@actsecurity/iam-collect 0.1.215

package/dist/esm/awsConfigClients/clients/AwsConfigKinesisClient.js

@@ -0,0 +1,84 @@
+import { DescribeStreamCommand, GetResourcePolicyCommand, KinesisClient, ListStreamsCommand, ListTagsForStreamCommand } from '@aws-sdk/client-kinesis';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Kinesis client implementation
+ * Returns empty responses since stream policies are not tracked in AWS Config
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export class AwsConfigKinesisClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Kinesis command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListStreamsCommand);
+        this.registerCommand(AwsConfigDescribeStreamCommand);
+        this.registerCommand(AwsConfigGetResourcePolicyCommand);
+        this.registerCommand(AwsConfigListTagsForStreamCommand);
+    }
+}
+AwsConfigKinesisClient.clientName = KinesisClient.name;
+/**
+ * Config-based implementation of Kinesis ListStreamsCommand
+ * Returns empty list since stream policies are not available for analysis
+ */
+const AwsConfigListStreamsCommand = awsConfigCommand({
+    command: ListStreamsCommand,
+    execute: async (input, context) => {
+        // Return empty list since we can't analyze stream policies from Config
+        return {
+            StreamNames: [],
+            HasMoreStreams: false
+        };
+    }
+});
+/**
+ * Config-based implementation of Kinesis DescribeStreamCommand
+ * Returns minimal response since stream policies are not available for analysis
+ */
+const AwsConfigDescribeStreamCommand = awsConfigCommand({
+    command: DescribeStreamCommand,
+    execute: async (input, context) => {
+        const { StreamName, StreamARN } = input;
+        if (!StreamName && !StreamARN) {
+            throw new Error('StreamName or StreamARN is required for DescribeStreamCommand');
+        }
+        // Return minimal stream description since we can't analyze policies
+        return {};
+    }
+});
+/**
+ * Config-based implementation of Kinesis GetResourcePolicyCommand
+ * Returns empty result as stream policies are not tracked in AWS Config
+ */
+const AwsConfigGetResourcePolicyCommand = awsConfigCommand({
+    command: GetResourcePolicyCommand,
+    execute: async (input, context) => {
+        // Stream resource policies are not available in AWS Config
+        // Return empty response to maintain compatibility
+        return {
+            Policy: undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of Kinesis ListTagsForStreamCommand
+ * Returns empty tags since stream policies are not available for analysis
+ */
+const AwsConfigListTagsForStreamCommand = awsConfigCommand({
+    command: ListTagsForStreamCommand,
+    execute: async (input, context) => {
+        // Return empty tags since we can't analyze stream policies
+        return {
+            Tags: [],
+            HasMoreTags: false
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigKinesisClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigKinesisClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKinesisClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKinesisClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE5F;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,cAAsC;IAGhF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAA;QACjD,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC;;AApBe,iCAAU,GAAG,aAAa,CAAC,IAAI,CAAA;AAuBjD;;;GAGG;AACH,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IACnD,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,uEAAuE;QACvE,OAAO;YACL,WAAW,EAAE,EAAE;YACf,cAAc,EAAE,KAAK;SACtB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QAEvC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QAED,oEAAoE;QACpE,OAAO,EAAE,CAAA;IACX,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IACzD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2DAA2D;QAC3D,kDAAkD;QAClD,OAAO;YACL,MAAM,EAAE,SAAS;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IACzD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2DAA2D;QAC3D,OAAO;YACL,IAAI,EAAE,EAAE;YACR,WAAW,EAAE,KAAK;SACnB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigKmsClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * KMS client implementation using AWS Config as data source
+ */
+export declare class AwsConfigKmsClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all KMS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigKmsClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigKmsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKmsClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKmsClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAEtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigKmsClient.js

@@ -0,0 +1,102 @@
+import { GetKeyPolicyCommand, KMSClient, ListKeysCommand, ListResourceTagsCommand } from '@aws-sdk/client-kms';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { ResourceNotFoundException } from '../../customClients/ResourceNotFoundException.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * KMS client implementation using AWS Config as data source
+ */
+export class AwsConfigKmsClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all KMS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListKeysCommand);
+        this.registerCommand(AwsConfigGetKeyPolicyCommand);
+        this.registerCommand(AwsConfigListResourceTagsCommand);
+    }
+}
+AwsConfigKmsClient.clientName = KMSClient.name;
+/**
+ * Config-based implementation of KMS ListKeysCommand
+ */
+const AwsConfigListKeysCommand = awsConfigCommand({
+    command: ListKeysCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        supplementaryConfiguration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::KMS::Key'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const keys = results.map((resultString) => {
+            const { configItem, supplementaryConfiguration, tags } = parseConfigItem(resultString);
+            // Cache data that will be needed by other commands
+            // Use KeyId as cache key for both GetKeyPolicyCommand and ListResourceTagsCommand
+            context.putCache(configItem.resourceId, 'supplementaryConfiguration', supplementaryConfiguration);
+            context.putCache(configItem.resourceId, 'tags', tags);
+            return {
+                KeyId: configItem.resourceId,
+                KeyArn: configItem.arn
+            };
+        });
+        return {
+            Keys: keys
+        };
+    }
+});
+/**
+ * Config-based implementation of KMS GetKeyPolicyCommand
+ */
+const AwsConfigGetKeyPolicyCommand = awsConfigCommand({
+    command: GetKeyPolicyCommand,
+    execute: async (input, context) => {
+        const { KeyId, PolicyName = 'default' } = input;
+        if (!KeyId) {
+            throw new ResourceNotFoundException('KeyId is required');
+        }
+        const supplementaryConfiguration = context.getCache(KeyId, 'supplementaryConfiguration');
+        const keyPolicy = supplementaryConfiguration?.Policy;
+        if (!keyPolicy) {
+            throw new ResourceNotFoundException(`Key policy '${PolicyName}' not found for KeyId: ${KeyId}`);
+        }
+        return {
+            Policy: keyPolicy
+        };
+    }
+});
+/**
+ * Config-based implementation of KMS ListResourceTagsCommand
+ */
+const AwsConfigListResourceTagsCommand = awsConfigCommand({
+    command: ListResourceTagsCommand,
+    execute: async (input, context) => {
+        const { KeyId } = input;
+        if (!KeyId) {
+            return {
+                Tags: []
+            };
+        }
+        const tags = context.getCache(KeyId, 'tags');
+        if (!tags) {
+            return {
+                Tags: []
+            };
+        }
+        return {
+            Tags: tags
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigKmsClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigKmsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKmsClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKmsClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAA;AAC5F,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,cAAsC;IAG5E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;QAC9C,IAAI,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAA;QAClD,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;IACxD,CAAC;;AAnBe,6BAAU,GAAG,SAAS,CAAC,IAAI,CAAA;AAsB7C;;GAEG;AACH,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;IAChD,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;2BAQS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YACxC,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YAEtF,mDAAmD;YACnD,kFAAkF;YAClF,OAAO,CAAC,QAAQ,CACd,UAAU,CAAC,UAAU,EACrB,4BAA4B,EAC5B,0BAA0B,CAC3B,CAAA;YACD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAErD,OAAO;gBACL,KAAK,EAAE,UAAU,CAAC,UAAU;gBAC5B,MAAM,EAAE,UAAU,CAAC,GAAG;aACvB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;IACpD,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,GAAG,KAAK,CAAA;QAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,yBAAyB,CAAC,mBAAmB,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAA;QACxF,MAAM,SAAS,GAAG,0BAA0B,EAAE,MAAM,CAAA;QAEpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,yBAAyB,CACjC,eAAe,UAAU,0BAA0B,KAAK,EAAE,CAC3D,CAAA;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IACxD,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;QAEvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,EAAE;aACT,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAE5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,IAAI,EAAE,EAAE;aACT,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAW;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigLambdaClient.d.ts

@@ -0,0 +1,22 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Lambda client implementation
+ *
+ * Lambda Layers and Aliases:
+ * Since policies are not available in AWS Config for Lambda Layers or aliases, this client provides limited
+ * functionality and returns empty results for those operations.
+ */
+export declare class AwsConfigLambdaClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Lambda command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigLambdaClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigLambdaClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigLambdaClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigLambdaClient.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC/E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAoB;gBAG5C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CASnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigLambdaClient.js

@@ -0,0 +1,169 @@
+import { GetLayerVersionPolicyCommand, GetPolicyCommand, LambdaClient, ListAliasesCommand, ListFunctionsCommand, ListLayersCommand, ListLayerVersionsCommand, ListTagsCommand } from '@aws-sdk/client-lambda';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based Lambda client implementation
+ *
+ * Lambda Layers and Aliases:
+ * Since policies are not available in AWS Config for Lambda Layers or aliases, this client provides limited
+ * functionality and returns empty results for those operations.
+ */
+export class AwsConfigLambdaClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Lambda command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetLayerVersionPolicyCommand);
+        this.registerCommand(AwsConfigGetPolicyCommand);
+        this.registerCommand(AwsConfigListAliasesCommand);
+        this.registerCommand(AwsConfigListFunctionsCommand);
+        this.registerCommand(AwsConfigListLayersCommand);
+        this.registerCommand(AwsConfigListLayerVersionsCommand);
+        this.registerCommand(AwsConfigListTagsCommand);
+    }
+}
+AwsConfigLambdaClient.clientName = LambdaClient.name;
+/**
+ * Config-based implementation of Lambda GetLayerVersionPolicyCommand
+ * Returns undefined since layer policies are not available in Config
+ */
+const AwsConfigGetLayerVersionPolicyCommand = awsConfigCommand({
+    command: GetLayerVersionPolicyCommand,
+    execute: async (input, context) => {
+        // Return undefined since layer policies are not tracked in Config
+        return {
+            Policy: undefined,
+            RevisionId: undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda GetPolicyCommand
+ *
+ * Maps Lambda::Function Config data to Lambda GetPolicyCommand output format.
+ * Returns function policy from supplementaryConfiguration.Policy field for IAM analysis.
+ */
+const AwsConfigGetPolicyCommand = awsConfigCommand({
+    command: GetPolicyCommand,
+    execute: async (input, context) => {
+        const functionName = input.FunctionName;
+        const configuration = context.getCache(functionName, 'configuration');
+        const supplementaryConfiguration = context.getCache(functionName, 'supplementaryConfiguration');
+        return {
+            Policy: supplementaryConfiguration?.Policy,
+            RevisionId: configuration?.revisionId
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda ListAliasesCommand
+ * Returns an empty list since aliases and their policies are not tracked separately in Config
+ */
+const AwsConfigListAliasesCommand = awsConfigCommand({
+    command: ListAliasesCommand,
+    execute: async (input, context) => {
+        return {
+            Aliases: [],
+            NextMarker: undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda ListFunctionsCommand
+ *
+ * Maps Lambda::Function Config data to Lambda ListFunctionsCommand output format.
+ * Returns function listing for IAM analysis and resource discovery.
+ */
+const AwsConfigListFunctionsCommand = awsConfigCommand({
+    command: ListFunctionsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.functionName,
+        configuration.role,
+        configuration.revisionId,
+        supplementaryConfiguration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::Lambda::Function'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const functions = results.map((result) => {
+            const { configItem, configuration, supplementaryConfiguration, tags } = parseConfigItem(result);
+            // Cache data that will be needed by other commands
+            // Use function name as cache key for GetPolicyCommand
+            if (configuration.functionName) {
+                context.putCache(configuration.functionName, 'configuration', configuration);
+                context.putCache(configuration.functionName, 'supplementaryConfiguration', supplementaryConfiguration);
+            }
+            // Cache by ARN for ListTagsCommand
+            context.putCache(configItem.arn, 'tags', tags);
+            return {
+                FunctionName: configuration.functionName,
+                FunctionArn: configItem.arn,
+                Role: configuration.role
+            };
+        });
+        return {
+            Functions: functions,
+            NextMarker: undefined // Config doesn't provide pagination markers
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda ListLayersCommand
+ * Returns empty list since layer policies are not available for analysis
+ */
+const AwsConfigListLayersCommand = awsConfigCommand({
+    command: ListLayersCommand,
+    execute: async (input, context) => {
+        // Return empty list since we can't analyze layer policies from Config
+        return {
+            Layers: [],
+            NextMarker: undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda ListLayerVersionsCommand
+ * Returns empty list since layer version policies are not available for analysis
+ */
+const AwsConfigListLayerVersionsCommand = awsConfigCommand({
+    command: ListLayerVersionsCommand,
+    execute: async (input, context) => {
+        // Return empty list since we can't analyze layer version policies from Config
+        return {
+            LayerVersions: [],
+            NextMarker: undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of Lambda ListTagsCommand
+ *
+ * Maps Lambda::Function Config tag data to Lambda ListTagsCommand output format.
+ * Returns function tags for resource identification and compliance analysis.
+ */
+const AwsConfigListTagsCommand = awsConfigCommand({
+    command: ListTagsCommand,
+    execute: async (input, context) => {
+        // Extract function name from ARN or use the Resource directly as function name
+        const resourceArn = input.Resource;
+        const tags = context.getCache(resourceArn, 'tags');
+        return {
+            Tags: tags || {}
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigLambdaClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigLambdaClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigLambdaClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigLambdaClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EAChB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,cAAsC;IAG/E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAA;QAC3D,IAAI,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAA;QAC/C,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAA;QACjD,IAAI,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAA;QACnD,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;QAChD,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;IAChD,CAAC;;AAvBe,gCAAU,GAAG,YAAY,CAAC,IAAI,CAAA;AA0BhD;;;GAGG;AACH,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IAC7D,OAAO,EAAE,4BAA4B;IACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,kEAAkE;QAClE,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,SAAS;SACtB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;IACjD,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAa,CAAA;QAExC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QACrE,MAAM,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAA;QAE/F,OAAO;YACL,MAAM,EAAE,0BAA0B,EAAE,MAAM;YAC1C,UAAU,EAAE,aAAa,EAAE,UAAU;SACtC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IACnD,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,OAAO;YACL,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,SAAS;SACtB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;IACrD,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,0BAA0B,EAAE,IAAI,EAAE,GACnE,eAAe,CAAC,MAAM,CAAC,CAAA;YAEzB,mDAAmD;YACnD,sDAAsD;YACtD,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;gBAC5E,OAAO,CAAC,QAAQ,CACd,aAAa,CAAC,YAAY,EAC1B,4BAA4B,EAC5B,0BAA0B,CAC3B,CAAA;YACH,CAAC;YAED,mCAAmC;YACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE9C,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,WAAW,EAAE,UAAU,CAAC,GAAG;gBAC3B,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,SAAS,CAAC,4CAA4C;SACnE,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IAClD,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,sEAAsE;QACtE,OAAO;YACL,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,SAAS;SACtB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IACzD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,8EAA8E;QAC9E,OAAO;YACL,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,SAAS;SACtB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;IAChD,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,+EAA+E;QAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,QAAS,CAAA;QAEnC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAElD,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,EAAE;SACjB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigOpenSearchClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based OpenSearch client implementation
+ */
+export declare class AwsConfigOpenSearchClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all OpenSearch command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigOpenSearchClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigOpenSearchClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigOpenSearchClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigOpenSearchClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACnF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAwB;gBAGhD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigOpenSearchClient.js

@@ -0,0 +1,122 @@
+import { DescribeDomainCommand, ListDomainNamesCommand, ListTagsCommand, OpenSearchClient } from '@aws-sdk/client-opensearch';
+import {} from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based OpenSearch client implementation
+ */
+export class AwsConfigOpenSearchClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all OpenSearch command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigDescribeDomainCommand);
+        this.registerCommand(AwsConfigListDomainNamesCommand);
+        this.registerCommand(AwsConfigListTagsCommand);
+    }
+}
+AwsConfigOpenSearchClient.clientName = OpenSearchClient.name;
+/**
+ * Config-based implementation of OpenSearch ListDomainNamesCommand
+ * Returns all domain names from AWS Config
+ */
+const AwsConfigListDomainNamesCommand = awsConfigCommand({
+    command: ListDomainNamesCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.AccessPolicies,
+        configuration.Id,
+        configuration.DomainName,
+        configuration.EncryptionAtRestOptions,
+        tags
+      WHERE
+        resourceType = 'AWS::OpenSearch::Domain'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const domains = results
+            .map((result) => {
+            const { configItem, configuration, tags } = parseConfigItem(result);
+            // Cache data that will be needed by other commands
+            // Use domain name as cache key since that's what DescribeDomainCommand uses
+            if (configuration?.DomainName) {
+                context.putCache(configuration.DomainName, 'configuration', configuration);
+                context.putCache(configuration.DomainName, 'configItem', configItem);
+                // Also cache by ARN for ListTagsCommand
+                context.putCache(configItem.arn, 'tags', tags);
+            }
+            return {
+                DomainName: configuration?.DomainName
+            };
+        })
+            .filter((domain) => domain.DomainName);
+        return {
+            DomainNames: domains
+        };
+    }
+});
+/**
+ * Config-based implementation of OpenSearch DescribeDomainCommand
+ * Returns domain info including access policies from AWS Config
+ */
+const AwsConfigDescribeDomainCommand = awsConfigCommand({
+    command: DescribeDomainCommand,
+    execute: async (input, context) => {
+        if (!input.DomainName) {
+            throw new Error('DomainName is required');
+        }
+        const configuration = context.getCache(input.DomainName, 'configuration');
+        const configItem = context.getCache(input.DomainName, 'configItem');
+        // Parse the access policies from the configuration JSON string
+        let accessPolicies = undefined;
+        if (configuration?.AccessPolicies) {
+            accessPolicies = JSON.stringify(configuration.AccessPolicies);
+        }
+        return {
+            DomainStatus: {
+                DomainId: configuration?.Id || configItem.resourceId,
+                DomainName: configuration?.DomainName,
+                ARN: configItem.arn,
+                AccessPolicies: accessPolicies,
+                EncryptionAtRestOptions: {
+                    Enabled: configuration?.EncryptionAtRestOptions?.Enabled || false,
+                    KmsKeyId: configuration?.EncryptionAtRestOptions?.KmsKeyId
+                }
+            }
+        };
+    }
+});
+/**
+ * Config-based implementation of OpenSearch ListTagsCommand
+ * Returns domain tags from AWS Config
+ */
+const AwsConfigListTagsCommand = awsConfigCommand({
+    command: ListTagsCommand,
+    execute: async (input, context) => {
+        if (!input.ARN) {
+            throw new Error('ARN is required');
+        }
+        const tags = context.getCache(input.ARN, 'tags');
+        // Convert Config tags format to OpenSearch tags format
+        const tagList = tags
+            ? Object.entries(tags).map(([key, value]) => ({
+                Key: key,
+                Value: value
+            }))
+            : [];
+        return {
+            TagList: tagList
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigOpenSearchClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigOpenSearchClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigOpenSearchClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigOpenSearchClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EAErB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA+B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC5F,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,cAAsC;IAGnF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;IAChD,CAAC;;AAnBe,oCAAU,GAAG,gBAAgB,CAAC,IAAI,CAAA;AAsBpD;;;GAGG;AACH,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,OAAO;aACpB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YAEnE,mDAAmD;YACnD,4EAA4E;YAC5E,IAAI,aAAa,EAAE,UAAU,EAAE,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;gBAC1E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;gBACpE,wCAAwC;gBACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAChD,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,aAAa,EAAE,UAAU;aACtC,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAExC,OAAO;YACL,WAAW,EAAE,OAAO;SACrB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACzE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAEnE,+DAA+D;QAC/D,IAAI,cAAc,GAAuB,SAAS,CAAA;QAClD,IAAI,aAAa,EAAE,cAAc,EAAE,CAAC;YAClC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,cAAc,CAAC,CAAA;QAC/D,CAAC;QAED,OAAO;YACL,YAAY,EAAE;gBACZ,QAAQ,EAAE,aAAa,EAAE,EAAE,IAAI,UAAU,CAAC,UAAU;gBACpD,UAAU,EAAE,aAAa,EAAE,UAAU;gBACrC,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,cAAc,EAAE,cAAc;gBAC9B,uBAAuB,EAAE;oBACvB,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,OAAO,IAAI,KAAK;oBACjE,QAAQ,EAAE,aAAa,EAAE,uBAAuB,EAAE,QAAQ;iBAC3D;aACc;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;IAChD,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAEhD,uDAAuD;QACvD,MAAM,OAAO,GAAG,IAAI;YAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,GAAG,EAAE,GAAG;gBACR,KAAK,EAAE,KAAe;aACvB,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAA;QAEN,OAAO;YACL,OAAO,EAAE,OAAO;SACjB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigOrganizationsClient.d.ts

@@ -0,0 +1,22 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Organizations client implementation
+ * Returns empty responses since organization data is not tracked in AWS Config
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigOrganizationsClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Organizations command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigOrganizationsClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigOrganizationsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigOrganizationsClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigOrganizationsClient.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;;GAMG;AACH,qBAAa,4BAA6B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACtF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAA2B;gBAGnD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAanC"}