@actsecurity/iam-collect 0.1.215

package/dist/esm/syncs/s3/buckets.js

@@ -0,0 +1,192 @@
+import { GetBucketAbacCommand, GetBucketEncryptionCommand, GetBucketPolicyCommand, GetBucketTaggingCommand, GetPublicAccessBlockCommand, ListBucketsCommand, S3Client } from '@aws-sdk/client-s3';
+import {} from '../../aws/coreAuth.js';
+import {} from '../../persistence/AwsIamStore.js';
+import { runAndCatch404, runAndCatchAccessDeniedWithLog, withDnsRetry } from '../../utils/client-tools.js';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { syncData } from '../sync.js';
+import { paginateResource } from '../typedSync.js';
+const gpBuckets = 'generalPurposeBuckets';
+export const S3GeneralPurposeBucketSync = {
+    awsService: 's3',
+    name: gpBuckets,
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const s3Client = syncOptions.clientPool.client(S3Client, credentials, region, endpoint);
+        const allBuckets = await withDnsRetry(async () => {
+            return paginateResource(s3Client, ListBucketsCommand, 'Buckets', {
+                inputKey: 'ContinuationToken',
+                outputKey: 'ContinuationToken'
+            }, { MaxBuckets: 1000, BucketRegion: region });
+        });
+        const augmentedBuckets = await Promise.all(allBuckets.map(async (bucket) => {
+            const arn = `arn:${credentials.partition}:s3:::${bucket.Name}`;
+            const [tagsJob, blockPublicAccessConfigJob, bucketPolicyJob, encryptionJob, abacEnabledJob] = await Promise.all(syncOptions.workerPool.enqueueAll([
+                {
+                    execute: () => {
+                        return withDnsRetry(async () => {
+                            return getTagsForBucket(s3Client, bucket, arn);
+                        });
+                    },
+                    properties: {}
+                },
+                {
+                    execute: () => {
+                        return withDnsRetry(async () => {
+                            return getBucketPublicAccessSettings(s3Client, bucket, arn);
+                        });
+                    },
+                    properties: {}
+                },
+                {
+                    execute: () => {
+                        return withDnsRetry(async () => {
+                            return getBucketPolicy(s3Client, bucket, credentials.accountId, arn);
+                        });
+                    },
+                    properties: {}
+                },
+                {
+                    execute: () => {
+                        return withDnsRetry(async () => {
+                            return getBucketEncryptionSettings(s3Client, bucket, arn);
+                        });
+                    },
+                    properties: {}
+                },
+                {
+                    execute: () => {
+                        return withDnsRetry(async () => {
+                            return getBucketAbacEnabled(s3Client, bucket, arn);
+                        });
+                    },
+                    properties: {}
+                }
+            ]));
+            for (const job of [
+                tagsJob,
+                blockPublicAccessConfigJob,
+                bucketPolicyJob,
+                encryptionJob,
+                abacEnabledJob
+            ]) {
+                if (job.status === 'rejected') {
+                    throw job.reason;
+                }
+            }
+            const [tags, blockPublicAccessConfig, bucketPolicy, encryption, abacEnabled] = [
+                tagsJob.value,
+                blockPublicAccessConfigJob.value,
+                bucketPolicyJob.value,
+                encryptionJob.value,
+                abacEnabledJob.value
+            ];
+            return {
+                arn,
+                tags: tags,
+                bpa: blockPublicAccessConfig,
+                policy: bucketPolicy,
+                encryption: encryption?.Rules,
+                metadata: {
+                    name: bucket.Name,
+                    region: region,
+                    arn,
+                    abacEnabled
+                }
+            };
+        }));
+        syncData(augmentedBuckets, storage, accountId, {
+            service: 's3',
+            account: accountId,
+            metadata: {
+                region
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+/**
+ * Get the tags for a bucket.
+ *
+ * @param client the S3 client to use
+ * @param bucket the bucket to get the tags for
+ * @returns the tags for the bucket, if any
+ */
+async function getTagsForBucket(client, bucket, arn) {
+    const tagCommand = new GetBucketTaggingCommand({ Bucket: bucket.Name });
+    const tags = await runAndCatchAccessDeniedWithLog(arn, 's3', gpBuckets, 'tags', async () => {
+        return runAndCatch404(async () => {
+            const response = await client.send(tagCommand);
+            return convertTagsToRecord(response.TagSet);
+        });
+    });
+    return tags;
+}
+/**
+ * Get the bucket policy for a bucket.
+ *
+ * @param client the S3 client to use
+ * @param bucket the bucket to get the policy for
+ * @param accountId the account ID of the bucket owner
+ * @returns the bucket policy for the bucket, if any
+ */
+async function getBucketPolicy(client, bucket, accountId, arn) {
+    const policyCommand = new GetBucketPolicyCommand({
+        Bucket: bucket.Name,
+        ExpectedBucketOwner: accountId
+    });
+    const policy = await runAndCatchAccessDeniedWithLog(arn, 's3', gpBuckets, 'policy', async () => {
+        return runAndCatch404(async () => {
+            const response = await client.send(policyCommand);
+            return response.Policy ? JSON.parse(response.Policy) : undefined;
+        });
+    });
+    return policy;
+}
+/**
+ * Get the public access block configuration for a bucket.
+ *
+ * @param client The S3 client to use.
+ * @param bucket the bucket to get the public access settings for
+ * @returns the public access block configuration for the bucket, if any
+ */
+async function getBucketPublicAccessSettings(client, bucket, arn) {
+    const command = new GetPublicAccessBlockCommand({ Bucket: bucket.Name });
+    const response = await runAndCatchAccessDeniedWithLog(arn, 's3', gpBuckets, 'blockPublicAccess', async () => {
+        return runAndCatch404(async () => {
+            return await client.send(command);
+        });
+    });
+    return response?.PublicAccessBlockConfiguration;
+}
+/**
+ * Get the bucket encryption settings for a bucket.
+ *
+ * @param client the S3 client to use
+ * @param bucket the bucket to get the encryption settings for
+ * @returns encryption settings for the bucket, if any
+ */
+async function getBucketEncryptionSettings(client, bucket, arn) {
+    const command = new GetBucketEncryptionCommand({ Bucket: bucket.Name });
+    const response = await runAndCatchAccessDeniedWithLog(arn, 's3', gpBuckets, 'encryption', async () => {
+        return runAndCatch404(async () => {
+            return await client.send(command);
+        });
+    });
+    return response?.ServerSideEncryptionConfiguration;
+}
+/**
+ * Check if ABAC is enabled for the bucket.
+ *
+ * @param client the S3 client to use
+ * @param bucket the bucket to check
+ * @param arn the ARN of the bucket
+ * @returns true if ABAC is enabled, undefined otherwise
+ */
+async function getBucketAbacEnabled(client, bucket, arn) {
+    const command = new GetBucketAbacCommand({ Bucket: bucket.Name });
+    const response = await runAndCatchAccessDeniedWithLog(arn, 's3', gpBuckets, 'abacEnabled', async () => {
+        return runAndCatch404(async () => {
+            return await client.send(command);
+        });
+    });
+    return response?.AbacStatus?.Status === 'Enabled' ? true : undefined;
+}
+//# sourceMappingURL=buckets.js.map

package/dist/esm/syncs/s3/buckets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,EAElB,QAAQ,EAET,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAoB,MAAM,kCAAkC,CAAA;AACnE,OAAO,EACL,cAAc,EACd,8BAA8B,EAC9B,YAAY,EACb,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAa,QAAQ,EAAoB,MAAM,YAAY,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAQlD,MAAM,SAAS,GAAG,uBAAuB,CAAA;AAEzC,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,UAAU,EAAE,IAAI;IAChB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK,EACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB,EACT,EAAE;QACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAEvF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;YAC/C,OAAO,gBAAgB,CACrB,QAAQ,EACR,kBAAkB,EAClB,SAAS,EACT;gBACE,QAAQ,EAAE,mBAAmB;gBAC7B,SAAS,EAAE,mBAAmB;aAC/B,EACD,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,OAAO,WAAW,CAAC,SAAS,SAAS,MAAM,CAAC,IAAI,EAAE,CAAA;YAE9D,MAAM,CACJ,OAAO,EACP,0BAA0B,EAC1B,eAAe,EACf,aAAa,EACb,cAAc,CACf,GAAG,MAAM,OAAO,CAAC,GAAG,CACnB,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;gBAChC;oBACE,OAAO,EAAE,GAAG,EAAE;wBACZ,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE;4BAC7B,OAAO,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;wBAChD,CAAC,CAAC,CAAA;oBACJ,CAAC;oBACD,UAAU,EAAE,EAAE;iBACf;gBACD;oBACE,OAAO,EAAE,GAAG,EAAE;wBACZ,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE;4BAC7B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;wBAC7D,CAAC,CAAC,CAAA;oBACJ,CAAC;oBACD,UAAU,EAAE,EAAE;iBACf;gBACD;oBACE,OAAO,EAAE,GAAG,EAAE;wBACZ,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE;4BAC7B,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;wBACtE,CAAC,CAAC,CAAA;oBACJ,CAAC;oBACD,UAAU,EAAE,EAAE;iBACf;gBACD;oBACE,OAAO,EAAE,GAAG,EAAE;wBACZ,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE;4BAC7B,OAAO,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;wBAC3D,CAAC,CAAC,CAAA;oBACJ,CAAC;oBACD,UAAU,EAAE,EAAE;iBACf;gBACD;oBACE,OAAO,EAAE,GAAG,EAAE;wBACZ,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE;4BAC7B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;wBACpD,CAAC,CAAC,CAAA;oBACJ,CAAC;oBACD,UAAU,EAAE,EAAE;iBACf;aACF,CAAC,CACH,CAAA;YAED,KAAK,MAAM,GAAG,IAAI;gBAChB,OAAO;gBACP,0BAA0B;gBAC1B,eAAe;gBACf,aAAa;gBACb,cAAc;aACf,EAAE,CAAC;gBACF,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC9B,MAAM,GAAG,CAAC,MAAM,CAAA;gBAClB,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG;gBAC5E,OAAyB,CAAC,KAAK;gBAC/B,0BAA4C,CAAC,KAAK;gBAClD,eAAiC,CAAC,KAAK;gBACvC,aAA+B,CAAC,KAAK;gBACrC,cAAgC,CAAC,KAAK;aACxC,CAAA;YAED,OAAO;gBACL,GAAG;gBACH,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,uBAAuB;gBAC5B,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,UAAU,EAAE,KAAK;gBAC7B,QAAQ,EAAE;oBACR,IAAI,EAAE,MAAM,CAAC,IAAK;oBAClB,MAAM,EAAE,MAAM;oBACd,GAAG;oBACH,WAAW;iBACZ;aACF,CAAA;QACH,CAAC,CAAC,CACH,CAAA;QAED,QAAQ,CACN,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE;gBACR,MAAM;aACP;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,MAAM,UAAU,GAAG,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;QACzF,OAAO,cAAc,CAAyB,KAAK,IAAI,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC9C,OAAO,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAgB,EAChB,MAAc,EACd,SAAiB,EACjB,GAAW;IAEX,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,IAAK;QACpB,mBAAmB,EAAE,SAAS;KAC/B,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7F,OAAO,cAAc,CAAM,KAAK,IAAI,EAAE;YACpC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAClE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACzE,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CACnD,GAAG,EACH,IAAI,EACJ,SAAS,EACT,mBAAmB,EACnB,KAAK,IAAI,EAAE;QACT,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;YAC/B,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,QAAQ,EAAE,8BAA8B,CAAA;AACjD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CACnD,GAAG,EACH,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,KAAK,IAAI,EAAE;QACT,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;YAC/B,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,QAAQ,EAAE,iCAAiC,CAAA;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CACnD,GAAG,EACH,IAAI,EACJ,SAAS,EACT,aAAa,EACb,KAAK,IAAI,EAAE;QACT,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;YAC/B,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,QAAQ,EAAE,UAAU,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACtE,CAAC"}

package/dist/esm/syncs/s3/multiRegionAccessPoints.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const S3MultiRegionAccessPointsSync: Sync;
+//# sourceMappingURL=multiRegionAccessPoints.d.ts.map

package/dist/esm/syncs/s3/multiRegionAccessPoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiRegionAccessPoints.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/multiRegionAccessPoints.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,6BAA6B,EAAE,IA8C3C,CAAA"}

package/dist/esm/syncs/s3/multiRegionAccessPoints.js

@@ -0,0 +1,46 @@
+import { GetMultiRegionAccessPointPolicyCommand, ListMultiRegionAccessPointsCommand, S3ControlClient } from '@aws-sdk/client-s3-control';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const S3MultiRegionAccessPointsSync = createTypedSyncOperation('s3', 'multiRegionAccessPoints', createResourceSyncType({
+    client: S3ControlClient,
+    command: ListMultiRegionAccessPointsCommand,
+    key: 'AccessPoints',
+    arguments: (accountId, region) => ({
+        AccountId: accountId
+    }),
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arn: (accessPoint, region, account, partition) => `arn:${partition}:s3::${account}:accesspoint/${accessPoint.Alias}`,
+    resourceTypeParts: (account, region) => ({
+        service: 's3',
+        resourceType: 'accesspoint',
+        account
+    }),
+    extraFields: {
+        policy: async (client, accessPoint, accountId) => {
+            const policy = runAndCatch404(async () => {
+                const result = await client.send(new GetMultiRegionAccessPointPolicyCommand({
+                    Name: accessPoint.Name,
+                    AccountId: accountId
+                }));
+                return parseIfPresent(result.Policy?.Established?.Policy);
+            });
+            return policy;
+        }
+    },
+    tags: () => undefined, // Multi region access points do not have tags
+    results: (accessPoint) => ({
+        metadata: {
+            name: accessPoint.Name,
+            alias: accessPoint.Alias,
+            regions: accessPoint.Regions
+        },
+        bpa: accessPoint.PublicAccessBlock,
+        policy: accessPoint.extraFields.policy
+    })
+}));
+//# sourceMappingURL=multiRegionAccessPoints.js.map

package/dist/esm/syncs/s3/multiRegionAccessPoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiRegionAccessPoints.js","sourceRoot":"","sources":["../../../../src/syncs/s3/multiRegionAccessPoints.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,eAAe,EAChB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,6BAA6B,GAAS,wBAAwB,CACzE,IAAI,EACJ,yBAAyB,EACzB,sBAAsB,CAAC;IACrB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,kCAAkC;IAC3C,GAAG,EAAE,cAAc;IACnB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,SAAS,EAAE,SAAS;KACrB,CAAC;IACF,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAC/C,OAAO,SAAS,QAAQ,OAAO,gBAAgB,WAAW,CAAC,KAAK,EAAE;IACpE,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,aAAa;QAC3B,OAAO;KACR,CAAC;IACF,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,IAAI,EAAE;gBACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,sCAAsC,CAAC;oBACzC,IAAI,EAAE,WAAW,CAAC,IAAK;oBACvB,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAC3D,CAAC,CAAC,CAAA;YACF,OAAO,MAAM,CAAA;QACf,CAAC;KACF;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,8CAA8C;IACrE,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW,CAAC,IAAK;YACvB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,OAAO,EAAE,WAAW,CAAC,OAAO;SAC7B;QACD,GAAG,EAAE,WAAW,CAAC,iBAAiB;QAClC,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM;KACvC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/s3/objectLambdaAccessPoints.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const S3ObjectLambdaAccessPointsSync: Sync;
+//# sourceMappingURL=objectLambdaAccessPoints.d.ts.map

package/dist/esm/syncs/s3/objectLambdaAccessPoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectLambdaAccessPoints.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/objectLambdaAccessPoints.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,8BAA8B,EAAE,IAqD5C,CAAA"}

package/dist/esm/syncs/s3/objectLambdaAccessPoints.js

@@ -0,0 +1,52 @@
+import { GetAccessPointForObjectLambdaCommand, GetAccessPointPolicyForObjectLambdaCommand, ListAccessPointsForObjectLambdaCommand, S3ControlClient } from '@aws-sdk/client-s3-control';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const S3ObjectLambdaAccessPointsSync = createTypedSyncOperation('s3-object-lambda', 'objectLambdaAccessPoints', createResourceSyncType({
+    client: S3ControlClient,
+    command: ListAccessPointsForObjectLambdaCommand,
+    key: 'ObjectLambdaAccessPointList',
+    arguments: (accountId, region) => ({
+        AccountId: accountId
+    }),
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arn: (accessPoint, region, account, partition) => accessPoint.ObjectLambdaAccessPointArn,
+    resourceTypeParts: (account, region) => ({
+        service: 's3-object-lambda',
+        resourceType: 'accesspoint',
+        account,
+        region
+    }),
+    extraFields: {
+        details: async (client, accessPoint, accountId) => {
+            const result = await client.send(new GetAccessPointForObjectLambdaCommand({
+                AccountId: accountId,
+                Name: accessPoint.Name
+            }));
+            return result;
+        },
+        policy: async (client, accessPoint, accountId) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new GetAccessPointPolicyForObjectLambdaCommand({
+                    Name: accessPoint.Name,
+                    AccountId: accountId
+                }));
+                return parseIfPresent(result.Policy);
+            });
+        }
+    },
+    tags: () => undefined, // Object Lambda Access Points do not support tags
+    results: (accessPoint) => ({
+        metadata: {
+            name: accessPoint.Name,
+            alias: accessPoint.extraFields.details?.Alias
+        },
+        bpa: accessPoint.extraFields.details?.PublicAccessBlockConfiguration,
+        policy: accessPoint.extraFields.policy
+    })
+}));
+//# sourceMappingURL=objectLambdaAccessPoints.js.map

package/dist/esm/syncs/s3/objectLambdaAccessPoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectLambdaAccessPoints.js","sourceRoot":"","sources":["../../../../src/syncs/s3/objectLambdaAccessPoints.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,sCAAsC,EACtC,eAAe,EAChB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,8BAA8B,GAAS,wBAAwB,CAC1E,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,CAAC;IACrB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,sCAAsC;IAC/C,GAAG,EAAE,6BAA6B;IAClC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,SAAS,EAAE,SAAS;KACrB,CAAC;IACF,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,0BAA2B;IACzF,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,aAAa;QAC3B,OAAO;QACP,MAAM;KACP,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,oCAAoC,CAAC;gBACvC,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,WAAW,CAAC,IAAK;aACxB,CAAC,CACH,CAAA;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAC/C,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,0CAA0C,CAAC;oBAC7C,IAAI,EAAE,WAAW,CAAC,IAAK;oBACvB,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,kDAAkD;IACzE,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW,CAAC,IAAK;YACvB,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK;SAC9C;QACD,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,8BAA8B;QACpE,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM;KACvC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/s3/vaults.d.ts

@@ -0,0 +1,2 @@
+export declare const GlacierVaultsSync: import("../sync.js").Sync;
+//# sourceMappingURL=vaults.d.ts.map

package/dist/esm/syncs/s3/vaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,iBAAiB,2BAmD7B,CAAA"}

package/dist/esm/syncs/s3/vaults.js

@@ -0,0 +1,47 @@
+import { GetVaultAccessPolicyCommand, GlacierClient, ListTagsForVaultCommand, ListVaultsCommand } from '@aws-sdk/client-glacier';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const GlacierVaultsSync = createTypedSyncOperation('glacier', 'glacierVaults', createResourceSyncType({
+    client: GlacierClient,
+    command: ListVaultsCommand,
+    key: 'VaultList',
+    paginationConfig: {
+        inputKey: 'marker',
+        outputKey: 'Marker'
+    },
+    arn: (vault) => vault.VaultARN,
+    resourceTypeParts: (account, region) => ({
+        account,
+        region,
+        resourceType: 'vaults',
+        service: 'glacier'
+    }),
+    tags: (vault) => vault.extraFields.tags,
+    extraFields: {
+        policy: async (client, vault, accountId) => {
+            const policy = await runAndCatch404(async () => {
+                const result = await client.send(new GetVaultAccessPolicyCommand({
+                    accountId,
+                    vaultName: vault.VaultName
+                }));
+                return parseIfPresent(result.policy?.Policy);
+            });
+            return policy;
+        },
+        tags: async (client, vault, accountId) => {
+            const tags = await client.send(new ListTagsForVaultCommand({
+                accountId,
+                vaultName: vault.VaultName
+            }));
+            return tags.Tags;
+        }
+    },
+    results: (vault) => ({
+        metadata: {
+            name: vault.VaultName
+        },
+        policy: vault.extraFields.policy
+    })
+}));
+//# sourceMappingURL=vaults.js.map

package/dist/esm/syncs/s3/vaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CACvD,SAAS,EACT,eAAe,EACf,sBAAsB,CAAC;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,2BAA2B,CAAC;oBAC9B,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CACH,CAAA;gBAED,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC9C,CAAC,CAAC,CAAA;YAEF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,uBAAuB,CAAC;gBAC1B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/s3express/s3DirectoryAccessPointsSync.d.ts

@@ -0,0 +1,2 @@
+export declare const S3DirectoryAccessPointsSync: import("../sync.js").Sync;
+//# sourceMappingURL=s3DirectoryAccessPointsSync.d.ts.map

package/dist/esm/syncs/s3express/s3DirectoryAccessPointsSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3DirectoryAccessPointsSync.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3express/s3DirectoryAccessPointsSync.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,2BAA2B,2BAqEvC,CAAA"}

package/dist/esm/syncs/s3express/s3DirectoryAccessPointsSync.js

@@ -0,0 +1,65 @@
+import { GetAccessPointCommand, GetAccessPointPolicyCommand, ListAccessPointsForDirectoryBucketsCommand, ListTagsForResourceCommand, S3ControlClient } from '@aws-sdk/client-s3-control';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const S3DirectoryAccessPointsSync = createTypedSyncOperation('s3express', 'directoryAccessPoints', createResourceSyncType({
+    client: S3ControlClient,
+    command: ListAccessPointsForDirectoryBucketsCommand,
+    key: 'AccessPointList',
+    arguments: (accountId, region) => ({
+        AccountId: accountId
+    }),
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arn: (accessPoint) => accessPoint.AccessPointArn,
+    resourceTypeParts: (account, region) => ({
+        service: 's3express',
+        resourceType: 'accesspoint',
+        account,
+        region
+    }),
+    extraFields: {
+        details: async (client, accessPoint, accountId) => {
+            const result = await client.send(new GetAccessPointCommand({
+                AccountId: accountId,
+                Name: accessPoint.Name
+            }));
+            return result;
+        },
+        policy: async (client, accessPoint, accountId) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new GetAccessPointPolicyCommand({
+                    Name: accessPoint.Name,
+                    AccountId: accountId
+                }));
+                return parseIfPresent(result.Policy);
+            });
+        },
+        tags: async (client, accessPoint, accountId) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new ListTagsForResourceCommand({
+                    ResourceArn: accessPoint.AccessPointArn,
+                    AccountId: accountId
+                }));
+                return result.Tags;
+            });
+        }
+    },
+    tags: (accessPoint) => accessPoint.extraFields.tags,
+    results: (accessPoint) => ({
+        metadata: {
+            name: accessPoint.Name,
+            alias: accessPoint.extraFields.details?.Alias,
+            networkOrigin: accessPoint.NetworkOrigin,
+            vpc: accessPoint.VpcConfiguration?.VpcId,
+            bucket: accessPoint.Bucket,
+            bucketAccount: accessPoint.BucketAccountId,
+            vpcEndpoints: accessPoint.extraFields.details?.Endpoints
+        },
+        bpa: accessPoint.extraFields.details?.PublicAccessBlockConfiguration,
+        policy: accessPoint.extraFields.policy
+    })
+}));
+//# sourceMappingURL=s3DirectoryAccessPointsSync.js.map

package/dist/esm/syncs/s3express/s3DirectoryAccessPointsSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3DirectoryAccessPointsSync.js","sourceRoot":"","sources":["../../../../src/syncs/s3express/s3DirectoryAccessPointsSync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,0CAA0C,EAC1C,0BAA0B,EAC1B,eAAe,EAChB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CACjE,WAAW,EACX,uBAAuB,EACvB,sBAAsB,CAAC;IACrB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,0CAA0C;IACnD,GAAG,EAAE,iBAAiB;IACtB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,SAAS,EAAE,SAAS;KACrB,CAAC;IACF,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,cAAe;IACjD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,aAAa;QAC3B,OAAO;QACP,MAAM;KACP,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC;gBACxB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,WAAW,CAAC,IAAK;aACxB,CAAC,CACH,CAAA;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAC/C,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,2BAA2B,CAAC;oBAC9B,IAAI,EAAE,WAAW,CAAC,IAAK;oBACvB,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE;YAC7C,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,0BAA0B,CAAC;oBAC7B,WAAW,EAAE,WAAW,CAAC,cAAe;oBACxC,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI;IACnD,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW,CAAC,IAAK;YACvB,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK;YAC7C,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,GAAG,EAAE,WAAW,CAAC,gBAAgB,EAAE,KAAK;YACxC,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,aAAa,EAAE,WAAW,CAAC,eAAe;YAC1C,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS;SACzD;QACD,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,8BAA8B;QACpE,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM;KACvC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/s3express/s3DirectoryBucketsSync.d.ts

@@ -0,0 +1,2 @@
+export declare const S3DirectoryBucketsSync: import("../sync.js").Sync;
+//# sourceMappingURL=s3DirectoryBucketsSync.d.ts.map

package/dist/esm/syncs/s3express/s3DirectoryBucketsSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3DirectoryBucketsSync.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3express/s3DirectoryBucketsSync.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,sBAAsB,2BA2ClC,CAAA"}

package/dist/esm/syncs/s3express/s3DirectoryBucketsSync.js

@@ -0,0 +1,54 @@
+import { GetBucketEncryptionCommand, GetBucketPolicyCommand, ListDirectoryBucketsCommand, S3Client } from '@aws-sdk/client-s3';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const S3DirectoryBucketsSync = createTypedSyncOperation('s3express', 'directoryBuckets', createResourceSyncType({
+    client: S3Client,
+    command: ListDirectoryBucketsCommand,
+    key: 'Buckets',
+    arguments: () => ({ MaxDirectoryBuckets: 1000 }),
+    paginationConfig: {
+        inputKey: 'ContinuationToken',
+        outputKey: 'ContinuationToken'
+    },
+    arn: (bucket, region, account, partition) => directoryBucketArn(partition, region, account, bucket.Name),
+    extraFields: {
+        policy: async (client, bucket) => {
+            return runAndCatch404(async () => {
+                const policy = await client.send(new GetBucketPolicyCommand({ Bucket: bucket.Name }));
+                return parseIfPresent(policy.Policy);
+            });
+        },
+        encryption: async (client, bucket) => {
+            const encryption = await client.send(new GetBucketEncryptionCommand({ Bucket: bucket.Name }));
+            return encryption.ServerSideEncryptionConfiguration;
+        }
+    },
+    tags: (bucket) => undefined,
+    resourceTypeParts: (account, region) => ({
+        service: 's3express',
+        resourceType: 'bucket',
+        account,
+        region
+    }),
+    results: (bucket) => ({
+        metadata: {
+            name: bucket.Name,
+            encryption: bucket.extraFields.encryption?.Rules
+        },
+        policy: bucket.extraFields.policy
+    })
+}));
+/**
+ * Create an ARN for a directory bucket
+ *
+ * @param partition the partition of the bucket
+ * @param region the region of the bucket
+ * @param account the account the bucket is in
+ * @param bucketName the name of the bucket
+ * @returns the full arn of the directory bucket
+ */
+function directoryBucketArn(partition, region, account, bucketName) {
+    return `arn:${partition}:s3express:${region}:${account}:bucket/${bucketName}`;
+}
+//# sourceMappingURL=s3DirectoryBucketsSync.js.map

package/dist/esm/syncs/s3express/s3DirectoryBucketsSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3DirectoryBucketsSync.js","sourceRoot":"","sources":["../../../../src/syncs/s3express/s3DirectoryBucketsSync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC3B,QAAQ,EACT,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAC5D,WAAW,EACX,kBAAkB,EAClB,sBAAsB,CAAC;IACrB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,2BAA2B;IACpC,GAAG,EAAE,SAAS;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAChD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,mBAAmB;KAC/B;IACD,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAC1C,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAK,CAAC;IAC9D,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC/B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAC,CAAA;gBACtF,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CACzD,CAAA;YACD,OAAO,UAAU,CAAC,iCAAiC,CAAA;QACrD,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS;IAC3B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,QAAQ;QACtB,OAAO;QACP,MAAM;KACP,CAAC;IACF,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK;SACjD;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CACzB,SAAiB,EACjB,MAAc,EACd,OAAe,EACf,UAAkB;IAElB,OAAO,OAAO,SAAS,cAAc,MAAM,IAAI,OAAO,WAAW,UAAU,EAAE,CAAA;AAC/E,CAAC"}

package/dist/esm/syncs/s3outposts/s3OutpostsSyncs.d.ts

@@ -0,0 +1,4 @@
+import { type Sync } from '../sync.js';
+export declare const S3OutpostsBucketsSync: Sync;
+export declare const S3OutpostsAccessPointsSync: Sync;
+//# sourceMappingURL=s3OutpostsSyncs.d.ts.map

package/dist/esm/syncs/s3outposts/s3OutpostsSyncs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3OutpostsSyncs.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3outposts/s3OutpostsSyncs.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AAGjE,eAAO,MAAM,qBAAqB,EAAE,IA2EnC,CAAA;AAED,eAAO,MAAM,0BAA0B,EAAE,IAuExC,CAAA"}