@aws-mdaa/dataops-job-l3-construct 1.4.0 → 1.6.0

package/node_modules/@aws-mdaa/s3-bucketpolicy-helper/lib/index.js

@@ -1,198 +0,0 @@
-"use strict";
-/*!
- * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
- * SPDX-License-Identifier: Apache-2.0
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RestrictBucketToRoles = exports.RestrictObjectPrefixToRoles = void 0;
-const aws_iam_1 = require("aws-cdk-lib/aws-iam");
-/** Helper class for generating S3 bucket policy statements which grant access to specific object prefixes */
-class RestrictObjectPrefixToRoles {
-    constructor(props) {
-        this._readStatements = [];
-        this._readWriteStatements = [];
-        this._readWriteSuperStatements = [];
-        this._formattedPrefix = '/' + this.formatS3Prefix(props.s3Prefix) + '/*';
-        // Covers our case where two / get resolved because our prefix is actually /
-        this._formattedPrefix = this._formattedPrefix.replace(/\/\//, '/');
-        // FEDERATED / READ
-        if (props.readRoleIds != undefined && props.readRoleIds.length > 0) {
-            // Construct our User:Id roles for read
-            const statement = this._readStatementScaffold(props);
-            statement.addCondition('StringLike', { 'aws:userId': props.readRoleIds.map(x => `${x}:*`) });
-            statement.addAnyPrincipal();
-            this._readStatements.push(statement);
-        }
-        // FEDERATED / READWRITE
-        if (props.readWriteRoleIds != undefined && props.readWriteRoleIds.length > 0) {
-            const statement = this._readWriteStatementScaffold(props);
-            statement.addCondition('StringLike', { 'aws:userId': props.readWriteRoleIds.map(x => `${x}:*`) });
-            statement.addAnyPrincipal();
-            this._readWriteStatements.push(statement);
-        }
-        // FEDERATED / READWRITESUPER
-        if (props.readWriteSuperRoleIds != undefined && props.readWriteSuperRoleIds.length > 0) {
-            const statement = this._readWriteSuperStatementScaffold(props);
-            statement.addCondition('StringLike', { 'aws:userId': props.readWriteSuperRoleIds.map(x => `${x}:*`) });
-            statement.addAnyPrincipal();
-            this._readWriteSuperStatements.push(statement);
-        }
-        // NONFEDERATED / READ
-        if (props.readPrincipals != undefined && props.readPrincipals.length > 0) {
-            const statement = this._readStatementScaffold(props);
-            props.readPrincipals.forEach(principal => {
-                statement.addPrincipals(principal);
-            });
-            this._readStatements.push(statement);
-        }
-        // NONFEDERATED / READWRITE
-        if (props.readWritePrincipals != undefined && props.readWritePrincipals.length > 0) {
-            const statement = this._readWriteStatementScaffold(props);
-            props.readWritePrincipals.forEach(principal => {
-                statement.addPrincipals(principal);
-            });
-            this._readWriteStatements.push(statement);
-        }
-        // NONFEDERATED / READWRITESUPER
-        if (props.readWriteSuperPrincipals != undefined && props.readWriteSuperPrincipals.length > 0) {
-            const statement = this._readWriteSuperStatementScaffold(props);
-            props.readWriteSuperPrincipals.forEach(principal => {
-                statement.addPrincipals(principal);
-            });
-            this._readWriteSuperStatements.push(statement);
-        }
-    }
-    _readStatementScaffold(props) {
-        return new aws_iam_1.PolicyStatement({
-            sid: `${props.s3Prefix.replace(/\\W/g, '')}_Read`,
-            effect: aws_iam_1.Effect.ALLOW,
-            resources: [props.s3Bucket.bucketArn + this._formattedPrefix],
-            actions: RestrictObjectPrefixToRoles.READ_ACTIONS,
-        });
-    }
-    _readWriteStatementScaffold(props) {
-        return new aws_iam_1.PolicyStatement({
-            sid: `${props.s3Prefix.replace(/\\W/g, '')}_ReadWrite`,
-            effect: aws_iam_1.Effect.ALLOW,
-            resources: [props.s3Bucket.bucketArn + this._formattedPrefix],
-            actions: RestrictObjectPrefixToRoles.READ_WRITE_ACTIONS,
-        });
-    }
-    _readWriteSuperStatementScaffold(props) {
-        return new aws_iam_1.PolicyStatement({
-            sid: `${props.s3Prefix.replace(/\\W/g, '')}_ReadWriteSuper`,
-            effect: aws_iam_1.Effect.ALLOW,
-            resources: [props.s3Bucket.bucketArn + this._formattedPrefix],
-            actions: RestrictObjectPrefixToRoles.READ_WRITE_SUPER_ACTIONS,
-        });
-    }
-    readStatements() {
-        return this._readStatements;
-    }
-    readWriteStatements() {
-        return this._readWriteStatements;
-    }
-    readWriteSuperStatements() {
-        return this._readWriteSuperStatements;
-    }
-    statements() {
-        return [...this._readStatements, ...this._readWriteStatements, ...this._readWriteSuperStatements];
-    }
-    formatS3Prefix(prefix) {
-        let rawPrefix = prefix;
-        // Removes trailing slashes
-        rawPrefix = rawPrefix.endsWith('/') ? rawPrefix.slice(0, -1) : rawPrefix;
-        // Removes leading slashes
-        rawPrefix = rawPrefix.startsWith('/') ? rawPrefix.substring(1) : rawPrefix;
-        return rawPrefix;
-    }
-}
-exports.RestrictObjectPrefixToRoles = RestrictObjectPrefixToRoles;
-RestrictObjectPrefixToRoles.READ_ACTIONS = ['s3:GetObject*'];
-RestrictObjectPrefixToRoles.READ_WRITE_ACTIONS = [
-    ...RestrictObjectPrefixToRoles.READ_ACTIONS,
-    's3:PutObject',
-    's3:PutObjectTagging',
-    's3:DeleteObject',
-];
-RestrictObjectPrefixToRoles.READ_WRITE_SUPER_ACTIONS = [
-    ...RestrictObjectPrefixToRoles.READ_WRITE_ACTIONS,
-    's3:DeleteObjectVersion',
-];
-RestrictObjectPrefixToRoles.BUCKET_ALLOW_ACTIONS = ['s3:List*', 's3:GetBucket*'];
-RestrictObjectPrefixToRoles.BUCKET_DENY_ACTIONS = ['s3:PutObject*', 's3:GetObject*', 's3:DeleteObject*'];
-/** Helper class for generating bucket policy statements
- * which allow or deny access to an entire bucket. Used to
- * create bucket-level default deny statements to block accesses
- * not granted in the bucket policy. */
-class RestrictBucketToRoles {
-    constructor(props) {
-        this.resource = [];
-        this.notResource = [];
-        this.denyConditionalNotEquals = {};
-        // Statement allowing access to the bucket for the AROAs
-        this.allowStatement = new aws_iam_1.PolicyStatement({
-            sid: `BucketAllow`,
-            effect: aws_iam_1.Effect.ALLOW,
-            resources: [props.s3Bucket.bucketArn + '/*', props.s3Bucket.bucketArn],
-            actions: RestrictObjectPrefixToRoles.BUCKET_ALLOW_ACTIONS,
-        });
-        this.allowStatement.addAnyPrincipal();
-        this.allowStatement.addCondition('StringLike', { 'aws:userId': props.roleExcludeIds.map(x => `${x}:*`) });
-        // Constuct our deny statement.
-        // prefixIncludes denotes we want to include a prefix in our deny meaning Resource
-        if (props.prefixIncludes) {
-            this.resource = props.prefixIncludes.map(prefix => {
-                return `${props.s3Bucket.bucketArn}/${this.formatS3Prefix(prefix)}`;
-            });
-        }
-        else {
-            this.resource = [props.s3Bucket.bucketArn + '/*'];
-        }
-        // prefixExcludes denote we want to exclude a prefix in our deny meaning notResource
-        if (props.prefixExcludes) {
-            this.notResource = props.prefixExcludes.map(prefix => {
-                return `${props.s3Bucket.bucketArn}/${this.formatS3Prefix(prefix)}`;
-            });
-        }
-        if (this.notResource.length > 0) {
-            this.denyStatement = new aws_iam_1.PolicyStatement({
-                sid: `BucketDeny`,
-                effect: aws_iam_1.Effect.DENY,
-                notResources: this.notResource,
-                actions: RestrictObjectPrefixToRoles.BUCKET_DENY_ACTIONS,
-            });
-        }
-        else {
-            this.denyStatement = new aws_iam_1.PolicyStatement({
-                sid: `BucketDeny`,
-                effect: aws_iam_1.Effect.DENY,
-                resources: this.resource,
-                actions: RestrictObjectPrefixToRoles.BUCKET_DENY_ACTIONS,
-            });
-        }
-        this.denyStatement.addAnyPrincipal();
-        // Build our conditionals.
-        this.denyConditionalNotEquals['aws:userId'] = props.roleExcludeIds.map(x => `${x}:*`);
-        if (props.principalExcludes && props.principalExcludes.length > 0) {
-            this.denyConditionalNotEquals['aws:PrincipalArn'] = [...new Set(props.principalExcludes)].sort((a, b) => a.localeCompare(b));
-        }
-        // Construct our conditional for our deny
-        if (Object.keys(this.denyConditionalNotEquals).length == 1) {
-            this.denyStatement.addCondition('StringNotLike', this.denyConditionalNotEquals);
-        }
-        else {
-            this.denyStatement.addCondition('ForAnyValue:StringNotLike', this.denyConditionalNotEquals);
-        }
-    }
-    formatS3Prefix(prefix) {
-        let rawPrefix = prefix;
-        // Removes trailing slashes
-        rawPrefix = rawPrefix.endsWith('/') ? rawPrefix.slice(0, -1) : rawPrefix;
-        // Removes leading slashes
-        rawPrefix = rawPrefix.startsWith('/') ? rawPrefix.substring(1) : rawPrefix;
-        return `${rawPrefix}/*`;
-    }
-}
-exports.RestrictBucketToRoles = RestrictBucketToRoles;
-//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-mdaa/s3-inventory-helper/README.md

@@ -1,3 +0,0 @@
-# S3 Inventory Helper
-
-This is a helper class that helps construct working S3 inventory configurations that can be added to a bucket construct.

package/node_modules/@aws-mdaa/s3-inventory-helper/lib/index.d.ts

@@ -1,66 +0,0 @@
-/*!
- * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
- * SPDX-License-Identifier: Apache-2.0
- */
-import { Database } from '@aws-cdk/aws-glue-alpha';
-import { CfnTable } from 'aws-cdk-lib/aws-glue';
-import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
-import { IBucket, Inventory } from 'aws-cdk-lib/aws-s3';
-import { Construct } from 'constructs';
-export interface BucketInventory {
-    /**
-     * Q-ENHANCED-PROPERTY
-     * Name of the S3 bucket for which inventory data has been generated. Identifies the source bucket in inventory data organization and enables bucket-specific inventory querying through Glue table partitions.
-     *
-     * Use cases: Source bucket identification; Inventory data organization; Multi-bucket inventory management
-     *
-     * AWS: AWS S3 bucket name for inventory source identification in Glue table partitions
-     *
-     * Validation: Must be valid S3 bucket name (3-63 characters, lowercase, no underscores)
-     **/
-    readonly bucketName: string;
-    /**
-     * Q-ENHANCED-PROPERTY
-     * Name of the S3 inventory configuration that generated the inventory data for the specified bucket. Enables multiple inventory configurations per bucket and organized inventory data management.
-     *
-     * Use cases: Inventory configuration identification; Multiple inventories per bucket; Inventory data organization
-     *
-     * AWS: AWS S3 inventory configuration name for inventory data identification in Glue table partitions
-     *
-     * Validation: Must be valid S3 inventory configuration name matching the inventory ID used in S3 inventory setup
-     **/
-    readonly inventoryName: string;
-}
-/** Helper class for creating S3 Inventories and associated Glue/Athena resources for querying these inventories. */
-export declare class InventoryHelper {
-    /**
-     * Helper method for creating an S3 inventory.
-     * @param destinationBucket The bucket where S3 inventory data will be written
-     * @param inventoryId The S3 inventory ID
-     * @param objectsPrefix The object prefix from which inventory will be produced (on the bucket to which the inventory config is applied)
-     * @param destinationPrefix The object prefix under which inventory will be written on the destination bucket.
-     * @returns An S3 Inventory Config which can be applied to a bucket in order to produce periodic inventory data.
-     */
-    static createInvConfig(destinationBucket: IBucket, inventoryId: string, objectsPrefix?: string, destinationPrefix?: string, destinationAccount?: string): Inventory;
-    /**
-     * Helper method for creating a Glue table which can be used to query inventory data generated by an S3 Inventory config
-     * @param scope Stack in which the table will be created
-     * @param tableNamePrefix Will be used to prefix the table name.
-     * @param locationBucketName The bucket where the inventory data is stored.
-     * @param inventoryBucket The bucket for which inventory data has been generated
-     * @param database The Glue database in which the table will be created
-     * @param inventoryName The name of the S3 Inventory config
-     * @param locationPrefix The S3 Prefix on the location bucket where the inventory is stored.
-     * @returns A Glue table which can be used to query S3 inventory data in an S3 bucket.
-     */
-    static createGlueInvTable(scope: Construct, catalogId: string, tableNamePrefix: string, database: Database, locationBucketName: string, bucketInventories: BucketInventory[], locationPrefix?: string): CfnTable;
-    /**
-     * Helper method to generate an S3 Bucket Policy Statement allowing S3 service to write inventories to a bucket.
-     * @param sourceBucketArn The bucket arn for which inventory data is being produced
-     * @param bucketArn  The bucket arn where inventory will be stored
-     * @param srcAccount The account which owns the source bucket from which inventory is being produced.
-     * @param inventoryPrefix The prefix on the destination bucket where inventory data will be stored.
-     * @returns A policy statement which permits the S3 service principal to write inventory for the source bucket/account to the destination bucket.
-     */
-    static createInventoryBucketPolicyStatement(bucketArn: string, srcAccount: string, sourceBucketArn?: string, inventoryPrefix?: string): PolicyStatement;
-}

package/node_modules/@aws-mdaa/s3-inventory-helper/lib/index.js

@@ -1,222 +0,0 @@
-"use strict";
-/*!
- * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
- * SPDX-License-Identifier: Apache-2.0
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InventoryHelper = void 0;
-const s3_constructs_1 = require("@aws-mdaa/s3-constructs");
-const aws_glue_1 = require("aws-cdk-lib/aws-glue");
-const aws_iam_1 = require("aws-cdk-lib/aws-iam");
-const aws_s3_1 = require("aws-cdk-lib/aws-s3");
-/** Helper class for creating S3 Inventories and associated Glue/Athena resources for querying these inventories. */
-class InventoryHelper {
-    /**
-     * Helper method for creating an S3 inventory.
-     * @param destinationBucket The bucket where S3 inventory data will be written
-     * @param inventoryId The S3 inventory ID
-     * @param objectsPrefix The object prefix from which inventory will be produced (on the bucket to which the inventory config is applied)
-     * @param destinationPrefix The object prefix under which inventory will be written on the destination bucket.
-     * @returns An S3 Inventory Config which can be applied to a bucket in order to produce periodic inventory data.
-     */
-    static createInvConfig(destinationBucket, inventoryId, objectsPrefix, destinationPrefix, destinationAccount) {
-        const bucketOwner = destinationAccount ? `${destinationAccount}` : destinationAccount;
-        return {
-            destination: {
-                bucket: destinationBucket,
-                /**
-                 * Q-ENHANCED-PROPERTY
-                 * Required S3 prefix for inventory report destination organization enabling systematic inventory file organization and management. Provides the S3 key prefix for inventory report storage enabling organized inventory data management and efficient retrieval of inventory reports.
-                 *
-                 * Use cases: Inventory organization; Report storage; Data management; Systematic file organization
-                 *
-                 * AWS: S3 inventory configuration destination prefix for inventory report organization and storage
-                 *
-                 * Validation: Must be valid S3 prefix string; required for inventory report destination organization
-                 */
-                prefix: s3_constructs_1.MdaaBucket.formatS3Prefix(destinationPrefix),
-                bucketOwner: bucketOwner,
-            },
-            format: aws_s3_1.InventoryFormat.PARQUET,
-            frequency: aws_s3_1.InventoryFrequency.DAILY,
-            includeObjectVersions: aws_s3_1.InventoryObjectVersion.ALL,
-            inventoryId: inventoryId,
-            objectsPrefix: s3_constructs_1.MdaaBucket.formatS3Prefix(objectsPrefix, false, true),
-            optionalFields: [
-                'Size',
-                'LastModifiedDate',
-                'StorageClass',
-                'ETag',
-                'IsMultipartUploaded',
-                'ReplicationStatus',
-                'EncryptionStatus',
-                'ObjectLockRetainUntilDate',
-                'ObjectLockMode',
-                'ObjectLockLegalHoldStatus',
-                'IntelligentTieringAccessTier',
-            ],
-        };
-    }
-    /**
-     * Helper method for creating a Glue table which can be used to query inventory data generated by an S3 Inventory config
-     * @param scope Stack in which the table will be created
-     * @param tableNamePrefix Will be used to prefix the table name.
-     * @param locationBucketName The bucket where the inventory data is stored.
-     * @param inventoryBucket The bucket for which inventory data has been generated
-     * @param database The Glue database in which the table will be created
-     * @param inventoryName The name of the S3 Inventory config
-     * @param locationPrefix The S3 Prefix on the location bucket where the inventory is stored.
-     * @returns A Glue table which can be used to query S3 inventory data in an S3 bucket.
-     */
-    static createGlueInvTable(scope, catalogId, tableNamePrefix, database, locationBucketName, bucketInventories, locationPrefix) {
-        const location = locationPrefix
-            ? `s3://${locationBucketName}/${s3_constructs_1.MdaaBucket.formatS3Prefix(locationPrefix)}/`
-            : `s3://${locationBucketName}/`;
-        const tableInput = {
-            name: `${tableNamePrefix}_inv`.replace(/-/gi, '_'),
-            parameters: {
-                EXTERNAL: 'TRUE',
-                'projection.enabled': 'true',
-                'projection.dt.type': 'date',
-                'projection.dt.range': '2022-01-01-00-00,NOW',
-                'projection.dt.format': 'yyyy-MM-dd-HH-mm',
-                'projection.dt.interval': '1',
-                'projection.dt.interval.unit': 'HOURS',
-                'projection.bucket_inventory.type': 'enum',
-                'projection.bucket_inventory.values': bucketInventories
-                    .map(x => `${x.bucketName}/${x.inventoryName}`)
-                    .join(','),
-                'storage.location.template': location + '${bucket_inventory}/hive/dt=${dt}',
-            },
-            tableType: 'EXTERNAL_TABLE',
-            partitionKeys: [
-                {
-                    name: 'bucket_inventory',
-                    type: 'string',
-                },
-                {
-                    name: 'dt',
-                    type: 'string',
-                },
-            ],
-            storageDescriptor: {
-                columns: [
-                    {
-                        name: 'bucket',
-                        type: 'string',
-                    },
-                    {
-                        name: 'key',
-                        type: 'string',
-                    },
-                    {
-                        name: 'version_id',
-                        type: 'string',
-                    },
-                    {
-                        name: 'is_latest',
-                        type: 'boolean',
-                    },
-                    {
-                        name: 'is_delete_marker',
-                        type: 'boolean',
-                    },
-                    {
-                        name: 'size',
-                        type: 'bigint',
-                    },
-                    {
-                        name: 'last_modified_date',
-                        type: 'timestamp',
-                    },
-                    {
-                        name: 'e_tag',
-                        type: 'string',
-                    },
-                    {
-                        name: 'storage_class',
-                        type: 'string',
-                    },
-                    {
-                        name: 'is_multipart_uploaded',
-                        type: 'boolean',
-                    },
-                    {
-                        name: 'replication_status',
-                        type: 'string',
-                    },
-                    {
-                        name: 'encryption_status',
-                        type: 'string',
-                    },
-                    {
-                        name: 'intelligent_tiering_tier',
-                        type: 'string',
-                    },
-                    // ,
-                    // {
-                    //     name: "object_lock_retain_until_date",
-                    //     type: "timestamp"
-                    // },
-                    // {
-                    //     name: "object_lock_mode",
-                    //     type: "string"
-                    // },
-                    // {
-                    //     name: "object_lock_legal_hold_status",
-                    //     type: "string"
-                    // }
-                ],
-                location: location,
-                inputFormat: 'org.apache.hadoop.hive.ql.io.SymlinkTextInputFormat',
-                outputFormat: 'org.apache.hadoop.hive.ql.io.HiveIgnoreKeyTextOutputFormat',
-                compressed: false,
-                numberOfBuckets: -1,
-                serdeInfo: {
-                    serializationLibrary: 'org.apache.hadoop.hive.ql.io.parquet.serde.ParquetHiveSerDe',
-                    parameters: {
-                        'serialization.format': '1',
-                    },
-                },
-            },
-        };
-        const tableProps = {
-            catalogId: catalogId,
-            databaseName: database.databaseName,
-            tableInput: tableInput,
-        };
-        return new aws_glue_1.CfnTable(scope, `inv-table-${tableNamePrefix}`, tableProps);
-    }
-    /**
-     * Helper method to generate an S3 Bucket Policy Statement allowing S3 service to write inventories to a bucket.
-     * @param sourceBucketArn The bucket arn for which inventory data is being produced
-     * @param bucketArn  The bucket arn where inventory will be stored
-     * @param srcAccount The account which owns the source bucket from which inventory is being produced.
-     * @param inventoryPrefix The prefix on the destination bucket where inventory data will be stored.
-     * @returns A policy statement which permits the S3 service principal to write inventory for the source bucket/account to the destination bucket.
-     */
-    static createInventoryBucketPolicyStatement(bucketArn, srcAccount, sourceBucketArn, inventoryPrefix) {
-        const resource = inventoryPrefix
-            ? `${bucketArn}/${s3_constructs_1.MdaaBucket.formatS3Prefix(inventoryPrefix)}/*`
-            : `${bucketArn}/*`;
-        const allowS3Inventory = new aws_iam_1.PolicyStatement({
-            sid: 'AllowS3Inventory',
-            effect: aws_iam_1.Effect.ALLOW,
-            resources: [resource],
-            actions: ['s3:PutObject'],
-        });
-        allowS3Inventory.addCondition('StringEquals', {
-            'aws:SourceAccount': srcAccount,
-            's3:x-amz-acl': 'bucket-owner-full-control',
-        });
-        if (sourceBucketArn) {
-            allowS3Inventory.addCondition('ArnLike', {
-                'aws:SourceArn': sourceBucketArn,
-            });
-        }
-        allowS3Inventory.addServicePrincipal('s3.amazonaws.com');
-        return allowS3Inventory;
-    }
-}
-exports.InventoryHelper = InventoryHelper;
-//# sourceMappingURL=data:application/json;base64,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

package/node_modules/@aws-mdaa/s3-inventory-helper/package.json

@@ -1,42 +0,0 @@
-{
-  "name": "@aws-mdaa/s3-inventory-helper",
-  "description": "MDAA s3-inventory-helper utility",
-  "author": {
-    "name": "Amazon Web Services",
-    "url": "https://aws.amazon.com/solutions"
-  },
-  "version": "1.4.0",
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "license": "Apache-2.0",
-  "scripts": {
-    "build": "tsc",
-    "watch": "tsc -w",
-    "test": "jest --passWithNoTests --coverage",
-    "lint": "eslint --max-warnings 0 -c ../../../.eslintrc.json '**/*.{ts,tsx}' --ignore-pattern 'dist/*' --ignore-pattern 'node_modules/*' --ignore-pattern \"*.d.ts\" ",
-    "test-coverage": "jest --passWithNoTests --coverage"
-  },
-  "devDependencies": {
-    "@types/jest": "29.5.14",
-    "@types/node": "22.9.0",
-    "@types/prettier": "2.6.0",
-    "jest": "29.7.0",
-    "ts-jest": "29.4.6",
-    "ts-node": "10.9.2",
-    "typescript": "5.9.3",
-    "typescript-json-schema": "0.67.1"
-  },
-  "dependencies": {
-    "@aws-cdk/aws-glue-alpha": "2.220.0-alpha.0",
-    "@aws-mdaa/naming": "1.4.0",
-    "@aws-mdaa/s3-constructs": "1.4.0",
-    "aws-cdk-lib": "2.220.0",
-    "cdk-nag": "2.37.55",
-    "constructs": "10.0.96"
-  },
-  "gitHead": "8b49a2b371014baec046605ffdbfe38951099c31",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/aws/modern-data-architecture-accelerator"
-  }
-}