@go-to-k/cdkd 0.230.1 → 0.230.3

package/dist/{deploy-engine-_N5kVjZN.js → deploy-engine-BGL0DPBv.js}

@@ -11,6 +11,7 @@ import { DescribeAvailabilityZonesCommand, DescribeImagesCommand, DescribeInstan
 import { DescribeTableCommand } from "@aws-sdk/client-dynamodb";
 import { CloudFormationClient, CreateChangeSetCommand, DeleteStackCommand, DescribeChangeSetCommand, DescribeTypeCommand, GetTemplateCommand, waitUntilChangeSetCreateComplete } from "@aws-sdk/client-cloudformation";
 import { GetRestApiCommand } from "@aws-sdk/client-api-gateway";
+import { DescribeApiDestinationCommand, DescribeConnectionCommand } from "@aws-sdk/client-eventbridge";
 import { GetSecretValueCommand } from "@aws-sdk/client-secrets-manager";
 import { GetParameterCommand, SSMClient } from "@aws-sdk/client-ssm";
 import { GetCloudFrontOriginAccessIdentityCommand } from "@aws-sdk/client-cloudfront";
@@ -4917,6 +4918,14 @@ var ReplacementRulesRegistry = class {
 			"ProvisionedConcurrencyConfig",
 			"RuntimePolicy"
 		]) });
+		this.rules.set("AWS::Lambda::EventInvokeConfig", {
+			replacementProperties: new Set(["FunctionName", "Qualifier"]),
+			updateableProperties: new Set([
+				"MaximumEventAgeInSeconds",
+				"MaximumRetryAttempts",
+				"DestinationConfig"
+			])
+		});
 		this.rules.set("AWS::DynamoDB::Table", {
 			replacementProperties: new Set(["TableName", "KeySchema"]),
 			updateableProperties: new Set([
@@ -7269,9 +7278,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::AppMesh::VirtualRouter",
 	"AWS::AppMesh::VirtualService",
 	"AWS::AppStream::Fleet",
-	"AWS::AppStream::StackFleetAssociation",
-	"AWS::AppStream::StackUserAssociation",
-	"AWS::AppStream::User",
 	"AWS::AppSync::ApiCache",
 	"AWS::AutoScalingPlans::ScalingPlan",
 	"AWS::BedrockAgentCore::Browser",
@@ -7313,7 +7319,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::EC2::VPNGatewayRoutePropagation",
 	"AWS::ElastiCache::SecurityGroup",
 	"AWS::ElastiCache::SecurityGroupIngress",
-	"AWS::ElasticLoadBalancing::LoadBalancer",
 	"AWS::ElasticLoadBalancingV2::ListenerCertificate",
 	"AWS::Elasticsearch::Domain",
 	"AWS::EMR::Cluster",
@@ -7347,6 +7352,7 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::Greengrass::ResourceDefinitionVersion",
 	"AWS::Greengrass::SubscriptionDefinition",
 	"AWS::Greengrass::SubscriptionDefinitionVersion",
+	"AWS::GuardDuty::ThreatEntitySet",
 	"AWS::IAM::AccessKey",
 	"AWS::IoT::PolicyPrincipalAttachment",
 	"AWS::IoT::ThingPrincipalAttachment",
@@ -7360,7 +7366,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::LakeFormation::DataLakeSettings",
 	"AWS::LakeFormation::Permissions",
 	"AWS::LakeFormation::Resource",
-	"AWS::LicenseManager::License",
 	"AWS::ManagedBlockchain::Member",
 	"AWS::ManagedBlockchain::Node",
 	"AWS::MediaConvert::JobTemplate",
@@ -7838,6 +7843,37 @@ var CloudControlProvider = class {
 					this.logger.debug(`Failed to get Lambda URL config for ${physicalId}: ${error instanceof Error ? error.message : String(error)}`);
 				}
 				break;
+			case "AWS::Events::Connection":
+				if (!enriched["Arn"] || !enriched["SecretArn"] || !enriched["ArnForPolicy"]) try {
+					const conn = await getAwsClients().eventBridge.send(new DescribeConnectionCommand({ Name: physicalId }));
+					if (conn.ConnectionArn) {
+						if (!enriched["Arn"]) enriched["Arn"] = conn.ConnectionArn;
+						if (!enriched["ArnForPolicy"]) {
+							const lastSlash = conn.ConnectionArn.lastIndexOf("/");
+							if (lastSlash > 0) enriched["ArnForPolicy"] = conn.ConnectionArn.slice(0, lastSlash);
+						}
+					}
+					if (conn.SecretArn && !enriched["SecretArn"]) enriched["SecretArn"] = conn.SecretArn;
+					this.logger.debug(`Enriched Events Connection ${physicalId} with Arn/SecretArn/ArnForPolicy from DescribeConnection`);
+				} catch (error) {
+					this.logger.debug(`Failed to enrich Events Connection ${physicalId}: ${error instanceof Error ? error.message : String(error)}`);
+				}
+				break;
+			case "AWS::Events::ApiDestination":
+				if (!enriched["Arn"] || !enriched["ArnForPolicy"]) try {
+					const dest = await getAwsClients().eventBridge.send(new DescribeApiDestinationCommand({ Name: physicalId }));
+					if (dest.ApiDestinationArn) {
+						if (!enriched["Arn"]) enriched["Arn"] = dest.ApiDestinationArn;
+						if (!enriched["ArnForPolicy"]) {
+							const lastSlash = dest.ApiDestinationArn.lastIndexOf("/");
+							if (lastSlash > 0) enriched["ArnForPolicy"] = dest.ApiDestinationArn.slice(0, lastSlash);
+						}
+					}
+					this.logger.debug(`Enriched Events ApiDestination ${physicalId} with Arn/ArnForPolicy from DescribeApiDestination`);
+				} catch (error) {
+					this.logger.debug(`Failed to enrich Events ApiDestination ${physicalId}: ${error instanceof Error ? error.message : String(error)}`);
+				}
+				break;
 			case "AWS::ElastiCache::ReplicationGroup":
 				try {
 					const rg = (await new ElastiCacheClient({}).send(new DescribeReplicationGroupsCommand({ ReplicationGroupId: physicalId }))).ReplicationGroups?.[0];
@@ -9938,6 +9974,16 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		]),
 		silentDrop: /* @__PURE__ */ new Map()
 	}],
+	["AWS::Lambda::EventInvokeConfig", {
+		handled: new Set([
+			"DestinationConfig",
+			"FunctionName",
+			"MaximumEventAgeInSeconds",
+			"MaximumRetryAttempts",
+			"Qualifier"
+		]),
+		silentDrop: /* @__PURE__ */ new Map()
+	}],
 	["AWS::Lambda::EventSourceMapping", {
 		handled: new Set([
 			"AmazonManagedKafkaEventSourceConfig",
@@ -13664,4 +13710,4 @@ var DeployEngine = class {
 
 //#endregion
 export { CFN_TEMPLATE_BODY_LIMIT as $, LockManager as A, runDockerForeground as B, findActionableSilentDrops as C, DiffCalculator as D, applyRoleArnIfSet as E, stringifyValue as F, getDefaultStateBucketName as G, AssetManifestLoader as H, WorkGraph as I, resolveCaptureObservedState as J, getLegacyStateBucketName as K, buildDockerImage as L, rebuildClientForBucketRegion as M, shouldRetainResource as N, DagBuilder as O, AssetPublisher as P, warnDeprecatedNoPrefixCliFlag as Q, formatDockerLoginError as R, ProviderRegistry as S, IntrinsicFunctionResolver as T, getDockerImageBySourceHash as U, runDockerStreaming as V, Synthesizer as W, resolveStateBucketWithDefault as X, resolveSkipPrefix as Y, resolveStateBucketWithDefaultAndSource as Z, green as _, withRetry as a, clearBucketRegionCache as at, IAMRoleProvider as b, computeImplicitDeleteEdges as c, isStatefulRecreateTargetSync as d, CFN_TEMPLATE_URL_LIMIT as et, renderStatefulReason as f, gray as g, cyan as h, withResourceDeadline as i, AssemblyReader as it, S3StateBackend as j, TemplateParser as k, extractDeploymentEventError as l, bold as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, findLargeInlineResources as nt, isRetryableTransientError as o, resolveBucketRegion as ot, formatResourceLine as p, resolveApp as q, DeployEngine as r, uploadCfnTemplate as rt, IMPLICIT_DELETE_DEPENDENCIES as s, DEFAULT_RESOURCE_TIMEOUT_MS as t, MIGRATE_TMP_PREFIX as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, red as v, CloudControlProvider as w, collectInlinePolicyNamesManagedBySiblings as x, yellow as y, getDockerCmd as z };
-//# sourceMappingURL=deploy-engine-_N5kVjZN.js.map
+//# sourceMappingURL=deploy-engine-BGL0DPBv.js.map