@datadog/datadog-ci 2.11.0 → 2.13.0

package/dist/commands/stepfunctions/awsCommands.js

@@ -0,0 +1,215 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.untagResource = exports.describeSubscriptionFilters = exports.deleteSubscriptionFilter = exports.enableStepFunctionLogs = exports.attachPolicyToStateMachineIamRole = exports.createLogsAccessPolicy = exports.createLogGroup = exports.tagResource = exports.putSubscriptionFilter = exports.listTagsForResource = exports.describeStateMachine = void 0;
+const client_cloudwatch_logs_1 = require("@aws-sdk/client-cloudwatch-logs");
+const client_iam_1 = require("@aws-sdk/client-iam");
+const client_sfn_1 = require("@aws-sdk/client-sfn");
+const helpers_1 = require("./helpers");
+const describeStateMachine = (stepFunctionsClient, stepFunctionArn) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = { stateMachineArn: stepFunctionArn };
+    const command = new client_sfn_1.DescribeStateMachineCommand(input);
+    const data = yield stepFunctionsClient.send(command);
+    return data;
+});
+exports.describeStateMachine = describeStateMachine;
+const listTagsForResource = (stepFunctionsClient, stepFunctionArn) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = { resourceArn: stepFunctionArn };
+    const command = new client_sfn_1.ListTagsForResourceCommand(input);
+    const data = yield stepFunctionsClient.send(command);
+    return data;
+});
+exports.listTagsForResource = listTagsForResource;
+const putSubscriptionFilter = (cloudWatchLogsClient, forwarderArn, filterName, logGroupName, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    // Running this function multiple times would not create duplicate filters (old filter with the same name would be overwritten).
+    // However, two filters with the same destination forwarder can exist when the filter names are different.
+    const input = {
+        destinationArn: forwarderArn,
+        filterName,
+        filterPattern: '',
+        logGroupName,
+    };
+    const command = new client_cloudwatch_logs_1.PutSubscriptionFilterCommand(input);
+    const commandName = 'PutSubscriptionFilter';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    if (!dryRun) {
+        const data = yield cloudWatchLogsClient.send(command);
+        // Even if the same filter name is created before, the response is still 200.
+        // there are no way to tell
+        context.stdout.write(`Subscription filter ${filterName} is created or the original filter ${filterName} is overwritten.\nt`);
+        return data;
+    }
+});
+exports.putSubscriptionFilter = putSubscriptionFilter;
+const tagResource = (stepFunctionsClient, stepFunctionArn, tags, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = {
+        resourceArn: stepFunctionArn,
+        tags,
+    };
+    const command = new client_sfn_1.TagResourceCommand(input);
+    const commandName = 'TagResource';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    if (!dryRun) {
+        const data = yield stepFunctionsClient.send(command);
+        printSuccessfulMessage(commandName, context);
+        return data;
+    }
+});
+exports.tagResource = tagResource;
+const createLogGroup = (cloudWatchLogsClient, logGroupName, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = {
+        logGroupName,
+    };
+    const command = new client_cloudwatch_logs_1.CreateLogGroupCommand(input);
+    const commandName = 'CreateLogGroup';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    try {
+        if (!dryRun) {
+            const data = yield cloudWatchLogsClient.send(command);
+            printSuccessfulMessage(commandName, context);
+            return data;
+        }
+    }
+    catch (err) {
+        // if a resource already exists it's a warning since we can use that resource instead of creating it
+        if (err instanceof Error && err.name === 'ResourceAlreadyExistsException') {
+            context.stdout.write(` -> [Info] ${err.message}. Skipping resource creation and continuing with instrumentation.\n`);
+        }
+    }
+});
+exports.createLogGroup = createLogGroup;
+const createLogsAccessPolicy = (iamClient, describeStateMachineCommandOutput, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    // according to https://docs.aws.amazon.com/step-functions/latest/dg/cw-logs.html#cloudwatch-iam-policy
+    const logsAccessPolicy = {
+        Version: '2012-10-17',
+        Statement: [
+            {
+                Effect: 'Allow',
+                Action: [
+                    'logs:CreateLogDelivery',
+                    'logs:CreateLogStream',
+                    'logs:GetLogDelivery',
+                    'logs:UpdateLogDelivery',
+                    'logs:DeleteLogDelivery',
+                    'logs:ListLogDeliveries',
+                    'logs:PutLogEvents',
+                    'logs:PutResourcePolicy',
+                    'logs:DescribeResourcePolicies',
+                    'logs:DescribeLogGroups',
+                ],
+                Resource: '*',
+            },
+        ],
+    };
+    const input = {
+        PolicyDocument: JSON.stringify(logsAccessPolicy),
+        PolicyName: helpers_1.buildLogAccessPolicyName(describeStateMachineCommandOutput),
+    };
+    const command = new client_iam_1.CreatePolicyCommand(input);
+    const commandName = 'CreatePolicy';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    try {
+        if (!dryRun) {
+            const data = yield iamClient.send(command);
+            printSuccessfulMessage(commandName, context);
+            return data;
+        }
+    }
+    catch (err) {
+        // if a resource already exists it's a warning since we can use that resource instead of creating it
+        if (err instanceof Error && err.name === 'ResourceAlreadyExistsException') {
+            context.stdout.write(` -> [Info] ${err.message}. Skipping resource creation and continuing with instrumentation.\n`);
+        }
+    }
+});
+exports.createLogsAccessPolicy = createLogsAccessPolicy;
+const attachPolicyToStateMachineIamRole = (iamClient, describeStateMachineCommandOutput, accountId, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a;
+    const roleName = (_a = describeStateMachineCommandOutput === null || describeStateMachineCommandOutput === void 0 ? void 0 : describeStateMachineCommandOutput.roleArn) === null || _a === void 0 ? void 0 : _a.split('/')[1];
+    const policyArn = `arn:aws:iam::${accountId}:policy/${helpers_1.buildLogAccessPolicyName(describeStateMachineCommandOutput)}`;
+    const input = {
+        PolicyArn: policyArn,
+        RoleName: roleName,
+    };
+    const command = new client_iam_1.AttachRolePolicyCommand(input);
+    const commandName = 'AttachRolePolicy';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    if (!dryRun) {
+        const data = yield iamClient.send(command);
+        printSuccessfulMessage(commandName, context);
+        return data;
+    }
+});
+exports.attachPolicyToStateMachineIamRole = attachPolicyToStateMachineIamRole;
+const enableStepFunctionLogs = (stepFunctionsClient, stepFunction, logGroupArn, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = {
+        stateMachineArn: stepFunction.stateMachineArn,
+        loggingConfiguration: {
+            destinations: [{ cloudWatchLogsLogGroup: { logGroupArn } }],
+            level: 'ALL',
+            includeExecutionData: true,
+        },
+    };
+    const previousParams = {
+        stateMachineArn: stepFunction.stateMachineArn,
+        loggingConfiguration: stepFunction.loggingConfiguration,
+    };
+    const command = new client_sfn_1.UpdateStateMachineCommand(input);
+    const commandName = 'UpdateStateMachine';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input, previousParams);
+    if (!dryRun) {
+        const data = yield stepFunctionsClient.send(command);
+        printSuccessfulMessage(commandName, context);
+        return data;
+    }
+});
+exports.enableStepFunctionLogs = enableStepFunctionLogs;
+const deleteSubscriptionFilter = (cloudWatchLogsClient, filterName, logGroupName, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = {
+        filterName,
+        logGroupName,
+    };
+    const command = new client_cloudwatch_logs_1.DeleteSubscriptionFilterCommand(input);
+    const commandName = 'DeleteSubscriptionFilter';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    if (!dryRun) {
+        const data = yield cloudWatchLogsClient.send(command);
+        printSuccessfulMessage(commandName, context);
+        return data;
+    }
+});
+exports.deleteSubscriptionFilter = deleteSubscriptionFilter;
+const describeSubscriptionFilters = (cloudWatchLogsClient, logGroupName) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = { logGroupName };
+    const command = new client_cloudwatch_logs_1.DescribeSubscriptionFiltersCommand(input);
+    const data = yield cloudWatchLogsClient.send(command);
+    return data;
+});
+exports.describeSubscriptionFilters = describeSubscriptionFilters;
+const printSuccessfulMessage = (commandName, context) => {
+    context.stdout.write(`${commandName} finished successfully!\n\n`);
+};
+const untagResource = (stepFunctionsClient, tagKeys, stepFunctionArn, context, dryRun) => __awaiter(void 0, void 0, void 0, function* () {
+    const input = {
+        resourceArn: stepFunctionArn,
+        tagKeys,
+    };
+    const command = new client_sfn_1.UntagResourceCommand(input);
+    const commandName = 'UntagResource';
+    helpers_1.displayChanges(stepFunctionArn, context, commandName, dryRun, input);
+    if (!dryRun) {
+        const data = yield stepFunctionsClient.send(command);
+        printSuccessfulMessage(commandName, context);
+        return data;
+    }
+});
+exports.untagResource = untagResource;
+//# sourceMappingURL=awsCommands.js.map

package/dist/commands/stepfunctions/awsCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsCommands.js","sourceRoot":"","sources":["../../../src/commands/stepfunctions/awsCommands.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4EAUwC;AACxC,oDAM4B;AAC5B,oDAY4B;AAI5B,uCAAkE;AAE3D,MAAM,oBAAoB,GAAG,CAClC,mBAA8B,EAC9B,eAAuB,EACqB,EAAE;IAC9C,MAAM,KAAK,GAAG,EAAC,eAAe,EAAE,eAAe,EAAC,CAAA;IAChD,MAAM,OAAO,GAAG,IAAI,wCAA2B,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEpD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA,CAAA;AATY,QAAA,oBAAoB,wBAShC;AAEM,MAAM,mBAAmB,GAAG,CACjC,mBAA8B,EAC9B,eAAuB,EACoB,EAAE;IAC7C,MAAM,KAAK,GAAG,EAAC,WAAW,EAAE,eAAe,EAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,IAAI,uCAA0B,CAAC,KAAK,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEpD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA,CAAA;AATY,QAAA,mBAAmB,uBAS/B;AAEM,MAAM,qBAAqB,GAAG,CACnC,oBAA0C,EAC1C,YAAoB,EACpB,UAAkB,EAClB,YAAoB,EACpB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EAC0C,EAAE;IAC3D,gIAAgI;IAChI,0GAA0G;IAE1G,MAAM,KAAK,GAAG;QACZ,cAAc,EAAE,YAAY;QAC5B,UAAU;QACV,aAAa,EAAE,EAAE;QACjB,YAAY;KACb,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,qDAA4B,CAAC,KAAK,CAAC,CAAA;IACvD,MAAM,WAAW,GAAG,uBAAuB,CAAA;IAC3C,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrD,6EAA6E;QAC7E,2BAA2B;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,UAAU,sCAAsC,UAAU,qBAAqB,CACvG,CAAA;QAED,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AA/BY,QAAA,qBAAqB,yBA+BjC;AAEM,MAAM,WAAW,GAAG,CACzB,mBAA8B,EAC9B,eAAuB,EACvB,IAAW,EACX,OAAoB,EACpB,MAAe,EACgC,EAAE;IACjD,MAAM,KAAK,GAAG;QACZ,WAAW,EAAE,eAAe;QAC5B,IAAI;KACL,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,+BAAkB,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,aAAa,CAAA;IACjC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpD,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5C,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AArBY,QAAA,WAAW,eAqBvB;AAEM,MAAM,cAAc,GAAG,CAC5B,oBAA0C,EAC1C,YAAoB,EACpB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EACmC,EAAE;IACpD,MAAM,KAAK,GAAG;QACZ,YAAY;KACb,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,8CAAqB,CAAC,KAAK,CAAC,CAAA;IAChD,MAAM,WAAW,GAAG,gBAAgB,CAAA;IACpC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI;QACF,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACrD,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAE5C,OAAO,IAAI,CAAA;SACZ;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,oGAAoG;QACpG,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,gCAAgC,EAAE;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,GAAG,CAAC,OAAO,qEAAqE,CAC/F,CAAA;SACF;KACF;AACH,CAAC,CAAA,CAAA;AA5BY,QAAA,cAAc,kBA4B1B;AAEM,MAAM,sBAAsB,GAAG,CACpC,SAAoB,EACpB,iCAAoE,EACpE,eAAuB,EACvB,OAAoB,EACpB,MAAe,EACiC,EAAE;IAClD,uGAAuG;IACvG,MAAM,gBAAgB,GAAG;QACvB,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE;oBACN,wBAAwB;oBACxB,sBAAsB;oBACtB,qBAAqB;oBACrB,wBAAwB;oBACxB,wBAAwB;oBACxB,wBAAwB;oBACxB,mBAAmB;oBACnB,wBAAwB;oBACxB,+BAA+B;oBAC/B,wBAAwB;iBACzB;gBACD,QAAQ,EAAE,GAAG;aACd;SACF;KACF,CAAA;IAED,MAAM,KAAK,GAAG;QACZ,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;QAChD,UAAU,EAAE,kCAAwB,CAAC,iCAAiC,CAAC;KACxE,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,gCAAmB,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAA;IAClC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI;QACF,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC1C,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAE5C,OAAO,IAAI,CAAA;SACZ;KACF;IAAC,OAAO,GAAG,EAAE;QACZ,oGAAoG;QACpG,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,gCAAgC,EAAE;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,GAAG,CAAC,OAAO,qEAAqE,CAC/F,CAAA;SACF;KACF;AACH,CAAC,CAAA,CAAA;AApDY,QAAA,sBAAsB,0BAoDlC;AAEM,MAAM,iCAAiC,GAAG,CAC/C,SAAoB,EACpB,iCAAoE,EACpE,SAAiB,EACjB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EACqC,EAAE;;IACtD,MAAM,QAAQ,GAAG,MAAA,iCAAiC,aAAjC,iCAAiC,uBAAjC,iCAAiC,CAAE,OAAO,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,gBAAgB,SAAS,WAAW,kCAAwB,CAAC,iCAAiC,CAAC,EAAE,CAAA;IAEnH,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,QAAQ;KACnB,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,oCAAuB,CAAC,KAAK,CAAC,CAAA;IAClD,MAAM,WAAW,GAAG,kBAAkB,CAAA;IACtC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1C,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5C,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AAzBY,QAAA,iCAAiC,qCAyB7C;AAEM,MAAM,sBAAsB,GAAG,CACpC,mBAA8B,EAC9B,YAA+C,EAC/C,WAAmB,EACnB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EACuC,EAAE;IACxD,MAAM,KAAK,GAAG;QACZ,eAAe,EAAE,YAAY,CAAC,eAAe;QAC7C,oBAAoB,EAAE;YACpB,YAAY,EAAE,CAAC,EAAC,sBAAsB,EAAE,EAAC,WAAW,EAAC,EAAC,CAAC;YACvD,KAAK,EAAE,KAAK;YACZ,oBAAoB,EAAE,IAAI;SAC3B;KACF,CAAA;IAED,MAAM,cAAc,GAAG;QACrB,eAAe,EAAE,YAAY,CAAC,eAAe;QAC7C,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;KACxD,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,sCAAyB,CAAC,KAAK,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,oBAAoB,CAAA;IACxC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAA;IACpF,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpD,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5C,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AA/BY,QAAA,sBAAsB,0BA+BlC;AAEM,MAAM,wBAAwB,GAAG,CACtC,oBAA0C,EAC1C,UAAkB,EAClB,YAAoB,EACpB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EAC6C,EAAE;IAC9D,MAAM,KAAK,GAAG;QACZ,UAAU;QACV,YAAY;KACb,CAAA;IAED,MAAM,OAAO,GAAG,IAAI,wDAA+B,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,0BAA0B,CAAA;IAC9C,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrD,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5C,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AAtBY,QAAA,wBAAwB,4BAsBpC;AAEM,MAAM,2BAA2B,GAAG,CACzC,oBAA0C,EAC1C,YAAoB,EAC+B,EAAE;IACrD,MAAM,KAAK,GAAG,EAAC,YAAY,EAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,IAAI,2DAAkC,CAAC,KAAK,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAErD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA,CAAA;AATY,QAAA,2BAA2B,+BASvC;AAED,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAE,OAAoB,EAAQ,EAAE;IACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,6BAA6B,CAAC,CAAA;AACnE,CAAC,CAAA;AAEM,MAAM,aAAa,GAAG,CAC3B,mBAA8B,EAC9B,OAAiB,EACjB,eAAuB,EACvB,OAAoB,EACpB,MAAe,EACkC,EAAE;IACnD,MAAM,KAAK,GAAG;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO;KACR,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,iCAAoB,CAAC,KAAK,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,eAAe,CAAA;IACnC,wBAAc,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpD,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5C,OAAO,IAAI,CAAA;KACZ;AACH,CAAC,CAAA,CAAA;AApBY,QAAA,aAAa,iBAoBzB"}

package/dist/commands/stepfunctions/cli.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/stepfunctions/cli.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const instrument_1 = require("./instrument");
+const uninstrument_1 = require("./uninstrument");
+module.exports = [instrument_1.InstrumentStepFunctionsCommand, uninstrument_1.UninstrumentStepFunctionsCommand];
+//# sourceMappingURL=cli.js.map

package/dist/commands/stepfunctions/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/commands/stepfunctions/cli.ts"],"names":[],"mappings":";;AAAA,6CAA2D;AAC3D,iDAA+D;AAE/D,MAAM,CAAC,OAAO,GAAG,CAAC,2CAA8B,EAAE,+CAAgC,CAAC,CAAA"}

package/dist/commands/stepfunctions/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const DD_CI_IDENTIFYING_STRING = "DdCiLogGroupSubscription";
+export declare const TAG_VERSION_NAME = "dd_sls_ci";

package/dist/commands/stepfunctions/constants.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TAG_VERSION_NAME = exports.DD_CI_IDENTIFYING_STRING = void 0;
+exports.DD_CI_IDENTIFYING_STRING = 'DdCiLogGroupSubscription';
+exports.TAG_VERSION_NAME = 'dd_sls_ci';
+//# sourceMappingURL=constants.js.map

package/dist/commands/stepfunctions/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/commands/stepfunctions/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,wBAAwB,GAAG,0BAA0B,CAAA;AACrD,QAAA,gBAAgB,GAAG,WAAW,CAAA"}

package/dist/commands/stepfunctions/helpers.d.ts

@@ -0,0 +1,15 @@
+import { DescribeStateMachineCommandOutput } from '@aws-sdk/client-sfn';
+import { BaseContext } from 'clipanion';
+export declare const displayChanges: (stepFunctionArn: string, context: BaseContext, commandName: string, dryRun: boolean, params: any, previousParams?: any) => void;
+export declare const buildArn: (partition: string, service: string, region: string, accountId: string, resourceType: string, resourceId: string) => string;
+export declare const buildLogGroupName: (stepFunctionName: string, env: string | undefined) => string;
+export declare const buildSubscriptionFilterName: (stepFunctionName: string) => string;
+export declare const isValidArn: (str: string) => boolean;
+export declare const getStepFunctionLogGroupArn: (stepFunction: DescribeStateMachineCommandOutput) => string | undefined;
+export declare const parseArn: (arn: string) => {
+    partition: string;
+    region: string;
+    accountId: string;
+    resourceName: string;
+};
+export declare const buildLogAccessPolicyName: (stepFunction: DescribeStateMachineCommandOutput) => string;

package/dist/commands/stepfunctions/helpers.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildLogAccessPolicyName = exports.parseArn = exports.getStepFunctionLogGroupArn = exports.isValidArn = exports.buildSubscriptionFilterName = exports.buildLogGroupName = exports.buildArn = exports.displayChanges = void 0;
+const deep_object_diff_1 = require("deep-object-diff");
+const constants_1 = require("./constants");
+const displayChanges = (stepFunctionArn, context, commandName, dryRun, params, previousParams) => {
+    context.stdout.write(`${'='.repeat(50)}`);
+    context.stdout.write(`\n${dryRun ? '\n[Dry Run] Planning for' : 'Will apply'} the following change:\n`);
+    context.stdout.write(`\nChanges for ${stepFunctionArn}\n`);
+    if (previousParams !== undefined) {
+        context.stdout.write(`\n${commandName}:\nFrom:\n${JSON.stringify(deep_object_diff_1.diff(params, previousParams), undefined, 2)}\nTo:\n${JSON.stringify(deep_object_diff_1.diff(previousParams, params), undefined, 2)}\n`);
+    }
+    else {
+        context.stdout.write(`\n${commandName}:\n${JSON.stringify(params, undefined, 2)}\n`);
+    }
+};
+exports.displayChanges = displayChanges;
+const buildArn = (partition, service, region, accountId, resourceType, resourceId) => {
+    return `arn:${partition}:${service}:${region}:${accountId}:${resourceType}:${resourceId}`;
+};
+exports.buildArn = buildArn;
+const buildLogGroupName = (stepFunctionName, env) => {
+    return `/aws/vendedlogs/states/${stepFunctionName}-Logs${env !== undefined ? '-' + env : ''}`;
+};
+exports.buildLogGroupName = buildLogGroupName;
+const buildSubscriptionFilterName = (stepFunctionName) => {
+    return `${stepFunctionName}-${constants_1.DD_CI_IDENTIFYING_STRING}`;
+};
+exports.buildSubscriptionFilterName = buildSubscriptionFilterName;
+const isValidArn = (str) => {
+    const arnFields = str.split(':');
+    return arnFields.length >= 7 && arnFields[0] === 'arn';
+};
+exports.isValidArn = isValidArn;
+const getStepFunctionLogGroupArn = (stepFunction) => {
+    var _a, _b, _c;
+    const [logDestinations] = (_b = (_a = stepFunction.loggingConfiguration) === null || _a === void 0 ? void 0 : _a.destinations) !== null && _b !== void 0 ? _b : [{ cloudWatchLogsLogGroup: {} }];
+    return (_c = logDestinations.cloudWatchLogsLogGroup) === null || _c === void 0 ? void 0 : _c.logGroupArn;
+};
+exports.getStepFunctionLogGroupArn = getStepFunctionLogGroupArn;
+const parseArn = (arn) => {
+    const [, partition, , region, accountId, , resourceName] = arn.split(':');
+    return {
+        partition,
+        region,
+        accountId,
+        resourceName,
+    };
+};
+exports.parseArn = parseArn;
+const buildLogAccessPolicyName = (stepFunction) => {
+    return `LogsDeliveryAccessPolicy-${stepFunction.name}`;
+};
+exports.buildLogAccessPolicyName = buildLogAccessPolicyName;
+//# sourceMappingURL=helpers.js.map

package/dist/commands/stepfunctions/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/commands/stepfunctions/helpers.ts"],"names":[],"mappings":";;;AAEA,uDAAqC;AAErC,2CAAoD;AAE7C,MAAM,cAAc,GAAG,CAC5B,eAAuB,EACvB,OAAoB,EACpB,WAAmB,EACnB,MAAe,EACf,MAAW,EACX,cAAoB,EACd,EAAE;IACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,YAAY,0BAA0B,CAAC,CAAA;IACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,eAAe,IAAI,CAAC,CAAA;IAC1D,IAAI,cAAc,KAAK,SAAS,EAAE;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,WAAW,aAAa,IAAI,CAAC,SAAS,CAAC,uBAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAC7G,uBAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EAC5B,SAAS,EACT,CAAC,CACF,IAAI,CACN,CAAA;KACF;SAAM;QACL,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;KACrF;AACH,CAAC,CAAA;AAtBY,QAAA,cAAc,kBAsB1B;AAEM,MAAM,QAAQ,GAAG,CACtB,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,SAAiB,EACjB,YAAoB,EACpB,UAAkB,EACV,EAAE;IACV,OAAO,OAAO,SAAS,IAAI,OAAO,IAAI,MAAM,IAAI,SAAS,IAAI,YAAY,IAAI,UAAU,EAAE,CAAA;AAC3F,CAAC,CAAA;AATY,QAAA,QAAQ,YASpB;AAEM,MAAM,iBAAiB,GAAG,CAAC,gBAAwB,EAAE,GAAuB,EAAU,EAAE;IAC7F,OAAO,0BAA0B,gBAAgB,QAAQ,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAC/F,CAAC,CAAA;AAFY,QAAA,iBAAiB,qBAE7B;AAEM,MAAM,2BAA2B,GAAG,CAAC,gBAAwB,EAAU,EAAE;IAC9E,OAAO,GAAG,gBAAgB,IAAI,oCAAwB,EAAE,CAAA;AAC1D,CAAC,CAAA;AAFY,QAAA,2BAA2B,+BAEvC;AAEM,MAAM,UAAU,GAAG,CAAC,GAAW,EAAW,EAAE;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEhC,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,CAAA;AACxD,CAAC,CAAA;AAJY,QAAA,UAAU,cAItB;AAEM,MAAM,0BAA0B,GAAG,CAAC,YAA+C,EAAsB,EAAE;;IAChH,MAAM,CAAC,eAAe,CAAC,GAAG,MAAA,MAAA,YAAY,CAAC,oBAAoB,0CAAE,YAAY,mCAAI,CAAC,EAAC,sBAAsB,EAAE,EAAE,EAAC,CAAC,CAAA;IAE3G,OAAO,MAAA,eAAe,CAAC,sBAAsB,0CAAE,WAAW,CAAA;AAC5D,CAAC,CAAA;AAJY,QAAA,0BAA0B,8BAItC;AAEM,MAAM,QAAQ,GAAG,CACtB,GAAW,EAMX,EAAE;IACF,MAAM,CAAC,EAAE,SAAS,EAAE,AAAD,EAAG,MAAM,EAAE,SAAS,EAAE,AAAD,EAAG,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEzE,OAAO;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,YAAY;KACb,CAAA;AACH,CAAC,CAAA;AAhBY,QAAA,QAAQ,YAgBpB;AACM,MAAM,wBAAwB,GAAG,CAAC,YAA+C,EAAU,EAAE;IAClG,OAAO,4BAA4B,YAAY,CAAC,IAAI,EAAE,CAAA;AACxD,CAAC,CAAA;AAFY,QAAA,wBAAwB,4BAEpC"}

package/dist/commands/stepfunctions/instrument.d.ts

@@ -0,0 +1,10 @@
+import { Command } from 'clipanion';
+export declare class InstrumentStepFunctionsCommand extends Command {
+    static usage: import("clipanion").Usage;
+    private dryRun;
+    private environment?;
+    private forwarderArn;
+    private service?;
+    private stepFunctionArns;
+    execute(): Promise<1 | 0>;
+}

package/dist/commands/stepfunctions/instrument.js

@@ -0,0 +1,242 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstrumentStepFunctionsCommand = void 0;
+const client_cloudwatch_logs_1 = require("@aws-sdk/client-cloudwatch-logs");
+const client_iam_1 = require("@aws-sdk/client-iam");
+const client_sfn_1 = require("@aws-sdk/client-sfn");
+const clipanion_1 = require("clipanion");
+const awsCommands_1 = require("./awsCommands");
+const constants_1 = require("./constants");
+const helpers_1 = require("./helpers");
+const cliVersion = require('../../../package.json').version;
+class InstrumentStepFunctionsCommand extends clipanion_1.Command {
+    constructor() {
+        super(...arguments);
+        this.dryRun = false;
+        this.stepFunctionArns = [];
+    }
+    execute() {
+        var _a, _b, _c, _d, _e;
+        return __awaiter(this, void 0, void 0, function* () {
+            let validationError = false;
+            if (typeof this.forwarderArn !== 'string') {
+                this.context.stdout.write('[Error] `--forwarder` is required\n');
+                validationError = true;
+            }
+            else if (!helpers_1.isValidArn(this.forwarderArn)) {
+                this.context.stdout.write(`[Error] Invalid arn format for \`--forwarder\` ${this.forwarderArn}\n`);
+                validationError = true;
+            }
+            if (validationError) {
+                return 1;
+            }
+            // remove duplicate step function arns
+            const stepFunctionArns = [...new Set(this.stepFunctionArns)];
+            if (stepFunctionArns.length === 0) {
+                this.context.stdout.write(`[Error] Must specify at least one \`--step-function\`\n`);
+                validationError = true;
+            }
+            for (const stepFunctionArn of stepFunctionArns) {
+                if (!helpers_1.isValidArn(stepFunctionArn)) {
+                    this.context.stdout.write(`[Error] Invalid arn format for \`--step-function\` ${stepFunctionArn}\n`);
+                    validationError = true;
+                }
+            }
+            if (validationError) {
+                return 1;
+            }
+            let hasChanges = false;
+            // loop over step functions passed as parameters and generate a list of requests to make to AWS for each step function
+            for (const stepFunctionArn of stepFunctionArns) {
+                // use region from the step function arn to make requests to AWS
+                const arnObject = helpers_1.parseArn(stepFunctionArn);
+                const region = arnObject.region;
+                const cloudWatchLogsClient = new client_cloudwatch_logs_1.CloudWatchLogsClient({ region });
+                const stepFunctionsClient = new client_sfn_1.SFNClient({ region });
+                const iamClient = new client_iam_1.IAMClient({ region });
+                let describeStateMachineCommandOutput;
+                try {
+                    describeStateMachineCommandOutput = yield awsCommands_1.describeStateMachine(stepFunctionsClient, stepFunctionArn);
+                }
+                catch (err) {
+                    if (err instanceof Error) {
+                        this.context.stdout.write(`\n[Error] ${err.message}. Unable to describe state machine ${stepFunctionArn}\n`);
+                    }
+                    return 1;
+                }
+                let listStepFunctionTagsResponse;
+                try {
+                    listStepFunctionTagsResponse = yield awsCommands_1.listTagsForResource(stepFunctionsClient, stepFunctionArn);
+                }
+                catch (err) {
+                    if (err instanceof Error) {
+                        this.context.stdout.write(`\n[Error] ${err.message}. Unable to fetch tags for Step Function ${stepFunctionArn}\n`);
+                    }
+                    return 1;
+                }
+                const stepFunctionTagsToAdd = [];
+                // if env and service tags are not already set on step function, set these tags using the values passed as parameters
+                const hasEnvTag = (_a = listStepFunctionTagsResponse === null || listStepFunctionTagsResponse === void 0 ? void 0 : listStepFunctionTagsResponse.tags) === null || _a === void 0 ? void 0 : _a.some((tag) => tag.key === 'env');
+                if (!hasEnvTag && typeof this.environment === 'string') {
+                    stepFunctionTagsToAdd.push({
+                        key: 'env',
+                        value: this.environment,
+                    });
+                }
+                else if (!hasEnvTag && this.environment === undefined) {
+                    this.context.stdout.write('\n[Error] --env is required when a Step Function has no env tag\n');
+                    return 1;
+                }
+                if (!((_b = listStepFunctionTagsResponse === null || listStepFunctionTagsResponse === void 0 ? void 0 : listStepFunctionTagsResponse.tags) === null || _b === void 0 ? void 0 : _b.some((tag) => tag.key === 'service')) &&
+                    typeof this.service === 'string') {
+                    stepFunctionTagsToAdd.push({ key: 'service', value: this.service });
+                }
+                // set version tag if it changed
+                if (!((_c = listStepFunctionTagsResponse === null || listStepFunctionTagsResponse === void 0 ? void 0 : listStepFunctionTagsResponse.tags) === null || _c === void 0 ? void 0 : _c.some((tag) => tag.key === constants_1.TAG_VERSION_NAME && tag.value === `v${cliVersion}`))) {
+                    stepFunctionTagsToAdd.push({ key: constants_1.TAG_VERSION_NAME, value: `v${cliVersion}` });
+                }
+                if (stepFunctionTagsToAdd.length > 0) {
+                    try {
+                        yield awsCommands_1.tagResource(stepFunctionsClient, stepFunctionArn, stepFunctionTagsToAdd, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to tag resource for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    hasChanges = true;
+                }
+                const stateMachineName = describeStateMachineCommandOutput.name;
+                const subscriptionFilterName = helpers_1.buildSubscriptionFilterName(stateMachineName);
+                const logLevel = (_d = describeStateMachineCommandOutput.loggingConfiguration) === null || _d === void 0 ? void 0 : _d.level;
+                if (logLevel === 'OFF') {
+                    // if step function logging is disabled, create a log group, subscribe the forwarder to it, and enable step function logging to the created log group
+                    const logGroupName = helpers_1.buildLogGroupName(stateMachineName, this.environment);
+                    try {
+                        yield awsCommands_1.createLogGroup(cloudWatchLogsClient, logGroupName, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to Create Log Group ${logGroupName} for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    try {
+                        yield awsCommands_1.putSubscriptionFilter(cloudWatchLogsClient, this.forwarderArn, subscriptionFilterName, logGroupName, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to put subscription filter ${subscriptionFilterName} for Log Group ${logGroupName}\n`);
+                        }
+                        return 1;
+                    }
+                    const logGroupArn = helpers_1.buildArn(arnObject.partition, 'logs', arnObject.region, arnObject.accountId, 'log-group', `${logGroupName}:*`);
+                    // Create Logs Access policy
+                    try {
+                        yield awsCommands_1.createLogsAccessPolicy(iamClient, describeStateMachineCommandOutput, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to create logs access policy for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    // Attach policy to state machine IAM role
+                    try {
+                        yield awsCommands_1.attachPolicyToStateMachineIamRole(iamClient, describeStateMachineCommandOutput, arnObject.accountId, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to attach policy to state machine iam role for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    // IAM policy on step function role should include log permissions now
+                    try {
+                        yield awsCommands_1.enableStepFunctionLogs(stepFunctionsClient, describeStateMachineCommandOutput, logGroupArn, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to enable log group ${logGroupArn} for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    hasChanges = true;
+                }
+                else {
+                    // if step function logging is enabled, subscribe the forwarder to the log group in the step function logging config
+                    const logGroupArn = helpers_1.getStepFunctionLogGroupArn(describeStateMachineCommandOutput);
+                    if (logGroupArn === undefined) {
+                        this.context.stdout.write('\n[Error] Unable to get Log Group arn from Step Function logging configuration\n');
+                        return 1;
+                    }
+                    const logGroupName = helpers_1.parseArn(logGroupArn).resourceName;
+                    // update step function logging config to have logLevel `ALL` and includeExecutionData `true` if not already configured
+                    const includeExecutionData = (_e = describeStateMachineCommandOutput.loggingConfiguration) === null || _e === void 0 ? void 0 : _e.includeExecutionData;
+                    if (logLevel !== 'ALL' || !includeExecutionData) {
+                        try {
+                            yield awsCommands_1.enableStepFunctionLogs(stepFunctionsClient, describeStateMachineCommandOutput, logGroupArn, stepFunctionArn, this.context, this.dryRun);
+                        }
+                        catch (err) {
+                            if (err instanceof Error) {
+                                this.context.stdout.write(`\n[Error] ${err.message}. Failed to enable step function logs for ${stepFunctionArn} when logLevel is not ALL or includeExecutionData is not true\n`);
+                            }
+                            return 1;
+                        }
+                        hasChanges = true;
+                    }
+                    try {
+                        yield awsCommands_1.putSubscriptionFilter(cloudWatchLogsClient, this.forwarderArn, subscriptionFilterName, logGroupName, stepFunctionArn, this.context, this.dryRun);
+                    }
+                    catch (err) {
+                        if (err instanceof Error) {
+                            this.context.stdout.write(`\n[Error] ${err.message}. Failed to put subscription filter ${subscriptionFilterName} for ${stepFunctionArn}\n`);
+                        }
+                        return 1;
+                    }
+                    hasChanges = true;
+                }
+            }
+            if (!hasChanges) {
+                this.context.stdout.write(`\nNo change is applied.\n `);
+            }
+            return 0;
+        });
+    }
+}
+exports.InstrumentStepFunctionsCommand = InstrumentStepFunctionsCommand;
+InstrumentStepFunctionsCommand.usage = clipanion_1.Command.Usage({
+    description: 'Subscribe Step Function Log Groups to a Datadog Forwarder',
+    details: '--step-function expects a Step Function ARN\n--forwarder expects a Lambda ARN',
+    examples: [
+        [
+            'View and apply changes to subscribe a Step Function Log Group to a Datadog Forwarder',
+            'datadog-ci stepfunctions instrument --step-function arn:aws:states:us-east-1:000000000000:stateMachine:ExampleStepFunction --forwarder arn:aws:lambda:us-east-1:000000000000:function:ExampleDatadogForwarder --env dev --service example-service',
+        ],
+        [
+            'View changes to subscribe a Step Function Log Group to a Datadog Forwarder',
+            'datadog-ci stepfunctions instrument --step-function arn:aws:states:us-east-1:000000000000:stateMachine:ExampleStepFunction --forwarder arn:aws:lambda:us-east-1:000000000000:function:ExampleDatadogForwarder --env dev --service example-service --dry-run',
+        ],
+        [
+            'View and apply changes to subscribe multiple Step Function Log Groups to a Datadog Forwarder',
+            'datadog-ci stepfunctions instrument --step-function arn:aws:states:us-east-1:000000000000:stateMachine:ExampleStepFunction1 --step-function arn:aws:states:us-east-1:000000000000:stateMachine:ExampleStepFunction2 --forwarder arn:aws:lambda:us-east-1:000000000000:function:ExampleDatadogForwarder --env dev --service example-service',
+        ],
+    ],
+});
+InstrumentStepFunctionsCommand.addPath('stepfunctions', 'instrument');
+InstrumentStepFunctionsCommand.addOption('dryRun', clipanion_1.Command.Boolean('-d,--dry-run'));
+InstrumentStepFunctionsCommand.addOption('environment', clipanion_1.Command.String('-e,--env'));
+InstrumentStepFunctionsCommand.addOption('forwarderArn', clipanion_1.Command.String('--forwarder'));
+InstrumentStepFunctionsCommand.addOption('service', clipanion_1.Command.String('--service'));
+InstrumentStepFunctionsCommand.addOption('stepFunctionArns', clipanion_1.Command.Array('-s,--step-function'));
+//# sourceMappingURL=instrument.js.map

package/dist/commands/stepfunctions/instrument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrument.js","sourceRoot":"","sources":["../../../src/commands/stepfunctions/instrument.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4EAAoE;AACpE,oDAA6C;AAC7C,oDAA6C;AAC7C,yCAAiC;AAEjC,+CASsB;AACtB,2CAA4C;AAC5C,uCAOkB;AAElB,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAA;AAE3D,MAAa,8BAA+B,SAAQ,mBAAO;IAA3D;;QAoBU,WAAM,GAAG,KAAK,CAAA;QAId,qBAAgB,GAAa,EAAE,CAAA;IA8RzC,CAAC;IA5Rc,OAAO;;;YAClB,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE;gBACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBAChE,eAAe,GAAG,IAAI,CAAA;aACvB;iBAAM,IAAI,CAAC,oBAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;gBACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,IAAI,CAAC,YAAY,IAAI,CAAC,CAAA;gBAClG,eAAe,GAAG,IAAI,CAAA;aACvB;YAED,IAAI,eAAe,EAAE;gBACnB,OAAO,CAAC,CAAA;aACT;YAED,sCAAsC;YACtC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;YAE5D,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE;gBACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAA;gBACpF,eAAe,GAAG,IAAI,CAAA;aACvB;YAED,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE;gBAC9C,IAAI,CAAC,oBAAU,CAAC,eAAe,CAAC,EAAE;oBAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,eAAe,IAAI,CAAC,CAAA;oBACpG,eAAe,GAAG,IAAI,CAAA;iBACvB;aACF;YAED,IAAI,eAAe,EAAE;gBACnB,OAAO,CAAC,CAAA;aACT;YAED,IAAI,UAAU,GAAG,KAAK,CAAA;YAEtB,sHAAsH;YACtH,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE;gBAC9C,gEAAgE;gBAChE,MAAM,SAAS,GAAG,kBAAQ,CAAC,eAAe,CAAC,CAAA;gBAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;gBAC/B,MAAM,oBAAoB,GAAG,IAAI,6CAAoB,CAAC,EAAC,MAAM,EAAC,CAAC,CAAA;gBAC/D,MAAM,mBAAmB,GAAG,IAAI,sBAAS,CAAC,EAAC,MAAM,EAAC,CAAC,CAAA;gBACnD,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,EAAC,MAAM,EAAC,CAAC,CAAA;gBAEzC,IAAI,iCAAiC,CAAA;gBACrC,IAAI;oBACF,iCAAiC,GAAG,MAAM,kCAAoB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAA;iBACrG;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;wBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,OAAO,sCAAsC,eAAe,IAAI,CAAC,CAAA;qBAC7G;oBAED,OAAO,CAAC,CAAA;iBACT;gBAED,IAAI,4BAA4B,CAAA;gBAChC,IAAI;oBACF,4BAA4B,GAAG,MAAM,iCAAmB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAA;iBAC/F;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;wBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,4CAA4C,eAAe,IAAI,CACxF,CAAA;qBACF;oBAED,OAAO,CAAC,CAAA;iBACT;gBAED,MAAM,qBAAqB,GAAG,EAAE,CAAA;gBAEhC,qHAAqH;gBACrH,MAAM,SAAS,GAAG,MAAA,4BAA4B,aAA5B,4BAA4B,uBAA5B,4BAA4B,CAAE,IAAI,0CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,CAAA;gBACtF,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE;oBACtD,qBAAqB,CAAC,IAAI,CAAC;wBACzB,GAAG,EAAE,KAAK;wBACV,KAAK,EAAE,IAAI,CAAC,WAAW;qBACxB,CAAC,CAAA;iBACH;qBAAM,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;oBACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAA;oBAE9F,OAAO,CAAC,CAAA;iBACT;gBAED,IACE,CAAC,CAAA,MAAA,4BAA4B,aAA5B,4BAA4B,uBAA5B,4BAA4B,CAAE,IAAI,0CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;oBACzE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAChC;oBACA,qBAAqB,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAC,CAAC,CAAA;iBAClE;gBAED,gCAAgC;gBAChC,IACE,CAAC,CAAA,MAAA,4BAA4B,aAA5B,4BAA4B,uBAA5B,4BAA4B,CAAE,IAAI,0CAAE,IAAI,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,4BAAgB,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,UAAU,EAAE,CACxE,CAAA,EACD;oBACA,qBAAqB,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,4BAAgB,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAC,CAAC,CAAA;iBAC7E;gBAED,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE;oBACpC,IAAI;wBACF,MAAM,yBAAW,CAAC,mBAAmB,EAAE,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;qBAC1G;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,OAAO,gCAAgC,eAAe,IAAI,CAAC,CAAA;yBACvG;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,UAAU,GAAG,IAAI,CAAA;iBAClB;gBAED,MAAM,gBAAgB,GAAG,iCAAiC,CAAC,IAAK,CAAA;gBAChE,MAAM,sBAAsB,GAAG,qCAA2B,CAAC,gBAAgB,CAAC,CAAA;gBAE5E,MAAM,QAAQ,GAAG,MAAA,iCAAiC,CAAC,oBAAoB,0CAAE,KAAK,CAAA;gBAE9E,IAAI,QAAQ,KAAK,KAAK,EAAE;oBACtB,qJAAqJ;oBACrJ,MAAM,YAAY,GAAG,2BAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;oBAC1E,IAAI;wBACF,MAAM,4BAAc,CAAC,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;qBACrG;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,gCAAgC,YAAY,QAAQ,eAAe,IAAI,CAChG,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,IAAI;wBACF,MAAM,mCAAqB,CACzB,oBAAoB,EACpB,IAAI,CAAC,YAAY,EACjB,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;qBACF;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,uCAAuC,sBAAsB,kBAAkB,YAAY,IAAI,CACxH,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,MAAM,WAAW,GAAG,kBAAQ,CAC1B,SAAS,CAAC,SAAS,EACnB,MAAM,EACN,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,SAAS,EACnB,WAAW,EACX,GAAG,YAAY,IAAI,CACpB,CAAA;oBAED,4BAA4B;oBAC5B,IAAI;wBACF,MAAM,oCAAsB,CAC1B,SAAS,EACT,iCAAiC,EACjC,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;qBACF;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,6CAA6C,eAAe,IAAI,CACzF,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,0CAA0C;oBAC1C,IAAI;wBACF,MAAM,+CAAiC,CACrC,SAAS,EACT,iCAAiC,EACjC,SAAS,CAAC,SAAS,EACnB,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;qBACF;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,2DAA2D,eAAe,IAAI,CACvG,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,sEAAsE;oBACtE,IAAI;wBACF,MAAM,oCAAsB,CAC1B,mBAAmB,EACnB,iCAAiC,EACjC,WAAW,EACX,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;qBACF;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,gCAAgC,WAAW,QAAQ,eAAe,IAAI,CAC/F,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBAED,UAAU,GAAG,IAAI,CAAA;iBAClB;qBAAM;oBACL,oHAAoH;oBACpH,MAAM,WAAW,GAAG,oCAA0B,CAAC,iCAAiC,CAAC,CAAA;oBACjF,IAAI,WAAW,KAAK,SAAS,EAAE;wBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAA;wBAE7G,OAAO,CAAC,CAAA;qBACT;oBACD,MAAM,YAAY,GAAG,kBAAQ,CAAC,WAAW,CAAC,CAAC,YAAY,CAAA;oBAEvD,uHAAuH;oBACvH,MAAM,oBAAoB,GAAG,MAAA,iCAAiC,CAAC,oBAAoB,0CAAE,oBAAoB,CAAA;oBACzG,IAAI,QAAQ,KAAK,KAAK,IAAI,CAAC,oBAAoB,EAAE;wBAC/C,IAAI;4BACF,MAAM,oCAAsB,CAC1B,mBAAmB,EACnB,iCAAiC,EACjC,WAAW,EACX,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;yBACF;wBAAC,OAAO,GAAG,EAAE;4BACZ,IAAI,GAAG,YAAY,KAAK,EAAE;gCACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,6CAA6C,eAAe,iEAAiE,CACtJ,CAAA;6BACF;4BAED,OAAO,CAAC,CAAA;yBACT;wBACD,UAAU,GAAG,IAAI,CAAA;qBAClB;oBAED,IAAI;wBACF,MAAM,mCAAqB,CACzB,oBAAoB,EACpB,IAAI,CAAC,YAAY,EACjB,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,CACZ,CAAA;qBACF;oBAAC,OAAO,GAAG,EAAE;wBACZ,IAAI,GAAG,YAAY,KAAK,EAAE;4BACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,aAAa,GAAG,CAAC,OAAO,uCAAuC,sBAAsB,QAAQ,eAAe,IAAI,CACjH,CAAA;yBACF;wBAED,OAAO,CAAC,CAAA;qBACT;oBACD,UAAU,GAAG,IAAI,CAAA;iBAClB;aACF;YACD,IAAI,CAAC,UAAU,EAAE;gBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;aACxD;YAED,OAAO,CAAC,CAAA;;KACT;;AArTH,wEAsTC;AArTe,oCAAK,GAAG,mBAAO,CAAC,KAAK,CAAC;IAClC,WAAW,EAAE,2DAA2D;IACxE,OAAO,EAAE,+EAA+E;IACxF,QAAQ,EAAE;QACR;YACE,sFAAsF;YACtF,mPAAmP;SACpP;QACD;YACE,4EAA4E;YAC5E,6PAA6P;SAC9P;QACD;YACE,8FAA8F;YAC9F,4UAA4U;SAC7U;KACF;CACF,CAAC,CAAA;AAsSJ,8BAA8B,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAA;AAErE,8BAA8B,CAAC,SAAS,CAAC,QAAQ,EAAE,mBAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;AACnF,8BAA8B,CAAC,SAAS,CAAC,aAAa,EAAE,mBAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AACnF,8BAA8B,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;AACvF,8BAA8B,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;AAChF,8BAA8B,CAAC,SAAS,CAAC,kBAAkB,EAAE,mBAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAA"}

package/dist/commands/stepfunctions/uninstrument.d.ts

@@ -0,0 +1,7 @@
+import { Command } from 'clipanion';
+export declare class UninstrumentStepFunctionsCommand extends Command {
+    static usage: import("clipanion").Usage;
+    private dryRun;
+    private stepFunctionArns;
+    execute(): Promise<1 | 0>;
+}