@actsecurity/iam-collect 0.1.215

package/dist/cjs/awsConfigClients/clients/AwsConfigIamClient.js

@@ -0,0 +1,439 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigIamClient = void 0;
+const client_iam_1 = require("@aws-sdk/client-iam");
+const iam_utils_1 = require("@actsecurity/iam-utils");
+const ClientPool_js_1 = require("../../aws/ClientPool.js");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based IAM client implementation
+ */
+class AwsConfigIamClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_iam_1.IAMClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all IAM command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetAccountAuthorizationDetailsCommand);
+        this.registerCommand(AwsConfigGetOpenIDConnectProviderCommand);
+        this.registerCommand(AwsConfigGetSAMLProviderCommand);
+        this.registerCommand(AwsConfigListInstanceProfilesCommand);
+        this.registerCommand(AwsConfigListOpenIDConnectProvidersCommand);
+        this.registerCommand(AwsConfigListSAMLProvidersCommand);
+        this.registerCommand(AwsConfigListPolicyTagsCommand);
+    }
+}
+exports.AwsConfigIamClient = AwsConfigIamClient;
+/**
+ * Config-based implementation of IAM GetAccountAuthorizationDetailsCommand
+ *
+ * Aggregates IAM data from multiple Config resource types:
+ * - AWS::IAM::Role for roles
+ * - AWS::IAM::User for users
+ * - AWS::IAM::Group for groups
+ * - AWS::IAM::Policy for managed policies
+ */
+const AwsConfigGetAccountAuthorizationDetailsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.GetAccountAuthorizationDetailsCommand,
+    execute: async (input, context) => {
+        const nativeIamClient = ClientPool_js_1.AwsClientPool.defaultInstance.client(client_iam_1.IAMClient, context.configCredentials, context.region, undefined);
+        const awsManagedPoliciesToFetch = new Set();
+        // Query roles from Config
+        const rolesQuery = `
+      SELECT
+        configuration.arn,
+        configuration.roleName,
+        configuration.path,
+        configuration.roleId,
+        configuration.createDate,
+        configuration.assumeRolePolicyDocument,
+        configuration.attachedManagedPolicies,
+        configuration.instanceProfileList,
+        configuration.rolePolicyList,
+        configuration.permissionsBoundary,
+        configuration.roleLastUsed,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Role'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        // Query users from Config
+        const usersQuery = `
+      SELECT
+        configuration.arn,
+        configuration.userName,
+        configuration.path,
+        configuration.userId,
+        configuration.createDate,
+        configuration.attachedManagedPolicies,
+        configuration.groupList,
+        configuration.userPolicyList,
+        configuration.permissionsBoundary,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::User'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        // Query groups from Config
+        const groupsQuery = `
+      SELECT
+        configuration.arn,
+        configuration.groupName,
+        configuration.path,
+        configuration.groupId,
+        configuration.createDate,
+        configuration.attachedManagedPolicies,
+        configuration.groupPolicyList,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Group'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        // Query policies from Config
+        const policiesQuery = `
+      SELECT
+        configuration.policyName,
+        configuration.policyId,
+        configuration.arn,
+        configuration.path,
+        configuration.createDate,
+        configuration.updateDate,
+        configuration.policyVersionList,
+        configuration.attachmentCount,
+        configuration.permissionsBoundaryUsageCount,
+        configuration.isAttachable,
+        configuration.description,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Policy'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        // Execute all queries
+        const [rolesResults, usersResults, groupsResults, policiesResults] = await Promise.all([
+            (0, awsConfigUtils_js_1.executeConfigQuery)(rolesQuery, context),
+            (0, awsConfigUtils_js_1.executeConfigQuery)(usersQuery, context),
+            (0, awsConfigUtils_js_1.executeConfigQuery)(groupsQuery, context),
+            (0, awsConfigUtils_js_1.executeConfigQuery)(policiesQuery, context)
+        ]);
+        // Transform Config data to IAM format and collect AWS managed policies
+        const roles = rolesResults.map((resultString) => {
+            const { configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Collect AWS managed policies from this role
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                RoleName: configuration.roleName,
+                Path: configuration.path,
+                RoleId: configuration.roleId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AssumeRolePolicyDocument: configuration.assumeRolePolicyDocument,
+                AttachedManagedPolicies: configuration.attachedManagedPolicies?.map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                InstanceProfileList: configuration.instanceProfileList,
+                RolePolicyList: configuration.rolePolicyList.map((rp) => ({
+                    PolicyName: rp.policyName,
+                    PolicyDocument: rp.policyDocument
+                })),
+                Tags: tags,
+                PermissionsBoundary: configuration.permissionsBoundary,
+                RoleLastUsed: configuration.roleLastUsed
+            };
+        });
+        const users = usersResults.map((resultString) => {
+            const { configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Collect AWS managed policies from this user
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                UserName: configuration.userName,
+                Path: configuration.path,
+                UserId: configuration.userId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AttachedManagedPolicies: configuration.attachedManagedPolicies.map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                GroupList: configuration.groupList,
+                UserPolicyList: configuration.userPolicyList.map((up) => ({
+                    PolicyName: up.policyName,
+                    PolicyDocument: up.policyDocument
+                })),
+                Tags: tags,
+                PermissionsBoundary: configuration.permissionsBoundary
+            };
+        });
+        const groups = groupsResults.map((resultString) => {
+            const { configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Collect AWS managed policies from this group
+            const attachedPolicies = configuration.attachedManagedPolicies || [];
+            attachedPolicies.forEach((policy) => {
+                if (policy.policyArn && isAwsManagedPolicy(policy.policyArn)) {
+                    awsManagedPoliciesToFetch.add(policy.policyArn);
+                }
+            });
+            return {
+                Arn: configuration.arn,
+                GroupName: configuration.groupName,
+                Path: configuration.path,
+                GroupId: configuration.groupId,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                AttachedManagedPolicies: putInArray(configuration.attachedManagedPolicies).map((ap) => ({
+                    PolicyName: ap.policyName,
+                    PolicyArn: ap.policyArn
+                })),
+                Tags: tags ? Object.entries(tags).map(([key, value]) => ({ Key: key, Value: value })) : [],
+                GroupPolicyList: putInArray(configuration.groupPolicyList).map((gp) => ({
+                    PolicyName: gp.policyName,
+                    PolicyDocument: gp.policyDocument
+                }))
+            };
+        });
+        const policies = policiesResults.map((resultString) => {
+            const { configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            return {
+                PolicyName: configuration.policyName,
+                PolicyId: configuration.policyId,
+                Arn: configuration.arn,
+                Path: configuration.path,
+                CreateDate: configuration.createDate ? new Date(configuration.createDate) : undefined,
+                UpdateDate: configuration.updateDate ? new Date(configuration.updateDate) : undefined,
+                PolicyVersionList: putInArray(configuration.policyVersionList).map((pv) => ({
+                    Document: pv.document,
+                    VersionId: pv.versionId,
+                    IsDefaultVersion: pv.isDefaultVersion
+                })),
+                AttachmentCount: configuration.attachmentCount,
+                PermissionsBoundaryUsageCount: configuration.permissionsBoundaryUsageCount,
+                IsAttachable: configuration.isAttachable,
+                Description: configuration.description,
+                Tags: tags
+            };
+        });
+        // Fetch AWS managed policy details using native IAM client
+        const awsManagedPolicies = [];
+        for (const policyArn of awsManagedPoliciesToFetch) {
+            const policyDetails = await nativeIamClient.send(new client_iam_1.GetPolicyCommand({ PolicyArn: policyArn }));
+            const policyDocument = await nativeIamClient.send(new client_iam_1.GetPolicyVersionCommand({
+                PolicyArn: policyArn,
+                VersionId: policyDetails.Policy?.DefaultVersionId
+            }));
+            if (policyDocument.PolicyVersion) {
+                awsManagedPolicies.push({
+                    ...policyDetails.Policy,
+                    PolicyVersionList: [
+                        {
+                            Document: policyDocument.PolicyVersion.Document,
+                            VersionId: policyDocument.PolicyVersion.VersionId,
+                            IsDefaultVersion: policyDocument.PolicyVersion.IsDefaultVersion
+                        }
+                    ]
+                });
+            }
+        }
+        // Combine customer-managed policies from Config with AWS managed policies from native IAM
+        const allPolicies = [...policies, ...awsManagedPolicies];
+        return {
+            UserDetailList: users,
+            GroupDetailList: groups,
+            RoleDetailList: roles,
+            Policies: allPolicies,
+            IsTruncated: false
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListInstanceProfilesCommand
+ *
+ * Note: AWS Config doesn't track InstanceProfile as a separate resource type.
+ * Instance profiles are extracted from Role configuration data.
+ */
+const AwsConfigListInstanceProfilesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.ListInstanceProfilesCommand,
+    execute: async (input, context) => {
+        // Get roles from Config and extract instance profiles
+        const query = `
+      SELECT
+        configuration.instanceProfileList
+      WHERE
+        resourceType = 'AWS::IAM::Role'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        // Extract unique instance profiles from all roles
+        const instanceProfilesMap = new Map();
+        results.forEach((resultString) => {
+            const { configuration } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            const instanceProfiles = configuration.instanceProfileList || [];
+            instanceProfiles.forEach((profile) => {
+                if (profile.arn && !instanceProfilesMap.has(profile.arn)) {
+                    instanceProfilesMap.set(profile.arn, {
+                        Path: profile.path,
+                        InstanceProfileName: profile.instanceProfileName,
+                        InstanceProfileId: profile.instanceProfileId,
+                        Arn: profile.arn,
+                        CreateDate: profile.createDate ? new Date(profile.createDate) : undefined,
+                        Roles: profile.roles?.map((r) => ({ Arn: r.arn })) || [],
+                        Tags: [] // Tags not available in role's instance profile data
+                    });
+                }
+            });
+        });
+        return {
+            InstanceProfiles: Array.from(instanceProfilesMap.values()),
+            IsTruncated: false // TODO: Handle pagination properly
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListOpenIDConnectProvidersCommand
+ */
+const AwsConfigListOpenIDConnectProvidersCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.ListOpenIDConnectProvidersCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        configuration.Arn,
+        configuration.Url,
+        configuration.ClientIdList,
+        configuration.ThumbprintList,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::OIDCProvider'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        const providers = results.map((resultString) => {
+            const { configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            context.putCache(configuration.Arn, 'configuration', { configuration, tags });
+            return {
+                Arn: configuration.Arn
+            };
+        });
+        return {
+            OpenIDConnectProviderList: providers
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM GetOpenIDConnectProviderCommand
+ */
+const AwsConfigGetOpenIDConnectProviderCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.GetOpenIDConnectProviderCommand,
+    execute: async (input, context) => {
+        const { configuration, tags } = context.getCache(input.OpenIDConnectProviderArn, 'configuration');
+        return {
+            Url: configuration.Url,
+            ClientIDList: configuration.ClientIdList,
+            ThumbprintList: configuration.ThumbprintList,
+            Tags: tags
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListSAMLProvidersCommand
+ */
+const AwsConfigListSAMLProvidersCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.ListSAMLProvidersCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        configuration.SamlMetadataDocument,
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::SAMLProvider'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        const providers = results.map((resultString) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            context.putCache(configItem.arn, 'configuration', { configuration, tags });
+            return {
+                Arn: configItem.arn
+            };
+        });
+        return {
+            SAMLProviderList: providers
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM GetSAMLProviderCommand
+ */
+const AwsConfigGetSAMLProviderCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.GetSAMLProviderCommand,
+    execute: async (input, context) => {
+        const { configuration, tags } = context.getCache(input.SAMLProviderArn, 'configuration');
+        return {
+            SAMLMetadataDocument: configuration.SamlMetadataDocument,
+            Tags: tags
+        };
+    }
+});
+/**
+ * Config-based implementation of IAM ListPolicyTagsCommand
+ */
+const AwsConfigListPolicyTagsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_iam_1.ListPolicyTagsCommand,
+    execute: async (input, context) => {
+        const policyName = input.PolicyArn.split('/').pop();
+        const query = `
+      SELECT
+        tags
+      WHERE
+        resourceType = 'AWS::IAM::Policy'
+        AND accountId = '${context.accountId}'
+        AND resourceName = '${policyName}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        if (results.length === 0) {
+            throw new Error('Policy not found');
+        }
+        const { tags } = (0, awsConfigUtils_js_1.parseConfigItem)(results[0]);
+        return {
+            Tags: tags,
+            IsTruncated: false
+        };
+    }
+});
+/**
+ * Given an AWS IAM policy ARN, determine if it is an AWS-managed policy
+ *
+ * @param policyArn the ARN of the IAM policy
+ * @returns true if the policy is AWS-managed, false otherwise
+ */
+function isAwsManagedPolicy(policyArn) {
+    return (0, iam_utils_1.splitArnParts)(policyArn).accountId === 'aws';
+}
+function putInArray(item) {
+    if (item === undefined || item === null) {
+        return [];
+    }
+    return Array.isArray(item) ? item : [item];
+}
+//# sourceMappingURL=AwsConfigIamClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigIamClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigIamClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigIamClient.ts"],"names":[],"mappings":";;;AAAA,oDAY4B;AAC5B,sDAAsD;AACtD,2DAAuD;AAEvD,6EAAsE;AACtE,4EAA4F;AAC5F,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8CAA8C,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe,CAAC,wCAAwC,CAAC,CAAA;QAC9D,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,0CAA0C,CAAC,CAAA;QAChE,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;QACvD,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;IACtD,CAAC;;AAxBH,gDAyBC;AAED;;;;;;;;GAQG;AACH,MAAM,8CAA8C,GAAG,IAAA,4CAAgB,EAAC;IACtE,OAAO,EAAE,kDAAqC;IAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,eAAe,GAAG,6BAAa,CAAC,eAAe,CAAC,MAAM,CAC1D,sBAAS,EACT,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,MAAM,EACd,SAAS,CACV,CAAA;QAED,MAAM,yBAAyB,GAAG,IAAI,GAAG,EAAU,CAAA;QAEnD,0BAA0B;QAC1B,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;2BAgBI,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG;;;;;;;;;;;;;;2BAcI,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG;;;;;;;;;;;;2BAYG,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,6BAA6B;QAC7B,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;2BAgBC,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,sBAAsB;QACtB,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrF,IAAA,sCAAkB,EAAC,UAAU,EAAE,OAAO,CAAC;YACvC,IAAA,sCAAkB,EAAC,UAAU,EAAE,OAAO,CAAC;YACvC,IAAA,sCAAkB,EAAC,WAAW,EAAE,OAAO,CAAC;YACxC,IAAA,sCAAkB,EAAC,aAAa,EAAE,OAAO,CAAC;SAC3C,CAAC,CAAA;QAEF,uEAAuE;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC9C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAE7D,8CAA8C;YAC9C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;gBAChE,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAChF,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC7D,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;gBACH,IAAI,EAAE,IAAI;gBACV,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,YAAY,EAAE,aAAa,CAAC,YAAY;aACzC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC9C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAE7D,8CAA8C;YAC9C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,uBAAuB,EAAE,aAAa,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC/E,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CAAC;gBACH,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC7D,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;gBACH,IAAI,EAAE,IAAW;gBACjB,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;aACvD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAChD,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAE7D,+CAA+C;YAC/C,MAAM,gBAAgB,GAAG,aAAa,CAAC,uBAAuB,IAAI,EAAE,CAAA;YACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAW,EAAE,EAAE;gBACvC,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,uBAAuB,EAAE,UAAU,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAC5E,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBACZ,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC,CACH;gBACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC1F,eAAe,EAAE,UAAU,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC3E,UAAU,EAAE,EAAE,CAAC,UAAU;oBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;iBAClC,CAAC,CAAC;aACJ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YACpD,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAC7D,OAAO;gBACL,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrF,iBAAiB,EAAE,UAAU,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;oBAC/E,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;iBACtC,CAAC,CAAC;gBACH,eAAe,EAAE,aAAa,CAAC,eAAe;gBAC9C,6BAA6B,EAAE,aAAa,CAAC,6BAA6B;gBAC1E,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,IAAI,EAAE,IAAW;aAClB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,2DAA2D;QAC3D,MAAM,kBAAkB,GAA0B,EAAE,CAAA;QACpD,KAAK,MAAM,SAAS,IAAI,yBAAyB,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,IAAI,CAC9C,IAAI,6BAAgB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAC/C,CAAA;YACD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAC/C,IAAI,oCAAuB,CAAC;gBAC1B,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,gBAAgB;aAClD,CAAC,CACH,CAAA;YAED,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;gBACjC,kBAAkB,CAAC,IAAI,CAAC;oBACtB,GAAG,aAAa,CAAC,MAAM;oBACvB,iBAAiB,EAAE;wBACjB;4BACE,QAAQ,EAAE,cAAc,CAAC,aAAa,CAAC,QAAQ;4BAC/C,SAAS,EAAE,cAAc,CAAC,aAAa,CAAC,SAAS;4BACjD,gBAAgB,EAAE,cAAc,CAAC,aAAa,CAAC,gBAAgB;yBAChE;qBACF;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,0FAA0F;QAC1F,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,kBAAkB,CAAC,CAAA;QAExD,OAAO;YACL,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,MAAM;YACvB,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,KAAK;SACnB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,oCAAoC,GAAG,IAAA,4CAAgB,EAAC;IAC5D,OAAO,EAAE,wCAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,sDAAsD;QACtD,MAAM,KAAK,GAAG;;;;;2BAKS,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,kDAAkD;QAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAA;QAErC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YACvD,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,IAAI,EAAE,CAAA;YAChE,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAY,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzD,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;wBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;wBAChD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;wBAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;wBACzE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;wBAC7D,IAAI,EAAE,EAAE,CAAC,qDAAqD;qBAC/D,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC1D,WAAW,EAAE,KAAK,CAAC,mCAAmC;SACvD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,0CAA0C,GAAG,IAAA,4CAAgB,EAAC;IAClE,OAAO,EAAE,8CAAiC;IAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;2BASS,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC7C,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7E,OAAO;gBACL,GAAG,EAAE,aAAa,CAAC,GAAG;aACvB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,yBAAyB,EAAE,SAAS;SACrC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,wCAAwC,GAAG,IAAA,4CAAgB,EAAC;IAChE,OAAO,EAAE,4CAA+B;IACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,CAC9C,KAAK,CAAC,wBAAyB,EAC/B,eAAe,CAChB,CAAA;QAED,OAAO;YACL,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,iCAAiC,GAAG,IAAA,4CAAgB,EAAC;IACzD,OAAO,EAAE,qCAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;2BAOS,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC7C,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YAE1E,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG;aACpB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,gBAAgB,EAAE,SAAS;SAC5B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,+BAA+B,GAAG,IAAA,4CAAgB,EAAC;IACvD,OAAO,EAAE,mCAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAgB,EAAE,eAAe,CAAC,CAAA;QAEzF,OAAO;YACL,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;YACxD,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,8BAA8B,GAAG,IAAA,4CAAgB,EAAC;IACtD,OAAO,EAAE,kCAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAA;QAErD,MAAM,KAAK,GAAG;;;;;2BAKS,OAAO,CAAC,SAAS;8BACd,UAAU;cAC1B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5C,OAAO;YACL,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,KAAK;SACnB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,IAAA,yBAAa,EAAC,SAAS,CAAC,CAAC,SAAS,KAAK,KAAK,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,IAAS;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC5C,CAAC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigKafkaClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Kafka client implementation
+ */
+export declare class AwsConfigKafkaClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Kafka command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigKafkaClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigKafkaClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKafkaClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKafkaClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAGtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC9E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAmB;gBAG3C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAMnC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigKafkaClient.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigKafkaClient = void 0;
+const client_kafka_1 = require("@aws-sdk/client-kafka");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const ResourceNotFoundException_js_1 = require("../../customClients/ResourceNotFoundException.js");
+const json_js_1 = require("../../utils/json.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based Kafka client implementation
+ */
+class AwsConfigKafkaClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_kafka_1.KafkaClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Kafka command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListClustersV2Command);
+        this.registerCommand(AwsConfigDescribeClusterCommand);
+        this.registerCommand(AwsConfigGetClusterPolicyCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+    }
+}
+exports.AwsConfigKafkaClient = AwsConfigKafkaClient;
+/**
+ * Config-based implementation of Kafka ListClustersV2Command
+ */
+const AwsConfigListClustersV2Command = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_kafka_1.ListClustersV2Command,
+    execute: async (input, context) => {
+        // Query AWS Config for all MSK clusters with only needed configuration fields
+        const query = `
+      SELECT
+        resourceId,
+        resourceName,
+        awsRegion,
+        configuration.EncryptionInfo,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::MSK::Cluster'
+        AND accountId = '${context.accountId}'
+        AND awsRegion = '${context.region}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const items = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        // Transform Config data to ListClustersV2Response format
+        const clusterInfoList = items.map((item) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(item);
+            // Cache data that will be needed by other commands
+            const clusterArn = configItem.resourceId;
+            context.putCache(clusterArn, 'configuration', configuration);
+            context.putCache(clusterArn, 'resourceName', configItem.resourceName);
+            context.putCache(clusterArn, 'tags', tags);
+            return {
+                ClusterArn: clusterArn,
+                ClusterName: configItem.resourceName,
+                Tags: tags || {}
+            };
+        });
+        return {
+            ClusterInfoList: clusterInfoList
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka DescribeClusterCommand
+ */
+const AwsConfigDescribeClusterCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_kafka_1.DescribeClusterCommand,
+    execute: async (input, context) => {
+        const { ClusterArn } = input;
+        if (!ClusterArn) {
+            throw new Error('ClusterArn is required for DescribeClusterCommand');
+        }
+        const configuration = context.getCache(ClusterArn, 'configuration');
+        const resourceName = context.getCache(ClusterArn, 'resourceName');
+        // Transform Config data to DescribeClusterResponse format
+        return {
+            ClusterInfo: {
+                ClusterArn: ClusterArn,
+                ClusterName: configuration?.clusterName || resourceName,
+                EncryptionInfo: configuration?.encryptionInfo
+            }
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka GetClusterPolicyCommand
+ */
+const AwsConfigGetClusterPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_kafka_1.GetClusterPolicyCommand,
+    execute: async (input, context) => {
+        const { ClusterArn } = input;
+        if (!ClusterArn) {
+            throw new Error('ClusterArn is required for GetClusterPolicyCommand');
+        }
+        // Query AWS Config for MSK cluster policy
+        const query = `
+      SELECT
+        resourceId,
+        configuration.clusterArn,
+        configuration.Policy
+      WHERE
+        resourceType = 'AWS::MSK::ClusterPolicy'
+        AND resourceId = '${ClusterArn}'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const items = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        if (items.length === 0) {
+            throw new ResourceNotFoundException_js_1.ResourceNotFoundException(`Cluster policy not found for cluster: ${ClusterArn}`);
+        }
+        const { configuration } = (0, awsConfigUtils_js_1.parseConfigItem)(items[0]);
+        // Transform Config data to GetClusterPolicyResponse format
+        return {
+            CurrentVersion: '1', // Config doesn't track policy version, use default
+            Policy: (0, json_js_1.stringifyIfPresent)(configuration.Policy)
+        };
+    }
+});
+/**
+ * Config-based implementation of Kafka ListTagsForResourceCommand
+ */
+const AwsConfigListTagsForResourceCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_kafka_1.ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        const { ResourceArn } = input;
+        if (!ResourceArn) {
+            throw new Error('ResourceArn is required for ListTagsForResourceCommand');
+        }
+        const tags = context.getCache(ResourceArn, 'tags');
+        // Transform Config data to ListTagsForResourceResponse format
+        return {
+            Tags: tags
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigKafkaClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigKafkaClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKafkaClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKafkaClient.ts"],"names":[],"mappings":";;;AAAA,wDAM8B;AAE9B,6EAAsE;AACtE,mGAA4F;AAC5F,iDAAwD;AACxD,4EAA4F;AAC5F,4DAI6B;AAE7B;;GAEG;AACH,MAAa,oBAAqB,SAAQ,kCAAsC;IAC9E,MAAM,CAAU,UAAU,GAAG,0BAAW,CAAC,IAAI,CAAA;IAE7C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;IAC3D,CAAC;;AArBH,oDAsBC;AAED;;GAEG;AACH,MAAM,8BAA8B,GAAG,IAAA,4CAAgB,EAAC;IACtD,OAAO,EAAE,oCAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,8EAA8E;QAC9E,MAAM,KAAK,GAAG;;;;;;;;;;2BAUS,OAAO,CAAC,SAAS;2BACjB,OAAO,CAAC,MAAM;cAC3B,6CAAyB;KAClC,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAEtD,yDAAyD;QACzD,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,IAAI,CAAC,CAAA;YAEjE,mDAAmD;YACnD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAA;YACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;YACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE1C,OAAO;gBACL,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,UAAU,CAAC,YAAY;gBACpC,IAAI,EAAE,IAAI,IAAI,EAAE;aACjB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,eAAe,EAAE,eAAe;SACjC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,+BAA+B,GAAG,IAAA,4CAAgB,EAAC;IACvD,OAAO,EAAE,qCAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QAE5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;QAEjE,0DAA0D;QAC1D,OAAO;YACL,WAAW,EAAE;gBACX,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,aAAa,EAAE,WAAW,IAAI,YAAY;gBACvD,cAAc,EAAE,aAAa,EAAE,cAAc;aAC9C;SACF,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,gCAAgC,GAAG,IAAA,4CAAgB,EAAC;IACxD,OAAO,EAAE,sCAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;QAE5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG;;;;;;;4BAOU,UAAU;2BACX,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAEtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,wDAAyB,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,mCAAe,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAEnD,2DAA2D;QAC3D,OAAO;YACL,cAAc,EAAE,GAAG,EAAE,mDAAmD;YACxE,MAAM,EAAE,IAAA,4BAAkB,EAAC,aAAa,CAAC,MAAM,CAAC;SACjD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,yCAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAA;QAE7B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAElD,8DAA8D;QAC9D,OAAO;YACL,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigKinesisClient.d.ts

@@ -0,0 +1,22 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based Kinesis client implementation
+ * Returns empty responses since stream policies are not tracked in AWS Config
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigKinesisClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Kinesis command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigKinesisClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigKinesisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigKinesisClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigKinesisClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAqB;gBAG7C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAMnC"}