch
+ */
+export function now() {
+    return Date.now();
+}
+/**
+ * Get brand new credentials for the given account ID and auth configuration.
+ *
+ * DO NOT USE THIS DIRECTLY. Use `getCredentials` in `auth.ts` instead
+ *
+ * @param accountId the AWS account ID for which to get credentials
+ * @param authConfig the authentication configuration to use for the account
+ * @returns new credentials based on the provided account ID and auth configuration
+ */
+export async function getNewCredentials(accountId, authConfig) {
+    const cacheKey = await shortHash(JSON.stringify({ accountId, authConfig }));
+    const baseCredentials = await getNewInitialCredentials(authConfig, {
+        accountId
+    });
+    let credentials = baseCredentials;
+    if (authConfig?.role) {
+        const roleArn = buildRoleArn(baseCredentials.partition, accountId, authConfig.role.pathAndName);
+        log.trace({ accountId, roleArn, sourceAccount: baseCredentials.accountId }, 'Assuming role for account with credentials');
+        const roleProvider = fromTemporaryCredentials({
+            masterCredentials: baseCredentials.provider,
+            params: {
+                RoleArn: roleArn,
+                ExternalId: authConfig.role.externalId,
+                RoleSessionName: authConfig.role.sessionName || `iam-collect-${randomCharacters()}`
+            }
+        });
+        credentials = {
+            cacheKey,
+            provider: roleProvider,
+            accountId: accountId,
+            partition: baseCredentials.partition
+        };
+    }
+    else if (baseCredentials.accountId != accountId) {
+        // If the account ID from the credentials doesn't match the expected account ID and no role is specified
+        // throw an error to indicate that the credentials do not match the expected account
+        log.error('Auth config, account mismatch', {
+            desiredAccountId: accountId,
+            currentAccountId: baseCredentials.accountId
+        });
+        throw new Error(`The credentials provided do not match the expected account ID ${accountId}. Found ${baseCredentials.accountId}. Please check your auth configuration.`);
+    }
+    return credentials;
+}
+/**
+ * This gets a new set of initial credentials for an auth configuration. These are the initial
+ * credentials that are the default credentials are used to then assume a role if one is specified.
+ * There are very few cases where this should be used directly, and in most cases you should use
+ * getNewCredentials instead.
+ *
+ * @param authConfig the authentication configuration to use
+ * @param logInfo any additional information to log while getting the credentials
+ * @returns new credentials based on the provided auth configuration
+ */
+export async function getNewInitialCredentials(authConfig, logInfo = {}) {
+    let provider;
+    let credentials;
+    const cacheKey = await shortHash(JSON.stringify({ authConfig }));
+    if (authConfig?.profile) {
+        log.trace({ ...logInfo, profile: authConfig.profile }, 'Using profile for credentials');
+        provider = fromIni({ profile: authConfig.profile });
+        credentials = await provider();
+    }
+    else {
+        log.trace(logInfo, 'Using default SDK credential chain');
+        provider = fromNodeProviderChain();
+        credentials = await provider();
+    }
+    let tokenInfo = await getTokenInfo(credentials);
+    log.trace('initial credentials', tokenInfo);
+    if (authConfig?.initialRole) {
+        let roleArn;
+        if ('arn' in authConfig?.initialRole) {
+            roleArn = authConfig.initialRole.arn;
+        }
+        else {
+            roleArn = buildRoleArn(tokenInfo.partition, tokenInfo.accountId, authConfig.initialRole.pathAndName);
+        }
+        log.trace({ roleArn, sourceAccount: tokenInfo.accountId, ...logInfo }, 'Assuming initial role for account with credentials');
+        const roleProvider = fromTemporaryCredentials({
+            masterCredentials: credentials,
+            params: {
+                RoleArn: roleArn,
+                ExternalId: authConfig.initialRole.externalId,
+                RoleSessionName: authConfig.initialRole.sessionName || `iam-collect-${randomCharacters()}`
+            }
+        });
+        provider = roleProvider;
+        credentials = await roleProvider();
+        tokenInfo = await getTokenInfo(credentials);
+    }
+    return {
+        cacheKey,
+        provider,
+        accountId: tokenInfo.accountId,
+        partition: tokenInfo.partition
+    };
+}
+/**
+ * Get the ARN for an IAM role.
+ *
+ * @param partition The partition the role is in (e.g. "aws", "aws-us-gov", "aws-cn").
+ * @param accountId The ID of the account the role is in.
+ * @param rolePathAndName The path and name of the role.
+ * @returns The ARN of the role.
+ */
+export function buildRoleArn(partition, accountId, rolePathAndName) {
+    if (!rolePathAndName.startsWith('/')) {
+        rolePathAndName = `/${rolePathAndName}`;
+    }
+    return `arn:${partition}:iam::${accountId}:role${rolePathAndName}`;
+}
+//# sourceMappingURL=coreAuth.js.map

package/dist/esm/aws/coreAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coreAuth.js","sourceRoot":"","sources":["../../../src/aws/coreAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAIN,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAmB,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAuC1C;;;;;;GAMG;AACH,MAAM,UAAU,GAAG;IACjB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAA;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,UAAkC;IAElC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IAC3E,MAAM,eAAe,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE;QACjE,SAAS;KACV,CAAC,CAAA;IAEF,IAAI,WAAW,GAAG,eAAe,CAAA;IACjC,IAAI,UAAU,EAAE,IAAI,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC/F,GAAG,CAAC,KAAK,CACP,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,CAAC,SAAS,EAAE,EAChE,4CAA4C,CAC7C,CAAA;QACD,MAAM,YAAY,GAAG,wBAAwB,CAAC;YAC5C,iBAAiB,EAAE,eAAe,CAAC,QAAQ;YAC3C,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO;gBAChB,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,UAAU;gBACtC,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,eAAe,gBAAgB,EAAE,EAAE;aACpF;SACF,CAAC,CAAA;QAEF,WAAW,GAAG;YACZ,QAAQ;YACR,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAA;IACH,CAAC;SAAM,IAAI,eAAe,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QAClD,wGAAwG;QACxG,oFAAoF;QACpF,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACzC,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,eAAe,CAAC,SAAS;SAC5C,CAAC,CAAA;QACF,MAAM,IAAI,KAAK,CACb,iEAAiE,SAAS,WAAW,eAAe,CAAC,SAAS,yCAAyC,CACxJ,CAAA;IACH,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAkC,EAClC,UAAmC,EAAE;IAErC,IAAI,QAAgC,CAAA;IACpC,IAAI,WAAkC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IAChE,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAA;QACvF,QAAQ,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAA;QACnD,WAAW,GAAG,MAAM,QAAQ,EAAE,CAAA;IAChC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAA;QACxD,QAAQ,GAAG,qBAAqB,EAAE,CAAA;QAClC,WAAW,GAAG,MAAM,QAAQ,EAAE,CAAA;IAChC,CAAC;IAED,IAAI,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;IAC/C,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;IAE3C,IAAI,UAAU,EAAE,WAAW,EAAE,CAAC;QAC5B,IAAI,OAAe,CAAA;QACnB,IAAI,KAAK,IAAI,UAAU,EAAE,WAAW,EAAE,CAAC;YACrC,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAA;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,YAAY,CACpB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,SAAS,EACnB,UAAU,CAAC,WAAW,CAAC,WAAW,CACnC,CAAA;QACH,CAAC;QAED,GAAG,CAAC,KAAK,CACP,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,EAC3D,oDAAoD,CACrD,CAAA;QACD,MAAM,YAAY,GAAG,wBAAwB,CAAC;YAC5C,iBAAiB,EAAE,WAAW;YAC9B,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO;gBAChB,UAAU,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU;gBAC7C,eAAe,EAAE,UAAU,CAAC,WAAW,CAAC,WAAW,IAAI,eAAe,gBAAgB,EAAE,EAAE;aAC3F;SACF,CAAC,CAAA;QAEF,QAAQ,GAAG,YAAY,CAAA;QACvB,WAAW,GAAG,MAAM,YAAY,EAAE,CAAA;QAClC,SAAS,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC;IAED,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,SAAiB,EACjB,eAAuB;IAEvB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAA;IACzC,CAAC;IACD,OAAO,OAAO,SAAS,SAAS,SAAS,QAAQ,eAAe,EAAE,CAAA;AACpE,CAAC"}

package/dist/esm/aws/tokens.d.ts

@@ -0,0 +1,13 @@
+import { type AwsCredentialIdentity } from '@aws-sdk/types';
+/**
+ * Get the AWS account ID and partition from the provided credentials.
+ *
+ * @param credentials The AWS credentials to use for the request.
+ * @returns An object containing the AWS account ID and partition for the provided credentials.
+ */
+export declare function getTokenInfo(credentials: AwsCredentialIdentity): Promise<{
+    accountId: string;
+    partition: string;
+    arn: string;
+}>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/esm/aws/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../src/aws/tokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAE3D;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;CACZ,CAAC,CAaD"}

package/dist/esm/aws/tokens.js

@@ -0,0 +1,23 @@
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import {} from '@aws-sdk/types';
+/**
+ * Get the AWS account ID and partition from the provided credentials.
+ *
+ * @param credentials The AWS credentials to use for the request.
+ * @returns An object containing the AWS account ID and partition for the provided credentials.
+ */
+export async function getTokenInfo(credentials) {
+    const stsClient = new STSClient({ credentials });
+    const command = new GetCallerIdentityCommand({});
+    const response = await stsClient.send(command);
+    const accountId = response.Account;
+    const arn = response.Arn;
+    const arnParts = arn.split(':');
+    const partition = arnParts[1];
+    return {
+        accountId: accountId,
+        partition: partition,
+        arn: arn
+    };
+}
+//# sourceMappingURL=tokens.js.map

package/dist/esm/aws/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/aws/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACzE,OAAO,EAA8B,MAAM,gBAAgB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAkC;IAKnE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAA;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAA;IACxB,MAAM,QAAQ,GAAG,GAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC7B,OAAO;QACL,SAAS,EAAE,SAAU;QACrB,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,GAAI;KACV,CAAA;AACH,CAAC"}

package/dist/esm/awsConfigClients/AwsConfigClientContext.d.ts

@@ -0,0 +1,15 @@
+import { ConfigServiceClient } from '@aws-sdk/client-config-service';
+import { type AwsCredentialProviderWithMetaData } from '../aws/coreAuth.js';
+/**
+ * Custom client context for AWS Config-based implementations
+ */
+export interface AwsConfigClientContext {
+    configClient: ConfigServiceClient;
+    aggregatorName: string;
+    configCredentials: AwsCredentialProviderWithMetaData;
+}
+export declare const awsConfigCommand: <const Cmd extends import("../syncs/typedSync.js").CommandConstructors>(options: {
+    command: Cmd;
+    execute: (input: import("../syncs/typedSync.js").ExtractInputType<Cmd>, context: import("../customClients/AbstractCommand.js").CommandContext & AwsConfigClientContext) => Promise<Partial<import("../syncs/typedSync.js").ExtractOutputType<Cmd>> | undefined>;
+}) => import("../customClients/AbstractCommand.js").CustomCommand<Cmd, AwsConfigClientContext>;
+//# sourceMappingURL=AwsConfigClientContext.d.ts.map

package/dist/esm/awsConfigClients/AwsConfigClientContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigClientContext.d.ts","sourceRoot":"","sources":["../../../src/awsConfigClients/AwsConfigClientContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,oBAAoB,CAAA;AAG3E;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,mBAAmB,CAAA;IACjC,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,iCAAiC,CAAA;CACrD;AAED,eAAO,MAAM,gBAAgB;;;8FAAiD,CAAA"}

package/dist/esm/awsConfigClients/AwsConfigClientContext.js

@@ -0,0 +1,5 @@
+import { ConfigServiceClient } from '@aws-sdk/client-config-service';
+import {} from '../aws/coreAuth.js';
+import { customCommandFactory } from '../customClients/AbstractCommand.js';
+export const awsConfigCommand = customCommandFactory();
+//# sourceMappingURL=AwsConfigClientContext.js.map

package/dist/esm/awsConfigClients/AwsConfigClientContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigClientContext.js","sourceRoot":"","sources":["../../../src/awsConfigClients/AwsConfigClientContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,EAA0C,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAW1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,EAA0B,CAAA"}

package/dist/esm/awsConfigClients/AwsConfigClientPool.d.ts

@@ -0,0 +1,40 @@
+import { type AwsCredentialProviderWithMetaData } from '../aws/coreAuth.js';
+import { type AuthConfig } from '../config/config.js';
+import { type ClientConstructor } from '../customClients/AbstractClient.js';
+import { AbstractClientPool } from '../customClients/AbstractClientPool.js';
+import { type AwsService } from '../services.js';
+import { type AwsConfigClientContext } from './AwsConfigClientContext.js';
+interface AwsConfigClientPoolOptions {
+    aggregatorName: string;
+    region: string;
+    accountId?: string;
+    auth?: AuthConfig;
+}
+/**
+ * AWS Config-based client pool using the new abstract base classes
+ */
+export declare class AwsConfigClientPool extends AbstractClientPool<AwsConfigClientContext> {
+    private readonly options;
+    private configClient;
+    private aggregatorName;
+    private configCredentials;
+    /**
+     * Constructor
+     *
+     * @param options Options for the Config client pool
+     */
+    constructor(options: AwsConfigClientPoolOptions);
+    init(): Promise<void>;
+    requiresAwsCredentials(): boolean;
+    /**
+     * Register the default supported Config-based clients
+     */
+    protected registerDefaultClients(): void;
+    /**
+     * Get custom client context for Config-based implementations
+     */
+    protected getClientContext(ClientType: ClientConstructor<any>, credentials: AwsCredentialProviderWithMetaData, region: string | undefined, endpoint: string | undefined): AwsConfigClientContext;
+    isSyncSupported(service: AwsService, syncName: string, region: string): boolean;
+}
+export {};
+//# sourceMappingURL=AwsConfigClientPool.d.ts.map

package/dist/esm/awsConfigClients/AwsConfigClientPool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigClientPool.d.ts","sourceRoot":"","sources":["../../../src/awsConfigClients/AwsConfigClientPool.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,iCAAiC,EAEvC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAuBzE,UAAU,0BAA0B;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAgBD;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,kBAAkB,CAAC,sBAAsB,CAAC;IAUrE,OAAO,CAAC,QAAQ,CAAC,OAAO;IATpC,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,iBAAiB,CAA+C;IAExE;;;;OAIG;gBAC0B,OAAO,EAAE,0BAA0B;IAI1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B,sBAAsB,IAAI,OAAO;IAIjD;;OAEG;cACgB,sBAAsB,IAAI,IAAI;IAwBjD;;OAEG;cACgB,gBAAgB,CACjC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAClC,WAAW,EAAE,iCAAiC,EAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,sBAAsB;IAQT,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;CAkBhG"}