@cloud-copilot/iam-collect 0.1.15 → 0.1.17

package/dist/esm/syncs/organizations/organizations.js

@@ -0,0 +1,339 @@
+import { DescribeOrganizationCommand, DescribePolicyCommand, DescribeResourcePolicyCommand, ListAccountsForParentCommand, ListOrganizationalUnitsForParentCommand, ListPoliciesCommand, ListPoliciesForTargetCommand, ListRootsCommand, ListTagsForResourceCommand, OrganizationsClient, PolicyType, PolicyTypeStatus } from '@aws-sdk/client-organizations';
+import { AwsClientPool } from '../../aws/ClientPool.js';
+import { runAndCatch404, runAndCatchAccessDenied } from '../../utils/client-tools.js';
+import { paginateResource } from '../typedSync.js';
+export const OrganizationSync = {
+    awsService: 'organizations',
+    name: 'organization',
+    global: true,
+    execute: async function (accountId, region, credentials, storage, endpoint, syncOptions) {
+        var _a;
+        const organizationClient = AwsClientPool.defaultInstance.client(OrganizationsClient, credentials, region, endpoint);
+        const organization = await getOrganizationDetails(organizationClient);
+        if (!organization) {
+            return;
+        }
+        const organizationId = organization.Id;
+        const root = await getOrganizationRoot(organizationClient);
+        if (!root) {
+            return;
+        }
+        const features = root.PolicyTypes?.reduce((acc, type) => {
+            acc[type.Type] = type.Status === PolicyTypeStatus.ENABLED;
+            return acc;
+        }, {}) || {};
+        const scpsEnabled = !!features[PolicyType.SERVICE_CONTROL_POLICY];
+        const rcpsEnabled = !!features[PolicyType.RESOURCE_CONTROL_POLICY];
+        const allAccounts = {};
+        const allOus = {};
+        const ouDetails = {};
+        allOus[root.Id] = {
+            parent: undefined,
+            scps: await getPoliciesForTarget(organizationClient, root.Id, PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+            rcps: await getPoliciesForTarget(organizationClient, root.Id, PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled)
+        };
+        ouDetails[root.Id] = await getOuDetails(organizationClient, root);
+        const structure = {
+            [root.Id]: {
+                children: {},
+                accounts: []
+            }
+        };
+        // const children = await getChildOrgUnits(organizationClient, root.Id!)
+        const parents = [structure];
+        let parent = parents.pop();
+        while (parent) {
+            for (const key in parent) {
+                // Get structure information
+                const children = await getChildOrgUnits(organizationClient, key);
+                for (const child of children) {
+                    ouDetails[child.Id] = await getOuDetails(organizationClient, child);
+                    const childId = child.Id;
+                    allOus[childId] = {
+                        parent: key,
+                        scps: await getPoliciesForTarget(organizationClient, root.Id, PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+                        rcps: await getPoliciesForTarget(organizationClient, root.Id, PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled)
+                    };
+                    (_a = parent[key]).children || (_a.children = {});
+                    parent[key].children[childId] = {
+                        children: undefined,
+                        accounts: undefined
+                    };
+                }
+                const accounts = await getAccountsForParent(organizationClient, key);
+                if (accounts.length > 0) {
+                    parent[key].accounts = [];
+                }
+                for (const account of accounts) {
+                    let accountTags = await getTagsForAccount(organizationClient, account.Id);
+                    if (Object.keys(accountTags).length === 0) {
+                        accountTags = undefined;
+                    }
+                    allAccounts[account.Id] = {
+                        ou: key,
+                        scps: await getPoliciesForTarget(organizationClient, account.Id, PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+                        rcps: await getPoliciesForTarget(organizationClient, account.Id, PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled),
+                        tags: accountTags
+                    };
+                    parent[key].accounts.push(account.Arn);
+                }
+                // parent[key].accounts = accounts.map((a) => a.Arn!)
+                if (parent[key].children) {
+                    parents.push(parent[key].children);
+                }
+            }
+            parent = parents.pop();
+        }
+        storage.saveOrganizationMetadata(organizationId, 'structure', structure);
+        storage.saveOrganizationMetadata(organizationId, 'metadata', {
+            id: organizationId,
+            arn: organization.Arn,
+            rootOu: root.Id,
+            rootAccountArn: organization.MasterAccountArn,
+            rootAccountId: organization.MasterAccountId,
+            features
+        });
+        storage.saveOrganizationMetadata(organizationId, 'accounts', allAccounts);
+        storage.saveOrganizationMetadata(organizationId, 'ous', allOus);
+        // Sync OUs
+        const persistedOus = await storage.listOrganizationalUnits(organizationId);
+        const newOus = new Set(Object.keys(ouDetails));
+        const deletedOus = persistedOus.filter((ou) => !newOus.has(ou));
+        for (const ouToDelete of deletedOus) {
+            await storage.deleteOrganizationalUnit(organizationId, ouToDelete);
+        }
+        for (const ouId of Object.keys(ouDetails)) {
+            const ou = ouDetails[ouId];
+            await storage.saveOrganizationalUnitMetadata(organizationId, ouId, 'metadata', ou.metadata);
+            await storage.saveOrganizationalUnitMetadata(organizationId, ouId, 'tags', ou.tags);
+        }
+        // Sync policies
+        await syncPolicies(organizationId, organizationClient, storage, PolicyType.SERVICE_CONTROL_POLICY, 'scps', scpsEnabled);
+        await syncPolicies(organizationId, organizationClient, storage, PolicyType.RESOURCE_CONTROL_POLICY, 'rcps', rcpsEnabled);
+        // Sync organization resource policy
+        await syncOrganizationResourcePolicy(organizationClient, storage, organizationId);
+    }
+};
+/**
+ * Get the details of an organization or an account.
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the details of the organization the account belongs to or undefined if the account is not part of an organization or does not have permission.
+ */
+export async function getOrganizationDetails(client) {
+    const command = new DescribeOrganizationCommand();
+    try {
+        const response = await runAndCatch404(() => client.send(command));
+        if (!response) {
+            return undefined;
+        }
+        return response.Organization;
+    }
+    catch (e) {
+        if (e.name === 'AWSOrganizationsNotInUseException') {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * Get the root Organizational Unit for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the root Organizational Unit for the organization if it exists
+ */
+export async function getOrganizationRoot(client) {
+    return runAndCatchAccessDenied(async () => {
+        const roots = await paginateResource(client, ListRootsCommand, 'Roots', {
+            inputKey: 'NextToken',
+            outputKey: 'NextToken'
+        }, {});
+        return roots.at(0);
+    });
+}
+/**
+ * Get the tags for an Organizational Unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param ouId The AWS id of the Organizational Unit to get the tags for
+ * @returns The tags for the Organizational Unit
+ */
+export async function getTagsForOu(client, ouId) {
+    return getTags(client, ouId);
+}
+/**
+ * Get the tags for an account
+ * @param client The OrganizationsClient to use
+ * @param accountId The AWS id of the account to get the tags for
+ * @returns The tags for the account
+ */
+export async function getTagsForAccount(client, accountId) {
+    return getTags(client, accountId);
+}
+/**
+ * Get the tags for a resource in AWS Organizations
+ *
+ * @param client The OrganizationsClient to use
+ * @param resourceId The AWS id of the resource to get the tags for
+ * @returns The tags for the resource
+ */
+async function getTags(client, resourceId) {
+    const command = new ListTagsForResourceCommand({ ResourceId: resourceId });
+    const response = await runAndCatch404(() => client.send(command));
+    if (!response) {
+        return {};
+    }
+    return (response.Tags || [])?.reduce((acc, tag) => {
+        acc[tag.Key] = tag.Value;
+        return acc;
+    }, {});
+}
+/**
+ * Get the organizational units for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The organizational units directly under the parent
+ */
+export async function getChildOrgUnits(client, parentId) {
+    return await paginateResource(client, ListOrganizationalUnitsForParentCommand, 'OrganizationalUnits', { inputKey: 'NextToken', outputKey: 'NextToken' }, { ParentId: parentId });
+}
+/**
+ * Get the accounts for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The accounts directly under the parent
+ */
+export async function getAccountsForParent(client, parentId) {
+    const accounts = await paginateResource(client, ListAccountsForParentCommand, 'Accounts', {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    }, { ParentId: parentId });
+    return accounts;
+}
+/**
+ * Get the details of an Organizational Unit (OU).
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param ou the Organizational Unit to get the details for
+ * @returns an object containing the OU's tags and metadata
+ */
+async function getOuDetails(organizationClient, ou) {
+    return {
+        tags: await getTagsForOu(organizationClient, ou.Id),
+        metadata: {
+            arn: ou.Arn,
+            name: ou.Name
+        }
+    };
+}
+/**
+ * Get the policies for a target
+ *
+ * @param client the OrganizationsClient to use
+ * @param targetId the id of the target to get the policies for
+ * @param policyType the type of policy to get
+ * @param enabled whether the policy type is enabled
+ * @returns the Arns of the policies for the target
+ */
+async function getPoliciesForTarget(client, targetId, policyType, enabled) {
+    if (!enabled) {
+        return [];
+    }
+    const policies = await paginateResource(client, ListPoliciesForTargetCommand, 'Policies', { inputKey: 'NextToken', outputKey: 'NextToken' }, {
+        TargetId: targetId,
+        Filter: policyType
+    });
+    return policies.map((policy) => policy.Arn);
+}
+/**
+ * Sync the policies for an organization and a specific policy type.
+ *
+ * @param organizationId the id of the organization to sync policies for
+ * @param organizationClient the OrganizationsClient to use
+ * @param storage the AwsIamStore to use for persistence
+ * @param policyType the type of policy to sync (e.g., SERVICE_CONTROL_POLICY, RESOURCE_CONTROL_POLICY)
+ * @param fileType the type of policy file to sync to storage (e.g., 'scps', 'rcps')
+ * @param enabled whether the policy type is enabled in the organization
+ */
+async function syncPolicies(organizationId, organizationClient, storage, policyType, fileType, enabled) {
+    const existingPolicies = await storage.listOrganizationPolicies(organizationId, fileType);
+    if (!enabled) {
+        for (const policyId of existingPolicies) {
+            await storage.deleteOrganizationPolicy(organizationId, fileType, policyId);
+        }
+        return;
+    }
+    const policies = await paginateResource(organizationClient, ListPoliciesCommand, 'Policies', { inputKey: 'NextToken', outputKey: 'NextToken' }, {
+        Filter: policyType
+    });
+    const newPolicyIds = new Set(policies.map((p) => p.Id));
+    const policiesToDelete = existingPolicies.filter((id) => !newPolicyIds.has(id));
+    for (const policyToDelete of policiesToDelete) {
+        await storage.deleteOrganizationPolicy(organizationId, fileType, policyToDelete);
+    }
+    for (const policy of policies) {
+        const metadata = {
+            arn: policy.Arn,
+            name: policy.Name,
+            description: policy.Description,
+            awsManaged: policy.AwsManaged
+        };
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'metadata', metadata);
+        const content = await getPolicyContent(organizationClient, policy.Id);
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'policy', content);
+        const tags = await getTags(organizationClient, policy.Id);
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'tags', tags);
+    }
+}
+/**
+ * Get the content of a policy by its ID.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param policyId the ID of the policy to get the content for
+ * @returns the content of the policy as a parsed JSON object, or undefined if the policy does not exist or has no content
+ */
+async function getPolicyContent(organizationClient, policyId) {
+    const command = new DescribePolicyCommand({ PolicyId: policyId });
+    const response = await runAndCatch404(() => organizationClient.send(command));
+    if (response?.Policy?.Content) {
+        return JSON.parse(response.Policy.Content);
+    }
+    return undefined;
+}
+/**
+ * Sync the organization resource policy.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param storage the AwsIamStore to use for persistence
+ * @param organizationId the id of the organization to sync the resource policy for
+ */
+async function syncOrganizationResourcePolicy(organizationClient, storage, organizationId) {
+    const policy = await getOrganizationResourcePolicy(organizationClient, organizationId);
+    await storage.saveOrganizationMetadata(organizationId, 'policy', policy);
+}
+/**
+ * Get the resource policy for an organization.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param organizationId the id of the organization to get the resource policy for
+ * @returns the resource policy as a parsed JSON object, or undefined if the policy does not exist or has no content
+ */
+async function getOrganizationResourcePolicy(organizationClient, organizationId) {
+    const command = new DescribeResourcePolicyCommand({ PolicyId: organizationId });
+    try {
+        const response = await organizationClient.send(command);
+        if (response?.ResourcePolicy?.Content) {
+            return JSON.parse(response.ResourcePolicy.Content);
+        }
+        return undefined;
+    }
+    catch (error) {
+        if (error.name === 'ResourcePolicyNotFoundException') {
+            return undefined;
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=organizations.js.map

package/dist/esm/syncs/organizations/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../../../src/syncs/organizations/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,6BAA6B,EAC7B,4BAA4B,EAC5B,uCAAuC,EACvC,mBAAmB,EACnB,4BAA4B,EAC5B,gBAAgB,EAChB,0BAA0B,EAG1B,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAEjB,MAAM,+BAA+B,CAAA;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAErF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AA8BlD,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,UAAU,EAAE,eAAe;IAC3B,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK,WACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB;;QAExB,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAC7D,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;QACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QACD,MAAM,cAAc,GAAG,YAAY,CAAC,EAAG,CAAA;QAEvC,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,GAAG,CAAC,IAAI,CAAC,IAAK,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,OAAO,CAAA;YAC1D,OAAO,GAAG,CAAA;QACZ,CAAC,EAAE,EAAc,CAAC,IAAK,EAAe,CAAA;QAExC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAA;QACjE,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAA;QAElE,MAAM,WAAW,GAAsB,EAAE,CAAA;QACzC,MAAM,MAAM,GAOR,EAAE,CAAA;QAEN,MAAM,SAAS,GAA8B,EAAE,CAAA;QAE/C,MAAM,CAAC,IAAI,CAAC,EAAG,CAAC,GAAG;YACjB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;YACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;SACF,CAAA;QACD,SAAS,CAAC,IAAI,CAAC,EAAG,CAAC,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAA;QAElE,MAAM,SAAS,GAAiB;YAC9B,CAAC,IAAI,CAAC,EAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,EAAE;aACb;SACF,CAAA;QAED,wEAAwE;QACxE,MAAM,OAAO,GAAmB,CAAC,SAAS,CAAC,CAAA;QAE3C,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;QAC1B,OAAO,MAAM,EAAE,CAAC;YACd,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,4BAA4B;gBAC5B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;gBAChE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7B,SAAS,CAAC,KAAK,CAAC,EAAG,CAAC,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;oBAEpE,MAAM,OAAO,GAAG,KAAK,CAAC,EAAG,CAAA;oBACzB,MAAM,CAAC,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;wBACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;qBACF,CAAA;oBACD,MAAA,MAAM,CAAC,GAAG,CAAC,EAAC,QAAQ,QAAR,QAAQ,GAAK,EAAE,EAAA;oBAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;wBAC9B,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,SAAS;qBACpB,CAAA;gBACH,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;gBACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAA;gBAC3B,CAAC;gBACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,WAAW,GAAuC,MAAM,iBAAiB,CAC3E,kBAAkB,EAClB,OAAO,CAAC,EAAG,CACZ,CAAA;oBACD,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC1C,WAAW,GAAG,SAAS,CAAA;oBACzB,CAAC;oBACD,WAAW,CAAC,OAAO,CAAC,EAAG,CAAC,GAAG;wBACzB,EAAE,EAAE,GAAG;wBACP,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,OAAO,CAAC,EAAG,EACX,UAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;wBACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,OAAO,CAAC,EAAG,EACX,UAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;wBACD,IAAI,EAAE,WAAW;qBAClB,CAAA;oBACD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC,CAAA;gBAC1C,CAAC;gBAED,qDAAqD;gBACrD,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;YAED,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;QACxB,CAAC;QAED,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QACxE,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,EAAE;YAC3D,EAAE,EAAE,cAAc;YAClB,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,cAAc,EAAE,YAAY,CAAC,gBAAgB;YAC7C,aAAa,EAAE,YAAY,CAAC,eAAe;YAC3C,QAAQ;SACT,CAAC,CAAA;QACF,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;QACzE,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QAE/D,WAAW;QACX,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QACpE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC1B,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAA;YAC3F,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QACrF,CAAC;QAED,gBAAgB;QAChB,MAAM,YAAY,CAChB,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,UAAU,CAAC,sBAAsB,EACjC,MAAM,EACN,WAAW,CACZ,CAAA;QAED,MAAM,YAAY,CAChB,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,UAAU,CAAC,uBAAuB,EAClC,MAAM,EACN,WAAW,CACZ,CAAA;QAED,oCAAoC;QACpC,MAAM,8BAA8B,CAAC,kBAAkB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;IACnF,CAAC;CACF,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,2BAA2B,EAAE,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,QAAQ,CAAC,YAAY,CAAA;IAC9B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,KAAK,mCAAmC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAA2B;IACnE,OAAO,uBAAuB,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAClC,MAAM,EACN,gBAAgB,EAChB,OAAO,EACP;YACE,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;SACvB,EACD,EAAE,CACH,CAAA;QACD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA2B,EAC3B,IAAY;IAEZ,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA2B,EAC3B,SAAiB;IAEjB,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CACpB,MAA2B,EAC3B,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;IAC1E,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAClC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,GAAG,CAAC,GAAG,CAAC,GAAI,CAAC,GAAG,GAAG,CAAC,KAAM,CAAA;QAC1B,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA2B,EAC3B,QAAgB;IAEhB,OAAO,MAAM,gBAAgB,CAC3B,MAAM,EACN,uCAAuC,EACvC,qBAAqB,EACrB,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA2B,EAC3B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,MAAM,EACN,4BAA4B,EAC5B,UAAU,EACV;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB,EACD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,kBAAuC,EACvC,EAAsB;IAEtB,OAAO;QACL,IAAI,EAAE,MAAM,YAAY,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAG,CAAC;QACpD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,CAAC,GAAI;YACZ,IAAI,EAAE,EAAE,CAAC,IAAK;SACf;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAA2B,EAC3B,QAAgB,EAChB,UAAsB,EACtB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,MAAM,EACN,4BAA4B,EAC5B,UAAU,EACV,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD;QACE,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,UAAU;KACnB,CACF,CAAA;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CACzB,cAAsB,EACtB,kBAAuC,EACvC,OAAoB,EACpB,UAAsB,EACtB,QAAgC,EAChC,OAAgB;IAEhB,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IACzF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC5E,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD;QACE,MAAM,EAAE,UAAU;KACnB,CACF,CAAA;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAA;IACxD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/E,KAAK,MAAM,cAAc,IAAI,gBAAgB,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;IAClF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAA;QACD,MAAM,OAAO,CAAC,8BAA8B,CAC1C,cAAc,EACd,QAAQ,EACR,MAAM,CAAC,EAAG,EACV,UAAU,EACV,QAAQ,CACT,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACtE,MAAM,OAAO,CAAC,8BAA8B,CAC1C,cAAc,EACd,QAAQ,EACR,MAAM,CAAC,EAAG,EACV,QAAQ,EACR,OAAO,CACR,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC1D,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,kBAAuC,EACvC,QAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7E,IAAI,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAC3C,kBAAuC,EACvC,OAAoB,EACpB,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACtF,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,kBAAuC,EACvC,cAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,6BAA6B,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;IAC/E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACpD,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YACrD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/esm/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAK3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAsBhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAM3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA4BhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/esm/syncs/syncMap.js

@@ -1,8 +1,15 @@
 import { AuthorizationDetailsSync } from './iam/authorizationDetails.js';
 import { KeySync } from './kms/key.js';
 import { LambdaSync } from './lambda/lambda.js';
+import { OrganizationSync } from './organizations/organizations.js';
 import { S3GeneralPurposeBucketSync } from './s3/buckets.js';
-const allSyncs = [AuthorizationDetailsSync, KeySync, LambdaSync, S3GeneralPurposeBucketSync];
+const allSyncs = [
+    AuthorizationDetailsSync,
+    KeySync,
+    LambdaSync,
+    OrganizationSync,
+    S3GeneralPurposeBucketSync
+];
 const syncMap = new Map();
 for (const sync of allSyncs) {
     const service = sync.awsService;

package/dist/esm/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAG5D,MAAM,QAAQ,GAAG,CAAC,wBAAwB,EAAE,OAAO,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAA;AAE5F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAG5D,MAAM,QAAQ,GAAG;IACf,wBAAwB;IACxB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,0BAA0B;CAC3B,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-collect",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Collect IAM information from AWS Accounts",
   "repository": {
     "type": "git",
@@ -112,6 +112,7 @@
     "@aws-sdk/client-iam": "^3.777.0",
     "@aws-sdk/client-kms": "^3.782.0",
     "@aws-sdk/client-lambda": "^3.782.0",
+    "@aws-sdk/client-organizations": "^3.787.0",
     "@aws-sdk/client-s3": "^3.782.0",
     "@aws-sdk/client-sts": "^3.772.0",
     "@aws-sdk/credential-providers": "^3.772.0",