@cloud-copilot/iam-collect 0.1.94 → 0.1.96

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/dist/cjs/index.d.ts +1 -1
  2. package/dist/cjs/syncs/kms/key.d.ts.map +1 -1
  3. package/dist/cjs/syncs/kms/key.js +14 -5
  4. package/dist/cjs/syncs/kms/key.js.map +1 -1
  5. package/dist/cjs/utils/client-tools.d.ts +2 -2
  6. package/dist/cjs/utils/client-tools.d.ts.map +1 -1
  7. package/dist/cjs/utils/client-tools.js +8 -2
  8. package/dist/cjs/utils/client-tools.js.map +1 -1
  9. package/dist/esm/index.d.ts +1 -1
  10. package/dist/esm/syncs/kms/key.d.ts.map +1 -1
  11. package/dist/esm/syncs/kms/key.js +14 -5
  12. package/dist/esm/syncs/kms/key.js.map +1 -1
  13. package/dist/esm/utils/client-tools.d.ts +2 -2
  14. package/dist/esm/utils/client-tools.d.ts.map +1 -1
  15. package/dist/esm/utils/client-tools.js +8 -2
  16. package/dist/esm/utils/client-tools.js.map +1 -1
  17. package/package.json +1 -1
package/dist/cjs/index.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  export type { StorageConfig, TopLevelConfig } from './config/config.js';
2
2
  export { loadConfigFiles } from './config/configFile.js';
3
- export type { AwsIamStore } from './persistence/AwsIamStore.ts';
3
+ export type { AwsIamStore } from './persistence/AwsIamStore.js';
4
4
  export { createInMemoryStorageClient, createStorageClient } from './persistence/util.js';
5
5
  //# sourceMappingURL=index.d.ts.map
package/dist/cjs/syncs/kms/key.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO,2BA+CnB,CAAA"}
1
+ {"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,OAAO,2BA0DnB,CAAA"}
package/dist/cjs/syncs/kms/key.js CHANGED
@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.KeySync = void 0;
4
4
  const client_kms_1 = require("@aws-sdk/client-kms");
5
5
  const client_tools_js_1 = require("../../utils/client-tools.js");
6
+ const log_js_1 = require("../../utils/log.js");
6
7
  const typedSync_js_1 = require("../typedSync.js");
7
8
  exports.KeySync = (0, typedSync_js_1.createTypedSyncOperation)('kms', 'keys', (0, typedSync_js_1.createResourceSyncType)({
8
9
  client: client_kms_1.KMSClient,
@@ -28,11 +29,19 @@ exports.KeySync = (0, typedSync_js_1.createTypedSyncOperation)('kms', 'keys', (0
28
29
  });
29
30
  },
30
31
  policy: async (client, key) => {
31
- return (0, client_tools_js_1.runAndCatch404)(async () => {
32
- const policyResult = await client.send(new client_kms_1.GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
33
- if (policyResult.Policy) {
34
- return JSON.parse(policyResult.Policy);
35
- }
32
+ (0, client_tools_js_1.runAndCatchAccessDenied)(async () => {
33
+ return (0, client_tools_js_1.runAndCatch404)(async () => {
34
+ const policyResult = await client.send(new client_kms_1.GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
35
+ if (policyResult.Policy) {
36
+ return JSON.parse(policyResult.Policy);
37
+ }
38
+ return undefined;
39
+ });
40
+ }, async (error) => {
41
+ log_js_1.log.warn('Access Denied fetching KMS Key Policy', {
42
+ keyPolicyAccessDenied: true,
43
+ key: key.KeyArn
44
+ });
36
45
  return undefined;
37
46
  });
38
47
  }
package/dist/cjs/syncs/kms/key.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAC5B,iEAAqF;AACrF,kDAAkF;AAErE,QAAA,OAAO,GAAG,IAAA,uCAAwB,EAC7C,KAAK,EACL,MAAM,EACN,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,4BAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,IAAA,yCAAuB,EAAC,KAAK,IAAI,EAAE;gBACxC,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,oCAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;gBACvB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,gCAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;gBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}
1
+ {"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAC5B,iEAAqF;AACrF,+CAAwC;AACxC,kDAAkF;AAErE,QAAA,OAAO,GAAG,IAAA,uCAAwB,EAC7C,KAAK,EACL,MAAM,EACN,IAAA,qCAAsB,EAAC;IACrB,MAAM,EAAE,sBAAS;IACjB,OAAO,EAAE,4BAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,IAAA,yCAAuB,EAAC,KAAK,IAAI,EAAE;gBACxC,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,oCAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;gBACvB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAA,yCAAuB,EACrB,KAAK,IAAI,EAAE;gBACT,OAAO,IAAA,gCAAc,EAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,gCAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;oBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;wBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;oBACxC,CAAC;oBACD,OAAO,SAAS,CAAA;gBAClB,CAAC,CAAC,CAAA;YACJ,CAAC,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;gBACd,YAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBAChD,qBAAqB,EAAE,IAAI;oBAC3B,GAAG,EAAE,GAAG,CAAC,MAAO;iBACjB,CAAC,CAAA;gBACF,OAAO,SAAS,CAAA;YAClB,CAAC,CACF,CAAA;QACH,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}
package/dist/cjs/utils/client-tools.d.ts CHANGED
@@ -11,7 +11,7 @@ export declare function runAndCatch404<T>(operation: () => Promise<T | undefined
11
11
  * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
12
12
  * @throws If operation returns a non 400 error, rethrows that error.
13
13
  */
14
- export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T | undefined>): Promise<T | undefined>;
14
+ export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T | undefined>, onError?: (error: any) => Promise<T | undefined>): Promise<T | undefined>;
15
15
  /**
16
16
  * Run an operation and catch a specific error by name. Return undefined if the error matches, otherwise rethrow the error.
17
17
  *
@@ -20,5 +20,5 @@ export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T |
20
20
  * @returns If successful, returns the result of operation. If operation throws an error with the specified name, returns undefined.
21
21
  * @throws If operation throws an error with a different name, rethrows that error.
22
22
  */
23
- export declare function runAndCatchError<T>(errorName: string, operation: () => Promise<T | undefined>): Promise<T | undefined>;
23
+ export declare function runAndCatchError<T>(errorName: string, operation: () => Promise<T | undefined>, onError?: (error: any) => Promise<T | undefined>): Promise<T | undefined>;
24
24
  //# sourceMappingURL=client-tools.d.ts.map
package/dist/cjs/utils/client-tools.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"client-tools.d.ts","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAYxB;AAED;;;;;;;GAOG;AAEH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB"}
1
+ {"version":3,"file":"client-tools.d.ts","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,EACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAC/C,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAexB;AAED;;;;;;;GAOG;AAEH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,EACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAC/C,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAaxB"}
package/dist/cjs/utils/client-tools.js CHANGED
@@ -27,7 +27,7 @@ async function runAndCatch404(operation) {
27
27
  * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
28
28
  * @throws If operation returns a non 400 error, rethrows that error.
29
29
  */
30
- async function runAndCatchAccessDenied(operation) {
30
+ async function runAndCatchAccessDenied(operation, onError) {
31
31
  try {
32
32
  const result = await operation();
33
33
  return result;
@@ -35,6 +35,9 @@ async function runAndCatchAccessDenied(operation) {
35
35
  catch (e) {
36
36
  const errorName = e.name;
37
37
  if (errorName == 'AccessDeniedException' || errorName == 'AccessDenied') {
38
+ if (onError) {
39
+ return onError(e);
40
+ }
38
41
  return undefined;
39
42
  }
40
43
  throw e;
@@ -48,13 +51,16 @@ async function runAndCatchAccessDenied(operation) {
48
51
  * @returns If successful, returns the result of operation. If operation throws an error with the specified name, returns undefined.
49
52
  * @throws If operation throws an error with a different name, rethrows that error.
50
53
  */
51
- async function runAndCatchError(errorName, operation) {
54
+ async function runAndCatchError(errorName, operation, onError) {
52
55
  try {
53
56
  const result = await operation();
54
57
  return result;
55
58
  }
56
59
  catch (e) {
57
60
  if (e.name == errorName) {
61
+ if (onError) {
62
+ return onError(e);
63
+ }
58
64
  return undefined;
59
65
  }
60
66
  throw e;
package/dist/cjs/utils/client-tools.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"client-tools.js","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":";;AAMA,wCAYC;AAQD,0DAcC;AAWD,4CAaC;AAhED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,IAAI,SAAS,IAAI,uBAAuB,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YACxE,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AAEI,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"client-tools.js","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":";;AAMA,wCAYC;AAQD,0DAkBC;AAWD,4CAiBC;AAxED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,IAAI,SAAS,IAAI,uBAAuB,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YACxE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AAEI,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC"}
package/dist/esm/index.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  export type { StorageConfig, TopLevelConfig } from './config/config.js';
2
2
  export { loadConfigFiles } from './config/configFile.js';
3
- export type { AwsIamStore } from './persistence/AwsIamStore.ts';
3
+ export type { AwsIamStore } from './persistence/AwsIamStore.js';
4
4
  export { createInMemoryStorageClient, createStorageClient } from './persistence/util.js';
5
5
  //# sourceMappingURL=index.d.ts.map
package/dist/esm/syncs/kms/key.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO,2BA+CnB,CAAA"}
1
+ {"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,OAAO,2BA0DnB,CAAA"}
package/dist/esm/syncs/kms/key.js CHANGED
@@ -1,5 +1,6 @@
1
1
  import { GetKeyPolicyCommand, KMSClient, ListKeysCommand, ListResourceTagsCommand } from '@aws-sdk/client-kms';
2
2
  import { runAndCatch404, runAndCatchAccessDenied } from '../../utils/client-tools.js';
3
+ import { log } from '../../utils/log.js';
3
4
  import { createResourceSyncType, createTypedSyncOperation } from '../typedSync.js';
4
5
  export const KeySync = createTypedSyncOperation('kms', 'keys', createResourceSyncType({
5
6
  client: KMSClient,
@@ -25,11 +26,19 @@ export const KeySync = createTypedSyncOperation('kms', 'keys', createResourceSyn
25
26
  });
26
27
  },
27
28
  policy: async (client, key) => {
28
- return runAndCatch404(async () => {
29
- const policyResult = await client.send(new GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
30
- if (policyResult.Policy) {
31
- return JSON.parse(policyResult.Policy);
32
- }
29
+ runAndCatchAccessDenied(async () => {
30
+ return runAndCatch404(async () => {
31
+ const policyResult = await client.send(new GetKeyPolicyCommand({ KeyId: key.KeyId, PolicyName: 'default' }));
32
+ if (policyResult.Policy) {
33
+ return JSON.parse(policyResult.Policy);
34
+ }
35
+ return undefined;
36
+ });
37
+ }, async (error) => {
38
+ log.warn('Access Denied fetching KMS Key Policy', {
39
+ keyPolicyAccessDenied: true,
40
+ key: key.KeyArn
41
+ });
33
42
  return undefined;
34
43
  });
35
44
  }
package/dist/esm/syncs/kms/key.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,OAAO,GAAG,wBAAwB,CAC7C,KAAK,EACL,MAAM,EACN,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,eAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,uBAAuB,CAAC,KAAK,IAAI,EAAE;gBACxC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;gBACvB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;gBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}
1
+ {"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/syncs/kms/key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACrF,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAElF,MAAM,CAAC,MAAM,OAAO,GAAG,wBAAwB,CAC7C,KAAK,EACL,MAAM,EACN,sBAAsB,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,eAAe;IACxB,GAAG,EAAE,MAAM;IACX,gBAAgB,EAAE;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,YAAY;KACxB;IACD,iBAAiB,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,WAAW,EAAE;QACX,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC1B,OAAO,uBAAuB,CAAC,KAAK,IAAI,EAAE;gBACxC,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;oBACtF,OAAO,SAAS,CAAC,IAAI,CAAA;gBACvB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5B,uBAAuB,CACrB,KAAK,IAAI,EAAE;gBACT,OAAO,cAAc,CAAC,KAAK,IAAI,EAAE;oBAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;oBACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;wBACxB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;oBACxC,CAAC;oBACD,OAAO,SAAS,CAAA;gBAClB,CAAC,CAAC,CAAA;YACJ,CAAC,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;gBACd,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBAChD,qBAAqB,EAAE,IAAI;oBAC3B,GAAG,EAAE,GAAG,CAAC,MAAO;iBACjB,CAAC,CAAA;gBACF,OAAO,SAAS,CAAA;YAClB,CAAC,CACF,CAAA;QACH,CAAC;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;IACrC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,KAAK;SACf;QACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;KAChC,CAAC;CACH,CAAC,CACH,CAAA"}
package/dist/esm/utils/client-tools.d.ts CHANGED
@@ -11,7 +11,7 @@ export declare function runAndCatch404<T>(operation: () => Promise<T | undefined
11
11
  * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
12
12
  * @throws If operation returns a non 400 error, rethrows that error.
13
13
  */
14
- export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T | undefined>): Promise<T | undefined>;
14
+ export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T | undefined>, onError?: (error: any) => Promise<T | undefined>): Promise<T | undefined>;
15
15
  /**
16
16
  * Run an operation and catch a specific error by name. Return undefined if the error matches, otherwise rethrow the error.
17
17
  *
@@ -20,5 +20,5 @@ export declare function runAndCatchAccessDenied<T>(operation: () => Promise<T |
20
20
  * @returns If successful, returns the result of operation. If operation throws an error with the specified name, returns undefined.
21
21
  * @throws If operation throws an error with a different name, rethrows that error.
22
22
  */
23
- export declare function runAndCatchError<T>(errorName: string, operation: () => Promise<T | undefined>): Promise<T | undefined>;
23
+ export declare function runAndCatchError<T>(errorName: string, operation: () => Promise<T | undefined>, onError?: (error: any) => Promise<T | undefined>): Promise<T | undefined>;
24
24
  //# sourceMappingURL=client-tools.d.ts.map
package/dist/esm/utils/client-tools.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"client-tools.d.ts","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAYxB;AAED;;;;;;;GAOG;AAEH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB"}
1
+ {"version":3,"file":"client-tools.d.ts","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GACtC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,EACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAC/C,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAexB;AAED;;;;;;;GAOG;AAEH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,EACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAC/C,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAaxB"}
package/dist/esm/utils/client-tools.js CHANGED
@@ -22,7 +22,7 @@ export async function runAndCatch404(operation) {
22
22
  * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
23
23
  * @throws If operation returns a non 400 error, rethrows that error.
24
24
  */
25
- export async function runAndCatchAccessDenied(operation) {
25
+ export async function runAndCatchAccessDenied(operation, onError) {
26
26
  try {
27
27
  const result = await operation();
28
28
  return result;
@@ -30,6 +30,9 @@ export async function runAndCatchAccessDenied(operation) {
30
30
  catch (e) {
31
31
  const errorName = e.name;
32
32
  if (errorName == 'AccessDeniedException' || errorName == 'AccessDenied') {
33
+ if (onError) {
34
+ return onError(e);
35
+ }
33
36
  return undefined;
34
37
  }
35
38
  throw e;
@@ -43,13 +46,16 @@ export async function runAndCatchAccessDenied(operation) {
43
46
  * @returns If successful, returns the result of operation. If operation throws an error with the specified name, returns undefined.
44
47
  * @throws If operation throws an error with a different name, rethrows that error.
45
48
  */
46
- export async function runAndCatchError(errorName, operation) {
49
+ export async function runAndCatchError(errorName, operation, onError) {
47
50
  try {
48
51
  const result = await operation();
49
52
  return result;
50
53
  }
51
54
  catch (e) {
52
55
  if (e.name == errorName) {
56
+ if (onError) {
57
+ return onError(e);
58
+ }
53
59
  return undefined;
54
60
  }
55
61
  throw e;
package/dist/esm/utils/client-tools.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"client-tools.js","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,IAAI,SAAS,IAAI,uBAAuB,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YACxE,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"client-tools.js","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,IAAI,SAAS,IAAI,uBAAuB,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;YACxE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cloud-copilot/iam-collect",
3
- "version": "0.1.94",
3
+ "version": "0.1.96",
4
4
  "description": "Collect IAM information from AWS Accounts",
5
5
  "repository": {
6
6
  "type": "git",