@cloud-copilot/iam-collect 0.1.38 → 0.1.40
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/dist/cjs/services.d.ts +1 -1
- package/dist/cjs/services.d.ts.map +1 -1
- package/dist/cjs/services.js +1 -0
- package/dist/cjs/services.js.map +1 -1
- package/dist/cjs/syncs/s3/buckets.d.ts +0 -12
- package/dist/cjs/syncs/s3/buckets.d.ts.map +1 -1
- package/dist/cjs/syncs/s3/buckets.js +26 -37
- package/dist/cjs/syncs/s3/buckets.js.map +1 -1
- package/dist/cjs/syncs/s3/vaults.d.ts +2 -0
- package/dist/cjs/syncs/s3/vaults.d.ts.map +1 -0
- package/dist/cjs/syncs/s3/vaults.js +49 -0
- package/dist/cjs/syncs/s3/vaults.js.map +1 -0
- package/dist/cjs/syncs/syncMap.d.ts.map +1 -1
- package/dist/cjs/syncs/syncMap.js +2 -0
- package/dist/cjs/syncs/syncMap.js.map +1 -1
- package/dist/esm/services.d.ts +1 -1
- package/dist/esm/services.d.ts.map +1 -1
- package/dist/esm/services.js +1 -0
- package/dist/esm/services.js.map +1 -1
- package/dist/esm/syncs/s3/buckets.d.ts +0 -12
- package/dist/esm/syncs/s3/buckets.d.ts.map +1 -1
- package/dist/esm/syncs/s3/buckets.js +26 -37
- package/dist/esm/syncs/s3/buckets.js.map +1 -1
- package/dist/esm/syncs/s3/vaults.d.ts +2 -0
- package/dist/esm/syncs/s3/vaults.d.ts.map +1 -0
- package/dist/esm/syncs/s3/vaults.js +46 -0
- package/dist/esm/syncs/s3/vaults.js.map +1 -0
- package/dist/esm/syncs/syncMap.d.ts.map +1 -1
- package/dist/esm/syncs/syncMap.js +2 -0
- package/dist/esm/syncs/syncMap.js.map +1 -1
- package/package.json +2 -1
package/README.md
CHANGED
|
@@ -62,6 +62,7 @@ This will download the IAM data from the current account to the `./iam-data` dir
|
|
|
62
62
|
| ecr | Repositories | name, arn, region, tags, resource policy, key id |
|
|
63
63
|
| ecr | Registries | policy |
|
|
64
64
|
| ec2 | VPC Endpoints | id, name, type, vpc, policy |
|
|
65
|
+
| glacier | Vaults | name, arn, region, tags, policy |
|
|
65
66
|
| kms | Keys | id, policy, tags |
|
|
66
67
|
| lambda | Functions | name, role, tags, policy |
|
|
67
68
|
| s3 | Buckets | name, region, tags, policy, block public access configuration, default encryption |
|
package/dist/cjs/services.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* All Valid AWS Services
|
|
3
3
|
*/
|
|
4
|
-
export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
|
|
4
|
+
export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "glacier", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
|
|
5
5
|
/**
|
|
6
6
|
* Type representing a valid AWS service. A union of all strings in `allServices`.
|
|
7
7
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,
|
|
1
|
+
{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oJAed,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
|
package/dist/cjs/services.js
CHANGED
package/dist/cjs/services.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
|
|
1
|
+
{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
|
|
@@ -1,15 +1,3 @@
|
|
|
1
|
-
import { Bucket, PublicAccessBlockConfiguration, ServerSideEncryptionRule } from '@aws-sdk/client-s3';
|
|
2
1
|
import { Sync } from '../sync.js';
|
|
3
|
-
export interface S3BucketWithData extends Bucket {
|
|
4
|
-
arn: string;
|
|
5
|
-
tags: Record<string, string> | undefined;
|
|
6
|
-
bpa: PublicAccessBlockConfiguration | undefined;
|
|
7
|
-
policy: any;
|
|
8
|
-
encryption: ServerSideEncryptionRule[] | undefined;
|
|
9
|
-
metadata: {
|
|
10
|
-
name: string;
|
|
11
|
-
region: string;
|
|
12
|
-
};
|
|
13
|
-
}
|
|
14
2
|
export declare const S3GeneralPurposeBucketSync: Sync;
|
|
15
3
|
//# sourceMappingURL=buckets.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,IAAI,EAAyB,MAAM,YAAY,CAAA;AAGxD,eAAO,MAAM,0BAA0B,EAAE,IAuDxC,CAAA"}
|
|
@@ -9,49 +9,38 @@ const typedSync_js_1 = require("../typedSync.js");
|
|
|
9
9
|
exports.S3GeneralPurposeBucketSync = {
|
|
10
10
|
awsService: 's3',
|
|
11
11
|
name: 'generalPurposeBuckets',
|
|
12
|
-
global: true,
|
|
13
12
|
execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
|
|
14
13
|
const s3Client = ClientPool_js_1.AwsClientPool.defaultInstance.client(client_s3_1.S3Client, credentials, region, endpoint);
|
|
15
14
|
const allBuckets = await (0, typedSync_js_1.paginateResource)(s3Client, client_s3_1.ListBucketsCommand, 'Buckets', {
|
|
16
15
|
inputKey: 'ContinuationToken',
|
|
17
16
|
outputKey: 'ContinuationToken'
|
|
18
|
-
}, { MaxBuckets: 1000 });
|
|
19
|
-
const
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
17
|
+
}, { MaxBuckets: 1000, BucketRegion: region });
|
|
18
|
+
const augmentedBuckets = await Promise.all(allBuckets.map(async (bucket) => {
|
|
19
|
+
const [tags, blockPublicAccessConfig, bucketPolicy, encryption] = await Promise.all([
|
|
20
|
+
getTagsForBucket(s3Client, bucket),
|
|
21
|
+
getBucketPublicAccessSettings(s3Client, bucket),
|
|
22
|
+
getBucketPolicy(s3Client, bucket, credentials.accountId),
|
|
23
|
+
getBucketEncryptionSettings(s3Client, bucket)
|
|
24
|
+
]);
|
|
25
|
+
return {
|
|
26
|
+
arn: `arn:${credentials.partition}:s3:::${bucket.Name}`,
|
|
27
|
+
tags: tags,
|
|
28
|
+
bpa: blockPublicAccessConfig,
|
|
29
|
+
policy: bucketPolicy,
|
|
30
|
+
encryption: encryption?.Rules,
|
|
31
|
+
metadata: {
|
|
32
|
+
name: bucket.Name,
|
|
33
|
+
region: region
|
|
34
|
+
}
|
|
35
|
+
};
|
|
36
|
+
}));
|
|
37
|
+
(0, sync_js_1.syncData)(augmentedBuckets, storage, accountId, {
|
|
38
|
+
service: 's3',
|
|
39
|
+
account: accountId,
|
|
40
|
+
metadata: {
|
|
41
|
+
region
|
|
24
42
|
}
|
|
25
|
-
|
|
26
|
-
}
|
|
27
|
-
const augmentedResponses = [];
|
|
28
|
-
for (const bucketRegion of Object.keys(bucketsByRegion)) {
|
|
29
|
-
const regionClient = ClientPool_js_1.AwsClientPool.defaultInstance.client(client_s3_1.S3Client, credentials, bucketRegion, endpoint);
|
|
30
|
-
const regionBuckets = bucketsByRegion[bucketRegion];
|
|
31
|
-
const augmentedRegionBuckets = await Promise.all(regionBuckets.map(async (bucket) => {
|
|
32
|
-
const [tags, blockPublicAccessConfig, bucketPolicy, encryption] = await Promise.all([
|
|
33
|
-
getTagsForBucket(regionClient, bucket),
|
|
34
|
-
getBucketPublicAccessSettings(regionClient, bucket),
|
|
35
|
-
getBucketPolicy(regionClient, bucket, credentials.accountId),
|
|
36
|
-
getBucketEncryptionSettings(regionClient, bucket)
|
|
37
|
-
]);
|
|
38
|
-
return {
|
|
39
|
-
arn: `arn:${credentials.partition}:s3:::${bucket.Name}`,
|
|
40
|
-
tags: tags,
|
|
41
|
-
bpa: blockPublicAccessConfig,
|
|
42
|
-
policy: bucketPolicy,
|
|
43
|
-
encryption: encryption?.Rules,
|
|
44
|
-
metadata: {
|
|
45
|
-
name: bucket.Name,
|
|
46
|
-
region: bucketRegion
|
|
47
|
-
}
|
|
48
|
-
};
|
|
49
|
-
}));
|
|
50
|
-
augmentedResponses.push(...augmentedRegionBuckets);
|
|
51
|
-
(0, sync_js_1.syncData)(augmentedResponses, storage, accountId, {
|
|
52
|
-
service: 's3'
|
|
53
|
-
});
|
|
54
|
-
}
|
|
43
|
+
});
|
|
55
44
|
}
|
|
56
45
|
};
|
|
57
46
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":";;;AAAA,
|
|
1
|
+
{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":";;;AAAA,kDAU2B;AAC3B,2DAAuD;AAGvD,iEAA4D;AAC5D,wCAAwD;AACxD,kDAAkD;AAErC,QAAA,0BAA0B,GAAS;IAC9C,UAAU,EAAE,IAAI;IAChB,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,KAAK,EACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB,EACT,EAAE;QACjB,MAAM,QAAQ,GAAG,6BAAa,CAAC,eAAe,CAAC,MAAM,CAAC,oBAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE9F,MAAM,UAAU,GAAG,MAAM,IAAA,+BAAgB,EACvC,QAAQ,EACR,8BAAkB,EAClB,SAAS,EACT;YACE,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE,mBAAmB;SAC/B,EACD,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3C,CAAA;QAED,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAClF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAClC,6BAA6B,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAC/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;gBACxD,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC9C,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,OAAO,WAAW,CAAC,SAAS,SAAS,MAAM,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,uBAAuB;gBAC5B,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,UAAU,EAAE,KAAK;gBAC7B,QAAQ,EAAE;oBACR,IAAI,EAAE,MAAM,CAAC,IAAK;oBAClB,MAAM,EAAE,MAAM;iBACf;aACF,CAAA;QACH,CAAC,CAAC,CACH,CAAA;QAED,IAAA,kBAAQ,EAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE;gBACR,MAAM;aACP;SACF,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAgB,EAChB,MAAc;IAEd,MAAM,UAAU,GAAG,IAAI,mCAAuB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAyB,KAAK,IAAI,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9C,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAC5B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,GAAG,CAAC,GAAI,CAAC,GAAG,GAAG,CAAC,KAAM,CAAA;YAC1B,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAgB,EAChB,MAAuB,EACvB,SAAiB;IAEjB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,MAAM,CAAC,IAAK,CAAA;IACvB,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,kCAAsB,CAAC;QAC/C,MAAM,EAAE,MAAM;QACd,mBAAmB,EAAE,SAAS;KAC/B,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAc,EAAM,KAAK,IAAI,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,uCAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACzE,MAAM,QAAQ,GAAG,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;QAC/C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,EAAE,8BAA8B,CAAA;AACjD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,sCAA0B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;QAC/C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,EAAE,iCAAiC,CAAA;AACpD,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,2BAmD7B,CAAA"}
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.GlacierVaultsSync = void 0;
|
|
4
|
+
const client_glacier_1 = require("@aws-sdk/client-glacier");
|
|
5
|
+
const client_tools_js_1 = require("../../utils/client-tools.js");
|
|
6
|
+
const typedSync_js_1 = require("../typedSync.js");
|
|
7
|
+
exports.GlacierVaultsSync = (0, typedSync_js_1.createTypedSyncOperation)('glacier', 'glacierVaults', (0, typedSync_js_1.createResourceSyncType)({
|
|
8
|
+
client: client_glacier_1.GlacierClient,
|
|
9
|
+
command: client_glacier_1.ListVaultsCommand,
|
|
10
|
+
key: 'VaultList',
|
|
11
|
+
paginationConfig: {
|
|
12
|
+
inputKey: 'marker',
|
|
13
|
+
outputKey: 'Marker'
|
|
14
|
+
},
|
|
15
|
+
arn: (vault) => vault.VaultARN,
|
|
16
|
+
resourceTypeParts: (account, region) => ({
|
|
17
|
+
account,
|
|
18
|
+
region,
|
|
19
|
+
resourceType: 'vaults',
|
|
20
|
+
service: 'glacier'
|
|
21
|
+
}),
|
|
22
|
+
tags: (vault) => vault.extraFields.tags,
|
|
23
|
+
extraFields: {
|
|
24
|
+
policy: async (client, vault, accountId) => {
|
|
25
|
+
const policy = await (0, client_tools_js_1.runAndCatch404)(async () => {
|
|
26
|
+
const result = await client.send(new client_glacier_1.GetVaultAccessPolicyCommand({
|
|
27
|
+
accountId,
|
|
28
|
+
vaultName: vault.VaultName
|
|
29
|
+
}));
|
|
30
|
+
return JSON.parse(result.policy?.Policy || '{}');
|
|
31
|
+
});
|
|
32
|
+
return policy;
|
|
33
|
+
},
|
|
34
|
+
tags: async (client, vault, accountId) => {
|
|
35
|
+
const tags = await client.send(new client_glacier_1.ListTagsForVaultCommand({
|
|
36
|
+
accountId,
|
|
37
|
+
vaultName: vault.VaultName
|
|
38
|
+
}));
|
|
39
|
+
return tags.Tags;
|
|
40
|
+
}
|
|
41
|
+
},
|
|
42
|
+
results: (vault) => ({
|
|
43
|
+
metadata: {
|
|
44
|
+
name: vault.VaultName
|
|
45
|
+
},
|
|
46
|
+
policy: vault.extraFields.policy
|
|
47
|
+
})
|
|
48
|
+
}));
|
|
49
|
+
//# sourceMappingURL=vaults.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":";;;AAAA,4DAKgC;AAChC,iEAA4D;AAC5D,kDAAkF;AAErE,QAAA,iBAAiB,GAAG,IAAA,uCAAwB,EACvD,SAAS,EACT,eAAe,EACf,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,8BAAa;IACrB,OAAO,EAAE,kCAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4CAA2B,CAAC;oBAC9B,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CACH,CAAA;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,wCAAuB,CAAC;gBAC1B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;
|
|
1
|
+
{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAkB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAwChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
|
|
@@ -14,6 +14,7 @@ const lambda_js_1 = require("./lambda/lambda.js");
|
|
|
14
14
|
const organizations_js_1 = require("./organizations/organizations.js");
|
|
15
15
|
const accountBpa_js_1 = require("./s3/accountBpa.js");
|
|
16
16
|
const buckets_js_1 = require("./s3/buckets.js");
|
|
17
|
+
const vaults_js_1 = require("./s3/vaults.js");
|
|
17
18
|
const secrets_js_1 = require("./secretsmanager/secrets.js");
|
|
18
19
|
const topics_js_1 = require("./sns/topics.js");
|
|
19
20
|
const queues_js_1 = require("./sqs/queues.js");
|
|
@@ -25,6 +26,7 @@ const allSyncs = [
|
|
|
25
26
|
...ecrSyncs_js_1.EcrSyncs,
|
|
26
27
|
instanceProfiles_js_1.InstanceProfilesSync,
|
|
27
28
|
...identityProviders_js_1.IdentityProviderSyncs,
|
|
29
|
+
vaults_js_1.GlacierVaultsSync,
|
|
28
30
|
key_js_1.KeySync,
|
|
29
31
|
lambda_js_1.LambdaSync,
|
|
30
32
|
organizations_js_1.OrganizationSync,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAgEA,4DAMC;AAQD,gEAMC;AAnFD,0DAAuD;AACvD,oDAAwD;AACxD,2DAAwD;AACxD,mDAA4C;AAC5C,2EAAwE;AACxE,qEAAkE;AAClE,mEAAgE;AAChE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,sDAAqD;AACrD,gDAA4D;AAC5D,8CAAkD;AAClD,4DAAwD;AACxD,+CAA+C;AAC/C,+CAA8C;AAC9C,2DAAmD;AAGnD,MAAM,QAAQ,GAAG;IACf,gCAAgB;IAChB,kDAAwB;IACxB,6BAAiB;IACjB,GAAG,sBAAQ;IACX,0CAAoB;IACpB,GAAG,4CAAqB;IACxB,6BAAiB;IACjB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,0BAAY;IACZ,uCAA0B;IAC1B,uBAAU;IACV,yBAAa;IACb,wBAAY;IACZ,6BAAW;IACX,kCAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
|
package/dist/esm/services.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* All Valid AWS Services
|
|
3
3
|
*/
|
|
4
|
-
export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
|
|
4
|
+
export declare const allServices: readonly ["apigateway", "dynamodb", "ec2", "ecr", "glacier", "iam", "kms", "lambda", "organizations", "s3", "secretsmanager", "sns", "sqs", "sso"];
|
|
5
5
|
/**
|
|
6
6
|
* Type representing a valid AWS service. A union of all strings in `allServices`.
|
|
7
7
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,
|
|
1
|
+
{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,WAAW,oJAed,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA"}
|
package/dist/esm/services.js
CHANGED
package/dist/esm/services.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
|
|
1
|
+
{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,UAAU;IACV,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,QAAQ;IACR,eAAe;IACf,IAAI;IACJ,gBAAgB;IAChB,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAA"}
|
|
@@ -1,15 +1,3 @@
|
|
|
1
|
-
import { Bucket, PublicAccessBlockConfiguration, ServerSideEncryptionRule } from '@aws-sdk/client-s3';
|
|
2
1
|
import { Sync } from '../sync.js';
|
|
3
|
-
export interface S3BucketWithData extends Bucket {
|
|
4
|
-
arn: string;
|
|
5
|
-
tags: Record<string, string> | undefined;
|
|
6
|
-
bpa: PublicAccessBlockConfiguration | undefined;
|
|
7
|
-
policy: any;
|
|
8
|
-
encryption: ServerSideEncryptionRule[] | undefined;
|
|
9
|
-
metadata: {
|
|
10
|
-
name: string;
|
|
11
|
-
region: string;
|
|
12
|
-
};
|
|
13
|
-
}
|
|
14
2
|
export declare const S3GeneralPurposeBucketSync: Sync;
|
|
15
3
|
//# sourceMappingURL=buckets.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"buckets.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,IAAI,EAAyB,MAAM,YAAY,CAAA;AAGxD,eAAO,MAAM,0BAA0B,EAAE,IAuDxC,CAAA"}
|
|
@@ -6,49 +6,38 @@ import { paginateResource } from '../typedSync.js';
|
|
|
6
6
|
export const S3GeneralPurposeBucketSync = {
|
|
7
7
|
awsService: 's3',
|
|
8
8
|
name: 'generalPurposeBuckets',
|
|
9
|
-
global: true,
|
|
10
9
|
execute: async (accountId, region, credentials, storage, endpoint, syncOptions) => {
|
|
11
10
|
const s3Client = AwsClientPool.defaultInstance.client(S3Client, credentials, region, endpoint);
|
|
12
11
|
const allBuckets = await paginateResource(s3Client, ListBucketsCommand, 'Buckets', {
|
|
13
12
|
inputKey: 'ContinuationToken',
|
|
14
13
|
outputKey: 'ContinuationToken'
|
|
15
|
-
}, { MaxBuckets: 1000 });
|
|
16
|
-
const
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
14
|
+
}, { MaxBuckets: 1000, BucketRegion: region });
|
|
15
|
+
const augmentedBuckets = await Promise.all(allBuckets.map(async (bucket) => {
|
|
16
|
+
const [tags, blockPublicAccessConfig, bucketPolicy, encryption] = await Promise.all([
|
|
17
|
+
getTagsForBucket(s3Client, bucket),
|
|
18
|
+
getBucketPublicAccessSettings(s3Client, bucket),
|
|
19
|
+
getBucketPolicy(s3Client, bucket, credentials.accountId),
|
|
20
|
+
getBucketEncryptionSettings(s3Client, bucket)
|
|
21
|
+
]);
|
|
22
|
+
return {
|
|
23
|
+
arn: `arn:${credentials.partition}:s3:::${bucket.Name}`,
|
|
24
|
+
tags: tags,
|
|
25
|
+
bpa: blockPublicAccessConfig,
|
|
26
|
+
policy: bucketPolicy,
|
|
27
|
+
encryption: encryption?.Rules,
|
|
28
|
+
metadata: {
|
|
29
|
+
name: bucket.Name,
|
|
30
|
+
region: region
|
|
31
|
+
}
|
|
32
|
+
};
|
|
33
|
+
}));
|
|
34
|
+
syncData(augmentedBuckets, storage, accountId, {
|
|
35
|
+
service: 's3',
|
|
36
|
+
account: accountId,
|
|
37
|
+
metadata: {
|
|
38
|
+
region
|
|
21
39
|
}
|
|
22
|
-
|
|
23
|
-
}
|
|
24
|
-
const augmentedResponses = [];
|
|
25
|
-
for (const bucketRegion of Object.keys(bucketsByRegion)) {
|
|
26
|
-
const regionClient = AwsClientPool.defaultInstance.client(S3Client, credentials, bucketRegion, endpoint);
|
|
27
|
-
const regionBuckets = bucketsByRegion[bucketRegion];
|
|
28
|
-
const augmentedRegionBuckets = await Promise.all(regionBuckets.map(async (bucket) => {
|
|
29
|
-
const [tags, blockPublicAccessConfig, bucketPolicy, encryption] = await Promise.all([
|
|
30
|
-
getTagsForBucket(regionClient, bucket),
|
|
31
|
-
getBucketPublicAccessSettings(regionClient, bucket),
|
|
32
|
-
getBucketPolicy(regionClient, bucket, credentials.accountId),
|
|
33
|
-
getBucketEncryptionSettings(regionClient, bucket)
|
|
34
|
-
]);
|
|
35
|
-
return {
|
|
36
|
-
arn: `arn:${credentials.partition}:s3:::${bucket.Name}`,
|
|
37
|
-
tags: tags,
|
|
38
|
-
bpa: blockPublicAccessConfig,
|
|
39
|
-
policy: bucketPolicy,
|
|
40
|
-
encryption: encryption?.Rules,
|
|
41
|
-
metadata: {
|
|
42
|
-
name: bucket.Name,
|
|
43
|
-
region: bucketRegion
|
|
44
|
-
}
|
|
45
|
-
};
|
|
46
|
-
}));
|
|
47
|
-
augmentedResponses.push(...augmentedRegionBuckets);
|
|
48
|
-
syncData(augmentedResponses, storage, accountId, {
|
|
49
|
-
service: 's3'
|
|
50
|
-
});
|
|
51
|
-
}
|
|
40
|
+
});
|
|
52
41
|
}
|
|
53
42
|
};
|
|
54
43
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,EAElB,QAAQ,
|
|
1
|
+
{"version":3,"file":"buckets.js","sourceRoot":"","sources":["../../../../src/syncs/s3/buckets.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,EAElB,QAAQ,EAET,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAQ,QAAQ,EAAe,MAAM,YAAY,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,UAAU,EAAE,IAAI;IAChB,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,KAAK,EACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB,EACT,EAAE;QACjB,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAE9F,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,QAAQ,EACR,kBAAkB,EAClB,SAAS,EACT;YACE,QAAQ,EAAE,mBAAmB;YAC7B,SAAS,EAAE,mBAAmB;SAC/B,EACD,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAC3C,CAAA;QAED,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAClF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAClC,6BAA6B,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAC/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;gBACxD,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC9C,CAAC,CAAA;YAEF,OAAO;gBACL,GAAG,EAAE,OAAO,WAAW,CAAC,SAAS,SAAS,MAAM,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,uBAAuB;gBAC5B,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,UAAU,EAAE,KAAK;gBAC7B,QAAQ,EAAE;oBACR,IAAI,EAAE,MAAM,CAAC,IAAK;oBAClB,MAAM,EAAE,MAAM;iBACf;aACF,CAAA;QACH,CAAC,CAAC,CACH,CAAA;QAED,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE;gBACR,MAAM;aACP;SACF,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAgB,EAChB,MAAc;IAEd,MAAM,UAAU,GAAG,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,KAAK,IAAI,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9C,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAC5B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,GAAG,CAAC,GAAI,CAAC,GAAG,GAAG,CAAC,KAAM,CAAA;YAC1B,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAgB,EAChB,MAAuB,EACvB,SAAiB;IAEjB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,MAAM,CAAC,IAAK,CAAA;IACvB,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,sBAAsB,CAAC;QAC/C,MAAM,EAAE,MAAM;QACd,mBAAmB,EAAE,SAAS;KAC/B,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAM,KAAK,IAAI,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACzE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;QAC/C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,EAAE,8BAA8B,CAAA;AACjD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,MAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;QAC/C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,QAAQ,EAAE,iCAAiC,CAAA;AACpD,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vaults.d.ts","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,2BAmD7B,CAAA"}
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
import { GetVaultAccessPolicyCommand, GlacierClient, ListTagsForVaultCommand, ListVaultsCommand } from '@aws-sdk/client-glacier';
|
|
2
|
+
import { runAndCatch404 } from '../../utils/client-tools.js';
|
|
3
|
+
import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
|
|
4
|
+
export const GlacierVaultsSync = createTypedSyncOperation('glacier', 'glacierVaults', createResourceSyncType({
|
|
5
|
+
client: GlacierClient,
|
|
6
|
+
command: ListVaultsCommand,
|
|
7
|
+
key: 'VaultList',
|
|
8
|
+
paginationConfig: {
|
|
9
|
+
inputKey: 'marker',
|
|
10
|
+
outputKey: 'Marker'
|
|
11
|
+
},
|
|
12
|
+
arn: (vault) => vault.VaultARN,
|
|
13
|
+
resourceTypeParts: (account, region) => ({
|
|
14
|
+
account,
|
|
15
|
+
region,
|
|
16
|
+
resourceType: 'vaults',
|
|
17
|
+
service: 'glacier'
|
|
18
|
+
}),
|
|
19
|
+
tags: (vault) => vault.extraFields.tags,
|
|
20
|
+
extraFields: {
|
|
21
|
+
policy: async (client, vault, accountId) => {
|
|
22
|
+
const policy = await runAndCatch404(async () => {
|
|
23
|
+
const result = await client.send(new GetVaultAccessPolicyCommand({
|
|
24
|
+
accountId,
|
|
25
|
+
vaultName: vault.VaultName
|
|
26
|
+
}));
|
|
27
|
+
return JSON.parse(result.policy?.Policy || '{}');
|
|
28
|
+
});
|
|
29
|
+
return policy;
|
|
30
|
+
},
|
|
31
|
+
tags: async (client, vault, accountId) => {
|
|
32
|
+
const tags = await client.send(new ListTagsForVaultCommand({
|
|
33
|
+
accountId,
|
|
34
|
+
vaultName: vault.VaultName
|
|
35
|
+
}));
|
|
36
|
+
return tags.Tags;
|
|
37
|
+
}
|
|
38
|
+
},
|
|
39
|
+
results: (vault) => ({
|
|
40
|
+
metadata: {
|
|
41
|
+
name: vault.VaultName
|
|
42
|
+
},
|
|
43
|
+
policy: vault.extraFields.policy
|
|
44
|
+
})
|
|
45
|
+
}));
|
|
46
|
+
//# sourceMappingURL=vaults.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../../../../src/syncs/s3/vaults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CACvD,SAAS,EACT,eAAe,EACf,sBAAsB,CAAC;IACrB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,WAAW;IAChB,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;KACpB;IACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAS;IAC/B,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI;IACvC,WAAW,EAAE;QACX,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,2BAA2B,CAAC;oBAC9B,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CACH,CAAA;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,uBAAuB,CAAC;gBAC1B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CACH,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QAClB,CAAC;KACF;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB;QACD,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;KACjC,CAAC;CACH,CAAC,CACH,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;
|
|
1
|
+
{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAkB3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAwChC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
|
|
@@ -10,6 +10,7 @@ import { LambdaSync } from './lambda/lambda.js';
|
|
|
10
10
|
import { OrganizationSync } from './organizations/organizations.js';
|
|
11
11
|
import { AccountS3BpaSync } from './s3/accountBpa.js';
|
|
12
12
|
import { S3GeneralPurposeBucketSync } from './s3/buckets.js';
|
|
13
|
+
import { GlacierVaultsSync } from './s3/vaults.js';
|
|
13
14
|
import { SecretSync } from './secretsmanager/secrets.js';
|
|
14
15
|
import { SnsTopicsSync } from './sns/topics.js';
|
|
15
16
|
import { SqsQueueSync } from './sqs/queues.js';
|
|
@@ -21,6 +22,7 @@ const allSyncs = [
|
|
|
21
22
|
...EcrSyncs,
|
|
22
23
|
InstanceProfilesSync,
|
|
23
24
|
...IdentityProviderSyncs,
|
|
25
|
+
GlacierVaultsSync,
|
|
24
26
|
KeySync,
|
|
25
27
|
LambdaSync,
|
|
26
28
|
OrganizationSync,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,QAAQ;IACX,oBAAoB;IACpB,GAAG,qBAAqB;IACxB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
|
|
1
|
+
{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,GAAG,QAAQ;IACX,oBAAoB;IACpB,GAAG,qBAAqB;IACxB,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,UAAU;IACV,aAAa;IACb,YAAY;IACZ,WAAW;IACX,gBAAgB;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cloud-copilot/iam-collect",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.40",
|
|
4
4
|
"description": "Collect IAM information from AWS Accounts",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
@@ -113,6 +113,7 @@
|
|
|
113
113
|
"@aws-sdk/client-dynamodb": "^3.788.0",
|
|
114
114
|
"@aws-sdk/client-ec2": "^3.798.0",
|
|
115
115
|
"@aws-sdk/client-ecr": "^3.798.0",
|
|
116
|
+
"@aws-sdk/client-glacier": "^3.799.0",
|
|
116
117
|
"@aws-sdk/client-iam": "^3.777.0",
|
|
117
118
|
"@aws-sdk/client-kms": "^3.782.0",
|
|
118
119
|
"@aws-sdk/client-lambda": "^3.782.0",
|