@cloud-copilot/iam-collect 0.1.129 → 0.1.131

package/README.md

@@ -102,6 +102,29 @@ This will show you your data that was downloaded. See the [storage docs](docs/St
 - [CLI](docs/CLI.md) - Details on the CLI commands and options.
 - [History](docs/History.md) - How to track history of changes.
 
+## Using Your Data
+
+### iam-lens
+
+To explore effective access in your environment check out [iam-lens](https://github.com/cloud-copilot/iam-lens). iam-lens reads your iam-collect data to answer questions like: "Who can access this resource?", "Who can assume this role?", and "Does this principal have access to this bucket?"
+
+### Leveraging Your AI
+
+Use [AgentInstructions.md](docs/AgentInstructions.md) to help your AI understand the data and how to interrogate it.
+
+```bash
+curl -O https://raw.githubusercontent.com/cloud-copilot/iam-collect/main/docs/AgentInstructions.md
+```
+
+Then you can start asking questions like "Using AgentInstructions.md as context...":
+
+- Do I have any roles that have "\*" in the trust policy?
+- Which users have the "AdministratorAccess" managed policy attached?
+- What RAM shares are sharing resources outside of my organization?
+- Are there any S3 buckets without block public access enabled?
+
+You can also ask your AI to generate scripts to predictably and scalably answer these same questions for you.
+
 ## Supported Services and Data
 
 | Service           | Resource Type                     | Data Downloaded                                                                                                                     |
@@ -121,6 +144,7 @@ This will show you your data that was downloaded. See the [storage docs](docs/St
 | ecr               | Registries                        | policy                                                                                                                              |
 | ec2               | VPC Endpoints                     | id, name, type, vpc, policy                                                                                                         |
 | elasticfilesystem | File Systems                      | name, id, key, encryption, tags, policy                                                                                             |
+| es                | OpenSearch Domains                | name, policy, tags, KMS key id                                                                                                      |
 | events            | Event Buses                       | name, key id, policy, tags                                                                                                          |
 | glacier           | Vaults                            | name, region, tags, policy                                                                                                          |
 | glue              | Root Catalogs                     | policy                                                                                                                              |

package/dist/cjs/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["apigateway", "backup", "dynamodb", "ec2", "ecr", "elasticfilesystem", "events", "glacier", "glue", "iam", "kafka", "kinesis", "kms", "lambda", "organizations", "ram", "s3", "s3-object-lambda", "s3express", "s3outposts", "s3tables", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["apigateway", "backup", "dynamodb", "ec2", "ecr", "elasticfilesystem", "es", "events", "glacier", "glue", "iam", "kafka", "kinesis", "kms", "lambda", "organizations", "ram", "s3", "s3-object-lambda", "s3express", "s3outposts", "s3tables", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/cjs/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,2RA0Bd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAE5D"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,iSA2Bd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAE5D"}

package/dist/cjs/services.js

@@ -12,6 +12,7 @@ exports.allServices = [
     'ec2',
     'ecr',
     'elasticfilesystem',
+    'es',
     'events',
     'glacier',
     'glue',

package/dist/cjs/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AA0CA,4CAEC;AA5CD;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,eAAe;IACf,KAAK;IACL,IAAI;IACJ,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA;AAOV;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,WAAW,EAAgB,CAAA;AAC5C,CAAC"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AA2CA,4CAEC;AA7CD;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,eAAe;IACf,KAAK;IACL,IAAI;IACJ,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA;AAOV;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,WAAW,EAAgB,CAAA;AAC5C,CAAC"}

package/dist/cjs/syncs/opensearch/domains.d.ts

@@ -0,0 +1,2 @@
+export declare const OpenSearchDomainsSync: import("../sync.js").Sync;
+//# sourceMappingURL=domains.d.ts.map

package/dist/cjs/syncs/opensearch/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,qBAAqB,2BA8CjC,CAAA"}

package/dist/cjs/syncs/opensearch/domains.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenSearchDomainsSync = void 0;
+const client_opensearch_1 = require("@aws-sdk/client-opensearch");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const json_js_1 = require("../../utils/json.js");
+const typedSync_js_1 = require("../typedSync.js");
+function domainArn(domainName, region, accountId, partition) {
+    return `arn:${partition}:es:${region}:${accountId}:domain/${domainName}`;
+}
+exports.OpenSearchDomainsSync = (0, typedSync_js_1.createTypedSyncOperation)('es', 'domains', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_opensearch_1.OpenSearchClient,
+    command: client_opensearch_1.ListDomainNamesCommand,
+    key: 'DomainNames',
+    paginationConfig: '::no-pagination::',
+    resourceTypeParts: (accountId, region) => ({
+        service: 'es', // OpenSearch domains use 'es' service in ARNs
+        resourceType: 'domain',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        domainDetails: async (client, domain, accountId, region, partition) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const result = await client.send(new client_opensearch_1.DescribeDomainCommand({ DomainName: domain.DomainName }));
+                return result.DomainStatus;
+            });
+        },
+        tags: async (client, domain, accountId, region, partition) => {
+            return (0, client_tools_js_1.runAndCatch404)(async () => {
+                const tagResult = await client.send(new client_opensearch_1.ListTagsCommand({
+                    ARN: domainArn(domain.DomainName, region, accountId, partition)
+                }));
+                return tagResult.TagList;
+            });
+        }
+    },
+    tags: (domain) => domain.extraFields.tags,
+    arn: (domain, region, accountId, partition) => domainArn(domain.DomainName, region, accountId, partition),
+    results: (domain) => ({
+        metadata: {
+            name: domain.DomainName,
+            keyId: domain.extraFields.domainDetails?.EncryptionAtRestOptions?.KmsKeyId
+        },
+        policy: (0, json_js_1.parseIfPresent)(domain.extraFields.domainDetails?.AccessPolicies)
+    })
+}));
+//# sourceMappingURL=domains.js.map

package/dist/cjs/syncs/opensearch/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":";;;AAAA,kEAKmC;AACnC,iEAA4D;AAC5D,iDAAoD;AACpD,kDAAkF;AAElF,SAAS,SAAS,CAChB,UAAkB,EAClB,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,OAAO,OAAO,SAAS,OAAO,MAAM,IAAI,SAAS,WAAW,UAAU,EAAE,CAAA;AAC1E,CAAC;AAEY,QAAA,qBAAqB,GAAG,IAAA,uCAAwB,EAC3D,IAAI,EACJ,SAAS,EACT,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,oCAAgB;IACxB,OAAO,EAAE,0CAAsB;IAC/B,GAAG,EAAE,aAAa;IAClB,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,8CAA8C;QAC7D,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACpE,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,yCAAqB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAC7D,CAAA;gBACD,OAAO,MAAM,CAAC,YAAY,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC3D,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,mCAAe,CAAC;oBAClB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;iBACjE,CAAC,CACH,CAAA;gBACD,OAAO,SAAS,CAAC,OAAO,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;IACzC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,uBAAuB,EAAE,QAAQ;SAC3E;QAED,MAAM,EAAE,IAAA,wBAAc,EAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC;KACzE,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,gBAAgB,CAAA;AAiC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAyDhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,gBAAgB,CAAA;AAkC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA0DhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/cjs/syncs/syncMap.js

@@ -19,6 +19,7 @@ const clusters_js_1 = require("./kafka/clusters.js");
 const dataStreams_js_1 = require("./kinesis/dataStreams.js");
 const key_js_1 = require("./kms/key.js");
 const lambda_js_1 = require("./lambda/lambda.js");
+const domains_js_1 = require("./opensearch/domains.js");
 const organizations_js_1 = require("./organizations/organizations.js");
 const ramShares_js_1 = require("./ram/ramShares.js");
 const accessPoints_js_1 = require("./s3/accessPoints.js");
@@ -53,6 +54,7 @@ const allSyncs = [
     key_js_1.KeySync,
     lambda_js_1.LambdaSync,
     lambda_js_1.LambdaLayerVersionsSync,
+    domains_js_1.OpenSearchDomainsSync,
     organizations_js_1.OrganizationSync,
     ramShares_js_1.RamResourcesSync,
     gateways_js_1.RestApisSync,

package/dist/cjs/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAgGA,4DAMC;AAQD,gEAMC;AApHD,gDAA6D;AAC7D,0DAAuD;AACvD,8DAA2D;AAC3D,sEAAmE;AACnE,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,yDAA6D;AAC7D,0DAAkE;AAClE,oDAAoD;AACpD,2EAAwE;AACxE,qEAAkE;AAClE,mEAAgE;AAChE,qDAAuD;AACvD,6DAAiE;AACjE,yCAAsC;AACtC,kDAAwE;AACxE,uEAAmE;AACnE,qDAAqD;AACrD,0DAAyD;AACzD,sDAAqD;AACrD,gDAA4D;AAC5D,gFAA+E;AAC/E,kFAAiF;AACjF,8CAAkD;AAClD,+FAAwF;AACxF,qFAA8E;AAC9E,wEAAmG;AACnG,gEAA+D;AAC/D,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,kCAAgB;IAChB,wCAAmB;IACnB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,uCAAsB;IACtB,yCAAyB;IACzB,0CAAoB;IACpB,GAAG,4CAAqB;IACxB,6BAAiB;IACjB,6BAAe;IACf,+BAAiB;IACjB,uCAAsB;IACtB,gBAAO;IACP,sBAAU;IACV,mCAAuB;IACvB,mCAAgB;IAChB,+BAAgB;IAChB,0BAAY;IACZ,oCAAkB;IAClB,kDAAsB;IACtB,4DAA2B;IAC3B,uCAA0B;IAC1B,0DAA6B;IAC7B,4DAA8B;IAC9B,+CAA0B;IAC1B,0CAAqB;IACrB,oCAAkB;IAClB,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAA,8BAAgB,EAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAA,8BAAgB,EAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAkGA,4DAMC;AAQD,gEAMC;AAtHD,gDAA6D;AAC7D,0DAAuD;AACvD,8DAA2D;AAC3D,sEAAmE;AACnE,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,yDAA6D;AAC7D,0DAAkE;AAClE,oDAAoD;AACpD,2EAAwE;AACxE,qEAAkE;AAClE,mEAAgE;AAChE,qDAAuD;AACvD,6DAAiE;AACjE,yCAAsC;AACtC,kDAAwE;AACxE,wDAA+D;AAC/D,uEAAmE;AACnE,qDAAqD;AACrD,0DAAyD;AACzD,sDAAqD;AACrD,gDAA4D;AAC5D,gFAA+E;AAC/E,kFAAiF;AACjF,8CAAkD;AAClD,+FAAwF;AACxF,qFAA8E;AAC9E,wEAAmG;AACnG,gEAA+D;AAC/D,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,kCAAgB;IAChB,wCAAmB;IACnB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,uCAAsB;IACtB,yCAAyB;IACzB,0CAAoB;IACpB,GAAG,4CAAqB;IACxB,6BAAiB;IACjB,6BAAe;IACf,+BAAiB;IACjB,uCAAsB;IACtB,gBAAO;IACP,sBAAU;IACV,mCAAuB;IACvB,kCAAqB;IACrB,mCAAgB;IAChB,+BAAgB;IAChB,0BAAY;IACZ,oCAAkB;IAClB,kDAAsB;IACtB,4DAA2B;IAC3B,uCAA0B;IAC1B,0DAA6B;IAC7B,4DAA8B;IAC9B,+CAA0B;IAC1B,0CAAqB;IACrB,oCAAkB;IAClB,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAA,8BAAgB,EAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAA,8BAAgB,EAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/dist/esm/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["apigateway", "backup", "dynamodb", "ec2", "ecr", "elasticfilesystem", "events", "glacier", "glue", "iam", "kafka", "kinesis", "kms", "lambda", "organizations", "ram", "s3", "s3-object-lambda", "s3express", "s3outposts", "s3tables", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["apigateway", "backup", "dynamodb", "ec2", "ecr", "elasticfilesystem", "es", "events", "glacier", "glue", "iam", "kafka", "kinesis", "kms", "lambda", "organizations", "ram", "s3", "s3-object-lambda", "s3express", "s3outposts", "s3tables", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/esm/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,2RA0Bd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAE5D"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,iSA2Bd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAE5D"}

package/dist/esm/services.js

@@ -8,6 +8,7 @@ export const allServices = [
     'ec2',
     'ecr',
     'elasticfilesystem',
+    'es',
     'events',
     'glacier',
     'glue',

package/dist/esm/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,eAAe;IACf,KAAK;IACL,IAAI;IACJ,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA;AAOV;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,WAAW,EAAgB,CAAA;AAC5C,CAAC"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,mBAAmB;IACnB,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,eAAe;IACf,KAAK;IACL,IAAI;IACJ,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA;AAOV;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,WAAW,EAAgB,CAAA;AAC5C,CAAC"}

package/dist/esm/syncs/opensearch/domains.d.ts

@@ -0,0 +1,2 @@
+export declare const OpenSearchDomainsSync: import("../sync.js").Sync;
+//# sourceMappingURL=domains.d.ts.map

package/dist/esm/syncs/opensearch/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,qBAAqB,2BA8CjC,CAAA"}

package/dist/esm/syncs/opensearch/domains.js

@@ -0,0 +1,45 @@
+import { DescribeDomainCommand, ListDomainNamesCommand, ListTagsCommand, OpenSearchClient } from '@aws-sdk/client-opensearch';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { parseIfPresent } from '../../utils/json.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+function domainArn(domainName, region, accountId, partition) {
+    return `arn:${partition}:es:${region}:${accountId}:domain/${domainName}`;
+}
+export const OpenSearchDomainsSync = createTypedSyncOperation('es', 'domains', createResourceSyncType({
+    client: OpenSearchClient,
+    command: ListDomainNamesCommand,
+    key: 'DomainNames',
+    paginationConfig: '::no-pagination::',
+    resourceTypeParts: (accountId, region) => ({
+        service: 'es', // OpenSearch domains use 'es' service in ARNs
+        resourceType: 'domain',
+        account: accountId,
+        region: region
+    }),
+    extraFields: {
+        domainDetails: async (client, domain, accountId, region, partition) => {
+            return runAndCatch404(async () => {
+                const result = await client.send(new DescribeDomainCommand({ DomainName: domain.DomainName }));
+                return result.DomainStatus;
+            });
+        },
+        tags: async (client, domain, accountId, region, partition) => {
+            return runAndCatch404(async () => {
+                const tagResult = await client.send(new ListTagsCommand({
+                    ARN: domainArn(domain.DomainName, region, accountId, partition)
+                }));
+                return tagResult.TagList;
+            });
+        }
+    },
+    tags: (domain) => domain.extraFields.tags,
+    arn: (domain, region, accountId, partition) => domainArn(domain.DomainName, region, accountId, partition),
+    results: (domain) => ({
+        metadata: {
+            name: domain.DomainName,
+            keyId: domain.extraFields.domainDetails?.EncryptionAtRestOptions?.KmsKeyId
+        },
+        policy: parseIfPresent(domain.extraFields.domainDetails?.AccessPolicies)
+    })
+}));
+//# sourceMappingURL=domains.js.map

package/dist/esm/syncs/opensearch/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../../src/syncs/opensearch/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,SAAS,SAAS,CAChB,UAAkB,EAClB,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,OAAO,OAAO,SAAS,OAAO,MAAM,IAAI,SAAS,WAAW,UAAU,EAAE,CAAA;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAC3D,IAAI,EACJ,SAAS,EACT,sBAAsB,CAAC;IACrB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,sBAAsB;IAC/B,GAAG,EAAE,aAAa;IAClB,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,8CAA8C;QAC7D,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACpE,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAC7D,CAAA;gBACD,OAAO,MAAM,CAAC,YAAY,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAC3D,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,IAAI,eAAe,CAAC;oBAClB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;iBACjE,CAAC,CACH,CAAA;gBACD,OAAO,SAAS,CAAC,OAAO,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;IACzC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,uBAAuB,EAAE,QAAQ;SAC3E;QAED,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC;KACzE,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,gBAAgB,CAAA;AAiC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAyDhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,gBAAgB,CAAA;AAkC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA0DhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/esm/syncs/syncMap.js

@@ -15,6 +15,7 @@ import { KafkaClustersSync } from './kafka/clusters.js';
 import { KinesisDataStreamsSync } from './kinesis/dataStreams.js';
 import { KeySync } from './kms/key.js';
 import { LambdaLayerVersionsSync, LambdaSync } from './lambda/lambda.js';
+import { OpenSearchDomainsSync } from './opensearch/domains.js';
 import { OrganizationSync } from './organizations/organizations.js';
 import { RamResourcesSync } from './ram/ramShares.js';
 import { S3AccessPointsSync } from './s3/accessPoints.js';
@@ -49,6 +50,7 @@ const allSyncs = [
     KeySync,
     LambdaSync,
     LambdaLayerVersionsSync,
+    OpenSearchDomainsSync,
     OrganizationSync,
     RamResourcesSync,
     RestApisSync,

package/dist/esm/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,GAAG,QAAQ;IACX,sBAAsB;IACtB,yBAAyB;IACzB,oBAAoB;IACpB,GAAG,qBAAqB;IACxB,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,sBAAsB;IACtB,OAAO;IACP,UAAU;IACV,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,kBAAkB;IAClB,sBAAsB;IACtB,2BAA2B;IAC3B,0BAA0B;IAC1B,6BAA6B;IAC7B,8BAA8B;IAC9B,0BAA0B;IAC1B,qBAAqB;IACrB,kBAAkB;IAClB,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,GAAG,QAAQ;IACX,sBAAsB;IACtB,yBAAyB;IACzB,oBAAoB;IACpB,GAAG,qBAAqB;IACxB,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,sBAAsB;IACtB,OAAO;IACP,UAAU;IACV,uBAAuB;IACvB,qBAAqB;IACrB,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,kBAAkB;IAClB,sBAAsB;IACtB,2BAA2B;IAC3B,0BAA0B;IAC1B,6BAA6B;IAC7B,8BAA8B;IAC9B,0BAA0B;IAC1B,qBAAqB;IACrB,kBAAkB;IAClB,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-collect",
-  "version": "0.1.129",
+  "version": "0.1.131",
   "description": "Collect IAM information from AWS Accounts",
   "repository": {
     "type": "git",
@@ -111,7 +111,6 @@
   },
   "dependencies": {
     "@aws-sdk/client-account": "^3.758.0",
-    "@aws-sdk/client-acm-pca": "^3.873.0",
     "@aws-sdk/client-api-gateway": "^3.799.0",
     "@aws-sdk/client-backup": "^3.812.0",
     "@aws-sdk/client-dynamodb": "^3.788.0",
@@ -127,6 +126,7 @@
     "@aws-sdk/client-kinesis": "^3.873.0",
     "@aws-sdk/client-kms": "^3.782.0",
     "@aws-sdk/client-lambda": "^3.782.0",
+    "@aws-sdk/client-opensearch": "^3.882.0",
     "@aws-sdk/client-organizations": "^3.787.0",
     "@aws-sdk/client-ram": "^3.806.0",
     "@aws-sdk/client-s3": "^3.782.0",