@actsecurity/iam-collect 0.1.215

package/dist/esm/awsConfigClients/AwsConfigClientPool.js

@@ -0,0 +1,128 @@
+import { ConfigServiceClient } from '@aws-sdk/client-config-service';
+import { getCredentials } from '../aws/auth.js';
+import { AwsClientPool } from '../aws/ClientPool.js';
+import { getNewInitialCredentials } from '../aws/coreAuth.js';
+import {} from '../config/config.js';
+import {} from '../customClients/AbstractClient.js';
+import { AbstractClientPool } from '../customClients/AbstractClientPool.js';
+import {} from '../services.js';
+import {} from './AwsConfigClientContext.js';
+import { AwsConfigAccountClient } from './clients/AwsConfigAccountClient.js';
+import { AwsConfigApiGatewayClient } from './clients/AwsConfigApiGatewayClient.js';
+import { AwsConfigBackupClient } from './clients/AwsConfigBackupClient.js';
+import { AwsConfigDynamoDBClient } from './clients/AwsConfigDynamoDBClient.js';
+import { AwsConfigEC2Client } from './clients/AwsConfigEC2Client.js';
+import { AwsConfigEcrClient } from './clients/AwsConfigEcrClient.js';
+import { AwsConfigEfsClient } from './clients/AwsConfigEfsClient.js';
+import { AwsConfigEventBridgeClient } from './clients/AwsConfigEventBridgeClient.js';
+import { AwsConfigGlueClient } from './clients/AwsConfigGlueClient.js';
+import { AwsConfigIamClient } from './clients/AwsConfigIamClient.js';
+import { AwsConfigKafkaClient } from './clients/AwsConfigKafkaClient.js';
+import { AwsConfigKinesisClient } from './clients/AwsConfigKinesisClient.js';
+import { AwsConfigKmsClient } from './clients/AwsConfigKmsClient.js';
+import { AwsConfigLambdaClient } from './clients/AwsConfigLambdaClient.js';
+import { AwsConfigOpenSearchClient } from './clients/AwsConfigOpenSearchClient.js';
+import { AwsConfigOrganizationsClient } from './clients/AwsConfigOrganizationsClient.js';
+import { AwsConfigS3Client } from './clients/AwsConfigS3Client.js';
+import { AwsConfigS3ControlClient } from './clients/AwsConfigS3ControlClient.js';
+import { AwsConfigSecretsManagerClient } from './clients/AwsConfigSecretsManagerClient.js';
+import { AwsConfigSNSClient } from './clients/AwsConfigSNSClient.js';
+import { AwsConfigSQSClient } from './clients/AwsConfigSQSClient.js';
+const fullySupportedServices = new Set([
+    'backup',
+    'ec2',
+    'ecr',
+    'elasticfilesystem',
+    'es',
+    'events',
+    'iam',
+    'kafka',
+    'kms',
+    'sns',
+    'sqs'
+]);
+/**
+ * AWS Config-based client pool using the new abstract base classes
+ */
+export class AwsConfigClientPool extends AbstractClientPool {
+    /**
+     * Constructor
+     *
+     * @param options Options for the Config client pool
+     */
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    async init() {
+        this.aggregatorName = this.options.aggregatorName;
+        const authConfig = this.options.auth;
+        const defaultCredentials = await getNewInitialCredentials(authConfig, {
+            phase: 'initial AwsConfig credentials'
+        });
+        let credentials = defaultCredentials;
+        if (this.options.accountId || authConfig?.role) {
+            const targetAccountId = this.options.accountId || credentials.accountId;
+            credentials = await getCredentials(targetAccountId, authConfig);
+        }
+        this.configCredentials = credentials;
+        this.configClient = AwsClientPool.defaultInstance.client(ConfigServiceClient, credentials, this.options.region, undefined);
+    }
+    requiresAwsCredentials() {
+        return false;
+    }
+    /**
+     * Register the default supported Config-based clients
+     */
+    registerDefaultClients() {
+        this.registerClient(AwsConfigAccountClient);
+        this.registerClient(AwsConfigApiGatewayClient);
+        this.registerClient(AwsConfigBackupClient);
+        this.registerClient(AwsConfigDynamoDBClient);
+        this.registerClient(AwsConfigEC2Client);
+        this.registerClient(AwsConfigEcrClient);
+        this.registerClient(AwsConfigEfsClient);
+        this.registerClient(AwsConfigEventBridgeClient);
+        this.registerClient(AwsConfigGlueClient);
+        this.registerClient(AwsConfigIamClient);
+        this.registerClient(AwsConfigKafkaClient);
+        this.registerClient(AwsConfigKinesisClient);
+        this.registerClient(AwsConfigKmsClient);
+        this.registerClient(AwsConfigLambdaClient);
+        this.registerClient(AwsConfigOpenSearchClient);
+        this.registerClient(AwsConfigOrganizationsClient);
+        this.registerClient(AwsConfigS3Client);
+        this.registerClient(AwsConfigS3ControlClient);
+        this.registerClient(AwsConfigSecretsManagerClient);
+        this.registerClient(AwsConfigSNSClient);
+        this.registerClient(AwsConfigSQSClient);
+    }
+    /**
+     * Get custom client context for Config-based implementations
+     */
+    getClientContext(ClientType, credentials, region, endpoint) {
+        return {
+            configClient: this.configClient,
+            aggregatorName: this.aggregatorName,
+            configCredentials: this.configCredentials
+        };
+    }
+    isSyncSupported(service, syncName, region) {
+        const fullySupported = fullySupportedServices.has(service);
+        if (fullySupported) {
+            return true;
+        }
+        if (service === 'lambda') {
+            return syncName === 'lambdaFunctions';
+        }
+        if (service === 's3') {
+            return ['generalPurposeBuckets', 'accessPoints', 'accountBpa'].includes(syncName);
+        }
+        if (service === 's3express') {
+            return syncName === 'directoryBuckets';
+        }
+        // By default, nothing is supported
+        return false;
+    }
+}
+//# sourceMappingURL=AwsConfigClientPool.js.map

package/dist/esm/awsConfigClients/AwsConfigClientPool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigClientPool.js","sourceRoot":"","sources":["../../../src/awsConfigClients/AwsConfigClientPool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAEL,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAmB,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAA0B,MAAM,oCAAoC,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAmB,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAA+B,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAA;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAA;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAA;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAA;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAA;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AASpE,MAAM,sBAAsB,GAAoB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,IAAI;IACJ,QAAQ;IACR,KAAK;IACL,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,kBAA0C;IAKjF;;;;OAIG;IACH,YAA6B,OAAmC;QAC9D,KAAK,EAAE,CAAA;QADoB,YAAO,GAAP,OAAO,CAA4B;IAEhE,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAA;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;QACpC,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE;YACpE,KAAK,EAAE,+BAA+B;SACvC,CAAC,CAAA;QACF,IAAI,WAAW,GAAG,kBAAkB,CAAA;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,IAAI,EAAE,CAAC;YAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,CAAA;YACvE,WAAW,GAAG,MAAM,cAAc,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAA;QACpC,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CACtD,mBAAmB,EACnB,WAAW,EACX,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,SAAS,CACV,CAAA;IACH,CAAC;IAEe,sBAAsB;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACgB,sBAAsB;QACvC,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAA;QAC3C,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAA;QAC9C,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAA;QAC1C,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAA;QAC5C,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAA;QAC/C,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;QACxC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAA;QACzC,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAA;QAC3C,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAA;QAC1C,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAA;QAC9C,IAAI,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAAA;QACjD,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAA;QACtC,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAA;QAC7C,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC,CAAA;QAClD,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACvC,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;IACzC,CAAC;IAED;;OAEG;IACgB,gBAAgB,CACjC,UAAkC,EAClC,WAA8C,EAC9C,MAA0B,EAC1B,QAA4B;QAE5B,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAa;YAChC,cAAc,EAAE,IAAI,CAAC,cAAe;YACpC,iBAAiB,EAAE,IAAI,CAAC,iBAAkB;SAC3C,CAAA;IACH,CAAC;IAEe,eAAe,CAAC,OAAmB,EAAE,QAAgB,EAAE,MAAc;QACnF,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,QAAQ,KAAK,iBAAiB,CAAA;QACvC,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,uBAAuB,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,QAAQ,KAAK,kBAAkB,CAAA;QACxC,CAAC;QAED,mCAAmC;QACnC,OAAO,KAAK,CAAA;IACd,CAAC;CACF"}

package/dist/esm/awsConfigClients/awsConfigUtils.d.ts

@@ -0,0 +1,30 @@
+import { type AwsConfigClientContext } from './AwsConfigClientContext.js';
+/**
+ * Common utility functions for AWS Config-based command implementations
+ */
+/**
+ * Execute AWS Config query and return all paginated results
+ *
+ * @param query The AWS Config query string
+ * @param context The AWS Config client context
+ *
+ * @returns An array of results
+ */
+export declare function executeConfigQuery(query: string, context: AwsConfigClientContext): Promise<string[]>;
+/**
+ * Parse a Config result item into structured data
+ *
+ * @param configItemString The JSON string of the config item
+ * @returns An object containing the parsed config item and its components
+ */
+export declare function parseConfigItem(configItemString: string): {
+    configItem: any;
+    configuration: any | undefined;
+    supplementaryConfiguration: any | undefined;
+    tags: any;
+};
+/**
+ * Where clause to filter for resources that are active/discovered
+ */
+export declare const resourceStatusWhereClause = "configurationItemStatus IN ('ResourceDiscovered', 'OK')";
+//# sourceMappingURL=awsConfigUtils.d.ts.map

package/dist/esm/awsConfigClients/awsConfigUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsConfigUtils.d.ts","sourceRoot":"","sources":["../../../src/awsConfigClients/awsConfigUtils.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE;;GAEG;AAEH;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,MAAM,EAAE,CAAC,CAyBnB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG;IACzD,UAAU,EAAE,GAAG,CAAA;IACf,aAAa,EAAE,GAAG,GAAG,SAAS,CAAA;IAC9B,0BAA0B,EAAE,GAAG,GAAG,SAAS,CAAA;IAC3C,IAAI,EAAE,GAAG,CAAA;CACV,CAkBA;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,4DAA4D,CAAA"}

package/dist/esm/awsConfigClients/awsConfigUtils.js

@@ -0,0 +1,60 @@
+import { SelectAggregateResourceConfigCommand } from '@aws-sdk/client-config-service';
+import {} from './AwsConfigClientContext.js';
+/**
+ * Common utility functions for AWS Config-based command implementations
+ */
+/**
+ * Execute AWS Config query and return all paginated results
+ *
+ * @param query The AWS Config query string
+ * @param context The AWS Config client context
+ *
+ * @returns An array of results
+ */
+export async function executeConfigQuery(query, context) {
+    const { configClient } = context;
+    const allResults = [];
+    let nextToken = undefined;
+    do {
+        const result = await configClient.send(new SelectAggregateResourceConfigCommand({
+            ConfigurationAggregatorName: context.aggregatorName,
+            Expression: query,
+            MaxResults: 100,
+            NextToken: nextToken
+        }));
+        // Add current page results to the collection
+        if (result.Results) {
+            allResults.push(...result.Results);
+        }
+        // Update nextToken for next iteration
+        nextToken = result.NextToken;
+    } while (nextToken);
+    return allResults;
+}
+/**
+ * Parse a Config result item into structured data
+ *
+ * @param configItemString The JSON string of the config item
+ * @returns An object containing the parsed config item and its components
+ */
+export function parseConfigItem(configItemString) {
+    const configItem = JSON.parse(configItemString);
+    let configuration = configItem.configuration;
+    if (typeof configuration === 'string') {
+        configuration = JSON.parse(configuration || '{}');
+    }
+    let supplementaryConfiguration = configItem.supplementaryConfiguration;
+    if (typeof supplementaryConfiguration === 'string') {
+        supplementaryConfiguration = JSON.parse(supplementaryConfiguration || '{}');
+    }
+    let tags = configItem.tags;
+    if (typeof tags === 'string') {
+        tags = JSON.parse(tags || '{}');
+    }
+    return { configItem, configuration, supplementaryConfiguration, tags };
+}
+/**
+ * Where clause to filter for resources that are active/discovered
+ */
+export const resourceStatusWhereClause = `configurationItemStatus IN ('ResourceDiscovered', 'OK')`;
+//# sourceMappingURL=awsConfigUtils.js.map

package/dist/esm/awsConfigClients/awsConfigUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsConfigUtils.js","sourceRoot":"","sources":["../../../src/awsConfigClients/awsConfigUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EAErC,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAA+B,MAAM,6BAA6B,CAAA;AAEzE;;GAEG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,OAA+B;IAE/B,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,SAAS,GAAuB,SAAS,CAAA;IAE7C,GAAG,CAAC;QACF,MAAM,MAAM,GAA+C,MAAM,YAAY,CAAC,IAAI,CAChF,IAAI,oCAAoC,CAAC;YACvC,2BAA2B,EAAE,OAAO,CAAC,cAAc;YACnD,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,SAAS;SACrB,CAAC,CACH,CAAA;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAED,sCAAsC;QACtC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAC9B,CAAC,QAAQ,SAAS,EAAC;IAEnB,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,gBAAwB;IAMtD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC/C,IAAI,aAAa,GAAG,UAAU,CAAC,aAAa,CAAA;IAC5C,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,0BAA0B,GAAG,UAAU,CAAC,0BAA0B,CAAA;IACtE,IAAI,OAAO,0BAA0B,KAAK,QAAQ,EAAE,CAAC;QACnD,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,IAAI,CAAC,CAAA;IAC7E,CAAC;IAED,IAAI,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAA;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yDAAyD,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigAccountClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * Account client implementation using AWS Config as data source
+ */
+export declare class AwsConfigAccountClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Account command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigAccountClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigAccountClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigAccountClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigAccountClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAG5F;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAqB;gBAG7C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CA8CnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigAccountClient.js

@@ -0,0 +1,57 @@
+import { AccountClient, ListRegionsCommand } from '@aws-sdk/client-account';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * Account client implementation using AWS Config as data source
+ */
+export class AwsConfigAccountClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Account command implementations
+     */
+    registerCommands() {
+        this.registerCommand(awsConfigCommand({
+            command: ListRegionsCommand,
+            execute: async (input, context) => {
+                const globalRegion = 'us-east-1';
+                const partition = context.partition;
+                if (partition !== 'aws') {
+                    throw new Error(`Unknown global region for partition ${partition}. Please file an issue with the default region for your partition.`);
+                }
+                const accountId = context.accountId;
+                const query = `
+            SELECT
+              awsRegion
+            WHERE
+              accountId = '${accountId}'
+              AND ${resourceStatusWhereClause}
+            GROUP BY
+              awsRegion
+          `;
+                const results = await executeConfigQuery(query, context);
+                // Convert the results to the expected format
+                const uniqueRegions = new Set();
+                results.forEach((resultString) => {
+                    const result = JSON.parse(resultString);
+                    if (result.awsRegion === 'global') {
+                        uniqueRegions.add(globalRegion);
+                    }
+                    else if (result.awsRegion) {
+                        uniqueRegions.add(result.awsRegion);
+                    }
+                });
+                return {
+                    Regions: Array.from(uniqueRegions).map((regionName) => ({
+                        RegionName: regionName
+                    }))
+                };
+            }
+        }));
+    }
+}
+AwsConfigAccountClient.clientName = AccountClient.name;
+//# sourceMappingURL=AwsConfigAccountClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigAccountClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigAccountClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigAccountClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC3E,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAEpF;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,cAAsC;IAGhF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAClB,gBAAgB,CAAC;YACf,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBAChC,MAAM,YAAY,GAAG,WAAW,CAAA;gBAChC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;gBACnC,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CACb,uCAAuC,SAAS,oEAAoE,CACrH,CAAA;gBACH,CAAC;gBAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;gBACnC,MAAM,KAAK,GAAG;;;;6BAIK,SAAS;oBAClB,yBAAyB;;;WAGlC,CAAA;gBAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;gBAExD,6CAA6C;gBAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;gBACvC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;oBAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;oBACvC,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAClC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;oBACjC,CAAC;yBAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBAC5B,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;oBACrC,CAAC;gBACH,CAAC,CAAC,CAAA;gBAEF,OAAO;oBACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;wBACtD,UAAU,EAAE,UAAU;qBACvB,CAAC,CAAC;iBACJ,CAAA;YACH,CAAC;SACF,CAAC,CACH,CAAA;IACH,CAAC;;AA5De,iCAAU,GAAG,aAAa,CAAC,IAAI,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigApiGatewayClient.d.ts

@@ -0,0 +1,21 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * API Gateway client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigApiGatewayClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all API Gateway command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigApiGatewayClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigApiGatewayClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigApiGatewayClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigApiGatewayClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACnF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAwB;gBAGhD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAGnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigApiGatewayClient.js

@@ -0,0 +1,34 @@
+import { APIGatewayClient, GetRestApisCommand } from '@aws-sdk/client-api-gateway';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+/**
+ * API Gateway client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export class AwsConfigApiGatewayClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all API Gateway command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetRestApisCommand);
+    }
+}
+AwsConfigApiGatewayClient.clientName = APIGatewayClient.name;
+/**
+ * Config-based implementation of API Gateway GetRestApisCommand
+ */
+const AwsConfigGetRestApisCommand = awsConfigCommand({
+    command: GetRestApisCommand,
+    execute: async (input, context) => {
+        return {
+            items: [] // API Gateway is not fully supported in Config, so return empty result
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigApiGatewayClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigApiGatewayClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigApiGatewayClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigApiGatewayClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAClF,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE5F;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,cAAsC;IAGnF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAA;IACnD,CAAC;;AAjBe,oCAAU,GAAG,gBAAgB,CAAC,IAAI,CAAA;AAoBpD;;GAEG;AACH,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IACnD,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,OAAO;YACL,KAAK,EAAE,EAAE,CAAC,uEAAuE;SAClF,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigBackupClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Backup client implementation
+ */
+export declare class AwsConfigBackupClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Backup command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigBackupClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigBackupClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigBackupClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigBackupClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAEtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC/E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAoB;gBAG5C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigBackupClient.js

@@ -0,0 +1,95 @@
+import { BackupClient, GetBackupVaultAccessPolicyCommand, ListBackupVaultsCommand, ListTagsCommand } from '@aws-sdk/client-backup';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { stringifyIfPresent } from '../../utils/json.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based Backup client implementation
+ */
+export class AwsConfigBackupClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Backup command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetBackupVaultAccessPolicyCommand);
+        this.registerCommand(AwsConfigListBackupVaultsCommand);
+        this.registerCommand(AwsConfigListTagsCommand);
+    }
+}
+AwsConfigBackupClient.clientName = BackupClient.name;
+/**
+ * Config-based implementation of Backup ListBackupVaultsCommand
+ * Retrieves backup vault list from AWS Config
+ */
+const AwsConfigListBackupVaultsCommand = awsConfigCommand({
+    command: ListBackupVaultsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        resourceName,
+        arn,
+        configuration.BackupVaultName,
+        configuration.BackupVaultArn,
+        configuration.EncryptionKeyArn,
+        configuration.AccessPolicy,
+        resourceCreationTime,
+        tags
+      WHERE
+        resourceType = 'AWS::Backup::BackupVault'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        // Transform Config results to match AWS SDK format
+        const vaultList = results
+            .map((resultString) => {
+            const { configItem, configuration, tags } = parseConfigItem(resultString);
+            // Cache data that will be needed by other commands
+            const vaultName = configuration?.BackupVaultName || configItem.resourceName;
+            context.putCache(vaultName, 'configuration', configuration);
+            context.putCache(configItem.arn, 'tags', tags);
+            return {
+                BackupVaultName: vaultName,
+                BackupVaultArn: configuration?.BackupVaultArn || configItem.arn,
+                EncryptionKeyArn: configuration?.EncryptionKeyArn
+            };
+        })
+            .filter((vault) => vault.BackupVaultName); // Filter out any malformed entries
+        return {
+            BackupVaultList: vaultList,
+            NextToken: undefined // Config doesn't support pagination in this context
+        };
+    }
+});
+/**
+ * Config-based implementation of Backup GetBackupVaultAccessPolicyCommand
+ * Uses configuration.AccessPolicy from AWS Config BackupVault resource
+ */
+const AwsConfigGetBackupVaultAccessPolicyCommand = awsConfigCommand({
+    command: GetBackupVaultAccessPolicyCommand,
+    execute: async (input, context) => {
+        const configuration = context.getCache(input.BackupVaultName, 'configuration');
+        return {
+            BackupVaultName: input.BackupVaultName,
+            BackupVaultArn: configuration.BackupVaultArn,
+            Policy: stringifyIfPresent(configuration?.AccessPolicy)
+        };
+    }
+});
+/**
+ * Config-based implementation of Backup ListTagsCommand
+ * Retrieves tags for a specific backup vault from AWS Config
+ */
+const AwsConfigListTagsCommand = awsConfigCommand({
+    command: ListTagsCommand,
+    execute: async (input, context) => {
+        const tags = context.getCache(input.ResourceArn, 'tags');
+        return { Tags: tags };
+    }
+});
+//# sourceMappingURL=AwsConfigBackupClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigBackupClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigBackupClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigBackupClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,iCAAiC,EACjC,uBAAuB,EACvB,eAAe,EAChB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,cAAsC;IAG/E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,0CAA0C,CAAC,CAAA;QAChE,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;IAChD,CAAC;;AAnBe,gCAAU,GAAG,YAAY,CAAC,IAAI,CAAA;AAsBhD;;;GAGG;AACH,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IACxD,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,mDAAmD;QACnD,MAAM,SAAS,GAAG,OAAO;aACtB,GAAG,CAAC,CAAC,YAAoB,EAAE,EAAE;YAC5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAEzE,mDAAmD;YACnD,MAAM,SAAS,GAAG,aAAa,EAAE,eAAe,IAAI,UAAU,CAAC,YAAY,CAAA;YAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE9C,OAAO;gBACL,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,aAAa,EAAE,cAAc,IAAI,UAAU,CAAC,GAAG;gBAC/D,gBAAgB,EAAE,aAAa,EAAE,gBAAgB;aAClD,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA,CAAC,mCAAmC;QAEpF,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,SAAS,EAAE,SAAS,CAAC,oDAAoD;SAC1E,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,0CAA0C,GAAG,gBAAgB,CAAC;IAClE,OAAO,EAAE,iCAAiC;IAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAgB,EAAE,eAAe,CAAC,CAAA;QAE/E,OAAO;YACL,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,MAAM,EAAE,kBAAkB,CAAC,aAAa,EAAE,YAAY,CAAC;SACxD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;IAChD,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAY,EAAE,MAAM,CAAC,CAAA;QAEzD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvB,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigDynamoDBClient.d.ts

@@ -0,0 +1,21 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based DynamoDB client implementation
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigDynamoDBClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all DynamoDB command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigDynamoDBClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigDynamoDBClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigDynamoDBClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigDynamoDBClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACjF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAsB;gBAG9C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAInC"}

package/dist/esm/awsConfigClients/clients/AwsConfigDynamoDBClient.js

@@ -0,0 +1,57 @@
+import { DynamoDBClient, ListTablesCommand, ListTagsOfResourceCommand } from '@aws-sdk/client-dynamodb';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based DynamoDB client implementation
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export class AwsConfigDynamoDBClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all DynamoDB command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListTablesCommand);
+        this.registerCommand(AwsConfigListTagsOfResourceCommand);
+    }
+}
+AwsConfigDynamoDBClient.clientName = DynamoDBClient.name;
+/**
+ * Config-based implementation of DynamoDB ListTablesCommand
+ *
+ * Note: DynamoDB resource policies are not available in AWS Config.
+ * Without policy data, this service provides no meaningful value for IAM analysis.
+ * Returning empty result to indicate no actionable data available.
+ */
+const AwsConfigListTablesCommand = awsConfigCommand({
+    command: ListTablesCommand,
+    execute: async (input, context) => {
+        // Note: DynamoDB resource policies are not available in AWS Config.
+        // Without policy data, this service provides no meaningful value for IAM analysis.
+        return {
+            TableNames: [] // Empty - no actionable data without policies
+        };
+    }
+});
+/**
+ * Config-based implementation of DynamoDB ListTagsOfResourceCommand
+ *
+ * Note: DynamoDB resource policies are not available in AWS Config.
+ * Without policy data, tag information provides no meaningful value for IAM analysis.
+ * Returning empty result to indicate no actionable data available.
+ */
+const AwsConfigListTagsOfResourceCommand = awsConfigCommand({
+    command: ListTagsOfResourceCommand,
+    execute: async (input, context) => {
+        // Note: Without resource policies, tag information provides no IAM analysis value
+        return {
+            Tags: [] // Empty - no actionable data without policies
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigDynamoDBClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigDynamoDBClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigDynamoDBClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigDynamoDBClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE5F;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,cAAsC;IAGjF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;QAChD,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;IAC1D,CAAC;;AAlBe,kCAAU,GAAG,cAAc,CAAC,IAAI,CAAA;AAqBlD;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IAClD,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,oEAAoE;QACpE,mFAAmF;QACnF,OAAO;YACL,UAAU,EAAE,EAAE,CAAC,8CAA8C;SAC9D,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;IAC1D,OAAO,EAAE,yBAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,kFAAkF;QAClF,OAAO;YACL,IAAI,EAAE,EAAE,CAAC,8CAA8C;SACxD,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigEC2Client.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based EC2 client implementation
+ */
+export declare class AwsConfigEC2Client extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all EC2 command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigEC2Client.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigEC2Client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEC2Client.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEC2Client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAGnC"}