@cloud-copilot/iam-collect 0.1.34 → 0.1.35

package/README.md

@@ -57,6 +57,8 @@ This will download the IAM data from the current account to the `./iam-data` dir
 | iam           | OIDC Providers                    | arn, audiences, thumbprints, url, tags                                                                                 |
 | iam           | SAML Providers                    | arn, metadata document, uuid, private keys, valid until, tags                                                          |
 | dynamodb      | Tables                            | name, arn, region, tags, resource policy                                                                               |
+| ecr           | Repositories                      | name, arn, region, tags, resource policy, key id                                                                       |
+| ecr           | Registries                        | policy                                                                                                                 |
 | ec2           | VPC Endpoints                     | id, name, type, vpc, policy                                                                                            |
 | kms           | Keys                              | id, policy, tags                                                                                                       |
 | lambda        | Functions                         | name, role, tags, policy                                                                                               |

package/dist/cjs/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["dynamodb", "ec2", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/cjs/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oHAYd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,2HAad,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/cjs/services.js

@@ -7,6 +7,7 @@ exports.allServices = void 0;
 exports.allServices = [
     'dynamodb',
     'ec2',
+    'ecr',
     'iam',
     'kms',
     'lambda',

package/dist/cjs/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}

package/dist/cjs/syncs/ecr/ecrSyncs.d.ts

@@ -0,0 +1,3 @@
+import { Sync } from '../sync.js';
+export declare const EcrSyncs: Sync[];
+//# sourceMappingURL=ecrSyncs.d.ts.map

package/dist/cjs/syncs/ecr/ecrSyncs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecrSyncs.d.ts","sourceRoot":"","sources":["../../../../src/syncs/ecr/ecrSyncs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,QAAQ,EAAE,IAAI,EA8D1B,CAAA"}

package/dist/cjs/syncs/ecr/ecrSyncs.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EcrSyncs = void 0;
+const client_ecr_1 = require("@aws-sdk/client-ecr");
+const ClientPool_js_1 = require("../../aws/ClientPool.js");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.EcrSyncs = [
+    (0, typedSync_js_1.createTypedSyncOperation)('ecr', 'repositories', (0, typedSync_js_1.createResourceSyncType)({
+        client: client_ecr_1.ECRClient,
+        command: client_ecr_1.DescribeRepositoriesCommand,
+        key: 'repositories',
+        paginationConfig: {
+            inputKey: 'nextToken',
+            outputKey: 'nextToken'
+        },
+        arn: (repository, region, account, partition) => repositoryArn(repository, region, account, partition),
+        tags: (repository) => repository.extraFields.tags,
+        resourceTypeParts: (account, region) => ({
+            account,
+            service: 'ecr',
+            region,
+            resourceType: 'repository'
+        }),
+        extraFields: {
+            tags: async (client, repository, account, region, partition) => {
+                const result = await client.send(new client_ecr_1.ListTagsForResourceCommand({
+                    resourceArn: repositoryArn(repository, region, account, partition)
+                }));
+                return result.tags;
+            },
+            policy: async (client, repository, account, region, partition) => {
+                const result = await client.send(new client_ecr_1.GetRepositoryPolicyCommand({
+                    repositoryName: repository.repositoryName
+                }));
+                return JSON.parse(result.policyText || '{}');
+            }
+        },
+        results: (repository) => ({
+            metadata: {
+                repositoryName: repository.repositoryName,
+                key: repository.encryptionConfiguration?.kmsKey
+            },
+            policy: repository.extraFields.policy
+        })
+    })),
+    {
+        awsService: 'ecr',
+        name: 'registry',
+        execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+            const client = ClientPool_js_1.AwsClientPool.defaultInstance.client(client_ecr_1.ECRClient, credentials, region, endpoint);
+            const policyText = await (0, client_tools_js_1.runAndCatchError)('RegistryPolicyNotFoundException', async () => {
+                const result = await client.send(new client_ecr_1.GetRegistryPolicyCommand({}));
+                return result.policyText;
+            });
+            const policy = policyText ? JSON.parse(policyText) : undefined;
+            await storage.saveAccountMetadata(accountId, `ecr-registry-policy.${region}`, policy);
+        }
+    }
+];
+/**
+ * Make an ECR Repository ARN
+ *
+ * @param repository the ECR Repository object
+ * @param region the AWS region
+ * @param account the AWS account ID
+ * @param partition the AWS partition (e.g., 'aws', 'aws-cn', 'aws-us-gov')
+ * @returns the ARN of the ECR Repository
+ */
+function repositoryArn(repository, region, account, partition) {
+    return `arn:${partition}:ecr:${region}:${account}:repository/${repository.repositoryName}`;
+}
+//# sourceMappingURL=ecrSyncs.js.map

package/dist/cjs/syncs/ecr/ecrSyncs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecrSyncs.js","sourceRoot":"","sources":["../../../../src/syncs/ecr/ecrSyncs.ts"],"names":[],"mappings":";;;AAAA,oDAO4B;AAC5B,2DAAuD;AACvD,iEAA8D;AAE9D,kDAAkF;AAErE,QAAA,QAAQ,GAAW;IAC9B,IAAA,uCAAwB,EACtB,KAAK,EACL,cAAc,EACd,IAAA,qCAAsB,EAAC;QACrB,MAAM,EAAE,sBAAS;QACjB,OAAO,EAAE,wCAA2B;QACpC,GAAG,EAAE,cAAc;QACnB,gBAAgB,EAAE;YAChB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;SACvB;QACD,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAC9C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QACvD,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI;QACjD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO;YACP,OAAO,EAAE,KAAK;YACd,MAAM;YACN,YAAY,EAAE,YAAY;SAC3B,CAAC;QACF,WAAW,EAAE;YACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,uCAA0B,CAAC;oBAC7B,WAAW,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;iBACnE,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,uCAA0B,CAAC;oBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CACH,CAAA;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;YAC9C,CAAC;SACF;QACD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxB,QAAQ,EAAE;gBACR,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,GAAG,EAAE,UAAU,CAAC,uBAAuB,EAAE,MAAM;aAChD;YACD,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM;SACtC,CAAC;KACH,CAAC,CACH;IACD;QACE,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;YAChF,MAAM,MAAM,GAAG,6BAAa,CAAC,eAAe,CAAC,MAAM,CAAC,sBAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC7F,MAAM,UAAU,GAAG,MAAM,IAAA,kCAAgB,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;gBACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAA;gBAClE,OAAO,MAAM,CAAC,UAAU,CAAA;YAC1B,CAAC,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9D,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,uBAAuB,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;QACvF,CAAC;KACF;CACF,CAAA;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,UAAsB,EACtB,MAAc,EACd,OAAe,EACf,SAAiB;IAEjB,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,OAAO,eAAe,UAAU,CAAC,cAAc,EAAE,CAAA;AAC5F,CAAC"}

package/dist/cjs/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAc3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAoChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAe3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAqChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/cjs/syncs/syncMap.js

@@ -4,6 +4,7 @@ exports.getGlobalSyncsForService = getGlobalSyncsForService;
 exports.getRegionalSyncsForService = getRegionalSyncsForService;
 const tables_js_1 = require("./dynamodb/tables.js");
 const vpcEndpoints_js_1 = require("./ec2/vpcEndpoints.js");
+const ecrSyncs_js_1 = require("./ecr/ecrSyncs.js");
 const authorizationDetails_js_1 = require("./iam/authorizationDetails.js");
 const identityProviders_js_1 = require("./iam/identityProviders.js");
 const key_js_1 = require("./kms/key.js");
@@ -19,6 +20,7 @@ const allSyncs = [
     accountBpa_js_1.AccountS3BpaSync,
     authorizationDetails_js_1.AuthorizationDetailsSync,
     tables_js_1.DynamoDBTableSync,
+    ...ecrSyncs_js_1.EcrSyncs,
     ...identityProviders_js_1.IdentityProviderSyncs,
     key_js_1.KeySync,
     lambda_js_1.LambdaSync,

package/dist/cjs/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAwDA,4DAMC;AAQD,gEAMC;AA3ED,oDAAwD;AACxD,2DAAwD;AACxD,2EAAwE;AACxE,qEAAkE;AAClE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,sDAAqD;AACrD,gDAA4D;AAC5D,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,6BAAiB;IACjB,GAAG,4CAAqB;IACxB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,uCAA0B;IAC1B,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AA0DA,4DAMC;AAQD,gEAMC;AA7ED,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,2EAAwE;AACxE,qEAAkE;AAClE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,sDAAqD;AACrD,gDAA4D;AAC5D,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,GAAG,4CAAqB;IACxB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,uCAA0B;IAC1B,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/dist/esm/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["dynamodb", "ec2", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/esm/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oHAYd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,2HAad,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/esm/services.js

@@ -4,6 +4,7 @@
 export const allServices = [
     'dynamodb',
     'ec2',
+    'ecr',
     'iam',
     'kms',
     'lambda',

package/dist/esm/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}

package/dist/esm/syncs/ecr/ecrSyncs.d.ts

@@ -0,0 +1,3 @@
+import { Sync } from '../sync.js';
+export declare const EcrSyncs: Sync[];
+//# sourceMappingURL=ecrSyncs.d.ts.map

package/dist/esm/syncs/ecr/ecrSyncs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecrSyncs.d.ts","sourceRoot":"","sources":["../../../../src/syncs/ecr/ecrSyncs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,QAAQ,EAAE,IAAI,EA8D1B,CAAA"}

package/dist/esm/syncs/ecr/ecrSyncs.js

@@ -0,0 +1,70 @@
+import { DescribeRepositoriesCommand, ECRClient, GetRegistryPolicyCommand, GetRepositoryPolicyCommand, ListTagsForResourceCommand } from '@aws-sdk/client-ecr';
+import { AwsClientPool } from '../../aws/ClientPool.js';
+import { runAndCatchError } from '../../utils/client-tools.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const EcrSyncs = [
+    createTypedSyncOperation('ecr', 'repositories', createResourceSyncType({
+        client: ECRClient,
+        command: DescribeRepositoriesCommand,
+        key: 'repositories',
+        paginationConfig: {
+            inputKey: 'nextToken',
+            outputKey: 'nextToken'
+        },
+        arn: (repository, region, account, partition) => repositoryArn(repository, region, account, partition),
+        tags: (repository) => repository.extraFields.tags,
+        resourceTypeParts: (account, region) => ({
+            account,
+            service: 'ecr',
+            region,
+            resourceType: 'repository'
+        }),
+        extraFields: {
+            tags: async (client, repository, account, region, partition) => {
+                const result = await client.send(new ListTagsForResourceCommand({
+                    resourceArn: repositoryArn(repository, region, account, partition)
+                }));
+                return result.tags;
+            },
+            policy: async (client, repository, account, region, partition) => {
+                const result = await client.send(new GetRepositoryPolicyCommand({
+                    repositoryName: repository.repositoryName
+                }));
+                return JSON.parse(result.policyText || '{}');
+            }
+        },
+        results: (repository) => ({
+            metadata: {
+                repositoryName: repository.repositoryName,
+                key: repository.encryptionConfiguration?.kmsKey
+            },
+            policy: repository.extraFields.policy
+        })
+    })),
+    {
+        awsService: 'ecr',
+        name: 'registry',
+        execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
+            const client = AwsClientPool.defaultInstance.client(ECRClient, credentials, region, endpoint);
+            const policyText = await runAndCatchError('RegistryPolicyNotFoundException', async () => {
+                const result = await client.send(new GetRegistryPolicyCommand({}));
+                return result.policyText;
+            });
+            const policy = policyText ? JSON.parse(policyText) : undefined;
+            await storage.saveAccountMetadata(accountId, `ecr-registry-policy.${region}`, policy);
+        }
+    }
+];
+/**
+ * Make an ECR Repository ARN
+ *
+ * @param repository the ECR Repository object
+ * @param region the AWS region
+ * @param account the AWS account ID
+ * @param partition the AWS partition (e.g., 'aws', 'aws-cn', 'aws-us-gov')
+ * @returns the ARN of the ECR Repository
+ */
+function repositoryArn(repository, region, account, partition) {
+    return `arn:${partition}:ecr:${region}:${account}:repository/${repository.repositoryName}`;
+}
+//# sourceMappingURL=ecrSyncs.js.map

package/dist/esm/syncs/ecr/ecrSyncs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecrSyncs.js","sourceRoot":"","sources":["../../../../src/syncs/ecr/ecrSyncs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,SAAS,EACT,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,EAE3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,QAAQ,GAAW;IAC9B,wBAAwB,CACtB,KAAK,EACL,cAAc,EACd,sBAAsB,CAAC;QACrB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,2BAA2B;QACpC,GAAG,EAAE,cAAc;QACnB,gBAAgB,EAAE;YAChB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;SACvB;QACD,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAC9C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QACvD,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI;QACjD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO;YACP,OAAO,EAAE,KAAK;YACd,MAAM;YACN,YAAY,EAAE,YAAY;SAC3B,CAAC;QACF,WAAW,EAAE;YACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,0BAA0B,CAAC;oBAC7B,WAAW,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;iBACnE,CAAC,CACH,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,CAAA;YACpB,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,0BAA0B,CAAC;oBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CACH,CAAA;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;YAC9C,CAAC;SACF;QACD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxB,QAAQ,EAAE;gBACR,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,GAAG,EAAE,UAAU,CAAC,uBAAuB,EAAE,MAAM;aAChD;YACD,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM;SACtC,CAAC;KACH,CAAC,CACH;IACD;QACE,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;YAChF,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC7F,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;gBACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAA;gBAClE,OAAO,MAAM,CAAC,UAAU,CAAA;YAC1B,CAAC,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9D,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,uBAAuB,MAAM,EAAE,EAAE,MAAM,CAAC,CAAA;QACvF,CAAC;KACF;CACF,CAAA;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,UAAsB,EACtB,MAAc,EACd,OAAe,EACf,SAAiB;IAEjB,OAAO,OAAO,SAAS,QAAQ,MAAM,IAAI,OAAO,eAAe,UAAU,CAAC,cAAc,EAAE,CAAA;AAC5F,CAAC"}

package/dist/esm/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAc3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAoChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAe3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAqChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/esm/syncs/syncMap.js

@@ -1,5 +1,6 @@
 import { DynamoDBTableSync } from './dynamodb/tables.js';
 import { VpcEndpointsSync } from './ec2/vpcEndpoints.js';
+import { EcrSyncs } from './ecr/ecrSyncs.js';
 import { AuthorizationDetailsSync } from './iam/authorizationDetails.js';
 import { IdentityProviderSyncs } from './iam/identityProviders.js';
 import { KeySync } from './kms/key.js';
@@ -15,6 +16,7 @@ const allSyncs = [
     AccountS3BpaSync,
     AuthorizationDetailsSync,
     DynamoDBTableSync,
+    ...EcrSyncs,
     ...IdentityProviderSyncs,
     KeySync,
     LambdaSync,

package/dist/esm/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,qBAAqB;IACxB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,QAAQ;IACX,GAAG,qBAAqB;IACxB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-collect",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Collect IAM information from AWS Accounts",
   "repository": {
     "type": "git",
@@ -111,6 +111,7 @@
     "@aws-sdk/client-account": "^3.758.0",
     "@aws-sdk/client-dynamodb": "^3.788.0",
     "@aws-sdk/client-ec2": "^3.798.0",
+    "@aws-sdk/client-ecr": "^3.798.0",
     "@aws-sdk/client-iam": "^3.777.0",
     "@aws-sdk/client-kms": "^3.782.0",
     "@aws-sdk/client-lambda": "^3.782.0",