@cloud-copilot/iam-collect 0.1.37 → 0.1.39

package/README.md

@@ -56,11 +56,13 @@ This will download the IAM data from the current account to the `./iam-data` dir
 | iam           | Customer and AWS Managed Policies | name, path, id, default version, default version doc, tags                                                             |
 | iam           | OIDC Providers                    | arn, audiences, thumbprints, url, tags                                                                                 |
 | iam           | SAML Providers                    | arn, metadata document, uuid, private keys, valid until, tags                                                          |
+| iam           | Instance Profiles                 | arn, name, roles, id, path, tags                                                                                       |
 | apigateway    | Rest APIs                         | id, name, policy, tags                                                                                                 |
 | dynamodb      | Tables                            | name, arn, region, tags, resource policy                                                                               |
 | ecr           | Repositories                      | name, arn, region, tags, resource policy, key id                                                                       |
 | ecr           | Registries                        | policy                                                                                                                 |
 | ec2           | VPC Endpoints                     | id, name, type, vpc, policy                                                                                            |
+| glacier       | Vaults                            | name, arn, region, tags, policy                                                                                        |
 | kms           | Keys                              | id, policy, tags                                                                                                       |
 | lambda        | Functions                         | name, role, tags, policy                                                                                               |
 | s3            | Buckets                           | name, region, tags, policy, block public access configuration, default encryption                                      |

package/dist/cjs/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "glacier", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/cjs/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,yIAcd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oJAed,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/cjs/services.js

@@ -9,6 +9,7 @@ exports.allServices = [
     'dynamodb',
     'ec2',
     'ecr',
+    'glacier',
     'iam',
     'kms',
     'lambda',

package/dist/cjs/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}

package/dist/cjs/syncs/iam/instanceProfiles.d.ts

@@ -0,0 +1,3 @@
+import { Sync } from '../sync.js';
+export declare const InstanceProfilesSync: Sync;
+//# sourceMappingURL=instanceProfiles.d.ts.map

package/dist/cjs/syncs/iam/instanceProfiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.d.ts","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,oBAAoB,EAAE,IA2BlC,CAAA"}

package/dist/cjs/syncs/iam/instanceProfiles.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstanceProfilesSync = void 0;
+const client_iam_1 = require("@aws-sdk/client-iam");
+const typedSync_js_1 = require("../typedSync.js");
+exports.InstanceProfilesSync = (0, typedSync_js_1.createTypedSyncOperation)('iam', 'instanceprofiles', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_iam_1.IAMClient,
+    command: client_iam_1.ListInstanceProfilesCommand,
+    key: 'InstanceProfiles',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'Marker'
+    },
+    arn: (profile) => profile.Arn,
+    tags: (profile) => profile.Tags,
+    resourceTypeParts: (account, region) => ({
+        service: 'iam',
+        account,
+        resourceType: 'instance-profile'
+    }),
+    results: (profile) => ({
+        metadata: {
+            name: profile.Path,
+            roles: profile.Roles?.map((role) => role.Arn),
+            id: profile.InstanceProfileId,
+            path: profile.Path
+        }
+    })
+}));
+//# sourceMappingURL=instanceProfiles.js.map

package/dist/cjs/syncs/iam/instanceProfiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.js","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":";;;AAAA,oDAA4E;AAE5E,kDAAkF;AAErE,QAAA,oBAAoB,GAAS,IAAA,uCAAwB,EAChE,KAAK,EACL,kBAAkB,EAClB,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,wCAA2B;IACpC,GAAG,EAAE,kBAAkB;IACvB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAI;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,OAAO;QACP,YAAY,EAAE,kBAAkB;KACjC,CAAC;IACF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,EAAE,EAAE,OAAO,CAAC,iBAAiB;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/s3/vaults.d.ts

@@ -0,0 +1,2 @@
+export declare const GlacierVaultsSync: import("../sync.js").Sync;
+//# sourceMappingURL=vaults.d.ts.map

package/dist/cjs/syncs/s3/vaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,2BAmD7B,CAAA"}

package/dist/cjs/syncs/s3/vaults.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlacierVaultsSync = void 0;
+const client_glacier_1 = require("@aws-sdk/client-glacier");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.GlacierVaultsSync = (0, typedSync_js_1.createTypedSyncOperation)('glacier', 'glacierVaults', (0, typedSync_js_1.createResourceSyncType)({
+    client: client_glacier_1.GlacierClient,
+    command: client_glacier_1.ListVaultsCommand,
+    key: 'VaultList',
+    paginationConfig: {
+        inputKey: 'marker',
+        outputKey: 'Marker'
+    },
+    arn: (vault) => vault.VaultARN,
+    resourceTypeParts: (account, region) => ({
+        account,
+        region,
+        resourceType: 'vaults',
+        service: 'glacier'
+    }),
+    tags: (vault) => vault.extraFields.tags,
+    extraFields: {
+        policy: async (client, vault, accountId) => {
+            const policy = await (0, client_tools_js_1.runAndCatch404)(async () => {
+                const result = await client.send(new client_glacier_1.GetVaultAccessPolicyCommand({
+                    accountId,
+                    vaultName: vault.VaultName
+                }));
+                return JSON.parse(result.policy?.Policy || '{}');
+            });
+            return policy;
+        },
+        tags: async (client, vault, accountId) => {
+            const tags = await client.send(new client_glacier_1.ListTagsForVaultCommand({
+                accountId,
+                vaultName: vault.VaultName
+            }));
+            return tags.Tags;
+        }
+    },
+    results: (vault) => ({
+        metadata: {
+            name: vault.VaultName
+        },
+        policy: vault.extraFields.policy
+    })
+}));
+//# sourceMappingURL=vaults.js.map

package/dist/cjs/syncs/s3/vaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":";;;AAAA,4DAKgC;AAChC,iEAA4D;AAC5D,kDAAkF;AAErE,QAAA,iBAAiB,GAAG,IAAA,uCAAwB,EACvD,SAAS,EACT,eAAe,EACf,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,8BAAa;IACrB,OAAO,EAAE,kCAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4CAA2B,CAAC;oBAC9B,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CACH,CAAA;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,wCAAuB,CAAC;gBAC1B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/cjs/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAgB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAsChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAkB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAwChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/cjs/syncs/syncMap.js

@@ -8,11 +8,13 @@ const vpcEndpoints_js_1 = require("./ec2/vpcEndpoints.js");
 const ecrSyncs_js_1 = require("./ecr/ecrSyncs.js");
 const authorizationDetails_js_1 = require("./iam/authorizationDetails.js");
 const identityProviders_js_1 = require("./iam/identityProviders.js");
+const instanceProfiles_js_1 = require("./iam/instanceProfiles.js");
 const key_js_1 = require("./kms/key.js");
 const lambda_js_1 = require("./lambda/lambda.js");
 const organizations_js_1 = require("./organizations/organizations.js");
 const accountBpa_js_1 = require("./s3/accountBpa.js");
 const buckets_js_1 = require("./s3/buckets.js");
+const vaults_js_1 = require("./s3/vaults.js");
 const secrets_js_1 = require("./secretsmanager/secrets.js");
 const topics_js_1 = require("./sns/topics.js");
 const queues_js_1 = require("./sqs/queues.js");
@@ -22,7 +24,9 @@ const allSyncs = [
     authorizationDetails_js_1.AuthorizationDetailsSync,
     tables_js_1.DynamoDBTableSync,
     ...ecrSyncs_js_1.EcrSyncs,
+    instanceProfiles_js_1.InstanceProfilesSync,
     ...identityProviders_js_1.IdentityProviderSyncs,
+    vaults_js_1.GlacierVaultsSync,
     key_js_1.KeySync,
     lambda_js_1.LambdaSync,
     organizations_js_1.OrganizationSync,

package/dist/cjs/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AA4DA,4DAMC;AAQD,gEAMC;AA/ED,0DAAuD;AACvD,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,2EAAwE;AACxE,qEAAkE;AAClE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,sDAAqD;AACrD,gDAA4D;AAC5D,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,GAAG,4CAAqB;IACxB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,0BAAY;IACZ,uCAA0B;IAC1B,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAgEA,4DAMC;AAQD,gEAMC;AAnFD,0DAAuD;AACvD,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,2EAAwE;AACxE,qEAAkE;AAClE,mEAAgE;AAChE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,sDAAqD;AACrD,gDAA4D;AAC5D,8CAAkD;AAClD,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,0CAAoB;IACpB,GAAG,4CAAqB;IACxB,6BAAiB;IACjB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,0BAAY;IACZ,uCAA0B;IAC1B,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/dist/esm/services.d.ts

@@ -1,7 +1,7 @@
 /**
  * All Valid AWS Services
  */
-export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
+export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "glacier", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
 /**
  * Type representing a valid AWS service. A union of all strings in `allServices`.
  */

package/dist/esm/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,yIAcd,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oJAed,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/esm/services.js

@@ -6,6 +6,7 @@ export const allServices = [
     'dynamodb',
     'ec2',
     'ecr',
+    'glacier',
     'iam',
     'kms',
     'lambda',

package/dist/esm/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}

package/dist/esm/syncs/iam/instanceProfiles.d.ts

@@ -0,0 +1,3 @@
+import { Sync } from '../sync.js';
+export declare const InstanceProfilesSync: Sync;
+//# sourceMappingURL=instanceProfiles.d.ts.map

package/dist/esm/syncs/iam/instanceProfiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.d.ts","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,oBAAoB,EAAE,IA2BlC,CAAA"}

package/dist/esm/syncs/iam/instanceProfiles.js

@@ -0,0 +1,27 @@
+import { IAMClient, ListInstanceProfilesCommand } from '@aws-sdk/client-iam';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const InstanceProfilesSync = createTypedSyncOperation('iam', 'instanceprofiles', createResourceSyncType({
+    client: IAMClient,
+    command: ListInstanceProfilesCommand,
+    key: 'InstanceProfiles',
+    paginationConfig: {
+        inputKey: 'Marker',
+        outputKey: 'Marker'
+    },
+    arn: (profile) => profile.Arn,
+    tags: (profile) => profile.Tags,
+    resourceTypeParts: (account, region) => ({
+        service: 'iam',
+        account,
+        resourceType: 'instance-profile'
+    }),
+    results: (profile) => ({
+        metadata: {
+            name: profile.Path,
+            roles: profile.Roles?.map((role) => role.Arn),
+            id: profile.InstanceProfileId,
+            path: profile.Path
+        }
+    })
+}));
+//# sourceMappingURL=instanceProfiles.js.map

package/dist/esm/syncs/iam/instanceProfiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instanceProfiles.js","sourceRoot":"","sources":["../../../../src/syncs/iam/instanceProfiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,oBAAoB,GAAS,wBAAwB,CAChE,KAAK,EACL,kBAAkB,EAClB,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,2BAA2B;IACpC,GAAG,EAAE,kBAAkB;IACvB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAI;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK;QACd,OAAO;QACP,YAAY,EAAE,kBAAkB;KACjC,CAAC;IACF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,EAAE,EAAE,OAAO,CAAC,iBAAiB;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/s3/vaults.d.ts

@@ -0,0 +1,2 @@
+export declare const GlacierVaultsSync: import("../sync.js").Sync;
+//# sourceMappingURL=vaults.d.ts.map

package/dist/esm/syncs/s3/vaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,2BAmD7B,CAAA"}

package/dist/esm/syncs/s3/vaults.js

@@ -0,0 +1,46 @@
+import { GetVaultAccessPolicyCommand, GlacierClient, ListTagsForVaultCommand, ListVaultsCommand } from '@aws-sdk/client-glacier';
+import { runAndCatch404 } from '../../utils/client-tools.js';
+import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
+export const GlacierVaultsSync = createTypedSyncOperation('glacier', 'glacierVaults', createResourceSyncType({
+    client: GlacierClient,
+    command: ListVaultsCommand,
+    key: 'VaultList',
+    paginationConfig: {
+        inputKey: 'marker',
+        outputKey: 'Marker'
+    },
+    arn: (vault) => vault.VaultARN,
+    resourceTypeParts: (account, region) => ({
+        account,
+        region,
+        resourceType: 'vaults',
+        service: 'glacier'
+    }),
+    tags: (vault) => vault.extraFields.tags,
+    extraFields: {
+        policy: async (client, vault, accountId) => {
+            const policy = await runAndCatch404(async () => {
+                const result = await client.send(new GetVaultAccessPolicyCommand({
+                    accountId,
+                    vaultName: vault.VaultName
+                }));
+                return JSON.parse(result.policy?.Policy || '{}');
+            });
+            return policy;
+        },
+        tags: async (client, vault, accountId) => {
+            const tags = await client.send(new ListTagsForVaultCommand({
+                accountId,
+                vaultName: vault.VaultName
+            }));
+            return tags.Tags;
+        }
+    },
+    results: (vault) => ({
+        metadata: {
+            name: vault.VaultName
+        },
+        policy: vault.extraFields.policy
+    })
+}));
+//# sourceMappingURL=vaults.js.map

package/dist/esm/syncs/s3/vaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CACvD,SAAS,EACT,eAAe,EACf,sBAAsB,CAAC;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,2BAA2B,CAAC;oBAC9B,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CACH,CAAA;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,uBAAuB,CAAC;gBAC1B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}

package/dist/esm/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAgB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAsChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAkB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAwChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/esm/syncs/syncMap.js

@@ -4,11 +4,13 @@ import { VpcEndpointsSync } from './ec2/vpcEndpoints.js';
 import { EcrSyncs } from './ecr/ecrSyncs.js';
 import { AuthorizationDetailsSync } from './iam/authorizationDetails.js';
 import { IdentityProviderSyncs } from './iam/identityProviders.js';
+import { InstanceProfilesSync } from './iam/instanceProfiles.js';
 import { KeySync } from './kms/key.js';
 import { LambdaSync } from './lambda/lambda.js';
 import { OrganizationSync } from './organizations/organizations.js';
 import { AccountS3BpaSync } from './s3/accountBpa.js';
 import { S3GeneralPurposeBucketSync } from './s3/buckets.js';
+import { GlacierVaultsSync } from './s3/vaults.js';
 import { SecretSync } from './secretsmanager/secrets.js';
 import { SnsTopicsSync } from './sns/topics.js';
 import { SqsQueueSync } from './sqs/queues.js';
@@ -18,7 +20,9 @@ const allSyncs = [
     AuthorizationDetailsSync,
     DynamoDBTableSync,
     ...EcrSyncs,
+    InstanceProfilesSync,
     ...IdentityProviderSyncs,
+    GlacierVaultsSync,
     KeySync,
     LambdaSync,
     OrganizationSync,

package/dist/esm/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,QAAQ;IACX,GAAG,qBAAqB;IACxB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,QAAQ;IACX,oBAAoB;IACpB,GAAG,qBAAqB;IACxB,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-collect",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "description": "Collect IAM information from AWS Accounts",
   "repository": {
     "type": "git",
@@ -113,6 +113,7 @@
     "@aws-sdk/client-dynamodb": "^3.788.0",
     "@aws-sdk/client-ec2": "^3.798.0",
     "@aws-sdk/client-ecr": "^3.798.0",
+    "@aws-sdk/client-glacier": "^3.799.0",
     "@aws-sdk/client-iam": "^3.777.0",
     "@aws-sdk/client-kms": "^3.782.0",
     "@aws-sdk/client-lambda": "^3.782.0",