@go-to-k/cdkd 0.315.0 → 0.316.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/dist/{asg-provider-DpNkEibf.js → asg-provider-DOLuhiky.js} +6 -7
  2. package/dist/{asg-provider-DpNkEibf.js.map → asg-provider-DOLuhiky.js.map} +1 -1
  3. package/dist/{aws-client-defaults-BX9Y_fKp.js → aws-client-defaults-BLXFsfMa.js} +6 -11
  4. package/dist/aws-client-defaults-BLXFsfMa.js.map +1 -0
  5. package/dist/{aws-clients-Bu9EMILF.js → aws-clients-CGZAQ1gS.js} +5 -8
  6. package/dist/aws-clients-CGZAQ1gS.js.map +1 -0
  7. package/dist/{aws-failure-text-agWtoyga.js → aws-failure-text-DiHodi76.js} +8 -15
  8. package/dist/aws-failure-text-DiHodi76.js.map +1 -0
  9. package/dist/cli.js +6 -10
  10. package/dist/cli.js.map +1 -1
  11. package/dist/{created-resource-sink-QECX8C-Z.js → created-resource-sink-B9OCHRr_.js} +35 -66
  12. package/dist/created-resource-sink-B9OCHRr_.js.map +1 -0
  13. package/dist/{db-instance-modify-retry-B1NRKBSQ.js → db-instance-modify-retry-DQTozL4b.js} +4 -5
  14. package/dist/{db-instance-modify-retry-B1NRKBSQ.js.map → db-instance-modify-retry-DQTozL4b.js.map} +1 -1
  15. package/dist/{deploy-engine--bCIMkkk.js → deploy-engine-NYjdxQWe.js} +408 -625
  16. package/dist/deploy-engine-NYjdxQWe.js.map +1 -0
  17. package/dist/{iam-role-provider-s5--ZmBZ.js → iam-role-provider-Ddo7WwEs.js} +7 -9
  18. package/dist/iam-role-provider-Ddo7WwEs.js.map +1 -0
  19. package/dist/index.d.ts +0 -102
  20. package/dist/index.d.ts.map +1 -1
  21. package/dist/index.js +5 -5
  22. package/dist/{neptune-provider-BNxotnbp.js → neptune-provider-CuZbMn9R.js} +8 -9
  23. package/dist/{neptune-provider-BNxotnbp.js.map → neptune-provider-CuZbMn9R.js.map} +1 -1
  24. package/dist/{program-CMtAmRyw.js → program-DSq5150i.js} +118 -228
  25. package/dist/program-DSq5150i.js.map +1 -0
  26. package/dist/{provider-classes-B8kkAZqJ.js → provider-classes-ushrO6ri.js} +102 -192
  27. package/dist/provider-classes-ushrO6ri.js.map +1 -0
  28. package/dist/{rds-provider-Cm3dsmFW.js → rds-provider-VigGKsxO.js} +35 -18
  29. package/dist/rds-provider-VigGKsxO.js.map +1 -0
  30. package/dist/{version-Caty7J3x.js → version-9_dvIw-h.js} +3 -4
  31. package/dist/{version-Caty7J3x.js.map → version-9_dvIw-h.js.map} +1 -1
  32. package/package.json +8 -8
  33. package/dist/aws-client-defaults-BX9Y_fKp.js.map +0 -1
  34. package/dist/aws-clients-Bu9EMILF.js.map +0 -1
  35. package/dist/aws-failure-text-agWtoyga.js.map +0 -1
  36. package/dist/created-resource-sink-QECX8C-Z.js.map +0 -1
  37. package/dist/deploy-engine--bCIMkkk.js.map +0 -1
  38. package/dist/iam-role-provider-s5--ZmBZ.js.map +0 -1
  39. package/dist/program-CMtAmRyw.js.map +0 -1
  40. package/dist/provider-classes-B8kkAZqJ.js.map +0 -1
  41. package/dist/rds-provider-Cm3dsmFW.js.map +0 -1
@@ -1,14 +1,14 @@
1
- import { r as getAwsClients, s as withApiGatewayPacing } from "./aws-clients-Bu9EMILF.js";
2
- import { $ as safeMsg, A as isBeforeStateRead, E as generatedNameFor, J as displaySafe, N as recordedGeneratedNameKept, O as getCurrentStackInstanceId, Q as plainIdentOr, T as generateResourceNameWithFallback, V as SECRET_REF_MAX_CODE_POINTS, X as isPasteableIdent, Y as displayStackName, a as safeStringify, i as isAwsAuthoredFailure, n as describeAwsFailure, q as displayIdent, r as describeAwsStatusReason, s as getLogger, t as VERBOSE_POINTER, w as generateResourceName } from "./aws-failure-text-agWtoyga.js";
3
- import { $ as logGroupProtectionSite, $n as plainOrDescribed, A as withoutServerErrorRetries, Ar as markNonRetryable, At as createMaskedLogSinks, B as quotedRemedyLogicalId, C as RecentIdSet, Ct as compositeIdSeparatorRefusal, D as replayFollowedAmbiguousAttempt, Dr as THROTTLING_ERROR_NAMES, E as isInsideWindow, Et as packCompositeId, F as VALUE_NOT_SHOWN, Ft as withDerivedNameMasks, G as ProtectionFlipRegistry, Gt as markCreatedBeforeFailure, H as remedyLogicalId, Ht as isAuxiliaryFailure, I as isPlainImportJson, J as deleteWithProtectionCompensation, Jn as commandHole, Kt as markSupersedesEarlierCreate, L as isPlainImportValue, Mn as ProvisioningError, Mr as wrapMaskedAwsError, Mt as isSecretDerivedValue, N as markNotGone, Nt as maskDeep, O as replayedSendWindow, Or as isMarkedNonRetryable, Ot as segmentAfterAnchor, P as assertRegionMatch, Pn as ResourceUpdateNotSupportedError, Pt as maskerOrIdentity, Q as isTerminalDeleteFailure, R as isQuotableImportValue, Rt as clearCreatedBeforeFailure, S as AmbiguousCreateLatch, Sr as isExplicitDenyError, St as compositeIdFormatMessage, T as createAttemptKey, Tr as isTransientServerError, Tt as logicalIdShown, U as resolveExplicitPhysicalId, V as refusalTypeShown, Wt as markAuxiliaryFailure, X as isProceedDbStatus, Xn as isInertUnquoted, Yn as hasClauseBreak, Z as isTerminalDbWaitStatus, Zn as pasteableCommand, _n as CdkdError, a as retractCreatedResource, an as injectiveKey, at as userPoolProtectionSite, bt as startInterruptWatch, c as SECRET_DERIVED_READ_LIVE, ct as WITHHELD_AWS_COMMAND, d as readPrincipalLists, dn as ambientClientDefaults, dt as protectedReplacementAdvice, et as observeThenDisableProtection, fn as ambientCredentialConfig, fr as markNameCollision, ft as renderDisableCommand, h as clearOnUpdateRemoval, hn as AccountIdUnavailableError, i as reportCreatedResource, j as RESOURCE_NOT_FOUND, jr as markRedactedCause, jt as createMaskedRetryLogger, k as setBounded, kr as isThrottlingError, kt as stateOrphanRecordRemedy, l as holdsSecretDerivedEntry, lt as isAwsCliLiteral, mn as credentialFingerprint, mr as relayedNameCollision, mt as ElapsedBudgetRegistry, nr as shellQuote, nt as rdsFamilyProtectionSite, on as injectiveKeyPrefix, p as recordedPrincipalsRepair, pn as clientDefaultsFor, pr as markReplayMayCollide, pt as ElapsedBudget, q as deleteAfterProtectionFlipWithFinalSnapshot, rr as withheldTargetClause, st as UNNAMEABLE_ID_CLAUSE, tt as protectionFlipKey, u as onlySecretDerived, un as withPasteableAwsProfile, ut as pasteableAwsCommand, v as removedTemplateKeys, vr as explicitDenyPolicyKind, w as ambiguousAttemptLead, wr as isRetryableTransientError, wt as compositeIdSkipResult, x as AMBIGUOUS_LATCH_TTL_MS, xr as isAmbiguousOutcomeError, xt as canonicalizeRoute53QueryName, y as withRemovalDefaults, yt as isInterruptedWaitError, z as normalizeAwsTagsToCfn } from "./created-resource-sink-QECX8C-Z.js";
4
- import { c as ambientRegion } from "./aws-client-defaults-BX9Y_fKp.js";
5
- import { $ as sendTtlWaitingOutRateLimit, A as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, Aa as isUsableAttemptedName, As as refuseMalformedResourcesForDestroy, B as deleteTableWithIndexBusyRetry, Ba as s3BucketDomainName, Bi as markDeleteStarted, Br as getStackRecords, C as planContributorInsightsOp, Ca as ec2InstanceProtectionSite, Cc as ecsServiceLaunchTypeSetOrChanged, Ct as enclosingDeadlineExpired, D as reverseMapTableContributorInsights, Da as reEnableInstanceApiTermination, Dc as sameLambdaFunctionAddress, E as reverseMapIndexContributorInsights, Ea as reDisableInstanceApiTermination, Ec as lambdaFunctionNameForMask, F as resolveDynamoDbDeleteBudgetClock, Fd as renderAssemblyPathEscape, Fi as acquireIdempotencyToken, Fo as accountArgs, G as readbackVectorIndexes, Gc as markSameGenerationBag, Gi as refuseMalformedDesiredTags, Gn as isRedactedRecordedValue, Gs as findSilentDropProperties, H as relayedIndexBusyDelete, Ha as s3BucketRegionalDomainName, Hi as DBPROXY_TAG_OPTIONS, Hn as getCurrentProducerRegions, Hr as replacedDeleteFailureVerdict, Hs as withheldAccountClause, I as resolveDynamoDbDeleteBudgetMs, Id as resolveAssemblyPath, J as vectorIndexesShapeDetail, Ja as outputReferenceProvenanceOf, Jc as snapshotPassProvenance, Ji as definedAttributes, Jt as getCurrentNestedStackContext, K as vectorIndexesForCreate, Kc as redactForState, Ki as tagMapAsList, Kn as redactedDeleteAddressFields, L as DELETE_INDEX_WAIT_PROCEED_NOTE, M as beginDeleteWait, N as compensateRemovedDeletionProtection, Nd as describeFileReadFailure, Ni as reserveStackCreateToken, O as stripIndexContributorInsights, Oo as passedParameterClassesOf, P as deleteBudgetKey, Pd as displayAssemblyPath, Q as readTtlSpec, R as INDEX_SETTLE_POLL_INTERVAL_MS, Ra as isSettledInstanceState, Rr as awaitInFlightSibling, S as indexDeclaresContributorInsights, Sl as recordAttributeIdCopy, T as readContributorInsightsSpec, Ta as observeThenDisableInstanceApiTermination, Tc as canonicalLambdaFunctionName, Tl as carriesSecretMask, To as parseWebACLArn, U as waitForIndexesSettled, Ua as s3BucketWebsiteUrl, Ui as planTagDiff, V as maskedLogger, Va as s3BucketDualStackDomainName, Vi as DBPROXY_TAGS_WHAT, Vt as getNestedRevertRun, W as planVectorIndexUpdates, Wi as readTagList, Wn as REDACTED_DELETE_ADDRESS_SKIP_REASON, Wt as revertNestedChildFromJournal, X as isTtlRateLimited, Y as isTtlAlreadyDisabled, Yi as stringifyIfAssigned, Yt as withNestedStackContext, Z as planTimeToLive, Zc as hasMaskableValues, _ as streamMemberRefusals, _t as renderNestedTemplateTreeDefect, _u as rewriteTemplateAssetReferences, aa as getCurrentResourceSecrets, ac as toCfnInteger, an as chunks, at as markRefusedBeforeApplying, b as CONTRIBUTOR_INSIGHTS_KEY, ba as isWaitAbandonedError, bc as withRetry, bd as derivePartitionAndUrlSuffix, bl as recoverMaskedOutput, c as DynamoDBGlobalTableProvider, cc as coerceCfnInteger, cn as withApiLimit, d as declaredStreamPolicyMember, da as slowCcOperationTimeoutMs, dc as configStringRefusal, dl as withoutPhysicalNameCopies, et as ECR_AUTO_DELETE_IMAGES_TAG, f as declaredStreamTagsMember, fa as onlySecretReferencesDiffer, fc as readConfigString, fu as stringifyValue, g as streamDeclaresTags, gc as requireConfigString, gd as decodeListingKey, gt as listNestedTemplateRows, h as streamDeclaresPolicy, hc as requireConfigObject, ht as isAbsoluteAssetPath, ic as isWarmThroughputDecrease, it as getPriorAttempts, j as DYNAMODB_DELETE_POLL_COST_MS, ji as earliestDefined, k as DYNAMODB_DELETE_DEADLINE_MARGIN_MS, l as STREAM_POLICY_KEY, lc as configBooleanRefusal, lu as timePhase, m as reverseMapStreamPolicy, mc as requireConfigArray, mo as getAccountInfo, mt as findNestedTemplateTreeDefect, nc as WARM_THROUGHPUT_MEMBERS, nt as hasCdkAutoDeleteTag, oc as toFiniteNumber, on as isAccessDeniedError, p as planStreamMemberOps, pa as unchangedBehindSecretReference, pc as replayWarn, pl as dynamicReferenceTokens, q as vectorIndexesSettled, qc as recordReferenceProvenanceEntry, qi as tagPlanWarning, qn as redactedDeleteAddressSkip, qs as withoutSilentDropProperties, rc as coerceWarmThroughput$1, rt as isTruthyCfnBoolean, sc as coerceCfnBoolean, sn as lookupEachName, t as DeployEngine, ta as waitForLambdaFunctionActive, tt as S3_AUTO_DELETE_OBJECTS_TAG, u as STREAM_TAGS_KEY, uc as configIntegerRefusal, us as refuseMalformedNestedChildOutputs, v as streamPolicyMatchesDeclared, va as deleteSkipReason, vi as secretNamedAttributeNamesOf, w as planIndexContributorInsightsOps, wa as isTerminationProtectionPropagationError, wc as emrClusterInstancesReplaced, wt as enclosingDeadlineRemainingMs, x as contributorInsightsRefusals, xa as markWaitAbandoned, xc as blockDeviceMappingsDifferOnlyInDeleteOnTermination, xl as physicalNameCopiesOf, y as streamTagsMatchDeclared, ya as withIndeterminateGuard, yd as canonicalizeRegion, z as TABLE_INDEX_NOUN, za as s3BucketArn, zc as passedNoEchoParametersOf, zi as isRefusedByName } from "./deploy-engine--bCIMkkk.js";
6
- import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-s5--ZmBZ.js";
7
- import { a as resolveSecretDerivedPrincipals, i as isResolvableSecretPrincipalList, n as runDestroyForStack, o as canonicalizeIpProtocolValue, r as holdsUnprovenSecretPrincipalToken, s as resolvedResourceTimeoutMs, t as canonicalizeIpv4Cidr } from "./program-CMtAmRyw.js";
8
- import { n as modifyDbInstanceWhenAvailable } from "./db-instance-modify-retry-B1NRKBSQ.js";
9
- import { RDSProvider } from "./rds-provider-Cm3dsmFW.js";
10
- import { NeptuneProvider } from "./neptune-provider-BNxotnbp.js";
11
- import { ASGProvider } from "./asg-provider-DpNkEibf.js";
1
+ import { r as getAwsClients, s as withApiGatewayPacing } from "./aws-clients-CGZAQ1gS.js";
2
+ import { $ as safeMsg, A as isBeforeStateRead, E as generatedNameFor, J as displaySafe, N as recordedGeneratedNameKept, O as getCurrentStackInstanceId, Q as plainIdentOr, T as generateResourceNameWithFallback, V as SECRET_REF_MAX_CODE_POINTS, X as isPasteableIdent, Y as displayStackName, a as safeStringify, i as isAwsAuthoredFailure, n as describeAwsFailure, q as displayIdent, r as describeAwsStatusReason, s as getLogger, t as VERBOSE_POINTER, w as generateResourceName } from "./aws-failure-text-DiHodi76.js";
3
+ import { $ as logGroupProtectionSite, $n as plainOrDescribed, A as withoutServerErrorRetries, Ar as markNonRetryable, At as createMaskedLogSinks, B as quotedRemedyLogicalId, C as RecentIdSet, Ct as compositeIdSeparatorRefusal, D as replayFollowedAmbiguousAttempt, Dr as THROTTLING_ERROR_NAMES, E as isInsideWindow, Et as packCompositeId, F as VALUE_NOT_SHOWN, Ft as withDerivedNameMasks, G as ProtectionFlipRegistry, Gt as markCreatedBeforeFailure, H as remedyLogicalId, Ht as isAuxiliaryFailure, I as isPlainImportJson, J as deleteWithProtectionCompensation, Jn as commandHole, Kt as markSupersedesEarlierCreate, L as isPlainImportValue, Mn as ProvisioningError, Mr as wrapMaskedAwsError, Mt as isSecretDerivedValue, N as markNotGone, Nt as maskDeep, O as replayedSendWindow, Or as isMarkedNonRetryable, Ot as segmentAfterAnchor, P as assertRegionMatch, Pn as ResourceUpdateNotSupportedError, Pt as maskerOrIdentity, Q as isTerminalDeleteFailure, R as isQuotableImportValue, Rt as clearCreatedBeforeFailure, S as AmbiguousCreateLatch, Sr as isExplicitDenyError, St as compositeIdFormatMessage, T as createAttemptKey, Tr as isTransientServerError, Tt as logicalIdShown, U as resolveExplicitPhysicalId, V as refusalTypeShown, Wt as markAuxiliaryFailure, X as isProceedDbStatus, Xn as isInertUnquoted, Yn as hasClauseBreak, Z as isTerminalDbWaitStatus, Zn as pasteableCommand, _n as CdkdError, a as retractCreatedResource, an as injectiveKey, at as userPoolProtectionSite, bt as startInterruptWatch, c as SECRET_DERIVED_READ_LIVE, ct as WITHHELD_AWS_COMMAND, d as readPrincipalLists, dn as ambientClientDefaults, dt as protectedReplacementAdvice, et as observeThenDisableProtection, fn as ambientCredentialConfig, fr as markNameCollision, ft as renderDisableCommand, h as clearOnUpdateRemoval, hn as AccountIdUnavailableError, i as reportCreatedResource, j as RESOURCE_NOT_FOUND, jr as markRedactedCause, jt as createMaskedRetryLogger, k as setBounded, kr as isThrottlingError, kt as stateOrphanRecordRemedy, l as holdsSecretDerivedEntry, lt as isAwsCliLiteral, mn as credentialFingerprint, mr as relayedNameCollision, mt as ElapsedBudgetRegistry, nr as shellQuote, nt as rdsFamilyProtectionSite, on as injectiveKeyPrefix, p as recordedPrincipalsRepair, pn as clientDefaultsFor, pr as markReplayMayCollide, pt as ElapsedBudget, q as deleteAfterProtectionFlipWithFinalSnapshot, rr as withheldTargetClause, st as UNNAMEABLE_ID_CLAUSE, tt as protectionFlipKey, u as onlySecretDerived, un as withPasteableAwsProfile, ut as pasteableAwsCommand, v as removedTemplateKeys, vr as explicitDenyPolicyKind, w as ambiguousAttemptLead, wr as isRetryableTransientError, wt as compositeIdSkipResult, x as AMBIGUOUS_LATCH_TTL_MS, xr as isAmbiguousOutcomeError, xt as canonicalizeRoute53QueryName, y as withRemovalDefaults, yt as isInterruptedWaitError, z as normalizeAwsTagsToCfn } from "./created-resource-sink-B9OCHRr_.js";
4
+ import { c as ambientRegion } from "./aws-client-defaults-BLXFsfMa.js";
5
+ import { $ as sendTtlWaitingOutRateLimit, A as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, Aa as isUsableAttemptedName, As as refuseMalformedResourcesForDestroy, B as deleteTableWithIndexBusyRetry, Ba as s3BucketDomainName, Bi as markDeleteStarted, Br as getStackRecords, C as planContributorInsightsOp, Ca as ec2InstanceProtectionSite, Cc as ecsServiceLaunchTypeSetOrChanged, Ct as enclosingDeadlineExpired, D as reverseMapTableContributorInsights, Da as reEnableInstanceApiTermination, Dc as sameLambdaFunctionAddress, E as reverseMapIndexContributorInsights, Ea as reDisableInstanceApiTermination, Ec as lambdaFunctionNameForMask, F as resolveDynamoDbDeleteBudgetClock, Fd as renderAssemblyPathEscape, Fi as acquireIdempotencyToken, Fo as accountArgs, G as readbackVectorIndexes, Gc as markSameGenerationBag, Gi as refuseMalformedDesiredTags, Gn as isRedactedRecordedValue, Gs as findSilentDropProperties, H as relayedIndexBusyDelete, Ha as s3BucketRegionalDomainName, Hi as DBPROXY_TAG_OPTIONS, Hn as getCurrentProducerRegions, Hr as replacedDeleteFailureVerdict, Hs as withheldAccountClause, I as resolveDynamoDbDeleteBudgetMs, Id as resolveAssemblyPath, J as vectorIndexesShapeDetail, Ja as outputReferenceProvenanceOf, Jc as snapshotPassProvenance, Ji as definedAttributes, Jt as getCurrentNestedStackContext, K as vectorIndexesForCreate, Kc as redactForState, Ki as tagMapAsList, Kn as redactedDeleteAddressFields, L as DELETE_INDEX_WAIT_PROCEED_NOTE, M as beginDeleteWait, N as compensateRemovedDeletionProtection, Nd as describeFileReadFailure, Ni as reserveStackCreateToken, O as stripIndexContributorInsights, Oo as passedParameterClassesOf, P as deleteBudgetKey, Pd as displayAssemblyPath, Q as readTtlSpec, R as INDEX_SETTLE_POLL_INTERVAL_MS, Ra as isSettledInstanceState, Rr as awaitInFlightSibling, S as indexDeclaresContributorInsights, Sl as recordAttributeIdCopy, T as readContributorInsightsSpec, Ta as observeThenDisableInstanceApiTermination, Tc as canonicalLambdaFunctionName, Tl as carriesSecretMask, To as parseWebACLArn, U as waitForIndexesSettled, Ua as s3BucketWebsiteUrl, Ui as planTagDiff, V as maskedLogger, Va as s3BucketDualStackDomainName, Vi as DBPROXY_TAGS_WHAT, Vt as getNestedRevertRun, W as planVectorIndexUpdates, Wi as readTagList, Wn as REDACTED_DELETE_ADDRESS_SKIP_REASON, Wt as revertNestedChildFromJournal, X as isTtlRateLimited, Y as isTtlAlreadyDisabled, Yi as stringifyIfAssigned, Yt as withNestedStackContext, Z as planTimeToLive, Zc as hasMaskableValues, _ as streamMemberRefusals, _t as renderNestedTemplateTreeDefect, _u as rewriteTemplateAssetReferences, aa as getCurrentResourceSecrets, ac as toCfnInteger, an as chunks, at as markRefusedBeforeApplying, b as CONTRIBUTOR_INSIGHTS_KEY, ba as isWaitAbandonedError, bc as withRetry, bd as derivePartitionAndUrlSuffix, bl as recoverMaskedOutput, c as DynamoDBGlobalTableProvider, cc as coerceCfnInteger, cn as withApiLimit, d as declaredStreamPolicyMember, da as slowCcOperationTimeoutMs, dc as configStringRefusal, dl as withoutPhysicalNameCopies, et as ECR_AUTO_DELETE_IMAGES_TAG, f as declaredStreamTagsMember, fa as onlySecretReferencesDiffer, fc as readConfigString, fu as stringifyValue, g as streamDeclaresTags, gc as requireConfigString, gd as decodeListingKey, gt as listNestedTemplateRows, h as streamDeclaresPolicy, hc as requireConfigObject, ht as isAbsoluteAssetPath, ic as isWarmThroughputDecrease, it as getPriorAttempts, j as DYNAMODB_DELETE_POLL_COST_MS, ji as earliestDefined, k as DYNAMODB_DELETE_DEADLINE_MARGIN_MS, l as STREAM_POLICY_KEY, lc as configBooleanRefusal, lu as timePhase, m as reverseMapStreamPolicy, mc as requireConfigArray, mo as getAccountInfo, mt as findNestedTemplateTreeDefect, nc as WARM_THROUGHPUT_MEMBERS, nt as hasCdkAutoDeleteTag, oc as toFiniteNumber, on as isAccessDeniedError, p as planStreamMemberOps, pa as unchangedBehindSecretReference, pc as replayWarn, pl as dynamicReferenceTokens, q as vectorIndexesSettled, qc as recordReferenceProvenanceEntry, qi as tagPlanWarning, qn as redactedDeleteAddressSkip, qs as withoutSilentDropProperties, rc as coerceWarmThroughput$1, rt as isTruthyCfnBoolean, sc as coerceCfnBoolean, sn as lookupEachName, t as DeployEngine, ta as waitForLambdaFunctionActive, tt as S3_AUTO_DELETE_OBJECTS_TAG, u as STREAM_TAGS_KEY, uc as configIntegerRefusal, us as refuseMalformedNestedChildOutputs, v as streamPolicyMatchesDeclared, va as deleteSkipReason, vi as secretNamedAttributeNamesOf, w as planIndexContributorInsightsOps, wa as isTerminationProtectionPropagationError, wc as emrClusterInstancesReplaced, wt as enclosingDeadlineRemainingMs, x as contributorInsightsRefusals, xa as markWaitAbandoned, xc as blockDeviceMappingsDifferOnlyInDeleteOnTermination, xl as physicalNameCopiesOf, y as streamTagsMatchDeclared, ya as withIndeterminateGuard, yd as canonicalizeRegion, z as TABLE_INDEX_NOUN, za as s3BucketArn, zc as passedNoEchoParametersOf, zi as isRefusedByName } from "./deploy-engine-NYjdxQWe.js";
6
+ import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-Ddo7WwEs.js";
7
+ import { a as resolveSecretDerivedPrincipals, i as isResolvableSecretPrincipalList, n as runDestroyForStack, o as canonicalizeIpProtocolValue, r as holdsUnprovenSecretPrincipalToken, s as resolvedResourceTimeoutMs, t as canonicalizeIpv4Cidr } from "./program-DSq5150i.js";
8
+ import { n as modifyDbInstanceWhenAvailable } from "./db-instance-modify-retry-DQTozL4b.js";
9
+ import { RDSProvider } from "./rds-provider-VigGKsxO.js";
10
+ import { NeptuneProvider } from "./neptune-provider-CuZbMn9R.js";
11
+ import { ASGProvider } from "./asg-provider-DOLuhiky.js";
12
12
  import { createHash, randomUUID } from "node:crypto";
13
13
  import { CreateBucketCommand, CreateBucketMetadataConfigurationCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetadataConfigurationCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAbacCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketMetadataConfigurationCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListBucketsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAbacCommand, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, UpdateBucketMetadataAnnotationTableConfigurationCommand, UpdateBucketMetadataInventoryTableConfigurationCommand, UpdateBucketMetadataJournalTableConfigurationCommand } from "@aws-sdk/client-s3";
14
14
  import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachRolePolicyCommand, AttachUserPolicyCommand, CreateAccessKeyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreatePolicyCommand, CreatePolicyVersionCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeletePolicyCommand, DeletePolicyVersionCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachRolePolicyCommand, DetachUserPolicyCommand, GetAccessKeyLastUsedCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetPolicyCommand, GetPolicyVersionCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListEntitiesForPolicyCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListPoliciesCommand, ListPolicyTagsCommand, ListPolicyVersionsCommand, ListUserPoliciesCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagPolicyCommand, TagUserCommand, UntagPolicyCommand, UntagUserCommand, UpdateAccessKeyCommand, UpdateGroupCommand, UpdateLoginProfileCommand, UpdateUserCommand } from "@aws-sdk/client-iam";
@@ -65,7 +65,7 @@ import { CreateLifecyclePolicyCommand, DLMClient, DeleteLifecyclePolicyCommand a
65
65
  import { CreateVectorBucketCommand, DeleteIndexCommand, DeleteVectorBucketCommand, GetVectorBucketCommand, ListIndexesCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$19, S3VectorsClient, TagResourceCommand as TagResourceCommand$28, UntagResourceCommand as UntagResourceCommand$29 } from "@aws-sdk/client-s3vectors";
66
66
  import { CreateNamespaceCommand, CreateTableBucketCommand, CreateTableCommand as CreateTableCommand$2, DeleteNamespaceCommand as DeleteNamespaceCommand$1, DeleteTableBucketCommand, DeleteTableBucketMetricsConfigurationCommand, DeleteTableBucketReplicationCommand, DeleteTableCommand as DeleteTableCommand$2, GetNamespaceCommand as GetNamespaceCommand$1, GetTableBucketCommand, GetTableBucketEncryptionCommand, GetTableBucketMaintenanceConfigurationCommand, GetTableBucketMetricsConfigurationCommand, GetTableBucketReplicationCommand, GetTableBucketStorageClassCommand, GetTableCommand as GetTableCommand$1, GetTableMaintenanceConfigurationCommand, ListNamespacesCommand as ListNamespacesCommand$1, ListTableBucketsCommand, ListTablesCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$20, NotFoundException as NotFoundException$7, PutTableBucketEncryptionCommand, PutTableBucketMaintenanceConfigurationCommand, PutTableBucketMetricsConfigurationCommand, PutTableBucketReplicationCommand, PutTableBucketStorageClassCommand, PutTableMaintenanceConfigurationCommand, RenameTableCommand, S3TablesClient, TagResourceCommand as TagResourceCommand$29, UntagResourceCommand as UntagResourceCommand$30 } from "@aws-sdk/client-s3tables";
67
67
 
68
- //#region src/provisioning/providers/iam-policy-provider.ts
68
+ // src/provisioning/providers/iam-policy-provider.ts
69
69
  const POLICY_NAME_SKIP_REASON = "no policy name in state — no delete issued";
70
70
  const POLICY_NO_TARGET_SKIP_REASON = "no Roles/Groups/Users in state — no delete issued";
71
71
  const POLICY_MALFORMED_TARGET_SKIP_REASON = "malformed Roles/Groups/Users in state — no delete issued";
@@ -590,8 +590,7 @@ var IAMPolicyProvider = class {
590
590
  }
591
591
  };
592
592
 
593
- //#endregion
594
- //#region src/provisioning/providers/iam-managed-policy-provider.ts
593
+ // src/provisioning/providers/iam-managed-policy-provider.ts
595
594
  const principalsOf = (bag) => readPrincipalLists({
596
595
  Groups: bag["Groups"],
597
596
  Roles: bag["Roles"],
@@ -1217,8 +1216,7 @@ function recordedNonRootPath(arn) {
1217
1216
  return path === "/" ? void 0 : path;
1218
1217
  }
1219
1218
 
1220
- //#endregion
1221
- //#region src/provisioning/providers/iam-instance-profile-provider.ts
1219
+ // src/provisioning/providers/iam-instance-profile-provider.ts
1222
1220
  const INSTANCE_PROFILE_TYPE = "AWS::IAM::InstanceProfile";
1223
1221
  function isInstanceProfileName(id) {
1224
1222
  return /^[\w+=,.@-]{1,128}$/.test(id);
@@ -1485,8 +1483,7 @@ var IAMInstanceProfileProvider = class {
1485
1483
  }
1486
1484
  };
1487
1485
 
1488
- //#endregion
1489
- //#region src/provisioning/providers/iam-access-key-provider.ts
1486
+ // src/provisioning/providers/iam-access-key-provider.ts
1490
1487
  const ACCESS_KEY_ID_PATTERN = /^AKIA[A-Z0-9]{16}$/;
1491
1488
  const CREATE_DATE_SKEW_MARGIN_MS = 5e3;
1492
1489
  var IAMAccessKeyProvider = class {
@@ -1796,8 +1793,7 @@ var IAMAccessKeyProvider = class {
1796
1793
  }
1797
1794
  };
1798
1795
 
1799
- //#endregion
1800
- //#region src/provisioning/providers/iam-user-group-provider.ts
1796
+ // src/provisioning/providers/iam-user-group-provider.ts
1801
1797
  function isUserOrGroupName(resourceType, id) {
1802
1798
  return resourceType === "AWS::IAM::User" ? /^[\w+=,.@-]{1,64}$/.test(id) : /^[\w+=,.@-]{1,128}$/.test(id);
1803
1799
  }
@@ -2938,15 +2934,13 @@ var IAMUserGroupProvider = class {
2938
2934
  }
2939
2935
  };
2940
2936
 
2941
- //#endregion
2942
- //#region src/utils/cfn-timestamp.ts
2937
+ // src/utils/cfn-timestamp.ts
2943
2938
  const OFFSETLESS_DATE_TIME = /^\d{4}-\d{2}-\d{2}[Tt ]\d{2}:\d{2}(:\d{2}(\.\d+)?)?$/;
2944
2939
  function parseCfnTimestamp(value) {
2945
2940
  return new Date(OFFSETLESS_DATE_TIME.test(value) ? `${value}Z` : value);
2946
2941
  }
2947
2942
 
2948
- //#endregion
2949
- //#region src/provisioning/providers/s3-bucket-provider.ts
2943
+ // src/provisioning/providers/s3-bucket-provider.ts
2950
2944
  function manualBucketDeletionClause(bucketName, maskSecrets, journaled) {
2951
2945
  const command = renderDisableCommand({
2952
2946
  before: "aws s3api delete-bucket --bucket",
@@ -6059,8 +6053,7 @@ var S3BucketProvider = class S3BucketProvider {
6059
6053
  }
6060
6054
  };
6061
6055
 
6062
- //#endregion
6063
- //#region src/provisioning/providers/s3-bucket-policy-provider.ts
6056
+ // src/provisioning/providers/s3-bucket-policy-provider.ts
6064
6057
  const OAI_USER_ARN_RE = /^arn:aws[a-z-]*:iam::cloudfront:user\/CloudFront Origin Access Identity ([A-Z0-9]+)$/;
6065
6058
  const IAM_UNIQUE_ID_RE = /^A[A-Z0-9]{15,}$/;
6066
6059
  const oaiCanonicalUserIdCache = /* @__PURE__ */ new Map();
@@ -6262,8 +6255,7 @@ function isS3BucketName(value) {
6262
6255
  return true;
6263
6256
  }
6264
6257
 
6265
- //#endregion
6266
- //#region src/provisioning/providers/sqs-queue-provider.ts
6258
+ // src/provisioning/providers/sqs-queue-provider.ts
6267
6259
  function serializeRedrivePolicy(value) {
6268
6260
  if (value === null || value === void 0) return "";
6269
6261
  if (typeof value === "object" && Object.keys(value).length === 0) return "";
@@ -6591,8 +6583,7 @@ var SQSQueueProvider = class {
6591
6583
  }
6592
6584
  };
6593
6585
 
6594
- //#endregion
6595
- //#region src/provisioning/policy-document-content.ts
6586
+ // src/provisioning/policy-document-content.ts
6596
6587
  const MASK = "***";
6597
6588
  const PERMANENT_CDKD_CODES = /* @__PURE__ */ new Set(["ROLLBACK_SECRET_TOKEN_SCAN_MISMATCH"]);
6598
6589
  const MARKED_PERMANENT_CODE_PREFIXES = ["INTRINSIC_RESOLUTION_REFUSAL", "ROLLBACK_SECRET_REGION_AMBIGUOUS"];
@@ -6723,8 +6714,7 @@ function policyContentKey(document) {
6723
6714
  return canonicalJson$3(value);
6724
6715
  }
6725
6716
 
6726
- //#endregion
6727
- //#region src/provisioning/providers/sqs-queue-policy-provider.ts
6717
+ // src/provisioning/providers/sqs-queue-policy-provider.ts
6728
6718
  const QUEUE_POLICY_UNREADABLE_SKIP_REASON = "the policy of a queue it wrote could not be read, so whether that queue still carries it is unknown";
6729
6719
  const QUEUE_POLICY_UNRESOLVED_DOCUMENT_SKIP_REASON = "the policy document it attempted could not be resolved right now to compare its queues with";
6730
6720
  const QUEUE_POLICY_MISMATCH_LEFT_REASON = "a queue it wrote carries a policy that does not match the document it attempted, so that queue was not cleared";
@@ -7026,8 +7016,7 @@ function splitQueueUrls(physicalId) {
7026
7016
  return physicalId.split(",").filter((url) => url.length > 0);
7027
7017
  }
7028
7018
 
7029
- //#endregion
7030
- //#region src/provisioning/providers/create-ownership.ts
7019
+ // src/provisioning/providers/create-ownership.ts
7031
7020
  async function nameHeldBefore(lookup, isAbsent) {
7032
7021
  try {
7033
7022
  return await lookup() ? "held" : "free";
@@ -7044,8 +7033,7 @@ function skippedCleanupText(heldBefore, what, command) {
7044
7033
  return heldBefore === "held" ? `${what} already existed before this create attempt (it may be an earlier attempt of this same deploy, an earlier failed deploy, or another stack's or someone else's resource), and the create handed it back, so cdkd did not delete it after the wiring failure; this deploy may have changed its configuration. A resource under a cdkd-generated name is adopted by the next deploy if its create-time settings are unchanged, so it needs no action if it is this stack's. Delete it only after confirming from its tags and creation time that no one else uses it: ${command}` : `cdkd could not tell whether this create made ${what} (the lookup before the create did not answer), so it was not deleted after the wiring failure. If this deploy created it, delete it before the next deploy: ${command}`;
7045
7034
  }
7046
7035
 
7047
- //#endregion
7048
- //#region src/provisioning/providers/sns-topic-provider.ts
7036
+ // src/provisioning/providers/sns-topic-provider.ts
7049
7037
  const SNS_MAXIMUM_MESSAGE_SIZE_DEFAULT = "262144";
7050
7038
  function snsTopicAttributes(topicArn) {
7051
7039
  return {
@@ -7601,8 +7589,7 @@ function mapDeliveryStatusLogging(attrs, stateCaseMap = /* @__PURE__ */ new Map(
7601
7589
  return result;
7602
7590
  }
7603
7591
 
7604
- //#endregion
7605
- //#region src/provisioning/providers/sns-subscription-provider.ts
7592
+ // src/provisioning/providers/sns-subscription-provider.ts
7606
7593
  const SNS_SUBSCRIPTION_DELETE_THREW_REASON = "the Unsubscribe call did not complete, so the old subscription is unproven";
7607
7594
  const MUTABLE_ATTRIBUTES = [
7608
7595
  "RawMessageDelivery",
@@ -7865,8 +7852,7 @@ function isPendingConfirmationError(error) {
7865
7852
  return error instanceof InvalidParameterException && error.message.toLowerCase().includes("pending confirmation");
7866
7853
  }
7867
7854
 
7868
- //#endregion
7869
- //#region src/provisioning/providers/sns-topic-policy-provider.ts
7855
+ // src/provisioning/providers/sns-topic-policy-provider.ts
7870
7856
  const TOPIC_POLICY_UNREADABLE_SKIP_REASON = "the policy of a topic it wrote could not be read, so whether that topic still carries it is unknown";
7871
7857
  const TOPIC_POLICY_UNRESOLVED_DOCUMENT_SKIP_REASON = "the policy document it attempted could not be resolved right now to compare its topics with";
7872
7858
  const TOPIC_POLICY_MISMATCH_LEFT_REASON = "a topic it wrote carries a policy that does not match the document it attempted, so that topic was not reset";
@@ -8182,8 +8168,7 @@ function canonicalPolicy(text) {
8182
8168
  }
8183
8169
  }
8184
8170
 
8185
- //#endregion
8186
- //#region src/provisioning/providers/lambda-create-client.ts
8171
+ // src/provisioning/providers/lambda-create-client.ts
8187
8172
  var LambdaCreateClientCache = class {
8188
8173
  client;
8189
8174
  shared;
@@ -8204,8 +8189,7 @@ var LambdaCreateClientCache = class {
8204
8189
  }
8205
8190
  };
8206
8191
 
8207
- //#endregion
8208
- //#region src/provisioning/providers/lambda-function-provider.ts
8192
+ // src/provisioning/providers/lambda-function-provider.ts
8209
8193
  function isFunctionName(id) {
8210
8194
  return /^[A-Za-z0-9_-]{1,64}$/.test(id);
8211
8195
  }
@@ -9236,8 +9220,7 @@ var LambdaFunctionProvider = class {
9236
9220
  }
9237
9221
  };
9238
9222
 
9239
- //#endregion
9240
- //#region src/provisioning/providers/lambda-permission-provider.ts
9223
+ // src/provisioning/providers/lambda-permission-provider.ts
9241
9224
  const PERMISSION_FUNCTION_NAME_SKIP_REASON = "FunctionName missing from state — no delete issued";
9242
9225
  const PERMISSION_STATEMENT_ID_SKIP_REASON = "empty StatementId in state physicalId — no delete issued";
9243
9226
  const DEPLOY_SKIP_CAVEAT$1 = "NOTE this arm is ALSO reached from cdkd deploy. Since issue 1762 the DELETE of a resource removed from the template behaves like destroy — the record is KEPT and the next deploy re-attempts it — but a REPLACEMENT / rollback delete FAILS the resource instead (https://github.com/go-to-k/cdkd/issues/1762), leaving the old one untracked; there, remove the resource by hand.";
@@ -9468,8 +9451,7 @@ function permissionStatementId(logicalId) {
9468
9451
  return statementId;
9469
9452
  }
9470
9453
 
9471
- //#endregion
9472
- //#region src/provisioning/providers/lambda-url-provider.ts
9454
+ // src/provisioning/providers/lambda-url-provider.ts
9473
9455
  var LambdaUrlProvider = class {
9474
9456
  lambdaClient;
9475
9457
  createClient = new LambdaCreateClientCache(() => this.lambdaClient);
@@ -9678,8 +9660,7 @@ var LambdaUrlProvider = class {
9678
9660
  }
9679
9661
  };
9680
9662
 
9681
- //#endregion
9682
- //#region src/provisioning/providers/orphan-report.ts
9663
+ // src/provisioning/providers/orphan-report.ts
9683
9664
  async function orphanCommandRegionArg(client, aws) {
9684
9665
  let region;
9685
9666
  try {
@@ -9744,8 +9725,7 @@ async function reportPossibleOrphans(logicalId, window, log, lookup) {
9744
9725
  log.warn(`${lead} (${when}), and ${service} may have created ${lookup.subject} then that no cdkd state records. ${found.ids.length} ${lookup.noun} match that this deploy did not record: ${shown.join(", ")}${more}. ${service} reports no creation time for them, so any of them may instead be this stack's own recorded one, another stack's, or older than this deploy; cdkd does not adopt or delete them. ${afterward} Inspect each before deleting anything: ${inspect}.${incomplete}`);
9745
9726
  }
9746
9727
 
9747
- //#endregion
9748
- //#region src/provisioning/providers/lambda-eventsource-provider.ts
9728
+ // src/provisioning/providers/lambda-eventsource-provider.ts
9749
9729
  const createEventSourceMappingLatch = new AmbiguousCreateLatch("lambda:CreateEventSourceMapping");
9750
9730
  const mappingsCreatedByThisProcess = new RecentIdSet();
9751
9731
  const ARN_SERVICE_RE = /^arn:aws[a-z0-9-]*:([^:]+):/;
@@ -10364,8 +10344,7 @@ var LambdaEventSourceMappingProvider = class {
10364
10344
  }
10365
10345
  };
10366
10346
 
10367
- //#endregion
10368
- //#region src/provisioning/providers/lambda-layer-provider.ts
10347
+ // src/provisioning/providers/lambda-layer-provider.ts
10369
10348
  const publishLayerVersionLatch = new AmbiguousCreateLatch("lambda:PublishLayerVersion");
10370
10349
  const versionsPublishedByThisProcess = new RecentIdSet();
10371
10350
  function parseLayerCreatedDate(value) {
@@ -10556,8 +10535,7 @@ var LambdaLayerVersionProvider = class {
10556
10535
  }
10557
10536
  };
10558
10537
 
10559
- //#endregion
10560
- //#region src/provisioning/providers/lambda-event-invoke-config-provider.ts
10538
+ // src/provisioning/providers/lambda-event-invoke-config-provider.ts
10561
10539
  function stringOrUndefined(value) {
10562
10540
  return typeof value === "string" ? value : void 0;
10563
10541
  }
@@ -10795,8 +10773,7 @@ var LambdaEventInvokeConfigProvider = class {
10795
10773
  }
10796
10774
  };
10797
10775
 
10798
- //#endregion
10799
- //#region src/provisioning/providers/lambda-microvm-image-provider.ts
10776
+ // src/provisioning/providers/lambda-microvm-image-provider.ts
10800
10777
  var LambdaMicrovmImageProvider = class {
10801
10778
  client;
10802
10779
  logger = getLogger().child("LambdaMicrovmImageProvider");
@@ -11165,8 +11142,7 @@ function isRecord$2(value) {
11165
11142
  return typeof value === "object" && value !== null && !Array.isArray(value);
11166
11143
  }
11167
11144
 
11168
- //#endregion
11169
- //#region src/provisioning/providers/lambda-web-function-arns.ts
11145
+ // src/provisioning/providers/lambda-web-function-arns.ts
11170
11146
  const CHILD_ARN = /^(arn:[^:]+:lambda:[^:]+:\d{12}:web-function\/[^/]+)\/(revision|endpoint)\/([^/]+)$/;
11171
11147
  function parseWebFunctionChildArn(arn, kind) {
11172
11148
  const match = CHILD_ARN.exec(arn);
@@ -11200,8 +11176,7 @@ function sleep$1(ms) {
11200
11176
  return new Promise((resolve) => setTimeout(resolve, ms));
11201
11177
  }
11202
11178
 
11203
- //#endregion
11204
- //#region src/provisioning/providers/lambda-web-function-revision-provider.ts
11179
+ // src/provisioning/providers/lambda-web-function-revision-provider.ts
11205
11180
  const createRevisionLatch = new AmbiguousCreateLatch("lambda-web:CreateWebFunctionRevision");
11206
11181
  const revisionsCreatedByThisProcess = new RecentIdSet();
11207
11182
  var LambdaWebFunctionRevisionProvider = class {
@@ -11561,8 +11536,7 @@ function serviceConfigToCfn(config) {
11561
11536
  return out;
11562
11537
  }
11563
11538
 
11564
- //#endregion
11565
- //#region src/provisioning/providers/lambda-web-function-endpoint-provider.ts
11539
+ // src/provisioning/providers/lambda-web-function-endpoint-provider.ts
11566
11540
  var LambdaWebFunctionEndpointProvider = class {
11567
11541
  client;
11568
11542
  logger = getLogger().child("LambdaWebFunctionEndpointProvider");
@@ -11924,8 +11898,7 @@ function buildAttributes$1(resp) {
11924
11898
  return attributes;
11925
11899
  }
11926
11900
 
11927
- //#endregion
11928
- //#region src/provisioning/providers/lambda-network-connector-provider.ts
11901
+ // src/provisioning/providers/lambda-network-connector-provider.ts
11929
11902
  const POLL_INTERVAL_MS$2 = 1e3;
11930
11903
  const MAX_POLL_ATTEMPTS = 1200;
11931
11904
  var LambdaNetworkConnectorProvider = class {
@@ -12228,8 +12201,7 @@ function versionOfArn(arn) {
12228
12201
  return match ? Number(match[1]) : void 0;
12229
12202
  }
12230
12203
 
12231
- //#endregion
12232
- //#region src/provisioning/delete-gone-wait.ts
12204
+ // src/provisioning/delete-gone-wait.ts
12233
12205
  async function waitForGoneAfterDelete(opts) {
12234
12206
  const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
12235
12207
  const now = opts.now ?? Date.now;
@@ -12280,8 +12252,7 @@ async function waitForGoneAfterDelete(opts) {
12280
12252
  }
12281
12253
  }
12282
12254
 
12283
- //#endregion
12284
- //#region src/provisioning/providers/dynamodb-table-provider.ts
12255
+ // src/provisioning/providers/dynamodb-table-provider.ts
12285
12256
  function isTableName(id) {
12286
12257
  return /^[A-Za-z0-9_.-]{3,255}$/.test(id);
12287
12258
  }
@@ -14551,8 +14522,7 @@ function projectIndexesOnto(live, recorded, desired, attempted = /* @__PURE__ */
14551
14522
  return kept.length > 0 ? kept : void 0;
14552
14523
  }
14553
14524
 
14554
- //#endregion
14555
- //#region src/provisioning/providers/logs-loggroup-provider.ts
14525
+ // src/provisioning/providers/logs-loggroup-provider.ts
14556
14526
  const LOG_GROUP_TYPE = "AWS::Logs::LogGroup";
14557
14527
  function isLogGroupName(id) {
14558
14528
  return /^[A-Za-z0-9._/#-]{1,512}$/.test(id);
@@ -15051,8 +15021,7 @@ var LogsLogGroupProvider = class {
15051
15021
  }
15052
15022
  };
15053
15023
 
15054
- //#endregion
15055
- //#region src/provisioning/providers/cloudwatch-alarm-provider.ts
15024
+ // src/provisioning/providers/cloudwatch-alarm-provider.ts
15056
15025
  function isDefaultEvaluationWindow(value) {
15057
15026
  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
15058
15027
  const keys = Object.keys(value);
@@ -15420,8 +15389,7 @@ var CloudWatchAlarmProvider = class {
15420
15389
  }
15421
15390
  };
15422
15391
 
15423
- //#endregion
15424
- //#region src/provisioning/providers/cloudwatch-anomaly-detector-provider.ts
15392
+ // src/provisioning/providers/cloudwatch-anomaly-detector-provider.ts
15425
15393
  const ID_ATTRIBUTES = ["AnomalyDetectorId", "Id"];
15426
15394
  var CloudWatchAnomalyDetectorProvider = class {
15427
15395
  cloudWatchClient;
@@ -15590,8 +15558,7 @@ function hasDescriptor(params) {
15590
15558
  return params.SingleMetricAnomalyDetector !== void 0 || params.MetricMathAnomalyDetector !== void 0 || params.Namespace !== void 0 || params.MetricName !== void 0;
15591
15559
  }
15592
15560
 
15593
- //#endregion
15594
- //#region src/provisioning/providers/secretsmanager-secret-provider.ts
15561
+ // src/provisioning/providers/secretsmanager-secret-provider.ts
15595
15562
  function asJson(value) {
15596
15563
  return value === void 0 ? void 0 : JSON.parse(JSON.stringify(value));
15597
15564
  }
@@ -16030,8 +15997,7 @@ var SecretsManagerSecretProvider = class {
16030
15997
  }
16031
15998
  };
16032
15999
 
16033
- //#endregion
16034
- //#region src/provisioning/providers/ssm-parameter-provider.ts
16000
+ // src/provisioning/providers/ssm-parameter-provider.ts
16035
16001
  var SSMParameterProvider = class SSMParameterProvider {
16036
16002
  ssmClient;
16037
16003
  createClient;
@@ -16321,8 +16287,7 @@ function ssmPoliciesParameter(policies) {
16321
16287
  return JSON.stringify(policies);
16322
16288
  }
16323
16289
 
16324
- //#endregion
16325
- //#region src/provisioning/providers/eventbridge-rule-provider.ts
16290
+ // src/provisioning/providers/eventbridge-rule-provider.ts
16326
16291
  var EventBridgeRuleProvider = class {
16327
16292
  eventBridgeClient;
16328
16293
  logger = getLogger().child("EventBridgeRuleProvider");
@@ -16763,8 +16728,7 @@ var EventBridgeRuleProvider = class {
16763
16728
  }
16764
16729
  };
16765
16730
 
16766
- //#endregion
16767
- //#region src/provisioning/providers/eventbridge-bus-provider.ts
16731
+ // src/provisioning/providers/eventbridge-bus-provider.ts
16768
16732
  function sanitizeDeadLetterConfig(value) {
16769
16733
  if (value === null || value === void 0) return void 0;
16770
16734
  if (typeof value !== "object") return void 0;
@@ -17050,8 +17014,7 @@ var EventBridgeBusProvider = class {
17050
17014
  }
17051
17015
  };
17052
17016
 
17053
- //#endregion
17054
- //#region src/provisioning/providers/ec2-provider.ts
17017
+ // src/provisioning/providers/ec2-provider.ts
17055
17018
  const EC2_VPC_GATEWAY_ATTACHMENT_ID_FORMAT = {
17056
17019
  label: "VPCGatewayAttachment",
17057
17020
  segments: ["gatewayId", "vpcId"]
@@ -21767,8 +21730,7 @@ function isDefaultEgressRule(rule) {
21767
21730
  return true;
21768
21731
  }
21769
21732
 
21770
- //#endregion
21771
- //#region src/provisioning/providers/apigateway-provider.ts
21733
+ // src/provisioning/providers/apigateway-provider.ts
21772
21734
  const createAuthorizerLatch$1 = new AmbiguousCreateLatch("apigateway:CreateAuthorizer");
21773
21735
  const createDeploymentLatch = new AmbiguousCreateLatch("apigateway:CreateDeployment");
21774
21736
  const authorizersCreatedByThisProcess$1 = new RecentIdSet();
@@ -23366,8 +23328,7 @@ function methodChildCalls(ids, desired, previous) {
23366
23328
  return calls;
23367
23329
  }
23368
23330
 
23369
- //#endregion
23370
- //#region src/provisioning/providers/apigatewayv2-provider.ts
23331
+ // src/provisioning/providers/apigatewayv2-provider.ts
23371
23332
  const createApiLatch = new AmbiguousCreateLatch("apigatewayv2:CreateApi");
23372
23333
  const createIntegrationLatch = new AmbiguousCreateLatch("apigatewayv2:CreateIntegration");
23373
23334
  const createAuthorizerLatch = new AmbiguousCreateLatch("apigatewayv2:CreateAuthorizer");
@@ -24836,8 +24797,7 @@ var ApiGatewayV2Provider = class ApiGatewayV2Provider {
24836
24797
  }
24837
24798
  };
24838
24799
 
24839
- //#endregion
24840
- //#region src/provisioning/providers/cloudfront-oai-provider.ts
24800
+ // src/provisioning/providers/cloudfront-oai-provider.ts
24841
24801
  var CloudFrontOAIProvider = class {
24842
24802
  cloudFrontClient;
24843
24803
  logger = getLogger().child("CloudFrontOAIProvider");
@@ -24986,8 +24946,7 @@ var CloudFrontOAIProvider = class {
24986
24946
  }
24987
24947
  };
24988
24948
 
24989
- //#endregion
24990
- //#region src/provisioning/providers/cloudfront-oac-provider.ts
24949
+ // src/provisioning/providers/cloudfront-oac-provider.ts
24991
24950
  var CloudFrontOACProvider = class {
24992
24951
  cloudFrontClient;
24993
24952
  createClient;
@@ -25152,8 +25111,7 @@ var CloudFrontOACProvider = class {
25152
25111
  }
25153
25112
  };
25154
25113
 
25155
- //#endregion
25156
- //#region src/provisioning/providers/cloudfront-distribution-provider.ts
25114
+ // src/provisioning/providers/cloudfront-distribution-provider.ts
25157
25115
  function shownId(id) {
25158
25116
  return isPlainImportValue(id) ? id : VALUE_NOT_SHOWN;
25159
25117
  }
@@ -25831,8 +25789,7 @@ var CloudFrontDistributionProvider = class {
25831
25789
  }
25832
25790
  };
25833
25791
 
25834
- //#endregion
25835
- //#region src/provisioning/providers/agentcore-case-convert.ts
25792
+ // src/provisioning/providers/agentcore-case-convert.ts
25836
25793
  function pascalToCamelCaseKeys(value, preserveKeys) {
25837
25794
  if (value === null || value === void 0) return value;
25838
25795
  if (Array.isArray(value)) return value.map((item) => pascalToCamelCaseKeys(item, preserveKeys));
@@ -25860,8 +25817,7 @@ function camelToPascalCaseKeys(value, preserveKeys) {
25860
25817
  return value;
25861
25818
  }
25862
25819
 
25863
- //#endregion
25864
- //#region src/provisioning/providers/agentcore-runtime-provider.ts
25820
+ // src/provisioning/providers/agentcore-runtime-provider.ts
25865
25821
  const CFN_MAP_KEYS = /* @__PURE__ */ new Set(["Tags", "AdvertisedScopeMapping"]);
25866
25822
  const SDK_MAP_KEYS = /* @__PURE__ */ new Set(["tags", "advertisedScopeMapping"]);
25867
25823
  const RUNTIME_TAGS_WHAT = "a map of tag keys to scalar values or a list of tags with a non-empty string Key and a scalar Value";
@@ -26155,8 +26111,7 @@ var AgentCoreRuntimeProvider = class {
26155
26111
  }
26156
26112
  };
26157
26113
 
26158
- //#endregion
26159
- //#region src/provisioning/providers/agentcore-browser-provider.ts
26114
+ // src/provisioning/providers/agentcore-browser-provider.ts
26160
26115
  const DEFAULT_BROWSER_ID = "aws.browser.v1";
26161
26116
  var AgentCoreBrowserProvider = class {
26162
26117
  client;
@@ -26230,8 +26185,7 @@ var AgentCoreBrowserProvider = class {
26230
26185
  }
26231
26186
  };
26232
26187
 
26233
- //#endregion
26234
- //#region src/provisioning/providers/agentcore-code-interpreter-provider.ts
26188
+ // src/provisioning/providers/agentcore-code-interpreter-provider.ts
26235
26189
  const DEFAULT_CODE_INTERPRETER_ID = "aws.codeinterpreter.v1";
26236
26190
  var AgentCoreCodeInterpreterProvider = class {
26237
26191
  client;
@@ -26300,8 +26254,7 @@ var AgentCoreCodeInterpreterProvider = class {
26300
26254
  }
26301
26255
  };
26302
26256
 
26303
- //#endregion
26304
- //#region src/provisioning/providers/agentcore-evaluator-provider.ts
26257
+ // src/provisioning/providers/agentcore-evaluator-provider.ts
26305
26258
  const CFN_PRESERVE_KEYS = /* @__PURE__ */ new Set(["AdditionalModelRequestFields"]);
26306
26259
  const SDK_PRESERVE_KEYS = /* @__PURE__ */ new Set(["additionalModelRequestFields"]);
26307
26260
  function evaluatorIdFromArn(arnOrId) {
@@ -26495,8 +26448,7 @@ var AgentCoreEvaluatorProvider = class {
26495
26448
  }
26496
26449
  };
26497
26450
 
26498
- //#endregion
26499
- //#region src/provisioning/providers/stepfunctions-provider.ts
26451
+ // src/provisioning/providers/stepfunctions-provider.ts
26500
26452
  function stateMachineRevisionId(described) {
26501
26453
  return described.revisionId ?? "INITIAL";
26502
26454
  }
@@ -26904,8 +26856,7 @@ function wasMeaningfullyConfigured(value, discriminatorKey) {
26904
26856
  return value[discriminatorKey] !== void 0;
26905
26857
  }
26906
26858
 
26907
- //#endregion
26908
- //#region src/provisioning/providers/ecs-provider.ts
26859
+ // src/provisioning/providers/ecs-provider.ts
26909
26860
  const registerTaskDefinitionLatch = new AmbiguousCreateLatch("ecs:RegisterTaskDefinition");
26910
26861
  const taskDefinitionsRegisteredByThisProcess = new RecentIdSet();
26911
26862
  function familyOfTaskDefinitionArn(arn) {
@@ -28522,8 +28473,7 @@ var ECSProvider = class {
28522
28473
  }
28523
28474
  };
28524
28475
 
28525
- //#endregion
28526
- //#region src/provisioning/providers/elbv2-provider.ts
28476
+ // src/provisioning/providers/elbv2-provider.ts
28527
28477
  function loadBalancerNameFromArn(arn) {
28528
28478
  return nameFromElbv2Arn(arn, ":loadbalancer/", 3);
28529
28479
  }
@@ -30033,8 +29983,7 @@ var ELBv2Provider = class {
30033
29983
  }
30034
29984
  };
30035
29985
 
30036
- //#endregion
30037
- //#region src/provisioning/providers/rds-dbproxy-provider.ts
29986
+ // src/provisioning/providers/rds-dbproxy-provider.ts
30038
29987
  const POLL_INTERVAL_MS$1 = 5e3;
30039
29988
  const POLL_TIMEOUT_MS$1 = 18e5;
30040
29989
  const RETAINED_ON_REMOVAL = [
@@ -30413,8 +30362,7 @@ var RDSDBProxyProvider = class {
30413
30362
  }
30414
30363
  };
30415
30364
 
30416
- //#endregion
30417
- //#region src/provisioning/providers/rds-dbproxy-endpoint-provider.ts
30365
+ // src/provisioning/providers/rds-dbproxy-endpoint-provider.ts
30418
30366
  const POLL_INTERVAL_MS = 5e3;
30419
30367
  const POLL_TIMEOUT_MS = 18e5;
30420
30368
  var RDSDBProxyEndpointProvider = class {
@@ -30716,8 +30664,7 @@ var RDSDBProxyEndpointProvider = class {
30716
30664
  }
30717
30665
  };
30718
30666
 
30719
- //#endregion
30720
- //#region src/provisioning/providers/rds-dbproxy-targetgroup-provider.ts
30667
+ // src/provisioning/providers/rds-dbproxy-targetgroup-provider.ts
30721
30668
  const RDS_TARGET_IDENTIFIER = /^[A-Za-z][A-Za-z0-9-]{0,62}$/;
30722
30669
  function readTargetLists(values) {
30723
30670
  const lists = {
@@ -31231,8 +31178,7 @@ function withoutKey(bag, key) {
31231
31178
  return rest;
31232
31179
  }
31233
31180
 
31234
- //#endregion
31235
- //#region src/provisioning/providers/docdb-shared.ts
31181
+ // src/provisioning/providers/docdb-shared.ts
31236
31182
  function wrapDocDBFailure(logger, mask, error, build) {
31237
31183
  const m = maskerOrIdentity(mask);
31238
31184
  const failure = describeAwsFailure(error);
@@ -31315,8 +31261,7 @@ async function attachDocDBTags(client, logger, result, arn) {
31315
31261
  }
31316
31262
  }
31317
31263
 
31318
- //#endregion
31319
- //#region src/provisioning/providers/docdb-provider.ts
31264
+ // src/provisioning/providers/docdb-provider.ts
31320
31265
  function masterUserPasswordToSend(properties, previousProperties, context) {
31321
31266
  const desired = properties["MasterUserPassword"];
31322
31267
  if (desired === void 0 || desired === null) return void 0;
@@ -32307,8 +32252,7 @@ function securityGroupListChanged(sent, previous) {
32307
32252
  return [...sent].sort().join(" ") !== [...before].sort().join(" ");
32308
32253
  }
32309
32254
 
32310
- //#endregion
32311
- //#region src/provisioning/providers/docdb-subnet-group-provider.ts
32255
+ // src/provisioning/providers/docdb-subnet-group-provider.ts
32312
32256
  var DocDBSubnetGroupProvider = class {
32313
32257
  docdbClient;
32314
32258
  createClient;
@@ -32445,8 +32389,7 @@ var DocDBSubnetGroupProvider = class {
32445
32389
  }
32446
32390
  };
32447
32391
 
32448
- //#endregion
32449
- //#region src/provisioning/providers/route53-provider.ts
32392
+ // src/provisioning/providers/route53-provider.ts
32450
32393
  function isZoneDisabledForMutationError(error) {
32451
32394
  return error instanceof Error && error.message.includes("is marked disabled for mutation");
32452
32395
  }
@@ -33601,8 +33544,7 @@ var Route53Provider = class {
33601
33544
  }
33602
33545
  };
33603
33546
 
33604
- //#endregion
33605
- //#region src/provisioning/providers/wafv2-provider.ts
33547
+ // src/provisioning/providers/wafv2-provider.ts
33606
33548
  function sanitizeDescription(value) {
33607
33549
  if (value === void 0 || value === null) return void 0;
33608
33550
  if (typeof value === "string" && value.length === 0) return void 0;
@@ -34068,8 +34010,7 @@ var WAFv2WebACLProvider = class {
34068
34010
  }
34069
34011
  };
34070
34012
 
34071
- //#endregion
34072
- //#region src/provisioning/providers/cognito-provider.ts
34013
+ // src/provisioning/providers/cognito-provider.ts
34073
34014
  const USER_POOL_ECHO_MEMBERS = [
34074
34015
  "LambdaConfig",
34075
34016
  "UserPoolAddOns",
@@ -35216,8 +35157,7 @@ var CognitoUserPoolProvider = class {
35216
35157
  }
35217
35158
  };
35218
35159
 
35219
- //#endregion
35220
- //#region src/provisioning/providers/elasticache-provider.ts
35160
+ // src/provisioning/providers/elasticache-provider.ts
35221
35161
  const CACHE_DELETE_WAIT_MS = Math.max(6e5, slowCcOperationTimeoutMs("AWS::ElastiCache::CacheCluster", "DELETE"));
35222
35162
  const NODE_TYPE_MODIFY_WAIT_MS = Math.max(36e5, slowCcOperationTimeoutMs("AWS::ElastiCache::CacheCluster", "UPDATE"));
35223
35163
  const MODIFY_DROPPED_AFTER_MS = 12e4;
@@ -35863,8 +35803,7 @@ var ElastiCacheProvider = class {
35863
35803
  }
35864
35804
  };
35865
35805
 
35866
- //#endregion
35867
- //#region src/provisioning/providers/servicediscovery-provider.ts
35806
+ // src/provisioning/providers/servicediscovery-provider.ts
35868
35807
  const PUBLIC_DNS_NAMESPACE_DEFAULT_SOA_TTL = 60;
35869
35808
  const PRIVATE_DNS_NAMESPACE_DEFAULT_SOA_TTL = 15;
35870
35809
  const CREATE_SERVICE_NAMESPACE_LAG_MAX_RETRIES = 9;
@@ -36797,8 +36736,7 @@ var ServiceDiscoveryProvider = class ServiceDiscoveryProvider {
36797
36736
  }
36798
36737
  };
36799
36738
 
36800
- //#endregion
36801
- //#region src/provisioning/providers/appsync-provider.ts
36739
+ // src/provisioning/providers/appsync-provider.ts
36802
36740
  const createGraphqlApiLatch = new AmbiguousCreateLatch("CreateGraphqlApi");
36803
36741
  const graphqlApisCreatedByThisProcess = new RecentIdSet();
36804
36742
  const MAX_GRAPHQL_API_LIST_PAGES = 40;
@@ -38460,8 +38398,7 @@ var AppSyncProvider = class {
38460
38398
  }
38461
38399
  };
38462
38400
 
38463
- //#endregion
38464
- //#region src/provisioning/providers/glue-provider.ts
38401
+ // src/provisioning/providers/glue-provider.ts
38465
38402
  const GLUE_TABLE_ID_FORMAT = {
38466
38403
  label: "Glue Table",
38467
38404
  segments: ["databaseName", "tableName"]
@@ -40802,8 +40739,7 @@ var GlueTriggerProvider = class {
40802
40739
  }
40803
40740
  };
40804
40741
 
40805
- //#endregion
40806
- //#region src/provisioning/providers/kms-provider.ts
40742
+ // src/provisioning/providers/kms-provider.ts
40807
40743
  const createKeyLatch = new AmbiguousCreateLatch("CreateKey");
40808
40744
  const keysCreatedByThisProcess = new RecentIdSet();
40809
40745
  const pendingKeys = /* @__PURE__ */ new Map();
@@ -41434,8 +41370,7 @@ function templateBool(value) {
41434
41370
  return Boolean(value);
41435
41371
  }
41436
41372
 
41437
- //#endregion
41438
- //#region src/provisioning/providers/budgets-budget-provider.ts
41373
+ // src/provisioning/providers/budgets-budget-provider.ts
41439
41374
  const BUDGET_LIST_WHAT = {
41440
41375
  NotificationsWithSubscribers: "entries with a Notification (NotificationType, ComparisonOperator, numeric Threshold) and Subscribers (SubscriptionType, Address)",
41441
41376
  ResourceTags: "tags with a string Key"
@@ -42170,8 +42105,7 @@ var BudgetsBudgetProvider = class {
42170
42105
  }
42171
42106
  };
42172
42107
 
42173
- //#endregion
42174
- //#region src/provisioning/providers/kinesis-provider.ts
42108
+ // src/provisioning/providers/kinesis-provider.ts
42175
42109
  function isKmsEncryption(value) {
42176
42110
  if (!value) return false;
42177
42111
  return value["EncryptionType"] === "KMS";
@@ -42831,8 +42765,7 @@ var KinesisStreamProvider = class {
42831
42765
  }
42832
42766
  };
42833
42767
 
42834
- //#endregion
42835
- //#region src/provisioning/providers/kinesis-streamconsumer-provider.ts
42768
+ // src/provisioning/providers/kinesis-streamconsumer-provider.ts
42836
42769
  function consumerArnParts(consumerArn) {
42837
42770
  const at = consumerArn.lastIndexOf("/consumer/");
42838
42771
  if (at <= 0) return void 0;
@@ -43053,8 +42986,7 @@ function tagListToMap(tags) {
43053
42986
  return Object.fromEntries(tags.map((t) => [t.Key, t.Value]));
43054
42987
  }
43055
42988
 
43056
- //#endregion
43057
- //#region src/provisioning/providers/scheduler-schedule-provider.ts
42989
+ // src/provisioning/providers/scheduler-schedule-provider.ts
43058
42990
  const RECORDED_CREATION_DATE_KEY = "cdkd:CreationDate";
43059
42991
  function recordedCreationDate(attributes) {
43060
42992
  const value = attributes?.[RECORDED_CREATION_DATE_KEY];
@@ -43490,8 +43422,7 @@ var SchedulerScheduleProvider = class {
43490
43422
  }
43491
43423
  };
43492
43424
 
43493
- //#endregion
43494
- //#region src/provisioning/providers/pipes-provider.ts
43425
+ // src/provisioning/providers/pipes-provider.ts
43495
43426
  const PIPE_TYPE = "AWS::Pipes::Pipe";
43496
43427
  function isPipeName(id) {
43497
43428
  return /^[.\-_A-Za-z0-9]{1,64}$/.test(id);
@@ -44125,8 +44056,7 @@ var PipesPipeProvider = class {
44125
44056
  }
44126
44057
  };
44127
44058
 
44128
- //#endregion
44129
- //#region src/provisioning/providers/server-clock.ts
44059
+ // src/provisioning/providers/server-clock.ts
44130
44060
  const SERVER_CLOCK_MARGIN_MS = 5e3;
44131
44061
  const CLOCK_FALLBACK_MARGIN_MS = 3e5;
44132
44062
  const readings = /* @__PURE__ */ new WeakMap();
@@ -44163,8 +44093,7 @@ function earliestOwnCreationTime(firstSentLocalMs, reading) {
44163
44093
  return firstSentLocalMs + (reading.serverDateMs - reading.receivedAtMs) - SERVER_CLOCK_MARGIN_MS;
44164
44094
  }
44165
44095
 
44166
- //#endregion
44167
- //#region src/provisioning/providers/efs-provider.ts
44096
+ // src/provisioning/providers/efs-provider.ts
44168
44097
  function samePosixUser(requested, described) {
44169
44098
  if (requested == null || described == null) return requested == null && described == null;
44170
44099
  const gids = (user) => JSON.stringify([...new Set(user.SecondaryGids ?? [])].sort((a, b) => a - b));
@@ -45006,8 +44935,7 @@ var EFSProvider = class {
45006
44935
  }
45007
44936
  };
45008
44937
 
45009
- //#endregion
45010
- //#region src/provisioning/providers/fsx-filesystem-provider.ts
44938
+ // src/provisioning/providers/fsx-filesystem-provider.ts
45011
44939
  const DEFAULT_MAX_WAIT_MS$3 = 36e5;
45012
44940
  const DEFAULT_POLL_INTERVAL_MS$3 = 15e3;
45013
44941
  const FILE_SYSTEM_ID_PATTERN = /^fs-[0-9a-f]+$/;
@@ -46237,8 +46165,7 @@ var FSxFileSystemProvider = class {
46237
46165
  }
46238
46166
  };
46239
46167
 
46240
- //#endregion
46241
- //#region src/provisioning/emr-configuration.ts
46168
+ // src/provisioning/emr-configuration.ts
46242
46169
  function isRecord$1(value) {
46243
46170
  return typeof value === "object" && value !== null && !Array.isArray(value);
46244
46171
  }
@@ -46285,8 +46212,7 @@ function toSdkInstanceTypeConfigs(value) {
46285
46212
  });
46286
46213
  }
46287
46214
 
46288
- //#endregion
46289
- //#region src/provisioning/providers/emr-instance-group-config-provider.ts
46215
+ // src/provisioning/providers/emr-instance-group-config-provider.ts
46290
46216
  const DEFAULT_MAX_WAIT_MS$2 = 36e5;
46291
46217
  const DEFAULT_POLL_INTERVAL_MS$2 = 15e3;
46292
46218
  const READY_STATES$1 = /* @__PURE__ */ new Set(["RUNNING"]);
@@ -46660,8 +46586,7 @@ var EMRInstanceGroupConfigProvider = class {
46660
46586
  }
46661
46587
  };
46662
46588
 
46663
- //#endregion
46664
- //#region src/provisioning/providers/emr-instance-fleet-config-provider.ts
46589
+ // src/provisioning/providers/emr-instance-fleet-config-provider.ts
46665
46590
  const DEFAULT_MAX_WAIT_MS$1 = 36e5;
46666
46591
  const DEFAULT_POLL_INTERVAL_MS$1 = 15e3;
46667
46592
  const READY_STATES = /* @__PURE__ */ new Set(["RUNNING"]);
@@ -47009,8 +46934,7 @@ var EMRInstanceFleetConfigProvider = class {
47009
46934
  }
47010
46935
  };
47011
46936
 
47012
- //#endregion
47013
- //#region src/provisioning/providers/emr-cluster-provider.ts
46937
+ // src/provisioning/providers/emr-cluster-provider.ts
47014
46938
  const DEFAULT_MAX_WAIT_MS = 36e5;
47015
46939
  const DEFAULT_POLL_INTERVAL_MS = 15e3;
47016
46940
  const CREATE_READY_STATES = /* @__PURE__ */ new Set(["WAITING", "RUNNING"]);
@@ -48012,8 +47936,7 @@ var EMRClusterProvider = class {
48012
47936
  }
48013
47937
  };
48014
47938
 
48015
- //#endregion
48016
- //#region src/provisioning/providers/firehose-provider.ts
47939
+ // src/provisioning/providers/firehose-provider.ts
48017
47940
  const ENCRYPTION_KEY = "DeliveryStreamEncryptionConfigurationInput";
48018
47941
  function readEncryptionInput(value, emptyIsAbsent) {
48019
47942
  if (value === void 0 || value === null) return { kind: "absent" };
@@ -49125,8 +49048,7 @@ function mapHttpEndpointDescriptionToCfn(desc) {
49125
49048
  return out;
49126
49049
  }
49127
49050
 
49128
- //#endregion
49129
- //#region src/provisioning/providers/cloudtrail-provider.ts
49051
+ // src/provisioning/providers/cloudtrail-provider.ts
49130
49052
  const DEFAULT_EVENT_SELECTORS = Object.freeze([Object.freeze({
49131
49053
  ReadWriteType: "All",
49132
49054
  IncludeManagementEvents: true
@@ -49681,8 +49603,7 @@ var CloudTrailProvider = class {
49681
49603
  }
49682
49604
  };
49683
49605
 
49684
- //#endregion
49685
- //#region src/provisioning/providers/codebuild-provider.ts
49606
+ // src/provisioning/providers/codebuild-provider.ts
49686
49607
  const DEFAULT_PROJECT_VISIBILITY = "PRIVATE";
49687
49608
  const DEFAULT_ENCRYPTION_KEY = "alias/aws/s3";
49688
49609
  function readVisibility(properties, mask) {
@@ -50206,8 +50127,7 @@ var CodeBuildProvider = class {
50206
50127
  }
50207
50128
  };
50208
50129
 
50209
- //#endregion
50210
- //#region src/provisioning/providers/codecommit-repository-provider.ts
50130
+ // src/provisioning/providers/codecommit-repository-provider.ts
50211
50131
  function toSdkTagMap(tags) {
50212
50132
  if (!tags || tags.length === 0) return void 0;
50213
50133
  const out = {};
@@ -50742,8 +50662,7 @@ var CodeCommitRepositoryProvider = class {
50742
50662
  }
50743
50663
  };
50744
50664
 
50745
- //#endregion
50746
- //#region src/provisioning/providers/dlm-lifecycle-policy-provider.ts
50665
+ // src/provisioning/providers/dlm-lifecycle-policy-provider.ts
50747
50666
  const KEPT_ON_REMOVAL = [
50748
50667
  "Description",
50749
50668
  "ExecutionRoleArn",
@@ -51030,8 +50949,7 @@ var DLMLifecyclePolicyProvider = class {
51030
50949
  }
51031
50950
  };
51032
50951
 
51033
- //#endregion
51034
- //#region src/provisioning/providers/s3-vectors-provider.ts
50952
+ // src/provisioning/providers/s3-vectors-provider.ts
51035
50953
  var S3VectorsProvider = class {
51036
50954
  client;
51037
50955
  createClient;
@@ -51251,8 +51169,7 @@ var S3VectorsProvider = class {
51251
51169
  }
51252
51170
  };
51253
51171
 
51254
- //#endregion
51255
- //#region src/provisioning/providers/s3-directory-bucket-provider.ts
51172
+ // src/provisioning/providers/s3-directory-bucket-provider.ts
51256
51173
  function notEmptyRefusalMessage(bucketName, maskSecrets) {
51257
51174
  const mask = maskerOrIdentity(maskSecrets);
51258
51175
  const secretDerived = mask(bucketName) !== bucketName;
@@ -52077,8 +51994,7 @@ var S3DirectoryBucketProvider = class {
52077
51994
  }
52078
51995
  };
52079
51996
 
52080
- //#endregion
52081
- //#region src/provisioning/providers/s3-tables-provider.ts
51997
+ // src/provisioning/providers/s3-tables-provider.ts
52082
51998
  const S3_TABLES_NAMESPACE_ID_FORMAT = {
52083
51999
  label: "S3 Tables Namespace",
52084
52000
  segments: ["tableBucketARN", "namespace"]
@@ -53295,8 +53211,7 @@ var S3TablesProvider = class {
53295
53211
  }
53296
53212
  };
53297
53213
 
53298
- //#endregion
53299
- //#region src/provisioning/providers/ecr-provider.ts
53214
+ // src/provisioning/providers/ecr-provider.ts
53300
53215
  var ECRProvider = class {
53301
53216
  client;
53302
53217
  createClient;
@@ -53589,8 +53504,7 @@ var ECRProvider = class {
53589
53504
  }
53590
53505
  };
53591
53506
 
53592
- //#endregion
53593
- //#region src/provisioning/nested-stack-messages.ts
53507
+ // src/provisioning/nested-stack-messages.ts
53594
53508
  function nestedStackChildFailureMessage(childStackName, errorCount, alsoSkippedCount, alsoInterrupted, inspectCommand, holeNote = "") {
53595
53509
  const extra = [];
53596
53510
  if (alsoSkippedCount > 0) extra.push(`${alsoSkippedCount} resource(s) were also skipped`);
@@ -53598,8 +53512,7 @@ function nestedStackChildFailureMessage(childStackName, errorCount, alsoSkippedC
53598
53512
  return `Nested stack ${childStackName} failed to destroy: ${errorCount} resource(s) failed to delete` + (extra.length > 0 ? ` (${extra.join("; ")})` : "") + ". The child's state is PRESERVED and still lists them — inspect it, resolve the failure, and re-run the destroy. The parent's record of this nested stack is kept so the child stays reachable." + holeNote + `\nInspect it with: ${inspectCommand}`;
53599
53513
  }
53600
53514
 
53601
- //#endregion
53602
- //#region src/provisioning/providers/nested-stack-provider.ts
53515
+ // src/provisioning/providers/nested-stack-provider.ts
53603
53516
  function isAbsoluteCrossPlatform(p) {
53604
53517
  return isAbsoluteAssetPath(p);
53605
53518
  }
@@ -53968,8 +53881,7 @@ function inheritedPhysicalNameCopiesOf(bag) {
53968
53881
  return copies === void 0 || copies.size === 0 ? void 0 : new Set(copies);
53969
53882
  }
53970
53883
 
53971
- //#endregion
53972
- //#region src/provisioning/providers/wait-condition-handle-provider.ts
53884
+ // src/provisioning/providers/wait-condition-handle-provider.ts
53973
53885
  var WaitConditionHandleProvider = class {
53974
53886
  logger = getLogger().child("WaitConditionHandleProvider");
53975
53887
  handledProperties = /* @__PURE__ */ new Map([["AWS::CloudFormation::WaitConditionHandle", /* @__PURE__ */ new Set([])]]);
@@ -54006,8 +53918,7 @@ var WaitConditionHandleProvider = class {
54006
53918
  }
54007
53919
  };
54008
53920
 
54009
- //#endregion
54010
- //#region src/provisioning/providers/acm-certificate-provider.ts
53921
+ // src/provisioning/providers/acm-certificate-provider.ts
54011
53922
  function certificateInUseByName(error) {
54012
53923
  let current = error;
54013
53924
  for (let depth = 0; depth < 5 && current instanceof Error; depth++) {
@@ -54405,6 +54316,5 @@ var ACMCertificateProvider = class {
54405
54316
  }
54406
54317
  };
54407
54318
 
54408
- //#endregion
54409
54319
  export { ACMCertificateProvider, ASGProvider, AgentCoreBrowserProvider, AgentCoreCodeInterpreterProvider, AgentCoreEvaluatorProvider, AgentCoreRuntimeProvider, ApiGatewayProvider, ApiGatewayV2Provider, AppSyncProvider, BudgetsBudgetProvider, CloudFrontDistributionProvider, CloudFrontOACProvider, CloudFrontOAIProvider, CloudTrailProvider, CloudWatchAlarmProvider, CloudWatchAnomalyDetectorProvider, CodeBuildProvider, CodeCommitRepositoryProvider, CognitoUserPoolProvider, DLMLifecyclePolicyProvider, DocDBProvider, DocDBSubnetGroupProvider, DynamoDBGlobalTableProvider, DynamoDBTableProvider, EC2Provider, ECRProvider, ECSProvider, EFSProvider, ELBv2Provider, EMRClusterProvider, EMRInstanceFleetConfigProvider, EMRInstanceGroupConfigProvider, ElastiCacheProvider, EventBridgeBusProvider, EventBridgeRuleProvider, FSxFileSystemProvider, FirehoseProvider, GlueConnectionProvider, GlueCrawlerProvider, GlueJobProvider, GlueProvider, GlueSecurityConfigurationProvider, GlueTriggerProvider, GlueWorkflowProvider, IAMAccessKeyProvider, IAMInstanceProfileProvider, IAMManagedPolicyProvider, IAMPolicyProvider, IAMRoleProvider, IAMUserGroupProvider, KMSProvider, KinesisStreamConsumerProvider, KinesisStreamProvider, LambdaEventInvokeConfigProvider, LambdaEventSourceMappingProvider, LambdaFunctionProvider, LambdaLayerVersionProvider, LambdaMicrovmImageProvider, LambdaNetworkConnectorProvider, LambdaPermissionProvider, LambdaUrlProvider, LambdaWebFunctionEndpointProvider, LambdaWebFunctionRevisionProvider, LogsLogGroupProvider, NeptuneProvider, NestedStackProvider, PipesPipeProvider, RDSDBProxyEndpointProvider, RDSDBProxyProvider, RDSDBProxyTargetGroupProvider, RDSProvider, Route53Provider, S3BucketPolicyProvider, S3BucketProvider, S3DirectoryBucketProvider, S3TablesProvider, S3VectorsProvider, SNSSubscriptionProvider, SNSTopicPolicyProvider, SNSTopicProvider, SQSQueuePolicyProvider, SQSQueueProvider, SSMParameterProvider, SchedulerScheduleProvider, SecretsManagerSecretProvider, ServiceDiscoveryProvider, StepFunctionsProvider, WAFv2WebACLProvider, WaitConditionHandleProvider };
54410
- //# sourceMappingURL=provider-classes-B8kkAZqJ.js.map
54320
+ //# sourceMappingURL=provider-classes-ushrO6ri.js.map