@cloud-copilot/iam-collect 0.1.131 → 0.1.133

package/dist/esm/awsConfigClients/clients/AwsConfigS3ControlClient.js

@@ -0,0 +1,289 @@
+import { GetAccessPointCommand, GetAccessPointForObjectLambdaCommand, GetAccessPointPolicyCommand, GetAccessPointPolicyForObjectLambdaCommand, GetBucketPolicyCommand, GetBucketTaggingCommand, GetMultiRegionAccessPointPolicyCommand, GetPublicAccessBlockCommand, ListAccessPointsCommand, ListAccessPointsForDirectoryBucketsCommand, ListAccessPointsForObjectLambdaCommand, ListMultiRegionAccessPointsCommand, ListRegionalBucketsCommand, ListTagsForResourceCommand, S3ControlClient } from '@aws-sdk/client-s3-control';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { stringifyIfPresent } from '../../utils/json.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config client for S3 Control operations.
+ *
+ * Supported Commands:
+ * - ListAccessPointsCommand: Returns access point listing from Config using AWS::S3::AccessPoint
+ * - GetAccessPointCommand: Returns access point details from Config including alias, public access block config
+ * - GetPublicAccessBlockCommand: Returns account-level public access block configuration from Config
+ *
+ * Limitations:
+ * S3 access point policies, multi-region access point policies, and Object Lambda policies
+ * are not available in AWS Config. The Config service tracks access point configuration
+ * but not access policies. Most policy-related commands return undefined/empty responses.
+ */
+export class AwsConfigS3ControlClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    registerCommands() {
+        this.registerCommand(AwsConfigGetAccessPointCommand);
+        this.registerCommand(AwsConfigGetAccessPointPolicyCommand);
+        this.registerCommand(AwsConfigGetAccessPointForObjectLambdaCommand);
+        this.registerCommand(AwsConfigGetAccessPointPolicyForObjectLambdaCommand);
+        this.registerCommand(AwsConfigGetBucketPolicyCommand);
+        this.registerCommand(AwsConfigGetBucketTaggingCommand);
+        this.registerCommand(AwsConfigGetMultiRegionAccessPointPolicyCommand);
+        this.registerCommand(AwsConfigGetPublicAccessBlockCommand);
+        this.registerCommand(AwsConfigListAccessPointsCommand);
+        this.registerCommand(AwsConfigListAccessPointsForDirectoryBucketsCommand);
+        this.registerCommand(AwsConfigListAccessPointsForObjectLambdaCommand);
+        this.registerCommand(AwsConfigListMultiRegionAccessPointsCommand);
+        this.registerCommand(AwsConfigListRegionalBucketsCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+    }
+}
+AwsConfigS3ControlClient.clientName = S3ControlClient.name;
+/**
+ * Config-based implementation of S3Control ListAccessPointsCommand
+ * Uses AWS::S3::AccessPoint resource type from Config
+ */
+const AwsConfigListAccessPointsCommand = awsConfigCommand({
+    command: ListAccessPointsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.Name,
+        configuration.Bucket,
+        configuration.BucketAccountId,
+        configuration.NetworkOrigin,
+        configuration.VpcConfiguration.VpcId,
+        configuration.Policy,
+        configuration.Alias,
+        configuration.VpcConfiguration.VpcId,
+        configuration.PublicAccessBlockConfiguration.BlockPublicAcls,
+        configuration.PublicAccessBlockConfiguration.BlockPublicPolicy,
+        configuration.PublicAccessBlockConfiguration.IgnorePublicAcls,
+        configuration.PublicAccessBlockConfiguration.RestrictPublicBuckets,
+        resourceCreationTime
+      WHERE
+        resourceType = 'AWS::S3::AccessPoint'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const accessPoints = results?.map((resultString) => {
+            const { configItem, configuration } = parseConfigItem(resultString);
+            context.putCache(`ap#${configuration.Name}`, 'policy', configuration?.Policy);
+            context.putCache(`ap#${configuration.Name}`, 'details', { configItem, configuration });
+            return {
+                Name: configuration?.Name || configItem.resourceName, //keep
+                NetworkOrigin: configuration?.NetworkOrigin, // Keep
+                VpcConfiguration: configuration?.VpcConfiguration?.VpcId // Keep
+                    ? {
+                        VpcId: configuration.VpcConfiguration.VpcId
+                    }
+                    : undefined,
+                Bucket: configuration?.Bucket, // Keep
+                BucketAccountId: configuration?.BucketAccountId, // Keep
+                AccessPointArn: configItem.arn // Keep
+            };
+        }) || [];
+        return {
+            AccessPointList: accessPoints
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointCommand
+ * Uses AWS::S3::AccessPoint resource type from Config
+ */
+const AwsConfigGetAccessPointCommand = awsConfigCommand({
+    command: GetAccessPointCommand,
+    execute: async (input, context) => {
+        const { configItem, configuration } = context.getCache(`ap#${input.Name}`, 'details');
+        return {
+            Name: configuration?.Name || configItem.resourceName,
+            Bucket: configuration?.Bucket,
+            NetworkOrigin: configuration?.NetworkOrigin,
+            VpcConfiguration: configuration?.VpcConfiguration?.VpcId
+                ? {
+                    VpcId: configuration.VpcConfiguration.VpcId
+                }
+                : undefined,
+            PublicAccessBlockConfiguration: configuration?.PublicAccessBlockConfiguration
+                ? {
+                    BlockPublicAcls: configuration.PublicAccessBlockConfiguration.BlockPublicAcls,
+                    BlockPublicPolicy: configuration.PublicAccessBlockConfiguration.BlockPublicPolicy,
+                    IgnorePublicAcls: configuration.PublicAccessBlockConfiguration.IgnorePublicAcls,
+                    RestrictPublicBuckets: configuration.PublicAccessBlockConfiguration.RestrictPublicBuckets
+                }
+                : undefined,
+            CreationDate: configItem.resourceCreationTime
+                ? new Date(configItem.resourceCreationTime)
+                : undefined,
+            Alias: configuration?.Alias,
+            AccessPointArn: configItem.arn,
+            BucketAccountId: configuration?.BucketAccountId
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointPolicyCommand
+ * Returns undefined since access point policies are not available in Config
+ */
+const AwsConfigGetAccessPointPolicyCommand = awsConfigCommand({
+    command: GetAccessPointPolicyCommand,
+    execute: async (input, context) => {
+        const { Name, AccountId } = input;
+        if (!Name || !AccountId) {
+            throw new Error('Name and AccountId are required');
+        }
+        const policy = context.getCache(`ap#${Name}`, 'policy');
+        return {
+            Policy: stringifyIfPresent(policy)
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointForObjectLambdaCommand
+ * Returns minimal Object Lambda access point info since configuration is not available in Config
+ */
+const AwsConfigGetAccessPointForObjectLambdaCommand = awsConfigCommand({
+    command: GetAccessPointForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return minimal info since Object Lambda config is not tracked in Config
+        return { Name: input.Name };
+    }
+});
+/**
+ * Config-based implementation of S3Control GetAccessPointPolicyForObjectLambdaCommand
+ * Returns undefined since Object Lambda access point policies are not available in Config
+ */
+const AwsConfigGetAccessPointPolicyForObjectLambdaCommand = awsConfigCommand({
+    command: GetAccessPointPolicyForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return undefined since Object Lambda policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetBucketPolicyCommand
+ * Returns undefined since Outpost bucket policies are not available in Config
+ */
+const AwsConfigGetBucketPolicyCommand = awsConfigCommand({
+    command: GetBucketPolicyCommand,
+    execute: async (input, context) => {
+        // Return undefined since Outpost bucket policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetBucketTaggingCommand
+ * Returns undefined since Outpost bucket tags are not available in Config
+ */
+const AwsConfigGetBucketTaggingCommand = awsConfigCommand({
+    command: GetBucketTaggingCommand,
+    execute: async (input, context) => {
+        // Return undefined since Outpost bucket tags are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetMultiRegionAccessPointPolicyCommand
+ * Returns undefined since multi-region access point policies are not available in Config
+ */
+const AwsConfigGetMultiRegionAccessPointPolicyCommand = awsConfigCommand({
+    command: GetMultiRegionAccessPointPolicyCommand,
+    execute: async (input, context) => {
+        // Return undefined since MRAP policies are not tracked in Config
+        return undefined;
+    }
+});
+/**
+ * Config-based implementation of S3Control GetPublicAccessBlockCommand
+ * Uses AWS::S3::AccountPublicAccessBlock resource type from Config
+ */
+const AwsConfigGetPublicAccessBlockCommand = awsConfigCommand({
+    command: GetPublicAccessBlockCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        configuration.blockPublicAcls,
+        configuration.blockPublicPolicy,
+        configuration.ignorePublicAcls,
+        configuration.restrictPublicBuckets
+      WHERE
+        resourceType = 'AWS::S3::AccountPublicAccessBlock'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        if (results.length === 0) {
+            return {};
+        }
+        const { configuration } = parseConfigItem(results[0]);
+        return {
+            PublicAccessBlockConfiguration: {
+                BlockPublicAcls: configuration?.blockPublicAcls,
+                BlockPublicPolicy: configuration?.blockPublicPolicy,
+                IgnorePublicAcls: configuration?.ignorePublicAcls,
+                RestrictPublicBuckets: configuration?.restrictPublicBuckets
+            }
+        };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListAccessPointsForDirectoryBucketsCommand
+ * Returns empty array since directory bucket access point listings are not available in Config
+ */
+const AwsConfigListAccessPointsForDirectoryBucketsCommand = awsConfigCommand({
+    command: ListAccessPointsForDirectoryBucketsCommand,
+    execute: async (input, context) => {
+        // Return empty array since directory bucket access points are not tracked in Config
+        return { AccessPointList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListAccessPointsForObjectLambdaCommand
+ * Returns empty array since Object Lambda access point listings are not available in Config
+ */
+const AwsConfigListAccessPointsForObjectLambdaCommand = awsConfigCommand({
+    command: ListAccessPointsForObjectLambdaCommand,
+    execute: async (input, context) => {
+        // Return empty array since Object Lambda access points are not tracked in Config
+        return { ObjectLambdaAccessPointList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListMultiRegionAccessPointsCommand
+ * Returns empty array since multi-region access point listings are not available in Config
+ */
+const AwsConfigListMultiRegionAccessPointsCommand = awsConfigCommand({
+    command: ListMultiRegionAccessPointsCommand,
+    execute: async (input, context) => {
+        // Return empty array since MRAPs are not tracked in Config
+        return { AccessPoints: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListRegionalBucketsCommand
+ * Returns empty array since regional bucket listings are not available in Config
+ */
+const AwsConfigListRegionalBucketsCommand = awsConfigCommand({
+    command: ListRegionalBucketsCommand,
+    execute: async (input, context) => {
+        // Return empty array since regional buckets are not tracked in Config
+        return { RegionalBucketList: [] };
+    }
+});
+/**
+ * Config-based implementation of S3Control ListTagsForResourceCommand
+ * Returns empty array since resource tags are not available in Config for policy analysis
+ */
+const AwsConfigListTagsForResourceCommand = awsConfigCommand({
+    command: ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        // Return empty array since resource tags are not tracked in Config
+        return { Tags: [] };
+    }
+});
+//# sourceMappingURL=AwsConfigS3ControlClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigS3ControlClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigS3ControlClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigS3ControlClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,oCAAoC,EACpC,2BAA2B,EAC3B,0CAA0C,EAC1C,sBAAsB,EACtB,uBAAuB,EACvB,sCAAsC,EACtC,2BAA2B,EAC3B,uBAAuB,EACvB,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,0BAA0B,EAC1B,0BAA0B,EAC1B,eAAe,EAChB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAA0B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACvF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAyB,SAAQ,cAAsC;IAGlF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAES,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAA;QACpD,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,6CAA6C,CAAC,CAAA;QACnE,IAAI,CAAC,eAAe,CAAC,mDAAmD,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe,CAAC,+BAA+B,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,+CAA+C,CAAC,CAAA;QACrE,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,mDAAmD,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe,CAAC,+CAA+C,CAAC,CAAA;QACrE,IAAI,CAAC,eAAe,CAAC,2CAA2C,CAAC,CAAA;QACjE,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;IAC3D,CAAC;;AA3Be,mCAAU,GAAG,eAAe,CAAC,IAAI,CAAA;AA8BnD;;;GAGG;AACH,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IACxD,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;2BAoBS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,YAAY,GAChB,OAAO,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;YACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;YAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;YAEtF,OAAO;gBACL,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,UAAU,CAAC,YAAY,EAAE,MAAM;gBAC5D,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO;gBACpD,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO;oBAC9D,CAAC,CAAC;wBACE,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK;qBAC5C;oBACH,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;gBACtC,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO;gBACxD,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO;aACvC,CAAA;QACH,CAAC,CAAC,IAAI,EAAE,CAAA;QAEV,OAAO;YACL,eAAe,EAAE,YAAY;SAC9B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,8BAA8B,GAAG,gBAAgB,CAAC;IACtD,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;QAErF,OAAO;YACL,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,UAAU,CAAC,YAAY;YACpD,MAAM,EAAE,aAAa,EAAE,MAAM;YAC7B,aAAa,EAAE,aAAa,EAAE,aAAa;YAC3C,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK;gBACtD,CAAC,CAAC;oBACE,KAAK,EAAE,aAAa,CAAC,gBAAgB,CAAC,KAAK;iBAC5C;gBACH,CAAC,CAAC,SAAS;YACb,8BAA8B,EAAE,aAAa,EAAE,8BAA8B;gBAC3E,CAAC,CAAC;oBACE,eAAe,EAAE,aAAa,CAAC,8BAA8B,CAAC,eAAe;oBAC7E,iBAAiB,EAAE,aAAa,CAAC,8BAA8B,CAAC,iBAAiB;oBACjF,gBAAgB,EAAE,aAAa,CAAC,8BAA8B,CAAC,gBAAgB;oBAC/E,qBAAqB,EACnB,aAAa,CAAC,8BAA8B,CAAC,qBAAqB;iBACrE;gBACH,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,UAAU,CAAC,oBAAoB;gBAC3C,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;gBAC3C,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,aAAa,EAAE,KAAK;YAC3B,cAAc,EAAE,UAAU,CAAC,GAAG;YAC9B,eAAe,EAAE,aAAa,EAAE,eAAe;SAChD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,oCAAoC,GAAG,gBAAgB,CAAC;IAC5D,OAAO,EAAE,2BAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QAEjC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvD,OAAO;YACL,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACnC,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,6CAA6C,GAAG,gBAAgB,CAAC;IACrE,OAAO,EAAE,oCAAoC;IAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,0EAA0E;QAC1E,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mDAAmD,GAAG,gBAAgB,CAAC;IAC3E,OAAO,EAAE,0CAA0C;IACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,0EAA0E;QAC1E,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+BAA+B,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2EAA2E;QAC3E,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;IACxD,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,uEAAuE;QACvE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+CAA+C,GAAG,gBAAgB,CAAC;IACvE,OAAO,EAAE,sCAAsC;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,iEAAiE;QACjE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,oCAAoC,GAAG,gBAAgB,CAAC;IAC5D,OAAO,EAAE,2BAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;2BAQS,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAErD,OAAO;YACL,8BAA8B,EAAE;gBAC9B,eAAe,EAAE,aAAa,EAAE,eAAe;gBAC/C,iBAAiB,EAAE,aAAa,EAAE,iBAAiB;gBACnD,gBAAgB,EAAE,aAAa,EAAE,gBAAgB;gBACjD,qBAAqB,EAAE,aAAa,EAAE,qBAAqB;aAC5D;SACF,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mDAAmD,GAAG,gBAAgB,CAAC;IAC3E,OAAO,EAAE,0CAA0C;IACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,oFAAoF;QACpF,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;IAChC,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,+CAA+C,GAAG,gBAAgB,CAAC;IACvE,OAAO,EAAE,sCAAsC;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,iFAAiF;QACjF,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAAA;IAC5C,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,2CAA2C,GAAG,gBAAgB,CAAC;IACnE,OAAO,EAAE,kCAAkC;IAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,2DAA2D;QAC3D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAA;IAC7B,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAC3D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,sEAAsE;QACtE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAA;IACnC,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAC3D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,mEAAmE;QACnE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IACrB,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigSNSClient.d.ts

@@ -0,0 +1,18 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based SNS client implementation
+ */
+export declare class AwsConfigSNSClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all SNS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSNSClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigSNSClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSNSClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSNSClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigSNSClient.js

@@ -0,0 +1,110 @@
+import { GetTopicAttributesCommand, ListTagsForResourceCommand, ListTopicsCommand, SNSClient } from '@aws-sdk/client-sns';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based SNS client implementation
+ */
+export class AwsConfigSNSClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all SNS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetTopicAttributesCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+        this.registerCommand(AwsConfigListTopicsCommand);
+    }
+}
+AwsConfigSNSClient.clientName = SNSClient.name;
+/**
+ * Config-based implementation of SNS GetTopicAttributesCommand
+ *
+ * Maps SNS::Topic Config data to SNS GetTopicAttributesCommand output format.
+ * Returns only the attributes used by the sync: DisplayName, KmsMasterKeyId, Owner, Policy.
+ */
+const AwsConfigGetTopicAttributesCommand = awsConfigCommand({
+    command: GetTopicAttributesCommand,
+    execute: async (input, context) => {
+        const topicArn = input.TopicArn;
+        const configuration = context.getCache(topicArn, 'configuration');
+        // Return only the attributes used by the sync operations
+        const attributes = {};
+        if (configuration.DisplayName) {
+            attributes['DisplayName'] = configuration.DisplayName;
+        }
+        if (configuration.KmsMasterKeyId) {
+            attributes['KmsMasterKeyId'] = configuration.KmsMasterKeyId;
+        }
+        if (configuration.Owner) {
+            attributes['Owner'] = configuration.Owner;
+        }
+        if (configuration.Policy) {
+            attributes['Policy'] = configuration.Policy;
+        }
+        return {
+            Attributes: attributes
+        };
+    }
+});
+/**
+ * Config-based implementation of SNS ListTagsForResourceCommand
+ *
+ * Maps SNS::Topic Config tag data to SNS ListTagsForResourceCommand output format.
+ * Returns topic tags for resource identification and compliance analysis.
+ */
+const AwsConfigListTagsForResourceCommand = awsConfigCommand({
+    command: ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        const resourceArn = input.ResourceArn;
+        const tags = context.getCache(resourceArn, 'tags');
+        return {
+            Tags: tags || {}
+        };
+    }
+});
+/**
+ * Config-based implementation of SNS ListTopicsCommand
+ *
+ * Maps SNS::Topic Config data to SNS ListTopicsCommand output format.
+ * Returns topic listing for IAM analysis and resource discovery.
+ */
+const AwsConfigListTopicsCommand = awsConfigCommand({
+    command: ListTopicsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.TopicArn,
+        configuration.DisplayName,
+        configuration.KmsMasterKeyId,
+        configuration.Owner,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::SNS::Topic'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const topics = results.map((result) => {
+            const { configItem, configuration, tags } = parseConfigItem(result);
+            // Cache data that will be needed by other commands
+            context.putCache(configItem.arn, 'configuration', configuration);
+            context.putCache(configItem.arn, 'tags', tags);
+            return {
+                TopicArn: configItem.arn
+            };
+        });
+        return {
+            Topics: topics,
+            NextToken: undefined // Config doesn't provide pagination markers
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigSNSClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigSNSClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSNSClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSNSClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,EACjB,SAAS,EACV,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA0B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACvF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,cAAsC;IAG5E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;IAClD,CAAC;;AAnBe,6BAAU,GAAG,SAAS,CAAC,IAAI,CAAA;AAsB7C;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;IAC1D,OAAO,EAAE,yBAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAEjE,yDAAyD;QACzD,MAAM,UAAU,GAA2B,EAAE,CAAA;QAE7C,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9B,UAAU,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC,WAAW,CAAA;QACvD,CAAC;QACD,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC,cAAc,CAAA;QAC7D,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,KAAK,CAAA;QAC3C,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAA;QAC7C,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;SACvB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;IAC3D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAY,CAAA;QAEtC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAElD,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,EAAE;SACjB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IAClD,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;;2BAaS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YAEnE,mDAAmD;YACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAC,GAAG;aACzB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS,CAAC,4CAA4C;SAClE,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigSQSClient.d.ts

@@ -0,0 +1,18 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based SQS client implementation
+ */
+export declare class AwsConfigSQSClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all SQS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSQSClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigSQSClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSQSClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSQSClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}

package/dist/esm/awsConfigClients/clients/AwsConfigSQSClient.js

@@ -0,0 +1,101 @@
+import { GetQueueAttributesCommand, ListQueuesCommand, ListQueueTagsCommand, SQSClient } from '@aws-sdk/client-sqs';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+import { executeConfigQuery, parseConfigItem, resourceStatusWhereClause } from '../awsConfigUtils.js';
+/**
+ * AWS Config-based SQS client implementation
+ */
+export class AwsConfigSQSClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all SQS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetQueueAttributesCommand);
+        this.registerCommand(AwsConfigListQueueTagsCommand);
+        this.registerCommand(AwsConfigListQueuesCommand);
+    }
+}
+AwsConfigSQSClient.clientName = SQSClient.name;
+/**
+ * Config-based implementation of SQS ListQueuesCommand
+ *
+ * Maps SQS::Queue Config data to SQS ListQueuesCommand output format.
+ * Returns queue URL listing for IAM analysis and resource discovery.
+ */
+const AwsConfigListQueuesCommand = awsConfigCommand({
+    command: ListQueuesCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        arn,
+        resourceId,
+        resourceName,
+        configuration.QueueUrl,
+        configuration.QueueName,
+        configuration.KmsMasterKeyId,
+        configuration.Policy,
+        tags
+      WHERE
+        resourceType = 'AWS::SQS::Queue'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${resourceStatusWhereClause}
+    `;
+        const results = await executeConfigQuery(query, context);
+        const queueUrls = results.map((result) => {
+            const { configItem, configuration, tags } = parseConfigItem(result);
+            context.putCache(configItem.resourceId, 'configuration', configuration);
+            context.putCache(configItem.resourceId, 'tags', tags);
+            // Use QueueUrl from config if available, otherwise construct from QueueName
+            return configItem.resourceId;
+        });
+        return {
+            QueueUrls: queueUrls,
+            NextToken: undefined // Config doesn't provide pagination markers
+        };
+    }
+});
+/**
+ * Config-based implementation of SQS GetQueueAttributesCommand
+ *
+ * Maps SQS::Queue Config data to SQS GetQueueAttributesCommand output format.
+ * Returns only the attributes used by the sync: KmsMasterKeyId, Policy.
+ */
+const AwsConfigGetQueueAttributesCommand = awsConfigCommand({
+    command: GetQueueAttributesCommand,
+    execute: async (input, context) => {
+        const queueUrl = input.QueueUrl;
+        const configuration = context.getCache(queueUrl, 'configuration');
+        // Return only the attributes used by the sync operations
+        const attributes = {};
+        if (configuration.KmsMasterKeyId) {
+            attributes['KmsMasterKeyId'] = configuration.KmsMasterKeyId;
+        }
+        if (configuration.Policy) {
+            attributes['Policy'] = configuration.Policy;
+        }
+        return {
+            Attributes: attributes
+        };
+    }
+});
+/**
+ * Config-based implementation of SQS ListQueueTagsCommand
+ *
+ * Maps SQS::Queue Config tag data to SQS ListQueueTagsCommand output format.
+ * Returns queue tags for resource identification and compliance analysis.
+ */
+const AwsConfigListQueueTagsCommand = awsConfigCommand({
+    command: ListQueueTagsCommand,
+    execute: async (input, context) => {
+        const queueUrl = input.QueueUrl;
+        const value = context.getCache(queueUrl, 'tags');
+        return {
+            Tags: value || {}
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigSQSClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigSQSClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSQSClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSQSClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACV,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA0B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACvF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAE7B;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,cAAsC;IAG5E,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAA;QACnD,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;IAClD,CAAC;;AAnBe,6BAAU,GAAG,SAAS,CAAC,IAAI,CAAA;AAsB7C;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IAClD,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,yBAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YACnE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAErD,4EAA4E;YAC5E,OAAO,UAAU,CAAC,UAAU,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS,CAAC,4CAA4C;SAClE,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,gBAAgB,CAAC;IAC1D,OAAO,EAAE,yBAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAEjE,yDAAyD;QACzD,MAAM,UAAU,GAA2B,EAAE,CAAA;QAE7C,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC,cAAc,CAAA;QAC7D,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAA;QAC7C,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU;SACvB,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,6BAA6B,GAAG,gBAAgB,CAAC;IACrD,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAA;QAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAEhD,OAAO;YACL,IAAI,EAAE,KAAK,IAAI,EAAE;SAClB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/esm/awsConfigClients/clients/AwsConfigSecretsManagerClient.d.ts

@@ -0,0 +1,21 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * Secrets Manager client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigSecretsManagerClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all Secrets Manager command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigSecretsManagerClient.d.ts.map

package/dist/esm/awsConfigClients/clients/AwsConfigSecretsManagerClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSecretsManagerClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSecretsManagerClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAEvF;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACvF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAA4B;gBAGpD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAInC"}

package/dist/esm/awsConfigClients/clients/AwsConfigSecretsManagerClient.js

@@ -0,0 +1,46 @@
+import { GetResourcePolicyCommand, ListSecretsCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { awsConfigCommand } from '../AwsConfigClientContext.js';
+/**
+ * Secrets Manager client implementation using AWS Config as data source
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export class AwsConfigSecretsManagerClient extends AbstractClient {
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Secrets Manager command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListSecretsCommand);
+        this.registerCommand(AwsConfigGetResourcePolicyCommand);
+    }
+}
+AwsConfigSecretsManagerClient.clientName = SecretsManagerClient.name;
+/**
+ * Config-based implementation of Secrets Manager ListSecretsCommand
+ */
+const AwsConfigListSecretsCommand = awsConfigCommand({
+    command: ListSecretsCommand,
+    execute: async (input, context) => {
+        // Policy not available in Config, so return an empty list
+        return {
+            SecretList: []
+        };
+    }
+});
+/**
+ * Config-based implementation of Secrets Manager GetResourcePolicyCommand
+ */
+const AwsConfigGetResourcePolicyCommand = awsConfigCommand({
+    command: GetResourcePolicyCommand,
+    execute: async (input, context) => {
+        const { SecretId } = input;
+        // Policy not available in Config, so fetch directly from Secrets Manager
+        return {};
+    }
+});
+//# sourceMappingURL=AwsConfigSecretsManagerClient.js.map

package/dist/esm/awsConfigClients/clients/AwsConfigSecretsManagerClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigSecretsManagerClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigSecretsManagerClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,iCAAiC,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAA0B,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAEvF;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,cAAsC;IAGvF,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAA;QACjD,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC;;AAlBe,wCAAU,GAAG,oBAAoB,CAAC,IAAI,CAAA;AAqBxD;;GAEG;AACH,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;IACnD,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,0DAA0D;QAE1D,OAAO;YACL,UAAU,EAAE,EAAE;SACf,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;IACzD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;QAE1B,yEAAyE;QACzE,OAAO,EAAE,CAAA;IACX,CAAC;CACF,CAAC,CAAA"}