@actsecurity/iam-collect 0.1.215

package/dist/esm/syncs/lambda/lambda.d.ts

@@ -0,0 +1,4 @@
+import { type Sync } from '../sync.js';
+export declare const LambdaSync: Sync;
+export declare const LambdaLayerVersionsSync: Sync;
+//# sourceMappingURL=lambda.d.ts.map

package/dist/esm/syncs/lambda/lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../../src/syncs/lambda/lambda.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AA4CjE,eAAO,MAAM,UAAU,EAAE,IAuDxB,CAAA;AAmDD,eAAO,MAAM,uBAAuB,EAAE,IAoErC,CAAA"}

package/dist/esm/syncs/lambda/lambda.js

@@ -0,0 +1,152 @@
+import { GetLayerVersionPolicyCommand, GetPolicyCommand, LambdaClient, ListAliasesCommand, ListFunctionsCommand, ListLayersCommand, ListLayerVersionsCommand, ListTagsCommand } from '@aws-sdk/client-lambda';
+import {} from '@actsecurity/job';
+import { log } from '@cloud-copilot/log';
+import { runAndCatch404, runAndCatchAccessDeniedWithLog, withDnsRetry } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { syncData } from '../sync.js';
+import { createResourceSyncType, paginateResource, paginateResourceConfig } from '../typedSync.js';
+const lambdaFunctionSync = createResourceSyncType({
+    client: LambdaClient,
+    command: ListFunctionsCommand,
+    key: 'Functions',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'lambda',
+        resourceType: 'function',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        tags: async (client, resource) => {
+            return runAndCatch404(async () => {
+                const tagResult = await client.send(new ListTagsCommand({ Resource: resource.FunctionArn }));
+                return tagResult.Tags;
+            });
+        },
+        policy: async (client, resource) => {
+            return runAndCatch404(async () => {
+                const policyResult = await client.send(new GetPolicyCommand({ FunctionName: resource.FunctionName }));
+                return parseIfPresent(policyResult.Policy);
+            });
+        }
+    },
+    tags: (func) => func.extraFields.tags,
+    arn: (func) => func.FunctionArn,
+    results: (func) => ({
+        metadata: {
+            role: func.Role,
+            name: func.FunctionName
+        },
+        policy: func.extraFields.policy
+    })
+});
+export const LambdaSync = {
+    awsService: 'lambda',
+    name: 'lambdaFunctions',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const functions = await paginateResourceConfig(lambdaFunctionSync, credentials, region, endpoint, syncOptions.workerPool, 'lambda', 'lambdaFunctions', syncOptions.clientPool);
+        const records = functions.map((func) => {
+            const result = lambdaFunctionSync.results(func);
+            result.arn = lambdaFunctionSync.arn(func, region, credentials.accountId, credentials.partition);
+            result.metadata.arn = result.arn;
+            result.tags = convertTagsToRecord(lambdaFunctionSync.tags(func));
+            return result;
+        });
+        const lambdaClient = syncOptions.clientPool.client(LambdaClient, credentials, region, endpoint);
+        const aliasJobs = functions.map((func) => ({
+            properties: { function: func },
+            execute: async () => collectAliasRecords(lambdaClient, func)
+        }));
+        const aliasResults = await Promise.all(syncOptions.workerPool.enqueueAll(aliasJobs));
+        for (const result of aliasResults) {
+            if (result.status === 'rejected') {
+                const func = result.properties.function;
+                log.error('Failed to collect Lambda function aliases', result.reason, {
+                    functionArn: func.FunctionArn
+                });
+                throw new Error(`Failed to collect aliases for Lambda function ${func.FunctionArn}`);
+            }
+            records.push(...result.value);
+        }
+        await syncData(records, storage, accountId, lambdaFunctionSync.resourceTypeParts(credentials.accountId, region), syncOptions.writeOnly);
+    }
+};
+async function collectAliasRecords(lambdaClient, func) {
+    const aliases = await withDnsRetry(() => paginateResource(lambdaClient, ListAliasesCommand, 'Aliases', {
+        inputKey: 'Marker',
+        outputKey: 'NextMarker'
+    }, { FunctionName: func.FunctionName }));
+    const records = [];
+    for (const alias of aliases) {
+        const policy = await withDnsRetry(() => runAndCatchAccessDeniedWithLog(alias.AliasArn, 'lambda', 'lambdaFunctions', 'policy', () => runAndCatch404(async () => {
+            const policyResult = await lambdaClient.send(new GetPolicyCommand({
+                FunctionName: func.FunctionName,
+                Qualifier: alias.Name
+            }));
+            return parseIfPresent(policyResult.Policy);
+        })));
+        records.push({
+            arn: alias.AliasArn,
+            metadata: {
+                arn: alias.AliasArn,
+                role: func.Role,
+                name: func.FunctionName,
+                isAlias: 'true',
+                alias: alias.Name,
+                version: alias.FunctionVersion
+            },
+            policy
+        });
+    }
+    return records;
+}
+export const LambdaLayerVersionsSync = {
+    awsService: 'lambda',
+    name: 'lambdaLayerVersions',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const lambdaClient = syncOptions.clientPool.client(LambdaClient, credentials, region, endpoint);
+        const allLayers = await paginateResource(lambdaClient, ListLayersCommand, 'Layers', {
+            inputKey: 'Marker',
+            outputKey: 'NextMarker'
+        });
+        const allLayerVersions = [];
+        for (const layer of allLayers) {
+            const layerVersions = await paginateResource(lambdaClient, ListLayerVersionsCommand, 'LayerVersions', {
+                inputKey: 'Marker',
+                outputKey: 'NextMarker'
+            }, {
+                LayerName: layer.LayerName
+            });
+            for (const version of layerVersions) {
+                const policy = await runAndCatchAccessDeniedWithLog(layer.LayerArn, 'lambda', 'lambdaLayerVersion', 'policy', async () => {
+                    return runAndCatch404(async () => {
+                        const policyResult = await lambdaClient.send(new GetLayerVersionPolicyCommand({
+                            LayerName: layer.LayerName,
+                            VersionNumber: version.Version
+                        }));
+                        return parseIfPresent(policyResult.Policy);
+                    });
+                });
+                allLayerVersions.push({
+                    arn: version.LayerVersionArn,
+                    metadata: {
+                        name: layer.LayerName,
+                        version: version.Version
+                    },
+                    policy: policy
+                });
+            }
+        }
+        await syncData(allLayerVersions, storage, accountId, {
+            service: 'lambda',
+            resourceType: 'layer',
+            account: accountId,
+            region: region
+        }, syncOptions.writeOnly);
+    }
+};
+//# sourceMappingURL=lambda.js.map

package/dist/esm/syncs/lambda/lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../../src/syncs/lambda/lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,4BAA4B,EAC5B,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EAChB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAY,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EACL,cAAc,EACd,8BAA8B,EAC9B,YAAY,EACb,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAA8B,QAAQ,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAElG,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;IAChD,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,oBAAoB;IAC7B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC/B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;gBAC5F,OAAO,SAAS,CAAC,IAAI,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACjC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAC9D,CAAA;gBACD,OAAO,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAY;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,YAAY;SACxB;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,UAAU,GAAS;IAC9B,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAC5C,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,QAAQ,EACR,iBAAiB,EACjB,WAAW,CAAC,UAAU,CACvB,CAAA;QAED,MAAM,OAAO,GAAiB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAe,CAAA;YAC7D,MAAM,CAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CACjC,IAAI,EACJ,MAAM,EACN,WAAW,CAAC,SAAS,EACrB,WAAW,CAAC,SAAS,CACtB,CAAA;YACD,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YAChC,MAAM,CAAC,IAAI,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAChE,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC/F,MAAM,SAAS,GAA6D,SAAS,CAAC,GAAG,CACvF,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACT,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;SAC7D,CAAC,CACH,CAAA;QACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;QACpF,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAiC,CAAA;gBAChE,GAAG,CAAC,KAAK,CAAC,2CAA2C,EAAE,MAAM,CAAC,MAAM,EAAE;oBACpE,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAA;gBACF,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YACtF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,QAAQ,CACZ,OAAO,EACP,OAAO,EACP,SAAS,EACT,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EACnE,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED,KAAK,UAAU,mBAAmB,CAChC,YAA0B,EAC1B,IAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CACtC,gBAAgB,CACd,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB,EACD,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CACpC,CACF,CAAA;IAED,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CACrC,8BAA8B,CAAC,KAAK,CAAC,QAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAC1F,cAAc,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,CAC1C,IAAI,gBAAgB,CAAC;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,KAAK,CAAC,IAAI;aACtB,CAAC,CACH,CAAA;YACD,OAAO,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CACH,CACF,CAAA;QAED,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,KAAK,CAAC,QAAS;YACpB,QAAQ,EAAE;gBACR,GAAG,EAAE,KAAK,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,OAAO,EAAE,KAAK,CAAC,eAAe;aAC/B;YACD,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC/F,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,iBAAiB,EAAE,QAAQ,EAAE;YAClF,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,YAAY;SACxB,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAiB,EAAE,CAAA;QACzC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAC1C,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf;gBACE,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,YAAY;aACxB,EACD;gBACE,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CACF,CAAA;YAED,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,KAAK,CAAC,QAAS,EACf,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,KAAK,IAAI,EAAE;oBACT,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;wBAC/B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,CAC1C,IAAI,4BAA4B,CAAC;4BAC/B,SAAS,EAAE,KAAK,CAAC,SAAU;4BAC3B,aAAa,EAAE,OAAO,CAAC,OAAO;yBAC/B,CAAC,CACH,CAAA;wBACD,OAAO,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;oBAC5C,CAAC,CAAC,CAAA;gBACJ,CAAC,CACF,CAAA;gBAED,gBAAgB,CAAC,IAAI,CAAC;oBACpB,GAAG,EAAE,OAAO,CAAC,eAAgB;oBAC7B,QAAQ,EAAE;wBACR,IAAI,EAAE,KAAK,CAAC,SAAS;wBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB;oBACD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,CACZ,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,QAAQ;YACjB,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;SACf,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/esm/syncs/opensearch/domains.d.ts

@@ -0,0 +1,2 @@
+export declare const OpenSearchDomainsSync: import("../sync.js").Sync;
+//# sourceMappingURL=domains.d.ts.map

package/dist/esm/syncs/opensearch/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,qBAAqB,2BA8CjC,CAAA"}

package/dist/esm/syncs/opensearch/domains.js

@@ -0,0 +1,45 @@
+import { DescribeDomainCommand, ListDomainNamesCommand, ListTagsCommand, OpenSearchClient } from '@aws-sdk/client-opensearch';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+function domainArn(domainName, region, accountId, partition) {
+    return `arn:${partition}:es:${region}:${accountId}:domain/${domainName}`;
+}
+export const OpenSearchDomainsSync = createTypedSyncOperation('es', 'domains', createResourceSyncType({
+    client: OpenSearchClient,
+    command: ListDomainNamesCommand,
+    key: 'DomainNames',
+    paginationConfig: '::no-pagination::',
+    resourceTypeParts: (accountId, region) => ({
+        service: 'es', // OpenSearch domains use 'es' service in ARNs
+        resourceType: 'domain',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        domainDetails: async (client, domain, accountId, region, partition) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new DescribeDomainCommand({ DomainName: domain.DomainName }));
+                return result.DomainStatus;
+            });
+        },
+        tags: async (client, domain, accountId, region, partition) => {
+            return runAndCatch404(async () => {
+                const tagResult = await client.send(new ListTagsCommand({
+                    ARN: domainArn(domain.DomainName, region, accountId, partition)
+                }));
+                return tagResult.TagList;
+            });
+        }
+    },
+    tags: (domain) => domain.extraFields.tags,
+    arn: (domain, region, accountId, partition) => domainArn(domain.DomainName, region, accountId, partition),
+    results: (domain) => ({
+        metadata: {
+            name: domain.DomainName,
+            keyId: domain.extraFields.domainDetails?.EncryptionAtRestOptions?.KmsKeyId
+        },
+        policy: parseIfPresent(domain.extraFields.domainDetails?.AccessPolicies)
+    })
+}));
+//# sourceMappingURL=domains.js.map

package/dist/esm/syncs/opensearch/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,SAAS,SAAS,CAChB,UAAkB,EAClB,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,OAAO,OAAO,SAAS,OAAO,MAAM,IAAI,SAAS,WAAW,UAAU,EAAE,CAAA;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAC3D,IAAI,EACJ,SAAS,EACT,sBAAsB,CAAC;IACrB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,sBAAsB;IAC/B,GAAG,EAAE,aAAa;IAClB,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,8CAA8C;QAC7D,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACpE,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAC7D,CAAA;gBACD,OAAO,MAAM,CAAC,YAAY,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC3D,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,eAAe,CAAC;oBAClB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;iBACjE,CAAC,CACH,CAAA;gBACD,OAAO,SAAS,CAAC,OAAO,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;IACzC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,uBAAuB,EAAE,QAAQ;SAC3E;QAED,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC;KACzE,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/organizations/organizations.d.ts

@@ -0,0 +1,57 @@
+import { type Account, type Organization, type OrganizationalUnit, OrganizationsClient, type Root } from '@aws-sdk/client-organizations';
+import { type Sync } from '../sync.js';
+export declare const OrganizationSync: Sync;
+/**
+ * Get the details of an organization or an account.
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the details of the organization the account belongs to or undefined if the account is not part of an organization or does not have permission.
+ */
+export declare function getOrganizationDetails(client: OrganizationsClient): Promise<Organization | undefined>;
+/**
+ * Get the root Organizational Unit for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the root Organizational Unit for the organization if it exists
+ */
+export declare function getOrganizationRoot(client: OrganizationsClient): Promise<Root | undefined>;
+/**
+ * Get the delegated administrators for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @param organizationArn The ARN of the organization
+ * @returns a map of service principals to account IDs that are delegated administrators for those services
+ */
+export declare function getDelegatedAdministrators(client: OrganizationsClient, organizationArn: string): Promise<Record<string, string[]>>;
+/**
+ * Get the tags for an Organizational Unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param ouId The AWS id of the Organizational Unit to get the tags for
+ * @returns The tags for the Organizational Unit
+ */
+export declare function getTagsForOu(client: OrganizationsClient, ouId: string): Promise<Record<string, string> | undefined>;
+/**
+ * Get the tags for an account
+ * @param client The OrganizationsClient to use
+ * @param accountId The AWS id of the account to get the tags for
+ * @returns The tags for the account
+ */
+export declare function getTagsForAccount(client: OrganizationsClient, accountId: string): Promise<Record<string, string> | undefined>;
+/**
+ * Get the organizational units for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The organizational units directly under the parent
+ */
+export declare function getChildOrgUnits(client: OrganizationsClient, parentId: string): Promise<OrganizationalUnit[]>;
+/**
+ * Get the accounts for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The accounts directly under the parent
+ */
+export declare function getAccountsForParent(client: OrganizationsClient, parentId: string): Promise<Account[]>;
+//# sourceMappingURL=organizations.d.ts.map

package/dist/esm/syncs/organizations/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../../src/syncs/organizations/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAYZ,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,mBAAmB,EAGnB,KAAK,IAAI,EACV,MAAM,+BAA+B,CAAA;AAStC,OAAO,EAAE,KAAK,IAAI,EAAoB,MAAM,YAAY,CAAA;AAgCxD,eAAO,MAAM,gBAAgB,EAAE,IA6O9B,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAenC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAchG;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAC3B,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CA2DnC;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAE7C;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAE7C;AAqBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC,CAYpB"}