@cloud-copilot/iam-collect 0.1.92 → 0.1.93

package/dist/cjs/syncs/apigateway/gateways.d.ts

@@ -1,3 +1,13 @@
 import { Sync } from '../sync.js';
 export declare const RestApisSync: Sync;
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+export declare function parseApiGatewayPolicy(apiId: string, policy: string | undefined): Record<string, any> | undefined;
 //# sourceMappingURL=gateways.d.ts.map

package/dist/cjs/syncs/apigateway/gateways.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateways.d.ts","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,YAAY,EAAE,IA2B1B,CAAA"}
+{"version":3,"file":"gateways.d.ts","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,YAAY,EAAE,IA2B1B,CAAA;AAcD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAYjC"}

package/dist/cjs/syncs/apigateway/gateways.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RestApisSync = void 0;
+exports.parseApiGatewayPolicy = parseApiGatewayPolicy;
 const client_api_gateway_1 = require("@aws-sdk/client-api-gateway");
-const json_js_1 = require("../../utils/json.js");
+const log_js_1 = require("../../utils/log.js");
 const typedSync_js_1 = require("../typedSync.js");
 exports.RestApisSync = (0, typedSync_js_1.createTypedSyncOperation)('apigateway', 'gateways', (0, typedSync_js_1.createResourceSyncType)({
     client: client_api_gateway_1.APIGatewayClient,
@@ -12,7 +13,7 @@ exports.RestApisSync = (0, typedSync_js_1.createTypedSyncOperation)('apigateway'
         inputKey: 'position',
         outputKey: 'position'
     },
-    arn: (api, region, account, partition) => restApiArn(api.id, region, account, partition),
+    arn: (api, region, account, partition) => restApiArn(api.id, region, partition),
     tags: (api) => api.tags,
     resourceTypeParts: (account, region) => ({
         account,
@@ -25,10 +26,40 @@ exports.RestApisSync = (0, typedSync_js_1.createTypedSyncOperation)('apigateway'
             id: api.id,
             name: api.name
         },
-        policy: (0, json_js_1.parseIfPresent)(api.policy)
+        policy: parseApiGatewayPolicy(api.id, api.policy)
     })
 }));
-function restApiArn(apiId, region, account, partition) {
+/**
+ * Get the ARN for an API Gateway REST API.
+ *
+ * @param apiId the ID of the API Gateway REST API
+ * @param region the AWS region of the API Gateway
+ * @param partition the AWS partition (aws, aws-cn, aws-us-gov)
+ * @returns the ARN of the API Gateway REST API
+ */
+function restApiArn(apiId, region, partition) {
     return `arn:${partition}:apigateway:${region}::/restapis/${apiId}`;
 }
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+function parseApiGatewayPolicy(apiId, policy) {
+    if (!policy) {
+        return undefined;
+    }
+    policy = policy.replace(/\\"/g, '"').replace(/\\\//g, '/');
+    try {
+        return JSON.parse(policy);
+    }
+    catch (error) {
+        log_js_1.log.error('Failed to parse API Gateway policy', { apiId }, error);
+        throw new Error(`Unable to parse policy for API Gateway ${apiId}`);
+    }
+}
 //# sourceMappingURL=gateways.js.map

package/dist/cjs/syncs/apigateway/gateways.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":";;;AAAA,oEAAkF;AAClF,iDAAoD;AAEpD,kDAAkF;AAErE,QAAA,YAAY,GAAS,IAAA,uCAAwB,EACxD,YAAY,EACZ,UAAU,EACV,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,qCAAgB;IACxB,OAAO,EAAE,uCAAkB;IAC3B,GAAG,EAAE,OAAO;IACZ,gBAAgB,EAAE;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,UAAU;KACtB;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;IACzF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI;IACvB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,YAAY;QACrB,MAAM;QACN,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf;QACD,MAAM,EAAE,IAAA,wBAAc,EAAC,GAAG,CAAC,MAAM,CAAC;KACnC,CAAC;CACH,CAAC,CACH,CAAA;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,OAAe,EAAE,SAAiB;IACnF,OAAO,OAAO,SAAS,eAAe,MAAM,eAAe,KAAK,EAAE,CAAA;AACpE,CAAC"}
+{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":";;;AAuDA,sDAeC;AAtED,oEAAkF;AAClF,+CAAwC;AAExC,kDAAkF;AAErE,QAAA,YAAY,GAAS,IAAA,uCAAwB,EACxD,YAAY,EACZ,UAAU,EACV,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,qCAAgB;IACxB,OAAO,EAAE,uCAAkB;IAC3B,GAAG,EAAE,OAAO;IACZ,gBAAgB,EAAE;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,UAAU;KACtB;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAG,EAAE,MAAM,EAAE,SAAS,CAAC;IAChF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI;IACvB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,YAAY;QACrB,MAAM;QACN,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf;QACD,MAAM,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAG,EAAE,GAAG,CAAC,MAAM,CAAC;KACnD,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,SAAiB;IAClE,OAAO,OAAO,SAAS,eAAe,MAAM,eAAe,KAAK,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CACnC,KAAa,EACb,MAA0B;IAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAG,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/dist/esm/syncs/apigateway/gateways.d.ts

@@ -1,3 +1,13 @@
 import { Sync } from '../sync.js';
 export declare const RestApisSync: Sync;
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+export declare function parseApiGatewayPolicy(apiId: string, policy: string | undefined): Record<string, any> | undefined;
 //# sourceMappingURL=gateways.d.ts.map

package/dist/esm/syncs/apigateway/gateways.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateways.d.ts","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,YAAY,EAAE,IA2B1B,CAAA"}
+{"version":3,"file":"gateways.d.ts","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAGjC,eAAO,MAAM,YAAY,EAAE,IA2B1B,CAAA;AAcD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAYjC"}

package/dist/esm/syncs/apigateway/gateways.js

@@ -1,5 +1,5 @@
 import { APIGatewayClient, GetRestApisCommand } from '@aws-sdk/client-api-gateway';
-import { parseIfPresent } from '../../utils/json.js';
+import { log } from '../../utils/log.js';
 import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
 export const RestApisSync = createTypedSyncOperation('apigateway', 'gateways', createResourceSyncType({
     client: APIGatewayClient,
@@ -9,7 +9,7 @@ export const RestApisSync = createTypedSyncOperation('apigateway', 'gateways', c
         inputKey: 'position',
         outputKey: 'position'
     },
-    arn: (api, region, account, partition) => restApiArn(api.id, region, account, partition),
+    arn: (api, region, account, partition) => restApiArn(api.id, region, partition),
     tags: (api) => api.tags,
     resourceTypeParts: (account, region) => ({
         account,
@@ -22,10 +22,40 @@ export const RestApisSync = createTypedSyncOperation('apigateway', 'gateways', c
             id: api.id,
             name: api.name
         },
-        policy: parseIfPresent(api.policy)
+        policy: parseApiGatewayPolicy(api.id, api.policy)
     })
 }));
-function restApiArn(apiId, region, account, partition) {
+/**
+ * Get the ARN for an API Gateway REST API.
+ *
+ * @param apiId the ID of the API Gateway REST API
+ * @param region the AWS region of the API Gateway
+ * @param partition the AWS partition (aws, aws-cn, aws-us-gov)
+ * @returns the ARN of the API Gateway REST API
+ */
+function restApiArn(apiId, region, partition) {
     return `arn:${partition}:apigateway:${region}::/restapis/${apiId}`;
 }
+/**
+ * Parse the API Gateway policy string into a JSON object.
+ * For some reason API Gateway policies can have \\\ at the start of every string
+ * and any forward slash is escaped with a double backslash (\\/)
+ *
+ * @param apiId the ID of the API Gateway
+ * @param policy the policy string to parse
+ * @returns the parsed policy object or undefined if the policy is not provided
+ */
+export function parseApiGatewayPolicy(apiId, policy) {
+    if (!policy) {
+        return undefined;
+    }
+    policy = policy.replace(/\\"/g, '"').replace(/\\\//g, '/');
+    try {
+        return JSON.parse(policy);
+    }
+    catch (error) {
+        log.error('Failed to parse API Gateway policy', { apiId }, error);
+        throw new Error(`Unable to parse policy for API Gateway ${apiId}`);
+    }
+}
 //# sourceMappingURL=gateways.js.map

package/dist/esm/syncs/apigateway/gateways.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,YAAY,GAAS,wBAAwB,CACxD,YAAY,EACZ,UAAU,EACV,sBAAsB,CAAC;IACrB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,kBAAkB;IAC3B,GAAG,EAAE,OAAO;IACZ,gBAAgB,EAAE;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,UAAU;KACtB;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;IACzF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI;IACvB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,YAAY;QACrB,MAAM;QACN,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf;QACD,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;KACnC,CAAC;CACH,CAAC,CACH,CAAA;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,OAAe,EAAE,SAAiB;IACnF,OAAO,OAAO,SAAS,eAAe,MAAM,eAAe,KAAK,EAAE,CAAA;AACpE,CAAC"}
+{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../../../../src/syncs/apigateway/gateways.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAClF,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AAExC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,YAAY,GAAS,wBAAwB,CACxD,YAAY,EACZ,UAAU,EACV,sBAAsB,CAAC;IACrB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,kBAAkB;IAC3B,GAAG,EAAE,OAAO;IACZ,gBAAgB,EAAE;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,UAAU;KACtB;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAG,EAAE,MAAM,EAAE,SAAS,CAAC;IAChF,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI;IACvB,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,YAAY;QACrB,MAAM;QACN,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACR,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf;QACD,MAAM,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAG,EAAE,GAAG,CAAC,MAAM,CAAC;KACnD,CAAC;CACH,CAAC,CACH,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,SAAiB;IAClE,OAAO,OAAO,SAAS,eAAe,MAAM,eAAe,KAAK,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,MAA0B;IAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAE1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-collect",
-  "version": "0.1.92",
+  "version": "0.1.93",
   "description": "Collect IAM information from AWS Accounts",
   "repository": {
     "type": "git",