@actsecurity/iam-collect 0.1.215

package/dist/esm/awsConfigClients/clients/AwsConfigIamClient.js

@@ -0,0 +1,436 @@
+import { GetAccountAuthorizationDetailsCommand, GetOpenIDConnectProviderCommand, GetPolicyCommand, GetPolicyVersionCommand, GetSAMLProviderCommand, IAMClient, ListInstanceProfilesCommand, ListOpenIDConnectProvidersCommand, ListPolicyTagsCommand, ListSAMLProvidersCommand } from '@aws-sdk/client-iam';
+import { splitArnParts } from '@actsecurity/iam-utils';
+import { AwsClientPool } from '../../aws/ClientPool.js';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based IAM client implementation
+ */
+export class AwsConfigIamClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all IAM command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetAccountAuthorizationDetailsCommand);
+        this.registerCommand(AwsConfigGetOpenIDConnectProviderCommand);
+        this.registerCommand(AwsConfigGetSAMLProviderCommand);
+        this.registerCommand(AwsConfigListInstanceProfilesCommand);
+        this.registerCommand(AwsConfigListOpenIDConnectProvidersCommand);
+        this.registerCommand(AwsConfigListSAMLProvidersCommand);
+        this.registerCommand(AwsConfigListPolicyTagsCommand);
+    }
+}
+AwsConfigIamClient.clientName = IAMClient.name;
+/**
+ * Config-based implementation of IAM GetAccountAuthorizationDetailsCommand
+ *
+ * Aggregates IAM data from multiple Config resource types:
+ * - AWS::IAM::Role for roles
+ * - AWS::IAM::User for users
+ * - AWS::IAM::Group for groups
+ * - AWS::IAM::Policy for managed policies
+ */
+const AwsConfigGetAccountAuthorizationDetailsCommand = awsConfigCommand({
+    command: GetAccountAuthorizationDetailsCommand,
+    execute: async (input, context) => {
+        const nativeIamClient = AwsClientPool.defaultInstance.client(IAMClient, context.configCredentials, context.region, undefined);
+        const awsManagedPoliciesToFetch = new Set();
+        // Query roles from Config
+        const rolesQuery = `
+      SELECT
+        configuration.arn,
+        configuration.roleName,
+        configuration.path,
+        configuration.roleId,
+        configuration.createDate,
+        configuration.assumeRolePolicyDocument,
+        configuration.attachedManagedPolicies,
+        configuration.instanceProfileList,
+        configuration.rolePolicyList,
+        configuration.permissionsBoundary,
+        configuration.roleLastUsed,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Role'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        // Query users from Config
+        const usersQuery = `
+      SELECT
+        configuration.arn,
+        configuration.userName,
+        configuration.path,
+        configuration.userId,
+        configuration.createDate,
+        configuration.attachedManagedPolicies,
+        configuration.groupList,
+        configuration.userPolicyList,
+        configuration.permissionsBoundary,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::User'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        // Query groups from Config
+        const groupsQuery = `
+      SELECT
+        configuration.arn,
+        configuration.groupName,
+        configuration.path,
+        configuration.groupId,
+        configuration.createDate,
+        configuration.attachedManagedPolicies,
+        configuration.groupPolicyList,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Group'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        // Query policies from Config
+        const policiesQuery = `
+      SELECT
+        configuration.policyName,
+        configuration.policyId,
+        configuration.arn,
+        configuration.path,
+        configuration.createDate,
+        configuration.updateDate,
+        configuration.policyVersionList,
+        configuration.attachmentCount,
+        configuration.permissionsBoundaryUsageCount,
+        configuration.isAttachable,
+        configuration.description,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Policy'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        // Execute all queries
+        const [rolesResults, usersResults, groupsResults, policiesResults] = await Promise.all([
+            executeConfigQuery(rolesQuery, context),
+            executeConfigQuery(usersQuery, context),
+            executeConfigQuery(groupsQuery, context),
+            executeConfigQuery(policiesQuery, context)
+        ]);
+        // Transform Config data to IAM format and collect AWS managed policies
+        const roles = rolesResults.map((resultString) => {
+            const { configuration, tags } = parseConfigItem(resultString);
+            // Collect AWS managed policies from this role
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                RoleName: configuration.roleName,
+                Path: configuration.path,
+                RoleId: configuration.roleId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AssumeRolePolicyDocument: configuration.assumeRolePolicyDocument,
+                AttachedManagedPolicies: configuration.attachedManagedPolicies?.map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                InstanceProfileList: configuration.instanceProfileList,
+                RolePolicyList: configuration.rolePolicyList.map((rp) => ({
+                    PolicyName: rp.policyName,
+                    PolicyDocument: rp.policyDocument
+                })),
+                Tags: tags,
+                PermissionsBoundary: configuration.permissionsBoundary,
+                RoleLastUsed: configuration.roleLastUsed
+            };
+        });
+        const users = usersResults.map((resultString) => {
+            const { configuration, tags } = parseConfigItem(resultString);
+            // Collect AWS managed policies from this user
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                UserName: configuration.userName,
+                Path: configuration.path,
+                UserId: configuration.userId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AttachedManagedPolicies: configuration.attachedManagedPolicies.map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                GroupList: configuration.groupList,
+                UserPolicyList: configuration.userPolicyList.map((up) => ({
+                    PolicyName: up.policyName,
+                    PolicyDocument: up.policyDocument
+                })),
+                Tags: tags,
+                PermissionsBoundary: configuration.permissionsBoundary
+            };
+        });
+        const groups = groupsResults.map((resultString) => {
+            const { configuration, tags } = parseConfigItem(resultString);
+            // Collect AWS managed policies from this group
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                GroupName: configuration.groupName,
+                Path: configuration.path,
+                GroupId: configuration.groupId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AttachedManagedPolicies: putInArray(configuration.attachedManagedPolicies).map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                Tags: tags ? Object.entries(tags).map(([key, value]) => ({ Key: key, Value: value })) : [],
+                GroupPolicyList: putInArray(configuration.groupPolicyList).map((gp) => ({
+                    PolicyName: gp.policyName,
+                    PolicyDocument: gp.policyDocument
+                }))
+            };
+        });
+        const policies = policiesResults.map((resultString) => {
+            const { configuration, tags } = parseConfigItem(resultString);
+            return {
+                PolicyName: configuration.policyName,
+                PolicyId: configuration.policyId,
+                Arn: configuration.arn,
+                Path: configuration.path,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                UpdateDate: configuration.updateDate ? new Date(configuration.updateDate) : undefined,
+                PolicyVersionList: putInArray(configuration.policyVersionList).map((pv) => ({
+                    Document: pv.document,
+                    VersionId: pv.versionId,
+                    IsDefaultVersion: pv.isDefaultVersion
+                })),
+                AttachmentCount: configuration.attachmentCount,
+                PermissionsBoundaryUsageCount: configuration.permissionsBoundaryUsageCount,
+                IsAttachable: configuration.isAttachable,
+                Description: configuration.description,
+                Tags: tags
+            };
+        });
+        // Fetch AWS managed policy details using native IAM client
+        const awsManagedPolicies = [];
+        for (const policyArn of awsManagedPoliciesToFetch) {
+            const policyDetails = await nativeIamClient.send(new GetPolicyCommand({ PolicyArn: policyArn }));
+            const policyDocument = await nativeIamClient.send(new GetPolicyVersionCommand({
+                PolicyArn: policyArn,
+                VersionId: policyDetails.Policy?.DefaultVersionId
+            }));
+            if (policyDocument.PolicyVersion) {
+                awsManagedPolicies.push({
+                    ...policyDetails.Policy,
+                    PolicyVersionList: [
+                        {
+                            Document: policyDocument.PolicyVersion.Document,
+                            VersionId: policyDocument.PolicyVersion.VersionId,
+                            IsDefaultVersion: policyDocument.PolicyVersion.IsDefaultVersion
+                        }
+                    ]
+                });
+            }
+        }
+        // Combine customer-managed policies from Config with AWS managed policies from native IAM
+        const allPolicies = [...policies, ...awsManagedPolicies];
+        return {
+            UserDetailList: users,
+            GroupDetailList: groups,
+            RoleDetailList: roles,
+            Policies: allPolicies,
+            IsTruncated: false
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListInstanceProfilesCommand
+ *
+ * Note: AWS Config doesn't track InstanceProfile as a separate resource type.
+ * Instance profiles are extracted from Role configuration data.
+ */
+const AwsConfigListInstanceProfilesCommand = awsConfigCommand({
+    command: ListInstanceProfilesCommand,
+    execute: async (input, context) => {
+        // Get roles from Config and extract instance profiles
+        const query = `
+      SELECT
+        configuration.instanceProfileList
+      WHERE
+        resourceType = 'AWS::IAM::Role'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        // Extract unique instance profiles from all roles
+        const instanceProfilesMap = new Map();
+        results.forEach((resultString) => {
+            const { configuration } = parseConfigItem(resultString);
+            const instanceProfiles = configuration.instanceProfileList || [];
+            instanceProfiles.forEach((profile) => {
+                if (profile.arn && !instanceProfilesMap.has(profile.arn)) {
+                    instanceProfilesMap.set(profile.arn, {
+                        Path: profile.path,
+                        InstanceProfileName: profile.instanceProfileName,
+                        InstanceProfileId: profile.instanceProfileId,
+                        Arn: profile.arn,
+                        CreateDate: profile.createDate ? new Date(profile.createDate) : undefined,
+                        Roles: profile.roles?.map((r) => ({ Arn: r.arn })) || [],
+                        Tags: [] // Tags not available in role's instance profile data
+                    });
+                }
+            });
+        });
+        return {
+            InstanceProfiles: Array.from(instanceProfilesMap.values()),
+            IsTruncated: false // TODO: Handle pagination properly
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListOpenIDConnectProvidersCommand
+ */
+const AwsConfigListOpenIDConnectProvidersCommand = awsConfigCommand({
+    command: ListOpenIDConnectProvidersCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        configuration.Arn,
+        configuration.Url,
+        configuration.ClientIdList,
+        configuration.ThumbprintList,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::OIDCProvider'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const providers = results.map((resultString) => {
+            const { configuration, tags } = parseConfigItem(resultString);
+            context.putCache(configuration.Arn, 'configuration', { configuration, tags });
+            return {
+                Arn: configuration.Arn
+            };
+        });
+        return {
+            OpenIDConnectProviderList: providers
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM GetOpenIDConnectProviderCommand
+ */
+const AwsConfigGetOpenIDConnectProviderCommand = awsConfigCommand({
+    command: GetOpenIDConnectProviderCommand,
+    execute: async (input, context) => {
+        const { configuration, tags } = context.getCache(input.OpenIDConnectProviderArn, 'configuration');
+        return {
+            Url: configuration.Url,
+            ClientIDList: configuration.ClientIdList,
+            ThumbprintList: configuration.ThumbprintList,
+            Tags: tags
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListSAMLProvidersCommand
+ */
+const AwsConfigListSAMLProvidersCommand = awsConfigCommand({
+    command: ListSAMLProvidersCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        configuration.SamlMetadataDocument,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::SAMLProvider'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const providers = results.map((resultString) => {
+            const { configItem, configuration, tags } = parseConfigItem(resultString);
+            context.putCache(configItem.arn, 'configuration', { configuration, tags });
+            return {
+                Arn: configItem.arn
+            };
+        });
+        return {
+            SAMLProviderList: providers
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM GetSAMLProviderCommand
+ */
+const AwsConfigGetSAMLProviderCommand = awsConfigCommand({
+    command: GetSAMLProviderCommand,
+    execute: async (input, context) => {
+        const { configuration, tags } = context.getCache(input.SAMLProviderArn, 'configuration');
+        return {
+            SAMLMetadataDocument: configuration.SamlMetadataDocument,
+            Tags: tags
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListPolicyTagsCommand
+ */
+const AwsConfigListPolicyTagsCommand = awsConfigCommand({
+    command: ListPolicyTagsCommand,
+    execute: async (input, context) => {
+        const policyName = input.PolicyArn.split('/').pop();
+        const query = `
+      SELECT
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Policy'
+        AND accountId = '${context.accountId}'
+        AND resourceName = '${policyName}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        if (results.length === 0) {
+            throw new Error('Policy not found');
+        }
+        const { tags } = parseConfigItem(results[0]);
+        return {
+            Tags: tags,
+            IsTruncated: false
+        };
+    }
+});
+/**
+ * Given an AWS IAM policy ARN, determine if it is an AWS-managed policy
+ *
+ * @param policyArn the ARN of the IAM policy
+ * @returns true if the policy is AWS-managed, false otherwise
+ */
+function isAwsManagedPolicy(policyArn) {
+    return splitArnParts(policyArn).accountId === 'aws';
+}
+function putInArray(item) {
+    if (item === undefined || item === null) {
+        return [];
+    }
+    return Array.isArray(item) ? item : [item];
+}
+//# sourceMappingURL=AwsConfigIamClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigIamClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigIamClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigIamClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,+BAA+B,EAC/B,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,2BAA2B,EAC3B,iCAAiC,EACjC,qBAAqB,EACrB,wBAAwB,EAEzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,cAAsC;IAG5E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8CAA8C,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe,CAAC,wCAAwC,CAAC,CAAA;QAC9D,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,0CAA0C,CAAC,CAAA;QAChE,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;IACtD,CAAC;;AAvBe,6BAAU,GAAG,SAAS,CAAC,IAAI,CAAA;AA0B7C;;;;;;;;GAQG;AACH,MAAM,8CAA8C,GAAG,gBAAgB,CAAC;IACtE,OAAO,EAAE,qCAAqC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAC1D,SAAS,EACT,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,MAAM,EACd,SAAS,CACV,CAAA;QAED,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAA;QAEnD,0BAA0B;QAC1B,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;2BAgBI,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG;;;;;;;;;;;;;;2BAcI,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG;;;;;;;;;;;;2BAYG,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,6BAA6B;QAC7B,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;2BAgBC,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,sBAAsB;QACtB,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrF,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC;YACvC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC;YACvC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC;YACxC,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC;SAC3C,CAAC,CAAA;QAEF,uEAAuE;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC9C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAE7D,8CAA8C;YAC9C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;gBAChE,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAChF,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC7D,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;gBACH,IAAI,EAAE,IAAI;gBACV,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,YAAY,EAAE,aAAa,CAAC,YAAY;aACzC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC9C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAE7D,8CAA8C;YAC9C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC/E,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC7D,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;gBACH,IAAI,EAAE,IAAW;gBACjB,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;aACvD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAChD,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAE7D,+CAA+C;YAC/C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,uBAAuB,EAAE,UAAU,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAC5E,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBACZ,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CACH;gBACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC1F,eAAe,EAAE,UAAU,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC3E,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;aACJ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YACpD,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAC7D,OAAO;gBACL,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,iBAAiB,EAAE,UAAU,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC/E,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;iBACtC,CAAC,CAAC;gBACH,eAAe,EAAE,aAAa,CAAC,eAAe;gBAC9C,6BAA6B,EAAE,aAAa,CAAC,6BAA6B;gBAC1E,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,IAAI,EAAE,IAAW;aAClB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,2DAA2D;QAC3D,MAAM,kBAAkB,GAA0B,EAAE,CAAA;QACpD,KAAK,MAAM,SAAS,IAAI,yBAAyB,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,IAAI,CAC9C,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAC/C,CAAA;YACD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAC/C,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,gBAAgB;aAClD,CAAC,CACH,CAAA;YAED,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;gBACjC,kBAAkB,CAAC,IAAI,CAAC;oBACtB,GAAG,aAAa,CAAC,MAAM;oBACvB,iBAAiB,EAAE;wBACjB;4BACE,QAAQ,EAAE,cAAc,CAAC,aAAa,CAAC,QAAQ;4BAC/C,SAAS,EAAE,cAAc,CAAC,aAAa,CAAC,SAAS;4BACjD,gBAAgB,EAAE,cAAc,CAAC,aAAa,CAAC,gBAAgB;yBAChE;qBACF;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,0FAA0F;QAC1F,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,kBAAkB,CAAC,CAAA;QAExD,OAAO;YACL,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,MAAM;YACvB,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,KAAK;SACnB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,oCAAoC,GAAG,gBAAgB,CAAC;IAC5D,OAAO,EAAE,2BAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,sDAAsD;QACtD,MAAM,KAAK,GAAG;;;;;2BAKS,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,kDAAkD;QAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAA;QAErC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YACvD,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,IAAI,EAAE,CAAA;YAChE,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAY,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzD,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;wBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;wBAChD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;wBAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;wBACzE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;wBAC7D,IAAI,EAAE,EAAE,CAAC,qDAAqD;qBAC/D,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC1D,WAAW,EAAE,KAAK,CAAC,mCAAmC;SACvD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,0CAA0C,GAAG,gBAAgB,CAAC;IAClE,OAAO,EAAE,iCAAiC;IAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;2BASS,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC7C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7E,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;aACvB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,yBAAyB,EAAE,SAAS;SACrC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,wCAAwC,GAAG,gBAAgB,CAAC;IAChE,OAAO,EAAE,+BAA+B;IACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,CAC9C,KAAK,CAAC,wBAAyB,EAC/B,eAAe,CAChB,CAAA;QAED,OAAO;YACL,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IACzD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;2BAOS,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC7C,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAE1E,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG;aACpB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,gBAAgB,EAAE,SAAS;SAC5B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAgB,EAAE,eAAe,CAAC,CAAA;QAEzF,OAAO;YACL,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;YACxD,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAA;QAErD,MAAM,KAAK,GAAG;;;;;2BAKS,OAAO,CAAC,SAAS;8BACd,UAAU;cAC1B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5C,OAAO;YACL,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,KAAK;SACnB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,KAAK,KAAK,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,IAAS;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC5C,CAAC"}

package/dist/esm/awsConfigClients/clients/AwsConfigKafkaClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Kafka client implementation
+ */
+export declare class AwsConfigKafkaClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Kafka command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigKafkaClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigKafkaClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKafkaClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKafkaClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAGtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC9E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAmB;gBAG3C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAMnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigKafkaClient.js

@@ -0,0 +1,141 @@
+import { DescribeClusterCommand, GetClusterPolicyCommand, KafkaClient, ListClustersV2Command, ListTagsForResourceCommand } from '@aws-sdk/client-kafka';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { ResourceNotFoundException } from '../../customClients/ResourceNotFoundException.js';
+import { stringifyIfPresent } from '../../utils/json.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based Kafka client implementation
+ */
+export class AwsConfigKafkaClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Kafka command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListClustersV2Command);
+        this.registerCommand(AwsConfigDescribeClusterCommand);
+        this.registerCommand(AwsConfigGetClusterPolicyCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+    }
+}
+AwsConfigKafkaClient.clientName = KafkaClient.name;
+/**
+ * Config-based implementation of Kafka ListClustersV2Command
+ */
+const AwsConfigListClustersV2Command = awsConfigCommand({
+    command: ListClustersV2Command,
+    execute: async (input, context) => {
+        // Query AWS Config for all MSK clusters with only needed configuration fields
+        const query = `
+      SELECT
+        resourceId,
+        resourceName,
+        awsRegion,
+        configuration.EncryptionInfo,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::MSK::Cluster'
+        AND accountId = '${context.accountId}'
+        AND awsRegion = '${context.region}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const items = await executeConfigQuery(query, context);
+        // Transform Config data to ListClustersV2Response format
+        const clusterInfoList = items.map((item) => {
+            const { configItem, configuration, tags } = parseConfigItem(item);
+            // Cache data that will be needed by other commands
+            const clusterArn = configItem.resourceId;
+            context.putCache(clusterArn, 'configuration', configuration);
+            context.putCache(clusterArn, 'resourceName', configItem.resourceName);
+            context.putCache(clusterArn, 'tags', tags);
+            return {
+                ClusterArn: clusterArn,
+                ClusterName: configItem.resourceName,
+                Tags: tags || {}
+            };
+        });
+        return {
+            ClusterInfoList: clusterInfoList
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka DescribeClusterCommand
+ */
+const AwsConfigDescribeClusterCommand = awsConfigCommand({
+    command: DescribeClusterCommand,
+    execute: async (input, context) => {
+        const { ClusterArn } = input;
+        if (!ClusterArn) {
+            throw new Error('ClusterArn is required for DescribeClusterCommand');
+        }
+        const configuration = context.getCache(ClusterArn, 'configuration');
+        const resourceName = context.getCache(ClusterArn, 'resourceName');
+        // Transform Config data to DescribeClusterResponse format
+        return {
+            ClusterInfo: {
+                ClusterArn: ClusterArn,
+                ClusterName: configuration?.clusterName || resourceName,
+                EncryptionInfo: configuration?.encryptionInfo
+            }
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka GetClusterPolicyCommand
+ */
+const AwsConfigGetClusterPolicyCommand = awsConfigCommand({
+    command: GetClusterPolicyCommand,
+    execute: async (input, context) => {
+        const { ClusterArn } = input;
+        if (!ClusterArn) {
+            throw new Error('ClusterArn is required for GetClusterPolicyCommand');
+        }
+        // Query AWS Config for MSK cluster policy
+        const query = `
+      SELECT
+        resourceId,
+        configuration.clusterArn,
+        configuration.Policy
+      WHERE
+        resourceType = 'AWS::MSK::ClusterPolicy'
+        AND resourceId = '${ClusterArn}'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const items = await executeConfigQuery(query, context);
+        if (items.length === 0) {
+            throw new ResourceNotFoundException(`Cluster policy not found for cluster: ${ClusterArn}`);
+        }
+        const { configuration } = parseConfigItem(items[0]);
+        // Transform Config data to GetClusterPolicyResponse format
+        return {
+            CurrentVersion: '1', // Config doesn't track policy version, use default
+            Policy: stringifyIfPresent(configuration.Policy)
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka ListTagsForResourceCommand
+ */
+const AwsConfigListTagsForResourceCommand = awsConfigCommand({
+    command: ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        const { ResourceArn } = input;
+        if (!ResourceArn) {
+            throw new Error('ResourceArn is required for ListTagsForResourceCommand');
+        }
+        const tags = context.getCache(ResourceArn, 'tags');
+        // Transform Config data to ListTagsForResourceResponse format
+        return {
+            Tags: tags
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigKafkaClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigKafkaClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKafkaClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKafkaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,cAAsC;IAG9E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;IAC3D,CAAC;;AApBe,+BAAU,GAAG,WAAW,CAAC,IAAI,CAAA;AAuB/C;;GAEG;AACH,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,8EAA8E;QAC9E,MAAM,KAAK,GAAG;;;;;;;;;;2BAUS,OAAO,CAAC,SAAS;2BACjB,OAAO,CAAC,MAAM;cAC3B,yBAAyB;KAClC,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAEtD,yDAAyD;QACzD,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;YAEjE,mDAAmD;YACnD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAA;YACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;YACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE1C,OAAO;gBACL,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,IAAI,EAAE,IAAI,IAAI,EAAE;aACjB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,eAAe,EAAE,eAAe;SACjC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QAE5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAEjE,0DAA0D;QAC1D,OAAO;YACL,WAAW,EAAE;gBACX,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,aAAa,EAAE,WAAW,IAAI,YAAY;gBACvD,cAAc,EAAE,aAAa,EAAE,cAAc;aAC9C;SACF,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IACxD,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QAE5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG;;;;;;;4BAOU,UAAU;2BACX,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAEnD,2DAA2D;QAC3D,OAAO;YACL,cAAc,EAAE,GAAG,EAAE,mDAAmD;YACxE,MAAM,EAAE,kBAAkB,CAAC,aAAa,CAAC,MAAM,CAAC;SACjD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAC3D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAA;QAE7B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAElD,8DAA8D;QAC9D,OAAO;YACL,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigKinesisClient.d.ts

@@ -0,0 +1,22 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Kinesis client implementation
+ * Returns empty responses since stream policies are not tracked in AWS Config
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigKinesisClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Kinesis command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigKinesisClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigKinesisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKinesisClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKinesisClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAqB;gBAG7C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAMnC"}