@go-to-k/cdkd 0.158.0 → 0.159.0

package/dist/{deploy-engine-UmoqjtWH.js → deploy-engine-BzrECC3i.js}

@@ -372,10 +372,12 @@ var StackHasActiveImportsError = class StackHasActiveImportsError extends CdkdEr
 /**
 * Signals that `cdkd local start-api`'s route discovery hit an unsupported
 * shape — non-AWS_PROXY integration, ApiGwV2 service integration
-* (`IntegrationSubtype` set), WebSocket protocol, Lambda::Url with
-* `AuthType !== 'NONE'`, or an unsupported intrinsic function in
-* `IntegrationUri`. (Lambda::Url with `InvokeMode: RESPONSE_STREAM` is
-* a normal route dispatched via the streaming protocol — #467.)
+* (`IntegrationSubtype` set), WebSocket protocol, Lambda::Url with an
+* unrecognized `AuthType` (anything other than `'NONE'` / `'AWS_IAM'`),
+* or an unsupported intrinsic function in `IntegrationUri`. (Lambda::Url
+* with `InvokeMode: RESPONSE_STREAM` is a normal route dispatched via
+* the streaming protocol — #467. Lambda::Url with `AuthType: 'AWS_IAM'`
+* is a normal route verified through the SigV4 pipeline — #621.)
 *
 * The message names every offending route and points the user at the
 * deferred follow-up PR (8b for authorizers, etc.). Hard-error at
@@ -7980,8 +7982,8 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		handled: new Set(["Description", "RestApiId"]),
 		silentDrop: new Map([
 			["DeploymentCanarySettings", "not yet implemented by cdkd"],
-			["StageDescription", "not yet implemented by cdkd"],
-			["StageName", "not yet implemented by cdkd"]
+			["StageDescription", "CFn-only convenience for inline-creating a Stage; declare AWS::ApiGateway::Stage with the Description property instead"],
+			["StageName", "CFn-only convenience for inline-creating a Stage from a Deployment; declare AWS::ApiGateway::Stage explicitly to attach to this Deployment"]
 		])
 	}],
 	["AWS::ApiGateway::Method", {
@@ -8150,7 +8152,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"Type"
 		]),
 		silentDrop: new Map([
-			["ElasticsearchConfig", "not yet implemented by cdkd"],
+			["ElasticsearchConfig", "Legacy Elasticsearch alias; use OpenSearchServiceConfig (AppSync deprecated the Elasticsearch DataSource type in favor of OpenSearch)"],
 			["EventBridgeConfig", "not yet implemented by cdkd"],
 			["MetricsConfig", "not yet implemented by cdkd"],
 			["OpenSearchServiceConfig", "not yet implemented by cdkd"],
@@ -8252,8 +8254,8 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["AvailabilityZoneIds", "not yet implemented by cdkd"],
 			["InstanceId", "not yet implemented by cdkd"],
 			["InstanceLifecyclePolicy", "not yet implemented by cdkd"],
-			["LaunchConfigurationName", "not yet implemented by cdkd"],
-			["NotificationConfiguration", "not yet implemented by cdkd"],
+			["LaunchConfigurationName", "AWS Launch Configurations end-of-life 2024-10; use LaunchTemplate instead"],
+			["NotificationConfiguration", "Legacy singular form; use NotificationConfigurations (plural) which cdkd already wires"],
 			["PlacementGroup", "not yet implemented by cdkd"]
 		])
 	}],
@@ -8567,8 +8569,8 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["CreditSpecification", "not yet implemented by cdkd"],
 			["DisableApiTermination", "not yet implemented by cdkd"],
 			["EbsOptimized", "not yet implemented by cdkd"],
-			["ElasticGpuSpecifications", "not yet implemented by cdkd"],
-			["ElasticInferenceAccelerators", "not yet implemented by cdkd"],
+			["ElasticGpuSpecifications", "AWS Elastic GPU end-of-life (announced 2023-11); no replacement API"],
+			["ElasticInferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"],
 			["EnclaveOptions", "not yet implemented by cdkd"],
 			["HibernationOptions", "not yet implemented by cdkd"],
 			["HostId", "not yet implemented by cdkd"],
@@ -8612,7 +8614,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		silentDrop: new Map([
 			["AvailabilityMode", "not yet implemented by cdkd"],
 			["AvailabilityZoneAddresses", "not yet implemented by cdkd"],
-			["VpcId", "not yet implemented by cdkd"]
+			["VpcId", "AWS derives the VPC from SubnetId; the ec2:CreateNatGateway API has no VpcId parameter"]
 		])
 	}],
 	["AWS::EC2::NetworkAcl", {
@@ -8623,7 +8625,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		handled: new Set([
 			"CidrBlock",
 			"Egress",
-			"IcmpTypeCode",
+			"Icmp",
 			"Ipv6CidrBlock",
 			"NetworkAclId",
 			"PortRange",
@@ -8631,7 +8633,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"RuleAction",
 			"RuleNumber"
 		]),
-		silentDrop: new Map([["Icmp", "not yet implemented by cdkd"]])
+		silentDrop: /* @__PURE__ */ new Map()
 	}],
 	["AWS::EC2::Route", {
 		handled: new Set([
@@ -8672,20 +8674,17 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 	["AWS::EC2::SecurityGroupIngress", {
 		handled: new Set([
 			"CidrIp",
+			"CidrIpv6",
 			"Description",
 			"FromPort",
 			"GroupId",
 			"IpProtocol",
+			"SourcePrefixListId",
 			"SourceSecurityGroupId",
 			"SourceSecurityGroupOwnerId",
 			"ToPort"
 		]),
-		silentDrop: new Map([
-			["CidrIpv6", "not yet implemented by cdkd"],
-			["GroupName", "not yet implemented by cdkd"],
-			["SourcePrefixListId", "not yet implemented by cdkd"],
-			["SourceSecurityGroupName", "not yet implemented by cdkd"]
-		])
+		silentDrop: new Map([["GroupName", "EC2-Classic-only — use GroupId for VPC security groups (EC2-Classic retired 2022-08-15)"], ["SourceSecurityGroupName", "EC2-Classic-only — use SourceSecurityGroupId for VPC peer security groups (EC2-Classic retired 2022-08-15)"]])
 	}],
 	["AWS::EC2::Subnet", {
 		handled: new Set([
@@ -8770,7 +8769,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"LoadBalancers",
 			"NetworkConfiguration",
 			"PlacementConstraints",
-			"PlacementStrategy",
+			"PlacementStrategies",
 			"PlatformVersion",
 			"PropagateTags",
 			"SchedulingStrategy",
@@ -8783,8 +8782,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["AvailabilityZoneRebalancing", "not yet implemented by cdkd"],
 			["DeploymentController", "not yet implemented by cdkd"],
 			["ForceNewDeployment", "not yet implemented by cdkd"],
-			["PlacementStrategies", "not yet implemented by cdkd"],
-			["Role", "not yet implemented by cdkd"],
+			["Role", "Legacy classic-ELB service-linked-role override; AWS uses the AWSServiceRoleForECS service-linked role automatically since 2017"],
 			["ServiceConnectConfiguration", "not yet implemented by cdkd"],
 			["VolumeConfigurations", "not yet implemented by cdkd"],
 			["VpcLatticeConfigurations", "not yet implemented by cdkd"]
@@ -8809,7 +8807,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"TaskRoleArn",
 			"Volumes"
 		]),
-		silentDrop: new Map([["EnableFaultInjection", "not yet implemented by cdkd"], ["InferenceAccelerators", "not yet implemented by cdkd"]])
+		silentDrop: new Map([["EnableFaultInjection", "not yet implemented by cdkd"], ["InferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"]])
 	}],
 	["AWS::EFS::AccessPoint", {
 		handled: new Set([
@@ -8818,7 +8816,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"PosixUser",
 			"RootDirectory"
 		]),
-		silentDrop: new Map([["ClientToken", "not yet implemented by cdkd"]])
+		silentDrop: new Map([["ClientToken", "AWS SDK manages this idempotency token internally on CreateAccessPoint; no user-supplied value is honored"]])
 	}],
 	["AWS::EFS::FileSystem", {
 		handled: new Set([
@@ -8877,16 +8875,17 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"TransitEncryptionEnabled",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: new Map([["CacheSecurityGroupNames", "not yet implemented by cdkd"], ["SnapshotArns", "not yet implemented by cdkd"]])
+		silentDrop: new Map([["CacheSecurityGroupNames", "EC2-Classic-only — use VpcSecurityGroupIds for VPC-deployed clusters (EC2-Classic retired 2022-08-15)"], ["SnapshotArns", "not yet implemented by cdkd"]])
 	}],
 	["AWS::ElastiCache::SubnetGroup", {
 		handled: new Set([
 			"CacheSubnetGroupDescription",
 			"CacheSubnetGroupName",
+			"Description",
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: new Map([["Description", "not yet implemented by cdkd"]])
+		silentDrop: /* @__PURE__ */ new Map()
 	}],
 	["AWS::ElasticLoadBalancingV2::Listener", {
 		handled: new Set([
@@ -8998,8 +8997,12 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		silentDrop: /* @__PURE__ */ new Map()
 	}],
 	["AWS::Glue::Database", {
-		handled: new Set(["CatalogId", "DatabaseInput"]),
-		silentDrop: new Map([["DatabaseName", "not yet implemented by cdkd"]])
+		handled: new Set([
+			"CatalogId",
+			"DatabaseInput",
+			"DatabaseName"
+		]),
+		silentDrop: /* @__PURE__ */ new Map()
 	}],
 	["AWS::Glue::Job", {
 		handled: new Set([
@@ -9038,9 +9041,10 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		handled: new Set([
 			"CatalogId",
 			"DatabaseName",
+			"Name",
 			"TableInput"
 		]),
-		silentDrop: new Map([["Name", "not yet implemented by cdkd"], ["OpenTableFormatInput", "not yet implemented by cdkd"]])
+		silentDrop: new Map([["OpenTableFormatInput", "not yet implemented by cdkd"]])
 	}],
 	["AWS::Glue::Trigger", {
 		handled: new Set([
@@ -9331,6 +9335,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"BackupRetentionPeriod",
 			"DBClusterIdentifier",
 			"DBClusterParameterGroupName",
+			"DBPort",
 			"DBSubnetGroupName",
 			"DeletionProtection",
 			"EngineVersion",
@@ -9348,7 +9353,6 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["AvailabilityZones", "not yet implemented by cdkd"],
 			["CopyTagsToSnapshot", "not yet implemented by cdkd"],
 			["DBInstanceParameterGroupName", "not yet implemented by cdkd"],
-			["DBPort", "not yet implemented by cdkd"],
 			["EnableCloudwatchLogsExports", "not yet implemented by cdkd"],
 			["RestoreToTime", "not yet implemented by cdkd"],
 			["RestoreType", "not yet implemented by cdkd"],
@@ -9417,7 +9421,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["DBClusterParameterGroupName", "not yet implemented by cdkd"],
 			["DBInstanceParameterGroupName", "not yet implemented by cdkd"],
 			["DBSystemId", "not yet implemented by cdkd"],
-			["DeleteAutomatedBackups", "not yet implemented by cdkd"],
+			["DeleteAutomatedBackups", "cdkd hardcodes SkipFinalSnapshot=true on destroy; this CFn lifecycle flag has no equivalent on the runtime path"],
 			["Domain", "not yet implemented by cdkd"],
 			["DomainIAMRoleName", "not yet implemented by cdkd"],
 			["EnableCloudwatchLogsExports", "not yet implemented by cdkd"],
@@ -9467,7 +9471,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["AdditionalStorageVolumes", "not yet implemented by cdkd"],
 			["AllocatedStorage", "not yet implemented by cdkd"],
 			["AllowMajorVersionUpgrade", "not yet implemented by cdkd"],
-			["ApplyImmediately", "not yet implemented by cdkd"],
+			["ApplyImmediately", "cdkd always applies modifications immediately (rds:ModifyDBInstance.ApplyImmediately=true is hardcoded); users wanting maintenance-window deferral should run aws rds modify-db-instance directly"],
 			["AssociatedRoles", "not yet implemented by cdkd"],
 			["AutomaticBackupReplicationKmsKeyId", "not yet implemented by cdkd"],
 			["AutomaticBackupReplicationRegion", "not yet implemented by cdkd"],
@@ -9485,11 +9489,11 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["DBClusterSnapshotIdentifier", "not yet implemented by cdkd"],
 			["DBName", "not yet implemented by cdkd"],
 			["DBParameterGroupName", "not yet implemented by cdkd"],
-			["DBSecurityGroups", "not yet implemented by cdkd"],
+			["DBSecurityGroups", "EC2-Classic-only feature retired by AWS (2022-08-15); new accounts cannot use this — use VPCSecurityGroups instead"],
 			["DBSnapshotIdentifier", "not yet implemented by cdkd"],
 			["DBSystemId", "not yet implemented by cdkd"],
 			["DedicatedLogVolume", "not yet implemented by cdkd"],
-			["DeleteAutomatedBackups", "not yet implemented by cdkd"],
+			["DeleteAutomatedBackups", "cdkd hardcodes SkipFinalSnapshot=true on destroy; this CFn lifecycle flag has no equivalent on the runtime path"],
 			["DeletionProtection", "not yet implemented by cdkd"],
 			["Domain", "not yet implemented by cdkd"],
 			["DomainAuthSecretArn", "not yet implemented by cdkd"],
@@ -9645,7 +9649,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		]),
 		silentDrop: new Map([
 			["AbacStatus", "not yet implemented by cdkd"],
-			["AccessControl", "not yet implemented by cdkd"],
+			["AccessControl", "Legacy canned ACL; AWS disables ACLs by default since 2023-04 — use BucketOwnershipControls + BucketPolicy / PublicAccessBlockConfiguration instead"],
 			["BucketNamePrefix", "not yet implemented by cdkd"],
 			["BucketNamespace", "not yet implemented by cdkd"],
 			["MetadataConfiguration", "not yet implemented by cdkd"],
@@ -9679,7 +9683,8 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			"Format",
 			"Name",
 			"Namespace",
-			"TableBucketARN"
+			"TableBucketARN",
+			"TableName"
 		]),
 		silentDrop: new Map([
 			["Compaction", "not yet implemented by cdkd"],
@@ -9687,7 +9692,6 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["OpenTableFormat", "not yet implemented by cdkd"],
 			["SnapshotManagement", "not yet implemented by cdkd"],
 			["StorageClassConfiguration", "not yet implemented by cdkd"],
-			["TableName", "not yet implemented by cdkd"],
 			["Tags", "not yet implemented by cdkd"],
 			["WithoutMetadata", "not yet implemented by cdkd"]
 		])
@@ -9754,7 +9758,7 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 			["FilterPolicyScope", "not yet implemented by cdkd"],
 			["RawMessageDelivery", "not yet implemented by cdkd"],
 			["RedrivePolicy", "not yet implemented by cdkd"],
-			["Region", "not yet implemented by cdkd"],
+			["Region", "CFn-only cross-region subscription hint; cdkd uses the SDK client region directly and has no per-resource region override"],
 			["ReplayPolicy", "not yet implemented by cdkd"],
 			["SubscriptionRoleArn", "not yet implemented by cdkd"]
 		])
@@ -12369,4 +12373,4 @@ var DeployEngine = class {
 
 //#endregion
 export { CdkdError as $, shouldRetainResource as A, resolveSkipPrefix as B, IntrinsicFunctionResolver as C, TemplateParser as D, DagBuilder as E, Synthesizer as F, CFN_TEMPLATE_URL_LIMIT as G, resolveStateBucketWithDefaultAndSource as H, getDefaultStateBucketName as I, uploadCfnTemplate as J, MIGRATE_TMP_PREFIX as K, getLegacyStateBucketName as L, stringifyValue as M, WorkGraph as N, LockManager as O, buildDockerImage as P, AssetError as Q, resolveApp as R, assertRegionMatch as S, DiffCalculator as T, warnDeprecatedNoPrefixCliFlag as U, resolveStateBucketWithDefault as V, CFN_TEMPLATE_BODY_LIMIT as W, clearBucketRegionCache as X, AssemblyReader as Y, resolveBucketRegion as Z, matchesCdkPath as _, formatError as _t, withRetry as a, LockError as at, ProviderRegistry as b, withErrorHandling as bt, bold as c, PartialFailureError as ct, green as d, ResourceUpdateNotSupportedError as dt, ConfigError as et, red as f, RouteDiscoveryError as ft, CDK_PATH_TAG as g, SynthesisError as gt, collectInlinePolicyNamesManagedBySiblings as h, StateError as ht, withResourceDeadline as i, LocalStartServiceError as it, AssetPublisher as j, S3StateBackend as k, cyan as l, ProvisioningError as lt, IAMRoleProvider as m, StackTerminationProtectionError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, LocalInvokeBuildError as nt, IMPLICIT_DELETE_DEPENDENCIES as o, MissingCdkCliError as ot, yellow as p, StackHasActiveImportsError as pt, findLargeInlineResources as q, DeployEngine as r, LocalMigrateError as rt, formatResourceLine as s, NestedStackChildDirectDestroyError as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, DependencyError as tt, gray as u, ResourceTimeoutError as ut, normalizeAwsTagsToCfn as v, isCdkdError as vt, applyRoleArnIfSet as w, CloudControlProvider as x, resolveExplicitPhysicalId as y, normalizeAwsError as yt, resolveCaptureObservedState as z };
-//# sourceMappingURL=deploy-engine-UmoqjtWH.js.map
+//# sourceMappingURL=deploy-engine-BzrECC3i.js.map