@actsecurity/iam-collect 0.1.215

package/dist/esm/syncs/iam/authorizationDetails.js

@@ -0,0 +1,295 @@
+import { GetAccountAuthorizationDetailsCommand, IAMClient, ListPolicyTagsCommand } from '@aws-sdk/client-iam';
+import { ConcurrentWorkerPool } from '@actsecurity/job';
+import {} from '../../aws/coreAuth.js';
+import {} from '../../persistence/AwsIamStore.js';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { log } from '@cloud-copilot/log';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { syncData } from '../sync.js';
+export const AuthorizationDetailsSync = {
+    awsService: 'iam',
+    name: 'authorizationDetails',
+    global: true,
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const client = syncOptions.clientPool.client(IAMClient, credentials, region, endpoint);
+        const authDetails = await getAuthorizationDetails(client, syncOptions.workerPool, syncOptions.customConfig);
+        const roles = authDetails.roles || [];
+        const roleData = roles.map((role) => {
+            return {
+                arn: role.Arn,
+                'managed-policies': role.AttachedManagedPolicies?.map((p) => p.PolicyArn),
+                'trust-policy': role.AssumeRolePolicyDocument,
+                'instance-profiles': role.InstanceProfileList?.map((i) => i.Arn),
+                'inline-policies': role.RolePolicyList,
+                tags: convertTagsToRecord(role.Tags),
+                metadata: {
+                    arn: role.Arn,
+                    name: role.RoleName,
+                    id: role.RoleId,
+                    path: role.Path,
+                    created: role.CreateDate,
+                    permissionBoundary: role.PermissionsBoundary?.PermissionsBoundaryArn
+                }
+            };
+        });
+        await syncData(roleData, storage, accountId, {
+            service: 'iam',
+            resourceType: 'role',
+            account: accountId
+        }, syncOptions.writeOnly);
+        const groupArns = {};
+        const groupData = authDetails.groups.map((group) => {
+            groupArns[group.GroupName] = group.Arn;
+            return {
+                arn: group.Arn,
+                'inline-policies': group.GroupPolicyList,
+                'managed-policies': group.AttachedManagedPolicies?.map((p) => p.PolicyArn),
+                metadata: {
+                    arn: group.Arn,
+                    path: group.Path,
+                    name: group.GroupName,
+                    id: group.GroupId,
+                    created: group.CreateDate
+                }
+            };
+        });
+        await syncData(groupData, storage, accountId, {
+            service: 'iam',
+            resourceType: 'group',
+            account: accountId
+        }, syncOptions.writeOnly);
+        const customerPolicyData = authDetails.policies.map((policy) => {
+            return {
+                arn: policy.Arn,
+                metadata: {
+                    arn: policy.Arn,
+                    name: policy.PolicyName,
+                    id: policy.PolicyId,
+                    description: policy.Description,
+                    defaultVersionId: policy.DefaultVersionId,
+                    path: policy.Path,
+                    permissionsBoundaryUsageCount: policy.PermissionsBoundaryUsageCount,
+                    isAttachable: policy.IsAttachable,
+                    createDate: policy.CreateDate,
+                    updateDate: policy.UpdateDate
+                },
+                'current-policy': policy.PolicyVersionList?.filter((version) => version.IsDefaultVersion).at(0)?.Document,
+                policy: undefined,
+                tags: convertTagsToRecord(policy.Tags)
+            };
+        });
+        await syncData(customerPolicyData, storage, accountId, {
+            service: 'iam',
+            resourceType: 'policy',
+            account: accountId
+        }, syncOptions.writeOnly);
+        const awsManagedPolicyData = authDetails.awsManagedPolicies.map((policy) => {
+            return {
+                arn: policy.Arn,
+                metadata: {
+                    arn: policy.Arn,
+                    name: policy.PolicyName,
+                    id: policy.PolicyId,
+                    description: policy.Description,
+                    defaultVersionId: policy.DefaultVersionId,
+                    path: policy.Path,
+                    permissionsBoundaryUsageCount: policy.PermissionsBoundaryUsageCount,
+                    isAttachable: policy.IsAttachable,
+                    createDate: policy.CreateDate,
+                    updateDate: policy.UpdateDate
+                },
+                'current-policy': policy.PolicyVersionList?.filter((version) => version.IsDefaultVersion).at(0)?.Document,
+                policy: undefined
+            };
+        });
+        await syncData(awsManagedPolicyData, storage, accountId, {
+            service: 'iam',
+            resourceType: 'policy',
+            account: 'aws'
+        }, syncOptions.writeOnly);
+        const userData = authDetails.users.map((user) => {
+            return {
+                arn: user.Arn,
+                'managed-policies': user.AttachedManagedPolicies?.map((p) => p.PolicyArn),
+                'inline-policies': user.UserPolicyList,
+                groups: user.GroupList?.map((g) => groupArns[g]),
+                tags: convertTagsToRecord(user.Tags),
+                metadata: {
+                    arn: user.Arn,
+                    path: user.Path,
+                    permissionBoundary: user.PermissionsBoundary?.PermissionsBoundaryArn,
+                    id: user.UserId,
+                    name: user.UserName,
+                    created: user.CreateDate
+                }
+            };
+        });
+        syncData(userData, storage, accountId, {
+            service: 'iam',
+            resourceType: 'user',
+            account: accountId
+        }, syncOptions.writeOnly);
+    }
+};
+/**
+ * Return the results of the Authorization Details call for this account.
+ * Excludes users and AWS managed policies.
+ *
+ * @param credentials The credentials to use for the API call
+ * @returns Returns the results of the Authorization Details call for this account
+ */
+export async function getAuthorizationDetails(client, concurrentWorkerPool, customConfig) {
+    let isTruncated = false;
+    let getDetailsCommand;
+    let response;
+    let marker;
+    const groupDetails = [];
+    const roleDetails = [];
+    const policyDetails = [];
+    const awsManagedPolicies = [];
+    const userDetails = [];
+    do {
+        getDetailsCommand = new GetAccountAuthorizationDetailsCommand({
+            Marker: marker,
+            Filter: ['Role', 'Group', 'LocalManagedPolicy', 'AWSManagedPolicy', 'User']
+        });
+        response = await client.send(getDetailsCommand);
+        groupDetails.push(...(response.GroupDetailList?.map(parseGroupDocs) || []));
+        roleDetails.push(...(response.RoleDetailList?.map(parseRoleDocs) || []));
+        userDetails.push(...(response.UserDetailList?.map(parseUserDocs) || []));
+        for (const policy of response.Policies || []) {
+            const policyDetail = parsePolicyDocs(policy);
+            if (policyDetail.Arn?.startsWith('arn:aws:iam::aws:policy/')) {
+                awsManagedPolicies.push(policyDetail);
+            }
+            else {
+                policyDetails.push(policyDetail);
+            }
+        }
+        isTruncated = !!response.IsTruncated;
+        marker = response.Marker;
+    } while (isTruncated);
+    let policiesWithTags = policyDetails;
+    if (customConfig?.includePolicyTags) {
+        log.info('Including policy tags in authorization details sync');
+        policiesWithTags = await getTagsForManagedPolicies(client, policyDetails, concurrentWorkerPool);
+    }
+    return {
+        groups: groupDetails,
+        roles: roleDetails,
+        policies: policiesWithTags,
+        awsManagedPolicies,
+        users: userDetails
+    };
+}
+/**
+ * Download the tags for the managed policies.
+ *
+ * @param client the IAM client to use for the API call
+ * @param policies the policies to get the tags for
+ * @returns the policies with the tags added
+ */
+async function getTagsForManagedPolicies(client, policies, concurrentWorkerPool) {
+    const policiesWithTags = [];
+    const execute = async (context) => {
+        const { policy } = context.properties;
+        const command = new ListPolicyTagsCommand({ PolicyArn: policy.Arn });
+        const tags = await runAndCatch404(async () => {
+            const result = await client.send(command);
+            return result.Tags;
+        });
+        return {
+            ...policy,
+            Tags: tags
+        };
+    };
+    const jobs = policies.map((policy) => ({
+        properties: {
+            policy
+        },
+        execute
+    }));
+    const jobResults = await Promise.all(concurrentWorkerPool.enqueueAll(jobs));
+    for (const jobResult of jobResults) {
+        if (jobResult.status === 'fulfilled') {
+            policiesWithTags.push(jobResult.value);
+        }
+        else {
+            // Log the error but continue processing other policies
+            const policyArn = jobResult.properties.policy.Arn;
+            log.error('Failed to get tags for policy', jobResult.reason, {
+                policyArn
+            });
+            throw new Error(`Failed to get tags for policy ${policyArn}. See logs for details.`);
+        }
+    }
+    return policiesWithTags;
+}
+/**
+ * Decodes and parses the policy documents in the group.
+ *
+ * @param group The GroupDetail object to parse the policy documents for
+ * @returns Returns the GroupDetail object with the policy documents decoded and parsed
+ */
+function parseGroupDocs(group) {
+    if (group.GroupPolicyList) {
+        group.GroupPolicyList.forEach((policy) => {
+            if (policy.PolicyDocument) {
+                policy.PolicyDocument = JSON.parse(decodeURIComponent(policy.PolicyDocument));
+            }
+        });
+    }
+    return group;
+}
+/**
+ * Decodes and parses the policy documents in the role.
+ *
+ * @param role the RoleDetail object to parse the policy documents for
+ * @returns Returns the RoleDetail object with the policy documents decoded and parsed
+ */
+function parseRoleDocs(role) {
+    if (role.AssumeRolePolicyDocument) {
+        role.AssumeRolePolicyDocument = JSON.parse(decodeURIComponent(role.AssumeRolePolicyDocument));
+    }
+    if (role.RolePolicyList) {
+        role.RolePolicyList.forEach((policy) => {
+            if (policy.PolicyDocument) {
+                policy.PolicyDocument = JSON.parse(decodeURIComponent(policy.PolicyDocument));
+            }
+        });
+    }
+    return role;
+}
+/**
+ * Decodes and parses the policy documents in the managed policy.
+ *
+ * @param policy The ManagedPolicyDetail object to parse the policy documents for
+ * @returns Returns the ManagedPolicyDetail object with the policy documents decoded and parsed
+ */
+function parsePolicyDocs(policy) {
+    if (policy.PolicyVersionList) {
+        policy.PolicyVersionList.forEach((version) => {
+            if (version.Document) {
+                version.Document = JSON.parse(decodeURIComponent(version.Document));
+            }
+        });
+    }
+    return policy;
+}
+/**
+ * Decodes and parses the policy documents attached directly to a user.
+ *
+ * @param user The userDetail object to parse the policy documents for
+ * @returns Returns the UserDetail object with the policy documents decoded and parsed
+ */
+function parseUserDocs(user) {
+    if (user.UserPolicyList) {
+        user.UserPolicyList.forEach((policy) => {
+            if (policy.PolicyDocument) {
+                policy.PolicyDocument = JSON.parse(decodeURIComponent(policy.PolicyDocument));
+            }
+        });
+    }
+    return user;
+}
+//# sourceMappingURL=authorizationDetails.js.map

package/dist/esm/syncs/iam/authorizationDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizationDetails.js","sourceRoot":"","sources":["../../../../src/syncs/iam/authorizationDetails.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EAGrC,SAAS,EACT,qBAAqB,EAKtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAY,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAoB,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAa,QAAQ,EAAoB,MAAM,YAAY,CAAA;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK,EACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB,EACT,EAAE;QACjB,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtF,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAC/C,MAAM,EACN,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,YAAY,CACzB,CAAA;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAA;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAI;gBACd,kBAAkB,EAAE,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,cAAc,EAAE,IAAI,CAAC,wBAAwB;gBAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBAChE,iBAAiB,EAAE,IAAI,CAAC,cAAc;gBACtC,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,QAAQ,EAAE;oBACR,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,EAAE,EAAE,IAAI,CAAC,MAAM;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,UAAU;oBACxB,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE,sBAAsB;iBACrE;aACF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,SAAS;SACnB,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;QAED,MAAM,SAAS,GAA2B,EAAE,CAAA;QAE5C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,SAAS,CAAC,KAAK,CAAC,SAAU,CAAC,GAAG,KAAK,CAAC,GAAI,CAAA;YACxC,OAAO;gBACL,GAAG,EAAE,KAAK,CAAC,GAAI;gBACf,iBAAiB,EAAE,KAAK,CAAC,eAAe;gBACxC,kBAAkB,EAAE,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAE1E,QAAQ,EAAE;oBACR,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,SAAS;oBACrB,EAAE,EAAE,KAAK,CAAC,OAAO;oBACjB,OAAO,EAAE,KAAK,CAAC,UAAU;iBAC1B;aACF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CACZ,SAAS,EACT,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,SAAS;SACnB,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;QAED,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7D,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAI;gBAChB,QAAQ,EAAE;oBACR,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,IAAI,EAAE,MAAM,CAAC,UAAU;oBACvB,EAAE,EAAE,MAAM,CAAC,QAAQ;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;oBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACD,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAChD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CACtC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ;gBACjB,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;aACvC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CACZ,kBAAkB,EAClB,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAE,SAAS;SACnB,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;QAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzE,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAI;gBAChB,QAAQ,EAAE;oBACR,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,IAAI,EAAE,MAAM,CAAC,UAAU;oBACvB,EAAE,EAAE,MAAM,CAAC,QAAQ;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;oBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACD,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAChD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CACtC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,CACZ,oBAAoB,EACpB,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAE,KAAK;SACf,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC9C,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAI;gBACd,kBAAkB,EAAE,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,iBAAiB,EAAE,IAAI,CAAC,cAAc;gBACtC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAChD,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,QAAQ,EAAE;oBACR,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE,sBAAsB;oBACpE,EAAE,EAAE,IAAI,CAAC,MAAM;oBACf,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,OAAO,EAAE,IAAI,CAAC,UAAU;iBACzB;aACF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,QAAQ,CACN,QAAQ,EACR,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,SAAS;SACnB,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAMD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAiB,EACjB,oBAAoD,EACpD,YAAkC;IAQlC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,iBAAwD,CAAA;IAC5D,IAAI,QAAgD,CAAA;IACpD,IAAI,MAAM,CAAA;IAEV,MAAM,YAAY,GAAkB,EAAE,CAAA;IACtC,MAAM,WAAW,GAAiB,EAAE,CAAA;IACpC,MAAM,aAAa,GAA0B,EAAE,CAAA;IAC/C,MAAM,kBAAkB,GAA0B,EAAE,CAAA;IACpD,MAAM,WAAW,GAAiB,EAAE,CAAA;IAEpC,GAAG,CAAC;QACF,iBAAiB,GAAG,IAAI,qCAAqC,CAAC;YAC5D,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,CAAC;SAC5E,CAAC,CAAA;QAEF,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC/C,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC3E,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACxE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAExE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YAC5C,IAAI,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC7D,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACvC,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QAED,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAA;QACpC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC1B,CAAC,QAAQ,WAAW,EAAC;IAErB,IAAI,gBAAgB,GAAuC,aAAa,CAAA;IACxE,IAAI,YAAY,EAAE,iBAAiB,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;QAC/D,gBAAgB,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAA;IACjG,CAAC;IAED,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,gBAAgB;QAC1B,kBAAkB;QAClB,KAAK,EAAE,WAAW;KACnB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CACtC,MAAiB,EACjB,QAA+B,EAC/B,oBAAoD;IAEpD,MAAM,gBAAgB,GAAuC,EAAE,CAAA;IAC/D,MAAM,OAAO,GAAG,KAAK,EAAE,OAAY,EAAE,EAAE;QACrC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAI,EAAE,CAAC,CAAA;QACrE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzC,OAAO,MAAM,CAAC,IAAI,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC,CAAA;IACD,MAAM,IAAI,GAAqE,QAAQ,CAAC,GAAG,CACzF,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACX,UAAU,EAAE;YACV,MAAM;SACP;QACD,OAAO;KACR,CAAC,CACH,CAAA;IACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,uDAAuD;YACvD,MAAM,SAAS,GAAI,SAAS,CAAC,UAAU,CAAC,MAA8B,CAAC,GAAG,CAAA;YAC1E,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE,SAAS,CAAC,MAAM,EAAE;gBAC3D,SAAS;aACV,CAAC,CAAA;YACF,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,yBAAyB,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAkB;IACxC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAgB;IACrC,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAA2B;IAClD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;YACrE,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAgB;IACrC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/esm/syncs/iam/identityProviders.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const IdentityProviderSyncs: Sync[];
+//# sourceMappingURL=identityProviders.d.ts.map

package/dist/esm/syncs/iam/identityProviders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityProviders.d.ts","sourceRoot":"","sources":["../../../../src/syncs/iam/identityProviders.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,qBAAqB,EAAE,IAAI,EA2EvC,CAAA"}

package/dist/esm/syncs/iam/identityProviders.js

@@ -0,0 +1,68 @@
+import { GetOpenIDConnectProviderCommand, GetSAMLProviderCommand, IAMClient, ListOpenIDConnectProvidersCommand, ListSAMLProvidersCommand } from '@aws-sdk/client-iam';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const IdentityProviderSyncs = [
+    createTypedSyncOperation('iam', 'oidcProviders', createResourceSyncType({
+        globalResourceType: true,
+        client: IAMClient,
+        command: ListOpenIDConnectProvidersCommand,
+        key: 'OpenIDConnectProviderList',
+        paginationConfig: '::no-pagination::',
+        arn: (provider) => provider.Arn,
+        resourceTypeParts: (account, region) => ({
+            service: 'iam',
+            account,
+            resourceType: 'oidc-provider'
+        }),
+        extraFields: {
+            details: async (client, provider) => {
+                const command = new GetOpenIDConnectProviderCommand({
+                    OpenIDConnectProviderArn: provider.Arn
+                });
+                const result = await client.send(command);
+                return result;
+            }
+        },
+        tags: (provider) => provider.extraFields.details?.Tags,
+        results: (provider) => ({
+            metadata: {
+                audiences: provider.extraFields.details?.ClientIDList,
+                thumbprints: provider.extraFields.details?.ThumbprintList,
+                url: provider.extraFields.details?.Url
+            }
+        })
+    })),
+    createTypedSyncOperation('iam', 'samlProviders', createResourceSyncType({
+        globalResourceType: true,
+        client: IAMClient,
+        command: ListSAMLProvidersCommand,
+        key: 'SAMLProviderList',
+        paginationConfig: '::no-pagination::',
+        arn: (provider) => provider.Arn,
+        resourceTypeParts: (account, region) => ({
+            service: 'iam',
+            account,
+            resourceType: 'saml-provider'
+        }),
+        extraFields: {
+            details: async (client, provider) => {
+                const command = new GetSAMLProviderCommand({
+                    SAMLProviderArn: provider.Arn
+                });
+                const result = await client.send(command);
+                return result;
+            }
+        },
+        tags: (provider) => provider.extraFields.details?.Tags,
+        results: (provider) => ({
+            metadata: {
+                assertEncryption: provider.extraFields.details?.AssertionEncryptionMode,
+                'metadata-document': provider.extraFields.details?.SAMLMetadataDocument,
+                privateKeys: provider.extraFields.details?.PrivateKeyList,
+                uuid: provider.extraFields.details?.SAMLProviderUUID,
+                validUntil: provider.extraFields.details?.ValidUntil
+            }
+        })
+    }))
+];
+//# sourceMappingURL=identityProviders.js.map

package/dist/esm/syncs/iam/identityProviders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityProviders.js","sourceRoot":"","sources":["../../../../src/syncs/iam/identityProviders.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,SAAS,EACT,iCAAiC,EACjC,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,qBAAqB,GAAW;IAC3C,wBAAwB,CACtB,KAAK,EACL,eAAe,EAEf,sBAAsB,CAAC;QACrB,kBAAkB,EAAE,IAAI;QACxB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,2BAA2B;QAChC,gBAAgB,EAAE,mBAAmB;QACrC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAI;QAChC,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,OAAO;YACP,YAAY,EAAE,eAAe;SAC9B,CAAC;QAEF,WAAW,EAAE;YACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAClC,MAAM,OAAO,GAAG,IAAI,+BAA+B,CAAC;oBAClD,wBAAwB,EAAE,QAAQ,CAAC,GAAI;iBACxC,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzC,OAAO,MAAM,CAAA;YACf,CAAC;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;QACtD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE;gBACR,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY;gBACrD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc;gBACzD,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG;aACvC;SACF,CAAC;KACH,CAAC,CACH;IACD,wBAAwB,CACtB,KAAK,EACL,eAAe,EAEf,sBAAsB,CAAC;QACrB,kBAAkB,EAAE,IAAI;QACxB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,wBAAwB;QACjC,GAAG,EAAE,kBAAkB;QACvB,gBAAgB,EAAE,mBAAmB;QACrC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAI;QAChC,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,OAAO;YACP,YAAY,EAAE,eAAe;SAC9B,CAAC;QAEF,WAAW,EAAE;YACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAClC,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC;oBACzC,eAAe,EAAE,QAAQ,CAAC,GAAI;iBAC/B,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACzC,OAAO,MAAM,CAAA;YACf,CAAC;SACF;QACD,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;QACtD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE;gBACR,gBAAgB,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,uBAAuB;gBACvE,mBAAmB,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,oBAAoB;gBACvE,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc;gBACzD,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,gBAAgB;gBACpD,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU;aACrD;SACF,CAAC;KACH,CAAC,CACH;CACF,CAAA"}

package/dist/esm/syncs/iam/instanceProfiles.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const InstanceProfilesSync: Sync;
+//# sourceMappingURL=instanceProfiles.d.ts.map

package/dist/esm/syncs/iam/instanceProfiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.d.ts","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,oBAAoB,EAAE,IA2BlC,CAAA"}

package/dist/esm/syncs/iam/instanceProfiles.js

@@ -0,0 +1,28 @@
+import { IAMClient, ListInstanceProfilesCommand } from '@aws-sdk/client-iam';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const InstanceProfilesSync = createTypedSyncOperation('iam', 'instanceprofiles', createResourceSyncType({
+    client: IAMClient,
+    command: ListInstanceProfilesCommand,
+    key: 'InstanceProfiles',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'Marker'
+    },
+    arn: (profile) => profile.Arn,
+    tags: (profile) => profile.Tags,
+    resourceTypeParts: (account, region) => ({
+        service: 'iam',
+        account,
+        resourceType: 'instance-profile'
+    }),
+    results: (profile) => ({
+        metadata: {
+            name: profile.Path,
+            roles: profile.Roles?.map((role) => role.Arn),
+            id: profile.InstanceProfileId,
+            path: profile.Path
+        }
+    })
+}));
+//# sourceMappingURL=instanceProfiles.js.map

package/dist/esm/syncs/iam/instanceProfiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.js","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,oBAAoB,GAAS,wBAAwB,CAChE,KAAK,EACL,kBAAkB,EAClB,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,2BAA2B;IACpC,GAAG,EAAE,kBAAkB;IACvB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAI;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,OAAO;QACP,YAAY,EAAE,kBAAkB;KACjC,CAAC;IACF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,EAAE,EAAE,OAAO,CAAC,iBAAiB;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/kafka/clusters.d.ts

@@ -0,0 +1,2 @@
+export declare const KafkaClustersSync: import("../sync.js").Sync;
+//# sourceMappingURL=clusters.d.ts.map

package/dist/esm/syncs/kafka/clusters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clusters.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kafka/clusters.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,iBAAiB,2BA+D7B,CAAA"}

package/dist/esm/syncs/kafka/clusters.js

@@ -0,0 +1,59 @@
+import { DescribeClusterCommand, GetClusterPolicyCommand, KafkaClient, ListClustersV2Command, ListTagsForResourceCommand } from '@aws-sdk/client-kafka';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const KafkaClustersSync = createTypedSyncOperation('kafka', 'clusters', createResourceSyncType({
+    client: KafkaClient,
+    command: ListClustersV2Command,
+    key: 'ClusterInfoList',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arn: (cluster) => cluster.ClusterArn,
+    resourceTypeParts: (accountId, region) => ({
+        service: 'kafka',
+        resourceType: 'cluster',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        details: async (client, cluster) => {
+            return runAndCatch404(async () => {
+                if (cluster.ClusterType !== 'PROVISIONED') {
+                    return undefined;
+                }
+                const result = await client.send(new DescribeClusterCommand({
+                    ClusterArn: cluster.ClusterArn
+                }));
+                return result.ClusterInfo;
+            });
+        },
+        policy: async (client, cluster) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new GetClusterPolicyCommand({
+                    ClusterArn: cluster.ClusterArn
+                }));
+                return parseIfPresent(result.Policy);
+            });
+        },
+        tags: async (client, cluster) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new ListTagsForResourceCommand({
+                    ResourceArn: cluster.ClusterArn
+                }));
+                return result.Tags;
+            });
+        }
+    },
+    tags: (cluster) => cluster.extraFields.tags,
+    results: (cluster) => ({
+        metadata: {
+            name: cluster.ClusterName,
+            arn: cluster.ClusterArn,
+            keyId: cluster.extraFields.details?.EncryptionInfo?.EncryptionAtRest?.DataVolumeKMSKeyId
+        },
+        policy: cluster.extraFields.policy
+    })
+}));
+//# sourceMappingURL=clusters.js.map

package/dist/esm/syncs/kafka/clusters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clusters.js","sourceRoot":"","sources":["../../../../src/syncs/kafka/clusters.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CACvD,OAAO,EACP,UAAU,EACV,sBAAsB,CAAC;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,qBAAqB;IAC9B,GAAG,EAAE,iBAAiB;IACtB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAW;IACrC,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,SAAS;QACvB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACjC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,IAAI,OAAO,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;oBAC1C,OAAO,SAAS,CAAA;gBAClB,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,sBAAsB,CAAC;oBACzB,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,WAAW,CAAA;YAC3B,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YAChC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,uBAAuB,CAAC;oBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CACH,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YAC9B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,0BAA0B,CAAC;oBAC7B,WAAW,EAAE,OAAO,CAAC,UAAU;iBAChC,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI;IAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB;SACzF;QACD,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;KACnC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/kinesis/dataStreams.d.ts

@@ -0,0 +1,2 @@
+export declare const KinesisDataStreamsSync: import("../sync.js").Sync;
+//# sourceMappingURL=dataStreams.d.ts.map

package/dist/esm/syncs/kinesis/dataStreams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataStreams.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kinesis/dataStreams.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,sBAAsB,2BA4DlC,CAAA"}

package/dist/esm/syncs/kinesis/dataStreams.js

@@ -0,0 +1,65 @@
+import { DescribeStreamCommand, GetResourcePolicyCommand, KinesisClient, ListStreamsCommand, ListTagsForStreamCommand } from '@aws-sdk/client-kinesis';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const KinesisDataStreamsSync = createTypedSyncOperation('kinesis', 'dataStreams', createResourceSyncType({
+    client: KinesisClient,
+    command: ListStreamsCommand,
+    key: 'StreamNames',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arn: (streamName, region, accountId, partition) => streamArn(streamName.name, region, accountId, partition),
+    resourceTypeParts: (accountId, region) => ({
+        service: 'kinesis',
+        resourceType: 'stream',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        details: async (client, streamName) => {
+            const result = await client.send(new DescribeStreamCommand({
+                StreamName: streamName.name
+            }));
+            return result.StreamDescription;
+        },
+        policy: async (client, streamName, accountId, region, partition) => {
+            const streamArnValue = streamArn(streamName.name, region, accountId, partition);
+            return runAndCatch404(async () => {
+                const result = await client.send(new GetResourcePolicyCommand({
+                    ResourceARN: streamArnValue
+                }));
+                return parseIfPresent(result.Policy);
+            });
+        },
+        tags: async (client, streamName) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new ListTagsForStreamCommand({
+                    StreamName: streamName.name
+                }));
+                return result.Tags;
+            });
+        }
+    },
+    tags: (stream) => stream.extraFields.tags,
+    results: (stream) => ({
+        metadata: {
+            name: stream.name,
+            encryptionType: stream.extraFields.details?.EncryptionType,
+            keyId: stream.extraFields.details?.KeyId
+        },
+        policy: stream.extraFields.policy
+    })
+}));
+/**
+ * Generate the ARN for a Kinesis data stream.
+ *
+ * @param streamName - The name of the Kinesis data stream.
+ * @param region - The AWS region where the stream is located.
+ * @param accountId - The AWS account ID that owns the stream.
+ * @param partition - The AWS partition (e.g., "aws", "aws-cn", "aws-us-gov").
+ * @returns The ARN of the Kinesis data stream.
+ */
+const streamArn = (streamName, region, accountId, partition) => `arn:${partition}:kinesis:${region}:${accountId}:stream/${streamName}`;
+//# sourceMappingURL=dataStreams.js.map

package/dist/esm/syncs/kinesis/dataStreams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataStreams.js","sourceRoot":"","sources":["../../../../src/syncs/kinesis/dataStreams.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAC5D,SAAS,EACT,aAAa,EACb,sBAAsB,CAAC;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,kBAAkB;IAC3B,GAAG,EAAE,aAAa;IAClB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAChD,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC1D,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,SAAS;QAClB,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC;gBACxB,UAAU,EAAE,UAAU,CAAC,IAAI;aAC5B,CAAC,CACH,CAAA;YACD,OAAO,MAAM,CAAC,iBAAiB,CAAA;QACjC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACjE,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;YAC/E,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,wBAAwB,CAAC;oBAC3B,WAAW,EAAE,cAAc;iBAC5B,CAAC,CACH,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;YACjC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,wBAAwB,CAAC;oBAC3B,UAAU,EAAE,UAAU,CAAC,IAAI;iBAC5B,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;IACzC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc;YAC1D,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK;SACzC;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,CAChB,UAAkB,EAClB,MAAc,EACd,SAAiB,EACjB,SAAiB,EACT,EAAE,CAAC,OAAO,SAAS,YAAY,MAAM,IAAI,SAAS,WAAW,UAAU,EAAE,CAAA"}

package/dist/esm/syncs/kms/key.d.ts

@@ -0,0 +1,2 @@
+export declare const KeySync: import("../sync.js").Sync;
+//# sourceMappingURL=key.d.ts.map

package/dist/esm/syncs/kms/key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO,2BA6CnB,CAAA"}

package/dist/esm/syncs/kms/key.js

@@ -0,0 +1,44 @@
+import { GetKeyPolicyCommand, KMSClient, ListKeysCommand, ListResourceTagsCommand } from '@aws-sdk/client-kms';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const KeySync = createTypedSyncOperation('kms', 'keys', createResourceSyncType({
+    client: KMSClient,
+    command: ListKeysCommand,
+    key: 'Keys',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'kms',
+        resourceType: 'key',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        tags: async (client, key) => {
+            return runAndCatch404(async () => {
+                const tagResult = await client.send(new ListResourceTagsCommand({ KeyId: key.KeyId }));
+                return tagResult.Tags;
+            });
+        },
+        policy: async (client, key) => {
+            return runAndCatch404(async () => {
+                const policyResult = await client.send(new GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
+                if (policyResult.Policy) {
+                    return JSON.parse(policyResult.Policy);
+                }
+                return undefined;
+            });
+        }
+    },
+    tags: (func) => func.extraFields.tags,
+    arn: (func) => func.KeyArn,
+    results: (func) => ({
+        metadata: {
+            id: func.KeyId
+        },
+        policy: func.extraFields.policy
+    })
+}));
+//# sourceMappingURL=key.js.map

package/dist/esm/syncs/kms/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,OAAO,GAAG,wBAAwB,CAC7C,KAAK,EACL,MAAM,EACN,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,eAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;gBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}