@actsecurity/iam-data 0.21.202608301

package/dist/cjs/version.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Get the version of the package
+ */
+export declare function iamDataVersion(): Promise<string>;
+/**
+ * Get the date the data was last updated
+ *
+ * @returns the date the data was last updated
+ */
+export declare function iamDataUpdatedAt(): Promise<Date>;
+//# sourceMappingURL=version.d.ts.map

package/dist/cjs/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAsBA;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAGtD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD"}

package/dist/cjs/version.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.iamDataVersion = iamDataVersion;
+exports.iamDataUpdatedAt = iamDataUpdatedAt;
+const readRelativeFile_js_1 = require("./readRelativeFile.js");
+let packageCache = undefined;
+/**
+ * Get the package data version
+ *
+ * @returns the package data version
+ */
+async function getPackageData() {
+    if (!packageCache) {
+        const packageInfo = await (0, readRelativeFile_js_1.readRelativeFile)(['package.json']);
+        packageCache = packageInfo;
+    }
+    return packageCache;
+}
+/**
+ * Get the version of the package
+ */
+async function iamDataVersion() {
+    const data = await getPackageData();
+    return data.version;
+}
+/**
+ * Get the date the data was last updated
+ *
+ * @returns the date the data was last updated
+ */
+async function iamDataUpdatedAt() {
+    const data = await getPackageData();
+    return new Date(data.updatedAt);
+}
+//# sourceMappingURL=version.js.map

package/dist/cjs/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":";;AAyBA,wCAGC;AAOD,4CAGC;AAtCD,+DAAwD;AAOxD,IAAI,YAAY,GAA4B,SAAS,CAAA;AAErD;;;;GAIG;AACH,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAgB,EAAsB,CAAC,cAAc,CAAC,CAAC,CAAA;QACjF,YAAY,GAAG,WAAW,CAAA;IAC5B,CAAC;IACD,OAAO,YAAa,CAAA;AACtB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,cAAc;IAClC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAA;IACnC,OAAO,IAAI,CAAC,OAAO,CAAA;AACrB,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,gBAAgB;IACpC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAA;IACnC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC"}

package/dist/esm/actions.d.ts

@@ -0,0 +1,41 @@
+interface ActionResourceType {
+    name: string;
+    required: boolean;
+    conditionKeys: string[];
+    dependentActions: string[];
+}
+interface Action {
+    name: string;
+    description: string;
+    accessLevel: 'Read' | 'Write' | 'List' | 'Tagging';
+    resourceTypes: ActionResourceType[];
+    conditionKeys: string[];
+    dependentActions: string[];
+    isWildcardOnly: boolean;
+}
+/**
+ * Get all actions for a service
+ *
+ * @param serviceKey the service key to get actions for, is case insensitive
+ * @returns the actions for the service
+ */
+export declare function iamActionsForService(serviceKey: string): Promise<string[]>;
+/**
+ * Check if an action exists
+ *
+ * @param serviceKey the service key to check for the action, is case insensitive
+ * @param actionKey the action key to check for, is case insensitive
+ * @returns true if the action exists, false otherwise
+ */
+export declare function iamActionExists(serviceKey: string, actionKey: string): Promise<boolean>;
+/**
+ * Get the details for an action
+ *
+ * @param serviceKey the service key to get the action for, is case insensitive
+ * @param actionKey the action key to get the details for, is case insensitive
+ * @throws error if the service or action does not exist
+ * @returns the details for the action
+ */
+export declare function iamActionDetails(serviceKey: string, actionKey: string): Promise<Action>;
+export {};
+//# sourceMappingURL=actions.d.ts.map

package/dist/esm/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7F"}

package/dist/esm/actions.js

@@ -0,0 +1,42 @@
+import { readActionData } from './data.js';
+/**
+ * Get all actions for a service
+ *
+ * @param serviceKey the service key to get actions for, is case insensitive
+ * @returns the actions for the service
+ */
+export async function iamActionsForService(serviceKey) {
+    const data = await readActionData(serviceKey.toLowerCase());
+    return Object.values(data).map((action) => action.name);
+}
+/**
+ * Check if an action exists
+ *
+ * @param serviceKey the service key to check for the action, is case insensitive
+ * @param actionKey the action key to check for, is case insensitive
+ * @returns true if the action exists, false otherwise
+ */
+export async function iamActionExists(serviceKey, actionKey) {
+    const data = await readActionData(serviceKey.toLowerCase());
+    return !!data[actionKey.toLowerCase()];
+}
+/**
+ * Get the details for an action
+ *
+ * @param serviceKey the service key to get the action for, is case insensitive
+ * @param actionKey the action key to get the details for, is case insensitive
+ * @throws error if the service or action does not exist
+ * @returns the details for the action
+ */
+export async function iamActionDetails(serviceKey, actionKey) {
+    const data = await readActionData(serviceKey.toLowerCase());
+    const actionData = data[actionKey.toLowerCase()];
+    if (!actionData) {
+        throw new Error(`Action ${actionKey} does not exist for service ${serviceKey}`);
+    }
+    return {
+        ...actionData,
+        isWildcardOnly: actionData.resourceTypes.length === 0
+    };
+}
+//# sourceMappingURL=actions.js.map

package/dist/esm/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAmB1C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,+BAA+B,UAAU,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;KACtD,CAAA;AACH,CAAC"}

package/dist/esm/categories.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Details for an AWS service category and the IAM services assigned to it.
+ */
+export interface CategoryDetails {
+    /** Stable lowercase category key. */
+    readonly key: string;
+    /** Properly capitalized category name from AWS. */
+    readonly name: string;
+    /** Sorted IAM service keys assigned to the category. */
+    readonly services: string[];
+}
+/**
+ * Get all service category keys.
+ *
+ * @returns an array of all service category keys
+ */
+export declare function serviceCategories(): Promise<string[]>;
+/**
+ * Check if a service category exists.
+ *
+ * @param category the category key to check, is case insensitive
+ * @returns true if the category exists, false otherwise
+ */
+export declare function serviceCategoryExists(category: string): Promise<boolean>;
+/**
+ * Get the IAM service to category mapping.
+ *
+ * @returns a map of IAM service keys to category keys
+ */
+export declare function iamServiceCategoryMap(): Promise<Record<string, string>>;
+/**
+ * Get IAM service keys assigned to a service category.
+ *
+ * @param category the category key to get IAM services for, is case insensitive
+ * @throws an error if the category does not exist
+ * @returns sorted IAM service keys assigned to the category
+ */
+export declare function iamServicesForCategory(category: string): Promise<string[]>;
+/**
+ * Get the service category key for an IAM service.
+ *
+ * @param service the IAM service key to get the category for, is case insensitive
+ * @throws an error if the service does not exist or has no category mapping
+ * @returns the category key for the IAM service
+ */
+export declare function categoryForIamService(service: string): Promise<string>;
+/**
+ * Get details for a service category.
+ *
+ * @param category the category key to get details for, is case insensitive
+ * @throws an error if the category does not exist
+ * @returns details for the service category
+ */
+export declare function getServiceCategory(category: string): Promise<CategoryDetails>;
+//# sourceMappingURL=categories.d.ts.map

package/dist/esm/categories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.d.ts","sourceRoot":"","sources":["../../src/categories.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAC5B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAE3D;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG9E;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAE7E;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAa5E;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAOnF"}

package/dist/esm/categories.js

@@ -0,0 +1,75 @@
+import { readCategoryDetails, readDataFile } from './data.js';
+import { iamServiceExists } from './services.js';
+/**
+ * Get all service category keys.
+ *
+ * @returns an array of all service category keys
+ */
+export async function serviceCategories() {
+    return readDataFile('categories.json');
+}
+/**
+ * Check if a service category exists.
+ *
+ * @param category the category key to check, is case insensitive
+ * @returns true if the category exists, false otherwise
+ */
+export async function serviceCategoryExists(category) {
+    const categoryNames = await readDataFile('categoryNames.json');
+    return !!categoryNames[category.toLowerCase()];
+}
+/**
+ * Get the IAM service to category mapping.
+ *
+ * @returns a map of IAM service keys to category keys
+ */
+export async function iamServiceCategoryMap() {
+    return readDataFile('serviceCategories.json');
+}
+/**
+ * Get IAM service keys assigned to a service category.
+ *
+ * @param category the category key to get IAM services for, is case insensitive
+ * @throws an error if the category does not exist
+ * @returns sorted IAM service keys assigned to the category
+ */
+export async function iamServicesForCategory(category) {
+    const categoryDetails = await getServiceCategory(category);
+    return categoryDetails.services;
+}
+/**
+ * Get the service category key for an IAM service.
+ *
+ * @param service the IAM service key to get the category for, is case insensitive
+ * @throws an error if the service does not exist or has no category mapping
+ * @returns the category key for the IAM service
+ */
+export async function categoryForIamService(service) {
+    const serviceKey = service.toLowerCase();
+    const serviceExists = await iamServiceExists(serviceKey);
+    if (!serviceExists) {
+        throw new Error(`Service ${service} does not exist`);
+    }
+    const serviceCategories = await iamServiceCategoryMap();
+    const category = serviceCategories[serviceKey];
+    if (!category) {
+        throw new Error(`Category for service ${service} does not exist`);
+    }
+    return category;
+}
+/**
+ * Get details for a service category.
+ *
+ * @param category the category key to get details for, is case insensitive
+ * @throws an error if the category does not exist
+ * @returns details for the service category
+ */
+export async function getServiceCategory(category) {
+    const categoryKey = category.toLowerCase();
+    const exists = await serviceCategoryExists(categoryKey);
+    if (!exists) {
+        throw new Error(`Category ${category} does not exist`);
+    }
+    return readCategoryDetails(categoryKey);
+}
+//# sourceMappingURL=categories.js.map

package/dist/esm/categories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"categories.js","sourceRoot":"","sources":["../../src/categories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAchD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,YAAY,CAAW,iBAAiB,CAAC,CAAA;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,aAAa,GAAG,MAAM,YAAY,CAAyB,oBAAoB,CAAC,CAAA;IACtF,OAAO,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,YAAY,CAAyB,wBAAwB,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IAC3D,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC1D,OAAO,eAAe,CAAC,QAAQ,CAAA;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACxC,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,EAAE,CAAA;IACvD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,iBAAiB,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAA;IACvD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,iBAAiB,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,mBAAmB,CAAkB,WAAW,CAAC,CAAA;AAC1D,CAAC"}

package/dist/esm/conditionKeys.d.ts

@@ -0,0 +1,30 @@
+export interface ConditionKey {
+    key: string;
+    description: string;
+    type: string;
+}
+/**
+ * Reads the condition keys for a service
+ *
+ * @param serviceKey the service key to read the condition keys for, is case insensitive
+ * @returns the condition keys for the service
+ */
+export declare function iamConditionKeysForService(serviceKey: string): Promise<string[]>;
+/**
+ * Check if a condition key exists
+ *
+ * @param serviceKey the service key to check for the condition key, is case insensitive
+ * @param conditionKey the condition key to check for, is case insensitive
+ * @returns true if the condition key exists, false otherwise
+ */
+export declare function iamConditionKeyExists(serviceKey: string, conditionKey: string): Promise<boolean>;
+/**
+ * Get the details for a condition key
+ *
+ * @param serviceKey the service key to get the condition key for, is case insensitive
+ * @param conditionKey the condition key to get the details for, is case insensitive
+ * @throws error if the service or condition key does not exist
+ * @returns the details for the condition key
+ */
+export declare function iamConditionKeyDetails(serviceKey: string, conditionKey: string): Promise<ConditionKey>;
+//# sourceMappingURL=conditionKeys.d.ts.map

package/dist/esm/conditionKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionKeys.d.ts","sourceRoot":"","sources":["../../src/conditionKeys.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGtF;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,CAAC,CAOvB"}

package/dist/esm/conditionKeys.js

@@ -0,0 +1,39 @@
+import { readConditionKeys } from './data.js';
+/**
+ * Reads the condition keys for a service
+ *
+ * @param serviceKey the service key to read the condition keys for, is case insensitive
+ * @returns the condition keys for the service
+ */
+export async function iamConditionKeysForService(serviceKey) {
+    const data = await readConditionKeys(serviceKey.toLowerCase());
+    return Object.values(data).map((conditionKey) => conditionKey.key);
+}
+/**
+ * Check if a condition key exists
+ *
+ * @param serviceKey the service key to check for the condition key, is case insensitive
+ * @param conditionKey the condition key to check for, is case insensitive
+ * @returns true if the condition key exists, false otherwise
+ */
+export async function iamConditionKeyExists(serviceKey, conditionKey) {
+    const data = await readConditionKeys(serviceKey.toLowerCase());
+    return !!data[conditionKey.toLowerCase()];
+}
+/**
+ * Get the details for a condition key
+ *
+ * @param serviceKey the service key to get the condition key for, is case insensitive
+ * @param conditionKey the condition key to get the details for, is case insensitive
+ * @throws error if the service or condition key does not exist
+ * @returns the details for the condition key
+ */
+export async function iamConditionKeyDetails(serviceKey, conditionKey) {
+    const data = await readConditionKeys(serviceKey.toLowerCase());
+    const conditionKeyData = data[conditionKey.toLowerCase()];
+    if (!conditionKeyData) {
+        throw new Error(`Condition key ${conditionKey} does not exist for service ${serviceKey}`);
+    }
+    return conditionKeyData;
+}
+//# sourceMappingURL=conditionKeys.js.map

package/dist/esm/conditionKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionKeys.js","sourceRoot":"","sources":["../../src/conditionKeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAQ7C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,UAAkB;IACjE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAA+B,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAA+B,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAA+B,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5F,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,+BAA+B,UAAU,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,gBAAgB,CAAA;AACzB,CAAC"}

package/dist/esm/data.d.ts

@@ -0,0 +1,42 @@
+export declare function readDataFile<T>(...pathParts: string[]): Promise<T>;
+/**
+ * Read the action data for a service
+ *
+ * @param serviceKey the service key to read the action data for
+ * @returns the action data for the service
+ */
+export declare function readActionData<T>(serviceKey: string): Promise<T>;
+/**
+ * Read the condition key data for a service
+ *
+ * @param serviceKey the service key to read the condition key data for
+ * @returns the condition key data
+ */
+export declare function readConditionKeys<T>(serviceKey: string): Promise<T>;
+/**
+ * Read the resource type data for a service
+ *
+ * @param serviceKey the service key to read the resource type data for
+ * @returns the resource type data
+ */
+export declare function readResourceTypes<T>(serviceKey: string): Promise<T>;
+/**
+ * Read the category details data for a category
+ *
+ * @param categoryKey the category key to read details for
+ * @returns the category details data
+ */
+export declare function readCategoryDetails<T>(categoryKey: string): Promise<T>;
+/**
+ * Read the condition patterns data
+ *
+ * @returns the condition patterns data
+ */
+export declare function readConditionPatterns(): Promise<Record<string, Record<string, string>>>;
+/**
+ * Read the unassociated conditions data
+ *
+ * @returns the unassociated conditions data
+ */
+export declare function readUnassociatedConditions(): Promise<Record<string, string[]>>;
+//# sourceMappingURL=data.d.ts.map

package/dist/esm/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/data.ts"],"names":[],"mappings":"AAKA,wBAAsB,YAAY,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CA0BxE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5E;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAE7F;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAEpF"}

package/dist/esm/data.js

@@ -0,0 +1,80 @@
+import { readRelativeFile } from './readRelativeFile.js';
+const dataCache = {};
+const requestCache = {};
+export async function readDataFile(...pathParts) {
+    pathParts.unshift('data');
+    const file = pathParts.join('/');
+    // If the data is already cached, return it immediately.
+    if (dataCache[file]) {
+        return dataCache[file];
+    }
+    // If there's an ongoing request, return the existing Promise.
+    if (requestCache[file] !== undefined) {
+        return requestCache[file];
+    }
+    // Create a new Promise and store it in dataQueues synchronously.
+    requestCache[file] = (async () => {
+        try {
+            const data = await readRelativeFile(pathParts);
+            dataCache[file] = data; // Cache the fetched data.
+            return data;
+        }
+        finally {
+            delete requestCache[file]; // Clean up the queue regardless of success or failure.
+        }
+    })();
+    return requestCache[file];
+}
+/**
+ * Read the action data for a service
+ *
+ * @param serviceKey the service key to read the action data for
+ * @returns the action data for the service
+ */
+export async function readActionData(serviceKey) {
+    return readDataFile('actions', `${serviceKey}.json`);
+}
+/**
+ * Read the condition key data for a service
+ *
+ * @param serviceKey the service key to read the condition key data for
+ * @returns the condition key data
+ */
+export async function readConditionKeys(serviceKey) {
+    return readDataFile('conditionKeys', `${serviceKey}.json`);
+}
+/**
+ * Read the resource type data for a service
+ *
+ * @param serviceKey the service key to read the resource type data for
+ * @returns the resource type data
+ */
+export async function readResourceTypes(serviceKey) {
+    return readDataFile('resourceTypes', `${serviceKey}.json`);
+}
+/**
+ * Read the category details data for a category
+ *
+ * @param categoryKey the category key to read details for
+ * @returns the category details data
+ */
+export async function readCategoryDetails(categoryKey) {
+    return readDataFile('categories', `${categoryKey}.json`);
+}
+/**
+ * Read the condition patterns data
+ *
+ * @returns the condition patterns data
+ */
+export async function readConditionPatterns() {
+    return readDataFile('conditionPatterns.json');
+}
+/**
+ * Read the unassociated conditions data
+ *
+ * @returns the unassociated conditions data
+ */
+export async function readUnassociatedConditions() {
+    return readDataFile('unassociatedConditions.json');
+}
+//# sourceMappingURL=data.js.map

package/dist/esm/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,MAAM,SAAS,GAAwB,EAAE,CAAA;AACzC,MAAM,YAAY,GAAiC,EAAE,CAAA;AAErD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,GAAG,SAAmB;IAC1D,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACzB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEhC,wDAAwD;IACxD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAED,8DAA8D;IAC9D,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,iEAAiE;IACjE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAC9C,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA,CAAC,0BAA0B;YACjD,OAAO,IAAI,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA,CAAC,uDAAuD;QACnF,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IAEJ,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,UAAkB;IACxD,OAAO,YAAY,CAAI,SAAS,EAAE,GAAG,UAAU,OAAO,CAAC,CAAA;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,UAAkB;IAC3D,OAAO,YAAY,CAAI,eAAe,EAAE,GAAG,UAAU,OAAO,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,UAAkB;IAC3D,OAAO,YAAY,CAAI,eAAe,EAAE,GAAG,UAAU,OAAO,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAI,WAAmB;IAC9D,OAAO,YAAY,CAAI,YAAY,EAAE,GAAG,WAAW,OAAO,CAAC,CAAA;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,OAAO,YAAY,CAAyC,wBAAwB,CAAC,CAAA;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,OAAO,YAAY,CAA2B,6BAA6B,CAAC,CAAA;AAC9E,CAAC"}

package/dist/esm/findConditionKey.d.ts

@@ -0,0 +1,12 @@
+import { type ConditionKey } from './conditionKeys.js';
+/**
+ * Find the details for a condition key if it exists. This will check both global condition
+ * keys and service specific condition keys. If @param conditionKey matches a condition key that
+ * contains a variable it will return the matching condition key.
+ *
+ * If no match can be found, it will return undefined.
+ *
+ * @param conditionKey the condition key to find, is case insensitive
+ */
+export declare function findConditionKey(conditionKey: string): Promise<ConditionKey | undefined>;
+//# sourceMappingURL=findConditionKey.d.ts.map

package/dist/esm/findConditionKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findConditionKey.d.ts","sourceRoot":"","sources":["../../src/findConditionKey.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EAGlB,MAAM,oBAAoB,CAAA;AA2B3B;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAkE9F"}

package/dist/esm/findConditionKey.js

@@ -0,0 +1,86 @@
+import { iamConditionKeyDetails, iamConditionKeyExists } from './conditionKeys.js';
+import { readConditionPatterns, readUnassociatedConditions } from './data.js';
+import { getGlobalConditionKeyByName, getGlobalConditionKeyByPrefix } from './globalConditionKeys.js';
+import { iamServiceExists } from './services.js';
+/**
+ * Get the service prefixes to search for a condition key
+ *
+ * @param servicePrefix the original service prefix from the condition key
+ * @returns an array of service prefixes to search
+ */
+async function getServicePrefixes(servicePrefix) {
+    // Check if the service exists
+    const serviceExists = await iamServiceExists(servicePrefix);
+    if (serviceExists) {
+        return [servicePrefix];
+    }
+    // Service doesn't exist, check unassociated conditions
+    const unassociatedConditions = await readUnassociatedConditions();
+    return unassociatedConditions[servicePrefix] || [];
+}
+/**
+ * Find the details for a condition key if it exists. This will check both global condition
+ * keys and service specific condition keys. If @param conditionKey matches a condition key that
+ * contains a variable it will return the matching condition key.
+ *
+ * If no match can be found, it will return undefined.
+ *
+ * @param conditionKey the condition key to find, is case insensitive
+ */
+export async function findConditionKey(conditionKey) {
+    const normalizedConditionKey = conditionKey.toLowerCase();
+    // If it starts with 'aws', check global condition keys
+    if (normalizedConditionKey.startsWith('aws:')) {
+        // First check for exact match in global condition keys
+        const exactGlobalMatch = getGlobalConditionKeyByName(normalizedConditionKey);
+        if (exactGlobalMatch) {
+            return exactGlobalMatch;
+        }
+        // Then check global condition keys with variables (like aws:PrincipalTag/tag-key)
+        const slashIndex = normalizedConditionKey.indexOf('/');
+        if (slashIndex !== -1) {
+            const prefix = normalizedConditionKey.substring(0, slashIndex);
+            const variableGlobalMatch = getGlobalConditionKeyByPrefix(prefix);
+            if (variableGlobalMatch && conditionKey.length > prefix.length + 1) {
+                return variableGlobalMatch;
+            }
+        }
+        return undefined;
+    }
+    // If it doesn't start with 'aws', extract the service prefix
+    const colonIndex = normalizedConditionKey.indexOf(':');
+    if (colonIndex === -1) {
+        return undefined; // No service prefix found
+    }
+    const servicePrefix = normalizedConditionKey.substring(0, colonIndex);
+    // Get all service prefixes to search
+    const servicesToSearch = await getServicePrefixes(servicePrefix);
+    if (servicesToSearch.length === 0) {
+        return undefined; // No services found for this condition prefix
+    }
+    // Check each service for the condition key
+    for (const service of servicesToSearch) {
+        // Check for exact match in service condition keys
+        const hasConditionKey = await iamConditionKeyExists(service, normalizedConditionKey);
+        if (hasConditionKey) {
+            return await iamConditionKeyDetails(service, normalizedConditionKey);
+        }
+    }
+    // Last resort: check condition patterns
+    const conditionPatterns = await readConditionPatterns();
+    const servicePatterns = conditionPatterns[servicePrefix];
+    if (servicePatterns) {
+        for (const [patternStr, templateKey] of Object.entries(servicePatterns)) {
+            const regex = new RegExp(`^${patternStr}$`, 'i');
+            if (regex.test(normalizedConditionKey)) {
+                // Found a pattern match, try to get the template condition key
+                const hasTemplateKey = await iamConditionKeyExists(servicePrefix, templateKey);
+                if (hasTemplateKey) {
+                    return await iamConditionKeyDetails(servicePrefix, templateKey);
+                }
+            }
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=findConditionKey.js.map

package/dist/esm/findConditionKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findConditionKey.js","sourceRoot":"","sources":["../../src/findConditionKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC9B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEhD;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,aAAqB;IACrD,8BAA8B;IAC9B,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAA;IAE3D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,aAAa,CAAC,CAAA;IACxB,CAAC;IAED,uDAAuD;IACvD,MAAM,sBAAsB,GAAG,MAAM,0BAA0B,EAAE,CAAA;IACjE,OAAO,sBAAsB,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IACzD,MAAM,sBAAsB,GAAG,YAAY,CAAC,WAAW,EAAE,CAAA;IAEzD,uDAAuD;IACvD,IAAI,sBAAsB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAA;QAC5E,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAA;QACzB,CAAC;QAED,kFAAkF;QAClF,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACtD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;YAC9D,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;YACjE,IAAI,mBAAmB,IAAI,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnE,OAAO,mBAAmB,CAAA;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAA,CAAC,0BAA0B;IAC7C,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IAErE,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAA;IAEhE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAA,CAAC,8CAA8C;IACjE,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,kDAAkD;QAClD,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAA;QACpF,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,MAAM,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,EAAE,CAAA;IACvD,MAAM,eAAe,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAExD,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,GAAG,EAAE,GAAG,CAAC,CAAA;YAChD,IAAI,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACvC,+DAA+D;gBAC/D,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;gBAC9E,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,MAAM,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/esm/globalConditionKeys.d.ts

@@ -0,0 +1,26 @@
+import { type ConditionKey } from './conditionKeys.js';
+export interface GlobalConditionKey extends ConditionKey {
+    category: string;
+}
+export declare const globalConditionKeys: GlobalConditionKey[];
+/**
+ * Get a global condition key by its name.
+ *
+ * @param name The name of the global condition key.
+ * @returns The global condition key, or undefined if not found.
+ */
+export declare function getGlobalConditionKeyByName(name: string): GlobalConditionKey | undefined;
+/**
+ * Get global condition keys by their prefix.
+ *
+ * @param prefix The prefix to filter global condition keys.
+ * @returns An array of global condition keys that match the prefix.
+ */
+export declare function getGlobalConditionKeyByPrefix(prefix: string): GlobalConditionKey | undefined;
+/**
+ * Get all global condition keys.
+ *
+ * @returns An array of all global condition keys.
+ */
+export declare function getAllGlobalConditionKeys(): string[];
+//# sourceMappingURL=globalConditionKeys.d.ts.map

package/dist/esm/globalConditionKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"globalConditionKeys.d.ts","sourceRoot":"","sources":["../../src/globalConditionKeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,eAAO,MAAM,mBAAmB,EAAE,kBAAkB,EAmWnD,CAAA;AAuBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExF;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAEpD"}