@actsecurity/iam-collect 0.1.215

package/dist/esm/syncs/s3outposts/s3OutpostsSyncs.js

@@ -0,0 +1,143 @@
+import { GetAccessPointPolicyCommand, GetBucketPolicyCommand, GetBucketTaggingCommand, ListAccessPointsCommand, ListRegionalBucketsCommand, S3ControlClient } from '@aws-sdk/client-s3-control';
+import { ListOutpostsWithS3Command, S3OutpostsClient } from '@aws-sdk/client-s3outposts';
+import {} from '../../aws/coreAuth.js';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { log } from '@cloud-copilot/log';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { syncData } from '../sync.js';
+import { paginateResource } from '../typedSync.js';
+export const S3OutpostsBucketsSync = {
+    awsService: 's3outposts',
+    name: 'buckets',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const outpostsClient = syncOptions.clientPool.client(S3OutpostsClient, credentials, region, endpoint);
+        const outposts = await listS3Outposts(outpostsClient);
+        const regionalBuckets = [];
+        for (const outpost of outposts) {
+            const controlClient = controlClientForOutpost(credentials, region, outpost.OutpostId);
+            const buckets = await paginateResource(outpostsClient, ListRegionalBucketsCommand, 'RegionalBucketList', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            }, {
+                OutpostId: outpost.OutpostId
+            });
+            for (const bucket of buckets) {
+                regionalBuckets.push({
+                    arn: bucket.BucketArn,
+                    metadata: {
+                        arn: bucket.BucketArn,
+                        name: bucket.Bucket,
+                        outpostId: bucket.OutpostId,
+                        publicAccessBlockEnabled: bucket.PublicAccessBlockEnabled,
+                        bucket: 'true'
+                    },
+                    policy: await runAndCatch404(async () => {
+                        const result = await controlClient.send(new GetBucketPolicyCommand({
+                            Bucket: bucket.Bucket
+                        }));
+                        return parseIfPresent(result.Policy);
+                    }),
+                    tags: await runAndCatch404(async () => {
+                        const tags = await controlClient.send(new GetBucketTaggingCommand({
+                            Bucket: bucket.Bucket
+                        }));
+                        return convertTagsToRecord(tags.TagSet);
+                    })
+                });
+            }
+        }
+        await syncData(regionalBuckets, storage, accountId, {
+            service: 's3outposts',
+            resourceType: 'outpost',
+            account: accountId,
+            region: region,
+            metadata: {
+                bucket: 'true'
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+export const S3OutpostsAccessPointsSync = {
+    awsService: 's3outposts',
+    name: 'accessPoints',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const outpostsClient = syncOptions.clientPool.client(S3OutpostsClient, credentials, region, endpoint);
+        const outposts = await listS3Outposts(outpostsClient);
+        const accessPoints = [];
+        for (const outpost of outposts) {
+            const controlClient = controlClientForOutpost(credentials, region, outpost.OutpostId);
+            const points = await paginateResource(controlClient, ListAccessPointsCommand, 'AccessPointList', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            }, {
+                AccountId: accountId
+            });
+            for (const point of points) {
+                accessPoints.push({
+                    arn: point.AccessPointArn,
+                    metadata: {
+                        arn: point.AccessPointArn,
+                        name: point.Name,
+                        outpostId: outpost.OutpostId,
+                        networkOrigin: point.NetworkOrigin,
+                        vpc: point.VpcConfiguration?.VpcId,
+                        bucket: point.Bucket,
+                        bucketAccount: point.BucketAccountId,
+                        accesspoint: 'true'
+                    },
+                    policy: await runAndCatch404(async () => {
+                        const result = await controlClient.send(new GetAccessPointPolicyCommand({
+                            Name: point.Name,
+                            AccountId: accountId
+                        }));
+                        return parseIfPresent(result.Policy);
+                    })
+                });
+            }
+        }
+        await syncData(accessPoints, storage, accountId, {
+            service: 's3outposts',
+            resourceType: 'outpost',
+            account: accountId,
+            region: region,
+            metadata: {
+                accesspoint: 'true'
+            }
+        }, syncOptions.writeOnly);
+    }
+};
+/**
+ * List the Outposts in the account that have S3
+ *
+ * @param outpostsClient the S3OutpostsClient to use
+ * @returns and array of Outpost objects
+ */
+async function listS3Outposts(outpostsClient) {
+    return paginateResource(outpostsClient, ListOutpostsWithS3Command, 'Outposts', {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    });
+}
+/**
+ * Create a new S3ControlClient with the Outpost ID set in the headers
+ *
+ * @param credentials the credentials to use for the client
+ * @param region the region to use for the client
+ * @param outpostId the Outpost ID to set in the headers
+ * @returns a new S3ControlClient with the Outpost ID set in the headers
+ */
+function controlClientForOutpost(credentials, region, outpostId) {
+    const controlClient = new S3ControlClient({ credentials: credentials.provider, region });
+    controlClient.middlewareStack.add((next, context) => (args) => {
+        if (args.request) {
+            log.trace('Adding outpost ID to request headers');
+            args.request.headers['x-amz-outpost-id'] = outpostId;
+        }
+        return next(args);
+    }, {
+        step: 'build'
+    });
+    return controlClient;
+}
+//# sourceMappingURL=s3OutpostsSyncs.js.map

package/dist/esm/syncs/s3outposts/s3OutpostsSyncs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3OutpostsSyncs.js","sourceRoot":"","sources":["../../../../src/syncs/s3outposts/s3OutpostsSyncs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EAChB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,yBAAyB,EAEzB,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAA0C,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAA8B,QAAQ,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAClD,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAA;QAErD,MAAM,eAAe,GAAiB,EAAE,CAAA;QACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAAA;YACtF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,cAAc,EACd,0BAA0B,EAC1B,oBAAoB,EACpB;gBACE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,EACD;gBACE,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CACF,CAAA;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAAC;oBACnB,GAAG,EAAE,MAAM,CAAC,SAAU;oBACtB,QAAQ,EAAE;wBACR,GAAG,EAAE,MAAM,CAAC,SAAU;wBACtB,IAAI,EAAE,MAAM,CAAC,MAAM;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;wBACzD,MAAM,EAAE,MAAM;qBACf;oBACD,MAAM,EAAE,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;wBACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CACrC,IAAI,sBAAsB,CAAC;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAO;yBACvB,CAAC,CACH,CAAA;wBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtC,CAAC,CAAC;oBACF,IAAI,EAAE,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;wBACpC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CACnC,IAAI,uBAAuB,CAAC;4BAC1B,MAAM,EAAE,MAAM,CAAC,MAAO;yBACvB,CAAC,CACH,CAAA;wBACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBACzC,CAAC,CAAC;iBACH,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,CACZ,eAAe,EACf,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,MAAM,EAAE,MAAM;aACf;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAClD,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAA;QAErD,MAAM,YAAY,GAAiB,EAAE,CAAA;QACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAAA;YACtF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB;gBACE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,EACD;gBACE,SAAS,EAAE,SAAS;aACrB,CACF,CAAA;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,KAAK,CAAC,cAAe;oBAC1B,QAAQ,EAAE;wBACR,GAAG,EAAE,KAAK,CAAC,cAAe;wBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,GAAG,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK;wBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,aAAa,EAAE,KAAK,CAAC,eAAe;wBACpC,WAAW,EAAE,MAAM;qBACpB;oBACD,MAAM,EAAE,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;wBACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CACrC,IAAI,2BAA2B,CAAC;4BAC9B,IAAI,EAAE,KAAK,CAAC,IAAK;4BACjB,SAAS,EAAE,SAAS;yBACrB,CAAC,CACH,CAAA;wBACD,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtC,CAAC,CAAC;iBACH,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,CACZ,YAAY,EACZ,OAAO,EACP,SAAS,EACT;YACE,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,WAAW,EAAE,MAAM;aACpB;SACF,EACD,WAAW,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF,CAAA;AAED;;;;;GAKG;AAEH,KAAK,UAAU,cAAc,CAAC,cAAgC;IAC5D,OAAO,gBAAgB,CAAC,cAAc,EAAE,yBAAyB,EAAE,UAAU,EAAE;QAC7E,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,WAA8C,EAC9C,MAA0B,EAC1B,SAAiB;IAEjB,MAAM,aAAa,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,aAAa,CAAC,eAAe,CAAC,GAAG,CAC/B,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAChD;YAAC,IAAI,CAAC,OAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAA;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC,EACD;QACE,IAAI,EAAE,OAAO;KACd,CACF,CAAA;IAED,OAAO,aAAa,CAAA;AACtB,CAAC"}

package/dist/esm/syncs/s3tables/s3TablesSync.d.ts

@@ -0,0 +1,2 @@
+export declare const S3TableBucketsSync: import("../sync.js").Sync;
+//# sourceMappingURL=s3TablesSync.d.ts.map

package/dist/esm/syncs/s3tables/s3TablesSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3TablesSync.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3tables/s3TablesSync.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,kBAAkB,2BA+C9B,CAAA"}

package/dist/esm/syncs/s3tables/s3TablesSync.js

@@ -0,0 +1,45 @@
+import { GetTableBucketEncryptionCommand, GetTableBucketPolicyCommand, ListTableBucketsCommand, S3TablesClient } from '@aws-sdk/client-s3tables';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const S3TableBucketsSync = createTypedSyncOperation('s3tables', 'tableBuckets', createResourceSyncType({
+    client: S3TablesClient,
+    command: ListTableBucketsCommand,
+    key: 'tableBuckets',
+    paginationConfig: {
+        inputKey: 'continuationToken',
+        outputKey: 'continuationToken'
+    },
+    arn: (bucket) => bucket.arn,
+    extraFields: {
+        policy: async (client, bucket) => {
+            return runAndCatch404(async () => {
+                const policy = await client.send(new GetTableBucketPolicyCommand({ tableBucketARN: bucket.arn }));
+                return parseIfPresent(policy.resourcePolicy);
+            });
+        },
+        encryption: async (client, bucket) => {
+            return runAndCatch404(async () => {
+                const encryption = await client.send(new GetTableBucketEncryptionCommand({ tableBucketARN: bucket.arn }));
+                return encryption.encryptionConfiguration;
+            });
+        }
+    },
+    tags: (bucket) => undefined,
+    resourceTypeParts: (account, region) => ({
+        service: 's3tables',
+        resourceType: 'bucket',
+        account,
+        region
+    }),
+    results: (bucket) => ({
+        metadata: {
+            name: bucket.name,
+            id: bucket.tableBucketId,
+            encryptionAlgorithm: bucket.extraFields.encryption?.sseAlgorithm,
+            key: bucket.extraFields.encryption?.kmsKeyArn
+        },
+        policy: bucket.extraFields.policy
+    })
+}));
+//# sourceMappingURL=s3TablesSync.js.map

package/dist/esm/syncs/s3tables/s3TablesSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3TablesSync.js","sourceRoot":"","sources":["../../../../src/syncs/s3tables/s3TablesSync.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,EACvB,cAAc,EACf,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CACxD,UAAU,EACV,cAAc,EACd,sBAAsB,CAAC;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,uBAAuB;IAChC,GAAG,EAAE,cAAc;IACnB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,mBAAmB;KAC/B;IACD,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI;IAC5B,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC/B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,2BAA2B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAChE,CAAA;gBACD,OAAO,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YAC9C,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACnC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,+BAA+B,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CACpE,CAAA;gBACD,OAAO,UAAU,CAAC,uBAAuB,CAAA;YAC3C,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS;IAC3B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,QAAQ;QACtB,OAAO;QACP,MAAM;KACP,CAAC;IACF,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,aAAa;YACxB,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY;YAChE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS;SAC9C;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/secretsmanager/secrets.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Sync AWS Secrets Manager secrets and their resource policies.
+ */
+export declare const SecretSync: import("../sync.js").Sync;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/esm/syncs/secretsmanager/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/secretsmanager/secrets.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,eAAO,MAAM,UAAU,2BAwCtB,CAAA"}

package/dist/esm/syncs/secretsmanager/secrets.js

@@ -0,0 +1,42 @@
+import { GetResourcePolicyCommand, ListSecretsCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+/**
+ * Sync AWS Secrets Manager secrets and their resource policies.
+ */
+export const SecretSync = createTypedSyncOperation('secretsmanager', 'secrets', createResourceSyncType({
+    client: SecretsManagerClient,
+    command: ListSecretsCommand,
+    key: 'SecretList',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    resourceTypeParts: (accountId, region) => ({
+        service: 'secretsmanager',
+        resourceType: 'secret',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        policy: async (client, secret) => {
+            return runAndCatch404(async () => {
+                const response = await client.send(new GetResourcePolicyCommand({ SecretId: secret.ARN }));
+                if (response.ResourcePolicy) {
+                    return JSON.parse(response.ResourcePolicy);
+                }
+                return undefined;
+            });
+        }
+    },
+    tags: (secret) => secret.Tags,
+    arn: (secret) => secret.ARN,
+    results: (secret) => ({
+        metadata: {
+            name: secret.Name,
+            kmsKey: secret.KmsKeyId
+        },
+        policy: secret.extraFields.policy
+    })
+}));
+//# sourceMappingURL=secrets.js.map

package/dist/esm/syncs/secretsmanager/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/syncs/secretsmanager/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAChD,gBAAgB,EAChB,SAAS,EACT,sBAAsB,CAAC;IACrB,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EAAE,kBAAkB;IAC3B,GAAG,EAAE,YAAY;IACjB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,gBAAgB;QACzB,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC/B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,wBAAwB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAI,EAAE,CAAC,CACxD,CAAA;gBACD,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;gBAC5C,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI;IAC7B,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI;IAC5B,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,IAAK;YAClB,MAAM,EAAE,MAAM,CAAC,QAAQ;SACxB;QACD,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;KAClC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/sns/topics.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const SnsTopicsSync: Sync;
+//# sourceMappingURL=topics.d.ts.map

package/dist/esm/syncs/sns/topics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sns/topics.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAGtC,eAAO,MAAM,aAAa,EAAE,IA8C3B,CAAA"}

package/dist/esm/syncs/sns/topics.js

@@ -0,0 +1,62 @@
+import { GetTopicAttributesCommand, ListTagsForResourceCommand, ListTopicsCommand, SNSClient } from '@aws-sdk/client-sns';
+import { log } from '@cloud-copilot/log';
+import {} from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const SnsTopicsSync = createTypedSyncOperation('sns', 'topics', createResourceSyncType({
+    client: SNSClient,
+    command: ListTopicsCommand,
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    key: 'Topics',
+    arn: (topic) => topic.TopicArn,
+    resourceTypeParts: (account, region) => ({
+        service: 'sns',
+        account,
+        region
+    }),
+    extraFields: {
+        tags: async (client, topic) => {
+            const tagResult = await client.send(new ListTagsForResourceCommand({
+                ResourceArn: topic.TopicArn
+            }));
+            return tagResult.Tags;
+        },
+        attributes: async (client, topic) => {
+            const attributes = await client.send(new GetTopicAttributesCommand({
+                TopicArn: topic.TopicArn
+            }));
+            return attributes.Attributes;
+        }
+    },
+    tags: (topic) => topic.extraFields.tags,
+    results: (topic) => ({
+        metadata: {
+            name: topic.TopicArn.split(':').pop(),
+            displayName: topic.extraFields.attributes?.DisplayName,
+            keyId: topic.extraFields.attributes?.KmsMasterKeyId,
+            owner: topic.extraFields.attributes?.Owner
+        },
+        policy: topicPolicy(topic.TopicArn, topic.extraFields.attributes)
+    })
+}));
+/**
+ * Parse the SNS topic policy from attributes.
+ *
+ * @param attributes the attributes of the SNS topic
+ * @returns the parsed policy or undefined if parsing fails or the policy is not present
+ */
+function topicPolicy(topicArn, attributes) {
+    if (attributes?.['Policy']) {
+        try {
+            return JSON.parse(attributes['Policy']);
+        }
+        catch (e) {
+            log.error('Failed to parse SNS topic policy', e, { topicArn });
+            return undefined;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=topics.js.map

package/dist/esm/syncs/sns/topics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../../src/syncs/sns/topics.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,EACjB,SAAS,EACV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAa,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,aAAa,GAAS,wBAAwB,CACzD,KAAK,EACL,QAAQ,EACR,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,iBAAiB;IAC1B,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,OAAO;QACP,MAAM;KACP,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,0BAA0B,CAAC;gBAC7B,WAAW,EAAE,KAAK,CAAC,QAAS;aAC7B,CAAC,CACH,CAAA;YACD,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAS;aAC1B,CAAC,CACH,CAAA;YACD,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC;KACF;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,QAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG;YACvC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW;YACtD,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,cAAc;YACnD,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK;SAC3C;QACD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,QAAS,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC;KACnE,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,QAAgB,EAChB,UAA8C;IAE9C,IAAI,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9D,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/esm/syncs/sqs/queues.d.ts

@@ -0,0 +1,2 @@
+export declare const SqsQueueSync: import("../sync.js").Sync;
+//# sourceMappingURL=queues.d.ts.map

package/dist/esm/syncs/sqs/queues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queues.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sqs/queues.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,YAAY,2BAkDxB,CAAA"}

package/dist/esm/syncs/sqs/queues.js

@@ -0,0 +1,51 @@
+import { GetQueueAttributesCommand, ListQueuesCommand, ListQueueTagsCommand, SQSClient } from '@aws-sdk/client-sqs';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const SqsQueueSync = createTypedSyncOperation('sqs', 'queue', createResourceSyncType({
+    client: SQSClient,
+    command: ListQueuesCommand,
+    key: 'QueueUrls',
+    paginationConfig: {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    },
+    arguments: (accountId, region) => ({
+        MaxResults: 1000
+    }),
+    arn: (queue, region, account, partition) => {
+        return queueArn(queue, region, account, partition);
+    },
+    resourceTypeParts: (account, region) => ({
+        account,
+        region,
+        service: 'sqs'
+    }),
+    tags: (queue) => queue.extraFields.tags,
+    extraFields: {
+        tags: async (client, queue, account, region, partition) => {
+            const tagResult = await client.send(new ListQueueTagsCommand({
+                QueueUrl: queue.name
+            }));
+            return tagResult.Tags;
+        },
+        attributes: async (client, queue, account, region, partition) => {
+            const attributes = await client.send(new GetQueueAttributesCommand({
+                QueueUrl: queue.name,
+                AttributeNames: ['KmsMasterKeyId', 'Policy']
+            }));
+            return attributes.Attributes;
+        }
+    },
+    results: (queue) => ({
+        metadata: {
+            name: queue.name.split('/').pop() || '',
+            kmsKey: queue.extraFields.attributes?.KmsMasterKeyId
+        },
+        policy: parseIfPresent(queue.extraFields.attributes?.Policy)
+    })
+}));
+function queueArn(queue, region, account, partition) {
+    const queueName = queue.name.split('/').pop();
+    return `arn:${partition}:sqs:${region}:${account}:${queueName}`;
+}
+//# sourceMappingURL=queues.js.map

package/dist/esm/syncs/sqs/queues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queues.js","sourceRoot":"","sources":["../../../../src/syncs/sqs/queues.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACV,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAwB,CAClD,KAAK,EACL,OAAO,EACP,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB;IACD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,UAAU,EAAE,IAAI;KACjB,CAAC;IACF,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;QACzC,OAAO,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;IACD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,OAAO,EAAE,KAAK;KACf,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACxD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,oBAAoB,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,IAAI;aACrB,CAAC,CACH,CAAA;YACD,OAAO,SAAS,CAAC,IAAI,CAAA;QACvB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC9D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,cAAc,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC;aAC7C,CAAC,CACH,CAAA;YACD,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;YACvC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,cAAc;SACrD;QACD,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7D,CAAC;CACH,CAAC,CACH,CAAA;AAED,SAAS,QAAQ,CAAC,KAAuB,EAAE,MAAc,EAAE,OAAe,EAAE,SAAiB;IAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC7C,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AACjE,CAAC"}

package/dist/esm/syncs/sso/ssoInstances.d.ts

@@ -0,0 +1,3 @@
+import { type Sync } from '../sync.js';
+export declare const SsoDataSync: Sync;
+//# sourceMappingURL=ssoInstances.d.ts.map

package/dist/esm/syncs/sso/ssoInstances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssoInstances.d.ts","sourceRoot":"","sources":["../../../../src/syncs/sso/ssoInstances.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAmB,KAAK,IAAI,EAAY,MAAM,YAAY,CAAA;AAGjE,eAAO,MAAM,WAAW,EAAE,IAkEzB,CAAA"}

package/dist/esm/syncs/sso/ssoInstances.js

@@ -0,0 +1,186 @@
+import { DescribePermissionSetCommand, GetInlinePolicyForPermissionSetCommand, GetPermissionsBoundaryForPermissionSetCommand, ListAccountsForProvisionedPermissionSetCommand, ListCustomerManagedPolicyReferencesInPermissionSetCommand, ListInstancesCommand, ListManagedPoliciesInPermissionSetCommand, ListPermissionSetsCommand, ListTagsForResourceCommand, SSOAdminClient } from '@aws-sdk/client-sso-admin';
+import { runAndCatch404, runAndCatchAccessDenied, withDnsRetry } from '../../utils/client-tools.js';
+import { log } from '@cloud-copilot/log';
+import { convertTagsToRecord } from '../../utils/tags.js';
+import { syncData } from '../sync.js';
+import { createResourceSyncType, createTypedSyncOperation, paginateResource } from '../typedSync.js';
+export const SsoDataSync = {
+    awsService: 'sso',
+    name: 'instances',
+    execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+        const client = syncOptions.clientPool.client(SSOAdminClient, credentials, region, endpoint);
+        const instances = await withDnsRetry(async () => {
+            return paginateResource(client, ListInstancesCommand, 'Instances', {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            });
+        });
+        const accountInstances = instances.filter((instance) => instance.OwnerAccountId === accountId && instance.Status === 'ACTIVE');
+        log.trace('Found SSO instances', {
+            accountId,
+            region,
+            instances: accountInstances.length
+        });
+        const resourceTypeParts = {
+            service: 'sso',
+            resourceType: 'instance',
+            metadata: {
+                region
+            }
+        };
+        const data = [];
+        for (const instance of accountInstances) {
+            const command = new ListTagsForResourceCommand({
+                InstanceArn: instance.InstanceArn,
+                ResourceArn: instance.InstanceArn
+            });
+            const results = await runAndCatchAccessDenied(async () => {
+                return client.send(command);
+            });
+            const tags = convertTagsToRecord(results?.Tags);
+            data.push({
+                arn: instance.InstanceArn,
+                metadata: {
+                    name: instance.Name,
+                    identityStoreId: instance.IdentityStoreId,
+                    ownerAccountId: instance.OwnerAccountId,
+                    status: instance.Status,
+                    region,
+                    arn: instance.InstanceArn
+                },
+                tags
+            });
+        }
+        await syncData(data, storage, accountId, resourceTypeParts, syncOptions.writeOnly);
+        for (const instance of accountInstances) {
+            const dataSyncs = createSsoInstanceResourceSyncs(instance, region);
+            for (const dataSync of dataSyncs) {
+                await dataSync.execute(accountId, region, credentials, storage, endpoint, syncOptions);
+            }
+        }
+    }
+};
+function createSsoInstanceResourceSyncs(ssoInstance, region) {
+    return [
+        createTypedSyncOperation('sso', 'permissionSets', createResourceSyncType({
+            client: SSOAdminClient,
+            command: ListPermissionSetsCommand,
+            arguments: (awsId, region) => ({
+                InstanceArn: ssoInstance.InstanceArn
+            }),
+            key: 'PermissionSets',
+            paginationConfig: {
+                inputKey: 'NextToken',
+                outputKey: 'NextToken'
+            },
+            resourceTypeParts: (accountId, region) => ({
+                service: 'sso',
+                resourceType: 'permissionset',
+                account: accountId,
+                metadata: {
+                    region
+                }
+            }),
+            arn: (permissionSet) => permissionSet.name,
+            extraFields: {
+                tags: async (client, permissionSet) => {
+                    const command = new ListTagsForResourceCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        ResourceArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results?.Tags;
+                },
+                details: async (client, permissionSet) => {
+                    const command = new DescribePermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results?.PermissionSet;
+                },
+                awsManagedPolicies: async (client, permissionSet) => {
+                    const command = new ListManagedPoliciesInPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await client.send(command);
+                    return results.AttachedManagedPolicies;
+                },
+                customerManagedPolicies: async (client, permissionSet, account, region, partition) => {
+                    const results = await paginateResource(client, ListCustomerManagedPolicyReferencesInPermissionSetCommand, 'CustomerManagedPolicyReferences', {
+                        inputKey: 'NextToken',
+                        outputKey: 'NextToken'
+                    }, {
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    return results?.map((policy) => ({
+                        ...policy,
+                        arn: `arn:${partition}:iam::${account}:policy/${policy.Name}`
+                    }));
+                },
+                inlinePolicy: async (client, permissionSet) => {
+                    const command = new GetInlinePolicyForPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const results = await runAndCatch404(async () => {
+                        const result = await client.send(command);
+                        if (result?.InlinePolicy) {
+                            return JSON.parse(result.InlinePolicy);
+                        }
+                        return undefined;
+                    });
+                    return results;
+                },
+                permissionBoundary: async (client, permissionSet) => {
+                    const command = new GetPermissionsBoundaryForPermissionSetCommand({
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    const permissionBoundary = await (async () => {
+                        try {
+                            const result = await client.send(command);
+                            if (result?.PermissionsBoundary) {
+                                return result.PermissionsBoundary;
+                            }
+                            return undefined;
+                        }
+                        catch (e) {
+                            if (e.name === 'ResourceNotFoundException') {
+                                return undefined;
+                            }
+                            throw e;
+                        }
+                    })();
+                    return permissionBoundary;
+                },
+                accounts: async (client, permissionSet) => {
+                    const results = await paginateResource(client, ListAccountsForProvisionedPermissionSetCommand, 'AccountIds', {
+                        inputKey: 'NextToken',
+                        outputKey: 'NextToken'
+                    }, {
+                        InstanceArn: ssoInstance.InstanceArn,
+                        PermissionSetArn: permissionSet.name
+                    });
+                    return results;
+                }
+            },
+            tags: (permissionSet) => permissionSet.extraFields.tags,
+            results: (permissionSet) => ({
+                metadata: {
+                    name: permissionSet.extraFields.details?.Name,
+                    description: permissionSet.extraFields.details?.Description,
+                    region
+                },
+                awsManagedPolicies: permissionSet.extraFields.awsManagedPolicies,
+                customerManagedPolicies: permissionSet.extraFields.customerManagedPolicies,
+                inlinePolicy: permissionSet.extraFields.inlinePolicy,
+                permissionBoundary: permissionSet.extraFields.permissionBoundary,
+                accounts: permissionSet.extraFields.accounts
+            })
+        }))
+    ];
+}
+//# sourceMappingURL=ssoInstances.js.map

package/dist/esm/syncs/sso/ssoInstances.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssoInstances.js","sourceRoot":"","sources":["../../../../src/syncs/sso/ssoInstances.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,sCAAsC,EACtC,6CAA6C,EAE7C,8CAA8C,EAC9C,yDAAyD,EACzD,oBAAoB,EACpB,yCAAyC,EACzC,yBAAyB,EACzB,0BAA0B,EAC1B,cAAc,EACf,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AACnG,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAA8B,QAAQ,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;QAChF,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE3F,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;YAC9C,OAAO,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE;gBACjE,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CACpF,CAAA;QAED,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;YAC/B,SAAS;YACT,MAAM;YACN,SAAS,EAAE,gBAAgB,CAAC,MAAM;SACnC,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAG;YACxB,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE;gBACR,MAAM;aACP;SACF,CAAA;QAED,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAY;gBAClC,WAAW,EAAE,QAAQ,CAAC,WAAY;aACnC,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,KAAK,IAAI,EAAE;gBACvD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAE/C,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,QAAQ,CAAC,WAAY;gBAC1B,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ,CAAC,IAAK;oBACpB,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM;oBACN,GAAG,EAAE,QAAQ,CAAC,WAAY;iBAC3B;gBACD,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;QAElF,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAElE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAED,SAAS,8BAA8B,CAAC,WAA6B,EAAE,MAAc;IACnF,OAAO;QACL,wBAAwB,CACtB,KAAK,EACL,gBAAgB,EAChB,sBAAsB,CAAC;YACrB,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,yBAAyB;YAClC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7B,WAAW,EAAE,WAAW,CAAC,WAAY;aACtC,CAAC;YACF,GAAG,EAAE,gBAAgB;YACrB,gBAAgB,EAAE;gBAChB,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,WAAW;aACvB;YACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,eAAe;gBAC7B,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE;oBACR,MAAM;iBACP;aACF,CAAC;YACF,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,IAAK;YAC3C,WAAW,EAAE;gBACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACpC,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;wBAC7C,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,WAAW,EAAE,aAAa,CAAC,IAAK;qBACjC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,EAAE,IAAI,CAAA;gBACtB,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACvC,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC;wBAC/C,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,EAAE,aAAa,CAAA;gBAC/B,CAAC;gBACD,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAClD,MAAM,OAAO,GAAG,IAAI,yCAAyC,CAAC;wBAC5D,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;oBAC1C,OAAO,OAAO,CAAC,uBAAuB,CAAA;gBACxC,CAAC;gBACD,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;oBACnF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,EACN,yDAAyD,EACzD,iCAAiC,EACjC;wBACE,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,WAAW;qBACvB,EACD;wBACE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CACF,CAAA;oBACD,OAAO,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;wBAC/B,GAAG,MAAM;wBACT,GAAG,EAAE,OAAO,SAAS,SAAS,OAAO,WAAW,MAAM,CAAC,IAAI,EAAE;qBAC9D,CAAC,CAAC,CAAA;gBACL,CAAC;gBACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAC5C,MAAM,OAAO,GAAG,IAAI,sCAAsC,CAAC;wBACzD,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;wBAC9C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;wBACzC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;4BACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;wBACxC,CAAC;wBACD,OAAO,SAAS,CAAA;oBAClB,CAAC,CAAC,CAAA;oBACF,OAAO,OAAO,CAAA;gBAChB,CAAC;gBACD,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBAClD,MAAM,OAAO,GAAG,IAAI,6CAA6C,CAAC;wBAChE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CAAC,CAAA;oBACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;wBAC3C,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;4BACzC,IAAI,MAAM,EAAE,mBAAmB,EAAE,CAAC;gCAChC,OAAO,MAAM,CAAC,mBAAmB,CAAA;4BACnC,CAAC;4BACD,OAAO,SAAS,CAAA;wBAClB,CAAC;wBAAC,OAAO,CAAM,EAAE,CAAC;4BAChB,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gCAC3C,OAAO,SAAS,CAAA;4BAClB,CAAC;4BACD,MAAM,CAAC,CAAA;wBACT,CAAC;oBACH,CAAC,CAAC,EAAE,CAAA;oBAEJ,OAAO,kBAAkB,CAAA;gBAC3B,CAAC;gBAED,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;oBACxC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,MAAM,EACN,8CAA8C,EAC9C,YAAY,EACZ;wBACE,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,WAAW;qBACvB,EACD;wBACE,WAAW,EAAE,WAAW,CAAC,WAAY;wBACrC,gBAAgB,EAAE,aAAa,CAAC,IAAK;qBACtC,CACF,CAAA;oBACD,OAAO,OAAO,CAAA;gBAChB,CAAC;aACF;YACD,IAAI,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI;YACvD,OAAO,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAC3B,QAAQ,EAAE;oBACR,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI;oBAC7C,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW;oBAC3D,MAAM;iBACP;gBACD,kBAAkB,EAAE,aAAa,CAAC,WAAW,CAAC,kBAAkB;gBAChE,uBAAuB,EAAE,aAAa,CAAC,WAAW,CAAC,uBAAuB;gBAC1E,YAAY,EAAE,aAAa,CAAC,WAAW,CAAC,YAAY;gBACpD,kBAAkB,EAAE,aAAa,CAAC,WAAW,CAAC,kBAAkB;gBAChE,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,QAAQ;aAC7C,CAAC;SACH,CAAC,CACH;KACF,CAAA;AACH,CAAC"}