@go-to-k/cdkd 0.296.29 → 0.296.30
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{asg-provider-UKRukGI_.js → asg-provider-BaabA371.js} +2 -2
- package/dist/{asg-provider-UKRukGI_.js.map → asg-provider-BaabA371.js.map} +1 -1
- package/dist/cli.js +2 -2
- package/dist/{deploy-engine-Bt-8KvUj.js → deploy-engine-BuPc2Dfc.js} +43 -8
- package/dist/{deploy-engine-Bt-8KvUj.js.map → deploy-engine-BuPc2Dfc.js.map} +1 -1
- package/dist/{iam-role-provider-BBFYFBLx.js → iam-role-provider-CAiMUBcP.js} +2 -2
- package/dist/{iam-role-provider-BBFYFBLx.js.map → iam-role-provider-CAiMUBcP.js.map} +1 -1
- package/dist/index.js +2 -2
- package/dist/{neptune-provider-B9InVgs6.js → neptune-provider-5yc_bOJ-.js} +2 -2
- package/dist/{neptune-provider-B9InVgs6.js.map → neptune-provider-5yc_bOJ-.js.map} +1 -1
- package/dist/{program-CN7Dqb3j.js → program-CIxuz2zX.js} +48 -15
- package/dist/program-CIxuz2zX.js.map +1 -0
- package/dist/{provider-classes-eEgFT-Vt.js → provider-classes-DmZ0J68L.js} +27 -11
- package/dist/provider-classes-DmZ0J68L.js.map +1 -0
- package/dist/{rds-provider-DgbVxaPP.js → rds-provider-IBY6fDvN.js} +2 -2
- package/dist/{rds-provider-DgbVxaPP.js.map → rds-provider-IBY6fDvN.js.map} +1 -1
- package/dist/{version-DyV_xwRX.js → version-B__YmKBy.js} +2 -2
- package/dist/{version-DyV_xwRX.js.map → version-B__YmKBy.js.map} +1 -1
- package/package.json +1 -1
- package/dist/program-CN7Dqb3j.js.map +0 -1
- package/dist/provider-classes-eEgFT-Vt.js.map +0 -1
|
@@ -2,12 +2,12 @@ import { r as getAwsClients } from "./aws-clients-CnmtbrxD.js";
|
|
|
2
2
|
import { F as displayStackName, I as isPasteableIdent, N as displayIdent, O as SECRET_REF_MAX_CODE_POINTS, P as displaySafe, R as plainIdentOr, a as getLogger, b as generateResourceNameWithFallback, n as isAwsAuthoredFailure, r as safeStringify, t as describeAwsFailure, y as generateResourceName, z as safeMsg } from "./aws-failure-text-BaWeCWRz.js";
|
|
3
3
|
import { $ as protectedReplacementAdvice, $n as isAmbiguousOutcomeError, $t as credentialFingerprint, A as isQuotableImportValue, B as isTerminalDeleteFailure, Bn as withheldTargetClause, C as setBounded, D as VALUE_NOT_SHOWN, E as assertRegionMatch, F as resolveExplicitPhysicalId, Gt as injectiveKeyPrefix, H as observeThenDisableProtection, In as plainOrDescribed, L as ProtectionFlipRegistry, M as quotedRemedyLogicalId, Mn as hasClauseBreak, Mt as markCreatedBeforeFailure, N as refusalTypeShown, Nn as isInertUnquoted, O as isPlainImportJson, P as remedyLogicalId, Pn as pasteableCommand, Q as pasteableAwsCommand, Qt as clientDefaultsFor, S as replayedSendWindow, St as withDerivedNameMasks, T as RESOURCE_NOT_FOUND, Tt as clearCreatedBeforeFailure, U as protectionFlipKey, V as logGroupProtectionSite, W as rdsFamilyProtectionSite, Wt as injectiveKey, X as WITHHELD_AWS_COMMAND, Xn as markReplayMayCollide, Xt as ambientClientDefaults, Y as UNNAMEABLE_ID_CLAUSE, Yn as markNameCollision, Yt as withPasteableAwsProfile, Z as isAwsCliLiteral, Zt as ambientCredentialConfig, _ as RecentIdSet, _t as createMaskedLogSinks, a as onlySecretDerived, ar as isMarkedNonRetryable, at as startInterruptWatch, b as isInsideWindow, bt as maskDeep, c as recordedPrincipalsRepair, cr as markRedactedCause, ct as canonicalizeRoute53QueryName, dt as compositeIdSkipResult, en as AccountIdUnavailableError, et as renderDisableCommand, ft as logicalIdShown, g as AmbiguousCreateLatch, gn as ProvisioningError, gt as stateOrphanRecordRemedy, h as AMBIGUOUS_LATCH_TTL_MS, ht as segmentAfterAnchor, i as holdsSecretDerivedEntry, ir as THROTTLING_ERROR_NAMES, it as isInterruptedWaitError, j as normalizeAwsTagsToCfn, jn as commandHole, jt as markAuxiliaryFailure, k as isPlainImportValue, lr as wrapMaskedAwsError, lt as compositeIdFormatMessage, nn as CdkdError, nr as isTransientServerError, o as readPrincipalLists, or as isThrottlingError, ot as ElapsedBudgetRegistry, p as withRemovalDefaults, pt as packCompositeId, q as userPoolProtectionSite, r as SECRET_DERIVED_READ_LIVE, sr as markNonRetryable, tr as isRetryableTransientError, u as clearOnUpdateRemoval, ut as compositeIdSeparatorRefusal, v as ambiguousAttemptLead, vn as ResourceUpdateNotSupportedError, vt as createMaskedRetryLogger, w as withoutServerErrorRetries, x as replayFollowedAmbiguousAttempt, xt as maskerOrIdentity, y as createAttemptKey, yt as isSecretDerivedValue, z as deleteWithProtectionCompensation, zn as shellQuote } from "./iam-policy-targets-Cz2tPxXk.js";
|
|
4
4
|
import { s as ambientRegion } from "./aws-client-defaults-D0q0z4dG.js";
|
|
5
|
-
import { $ as getPriorAttempts, $a as
|
|
6
|
-
import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-
|
|
7
|
-
import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-
|
|
8
|
-
import { RDSProvider } from "./rds-provider-
|
|
9
|
-
import { NeptuneProvider } from "./neptune-provider-
|
|
10
|
-
import { ASGProvider } from "./asg-provider-
|
|
5
|
+
import { $ as getPriorAttempts, $a as configBooleanRefusal, $n as acquireIdempotencyToken, $o as recoverMaskedOutput, $r as s3BucketArn, Ar as ec2InstanceProtectionSite, B as beginDeleteWait, Dr as isWaitAbandonedError, Dt as withNestedStackContext, Ei as accountArgs, Er as withIndeterminateGuard, Et as getCurrentNestedStackContext, Fa as findSilentDropProperties, G as DELETE_INDEX_WAIT_PROCEED_NOTE, H as deleteBudgetKey, J as waitForIndexesSettled, Ja as isWarmThroughputDecrease, Jc as derivePartitionAndUrlSuffix, K as INDEX_SETTLE_POLL_INTERVAL_MS, Ka as WARM_THROUGHPUT_MEMBERS, La as withoutSilentDropProperties, Lt as awaitInFlightSibling, Mo as hasMaskableValues, Mr as observeThenDisableInstanceApiTermination, Na as withheldAccountClause, Nr as reDisableInstanceApiTermination, Or as markWaitAbandoned, Pr as reEnableInstanceApiTermination, Q as isTruthyCfnBoolean, Qa as coerceCfnInteger, Qr as isSettledInstanceState, R as DynamoDBGlobalTableProvider, St as revertNestedChildFromJournal, To as passedNoEchoParametersOf, Tr as deleteSkipReason, U as resolveDynamoDbDeleteBudgetClock, Uo as markSameGenerationBag, V as compensateRemovedDeletionProtection, W as resolveDynamoDbDeleteBudgetMs, Wc as decodeListingKey, Wo as redactSecretsForState, Ws as rewriteTemplateAssetReferences, X as S3_AUTO_DELETE_OBJECTS_TAG, Xa as toFiniteNumber, Y as ECR_AUTO_DELETE_IMAGES_TAG, Ya as toCfnInteger, Yn as earliestDefined, Z as hasCdkAutoDeleteTag, Za as coerceCfnBoolean, Zn as reserveStackCreateToken, _i as parseWebACLArn, _r as getCurrentResourceSecrets, a as findNestedTemplateTreeDefect, al as displayAssemblyPath, an as redactedDeleteAddressFields, ao as requireConfigObject, ar as tagMapAsList, b as lookupEachName, bi as passedParameterClassesOf, br as slowCcOperationTimeoutMs, c as renderNestedTemplateTreeDefect, cr as stringifyIfAssigned, do as canonicalLambdaFunctionName, ei as s3BucketDomainName, eo as configIntegerRefusal, er as DBPROXY_TAGS_WHAT, es as carriesSecretMask, et as markRefusedBeforeApplying, fo as lambdaFunctionNameForMask, il as describeFileReadFailure, in as isRedactedRecordedValue, io as requireConfigArray, ir as refuseMalformedDesiredTags, jr as isTerminationProtectionPropagationError, ni as s3BucketRegionalDomainName, no as readConfigString, nr as planTagDiff, o as isAbsoluteAssetPath, ol as renderAssemblyPathEscape, on as redactedDeleteAddressSkip, oo as requireConfigString, or as tagPlanWarning, po as sameLambdaFunctionAddress, q as deleteTableWithIndexBusyRetry, qa as coerceWarmThroughput$1, qc as canonicalizeRegion, qo as dynamicReferenceTokens, ri as s3BucketWebsiteUrl, rn as REDACTED_DELETE_ADDRESS_SKIP_REASON, ro as replayWarn, rr as readTagList, s as listNestedTemplateRows, si as getAccountInfo, sl as resolveAssemblyPath, sr as definedAttributes, t as DeployEngine, ta as refuseMalformedNestedChildOutputs, ti as s3BucketDualStackDomainName, tn as getCurrentProducerRegions, to as configStringRefusal, tr as DBPROXY_TAG_OPTIONS, uo as withRetry, v as chunks, x as withApiLimit, xa as refuseMalformedResourcesForDestroy, xr as unchangedBehindSecretReference, y as isAccessDeniedError, yt as getNestedRevertRun, z as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, zs as stringifyValue, zt as getStackRecords } from "./deploy-engine-BuPc2Dfc.js";
|
|
6
|
+
import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-CAiMUBcP.js";
|
|
7
|
+
import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-CIxuz2zX.js";
|
|
8
|
+
import { RDSProvider } from "./rds-provider-IBY6fDvN.js";
|
|
9
|
+
import { NeptuneProvider } from "./neptune-provider-5yc_bOJ-.js";
|
|
10
|
+
import { ASGProvider } from "./asg-provider-BaabA371.js";
|
|
11
11
|
import { createHash, randomUUID } from "node:crypto";
|
|
12
12
|
import { CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListBucketsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client } from "@aws-sdk/client-s3";
|
|
13
13
|
import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachRolePolicyCommand, AttachUserPolicyCommand, CreateAccessKeyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreatePolicyCommand, CreatePolicyVersionCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeletePolicyCommand, DeletePolicyVersionCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachRolePolicyCommand, DetachUserPolicyCommand, GetAccessKeyLastUsedCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetPolicyCommand, GetPolicyVersionCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListEntitiesForPolicyCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListPoliciesCommand, ListPolicyTagsCommand, ListPolicyVersionsCommand, ListUserPoliciesCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagPolicyCommand, TagUserCommand, UntagPolicyCommand, UntagUserCommand, UpdateAccessKeyCommand, UpdateLoginProfileCommand } from "@aws-sdk/client-iam";
|
|
@@ -12297,8 +12297,9 @@ var CloudWatchAlarmProvider = class {
|
|
|
12297
12297
|
throw new ProvisioningError(`Failed to create CloudWatch alarm ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, void 0, cause);
|
|
12298
12298
|
}
|
|
12299
12299
|
}
|
|
12300
|
-
async update(logicalId, physicalId, resourceType, properties, previousProperties) {
|
|
12300
|
+
async update(logicalId, physicalId, resourceType, properties, previousProperties, context) {
|
|
12301
12301
|
this.logger.debug(`Updating CloudWatch alarm ${logicalId}: ${physicalId}`);
|
|
12302
|
+
assertRegionMatch(context?.expectedRegion ? await this.cloudWatchClient.config.region() : void 0, context?.expectedRegion, resourceType, logicalId, physicalId, "pre-update");
|
|
12302
12303
|
refuseMalformedDesiredTags(properties["Tags"], resourceType, logicalId, physicalId);
|
|
12303
12304
|
try {
|
|
12304
12305
|
await this.sendWithThrottleRetry("PutMetricAlarm", logicalId, () => this.cloudWatchClient.send(new PutMetricAlarmCommand(this.buildAlarmParams(physicalId, properties))));
|
|
@@ -34250,7 +34251,8 @@ var KMSProvider = class {
|
|
|
34250
34251
|
default: throw new ProvisioningError(`Unsupported resource type: ${resourceType}`, resourceType, logicalId);
|
|
34251
34252
|
}
|
|
34252
34253
|
}
|
|
34253
|
-
async update(logicalId, physicalId, resourceType, properties, _previousProperties) {
|
|
34254
|
+
async update(logicalId, physicalId, resourceType, properties, _previousProperties, context) {
|
|
34255
|
+
assertRegionMatch(context?.expectedRegion ? await this.getClient().config.region() : void 0, context?.expectedRegion, resourceType, logicalId, physicalId, "pre-update");
|
|
34254
34256
|
switch (resourceType) {
|
|
34255
34257
|
case "AWS::KMS::Key": return this.updateKey(logicalId, physicalId, resourceType, properties, _previousProperties);
|
|
34256
34258
|
case "AWS::KMS::Alias": return this.updateAlias(logicalId, physicalId, resourceType, properties);
|
|
@@ -41572,8 +41574,9 @@ var CodeBuildProvider = class {
|
|
|
41572
41574
|
throw new ProvisioningError(`Failed to create CodeBuild Project ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, void 0, cause);
|
|
41573
41575
|
}
|
|
41574
41576
|
}
|
|
41575
|
-
async update(logicalId, physicalId, resourceType, properties, previousProperties) {
|
|
41577
|
+
async update(logicalId, physicalId, resourceType, properties, previousProperties, context) {
|
|
41576
41578
|
this.logger.debug(`Updating CodeBuild Project ${logicalId}: ${physicalId}`);
|
|
41579
|
+
assertRegionMatch(context?.expectedRegion ? await this.getClient().config.region() : void 0, context?.expectedRegion, resourceType, logicalId, physicalId, "pre-update");
|
|
41577
41580
|
try {
|
|
41578
41581
|
const input = this.mapProperties(logicalId, properties);
|
|
41579
41582
|
input.name = physicalId;
|
|
@@ -43863,8 +43866,9 @@ var ECRProvider = class {
|
|
|
43863
43866
|
throw thrown;
|
|
43864
43867
|
}
|
|
43865
43868
|
}
|
|
43866
|
-
async update(logicalId, physicalId, resourceType, properties, previousProperties) {
|
|
43869
|
+
async update(logicalId, physicalId, resourceType, properties, previousProperties, context) {
|
|
43867
43870
|
this.logger.debug(`Updating ECR Repository ${logicalId} (${physicalId})`);
|
|
43871
|
+
assertRegionMatch(context?.expectedRegion ? await this.getClient().config.region() : void 0, context?.expectedRegion, resourceType, logicalId, physicalId, "pre-update");
|
|
43868
43872
|
refuseMalformedDesiredTags(properties["Tags"], resourceType, logicalId, physicalId);
|
|
43869
43873
|
try {
|
|
43870
43874
|
const newScanConfig = properties["ImageScanningConfiguration"];
|
|
@@ -44219,6 +44223,18 @@ var NestedStackProvider = class {
|
|
|
44219
44223
|
const failure = new Error(nestedStackChildFailureMessage(plainOrDescribed(childStackName, "stack name"), childResult.errorCount, childResult.skippedCount, childResult.interrupted, inspect.command, withheldTargetClause(inspect, "stack", "cdkd state show", "The child stack's name") + (accountClause === "" ? "" : ` ${accountClause}`)));
|
|
44220
44224
|
throw markNonRetryable(failure);
|
|
44221
44225
|
}
|
|
44226
|
+
const orphanSkips = childResult.journaledOrphanSkips;
|
|
44227
|
+
if (deleteContext?.stackDestroy === true && childResult.stateDeleted && orphanSkips > 0) {
|
|
44228
|
+
const slot = ctx.childUnaddressed;
|
|
44229
|
+
if (slot) slot.last = {
|
|
44230
|
+
deleteSkipped: orphanSkips,
|
|
44231
|
+
updatePartial: 0
|
|
44232
|
+
};
|
|
44233
|
+
return {
|
|
44234
|
+
outcome: "deleted",
|
|
44235
|
+
leftInPlace: `nested stack ${plainOrDescribed(childStackName, "stack name")} left ${orphanSkips} resource(s) a failed deploy created in AWS`
|
|
44236
|
+
};
|
|
44237
|
+
}
|
|
44222
44238
|
if (childResult.skippedCount > 0 || childResult.interrupted) {
|
|
44223
44239
|
const causes = [];
|
|
44224
44240
|
if (childResult.skippedCount > 0) causes.push(`skipped ${childResult.skippedCount} resource(s)`);
|
|
@@ -44748,4 +44764,4 @@ var ACMCertificateProvider = class {
|
|
|
44748
44764
|
|
|
44749
44765
|
//#endregion
|
|
44750
44766
|
export { ACMCertificateProvider, ASGProvider, AgentCoreBrowserProvider, AgentCoreCodeInterpreterProvider, AgentCoreEvaluatorProvider, AgentCoreRuntimeProvider, ApiGatewayProvider, ApiGatewayV2Provider, AppSyncProvider, BudgetsBudgetProvider, CloudFrontDistributionProvider, CloudFrontOACProvider, CloudFrontOAIProvider, CloudTrailProvider, CloudWatchAlarmProvider, CloudWatchAnomalyDetectorProvider, CodeBuildProvider, CodeCommitRepositoryProvider, CognitoUserPoolProvider, DLMLifecyclePolicyProvider, DocDBProvider, DocDBSubnetGroupProvider, DynamoDBGlobalTableProvider, DynamoDBTableProvider, EC2Provider, ECRProvider, ECSProvider, EFSProvider, ELBv2Provider, EMRClusterProvider, EMRInstanceFleetConfigProvider, EMRInstanceGroupConfigProvider, ElastiCacheProvider, EventBridgeBusProvider, EventBridgeRuleProvider, FSxFileSystemProvider, FirehoseProvider, GlueConnectionProvider, GlueCrawlerProvider, GlueJobProvider, GlueProvider, GlueSecurityConfigurationProvider, GlueTriggerProvider, GlueWorkflowProvider, IAMAccessKeyProvider, IAMInstanceProfileProvider, IAMManagedPolicyProvider, IAMPolicyProvider, IAMRoleProvider, IAMUserGroupProvider, KMSProvider, KinesisStreamConsumerProvider, KinesisStreamProvider, LambdaEventInvokeConfigProvider, LambdaEventSourceMappingProvider, LambdaFunctionProvider, LambdaLayerVersionProvider, LambdaMicrovmImageProvider, LambdaPermissionProvider, LambdaUrlProvider, LogsLogGroupProvider, NeptuneProvider, NestedStackProvider, PipesPipeProvider, RDSDBProxyEndpointProvider, RDSDBProxyProvider, RDSDBProxyTargetGroupProvider, RDSProvider, Route53Provider, S3BucketPolicyProvider, S3BucketProvider, S3DirectoryBucketProvider, S3TablesProvider, S3VectorsProvider, SNSSubscriptionProvider, SNSTopicPolicyProvider, SNSTopicProvider, SQSQueuePolicyProvider, SQSQueueProvider, SSMParameterProvider, SchedulerScheduleProvider, SecretsManagerSecretProvider, ServiceDiscoveryProvider, StepFunctionsProvider, WAFv2WebACLProvider, WaitConditionHandleProvider };
|
|
44751
|
-
//# sourceMappingURL=provider-classes-
|
|
44767
|
+
//# sourceMappingURL=provider-classes-DmZ0J68L.js.map
|