@aws-amplify/cli-internal-gen2-migration-experimental-alpha 0.5.0 → 0.7.0

package/lib/commands/gen2-migration/lock.js

@@ -1,92 +1,210 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AmplifyMigrationLockStep = void 0;
-const _step_1 = require("./_step");
-const amplify_prompts_1 = require("@aws-amplify/amplify-prompts");
-const amplify_cli_core_1 = require("@aws-amplify/amplify-cli-core");
+const step_1 = require("./_infra/step");
+const plan_1 = require("./_infra/plan");
 const client_cloudformation_1 = require("@aws-sdk/client-cloudformation");
 const client_amplify_1 = require("@aws-sdk/client-amplify");
 const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
-const client_appsync_1 = require("@aws-sdk/client-appsync");
-const _validations_1 = require("./_validations");
-class AmplifyMigrationLockStep extends _step_1.AmplifyMigrationStep {
-    implications() {
-        return ['Enable deletion protection on DynamoDB tables storing your model data', 'Lock the environment from future updates'];
-    }
-    async validate() {
-        const validations = new _validations_1.AmplifyGen2MigrationValidations(this.logger, this.rootStackName, this.currentEnvName, this.context);
-        await validations.validateDeploymentStatus();
-        await validations.validateDrift();
-    }
-    async execute() {
-        const amplifyClient = new client_amplify_1.AmplifyClient();
-        await amplifyClient.send(new client_amplify_1.UpdateAppCommand({
-            appId: this.appId,
-            environmentVariables: {
-                GEN2_MIGRATION_ENVIRONMENT_NAME: this.currentEnvName,
+const GEN2_MIGRATION_ENVIRONMENT_NAME = 'GEN2_MIGRATION_ENVIRONMENT_NAME';
+const LOCK_STATEMENT = {
+    Effect: 'Deny',
+    Action: 'Update:*',
+    Principal: '*',
+    Resource: '*',
+};
+const isLockStatement = (statement) => statement.Effect === LOCK_STATEMENT.Effect &&
+    statement.Action === LOCK_STATEMENT.Action &&
+    statement.Principal === LOCK_STATEMENT.Principal &&
+    statement.Resource === LOCK_STATEMENT.Resource;
+const ALLOW_ALL_POLICY = {
+    Statement: [
+        {
+            Effect: 'Allow',
+            Action: 'Update:*',
+            Principal: '*',
+            Resource: '*',
+        },
+    ],
+};
+class AmplifyMigrationLockStep extends step_1.AmplifyMigrationStep {
+    async forward() {
+        const operations = [];
+        operations.push({
+            describe: async () => [],
+            validate: () => ({ description: 'Environment Status', run: () => this.validateDeploymentStatus() }),
+            execute: async () => { },
+        });
+        operations.push({
+            describe: async () => [],
+            validate: () => ({ description: 'Drift', run: () => this.validateDrift() }),
+            execute: async () => { },
+        });
+        for (const tableName of await this.dynamoTableNames()) {
+            operations.push({
+                validate: () => undefined,
+                describe: async () => [`Enable deletion protection for table '${tableName}'`],
+                execute: async () => {
+                    await this.gen1App.clients.dynamoDB.send(new client_dynamodb_1.UpdateTableCommand({
+                        TableName: tableName,
+                        DeletionProtectionEnabled: true,
+                    }));
+                    this.logger.info(`Enabled deletion protection for table '${tableName}'`);
+                },
+            });
+        }
+        operations.push({
+            validate: () => undefined,
+            describe: async () => [`Add environment variable '${GEN2_MIGRATION_ENVIRONMENT_NAME}' (value: ${this.gen1App.envName})`],
+            execute: async () => {
+                var _a;
+                const app = await this.gen1App.clients.amplify.send(new client_amplify_1.GetAppCommand({ appId: this.gen1App.appId }));
+                const environmentVariables = { ...((_a = app.app.environmentVariables) !== null && _a !== void 0 ? _a : {}), [GEN2_MIGRATION_ENVIRONMENT_NAME]: this.gen1App.envName };
+                await this.gen1App.clients.amplify.send(new client_amplify_1.UpdateAppCommand({ appId: this.gen1App.appId, environmentVariables }));
+                this.logger.info(`Added '${GEN2_MIGRATION_ENVIRONMENT_NAME}' environment variable (value: ${this.gen1App.envName})`);
             },
-        }));
-        this.logger.info(`Environment '${this.currentEnvName}' has been marked for migration`);
-        const graphQLApiId = await this.fetchGraphQLApiId();
-        if (graphQLApiId) {
-            const dynamoClient = new client_dynamodb_1.DynamoDBClient();
-            for (const tableName of await this.fetchGraphQLModelTables(graphQLApiId)) {
-                await dynamoClient.send(new client_dynamodb_1.UpdateTableCommand({
-                    TableName: tableName,
-                    DeletionProtectionEnabled: true,
+        });
+        operations.push({
+            validate: () => undefined,
+            describe: async () => {
+                return [`Add lock statement to stack policy on '${this.gen1App.rootStackName}': ${JSON.stringify(LOCK_STATEMENT)}`];
+            },
+            execute: async () => {
+                const existingPolicy = await this.getExistingStackPolicy();
+                const alreadyLocked = existingPolicy.Statement.some(isLockStatement);
+                if (alreadyLocked) {
+                    this.logger.info(`Lock statement already exists in stack policy on '${this.gen1App.rootStackName}', skipping`);
+                    return;
+                }
+                existingPolicy.Statement.push(LOCK_STATEMENT);
+                const mergedPolicy = JSON.stringify(existingPolicy);
+                await this.gen1App.clients.cloudFormation.send(new client_cloudformation_1.SetStackPolicyCommand({
+                    StackName: this.gen1App.rootStackName,
+                    StackPolicyBody: mergedPolicy,
                 }));
-                this.logger.info(`Enabled deletion protection on table '${tableName}'`);
-            }
-        }
-        const stackPolicy = {
-            Statement: [
-                {
-                    Effect: 'Deny',
-                    Action: 'Update:*',
-                    Principal: '*',
-                    Resource: '*',
-                },
+                this.logger.info(`Successfully added lock statement to stack policy on '${this.gen1App.rootStackName}'`);
+            },
+        });
+        return new plan_1.Plan({
+            operations,
+            logger: this.logger,
+            title: 'Execute',
+            implications: [
+                `You will not be able to run 'amplify push' on environment '${this.gen1App.envName}'`,
+                `You will not be able to migrate another environment until migration of '${this.gen1App.envName}' is complete or rolled back`,
             ],
-        };
-        const cfnClient = new client_cloudformation_1.CloudFormationClient({});
-        await cfnClient.send(new client_cloudformation_1.SetStackPolicyCommand({
-            StackName: this.rootStackName,
-            StackPolicyBody: JSON.stringify(stackPolicy),
-        }));
-        this.logger.info(`Root stack '${this.rootStackName}' has been locked`);
+        });
     }
     async rollback() {
-        amplify_prompts_1.printer.warn('Not implemented');
-    }
-    async fetchGraphQLApiId() {
-        var _a;
-        const apis = [];
-        const appSyncClient = new client_appsync_1.AppSyncClient();
-        for await (const page of (0, client_appsync_1.paginateListGraphqlApis)({ client: appSyncClient }, {})) {
-            for (const api of (_a = page.graphqlApis) !== null && _a !== void 0 ? _a : []) {
-                if (api.name === `${this.appName}-${this.currentEnvName}`) {
-                    apis.push(api.apiId);
+        const operations = [];
+        for (const tableName of await this.dynamoTableNames()) {
+            operations.push({
+                validate: () => undefined,
+                describe: async () => [`Preserve deletion protection for table '${tableName}'`],
+                execute: async () => { },
+            });
+        }
+        operations.push({
+            validate: () => undefined,
+            describe: async () => [`Remove environment variable '${GEN2_MIGRATION_ENVIRONMENT_NAME}'`],
+            execute: async () => {
+                var _a;
+                const app = await this.gen1App.clients.amplify.send(new client_amplify_1.GetAppCommand({ appId: this.gen1App.appId }));
+                const environmentVariables = (_a = app.app.environmentVariables) !== null && _a !== void 0 ? _a : {};
+                delete environmentVariables[GEN2_MIGRATION_ENVIRONMENT_NAME];
+                await this.gen1App.clients.amplify.send(new client_amplify_1.UpdateAppCommand({ appId: this.gen1App.appId, environmentVariables }));
+                this.logger.info(`Removed ${GEN2_MIGRATION_ENVIRONMENT_NAME} environment variable`);
+            },
+        });
+        operations.push({
+            validate: () => undefined,
+            describe: async () => {
+                return [`Remove lock statement from stack policy on '${this.gen1App.rootStackName}': ${JSON.stringify(LOCK_STATEMENT)}`];
+            },
+            execute: async () => {
+                const existingPolicy = await this.getExistingStackPolicy();
+                const index = existingPolicy.Statement.findIndex(isLockStatement);
+                if (index === -1) {
+                    this.logger.info(`Lock statement not found in stack policy on '${this.gen1App.rootStackName}'`);
+                    return;
                 }
-            }
+                existingPolicy.Statement.splice(index, 1);
+                const restoredPolicy = existingPolicy.Statement.length > 0 ? JSON.stringify(existingPolicy) : JSON.stringify(ALLOW_ALL_POLICY);
+                await this.gen1App.clients.cloudFormation.send(new client_cloudformation_1.SetStackPolicyCommand({
+                    StackName: this.gen1App.rootStackName,
+                    StackPolicyBody: restoredPolicy,
+                }));
+                this.logger.info(`Successfully removed lock statement from stack policy on '${this.gen1App.rootStackName}': ${JSON.stringify(LOCK_STATEMENT)}`);
+            },
+        });
+        return new plan_1.Plan({
+            operations,
+            logger: this.logger,
+            title: 'Rollback',
+            implications: [
+                `You will be able to run 'amplify push' on environment '${this.gen1App.envName}'`,
+                `You will be able to start migration of another environment`,
+            ],
+        });
+    }
+    async validateDeploymentStatus() {
+        try {
+            await this.validations.validateDeploymentStatus();
+            return { valid: true };
         }
-        if (apis.length > 1) {
-            throw new amplify_cli_core_1.AmplifyError('MigrationError', { message: 'Unexpected count of GraphQL APIs' });
+        catch (e) {
+            return { valid: false, report: e.message };
         }
-        return apis[0];
+    }
+    async validateDrift() {
+        try {
+            await this.validations.validateDrift();
+            return { valid: true };
+        }
+        catch (e) {
+            return { valid: false, report: e.message };
+        }
+    }
+    async findGraphQLApiId() {
+        const graphQL = this.gen1App.discover().find((r) => r.category === 'api' && r.service === 'AppSync');
+        if (!graphQL) {
+            return undefined;
+        }
+        return this.gen1App.metaOutput(graphQL.category, graphQL.resourceName, 'GraphQLAPIIdOutput');
     }
     async fetchGraphQLModelTables(graphQLApiId) {
         var _a;
         const tables = [];
-        const dynamoClient = new client_dynamodb_1.DynamoDBClient();
-        for await (const page of (0, client_dynamodb_1.paginateListTables)({ client: dynamoClient }, {})) {
+        for await (const page of (0, client_dynamodb_1.paginateListTables)({ client: this.gen1App.clients.dynamoDB }, {})) {
             for (const tableName of (_a = page.TableNames) !== null && _a !== void 0 ? _a : []) {
-                if (tableName.includes(`-${graphQLApiId}-${this.currentEnvName}`)) {
+                if (tableName.includes(`-${graphQLApiId}-${this.gen1App.envName}`)) {
                     tables.push(tableName);
                 }
             }
         }
         return tables;
     }
+    async dynamoTableNames() {
+        if (!this._dynamoTableNames) {
+            const graphQLApiId = await this.findGraphQLApiId();
+            if (!graphQLApiId) {
+                this._dynamoTableNames = [];
+            }
+            else {
+                this._dynamoTableNames = await this.fetchGraphQLModelTables(graphQLApiId);
+            }
+        }
+        return this._dynamoTableNames;
+    }
+    async getExistingStackPolicy() {
+        const response = await this.gen1App.clients.cloudFormation.send(new client_cloudformation_1.GetStackPolicyCommand({
+            StackName: this.gen1App.rootStackName,
+        }));
+        if (response.StackPolicyBody) {
+            return JSON.parse(response.StackPolicyBody);
+        }
+        return { Statement: [] };
+    }
 }
 exports.AmplifyMigrationLockStep = AmplifyMigrationLockStep;
 //# sourceMappingURL=lock.js.map

package/lib/commands/gen2-migration/lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../src/commands/gen2-migration/lock.ts"],"names":[],"mappings":";;;AAAA,mCAA+C;AAC/C,kEAAuD;AACvD,oEAA2E;AAC3E,0EAA6F;AAC7F,4DAA0E;AAC1E,8DAAkG;AAClG,4DAAiF;AACjF,iDAAiE;AAEjE,MAAa,wBAAyB,SAAQ,4BAAoB;IACzD,YAAY;QACjB,OAAO,CAAC,uEAAuE,EAAE,0CAA0C,CAAC,CAAC;IAC/H,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,WAAW,GAAG,IAAI,8CAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5H,MAAM,WAAW,CAAC,wBAAwB,EAAE,CAAC;QAC7C,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,MAAM,aAAa,GAAG,IAAI,8BAAa,EAAE,CAAC;QAE1C,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,iCAAgB,CAAC;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE;gBACpB,+BAA+B,EAAE,IAAI,CAAC,cAAc;aACrD;SACF,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,iCAAiC,CAAC,CAAC;QAEvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEpD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC1C,KAAK,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzE,MAAM,YAAY,CAAC,IAAI,CACrB,IAAI,oCAAkB,CAAC;oBACrB,SAAS,EAAE,SAAS;oBACpB,yBAAyB,EAAE,IAAI;iBAChC,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,SAAS,GAAG,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,GAAG;oBACd,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,4CAAoB,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,6CAAqB,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAC7C,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa,mBAAmB,CAAC,CAAC;IACzE,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,yBAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,iBAAiB;;QAC7B,MAAM,IAAI,GAAG,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,IAAI,8BAAa,EAAE,CAAC;QAC1C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAA,wCAAuB,EAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAChF,KAAK,MAAM,GAAG,IAAI,MAAA,IAAI,CAAC,WAAW,mCAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,+BAAY,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,YAAoB;;QACxD,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAI,gCAAc,EAAE,CAAC;QAC1C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAA,oCAAkB,EAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1E,KAAK,MAAM,SAAS,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,YAAY,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;oBAClE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA9FD,4DA8FC"}
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../src/commands/gen2-migration/lock.ts"],"names":[],"mappings":";;;AAAA,wCAAqD;AAErD,wCAAqC;AAErC,0EAA8F;AAC9F,4DAA0E;AAC1E,8DAAkF;AAGlF,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AAE1E,MAAM,cAAc,GAAG;IACrB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,SAAiC,EAAW,EAAE,CACrE,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;IAC1C,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;IAC1C,SAAS,CAAC,SAAS,KAAK,cAAc,CAAC,SAAS;IAChD,SAAS,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,CAAC;AAEjD,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE;QACT;YACE,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;SACd;KACF;CACF,CAAC;AAEF,MAAa,wBAAyB,SAAQ,2BAAoB;IAGzD,KAAK,CAAC,OAAO;QAClB,MAAM,UAAU,GAAgC,EAAE,CAAC;QAEnD,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YAEnG,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACxB,CAAC,CAAC;QAEH,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAE3E,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACxB,CAAC,CAAC;QAEH,KAAK,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACtD,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;gBACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,yCAAyC,SAAS,GAAG,CAAC;gBAC7E,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CACtC,IAAI,oCAAkB,CAAC;wBACrB,SAAS,EAAE,SAAS;wBACpB,yBAAyB,EAAE,IAAI;qBAChC,CAAC,CACH,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,SAAS,GAAG,CAAC,CAAC;gBAC3E,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,6BAA6B,+BAA+B,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC;YACxH,OAAO,EAAE,KAAK,IAAI,EAAE;;gBAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,8BAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACtG,MAAM,oBAAoB,GAAG,EAAE,GAAG,CAAC,MAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,mCAAI,EAAE,CAAC,EAAE,CAAC,+BAA+B,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClI,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iCAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBACnH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,+BAA+B,kCAAkC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;YACvH,CAAC;SACF,CAAC,CAAC;QAEH,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,OAAO,CAAC,0CAA0C,IAAI,CAAC,OAAO,CAAC,aAAa,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACtH,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC3D,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACrE,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,OAAO,CAAC,aAAa,aAAa,CAAC,CAAC;oBAC/G,OAAO;gBACT,CAAC;gBACD,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAC5C,IAAI,6CAAqB,CAAC;oBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;oBACrC,eAAe,EAAE,YAAY;iBAC9B,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yDAAyD,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC;YAC3G,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,WAAI,CAAC;YACd,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE;gBACZ,8DAA8D,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG;gBACrF,2EAA2E,IAAI,CAAC,OAAO,CAAC,OAAO,8BAA8B;aAC9H;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,MAAM,UAAU,GAAgC,EAAE,CAAC;QAEnD,KAAK,MAAM,SAAS,IAAI,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACtD,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;gBACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,2CAA2C,SAAS,GAAG,CAAC;gBAE/E,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,gCAAgC,+BAA+B,GAAG,CAAC;YAC1F,OAAO,EAAE,KAAK,IAAI,EAAE;;gBAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,8BAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACtG,MAAM,oBAAoB,GAAG,MAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,mCAAI,EAAE,CAAC;gBAChE,OAAO,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;gBAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iCAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBACnH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,+BAA+B,uBAAuB,CAAC,CAAC;YACtF,CAAC;SACF,CAAC,CAAC;QAEH,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,OAAO,CAAC,+CAA+C,IAAI,CAAC,OAAO,CAAC,aAAa,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;gBAClE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC;oBAChG,OAAO;gBACT,CAAC;gBACD,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC1C,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBAC/H,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAC5C,IAAI,6CAAqB,CAAC;oBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;oBACrC,eAAe,EAAE,cAAc;iBAChC,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,IAAI,CAAC,OAAO,CAAC,aAAa,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAC9H,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,WAAI,CAAC;YACd,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE;gBACZ,0DAA0D,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG;gBACjF,4DAA4D;aAC7D;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,wBAAwB;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,EAAE,CAAC;YAEb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC/F,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,YAAoB;;QACxD,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAA,oCAAkB,EAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3F,KAAK,MAAM,SAAS,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBACnE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAElB,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAC7D,IAAI,6CAAqB,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;SACtC,CAAC,CACH,CAAC;QACF,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAA4C,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AA9MD,4DA8MC"}

package/lib/commands/gen2-migration/refactor/analytics/analytics-forward.d.ts

@@ -0,0 +1,9 @@
+import { ForwardCategoryRefactorer } from '../workflow/forward-category-refactorer';
+export declare const KINESIS_STREAM_TYPE = "AWS::Kinesis::Stream";
+export declare const ANALYTICS_RESOURCE_TYPES: string[];
+export declare class AnalyticsKinesisForwardRefactorer extends ForwardCategoryRefactorer {
+    protected fetchSourceStackId(): Promise<string | undefined>;
+    protected fetchDestStackId(): Promise<string | undefined>;
+    protected resourceTypes(): string[];
+}
+//# sourceMappingURL=analytics-forward.d.ts.map

package/lib/commands/gen2-migration/refactor/analytics/analytics-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-forward.d.ts","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/analytics/analytics-forward.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,eAAO,MAAM,wBAAwB,UAAwB,CAAC;AAO9D,qBAAa,iCAAkC,SAAQ,yBAAyB;cAC9D,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAIjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI/D,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;CAGpC"}

package/lib/commands/gen2-migration/refactor/analytics/analytics-forward.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsKinesisForwardRefactorer = exports.ANALYTICS_RESOURCE_TYPES = exports.KINESIS_STREAM_TYPE = void 0;
+const forward_category_refactorer_1 = require("../workflow/forward-category-refactorer");
+exports.KINESIS_STREAM_TYPE = 'AWS::Kinesis::Stream';
+exports.ANALYTICS_RESOURCE_TYPES = [exports.KINESIS_STREAM_TYPE];
+class AnalyticsKinesisForwardRefactorer extends forward_category_refactorer_1.ForwardCategoryRefactorer {
+    async fetchSourceStackId() {
+        return this.findNestedStack(this.gen1Env, 'analytics');
+    }
+    async fetchDestStackId() {
+        return this.findNestedStack(this.gen2Branch, 'analytics');
+    }
+    resourceTypes() {
+        return exports.ANALYTICS_RESOURCE_TYPES;
+    }
+}
+exports.AnalyticsKinesisForwardRefactorer = AnalyticsKinesisForwardRefactorer;
+//# sourceMappingURL=analytics-forward.js.map

package/lib/commands/gen2-migration/refactor/analytics/analytics-forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-forward.js","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/analytics/analytics-forward.ts"],"names":[],"mappings":";;;AAAA,yFAAoF;AAEvE,QAAA,mBAAmB,GAAG,sBAAsB,CAAC;AAE7C,QAAA,wBAAwB,GAAG,CAAC,2BAAmB,CAAC,CAAC;AAO9D,MAAa,iCAAkC,SAAQ,uDAAyB;IACpE,KAAK,CAAC,kBAAkB;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAES,KAAK,CAAC,gBAAgB;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IAES,aAAa;QACrB,OAAO,gCAAwB,CAAC;IAClC,CAAC;CACF;AAZD,8EAYC"}

package/lib/commands/gen2-migration/refactor/analytics/analytics-rollback.d.ts

@@ -0,0 +1,9 @@
+import { CFNResource } from '../../_infra/cfn-template';
+import { RollbackCategoryRefactorer } from '../workflow/rollback-category-refactorer';
+export declare class AnalyticsKinesisRollbackRefactorer extends RollbackCategoryRefactorer {
+    protected fetchSourceStackId(): Promise<string | undefined>;
+    protected fetchDestStackId(): Promise<string | undefined>;
+    protected resourceTypes(): string[];
+    protected targetLogicalId(sourceId: string, sourceResource: CFNResource): string | undefined;
+}
+//# sourceMappingURL=analytics-rollback.d.ts.map

package/lib/commands/gen2-migration/refactor/analytics/analytics-rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-rollback.d.ts","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/analytics/analytics-rollback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAQtF,qBAAa,kCAAmC,SAAQ,0BAA0B;cAChE,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAIjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI/D,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;IAInC,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;CAQ7F"}

package/lib/commands/gen2-migration/refactor/analytics/analytics-rollback.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnalyticsKinesisRollbackRefactorer = void 0;
+const rollback_category_refactorer_1 = require("../workflow/rollback-category-refactorer");
+const analytics_forward_1 = require("./analytics-forward");
+class AnalyticsKinesisRollbackRefactorer extends rollback_category_refactorer_1.RollbackCategoryRefactorer {
+    async fetchSourceStackId() {
+        return this.findNestedStack(this.gen2Branch, 'analytics');
+    }
+    async fetchDestStackId() {
+        return this.findNestedStack(this.gen1Env, 'analytics');
+    }
+    resourceTypes() {
+        return analytics_forward_1.ANALYTICS_RESOURCE_TYPES;
+    }
+    targetLogicalId(sourceId, sourceResource) {
+        switch (sourceResource.Type) {
+            case analytics_forward_1.KINESIS_STREAM_TYPE:
+                return 'KinesisStream';
+            default:
+                return undefined;
+        }
+    }
+}
+exports.AnalyticsKinesisRollbackRefactorer = AnalyticsKinesisRollbackRefactorer;
+//# sourceMappingURL=analytics-rollback.js.map

package/lib/commands/gen2-migration/refactor/analytics/analytics-rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-rollback.js","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/analytics/analytics-rollback.ts"],"names":[],"mappings":";;;AACA,2FAAsF;AACtF,2DAAoF;AAOpF,MAAa,kCAAmC,SAAQ,yDAA0B;IACtE,KAAK,CAAC,kBAAkB;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IAES,KAAK,CAAC,gBAAgB;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAES,aAAa;QACrB,OAAO,4CAAwB,CAAC;IAClC,CAAC;IAES,eAAe,CAAC,QAAgB,EAAE,cAA2B;QACrE,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,uCAAmB;gBACtB,OAAO,eAAe,CAAC;YACzB;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AArBD,gFAqBC"}

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-forward.d.ts

@@ -0,0 +1,21 @@
+import { Output, Parameter } from '@aws-sdk/client-cloudformation';
+import { ForwardCategoryRefactorer } from '../workflow/forward-category-refactorer';
+import { CFNResource } from '../../_infra/cfn-template';
+export declare const GEN1_NATIVE_APP_CLIENT = "UserPoolClient";
+export declare const GEN1_WEB_CLIENT = "UserPoolClientWeb";
+export declare const GEN2_NATIVE_APP_CLIENT = "UserPoolNativeAppClient";
+export declare const GEN2_WEB_CLIENT = "UserPoolAppClient";
+export declare const USER_POOL_CLIENT_TYPE = "AWS::Cognito::UserPoolClient";
+export declare const USER_POOL_TYPE = "AWS::Cognito::UserPool";
+export declare const IDENTITY_POOL_TYPE = "AWS::Cognito::IdentityPool";
+export declare const IDENTITY_POOL_ROLE_ATTACHMENT_TYPE = "AWS::Cognito::IdentityPoolRoleAttachment";
+export declare const USER_POOL_DOMAIN_TYPE = "AWS::Cognito::UserPoolDomain";
+export declare const RESOURCE_TYPES: string[];
+export declare class AuthCognitoForwardRefactorer extends ForwardCategoryRefactorer {
+    protected resourceTypes(): string[];
+    protected resolveOAuthParameters(parameters: Parameter[], outputs: Output[]): Promise<Parameter[]>;
+    protected match(sourceId: string, sourceResource: CFNResource, targetId: string, targetResource: CFNResource): boolean;
+    protected fetchSourceStackId(): Promise<string | undefined>;
+    protected fetchDestStackId(): Promise<string | undefined>;
+}
+//# sourceMappingURL=auth-cognito-forward.d.ts.map

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cognito-forward.d.ts","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/auth/auth-cognito-forward.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAGnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAMxD,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AACvD,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAChE,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,eAAO,MAAM,qBAAqB,iCAAiC,CAAC;AACpE,eAAO,MAAM,cAAc,2BAA2B,CAAC;AACvD,eAAO,MAAM,kBAAkB,+BAA+B,CAAC;AAC/D,eAAO,MAAM,kCAAkC,6CAA6C,CAAC;AAC7F,eAAO,MAAM,qBAAqB,iCAAiC,CAAC;AAEpE,eAAO,MAAM,cAAc,UAM1B,CAAC;AAOF,qBAAa,4BAA6B,SAAQ,yBAAyB;IACzE,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;cAOV,sBAAsB,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;cA8B9F,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,GAAG,OAAO;cAsB/G,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAIjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAIhE"}

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-forward.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCognitoForwardRefactorer = exports.RESOURCE_TYPES = exports.USER_POOL_DOMAIN_TYPE = exports.IDENTITY_POOL_ROLE_ATTACHMENT_TYPE = exports.IDENTITY_POOL_TYPE = exports.USER_POOL_TYPE = exports.USER_POOL_CLIENT_TYPE = exports.GEN2_WEB_CLIENT = exports.GEN2_NATIVE_APP_CLIENT = exports.GEN1_WEB_CLIENT = exports.GEN1_NATIVE_APP_CLIENT = void 0;
+const amplify_cli_core_1 = require("@aws-amplify/amplify-cli-core");
+const oauth_values_retriever_1 = require("../oauth-values-retriever");
+const forward_category_refactorer_1 = require("../workflow/forward-category-refactorer");
+const HOSTED_PROVIDER_META_PARAMETER_NAME = 'hostedUIProviderMeta';
+const HOSTED_PROVIDER_CREDENTIALS_PARAMETER_NAME = 'hostedUIProviderCreds';
+const USER_POOL_ID_OUTPUT_KEY_NAME = 'UserPoolId';
+exports.GEN1_NATIVE_APP_CLIENT = 'UserPoolClient';
+exports.GEN1_WEB_CLIENT = 'UserPoolClientWeb';
+exports.GEN2_NATIVE_APP_CLIENT = 'UserPoolNativeAppClient';
+exports.GEN2_WEB_CLIENT = 'UserPoolAppClient';
+exports.USER_POOL_CLIENT_TYPE = 'AWS::Cognito::UserPoolClient';
+exports.USER_POOL_TYPE = 'AWS::Cognito::UserPool';
+exports.IDENTITY_POOL_TYPE = 'AWS::Cognito::IdentityPool';
+exports.IDENTITY_POOL_ROLE_ATTACHMENT_TYPE = 'AWS::Cognito::IdentityPoolRoleAttachment';
+exports.USER_POOL_DOMAIN_TYPE = 'AWS::Cognito::UserPoolDomain';
+exports.RESOURCE_TYPES = [
+    exports.USER_POOL_TYPE,
+    exports.USER_POOL_CLIENT_TYPE,
+    exports.IDENTITY_POOL_TYPE,
+    exports.IDENTITY_POOL_ROLE_ATTACHMENT_TYPE,
+    exports.USER_POOL_DOMAIN_TYPE,
+];
+class AuthCognitoForwardRefactorer extends forward_category_refactorer_1.ForwardCategoryRefactorer {
+    resourceTypes() {
+        return exports.RESOURCE_TYPES;
+    }
+    async resolveOAuthParameters(parameters, outputs) {
+        var _a;
+        const oAuthParam = parameters.find((p) => p.ParameterKey === HOSTED_PROVIDER_META_PARAMETER_NAME);
+        if (!oAuthParam)
+            return parameters;
+        const userPoolId = (_a = outputs.find((o) => o.OutputKey === USER_POOL_ID_OUTPUT_KEY_NAME)) === null || _a === void 0 ? void 0 : _a.OutputValue;
+        if (!userPoolId) {
+            throw new amplify_cli_core_1.AmplifyError('MissingExpectedParameterError', {
+                message: `Auth stack output '${USER_POOL_ID_OUTPUT_KEY_NAME}' not found — required for OAuth credential retrieval`,
+            });
+        }
+        const oAuthValues = await (0, oauth_values_retriever_1.retrieveOAuthValues)({
+            ssmClient: this.gen1App.clients.ssm,
+            cognitoIdpClient: this.gen1App.clients.cognitoIdentityProvider,
+            oAuthParameter: oAuthParam,
+            userPoolId,
+            appId: this.gen1App.appId,
+            environmentName: this.gen1App.envName,
+        });
+        const credsParam = parameters.find((p) => p.ParameterKey === HOSTED_PROVIDER_CREDENTIALS_PARAMETER_NAME);
+        if (!credsParam) {
+            throw new amplify_cli_core_1.AmplifyError('MissingExpectedParameterError', {
+                message: `Auth stack parameter '${HOSTED_PROVIDER_CREDENTIALS_PARAMETER_NAME}' not found`,
+            });
+        }
+        credsParam.ParameterValue = JSON.stringify(oAuthValues);
+        return parameters;
+    }
+    match(sourceId, sourceResource, targetId, targetResource) {
+        if (sourceResource.Type !== targetResource.Type) {
+            return false;
+        }
+        switch (sourceResource.Type) {
+            case exports.USER_POOL_CLIENT_TYPE: {
+                switch (sourceId) {
+                    case exports.GEN1_WEB_CLIENT:
+                        return targetId.includes(exports.GEN2_WEB_CLIENT);
+                    case exports.GEN1_NATIVE_APP_CLIENT:
+                        return targetId.includes(exports.GEN2_NATIVE_APP_CLIENT);
+                    default:
+                        throw new amplify_cli_core_1.AmplifyError('MigrationError', {
+                            message: `Unexpected source logical id ${sourceId} for resource of type ${exports.USER_POOL_CLIENT_TYPE}`,
+                        });
+                }
+            }
+            default:
+                return true;
+        }
+    }
+    async fetchSourceStackId() {
+        return this.findNestedStack(this.gen1Env, `auth${this.resource.resourceName}`);
+    }
+    async fetchDestStackId() {
+        return this.findNestedStack(this.gen2Branch, 'auth');
+    }
+}
+exports.AuthCognitoForwardRefactorer = AuthCognitoForwardRefactorer;
+//# sourceMappingURL=auth-cognito-forward.js.map

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cognito-forward.js","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/auth/auth-cognito-forward.ts"],"names":[],"mappings":";;;AACA,oEAA6D;AAC7D,sEAAgE;AAChE,yFAAoF;AAGpF,MAAM,mCAAmC,GAAG,sBAAsB,CAAC;AACnE,MAAM,0CAA0C,GAAG,uBAAuB,CAAC;AAC3E,MAAM,4BAA4B,GAAG,YAAY,CAAC;AAErC,QAAA,sBAAsB,GAAG,gBAAgB,CAAC;AAC1C,QAAA,eAAe,GAAG,mBAAmB,CAAC;AAEtC,QAAA,sBAAsB,GAAG,yBAAyB,CAAC;AACnD,QAAA,eAAe,GAAG,mBAAmB,CAAC;AAEtC,QAAA,qBAAqB,GAAG,8BAA8B,CAAC;AACvD,QAAA,cAAc,GAAG,wBAAwB,CAAC;AAC1C,QAAA,kBAAkB,GAAG,4BAA4B,CAAC;AAClD,QAAA,kCAAkC,GAAG,0CAA0C,CAAC;AAChF,QAAA,qBAAqB,GAAG,8BAA8B,CAAC;AAEvD,QAAA,cAAc,GAAG;IAC5B,sBAAc;IACd,6BAAqB;IACrB,0BAAkB;IAClB,0CAAkC;IAClC,6BAAqB;CACtB,CAAC;AAOF,MAAa,4BAA6B,SAAQ,uDAAyB;IAC/D,aAAa;QACrB,OAAO,sBAAc,CAAC;IACxB,CAAC;IAKkB,KAAK,CAAC,sBAAsB,CAAC,UAAuB,EAAE,OAAiB;;QACxF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,mCAAmC,CAAC,CAAC;QAClG,IAAI,CAAC,UAAU;YAAE,OAAO,UAAU,CAAC;QAEnC,MAAM,UAAU,GAAG,MAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,4BAA4B,CAAC,0CAAE,WAAW,CAAC;QAClG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,+BAAY,CAAC,+BAA+B,EAAE;gBACtD,OAAO,EAAE,sBAAsB,4BAA4B,uDAAuD;aACnH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAA,4CAAmB,EAAC;YAC5C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;YACnC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB;YAC9D,cAAc,EAAE,UAAU;YAC1B,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;SACtC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,0CAA0C,CAAC,CAAC;QACzG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,+BAAY,CAAC,+BAA+B,EAAE;gBACtD,OAAO,EAAE,yBAAyB,0CAA0C,aAAa;aAC1F,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEkB,KAAK,CAAC,QAAgB,EAAE,cAA2B,EAAE,QAAgB,EAAE,cAA2B;QACnH,IAAI,cAAc,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,6BAAqB,CAAC,CAAC,CAAC;gBAC3B,QAAQ,QAAQ,EAAE,CAAC;oBACjB,KAAK,uBAAe;wBAClB,OAAO,QAAQ,CAAC,QAAQ,CAAC,uBAAe,CAAC,CAAC;oBAC5C,KAAK,8BAAsB;wBACzB,OAAO,QAAQ,CAAC,QAAQ,CAAC,8BAAsB,CAAC,CAAC;oBACnD;wBACE,MAAM,IAAI,+BAAY,CAAC,gBAAgB,EAAE;4BACvC,OAAO,EAAE,gCAAgC,QAAQ,yBAAyB,6BAAqB,EAAE;yBAClG,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;YACD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IACjF,CAAC;IAES,KAAK,CAAC,gBAAgB;QAE9B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;CACF;AApED,oEAoEC"}

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-rollback.d.ts

@@ -0,0 +1,9 @@
+import { CFNResource } from '../../_infra/cfn-template';
+import { RollbackCategoryRefactorer } from '../workflow/rollback-category-refactorer';
+export declare class AuthCognitoRollbackRefactorer extends RollbackCategoryRefactorer {
+    protected resourceTypes(): string[];
+    protected fetchSourceStackId(): Promise<string | undefined>;
+    protected fetchDestStackId(): Promise<string | undefined>;
+    protected targetLogicalId(sourceId: string, sourceResource: CFNResource): string | undefined;
+}
+//# sourceMappingURL=auth-cognito-rollback.d.ts.map

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cognito-rollback.d.ts","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/auth/auth-cognito-rollback.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAmBtF,qBAAa,6BAA8B,SAAQ,0BAA0B;IAC3E,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;cAInB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAIjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI/D,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS;CAyB7F"}

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-rollback.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCognitoRollbackRefactorer = void 0;
+const amplify_cli_core_1 = require("@aws-amplify/amplify-cli-core");
+const rollback_category_refactorer_1 = require("../workflow/rollback-category-refactorer");
+const auth_cognito_forward_1 = require("./auth-cognito-forward");
+class AuthCognitoRollbackRefactorer extends rollback_category_refactorer_1.RollbackCategoryRefactorer {
+    resourceTypes() {
+        return auth_cognito_forward_1.RESOURCE_TYPES;
+    }
+    async fetchSourceStackId() {
+        return this.findNestedStack(this.gen2Branch, 'auth');
+    }
+    async fetchDestStackId() {
+        return this.findNestedStack(this.gen1Env, `auth${this.resource.resourceName}`);
+    }
+    targetLogicalId(sourceId, sourceResource) {
+        switch (sourceResource.Type) {
+            case auth_cognito_forward_1.USER_POOL_CLIENT_TYPE: {
+                if (sourceId.includes(auth_cognito_forward_1.GEN2_NATIVE_APP_CLIENT)) {
+                    return auth_cognito_forward_1.GEN1_NATIVE_APP_CLIENT;
+                }
+                if (sourceId.includes(auth_cognito_forward_1.GEN2_WEB_CLIENT)) {
+                    return auth_cognito_forward_1.GEN1_WEB_CLIENT;
+                }
+                throw new amplify_cli_core_1.AmplifyError('MigrationError', {
+                    message: `Unable to determine Gen1 logical ID for UserPoolClient '${sourceId}' — expected logical ID to contain '${auth_cognito_forward_1.GEN2_NATIVE_APP_CLIENT}' or '${auth_cognito_forward_1.GEN2_WEB_CLIENT}'`,
+                });
+            }
+            case auth_cognito_forward_1.USER_POOL_TYPE:
+                return 'UserPool';
+            case auth_cognito_forward_1.IDENTITY_POOL_TYPE:
+                return 'IdentityPool';
+            case auth_cognito_forward_1.IDENTITY_POOL_ROLE_ATTACHMENT_TYPE:
+                return 'IdentityPoolRoleMap';
+            case auth_cognito_forward_1.USER_POOL_DOMAIN_TYPE:
+                return 'UserPoolDomain';
+            default:
+                return undefined;
+        }
+    }
+}
+exports.AuthCognitoRollbackRefactorer = AuthCognitoRollbackRefactorer;
+//# sourceMappingURL=auth-cognito-rollback.js.map

package/lib/commands/gen2-migration/refactor/auth/auth-cognito-rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cognito-rollback.js","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/auth/auth-cognito-rollback.ts"],"names":[],"mappings":";;;AAAA,oEAA6D;AAE7D,2FAAsF;AACtF,iEAWgC;AAOhC,MAAa,6BAA8B,SAAQ,yDAA0B;IACjE,aAAa;QACrB,OAAO,qCAAc,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAES,KAAK,CAAC,gBAAgB;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IACjF,CAAC;IAES,eAAe,CAAC,QAAgB,EAAE,cAA2B;QACrE,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,4CAAqB,CAAC,CAAC,CAAC;gBAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,6CAAsB,CAAC,EAAE,CAAC;oBAC9C,OAAO,6CAAsB,CAAC;gBAChC,CAAC;gBACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,sCAAe,CAAC,EAAE,CAAC;oBACvC,OAAO,sCAAe,CAAC;gBACzB,CAAC;gBACD,MAAM,IAAI,+BAAY,CAAC,gBAAgB,EAAE;oBACvC,OAAO,EAAE,2DAA2D,QAAQ,uCAAuC,6CAAsB,SAAS,sCAAe,GAAG;iBACrK,CAAC,CAAC;YACL,CAAC;YACD,KAAK,qCAAc;gBACjB,OAAO,UAAU,CAAC;YACpB,KAAK,yCAAkB;gBACrB,OAAO,cAAc,CAAC;YACxB,KAAK,yDAAkC;gBACrC,OAAO,qBAAqB,CAAC;YAC/B,KAAK,4CAAqB;gBACxB,OAAO,gBAAgB,CAAC;YAC1B;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAtCD,sEAsCC"}

package/lib/commands/gen2-migration/refactor/auth/auth-user-pool-groups-forward.d.ts

@@ -0,0 +1,11 @@
+import { CFNResource } from '../../_infra/cfn-template';
+import { ForwardCategoryRefactorer } from '../workflow/forward-category-refactorer';
+export declare const USER_POOL_GROUP_TYPE = "AWS::Cognito::UserPoolGroup";
+export declare const RESOURCE_TYPES: string[];
+export declare class AuthUserPoolGroupsForwardRefactorer extends ForwardCategoryRefactorer {
+    protected resourceTypes(): string[];
+    protected fetchSourceStackId(): Promise<string | undefined>;
+    protected fetchDestStackId(): Promise<string | undefined>;
+    protected match(_sourceId: string, sourceResource: CFNResource, _targetId: string, targetResource: CFNResource): boolean;
+}
+//# sourceMappingURL=auth-user-pool-groups-forward.d.ts.map

package/lib/commands/gen2-migration/refactor/auth/auth-user-pool-groups-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-user-pool-groups-forward.d.ts","sourceRoot":"","sources":["../../../../../src/commands/gen2-migration/refactor/auth/auth-user-pool-groups-forward.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAElE,eAAO,MAAM,cAAc,UAAyB,CAAC;AAOrD,qBAAa,mCAAoC,SAAQ,yBAAyB;IAChF,SAAS,CAAC,aAAa,IAAI,MAAM,EAAE;cAInB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAIjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;cAK5C,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,GAAG,OAAO;CAclI"}