@datadog/datadog-ci 0.17.8 → 0.17.12

package/dist/commands/lambda/__tests__/uninstrument.test.js

@@ -0,0 +1,281 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// tslint:disable: no-string-literal
+jest.mock('fs');
+jest.mock('aws-sdk');
+const aws_sdk_1 = require("aws-sdk");
+const chalk_1 = require("chalk");
+const fs = __importStar(require("fs"));
+const constants_1 = require("../constants");
+const uninstrument_1 = require("../uninstrument");
+const fixtures_1 = require("./fixtures");
+describe('uninstrument', () => {
+    describe('execute', () => {
+        const OLD_ENV = process.env;
+        beforeEach(() => {
+            jest.resetModules();
+            process.env = {};
+        });
+        afterAll(() => {
+            process.env = OLD_ENV;
+        });
+        test('prints dry run data for a valid uninstrumentation', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({ code: 'ENOENT' }));
+            aws_sdk_1.Lambda.mockImplementation(() => fixtures_1.makeMockLambda({
+                'arn:aws:lambda:us-east-1:000000000000:function:uninstrument': {
+                    Architectures: ['x86_64'],
+                    Environment: {
+                        Variables: {
+                            [constants_1.ENVIRONMENT_ENV_VAR]: 'staging',
+                            [constants_1.FLUSH_TO_LOG_ENV_VAR]: 'true',
+                            [constants_1.LAMBDA_HANDLER_ENV_VAR]: 'lambda_function.lambda_handler',
+                            [constants_1.LOG_LEVEL_ENV_VAR]: 'debug',
+                            [constants_1.MERGE_XRAY_TRACES_ENV_VAR]: 'false',
+                            [constants_1.SERVICE_ENV_VAR]: 'middletier',
+                            [constants_1.SITE_ENV_VAR]: 'datadoghq.com',
+                            [constants_1.TRACE_ENABLED_ENV_VAR]: 'true',
+                            [constants_1.VERSION_ENV_VAR]: '0.2',
+                            USER_VARIABLE: 'shouldnt be deleted by uninstrumentation',
+                        },
+                    },
+                    FunctionArn: 'arn:aws:lambda:us-east-1:000000000000:function:uninstrument',
+                    Handler: 'datadog_lambda.handler.handler',
+                    Layers: [
+                        {
+                            Arn: 'arn:aws:lambda:sa-east-1:000000000000:layer:Datadog-Extension:11',
+                            CodeSize: 0,
+                            SigningJobArn: 'some-signing-job-arn',
+                            SigningProfileVersionArn: 'some-signing-profile',
+                        },
+                        {
+                            Arn: 'arn:aws:lambda:sa-east-1:000000000000:layer:Datadog-Python38:49',
+                            CodeSize: 0,
+                            SigningJobArn: 'some-signing-job-arn',
+                            SigningProfileVersionArn: 'some-signing-profile',
+                        },
+                    ],
+                    Runtime: 'python3.8',
+                },
+            }));
+            const cli = fixtures_1.makeCli();
+            const context = fixtures_1.createMockContext();
+            const functionARN = 'arn:aws:lambda:us-east-1:000000000000:function:uninstrument';
+            process.env.DATADOG_API_KEY = '1234';
+            const code = yield cli.run(['lambda', 'uninstrument', '-f', functionARN, '-r', 'us-east-1', '-d'], context);
+            const output = context.stdout.toString();
+            expect(code).toBe(0);
+            expect(output).toMatchInlineSnapshot(`
+"\n${chalk_1.bold(chalk_1.yellow('[!]'))} Functions to be updated:
+\t- ${chalk_1.bold('arn:aws:lambda:us-east-1:000000000000:function:uninstrument')}\n
+${chalk_1.bold(chalk_1.cyan('[Dry Run] '))}Will apply the following updates:
+UpdateFunctionConfiguration -> arn:aws:lambda:us-east-1:000000000000:function:uninstrument
+{
+  \\"FunctionName\\": \\"arn:aws:lambda:us-east-1:000000000000:function:uninstrument\\",
+  \\"Handler\\": \\"lambda_function.lambda_handler\\",
+  \\"Environment\\": {
+    \\"Variables\\": {
+      \\"USER_VARIABLE\\": \\"shouldnt be deleted by uninstrumentation\\"
+    }
+  },
+  \\"Layers\\": []
+}
+"
+`);
+        }));
+        test('runs function update command for valid uninstrumentation', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({ code: 'ENOENT' }));
+            const lambda = fixtures_1.makeMockLambda({
+                'arn:aws:lambda:us-east-1:000000000000:function:uninstrument': {
+                    Environment: {
+                        Variables: {
+                            [constants_1.ENVIRONMENT_ENV_VAR]: 'staging',
+                            [constants_1.FLUSH_TO_LOG_ENV_VAR]: 'true',
+                            [constants_1.LAMBDA_HANDLER_ENV_VAR]: 'lambda_function.lambda_handler',
+                            [constants_1.LOG_LEVEL_ENV_VAR]: 'debug',
+                            [constants_1.MERGE_XRAY_TRACES_ENV_VAR]: 'false',
+                            [constants_1.SERVICE_ENV_VAR]: 'middletier',
+                            [constants_1.SITE_ENV_VAR]: 'datadoghq.com',
+                            [constants_1.TRACE_ENABLED_ENV_VAR]: 'true',
+                            [constants_1.VERSION_ENV_VAR]: '0.2',
+                            USER_VARIABLE: 'shouldnt be deleted by uninstrumentation',
+                        },
+                    },
+                    FunctionArn: 'arn:aws:lambda:us-east-1:000000000000:function:uninstrument',
+                    Handler: 'datadog_lambda.handler.handler',
+                    Layers: [
+                        {
+                            Arn: 'arn:aws:lambda:sa-east-1:000000000000:layer:Datadog-Extension:11',
+                            CodeSize: 0,
+                            SigningJobArn: 'some-signing-job-arn',
+                            SigningProfileVersionArn: 'some-signing-profile',
+                        },
+                        {
+                            Arn: 'arn:aws:lambda:sa-east-1:000000000000:layer:Datadog-Python38:49',
+                            CodeSize: 0,
+                            SigningJobArn: 'some-signing-job-arn',
+                            SigningProfileVersionArn: 'some-signing-profile',
+                        },
+                    ],
+                    Runtime: 'python3.8',
+                },
+            });
+            aws_sdk_1.Lambda.mockImplementation(() => lambda);
+            const cli = fixtures_1.makeCli();
+            const context = fixtures_1.createMockContext();
+            const functionARN = 'arn:aws:lambda:us-east-1:000000000000:function:uninstrument';
+            process.env.DATADOG_API_KEY = '1234';
+            yield cli.run(['lambda', 'uninstrument', '-f', functionARN, '-r', 'us-east-1'], context);
+            expect(lambda.updateFunctionConfiguration).toHaveBeenCalled();
+        }));
+        test('aborts early when the aws-sdk throws an error', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({ code: 'ENOENT' }));
+            aws_sdk_1.Lambda.mockImplementation(() => ({
+                getFunction: jest.fn().mockImplementation(() => ({ promise: () => Promise.reject('Lambda failed') })),
+            }));
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['functions'] = ['my-func'];
+            command['region'] = 'us-east-1';
+            const code = yield command['execute']();
+            const output = command.context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatch(`${chalk_1.red('[Error]')} Couldn't fetch lambda functions. Lambda failed\n`);
+        }));
+        test("aborts early when function regions can't be found", () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({ code: 'ENOENT' }));
+            aws_sdk_1.Lambda.mockImplementation(() => fixtures_1.makeMockLambda({}));
+            const cli = fixtures_1.makeCli();
+            const context = fixtures_1.createMockContext();
+            const code = yield cli.run(['lambda', 'uninstrument', '--function', 'my-func'], context);
+            const output = context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatch('No default region specified for ["my-func"]. Use -r, --region, or use a full functionARN');
+        }));
+        test('aborts early when no functions are specified', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({ code: 'ENOENT' }));
+            aws_sdk_1.Lambda.mockImplementation(() => fixtures_1.makeMockLambda({}));
+            const cli = fixtures_1.makeCli();
+            const context = fixtures_1.createMockContext();
+            const code = yield cli.run(['lambda', 'uninstrument'], context);
+            const output = context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatchInlineSnapshot(`
+        "No functions specified for un-instrumentation.
+        "
+      `);
+        }));
+        test('aborts early when no functions are specified while using config file', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({}));
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['config']['region'] = 'ap-southeast-1';
+            yield command['execute']();
+            const output = command.context.stdout.toString();
+            expect(output).toMatchInlineSnapshot(`
+        "No functions specified for un-instrumentation.
+        "
+      `);
+        }));
+        test('aborts if functions and a pattern are set at the same time', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({}));
+            process.env = {};
+            let command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['config']['region'] = 'ap-southeast-1';
+            command['config']['functions'] = ['arn:aws:lambda:ap-southeast-1:123456789012:function:lambda-hello-world'];
+            command['regExPattern'] = 'valid-pattern';
+            yield command['execute']();
+            let output = command.context.stdout.toString();
+            expect(output).toMatch('Functions in config file and "--functions-regex" should not be used at the same time.\n');
+            command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['region'] = 'ap-southeast-1';
+            command['functions'] = ['arn:aws:lambda:ap-southeast-1:123456789012:function:lambda-hello-world'];
+            command['regExPattern'] = 'valid-pattern';
+            yield command['execute']();
+            output = command.context.stdout.toString();
+            expect(output).toMatch('"--functions" and "--functions-regex" should not be used at the same time.\n');
+        }));
+        test('aborts if the regEx pattern is an ARN', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({}));
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['region'] = 'ap-southeast-1';
+            command['regExPattern'] = 'arn:aws:lambda:ap-southeast-1:123456789012:function:*';
+            const code = yield command['execute']();
+            const output = command.context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatch(`"--functions-regex" isn't meant to be used with ARNs.\n`);
+        }));
+        test('aborts if the regEx pattern is set but no region is specified', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({}));
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['regExPattern'] = 'my-function';
+            const code = yield command['execute']();
+            const output = command.context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatch('No default region specified. Use `-r`, `--region`.');
+        }));
+        test('aborts if the the aws-sdk fails', () => __awaiter(void 0, void 0, void 0, function* () {
+            ;
+            fs.readFile.mockImplementation((a, b, callback) => callback({}));
+            aws_sdk_1.Lambda.mockImplementation(() => ({ promise: Promise.reject() }));
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['region'] = 'ap-southeast-1';
+            command['regExPattern'] = 'my-function';
+            const code = yield command['execute']();
+            const output = command.context.stdout.toString();
+            expect(code).toBe(1);
+            expect(output).toMatch("Fetching lambda functions, this might take a while.\nCouldn't fetch lambda functions. Error: Max retry count exceeded.\n");
+        }));
+    });
+    describe('printPlannedActions', () => {
+        test('prints no output when list is empty', () => {
+            process.env = {};
+            const command = fixtures_1.createCommand(uninstrument_1.UninstrumentCommand);
+            command['printPlannedActions']([]);
+            const output = command.context.stdout.toString();
+            expect(output).toMatchInlineSnapshot(`
+       "No updates will be applied
+       "
+      `);
+        });
+    });
+});

package/dist/commands/lambda/cli.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/lambda/cli.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const instrument_1 = require("./instrument");
+const uninstrument_1 = require("./uninstrument");
+module.exports = [instrument_1.InstrumentCommand, uninstrument_1.UninstrumentCommand];

package/dist/commands/lambda/constants.d.ts

@@ -1,30 +1,40 @@
+export declare const DD_LAMBDA_EXTENSION_LAYER_NAME = "Datadog-Extension";
+export declare const EXTENSION_LAYER_KEY = "extension";
 export declare const RUNTIME_LAYER_LOOKUP: {
-    readonly 'nodejs10.x': "Datadog-Node10-x";
+    readonly extension: "Datadog-Extension";
     readonly 'nodejs12.x': "Datadog-Node12-x";
     readonly 'nodejs14.x': "Datadog-Node14-x";
-    readonly 'python2.7': "Datadog-Python27";
     readonly 'python3.6': "Datadog-Python36";
     readonly 'python3.7': "Datadog-Python37";
     readonly 'python3.8': "Datadog-Python38";
     readonly 'python3.9': "Datadog-Python39";
 };
-export declare type Runtime = keyof typeof RUNTIME_LAYER_LOOKUP;
+export declare type Runtime = Exclude<keyof typeof RUNTIME_LAYER_LOOKUP, typeof EXTENSION_LAYER_KEY>;
+export declare const ARM_RUNTIMES: string[];
+export declare const ARM64_ARCHITECTURE = "arm64";
+export declare const ARM_LAYER_SUFFIX = "-ARM";
+export declare enum RuntimeType {
+    NODE = 0,
+    PYTHON = 1
+}
+export declare const RUNTIME_LOOKUP: {
+    [key: string]: RuntimeType;
+};
 export declare const HANDLER_LOCATION: {
-    'nodejs10.x': string;
     'nodejs12.x': string;
     'nodejs14.x': string;
-    'python2.7': string;
     'python3.6': string;
     'python3.7': string;
     'python3.8': string;
     'python3.9': string;
 };
+export declare const SITES: string[];
 export declare const DEFAULT_LAYER_AWS_ACCOUNT = "464622532012";
 export declare const GOVCLOUD_LAYER_AWS_ACCOUNT = "002406178527";
 export declare const SUBSCRIPTION_FILTER_NAME = "datadog-ci-filter";
 export declare const TAG_VERSION_NAME = "dd_sls_ci";
-export declare const DD_LAMBDA_EXTENSION_LAYER_NAME = "Datadog-Extension";
 export declare const API_KEY_ENV_VAR = "DD_API_KEY";
+export declare const API_KEY_SECRET_ARN_ENV_VAR = "DD_API_KEY_SECRET_ARN";
 export declare const KMS_API_KEY_ENV_VAR = "DD_KMS_API_KEY";
 export declare const SITE_ENV_VAR = "DD_SITE";
 export declare const TRACE_ENABLED_ENV_VAR = "DD_TRACE_ENABLED";
@@ -38,6 +48,8 @@ export declare const ENVIRONMENT_ENV_VAR = "DD_ENV";
 export declare const EXTRA_TAGS_ENV_VAR = "DD_TAGS";
 export declare const CI_SITE_ENV_VAR = "DATADOG_SITE";
 export declare const CI_API_KEY_ENV_VAR = "DATADOG_API_KEY";
+export declare const CI_API_KEY_SECRET_ARN_ENV_VAR = "DATADOG_API_KEY_SECRET_ARN";
 export declare const CI_KMS_API_KEY_ENV_VAR = "DATADOG_KMS_API_KEY";
 export declare const LIST_FUNCTIONS_MAX_RETRY_COUNT = 2;
+export declare const MAX_LAMBDA_STATE_CHECK_ATTEMPTS = 3;
 export declare const EXTRA_TAGS_REG_EXP: RegExp;

package/dist/commands/lambda/constants.js

@@ -1,35 +1,57 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EXTRA_TAGS_REG_EXP = exports.LIST_FUNCTIONS_MAX_RETRY_COUNT = exports.CI_KMS_API_KEY_ENV_VAR = exports.CI_API_KEY_ENV_VAR = exports.CI_SITE_ENV_VAR = exports.EXTRA_TAGS_ENV_VAR = exports.ENVIRONMENT_ENV_VAR = exports.VERSION_ENV_VAR = exports.SERVICE_ENV_VAR = exports.LAMBDA_HANDLER_ENV_VAR = exports.LOG_LEVEL_ENV_VAR = exports.FLUSH_TO_LOG_ENV_VAR = exports.MERGE_XRAY_TRACES_ENV_VAR = exports.TRACE_ENABLED_ENV_VAR = exports.SITE_ENV_VAR = exports.KMS_API_KEY_ENV_VAR = exports.API_KEY_ENV_VAR = exports.DD_LAMBDA_EXTENSION_LAYER_NAME = exports.TAG_VERSION_NAME = exports.SUBSCRIPTION_FILTER_NAME = exports.GOVCLOUD_LAYER_AWS_ACCOUNT = exports.DEFAULT_LAYER_AWS_ACCOUNT = exports.HANDLER_LOCATION = exports.RUNTIME_LAYER_LOOKUP = void 0;
+exports.EXTRA_TAGS_REG_EXP = exports.MAX_LAMBDA_STATE_CHECK_ATTEMPTS = exports.LIST_FUNCTIONS_MAX_RETRY_COUNT = exports.CI_KMS_API_KEY_ENV_VAR = exports.CI_API_KEY_SECRET_ARN_ENV_VAR = exports.CI_API_KEY_ENV_VAR = exports.CI_SITE_ENV_VAR = exports.EXTRA_TAGS_ENV_VAR = exports.ENVIRONMENT_ENV_VAR = exports.VERSION_ENV_VAR = exports.SERVICE_ENV_VAR = exports.LAMBDA_HANDLER_ENV_VAR = exports.LOG_LEVEL_ENV_VAR = exports.FLUSH_TO_LOG_ENV_VAR = exports.MERGE_XRAY_TRACES_ENV_VAR = exports.TRACE_ENABLED_ENV_VAR = exports.SITE_ENV_VAR = exports.KMS_API_KEY_ENV_VAR = exports.API_KEY_SECRET_ARN_ENV_VAR = exports.API_KEY_ENV_VAR = exports.TAG_VERSION_NAME = exports.SUBSCRIPTION_FILTER_NAME = exports.GOVCLOUD_LAYER_AWS_ACCOUNT = exports.DEFAULT_LAYER_AWS_ACCOUNT = exports.SITES = exports.HANDLER_LOCATION = exports.RUNTIME_LOOKUP = exports.RuntimeType = exports.ARM_LAYER_SUFFIX = exports.ARM64_ARCHITECTURE = exports.ARM_RUNTIMES = exports.RUNTIME_LAYER_LOOKUP = exports.EXTENSION_LAYER_KEY = exports.DD_LAMBDA_EXTENSION_LAYER_NAME = void 0;
+exports.DD_LAMBDA_EXTENSION_LAYER_NAME = 'Datadog-Extension';
+exports.EXTENSION_LAYER_KEY = 'extension';
 exports.RUNTIME_LAYER_LOOKUP = {
-    'nodejs10.x': 'Datadog-Node10-x',
+    [exports.EXTENSION_LAYER_KEY]: exports.DD_LAMBDA_EXTENSION_LAYER_NAME,
     'nodejs12.x': 'Datadog-Node12-x',
     'nodejs14.x': 'Datadog-Node14-x',
-    'python2.7': 'Datadog-Python27',
     'python3.6': 'Datadog-Python36',
     'python3.7': 'Datadog-Python37',
     'python3.8': 'Datadog-Python38',
     'python3.9': 'Datadog-Python39',
 };
+exports.ARM_RUNTIMES = [exports.EXTENSION_LAYER_KEY, 'python3.8', 'python3.9'];
+exports.ARM64_ARCHITECTURE = 'arm64';
+exports.ARM_LAYER_SUFFIX = '-ARM';
+var RuntimeType;
+(function (RuntimeType) {
+    RuntimeType[RuntimeType["NODE"] = 0] = "NODE";
+    RuntimeType[RuntimeType["PYTHON"] = 1] = "PYTHON";
+})(RuntimeType = exports.RuntimeType || (exports.RuntimeType = {}));
+exports.RUNTIME_LOOKUP = {
+    'nodejs12.x': RuntimeType.NODE,
+    'nodejs14.x': RuntimeType.NODE,
+    'python3.6': RuntimeType.PYTHON,
+    'python3.7': RuntimeType.PYTHON,
+    'python3.8': RuntimeType.PYTHON,
+    'python3.9': RuntimeType.PYTHON,
+};
 const PYTHON_HANDLER_LOCATION = 'datadog_lambda.handler.handler';
 const NODE_HANDLER_LOCATION = '/opt/nodejs/node_modules/datadog-lambda-js/handler.handler';
 exports.HANDLER_LOCATION = {
-    'nodejs10.x': NODE_HANDLER_LOCATION,
     'nodejs12.x': NODE_HANDLER_LOCATION,
     'nodejs14.x': NODE_HANDLER_LOCATION,
-    'python2.7': PYTHON_HANDLER_LOCATION,
     'python3.6': PYTHON_HANDLER_LOCATION,
     'python3.7': PYTHON_HANDLER_LOCATION,
     'python3.8': PYTHON_HANDLER_LOCATION,
     'python3.9': PYTHON_HANDLER_LOCATION,
 };
+exports.SITES = [
+    'datadoghq.com',
+    'datadoghq.eu',
+    'us3.datadoghq.com',
+    'us5.datadoghq.com',
+    'ddog-gov.,com',
+];
 exports.DEFAULT_LAYER_AWS_ACCOUNT = '464622532012';
 exports.GOVCLOUD_LAYER_AWS_ACCOUNT = '002406178527';
 exports.SUBSCRIPTION_FILTER_NAME = 'datadog-ci-filter';
 exports.TAG_VERSION_NAME = 'dd_sls_ci';
-exports.DD_LAMBDA_EXTENSION_LAYER_NAME = 'Datadog-Extension';
 // Environment variables used in the Lambda environment
 exports.API_KEY_ENV_VAR = 'DD_API_KEY';
+exports.API_KEY_SECRET_ARN_ENV_VAR = 'DD_API_KEY_SECRET_ARN';
 exports.KMS_API_KEY_ENV_VAR = 'DD_KMS_API_KEY';
 exports.SITE_ENV_VAR = 'DD_SITE';
 exports.TRACE_ENABLED_ENV_VAR = 'DD_TRACE_ENABLED';
@@ -44,8 +66,10 @@ exports.EXTRA_TAGS_ENV_VAR = 'DD_TAGS';
 // Environment variables used by Datadog CI
 exports.CI_SITE_ENV_VAR = 'DATADOG_SITE';
 exports.CI_API_KEY_ENV_VAR = 'DATADOG_API_KEY';
+exports.CI_API_KEY_SECRET_ARN_ENV_VAR = 'DATADOG_API_KEY_SECRET_ARN';
 exports.CI_KMS_API_KEY_ENV_VAR = 'DATADOG_KMS_API_KEY';
 exports.LIST_FUNCTIONS_MAX_RETRY_COUNT = 2;
+exports.MAX_LAMBDA_STATE_CHECK_ATTEMPTS = 3;
 // DD_TAGS Regular Expression
 // This RegExp ensures that the --extra-tags string
 // matches a list of <key>:<value> separated by commas

package/dist/commands/lambda/functions/commons.d.ts

@@ -0,0 +1,101 @@
+import { CloudWatchLogs, Lambda } from 'aws-sdk';
+import { Runtime } from '../constants';
+import { FunctionConfiguration, InstrumentationSettings } from '../interfaces';
+/**
+ * Returns an array of merged layer ARNs if given a Full Layer ARN,
+ * if not, it justs returns the layer ARNs provided.
+ *
+ * @param fullLayerARN a complete layer ARN.
+ * @param partialLayerARN a partial layer ARN.
+ * @param layerARNs an array of layer ARNs.
+ * @returns an array of layer ARNs.
+ */
+export declare const addLayerArn: (fullLayerArn: string | undefined, previousLayerName: string, layerARNs: string[]) => string[];
+/**
+ * Returns a coerced boolean given string booleans or booleans in
+ * an spread array. Every other value will be ignored.
+ *
+ * @param fallback default value if none of the provided `values` comply.
+ * @param values an spread array of string booleans or booleans.
+ * @returns a coerced boolean.
+ */
+export declare const coerceBoolean: (fallback: boolean, ...values: any[]) => boolean;
+/**
+ * Returns an array of functions grouped by its region, it
+ * throws an error if there are functions without a region.
+ *
+ * @param functions an array of strings comprised by
+ * Functions ARNs, Partial ARNs, or Function Names.
+ * @param defaultRegion a fallback region
+ * @returns an array of functions grouped by region
+ */
+export declare const collectFunctionsByRegion: (functions: string[], defaultRegion: string | undefined) => {
+    [key: string]: string[];
+};
+/**
+ * Given a Lambda instance and a regular expression,
+ * returns all the Function Configurations that match.
+ *
+ * @param lambda an instance of Lambda from aws-sdk.
+ * @param pattern a regular expression
+ * @returns an array of Lambda FunctionConfiguration's that match the pattern above.
+ */
+export declare const getLambdaFunctionConfigsFromRegex: (lambda: Lambda, pattern: string) => Promise<Lambda.FunctionConfiguration[]>;
+/**
+ * Given a Lambda instance and an array of Lambda names,
+ * return all the Lambda Function Configurations.
+ *
+ * @param lambda an instance of Lambda from aws-sdk.
+ * @param functionARNs an array of strings comprised by
+ * Functions ARNs, Partial ARNs, or Function Names.
+ * @returns an array of Lambda FunctionConfiguration's.
+ */
+export declare const getLambdaFunctionConfigs: (lambda: Lambda, functionARNs: string[]) => Promise<Lambda.FunctionConfiguration[]>;
+/**
+ * Returns the correct ARN of a **Specific Runtime Layer** given its configuration, region,
+ * and settings (optional).
+ *
+ * @param config a Lambda FunctionConfiguration.
+ * @param region a region where the layer is hosted.
+ * @param settings instrumentation settings, mainly used to change the AWS account that contains the Layer.
+ * @returns the ARN of a **Specific Runtime Layer** with the correct region, account, architecture, and name.
+ */
+export declare const getLayerArn: (config: Lambda.FunctionConfiguration, runtime: Runtime, region: string, settings?: InstrumentationSettings | undefined) => string;
+export declare const getLayers: (config: Lambda.FunctionConfiguration) => string[];
+/**
+ * Call the aws-sdk Lambda api to get a Function given
+ * an ARN and then return its Configuration.
+ *
+ * @param lambda an instance of Lambda from aws-sdk.
+ * @param functionARN a string, can be Function ARN, Partial ARN, or a Function Name.
+ * @returns the Lambda FunctionConfiguration of the given ARN.
+ */
+export declare const getLambdaFunctionConfig: (lambda: Lambda, functionARN: string) => Promise<Lambda.FunctionConfiguration>;
+/**
+ * Given a Function ARN, return its region by splitting the string,
+ * can return undefined if it is doesn't exist.
+ *
+ * @param functionARN a string, can be Function ARN, Partial ARN, or a Function Name.
+ * @returns the region of an ARN.
+ */
+export declare const getRegion: (functionARN: string) => string | undefined;
+/**
+ * Returns whether a Lambda Function is active or throws an error if
+ * the FunctionConfiguration does not comply with `Successful` or `Active`.
+ *
+ * @param lambda an instance of Lambda from aws-sdk.
+ * @param config a Lambda FunctionConfiguration.
+ * @param functionArn a string, can be Function ARN, Partial ARN, or a Function Name.
+ * @param attempts the number of attemps that have passed since the last retry.
+ * @returns if a Lambda Function is active.
+ */
+export declare const isLambdaActive: (lambda: Lambda, config: Lambda.FunctionConfiguration, functionArn: string, attempts?: number) => Promise<boolean>;
+/**
+ * Returns whether the runtime given is supported by the Datadog CI Lambda.
+ *
+ * @param runtime a string representing a Lambda FunctionConfiguration Runtime.
+ * @returns if a runtime is supported.
+ */
+export declare const isSupportedRuntime: (runtime?: string | undefined) => runtime is Runtime;
+export declare const sentenceMatchesRegEx: (sentence: string, regex: RegExp) => RegExpMatchArray | null;
+export declare const updateLambdaFunctionConfigs: (lambda: Lambda, cloudWatch: CloudWatchLogs, configs: FunctionConfiguration[]) => Promise<void>;