@actsecurity/iam-collect 0.1.215

package/dist/esm/persistence/util.js

@@ -0,0 +1,88 @@
+import { splitArnParts } from '@actsecurity/iam-utils';
+import { sep } from 'path';
+import { getStorageConfig } from '../config/config.js';
+import { iamCollectVersion } from '../config/packageVersion.js';
+import {} from './AwsIamStore.js';
+import { FileSystemAdapter } from './file/FileSystemAdapter.js';
+import { FileSystemAwsIamStore } from './file/FileSystemAwsIamStore.js';
+import { InMemoryPathBasedPersistenceAdapter } from './InMemoryPathBasedPersistenceAdapter.js';
+import { S3PathBasedPersistenceAdapter } from './s3/S3PathBasedPersistenceAdapter.js';
+import { SqliteAwsIamStore } from './sqlite/SqliteAwsIamStore.js';
+export function createStorageClient(storageConfig, partition, deleteData, options = {}) {
+    if (Array.isArray(storageConfig)) {
+        const foundConfig = getStorageConfig(storageConfig);
+        if (!foundConfig) {
+            throw new Error('No storage configuration found. Cannot create storage client.');
+        }
+        storageConfig = foundConfig;
+    }
+    if (storageConfig.type === 'file') {
+        return new FileSystemAwsIamStore(storageConfig.path, partition, sep, new FileSystemAdapter(deleteData), options);
+    }
+    else if (storageConfig.type === 's3') {
+        const persistenceAdapter = new S3PathBasedPersistenceAdapter(storageConfig, deleteData);
+        return new FileSystemAwsIamStore(storageConfig.prefix || '', partition, '/', persistenceAdapter, options);
+    }
+    else if (storageConfig.type === 'sqlite') {
+        const version = iamCollectVersion();
+        return new SqliteAwsIamStore(storageConfig.path, partition, version, options);
+    }
+    throw new Error(`Unsupported storage type: ${storageConfig.type}. Supported types are: file, s3 and sqlite.`);
+}
+/**
+ * Create an in-memory storage client with the 'aws' partition.
+ *
+ * This is useful for testing.
+ *
+ * @param options - Options controlling storage client behavior.
+ * @returns The in-memory storage client instance to use.
+ */
+export function createInMemoryStorageClient(options = {}) {
+    return new FileSystemAwsIamStore('mock', 'aws', '/', new InMemoryPathBasedPersistenceAdapter(), options);
+}
+/**
+ * Generate a resource prefix given a starting path, a resource ARN, and a separator.
+ * The function uses splitArnParts to get the parts of the ARN and then joins each non-empty part
+ * with the provided separator. The last segment (resourcePath) is URL encoded.
+ *
+ * @param startingPath - The starting path (e.g. a base folder)
+ * @param resourceArn - The full resource ARN.
+ * @param separator - The separator to use (e.g. '/' or '-').
+ * @returns A string that represents the resource prefix.
+ */
+export function resourcePrefix(startingPath, resourceArn, separator) {
+    const parts = splitArnParts(resourceArn);
+    return joinPathParts([
+        startingPath,
+        parts.service,
+        parts.region,
+        parts.accountId === 'aws' ? parts.accountId : undefined,
+        parts.resourceType,
+        parts.resourcePath ? encodeURIComponent(parts.resourcePath.trim()) : undefined
+    ], separator);
+}
+/**
+ * Generate a resource type prefix based on the provided starting path and resource type parts.
+ *
+ * @param startingPath - The starting path (e.g. a base folder)
+ * @param parts - An object containing the components of the resource type
+ * @param separator - the separator to use for joining the parts. This could be '/' or any other string.
+ * @returns A string that represents the resource type prefix.
+ */
+export function resourceTypePrefix(startingPath, parts, separator) {
+    return joinPathParts([
+        startingPath,
+        parts.partition,
+        parts.service,
+        parts.region,
+        parts.account === 'aws' ? parts.account : undefined,
+        parts.resourceType
+    ], separator);
+}
+export function joinPathParts(parts, separator) {
+    // Filter out undefined or empty strings
+    const filteredParts = parts.filter((part) => part !== undefined && part.trim() !== '');
+    // Join the remaining parts with a '/'
+    return filteredParts.join(separator);
+}
+//# sourceMappingURL=util.js.map

package/dist/esm/persistence/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../src/persistence/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAC1B,OAAO,EAAE,gBAAgB,EAA2C,MAAM,qBAAqB,CAAA;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAA+C,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAA;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAgCjE,MAAM,UAAU,mBAAmB,CACjC,aAA+C,EAC/C,SAAiB,EACjB,UAAmB,EACnB,UAAgC,EAAE;IAElC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAA;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QACD,aAAa,GAAG,WAAW,CAAA;IAC7B,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,IAAI,qBAAqB,CAC9B,aAAa,CAAC,IAAI,EAClB,SAAS,EACT,GAAG,EACH,IAAI,iBAAiB,CAAC,UAAU,CAAC,EACjC,OAAO,CACR,CAAA;IACH,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,6BAA6B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;QACvF,OAAO,IAAI,qBAAqB,CAC9B,aAAa,CAAC,MAAM,IAAI,EAAE,EAC1B,SAAS,EACT,GAAG,EACH,kBAAkB,EAClB,OAAO,CACR,CAAA;IACH,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;QACnC,OAAO,IAAI,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,KAAK,CACb,6BAA8B,aAAqB,CAAC,IAAI,6CAA6C,CACtG,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAgC,EAAE;IAC5E,OAAO,IAAI,qBAAqB,CAC9B,MAAM,EACN,KAAK,EACL,GAAG,EACH,IAAI,mCAAmC,EAAE,EACzC,OAAO,CACR,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAExC,OAAO,aAAa,CAClB;QACE,YAAY;QACZ,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACvD,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,EACD,SAAS,CACV,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,KAMC,EACD,SAAiB;IAEjB,OAAO,aAAa,CAClB;QACE,YAAY;QACZ,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACnD,KAAK,CAAC,YAAY;KACnB,EACD,SAAS,CACV,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA6B,EAAE,SAAiB;IAC5E,wCAAwC;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtF,sCAAsC;IACtC,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACtC,CAAC"}

package/dist/esm/regions.d.ts

@@ -0,0 +1,4 @@
+import { AwsClientPool } from './aws/ClientPool.js';
+import { type AwsCredentialProviderWithMetaData } from './aws/coreAuth.js';
+export declare function getEnabledRegions(credentials: AwsCredentialProviderWithMetaData, clientPool: AwsClientPool): Promise<string[]>;
+//# sourceMappingURL=regions.d.ts.map

package/dist/esm/regions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regions.d.ts","sourceRoot":"","sources":["../../src/regions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,mBAAmB,CAAA;AAI1E,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,iCAAiC,EAC9C,UAAU,EAAE,aAAa,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC,CAmBnB"}

package/dist/esm/regions.js

@@ -0,0 +1,17 @@
+import { AccountClient, ListRegionsCommand } from '@aws-sdk/client-account';
+import { AwsClientPool } from './aws/ClientPool.js';
+import {} from './aws/coreAuth.js';
+import { paginateResource } from './syncs/typedSync.js';
+import { isDefined } from './utils/types.js';
+export async function getEnabledRegions(credentials, clientPool) {
+    const accountClient = clientPool.client(AccountClient, credentials, undefined, undefined);
+    const enabledRegions = await paginateResource(accountClient, ListRegionsCommand, 'Regions', {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    }, {
+        RegionOptStatusContains: ['ENABLED', 'ENABLED_BY_DEFAULT']
+    });
+    const regions = enabledRegions.map((r) => r.RegionName).filter(isDefined) || [];
+    return regions;
+}
+//# sourceMappingURL=regions.js.map

package/dist/esm/regions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regions.js","sourceRoot":"","sources":["../../src/regions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAA0C,MAAM,mBAAmB,CAAA;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAA8C,EAC9C,UAAyB;IAEzB,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IAEzF,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAC3C,aAAa,EACb,kBAAkB,EAClB,SAAS,EACT;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB,EACD;QACE,uBAAuB,EAAE,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAC3D,CACF,CAAA;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAW,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;IAEhF,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/esm/services.d.ts

@@ -0,0 +1,16 @@
+/**
+ * All Valid AWS Services
+ */
+export declare const allServices: readonly ["apigateway", "backup", "dynamodb", "ec2", "ecr", "eks", "elasticfilesystem", "es", "events", "glacier", "glue", "iam", "kafka", "kinesis", "kms", "lambda", "organizations", "ram", "s3", "s3-object-lambda", "s3express", "s3outposts", "s3tables", "secretsmanager", "sns", "sqs", "sso"];
+/**
+ * Type representing a valid AWS service. A union of all strings in `allServices`.
+ */
+export type AwsService = (typeof allServices)[number];
+/**
+ * Convert a service name to lowercase.
+ *
+ * @param service The service name to convert
+ * @returns The lowercase service name
+ */
+export declare function lowerCaseService(service: string): AwsService;
+//# sourceMappingURL=services.d.ts.map

package/dist/esm/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,wSA4Bd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAE5D"}

package/dist/esm/services.js

@@ -0,0 +1,42 @@
+/**
+ * All Valid AWS Services
+ */
+export const allServices = [
+    'apigateway',
+    'backup',
+    'dynamodb',
+    'ec2',
+    'ecr',
+    'eks',
+    'elasticfilesystem',
+    'es',
+    'events',
+    'glacier',
+    'glue',
+    'iam',
+    'kafka',
+    'kinesis',
+    'kms',
+    'lambda',
+    'organizations',
+    'ram',
+    's3',
+    's3-object-lambda',
+    's3express',
+    's3outposts',
+    's3tables',
+    'secretsmanager',
+    'sns',
+    'sqs',
+    'sso'
+];
+/**
+ * Convert a service name to lowercase.
+ *
+ * @param service The service name to convert
+ * @returns The lowercase service name
+ */
+export function lowerCaseService(service) {
+    return service.toLowerCase();
+}
+//# sourceMappingURL=services.js.map

package/dist/esm/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,eAAe;IACf,KAAK;IACL,IAAI;IACJ,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA;AAOV;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,WAAW,EAAgB,CAAA;AAC5C,CAAC"}

package/dist/esm/syncs/apigateway/gateways.d.ts

@@ -0,0 +1,13 @@
+import { type Sync } from '../sync.js';
+export declare const RestApisSync: Sync;
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+export declare function parseApiGatewayPolicy(apiId: string, policy: string | undefined): Record<string, any> | undefined;
+//# sourceMappingURL=gateways.d.ts.map

package/dist/esm/syncs/apigateway/gateways.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateways.d.ts","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,YAAY,EAAE,IA2B1B,CAAA;AAcD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAYjC"}

package/dist/esm/syncs/apigateway/gateways.js

@@ -0,0 +1,62 @@
+import { APIGatewayClient, GetRestApisCommand } from '@aws-sdk/client-api-gateway';
+import { log } from '@cloud-copilot/log';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const RestApisSync = createTypedSyncOperation('apigateway', 'gateways', createResourceSyncType({
+    client: APIGatewayClient,
+    command: GetRestApisCommand,
+    key: 'items',
+    paginationConfig: {
+        inputKey: 'position',
+        outputKey: 'position'
+    },
+    arn: (api, region, account, partition) => restApiArn(api.id, region, partition),
+    tags: (api) => api.tags,
+    resourceTypeParts: (account, region) => ({
+        account,
+        service: 'apigateway',
+        region,
+        resourceType: 'restapis'
+    }),
+    results: (api) => ({
+        metadata: {
+            id: api.id,
+            name: api.name
+        },
+        policy: parseApiGatewayPolicy(api.id, api.policy)
+    })
+}));
+/**
+ * Get the ARN for an API Gateway REST API.
+ *
+ * @param apiId the ID of the API Gateway REST API
+ * @param region the AWS region of the API Gateway
+ * @param partition the AWS partition (aws, aws-cn, aws-us-gov)
+ * @returns the ARN of the API Gateway REST API
+ */
+function restApiArn(apiId, region, partition) {
+    return `arn:${partition}:apigateway:${region}::/restapis/${apiId}`;
+}
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+export function parseApiGatewayPolicy(apiId, policy) {
+    if (!policy) {
+        return undefined;
+    }
+    policy = policy.replace(/\\"/g, '"').replace(/\\\//g, '/');
+    try {
+        return JSON.parse(policy);
+    }
+    catch (error) {
+        log.error('Failed to parse API Gateway policy', { apiId }, error);
+        throw new Error(`Unable to parse policy for API Gateway ${apiId}`);
+    }
+}
+//# sourceMappingURL=gateways.js.map

package/dist/esm/syncs/apigateway/gateways.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAClF,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,YAAY,GAAS,wBAAwB,CACxD,YAAY,EACZ,UAAU,EACV,sBAAsB,CAAC;IACrB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,kBAAkB;IAC3B,GAAG,EAAE,OAAO;IACZ,gBAAgB,EAAE;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,UAAU;KACtB;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAG,EAAE,MAAM,EAAE,SAAS,CAAC;IAChF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI;IACvB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,YAAY;QACrB,MAAM;QACN,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf;QACD,MAAM,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAG,EAAE,GAAG,CAAC,MAAM,CAAC;KACnD,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,SAAiB;IAClE,OAAO,OAAO,SAAS,eAAe,MAAM,eAAe,KAAK,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,MAA0B;IAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/dist/esm/syncs/backup/backupVaults.d.ts

@@ -0,0 +1,2 @@
+export declare const BackupVaultsSync: import("../sync.js").Sync;
+//# sourceMappingURL=backupVaults.d.ts.map

package/dist/esm/syncs/backup/backupVaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupVaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/backup/backupVaults.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,gBAAgB,2BAkD5B,CAAA"}

package/dist/esm/syncs/backup/backupVaults.js

@@ -0,0 +1,48 @@
+import { BackupClient, GetBackupVaultAccessPolicyCommand, ListBackupVaultsCommand, ListTagsCommand } from '@aws-sdk/client-backup';
+import { runAndCatch404, runAndCatchError } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const BackupVaultsSync = createTypedSyncOperation('backup', 'vaults', createResourceSyncType({
+    client: BackupClient,
+    command: ListBackupVaultsCommand,
+    key: 'BackupVaultList',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'backup',
+        resourceType: 'backup-vault',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        tags: async (client, vault) => {
+            return runAndCatchError('ResourceNotFoundException', async () => {
+                return runAndCatch404(async () => {
+                    const tagResult = await client.send(new ListTagsCommand({ ResourceArn: vault.BackupVaultArn }));
+                    return tagResult.Tags;
+                });
+            });
+        },
+        policy: async (client, vault) => {
+            return runAndCatchError('ResourceNotFoundException', async () => {
+                return runAndCatch404(async () => {
+                    const policyResult = await client.send(new GetBackupVaultAccessPolicyCommand({ BackupVaultName: vault.BackupVaultName }));
+                    return parseIfPresent(policyResult.Policy);
+                });
+            });
+        }
+    },
+    tags: (vault) => vault.extraFields.tags,
+    arn: (vault) => vault.BackupVaultArn,
+    results: (vault) => ({
+        metadata: {
+            name: vault.BackupVaultName,
+            key: vault.EncryptionKeyArn,
+            state: vault.VaultState
+        },
+        policy: vault.extraFields.policy
+    })
+}));
+//# sourceMappingURL=backupVaults.js.map

package/dist/esm/syncs/backup/backupVaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupVaults.js","sourceRoot":"","sources":["../../../../src/syncs/backup/backupVaults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,iCAAiC,EACjC,uBAAuB,EACvB,eAAe,EAChB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CACtD,QAAQ,EACR,QAAQ,EACR,sBAAsB,CAAC;IACrB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,uBAAuB;IAChC,GAAG,EAAE,iBAAiB;IACtB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,cAAc;QAC5B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAC5B,OAAO,gBAAgB,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;gBAC9D,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAC3D,CAAA;oBACD,OAAO,SAAS,CAAC,IAAI,CAAA;gBACvB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAC9B,OAAO,gBAAgB,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;gBAC9D,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,iCAAiC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAClF,CAAA;oBACD,OAAO,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBAC5C,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAe;IACrC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,eAAe;YAC3B,GAAG,EAAE,KAAK,CAAC,gBAAgB;YAC3B,KAAK,EAAE,KAAK,CAAC,UAAU;SACxB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/dynamodb/dynamoDbStreams.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const DynamoDbStreamsSync: Sync;
+//# sourceMappingURL=dynamoDbStreams.d.ts.map

package/dist/esm/syncs/dynamodb/dynamoDbStreams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamoDbStreams.d.ts","sourceRoot":"","sources":["../../../../src/syncs/dynamodb/dynamoDbStreams.ts"],"names":[],"mappings":"AAIA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AAGjE,eAAO,MAAM,mBAAmB,EAAE,IA8DjC,CAAA"}

package/dist/esm/syncs/dynamodb/dynamoDbStreams.js

@@ -0,0 +1,49 @@
+import { DynamoDBClient, GetResourcePolicyCommand } from '@aws-sdk/client-dynamodb';
+import { DynamoDBStreamsClient, ListStreamsCommand } from '@aws-sdk/client-dynamodb-streams';
+import { runAndCatchError } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { syncData } from '../sync.js';
+import { paginateResource } from '../typedSync.js';
+export const DynamoDbStreamsSync = {
+    awsService: 'dynamodb',
+    name: 'dynamoDbStreams',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const streamsClient = syncOptions.clientPool.client(DynamoDBStreamsClient, credentials, region, endpoint);
+        const dynamoClient = syncOptions.clientPool.client(DynamoDBClient, credentials, region, endpoint);
+        const allStreams = await paginateResource(streamsClient, ListStreamsCommand, 'Streams', {
+            inputKey: 'ExclusiveStartStreamArn',
+            outputKey: 'LastEvaluatedStreamArn'
+        });
+        const streams = [];
+        for (const stream of allStreams) {
+            const streamArn = stream.StreamArn;
+            const tableName = streamArn.split('/')[1];
+            const policy = await runAndCatchError('PolicyNotFoundException', async () => {
+                const result = await dynamoClient.send(new GetResourcePolicyCommand({ ResourceArn: streamArn }));
+                return parseIfPresent(result.Policy);
+            });
+            streams.push({
+                arn: streamArn,
+                metadata: {
+                    arn: streamArn,
+                    label: stream.StreamLabel,
+                    tableName,
+                    stream: 'true'
+                },
+                policy
+            });
+        }
+        await syncData(streams, storage, accountId, {
+            // Stream ARNS start with the table ARN, so we use table as the resource type
+            // and then set the metadata to indicate that this is a stream resource
+            service: 'dynamodb',
+            resourceType: 'table',
+            account: accountId,
+            region: region,
+            metadata: {
+                stream: 'true'
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+//# sourceMappingURL=dynamoDbStreams.js.map

package/dist/esm/syncs/dynamodb/dynamoDbStreams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamoDbStreams.js","sourceRoot":"","sources":["../../../../src/syncs/dynamodb/dynamoDbStreams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AACnF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAA8B,QAAQ,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CACjD,qBAAqB,EACrB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAChD,cAAc,EACd,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,kBAAkB,EAAE,SAAS,EAAE;YACtF,QAAQ,EAAE,yBAAyB;YACnC,SAAS,EAAE,wBAAwB;SACpC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAiB,EAAE,CAAA;QAChC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAU,CAAA;YACnC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACzC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;gBAC1E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CACpC,IAAI,wBAAwB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CACzD,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE;oBACR,GAAG,EAAE,SAAS;oBACd,KAAK,EAAE,MAAM,CAAC,WAAW;oBACzB,SAAS;oBACT,MAAM,EAAE,MAAM;iBACf;gBACD,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,QAAQ,CACZ,OAAO,EACP,OAAO,EACP,SAAS,EACT;YACE,6EAA6E;YAC7E,uEAAuE;YACvE,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,MAAM,EAAE,MAAM;aACf;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/esm/syncs/dynamodb/tables.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Sync AWS tables Manager tables and their resource policies.
+ */
+export declare const DynamoDBTableSync: import("../sync.js").Sync;
+//# sourceMappingURL=tables.d.ts.map

package/dist/esm/syncs/dynamodb/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../../../src/syncs/dynamodb/tables.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,eAAO,MAAM,iBAAiB,2BAqE7B,CAAA"}

package/dist/esm/syncs/dynamodb/tables.js

@@ -0,0 +1,76 @@
+import { DynamoDBClient, GetResourcePolicyCommand, ListTablesCommand, ListTagsOfResourceCommand } from '@aws-sdk/client-dynamodb';
+import { runAndCatch404, runAndCatchError } from '../../utils/client-tools.js';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { createResourceSyncType, createTypedSyncOperation, paginateResource } from '../typedSync.js';
+/**
+ * Sync AWS tables Manager tables and their resource policies.
+ */
+export const DynamoDBTableSync = createTypedSyncOperation('dynamodb', 'tables', createResourceSyncType({
+    client: DynamoDBClient,
+    command: ListTablesCommand,
+    key: 'TableNames',
+    paginationConfig: {
+        inputKey: 'ExclusiveStartTableName',
+        outputKey: 'LastEvaluatedTableName'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'dynamodb',
+        resourceType: 'table',
+        account: accountId,
+        region: region,
+        metadata: {
+            // We set this to true to indicate that this is a table resource
+            // and not a stream resource. This is important for the
+            // DynamoDBTableSync to work correctly.
+            table: 'true'
+        }
+    }),
+    extraFields: {
+        policy: async (client, table, accountId, region, partition) => {
+            const arn = tableArn(partition, region, accountId, table.name);
+            return runAndCatchError('PolicyNotFoundException', async () => {
+                const response = await client.send(new GetResourcePolicyCommand({
+                    ResourceArn: arn
+                }));
+                if (response.Policy) {
+                    return JSON.parse(response.Policy);
+                }
+                return undefined;
+            });
+        },
+        tags: async (client, table, accountId, region, partition) => {
+            const arn = tableArn(partition, region, accountId, table.name);
+            return runAndCatch404(async () => {
+                const response = await paginateResource(client, ListTagsOfResourceCommand, 'Tags', {
+                    inputKey: 'NextToken',
+                    outputKey: 'NextToken'
+                }, {
+                    ResourceArn: arn
+                });
+                return convertTagsToRecord(response);
+            });
+        }
+    },
+    tags: (table) => table.extraFields.tags,
+    arn: (table, region, accountId, partition) => tableArn(partition, region, accountId, table.name),
+    results: (table) => ({
+        metadata: {
+            name: table.name,
+            table: 'true'
+        },
+        policy: table.extraFields.policy
+    })
+}));
+/**
+ * Create a DynamoDB Table ARN from the given parameters.
+ *
+ * @param partition the AWS partition (e.g., 'aws', 'aws-cn', 'aws-us-gov')
+ * @param region the AWS region (e.g., 'us-east-1')
+ * @param accountId the AWS account ID
+ * @param tableName the name of the DynamoDB table
+ * @returns the ARN of the table
+ */
+function tableArn(partition, region, accountId, tableName) {
+    return `arn:${partition}:dynamodb:${region}:${accountId}:table/${tableName}`;
+}
+//# sourceMappingURL=tables.js.map

package/dist/esm/syncs/dynamodb/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../../../src/syncs/dynamodb/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,yBAAyB,EAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEpG;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CACvD,UAAU,EACV,QAAQ,EACR,sBAAsB,CAAC;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,YAAY;IACjB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,yBAAyB;QACnC,SAAS,EAAE,wBAAwB;KACpC;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,gEAAgE;YAChE,uDAAuD;YACvD,uCAAuC;YACvC,KAAK,EAAE,MAAM;SACd;KACF,CAAC;IACF,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9D,OAAO,gBAAgB,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;gBAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,wBAAwB,CAAC;oBAC3B,WAAW,EAAE,GAAG;iBACjB,CAAC,CACH,CAAA;gBACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBACpC,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9D,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,MAAM,EACN,yBAAyB,EACzB,MAAM,EACN;oBACE,QAAQ,EAAE,WAAW;oBACrB,SAAS,EAAE,WAAW;iBACvB,EACD;oBACE,WAAW,EAAE,GAAG;iBACjB,CACF,CAAA;gBAED,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC;IACpD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAK;YACjB,KAAK,EAAE,MAAM;SACd;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,MAAc,EAAE,SAAiB,EAAE,SAAiB;IACvF,OAAO,OAAO,SAAS,aAAa,MAAM,IAAI,SAAS,UAAU,SAAS,EAAE,CAAA;AAC9E,CAAC"}

package/dist/esm/syncs/ec2/vpcEndpoints.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const VpcEndpointsSync: Sync;
+//# sourceMappingURL=vpcEndpoints.d.ts.map

package/dist/esm/syncs/ec2/vpcEndpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpcEndpoints.d.ts","sourceRoot":"","sources":["../../../../src/syncs/ec2/vpcEndpoints.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,gBAAgB,EAAE,IAwC9B,CAAA"}

package/dist/esm/syncs/ec2/vpcEndpoints.js

@@ -0,0 +1,54 @@
+import { DescribeVpcEndpointsCommand, EC2Client } from '@aws-sdk/client-ec2';
+import { parseIfPresent } from '../../utils/json.js';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const VpcEndpointsSync = createTypedSyncOperation('ec2', 'vpcEndpoints', createResourceSyncType({
+    client: EC2Client,
+    command: DescribeVpcEndpointsCommand,
+    key: 'VpcEndpoints',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arguments: (accountId, region) => ({
+        Filters: [{ Name: 'vpc-endpoint-state', Values: ['available'] }]
+    }),
+    arn: (resource, region, accountId, partition) => {
+        return `arn:${partition}:ec2:${region}:${accountId}:vpc-endpoint/${resource.VpcEndpointId}`;
+    },
+    resourceTypeParts: (account, region) => ({
+        service: 'ec2',
+        resourceType: 'vpc-endpoint',
+        account,
+        region
+    }),
+    extraFields: {
+        vpcArn: async (client, resource, accountId, region, partition) => {
+            return vpcArn(accountId, region, partition, resource.VpcId);
+        }
+    },
+    tags: (resource) => resource.Tags,
+    results: (resource) => ({
+        metadata: {
+            id: resource.VpcEndpointId,
+            vpc: resource.extraFields.vpcArn,
+            type: resource.VpcEndpointType,
+            serviceName: resource.ServiceName
+        },
+        policy: undefined,
+        'endpoint-policy': parseIfPresent(resource.PolicyDocument)
+    })
+}));
+/**
+ * Make a VPC ARN from the account ID, region, partition, and VPC ID.
+ *
+ * @param accountId
+ * @param region
+ * @param partition
+ * @param vpcId
+ * @returns
+ */
+function vpcArn(accountId, region, partition, vpcId) {
+    return `arn:${partition}:ec2:${region}:${accountId}:vpc/${vpcId}`;
+}
+//# sourceMappingURL=vpcEndpoints.js.map

package/dist/esm/syncs/ec2/vpcEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpcEndpoints.js","sourceRoot":"","sources":["../../../../src/syncs/ec2/vpcEndpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,gBAAgB,GAAS,wBAAwB,CAC5D,KAAK,EACL,cAAc,EACd,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,2BAA2B;IACpC,GAAG,EAAE,cAAc;IACnB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;QAC9C,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,SAAS,iBAAiB,QAAQ,CAAC,aAAa,EAAE,CAAA;IAC7F,CAAC;IACD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,cAAc;QAC5B,OAAO;QACP,MAAM;KACP,CAAC;IACF,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC/D,OAAO,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAM,CAAC,CAAA;QAC9D,CAAC;KACF;IACD,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI;IACjC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtB,QAAQ,EAAE;YACR,EAAE,EAAE,QAAQ,CAAC,aAAa;YAC1B,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM;YAChC,IAAI,EAAE,QAAQ,CAAC,eAAe;YAC9B,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC;QACD,MAAM,EAAE,SAAS;QACjB,iBAAiB,EAAE,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC;KAC3D,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;;GAQG;AACH,SAAS,MAAM,CAAC,SAAiB,EAAE,MAAc,EAAE,SAAiB,EAAE,KAAa;IACjF,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,SAAS,QAAQ,KAAK,EAAE,CAAA;AACnE,CAAC"}

package/dist/esm/syncs/ecr/ecrSyncs.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const EcrSyncs: Sync[];
+//# sourceMappingURL=ecrSyncs.d.ts.map

package/dist/esm/syncs/ecr/ecrSyncs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecrSyncs.d.ts","sourceRoot":"","sources":["../../../../src/syncs/ecr/ecrSyncs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,QAAQ,EAAE,IAAI,EAkE1B,CAAA"}