@composurecdk/budgets 0.3.0

package/dist/budget-builder.d.ts

@@ -0,0 +1,178 @@
+import { CfnBudget } from "aws-cdk-lib/aws-budgets";
+import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { TopicPolicy } from "aws-cdk-lib/aws-sns";
+import type { IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle } from "@composurecdk/core";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { BudgetAlarmConfig } from "./alarm-config.js";
+import { type BudgetSubscriber, type NotificationEntry } from "./notifications.js";
+/**
+ * Spend limit for a cost or usage budget.
+ */
+export interface BudgetLimit {
+    /** Numeric limit. */
+    amount: number;
+    /**
+     * Currency or usage unit. Defaults to
+     * {@link BUDGET_DEFAULTS.limitUnit} when omitted.
+     */
+    unit?: string;
+}
+/**
+ * Configuration properties for the budget builder.
+ */
+export interface BudgetBuilderProps {
+    /** Name used for `BudgetName` in the `BudgetData` property. */
+    budgetName?: string;
+    /**
+     * One of `COST`, `USAGE`, `RI_UTILIZATION`, `RI_COVERAGE`,
+     * `SAVINGS_PLANS_UTILIZATION`, `SAVINGS_PLANS_COVERAGE`.
+     *
+     * @default "COST"
+     */
+    budgetType?: string;
+    /** @default "MONTHLY" */
+    timeUnit?: string;
+    /** Spend limit (required for COST and USAGE budgets). */
+    limit?: BudgetLimit;
+    /**
+     * CloudFormation `CostFilters` map. Keys are filter dimensions
+     * (`Service`, `Region`, `LinkedAccount`, `TagKeyValue`, …) and values
+     * are arrays of filter values.
+     */
+    costFilters?: Record<string, string[]>;
+    /** CloudFormation `CostTypes` passthrough. */
+    costTypes?: CfnBudget.CostTypesProperty;
+    /**
+     * Configuration for the AWS-recommended billing alarm.
+     *
+     * Off by default — pass an
+     * {@link BudgetAlarmConfig.estimatedCharges} entry to opt in. Set to
+     * `false` to suppress recommended alarms entirely; custom alarms added
+     * via {@link IBudgetBuilder.addAlarm} are unaffected.
+     *
+     * Note: `AWS/Billing EstimatedCharges` is emitted in `us-east-1` only.
+     * If this builder is used outside `us-east-1`, the synthesised alarm
+     * will never receive data — the builder emits a synth-time warning.
+     * For non-`us-east-1` stacks, suppress this builder's alarms with
+     * `recommendedAlarms: false` and create alarms in a `us-east-1` stack
+     * via {@link createBudgetAlarmBuilder}.
+     *
+     * @see BudgetAlarmConfig
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html
+     */
+    recommendedAlarms?: BudgetAlarmConfig | false;
+}
+/**
+ * The build output of an {@link IBudgetBuilder}.
+ */
+export interface BudgetBuilderResult {
+    /** The `AWS::Budgets::Budget` construct. */
+    budget: CfnBudget;
+    /**
+     * `AWS::SNS::TopicPolicy` constructs created automatically for any SNS
+     * topic referenced as a notification subscriber, keyed by the topic's
+     * fully-qualified node path. Grants `budgets.amazonaws.com` permission
+     * to publish.
+     *
+     * `{}` when no SNS subscribers were configured.
+     */
+    topicPolicies: Record<string, TopicPolicy>;
+    /**
+     * CloudWatch alarms created for the budget.
+     *
+     * Includes both AWS-recommended alarms (`estimatedCharges`, off by
+     * default) and any custom alarms added via
+     * {@link IBudgetBuilder.addAlarm}. Empty unless the caller opts in via
+     * `recommendedAlarms` or `addAlarm`.
+     *
+     * No alarm actions are configured — apply them via the result or an
+     * `afterBuild` hook.
+     */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for configuring and creating an AWS Budget.
+ *
+ * Wraps the {@link CfnBudget} L1 construct (the CDK does not ship an L2
+ * for Budgets) with well-architected defaults, helpers for the
+ * percentage-threshold notification shape, and automatic
+ * `AWS::SNS::TopicPolicy` wiring for SNS subscribers.
+ *
+ * The builder can also create the AWS-recommended `EstimatedCharges`
+ * billing alarm; opt in via `recommendedAlarms`. For non-`us-east-1`
+ * stacks, route the alarms separately via
+ * {@link createBudgetAlarmBuilder}.
+ *
+ * @example
+ * ```ts
+ * createBudgetBuilder()
+ *   .budgetName("AgentBudget")
+ *   .limit({ amount: 50, unit: "GBP" })
+ *   .notifyOnActual(100, ref("alerts", r => r.topic))
+ *   .withRecommendedThresholds()
+ *   .build(stack, "AgentBudget");
+ * ```
+ */
+export type IBudgetBuilder = IBuilder<BudgetBuilderProps, BudgetBuilder>;
+declare class BudgetBuilder implements Lifecycle<BudgetBuilderResult> {
+    #private;
+    props: Partial<BudgetBuilderProps>;
+    /**
+     * Add a notification that fires when ACTUAL spend crosses the given
+     * percentage of the budget limit.
+     *
+     * @param thresholdPercent - Percentage of the budget limit (e.g. `80`).
+     *   For absolute-value thresholds, use {@link addNotification} directly.
+     * @param subscribers - One or more email addresses / SNS topics (or
+     *   {@link Resolvable} refs to topics).
+     */
+    notifyOnActual(thresholdPercent: number, ...subscribers: BudgetSubscriber[]): this;
+    /**
+     * Add a notification that fires when FORECASTED spend crosses the
+     * given percentage of the budget limit.
+     *
+     * @param thresholdPercent - Percentage of the budget limit (e.g. `100`).
+     *   For absolute-value thresholds, use {@link addNotification} directly.
+     */
+    notifyOnForecasted(thresholdPercent: number, ...subscribers: BudgetSubscriber[]): this;
+    /**
+     * Raw notification passthrough for callers that need the full
+     * CloudFormation surface (e.g. absolute-value thresholds).
+     */
+    addNotification(entry: NotificationEntry): this;
+    /**
+     * Apply the well-architected recommended notification thresholds:
+     *
+     * - `ACTUAL` at 80% — early warning before breach.
+     * - `FORECASTED` at 100% — trending-over-budget alert.
+     *
+     * Must be called with at least one subscriber; the same subscriber
+     * list is used for both thresholds.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-best-practices.html
+     */
+    withRecommendedThresholds(...subscribers: BudgetSubscriber[]): this;
+    /**
+     * Adds a custom CloudWatch alarm against the budget. The configure
+     * callback receives a fresh {@link AlarmDefinitionBuilder} pre-set with
+     * the alarm's key; configure metric, threshold, comparison and any
+     * other options.
+     *
+     * Custom alarms are materialised in this builder's stack alongside any
+     * recommended alarms. Like the recommended `EstimatedCharges` alarm,
+     * custom alarms on `AWS/Billing` metrics will only fire when this
+     * stack is in `us-east-1` — the builder emits the same synth-time
+     * warning (`@composurecdk/budgets:alarm-region`) when used elsewhere.
+     * For non-`us-east-1` stacks, route alarms via
+     * {@link createBudgetAlarmBuilder} into a `us-east-1` stack.
+     */
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<CfnBudget>) => AlarmDefinitionBuilder<CfnBudget>): this;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): BudgetBuilderResult;
+}
+/**
+ * Creates a new {@link IBudgetBuilder} for configuring an AWS Budget.
+ */
+export declare function createBudgetBuilder(): IBudgetBuilder;
+export {};
+//# sourceMappingURL=budget-builder.d.ts.map

package/dist/budget-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-builder.d.ts","sourceRoot":"","sources":["../src/budget-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAuB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAU,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAW,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG3D,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAIvB,MAAM,oBAAoB,CAAC;AAG5B;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB,CAAC;IACxC;;;;;;;;;;;;;;;;;OAiBG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,KAAK,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,4CAA4C;IAC5C,MAAM,EAAE,SAAS,CAAC;IAClB;;;;;;;OAOG;IACH,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C;;;;;;;;;;OAUG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;AAEzE,cAAM,aAAc,YAAW,SAAS,CAAC,mBAAmB,CAAC;;IAC3D,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAM;IAIxC;;;;;;;;OAQG;IACH,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI;IAIlF;;;;;;OAMG;IACH,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI;IAItF;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI;IAK/C;;;;;;;;;;OAUG;IACH,yBAAyB,CAAC,GAAG,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI;IAcnE;;;;;;;;;;;;;OAaG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CAAC,KAAK,EAAE,sBAAsB,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,SAAS,CAAC,GACzF,IAAI;IAKP,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,mBAAmB;CAiFhG;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,CAEpD"}

package/dist/budget-builder.js

@@ -0,0 +1,139 @@
+import { CfnBudget } from "aws-cdk-lib/aws-budgets";
+import { Builder } from "@composurecdk/core";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import { buildBudgetAlarms } from "./budget-alarm-builder.js";
+import { BUDGET_DEFAULTS } from "./defaults.js";
+import { resolveSubscribers, toCfnNotificationWithSubscribers, } from "./notifications.js";
+import { createBudgetsTopicPolicies } from "./topic-policy.js";
+class BudgetBuilder {
+    props = {};
+    #notifications = [];
+    #customAlarms = [];
+    /**
+     * Add a notification that fires when ACTUAL spend crosses the given
+     * percentage of the budget limit.
+     *
+     * @param thresholdPercent - Percentage of the budget limit (e.g. `80`).
+     *   For absolute-value thresholds, use {@link addNotification} directly.
+     * @param subscribers - One or more email addresses / SNS topics (or
+     *   {@link Resolvable} refs to topics).
+     */
+    notifyOnActual(thresholdPercent, ...subscribers) {
+        return this.#addPercentageNotification("ACTUAL", thresholdPercent, subscribers);
+    }
+    /**
+     * Add a notification that fires when FORECASTED spend crosses the
+     * given percentage of the budget limit.
+     *
+     * @param thresholdPercent - Percentage of the budget limit (e.g. `100`).
+     *   For absolute-value thresholds, use {@link addNotification} directly.
+     */
+    notifyOnForecasted(thresholdPercent, ...subscribers) {
+        return this.#addPercentageNotification("FORECASTED", thresholdPercent, subscribers);
+    }
+    /**
+     * Raw notification passthrough for callers that need the full
+     * CloudFormation surface (e.g. absolute-value thresholds).
+     */
+    addNotification(entry) {
+        this.#notifications.push(entry);
+        return this;
+    }
+    /**
+     * Apply the well-architected recommended notification thresholds:
+     *
+     * - `ACTUAL` at 80% — early warning before breach.
+     * - `FORECASTED` at 100% — trending-over-budget alert.
+     *
+     * Must be called with at least one subscriber; the same subscriber
+     * list is used for both thresholds.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-best-practices.html
+     */
+    withRecommendedThresholds(...subscribers) {
+        if (subscribers.length === 0) {
+            throw new Error(`BudgetBuilder: withRecommendedThresholds(...) must be called with at least one subscriber.`);
+        }
+        const { actualPercent, forecastedPercent } = BUDGET_DEFAULTS.recommendedThresholds;
+        this.#notifications.push({ notificationType: "ACTUAL", threshold: actualPercent, subscribers }, { notificationType: "FORECASTED", threshold: forecastedPercent, subscribers });
+        return this;
+    }
+    /**
+     * Adds a custom CloudWatch alarm against the budget. The configure
+     * callback receives a fresh {@link AlarmDefinitionBuilder} pre-set with
+     * the alarm's key; configure metric, threshold, comparison and any
+     * other options.
+     *
+     * Custom alarms are materialised in this builder's stack alongside any
+     * recommended alarms. Like the recommended `EstimatedCharges` alarm,
+     * custom alarms on `AWS/Billing` metrics will only fire when this
+     * stack is in `us-east-1` — the builder emits the same synth-time
+     * warning (`@composurecdk/budgets:alarm-region`) when used elsewhere.
+     * For non-`us-east-1` stacks, route alarms via
+     * {@link createBudgetAlarmBuilder} into a `us-east-1` stack.
+     */
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    build(scope, id, context = {}) {
+        const { recommendedAlarms: alarmConfig, ...budgetProps } = this.props;
+        const budgetType = budgetProps.budgetType ?? BUDGET_DEFAULTS.budgetType;
+        const timeUnit = budgetProps.timeUnit ?? BUDGET_DEFAULTS.timeUnit;
+        const requiresLimit = budgetType === "COST" || budgetType === "USAGE";
+        if (requiresLimit && !budgetProps.limit) {
+            throw new Error(`BudgetBuilder "${id}": limit({ amount, unit }) must be set for ${budgetType} budgets.`);
+        }
+        const { notificationsWithSubscribers, snsTopics } = this.#buildNotifications(context);
+        const budgetData = {
+            budgetName: budgetProps.budgetName,
+            budgetType,
+            timeUnit,
+            ...(budgetProps.limit
+                ? {
+                    budgetLimit: {
+                        amount: budgetProps.limit.amount,
+                        unit: budgetProps.limit.unit ?? BUDGET_DEFAULTS.limitUnit,
+                    },
+                }
+                : {}),
+            ...(budgetProps.costFilters ? { costFilters: budgetProps.costFilters } : {}),
+            ...(budgetProps.costTypes ? { costTypes: budgetProps.costTypes } : {}),
+        };
+        const cfnProps = {
+            budget: budgetData,
+            ...(notificationsWithSubscribers.length > 0 ? { notificationsWithSubscribers } : {}),
+        };
+        const budget = new CfnBudget(scope, id, cfnProps);
+        const topicPolicies = createBudgetsTopicPolicies(scope, id, snsTopics);
+        const alarms = buildBudgetAlarms(scope, id, { budget }, {
+            recommendedAlarms: alarmConfig,
+            customAlarms: this.#customAlarms,
+        });
+        return { budget, topicPolicies, alarms };
+    }
+    #addPercentageNotification(notificationType, thresholdPercent, subscribers) {
+        if (subscribers.length === 0) {
+            throw new Error(`BudgetBuilder: ${notificationType} notification at ${String(thresholdPercent)}% requires at least one subscriber.`);
+        }
+        this.#notifications.push({ notificationType, threshold: thresholdPercent, subscribers });
+        return this;
+    }
+    #buildNotifications(context) {
+        const notificationsWithSubscribers = [];
+        const allSnsTopics = [];
+        for (const entry of this.#notifications) {
+            const resolved = resolveSubscribers(entry.subscribers, context);
+            notificationsWithSubscribers.push(toCfnNotificationWithSubscribers(entry, resolved.cfn));
+            allSnsTopics.push(...resolved.snsTopics);
+        }
+        return { notificationsWithSubscribers, snsTopics: allSnsTopics };
+    }
+}
+/**
+ * Creates a new {@link IBudgetBuilder} for configuring an AWS Budget.
+ */
+export function createBudgetBuilder() {
+    return Builder(BudgetBuilder);
+}
+//# sourceMappingURL=budget-builder.js.map

package/dist/budget-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-builder.js","sourceRoot":"","sources":["../src/budget-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAuB,MAAM,yBAAyB,CAAC;AAIzE,OAAO,EAAE,OAAO,EAAiC,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAIL,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAmH/D,MAAM,aAAa;IACjB,KAAK,GAAgC,EAAE,CAAC;IAC/B,cAAc,GAAwB,EAAE,CAAC;IACzC,aAAa,GAAwC,EAAE,CAAC;IAEjE;;;;;;;;OAQG;IACH,cAAc,CAAC,gBAAwB,EAAE,GAAG,WAA+B;QACzE,OAAO,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,gBAAwB,EAAE,GAAG,WAA+B;QAC7E,OAAO,IAAI,CAAC,0BAA0B,CAAC,YAAY,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACtF,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,KAAwB;QACtC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACH,yBAAyB,CAAC,GAAG,WAA+B;QAC1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,eAAe,CAAC,qBAAqB,CAAC;QACnF,IAAI,CAAC,cAAc,CAAC,IAAI,CACtB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,EACrE,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAC9E,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,QAAQ,CACN,GAAW,EACX,SAA0F;QAE1F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAY,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,UAAkC,EAAE;QACvE,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAEtE,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,CAAC;QACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC;QAElE,MAAM,aAAa,GAAG,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,CAAC;QACtE,IAAI,aAAa,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,kBAAkB,EAAE,8CAA8C,UAAU,WAAW,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAEtF,MAAM,UAAU,GAAiC;YAC/C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,UAAU;YACV,QAAQ;YACR,GAAG,CAAC,WAAW,CAAC,KAAK;gBACnB,CAAC,CAAC;oBACE,WAAW,EAAE;wBACX,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;wBAChC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,SAAS;qBAC1D;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;QAEF,MAAM,QAAQ,GAAmB;YAC/B,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAElD,MAAM,aAAa,GAAG,0BAA0B,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,iBAAiB,CAC9B,KAAK,EACL,EAAE,EACF,EAAE,MAAM,EAAE,EACV;YACE,iBAAiB,EAAE,WAAW;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CACF,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,0BAA0B,CACxB,gBAAkC,EAClC,gBAAwB,EACxB,WAA+B;QAE/B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,kBAAkB,gBAAgB,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,qCAAqC,CACpH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB,CAAC,OAA+B;QAIjD,MAAM,4BAA4B,GAAoD,EAAE,CAAC;QACzF,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAChE,4BAA4B,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzF,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACnE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,CAAoC,aAAa,CAAC,CAAC;AACnE,CAAC"}

package/dist/defaults.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Well-architected defaults for {@link createBudgetBuilder}. Each can be
+ * overridden via the builder's fluent API.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/cost-optimization-pillar/welcome.html
+ */
+export declare const BUDGET_DEFAULTS: {
+    /**
+     * Default budget type — most budgets are cost budgets.
+     *
+     * @see https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_budgets_Budget.html
+     */
+    budgetType: "COST";
+    /**
+     * Default tracking period — monthly is the most common granularity and
+     * aligns with AWS billing cycles.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-create.html
+     */
+    timeUnit: "MONTHLY";
+    /**
+     * Default spend currency — most customers need to set this; the builder
+     * defaults to USD to align with the AWS Billing reporting default.
+     *
+     * @see https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_budgets_Spend.html
+     */
+    limitUnit: string;
+    /**
+     * Recommended percentage thresholds applied by
+     * {@link IBudgetBuilder.withRecommendedThresholds}.
+     *
+     * - `ACTUAL` at 80% — early warning before you breach the budget.
+     * - `FORECASTED` at 100% — notifies when forecasted spend trends over
+     *   budget for the period.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-best-practices.html
+     */
+    recommendedThresholds: {
+        actualPercent: number;
+        forecastedPercent: number;
+    };
+};
+//# sourceMappingURL=defaults.d.ts.map

package/dist/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../src/defaults.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,eAAe;IAC1B;;;;OAIG;;IAGH;;;;;OAKG;;IAGH;;;;;OAKG;;IAGH;;;;;;;;;OASG;;;;;CAKJ,CAAC"}

package/dist/defaults.js

@@ -0,0 +1,43 @@
+/**
+ * Well-architected defaults for {@link createBudgetBuilder}. Each can be
+ * overridden via the builder's fluent API.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/cost-optimization-pillar/welcome.html
+ */
+export const BUDGET_DEFAULTS = {
+    /**
+     * Default budget type — most budgets are cost budgets.
+     *
+     * @see https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_budgets_Budget.html
+     */
+    budgetType: "COST",
+    /**
+     * Default tracking period — monthly is the most common granularity and
+     * aligns with AWS billing cycles.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-create.html
+     */
+    timeUnit: "MONTHLY",
+    /**
+     * Default spend currency — most customers need to set this; the builder
+     * defaults to USD to align with the AWS Billing reporting default.
+     *
+     * @see https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_budgets_Spend.html
+     */
+    limitUnit: "USD",
+    /**
+     * Recommended percentage thresholds applied by
+     * {@link IBudgetBuilder.withRecommendedThresholds}.
+     *
+     * - `ACTUAL` at 80% — early warning before you breach the budget.
+     * - `FORECASTED` at 100% — notifies when forecasted spend trends over
+     *   budget for the period.
+     *
+     * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-best-practices.html
+     */
+    recommendedThresholds: {
+        actualPercent: 80,
+        forecastedPercent: 100,
+    },
+};
+//# sourceMappingURL=defaults.js.map

package/dist/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../src/defaults.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B;;;;OAIG;IACH,UAAU,EAAE,MAAe;IAE3B;;;;;OAKG;IACH,QAAQ,EAAE,SAAkB;IAE5B;;;;;OAKG;IACH,SAAS,EAAE,KAAK;IAEhB;;;;;;;;;OASG;IACH,qBAAqB,EAAE;QACrB,aAAa,EAAE,EAAE;QACjB,iBAAiB,EAAE,GAAG;KACvB;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { createBudgetBuilder, type IBudgetBuilder, type BudgetBuilderProps, type BudgetBuilderResult, type BudgetLimit, } from "./budget-builder.js";
+export { createBudgetAlarmBuilder, type IBudgetAlarmBuilder, type BudgetAlarmBuilderProps, type BudgetAlarmBuilderResult, } from "./budget-alarm-builder.js";
+export { BUDGET_DEFAULTS } from "./defaults.js";
+export { type BudgetAlarmConfig, type EstimatedChargesAlarmConfig } from "./alarm-config.js";
+export { createBudgetsTopicPolicies } from "./topic-policy.js";
+export { resolveSubscribers, toCfnNotificationWithSubscribers, type BudgetSubscriber, type NotificationEntry, type NotificationType, type ResolvedSubscribers, } from "./notifications.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,gCAAgC,EAChC,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { createBudgetBuilder, } from "./budget-builder.js";
+export { createBudgetAlarmBuilder, } from "./budget-alarm-builder.js";
+export { BUDGET_DEFAULTS } from "./defaults.js";
+export { createBudgetsTopicPolicies } from "./topic-policy.js";
+export { resolveSubscribers, toCfnNotificationWithSubscribers, } from "./notifications.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAKpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,gCAAgC,GAKjC,MAAM,oBAAoB,CAAC"}

package/dist/notifications.d.ts

@@ -0,0 +1,60 @@
+import { CfnBudget } from "aws-cdk-lib/aws-budgets";
+import type { ITopic } from "aws-cdk-lib/aws-sns";
+import { type Resolvable } from "@composurecdk/core";
+/**
+ * A subscriber that receives budget notifications. Either an email
+ * address (string) or an SNS topic (concrete or resolvable reference).
+ */
+export type BudgetSubscriber = string | ITopic | Resolvable<ITopic>;
+/**
+ * Which side of spend a notification triggers on.
+ *
+ * - `ACTUAL` — fires when real, posted spend crosses the threshold.
+ * - `FORECASTED` — fires when AWS projects you will cross the threshold
+ *   during the current budget period.
+ */
+export type NotificationType = "ACTUAL" | "FORECASTED";
+/**
+ * Raw notification entry accepted by {@link IBudgetBuilder.addNotification}.
+ *
+ * Callers that need the full CloudFormation surface (custom comparison
+ * operators, absolute-value thresholds) should use this shape; for the
+ * common percentage case, prefer
+ * {@link IBudgetBuilder.notifyOnActual} /
+ * {@link IBudgetBuilder.notifyOnForecasted}.
+ */
+export interface NotificationEntry {
+    notificationType: NotificationType;
+    /**
+     * Threshold value. Interpreted as a percentage of the budget limit
+     * when `thresholdType` is `PERCENTAGE` (the default), or as an
+     * absolute amount when `thresholdType` is `ABSOLUTE_VALUE`.
+     */
+    threshold: number;
+    subscribers: BudgetSubscriber[];
+    comparisonOperator?: "GREATER_THAN" | "LESS_THAN" | "EQUAL_TO";
+    thresholdType?: "PERCENTAGE" | "ABSOLUTE_VALUE";
+}
+/**
+ * Resolved subscriber after any {@link Resolvable} has been resolved.
+ *
+ * `snsTopics` is surfaced separately so the builder can create
+ * `AWS::SNS::TopicPolicy` entries granting `budgets.amazonaws.com`
+ * permission to publish.
+ */
+export interface ResolvedSubscribers {
+    cfn: CfnBudget.SubscriberProperty[];
+    snsTopics: ITopic[];
+}
+/**
+ * Resolve a list of {@link BudgetSubscriber}s into the CloudFormation
+ * shape required by `AWS::Budgets::Budget` and a flat list of any SNS
+ * topics referenced (so the caller can create topic policies).
+ */
+export declare function resolveSubscribers(subscribers: BudgetSubscriber[], context: Record<string, object>): ResolvedSubscribers;
+/**
+ * Convert a {@link NotificationEntry} plus resolved subscribers into the
+ * CloudFormation `NotificationWithSubscribersProperty` shape.
+ */
+export declare function toCfnNotificationWithSubscribers(entry: NotificationEntry, resolvedSubscribers: CfnBudget.SubscriberProperty[]): CfnBudget.NotificationWithSubscribersProperty;
+//# sourceMappingURL=notifications.d.ts.map

package/dist/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,kBAAkB,CAAC,EAAE,cAAc,GAAG,WAAW,GAAG,UAAU,CAAC;IAC/D,aAAa,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,SAAS,CAAC,kBAAkB,EAAE,CAAC;IACpC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAAE,EAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,mBAAmB,CAgBrB;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,iBAAiB,EACxB,mBAAmB,EAAE,SAAS,CAAC,kBAAkB,EAAE,GAClD,SAAS,CAAC,mCAAmC,CAU/C"}

package/dist/notifications.js

@@ -0,0 +1,36 @@
+import { resolve } from "@composurecdk/core";
+/**
+ * Resolve a list of {@link BudgetSubscriber}s into the CloudFormation
+ * shape required by `AWS::Budgets::Budget` and a flat list of any SNS
+ * topics referenced (so the caller can create topic policies).
+ */
+export function resolveSubscribers(subscribers, context) {
+    const cfn = [];
+    const snsTopics = [];
+    for (const subscriber of subscribers) {
+        if (typeof subscriber === "string") {
+            cfn.push({ address: subscriber, subscriptionType: "EMAIL" });
+            continue;
+        }
+        const topic = resolve(subscriber, context);
+        cfn.push({ address: topic.topicArn, subscriptionType: "SNS" });
+        snsTopics.push(topic);
+    }
+    return { cfn, snsTopics };
+}
+/**
+ * Convert a {@link NotificationEntry} plus resolved subscribers into the
+ * CloudFormation `NotificationWithSubscribersProperty` shape.
+ */
+export function toCfnNotificationWithSubscribers(entry, resolvedSubscribers) {
+    return {
+        notification: {
+            notificationType: entry.notificationType,
+            threshold: entry.threshold,
+            comparisonOperator: entry.comparisonOperator ?? "GREATER_THAN",
+            thresholdType: entry.thresholdType ?? "PERCENTAGE",
+        },
+        subscribers: resolvedSubscribers,
+    };
+}
+//# sourceMappingURL=notifications.js.map

package/dist/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAmD9D;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAA+B,EAC/B,OAA+B;IAE/B,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAwB,EACxB,mBAAmD;IAEnD,OAAO;QACL,YAAY,EAAE;YACZ,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,cAAc;YAC9D,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,YAAY;SACnD;QACD,WAAW,EAAE,mBAAmB;KACjC,CAAC;AACJ,CAAC"}

package/dist/topic-policy.d.ts

@@ -0,0 +1,20 @@
+import { type ITopic, TopicPolicy } from "aws-cdk-lib/aws-sns";
+import type { IConstruct } from "constructs";
+/**
+ * Create an `AWS::SNS::TopicPolicy` granting the AWS Budgets service
+ * principal (`budgets.amazonaws.com`) permission to publish to each of
+ * the supplied topics.
+ *
+ * Without this policy, a budget notification configured with an SNS
+ * subscriber will silently fail to deliver — one of the most common
+ * footguns when wiring Budgets to SNS by hand. The builder wires it up
+ * automatically whenever at least one `SNS` subscriber is configured.
+ *
+ * Each topic gets its own `TopicPolicy` construct, keyed by the topic's
+ * fully-qualified CDK node path, so callers can inspect or extend them
+ * via the build result.
+ *
+ * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-sns-policy.html
+ */
+export declare function createBudgetsTopicPolicies(scope: IConstruct, id: string, topics: ITopic[]): Record<string, TopicPolicy>;
+//# sourceMappingURL=topic-policy.d.ts.map

package/dist/topic-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-policy.d.ts","sourceRoot":"","sources":["../src/topic-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EAAE,GACf,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA2B7B"}

package/dist/topic-policy.js

@@ -0,0 +1,42 @@
+import { Effect, PolicyStatement, ServicePrincipal } from "aws-cdk-lib/aws-iam";
+import { TopicPolicy } from "aws-cdk-lib/aws-sns";
+/**
+ * Create an `AWS::SNS::TopicPolicy` granting the AWS Budgets service
+ * principal (`budgets.amazonaws.com`) permission to publish to each of
+ * the supplied topics.
+ *
+ * Without this policy, a budget notification configured with an SNS
+ * subscriber will silently fail to deliver — one of the most common
+ * footguns when wiring Budgets to SNS by hand. The builder wires it up
+ * automatically whenever at least one `SNS` subscriber is configured.
+ *
+ * Each topic gets its own `TopicPolicy` construct, keyed by the topic's
+ * fully-qualified CDK node path, so callers can inspect or extend them
+ * via the build result.
+ *
+ * @see https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-sns-policy.html
+ */
+export function createBudgetsTopicPolicies(scope, id, topics) {
+    const policies = {};
+    const seen = new Set();
+    for (const topic of topics) {
+        const key = topic.node.path;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        const policy = new TopicPolicy(scope, `${id}TopicPolicy${topic.node.addr}`, {
+            topics: [topic],
+            policyDocument: undefined,
+        });
+        policy.document.addStatements(new PolicyStatement({
+            sid: "AllowBudgetsPublish",
+            effect: Effect.ALLOW,
+            principals: [new ServicePrincipal("budgets.amazonaws.com")],
+            actions: ["SNS:Publish"],
+            resources: [topic.topicArn],
+        }));
+        policies[key] = policy;
+    }
+    return policies;
+}
+//# sourceMappingURL=topic-policy.js.map

package/dist/topic-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-policy.js","sourceRoot":"","sources":["../src/topic-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAe,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAiB,EACjB,EAAU,EACV,MAAgB;IAEhB,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;YAC1E,MAAM,EAAE,CAAC,KAAK,CAAC;YACf,cAAc,EAAE,SAAS;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,aAAa,CAC3B,IAAI,eAAe,CAAC;YAClB,GAAG,EAAE,qBAAqB;YAC1B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,UAAU,EAAE,CAAC,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC5B,CAAC,CACH,CAAC;QAEF,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}