@actsecurity/iam-collect 0.1.215

package/dist/cjs/awsConfigClients/clients/AwsConfigS3ControlClient.js

@@ -0,0 +1,293 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigS3ControlClient = void 0;
+const client_s3_control_1 = require("@aws-sdk/client-s3-control");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const json_js_1 = require("../../utils/json.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config client for S3 Control operations.
+ *
+ * Supported Commands:
+ * - ListAccessPointsCommand: Returns access point listing from Config using AWS::S3::AccessPoint
+ * - GetAccessPointCommand: Returns access point details from Config including alias, public access block config
+ * - GetPublicAccessBlockCommand: Returns account-level public access block configuration from Config
+ *
+ * Limitations:
+ * S3 access point policies, multi-region access point policies, and Object Lambda policies
+ * are not available in AWS Config. The Config service tracks access point configuration
+ * but not access policies. Most policy-related commands return undefined/empty responses.
+ */
+class AwsConfigS3ControlClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_s3_control_1.S3ControlClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    registerCommands() {
+        this.registerCommand(AwsConfigGetAccessPointCommand);
+        this.registerCommand(AwsConfigGetAccessPointPolicyCommand);
+        this.registerCommand(AwsConfigGetAccessPointForObjectLambdaCommand);
+        this.registerCommand(AwsConfigGetAccessPointPolicyForObjectLambdaCommand);
+        this.registerCommand(AwsConfigGetBucketPolicyCommand);
+        this.registerCommand(AwsConfigGetBucketTaggingCommand);
+        this.registerCommand(AwsConfigGetMultiRegionAccessPointPolicyCommand);
+        this.registerCommand(AwsConfigGetPublicAccessBlockCommand);
+        this.registerCommand(AwsConfigListAccessPointsCommand);
+        this.registerCommand(AwsConfigListAccessPointsForDirectoryBucketsCommand);
+        this.registerCommand(AwsConfigListAccessPointsForObjectLambdaCommand);
+        this.registerCommand(AwsConfigListMultiRegionAccessPointsCommand);
+        this.registerCommand(AwsConfigListRegionalBucketsCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+    }
+}
+exports.AwsConfigS3ControlClient = AwsConfigS3ControlClient;
+/**
+ * Config-based implementation of S3Control ListAccessPointsCommand
+ * Uses AWS::S3::AccessPoint resource type from Config
+ */
+const AwsConfigListAccessPointsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListAccessPointsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.Name,
+        configuration.Bucket,
+        configuration.BucketAccountId,
+        configuration.NetworkOrigin,
+        configuration.VpcConfiguration.VpcId,
+        configuration.Policy,
+        configuration.Alias,
+        configuration.VpcConfiguration.VpcId,
+        configuration.PublicAccessBlockConfiguration.BlockPublicAcls,
+        configuration.PublicAccessBlockConfiguration.BlockPublicPolicy,
+        configuration.PublicAccessBlockConfiguration.IgnorePublicAcls,
+        configuration.PublicAccessBlockConfiguration.RestrictPublicBuckets,
+        resourceCreationTime
+      WHERE
+        resourceType = 'AWS::S3::AccessPoint'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        const accessPoints = results?.map((resultString) => {
+            const { configItem, configuration } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            context.putCache(`ap#${configuration.Name}`, 'policy', configuration?.Policy);
+            context.putCache(`ap#${configuration.Name}`, 'details', { configItem, configuration });
+            return {
+                Name: configuration?.Name || configItem.resourceName, //keep
+                NetworkOrigin: configuration?.NetworkOrigin, // Keep
+                VpcConfiguration: configuration?.VpcConfiguration?.VpcId // Keep
+                    ? {
+                        VpcId: configuration.VpcConfiguration.VpcId
+                    }
+                    : undefined,
+                Bucket: configuration?.Bucket, // Keep
+                BucketAccountId: configuration?.BucketAccountId, // Keep
+                AccessPointArn: configItem.arn // Keep
+            };
+        }) || [];
+        return {
+            AccessPointList: accessPoints
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointCommand
+ * Uses AWS::S3::AccessPoint resource type from Config
+ */
+const AwsConfigGetAccessPointCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetAccessPointCommand,
+    execute: async (input, context) => {
+        const { configItem, configuration } = context.getCache(`ap#${input.Name}`, 'details');
+        return {
+            Name: configuration?.Name || configItem.resourceName,
+            Bucket: configuration?.Bucket,
+            NetworkOrigin: configuration?.NetworkOrigin,
+            VpcConfiguration: configuration?.VpcConfiguration?.VpcId
+                ? {
+                    VpcId: configuration.VpcConfiguration.VpcId
+                }
+                : undefined,
+            PublicAccessBlockConfiguration: configuration?.PublicAccessBlockConfiguration
+                ? {
+                    BlockPublicAcls: configuration.PublicAccessBlockConfiguration.BlockPublicAcls,
+                    BlockPublicPolicy: configuration.PublicAccessBlockConfiguration.BlockPublicPolicy,
+                    IgnorePublicAcls: configuration.PublicAccessBlockConfiguration.IgnorePublicAcls,
+                    RestrictPublicBuckets: configuration.PublicAccessBlockConfiguration.RestrictPublicBuckets
+                }
+                : undefined,
+            CreationDate: configItem.resourceCreationTime
+                ? new Date(configItem.resourceCreationTime)
+                : undefined,
+            Alias: configuration?.Alias,
+            AccessPointArn: configItem.arn,
+            BucketAccountId: configuration?.BucketAccountId
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointPolicyCommand
+ * Returns undefined since access point policies are not available in Config
+ */
+const AwsConfigGetAccessPointPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetAccessPointPolicyCommand,
+    execute: async (input, context) => {
+        const { Name, AccountId } = input;
+        if (!Name || !AccountId) {
+            throw new Error('Name and AccountId are required');
+        }
+        const policy = context.getCache(`ap#${Name}`, 'policy');
+        return {
+            Policy: (0, json_js_1.stringifyIfPresent)(policy)
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointForObjectLambdaCommand
+ * Returns minimal Object Lambda access point info since configuration is not available in Config
+ */
+const AwsConfigGetAccessPointForObjectLambdaCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetAccessPointForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return minimal info since Object Lambda config is not tracked in Config
+        return { Name: input.Name };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointPolicyForObjectLambdaCommand
+ * Returns undefined since Object Lambda access point policies are not available in Config
+ */
+const AwsConfigGetAccessPointPolicyForObjectLambdaCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetAccessPointPolicyForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return undefined since Object Lambda policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetBucketPolicyCommand
+ * Returns undefined since Outpost bucket policies are not available in Config
+ */
+const AwsConfigGetBucketPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetBucketPolicyCommand,
+    execute: async (input, context) => {
+        // Return undefined since Outpost bucket policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetBucketTaggingCommand
+ * Returns undefined since Outpost bucket tags are not available in Config
+ */
+const AwsConfigGetBucketTaggingCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetBucketTaggingCommand,
+    execute: async (input, context) => {
+        // Return undefined since Outpost bucket tags are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetMultiRegionAccessPointPolicyCommand
+ * Returns undefined since multi-region access point policies are not available in Config
+ */
+const AwsConfigGetMultiRegionAccessPointPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetMultiRegionAccessPointPolicyCommand,
+    execute: async (input, context) => {
+        // Return undefined since MRAP policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetPublicAccessBlockCommand
+ * Uses AWS::S3::AccountPublicAccessBlock resource type from Config
+ */
+const AwsConfigGetPublicAccessBlockCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.GetPublicAccessBlockCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        configuration.blockPublicAcls,
+        configuration.blockPublicPolicy,
+        configuration.ignorePublicAcls,
+        configuration.restrictPublicBuckets
+      WHERE
+        resourceType = 'AWS::S3::AccountPublicAccessBlock'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        if (results.length === 0) {
+            return {};
+        }
+        const { configuration } = (0, awsConfigUtils_js_1.parseConfigItem)(results[0]);
+        return {
+            PublicAccessBlockConfiguration: {
+                BlockPublicAcls: configuration?.blockPublicAcls,
+                BlockPublicPolicy: configuration?.blockPublicPolicy,
+                IgnorePublicAcls: configuration?.ignorePublicAcls,
+                RestrictPublicBuckets: configuration?.restrictPublicBuckets
+            }
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListAccessPointsForDirectoryBucketsCommand
+ * Returns empty array since directory bucket access point listings are not available in Config
+ */
+const AwsConfigListAccessPointsForDirectoryBucketsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListAccessPointsForDirectoryBucketsCommand,
+    execute: async (input, context) => {
+        // Return empty array since directory bucket access points are not tracked in Config
+        return { AccessPointList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListAccessPointsForObjectLambdaCommand
+ * Returns empty array since Object Lambda access point listings are not available in Config
+ */
+const AwsConfigListAccessPointsForObjectLambdaCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListAccessPointsForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return empty array since Object Lambda access points are not tracked in Config
+        return { ObjectLambdaAccessPointList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListMultiRegionAccessPointsCommand
+ * Returns empty array since multi-region access point listings are not available in Config
+ */
+const AwsConfigListMultiRegionAccessPointsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListMultiRegionAccessPointsCommand,
+    execute: async (input, context) => {
+        // Return empty array since MRAPs are not tracked in Config
+        return { AccessPoints: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListRegionalBucketsCommand
+ * Returns empty array since regional bucket listings are not available in Config
+ */
+const AwsConfigListRegionalBucketsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListRegionalBucketsCommand,
+    execute: async (input, context) => {
+        // Return empty array since regional buckets are not tracked in Config
+        return { RegionalBucketList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListTagsForResourceCommand
+ * Returns empty array since resource tags are not available in Config for policy analysis
+ */
+const AwsConfigListTagsForResourceCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_s3_control_1.ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        // Return empty array since resource tags are not tracked in Config
+        return { Tags: [] };
+    }
+});
+//# sourceMappingURL=AwsConfigS3ControlClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigS3ControlClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigS3ControlClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigS3ControlClient.ts"],"names":[],"mappings":";;;AAAA,kEAgBmC;AAEnC,6EAAsE;AACtE,iDAAwD;AACxD,4EAA4F;AAC5F,4DAI6B;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAa,wBAAyB,SAAQ,kCAAsC;IAClF,MAAM,CAAU,UAAU,GAAG,mCAAe,CAAC,IAAI,CAAA;IAEjD,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAES,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,6CAA6C,CAAC,CAAA;QACnE,IAAI,CAAC,eAAe,CAAC,mDAAmD,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,+CAA+C,CAAC,CAAA;QACrE,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,mDAAmD,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe,CAAC,+CAA+C,CAAC,CAAA;QACrE,IAAI,CAAC,eAAe,CAAC,2CAA2C,CAAC,CAAA;QACjE,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;IAC3D,CAAC;;AA5BH,4DA6BC;AAED;;;GAGG;AACH,MAAM,gCAAgC,GAAG,IAAA,4CAAgB,EAAC;IACxD,OAAO,EAAE,2CAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;2BAoBS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,YAAY,GAChB,OAAO,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;YAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;YAEtF,OAAO;gBACL,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,UAAU,CAAC,YAAY,EAAE,MAAM;gBAC5D,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO;gBACpD,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO;oBAC9D,CAAC,CAAC;wBACE,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK;qBAC5C;oBACH,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;gBACtC,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO;gBACxD,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO;aACvC,CAAA;QACH,CAAC,CAAC,IAAI,EAAE,CAAA;QAEV,OAAO;YACL,eAAe,EAAE,YAAY;SAC9B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,8BAA8B,GAAG,IAAA,4CAAgB,EAAC;IACtD,OAAO,EAAE,yCAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;QAErF,OAAO;YACL,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,UAAU,CAAC,YAAY;YACpD,MAAM,EAAE,aAAa,EAAE,MAAM;YAC7B,aAAa,EAAE,aAAa,EAAE,aAAa;YAC3C,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK;gBACtD,CAAC,CAAC;oBACE,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK;iBAC5C;gBACH,CAAC,CAAC,SAAS;YACb,8BAA8B,EAAE,aAAa,EAAE,8BAA8B;gBAC3E,CAAC,CAAC;oBACE,eAAe,EAAE,aAAa,CAAC,8BAA8B,CAAC,eAAe;oBAC7E,iBAAiB,EAAE,aAAa,CAAC,8BAA8B,CAAC,iBAAiB;oBACjF,gBAAgB,EAAE,aAAa,CAAC,8BAA8B,CAAC,gBAAgB;oBAC/E,qBAAqB,EACnB,aAAa,CAAC,8BAA8B,CAAC,qBAAqB;iBACrE;gBACH,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,UAAU,CAAC,oBAAoB;gBAC3C,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;gBAC3C,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,aAAa,EAAE,KAAK;YAC3B,cAAc,EAAE,UAAU,CAAC,GAAG;YAC9B,eAAe,EAAE,aAAa,EAAE,eAAe;SAChD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,oCAAoC,GAAG,IAAA,4CAAgB,EAAC;IAC5D,OAAO,EAAE,+CAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QAEjC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvD,OAAO;YACL,MAAM,EAAE,IAAA,4BAAkB,EAAC,MAAM,CAAC;SACnC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,6CAA6C,GAAG,IAAA,4CAAgB,EAAC;IACrE,OAAO,EAAE,wDAAoC;IAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,0EAA0E;QAC1E,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mDAAmD,GAAG,IAAA,4CAAgB,EAAC;IAC3E,OAAO,EAAE,8DAA0C;IACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,0EAA0E;QAC1E,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAAG,IAAA,4CAAgB,EAAC;IACvD,OAAO,EAAE,0CAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2EAA2E;QAC3E,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,gCAAgC,GAAG,IAAA,4CAAgB,EAAC;IACxD,OAAO,EAAE,2CAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,uEAAuE;QACvE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+CAA+C,GAAG,IAAA,4CAAgB,EAAC;IACvE,OAAO,EAAE,0DAAsC;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,iEAAiE;QACjE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,oCAAoC,GAAG,IAAA,4CAAgB,EAAC;IAC5D,OAAO,EAAE,+CAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;2BAQS,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,mCAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAErD,OAAO;YACL,8BAA8B,EAAE;gBAC9B,eAAe,EAAE,aAAa,EAAE,eAAe;gBAC/C,iBAAiB,EAAE,aAAa,EAAE,iBAAiB;gBACnD,gBAAgB,EAAE,aAAa,EAAE,gBAAgB;gBACjD,qBAAqB,EAAE,aAAa,EAAE,qBAAqB;aAC5D;SACF,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mDAAmD,GAAG,IAAA,4CAAgB,EAAC;IAC3E,OAAO,EAAE,8DAA0C;IACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,oFAAoF;QACpF,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;IAChC,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+CAA+C,GAAG,IAAA,4CAAgB,EAAC;IACvE,OAAO,EAAE,0DAAsC;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,iFAAiF;QACjF,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAAA;IAC5C,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,2CAA2C,GAAG,IAAA,4CAAgB,EAAC;IACnE,OAAO,EAAE,sDAAkC;IAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2DAA2D;QAC3D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;IAC7B,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,8CAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,sEAAsE;QACtE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAA;IACnC,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,8CAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,mEAAmE;QACnE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACrB,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSNSClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based SNS client implementation
+ */
+export declare class AwsConfigSNSClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all SNS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSNSClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigSNSClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSNSClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSNSClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSNSClient.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigSNSClient = void 0;
+const client_sns_1 = require("@aws-sdk/client-sns");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based SNS client implementation
+ */
+class AwsConfigSNSClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_sns_1.SNSClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all SNS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetTopicAttributesCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+        this.registerCommand(AwsConfigListTopicsCommand);
+    }
+}
+exports.AwsConfigSNSClient = AwsConfigSNSClient;
+/**
+ * Config-based implementation of SNS GetTopicAttributesCommand
+ *
+ * Maps SNS::Topic Config data to SNS GetTopicAttributesCommand output format.
+ * Returns only the attributes used by the sync: DisplayName, KmsMasterKeyId, Owner, Policy.
+ */
+const AwsConfigGetTopicAttributesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sns_1.GetTopicAttributesCommand,
+    execute: async (input, context) => {
+        const topicArn = input.TopicArn;
+        const configuration = context.getCache(topicArn, 'configuration');
+        // Return only the attributes used by the sync operations
+        const attributes = {};
+        if (configuration.DisplayName) {
+            attributes['DisplayName'] = configuration.DisplayName;
+        }
+        if (configuration.KmsMasterKeyId) {
+            attributes['KmsMasterKeyId'] = configuration.KmsMasterKeyId;
+        }
+        if (configuration.Owner) {
+            attributes['Owner'] = configuration.Owner;
+        }
+        if (configuration.Policy) {
+            attributes['Policy'] = configuration.Policy;
+        }
+        return {
+            Attributes: attributes
+        };
+    }
+});
+/**
+ * Config-based implementation of SNS ListTagsForResourceCommand
+ *
+ * Maps SNS::Topic Config tag data to SNS ListTagsForResourceCommand output format.
+ * Returns topic tags for resource identification and compliance analysis.
+ */
+const AwsConfigListTagsForResourceCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sns_1.ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        const resourceArn = input.ResourceArn;
+        const tags = context.getCache(resourceArn, 'tags');
+        return {
+            Tags: tags || {}
+        };
+    }
+});
+/**
+ * Config-based implementation of SNS ListTopicsCommand
+ *
+ * Maps SNS::Topic Config data to SNS ListTopicsCommand output format.
+ * Returns topic listing for IAM analysis and resource discovery.
+ */
+const AwsConfigListTopicsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sns_1.ListTopicsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.TopicArn,
+        configuration.DisplayName,
+        configuration.KmsMasterKeyId,
+        configuration.Owner,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::SNS::Topic'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        const topics = results.map((result) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(result);
+            // Cache data that will be needed by other commands
+            context.putCache(configItem.arn, 'configuration', configuration);
+            context.putCache(configItem.arn, 'tags', tags);
+            return {
+                TopicArn: configItem.arn
+            };
+        });
+        return {
+            Topics: topics,
+            NextToken: undefined // Config doesn't provide pagination markers
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigSNSClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigSNSClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSNSClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSNSClient.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAE5B,6EAAsE;AACtE,4EAA4F;AAC5F,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;IAClD,CAAC;;AApBH,gDAqBC;AAED;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,IAAA,4CAAgB,EAAC;IAC1D,OAAO,EAAE,sCAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAEjE,yDAAyD;QACzD,MAAM,UAAU,GAA2B,EAAE,CAAA;QAE7C,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9B,UAAU,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC,WAAW,CAAA;QACvD,CAAC;QACD,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC,cAAc,CAAA;QAC7D,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,KAAK,CAAA;QAC3C,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAA;QAC7C,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;SACvB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,uCAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAY,CAAA;QAEtC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAElD,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,EAAE;SACjB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,IAAA,4CAAgB,EAAC;IAClD,OAAO,EAAE,8BAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;;2BAaS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,MAAM,CAAC,CAAA;YAEnE,mDAAmD;YACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAC,GAAG;aACzB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS,CAAC,4CAA4C;SAClE,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSQSClient.d.ts

@@ -0,0 +1,18 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based SQS client implementation
+ */
+export declare class AwsConfigSQSClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all SQS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSQSClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigSQSClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSQSClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSQSClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAO5F;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSQSClient.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigSQSClient = void 0;
+const client_sqs_1 = require("@aws-sdk/client-sqs");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based SQS client implementation
+ */
+class AwsConfigSQSClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_sqs_1.SQSClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all SQS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetQueueAttributesCommand);
+        this.registerCommand(AwsConfigListQueueTagsCommand);
+        this.registerCommand(AwsConfigListQueuesCommand);
+    }
+}
+exports.AwsConfigSQSClient = AwsConfigSQSClient;
+/**
+ * Config-based implementation of SQS ListQueuesCommand
+ *
+ * Maps SQS::Queue Config data to SQS ListQueuesCommand output format.
+ * Returns queue URL listing for IAM analysis and resource discovery.
+ */
+const AwsConfigListQueuesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sqs_1.ListQueuesCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.QueueUrl,
+        configuration.QueueName,
+        configuration.KmsMasterKeyId,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::SQS::Queue'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        const queueUrls = results.map((result) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(result);
+            context.putCache(configItem.resourceId, 'configuration', configuration);
+            context.putCache(configItem.resourceId, 'tags', tags);
+            // Use QueueUrl from config if available, otherwise construct from QueueName
+            return configItem.resourceId;
+        });
+        return {
+            QueueUrls: queueUrls,
+            NextToken: undefined // Config doesn't provide pagination markers
+        };
+    }
+});
+/**
+ * Config-based implementation of SQS GetQueueAttributesCommand
+ *
+ * Maps SQS::Queue Config data to SQS GetQueueAttributesCommand output format.
+ * Returns only the attributes used by the sync: KmsMasterKeyId, Policy.
+ */
+const AwsConfigGetQueueAttributesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sqs_1.GetQueueAttributesCommand,
+    execute: async (input, context) => {
+        const queueUrl = input.QueueUrl;
+        const configuration = context.getCache(queueUrl, 'configuration');
+        // Return only the attributes used by the sync operations
+        const attributes = {};
+        if (configuration.KmsMasterKeyId) {
+            attributes['KmsMasterKeyId'] = configuration.KmsMasterKeyId;
+        }
+        if (configuration.Policy) {
+            attributes['Policy'] = configuration.Policy;
+        }
+        return {
+            Attributes: attributes
+        };
+    }
+});
+/**
+ * Config-based implementation of SQS ListQueueTagsCommand
+ *
+ * Maps SQS::Queue Config tag data to SQS ListQueueTagsCommand output format.
+ * Returns queue tags for resource identification and compliance analysis.
+ */
+const AwsConfigListQueueTagsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_sqs_1.ListQueueTagsCommand,
+    execute: async (input, context) => {
+        const queueUrl = input.QueueUrl;
+        const value = context.getCache(queueUrl, 'tags');
+        return {
+            Tags: value || {}
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigSQSClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigSQSClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSQSClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSQSClient.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAE5B,6EAAsE;AACtE,4EAA4F;AAC5F,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAA;QACnD,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;IAClD,CAAC;;AApBH,gDAqBC;AAED;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,IAAA,4CAAgB,EAAC;IAClD,OAAO,EAAE,8BAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,MAAM,CAAC,CAAA;YACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAErD,4EAA4E;YAC5E,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS,CAAC,4CAA4C;SAClE,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,IAAA,4CAAgB,EAAC;IAC1D,OAAO,EAAE,sCAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAEjE,yDAAyD;QACzD,MAAM,UAAU,GAA2B,EAAE,CAAA;QAE7C,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC,cAAc,CAAA;QAC7D,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAA;QAC7C,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;SACvB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,6BAA6B,GAAG,IAAA,4CAAgB,EAAC;IACrD,OAAO,EAAE,iCAAoB;IAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAEhD,OAAO;YACL,IAAI,EAAE,KAAK,IAAI,EAAE;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSecretsManagerClient.d.ts

@@ -0,0 +1,21 @@
+import { type AwsCredentialProviderWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { type AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * Secrets Manager client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigSecretsManagerClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialProviderWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Secrets Manager command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSecretsManagerClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigSecretsManagerClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSecretsManagerClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSecretsManagerClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,KAAK,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAE5F;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACvF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAA4B;gBAGpD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAInC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigSecretsManagerClient.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigSecretsManagerClient = void 0;
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+/**
+ * Secrets Manager client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+class AwsConfigSecretsManagerClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_secrets_manager_1.SecretsManagerClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Secrets Manager command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListSecretsCommand);
+        this.registerCommand(AwsConfigGetResourcePolicyCommand);
+    }
+}
+exports.AwsConfigSecretsManagerClient = AwsConfigSecretsManagerClient;
+/**
+ * Config-based implementation of Secrets Manager ListSecretsCommand
+ */
+const AwsConfigListSecretsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_secrets_manager_1.ListSecretsCommand,
+    execute: async (input, context) => {
+        // Policy not available in Config, so return an empty list
+        return {
+            SecretList: []
+        };
+    }
+});
+/**
+ * Config-based implementation of Secrets Manager GetResourcePolicyCommand
+ */
+const AwsConfigGetResourcePolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_secrets_manager_1.GetResourcePolicyCommand,
+    execute: async (input, context) => {
+        // Policy not available in Config, so fetch directly from Secrets Manager
+        return {};
+    }
+});
+//# sourceMappingURL=AwsConfigSecretsManagerClient.js.map