@gradientedge/cdk-utils 10.7.0 → 11.0.0

package/dist/src/lib/aws/services/identity-access-management/main.js

@@ -1,609 +0,0 @@
-import { Stack } from 'aws-cdk-lib';
-import { CfnRole, Effect, ManagedPolicy, PolicyDocument, PolicyStatement, Role, ServicePrincipal, } from 'aws-cdk-lib/aws-iam';
-import { createCfnOutput } from '../../utils/index.js';
-/**
- * @classdesc Provides operations on AWS
- * - A new instance of this class is injected into {@link CommonConstruct} constructor.
- * - If a custom construct extends {@link CommonConstruct}, an instance is available within the context.
- * @example
- * import { CommonConstruct } from '@gradientedge/cdk-utils'
- *
- * class CustomConstruct extends CommonConstruct {
- *   constructor(parent: Construct, id: string, props: common.CommonStackProps) {
- *     super(parent, id, props)
- *     this.props = props
- *     this.iamManager.createRoleForEcsEvent('MyEcsRole', this, cluster, task)
- *   }
- * }
- * @see [CDK IAM Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam-readme.html}
- */
-export class IamManager {
-    /**
-     * @summary Method to create iam statement to read secrets
-     * @param scope scope in which this resource is defined
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForReadSecrets(scope, resourceArns) {
-        return new PolicyStatement({
-            actions: ['secretsmanager:GetSecretValue'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? [
-                `arn:aws:secretsmanager:${Stack.of(scope).region}:${Stack.of(scope).account}:secret:*`,
-            ],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to put events
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPutEvents(resourceArns) {
-        return new PolicyStatement({
-            actions: ['events:PutEvents'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to start step function execution
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForStartExecution(resourceArns) {
-        return new PolicyStatement({
-            actions: ['states:StartExecution'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to poll queue
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPollQueue(resourceArns) {
-        return new PolicyStatement({
-            actions: ['sqs:ReceiveMessage', 'sqs:DeleteMessage', 'sqs:GetQueueAttributes'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to invoke lambda function
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForInvokeLambda(resourceArns) {
-        return new PolicyStatement({
-            actions: ['lambda:InvokeFunction'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to read app config
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForReadAnyAppConfig(resourceArns) {
-        return new PolicyStatement({
-            actions: [
-                'ssm:GetDocument',
-                'ssm:ListDocuments',
-                'appconfig:ListApplications',
-                'appconfig:GetApplication',
-                'appconfig:ListEnvironments',
-                'appconfig:GetEnvironment',
-                'appconfig:ListConfigurationProfiles',
-                'appconfig:GetConfigurationProfile',
-                'appconfig:ListDeploymentStrategies',
-                'appconfig:GetDeploymentStrategy',
-                'appconfig:GetConfiguration',
-                'appconfig:ListDeployments',
-            ],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to access app config
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForAppConfigExecution(resourceArns) {
-        return new PolicyStatement({
-            actions: ['appconfig:GetLatestConfiguration', 'appconfig:StartConfigurationSession'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to put xray telemetry
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPutXrayTelemetry(resourceArns) {
-        return new PolicyStatement({
-            actions: ['xray:PutTraceSegments', 'xray:PutTelemetryRecords'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to decrypt kms
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForDecryptKms(resourceArns) {
-        return new PolicyStatement({
-            actions: ['kms:Decrypt'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to list s3 buckets
-     * @param scope scope in which this resource is defined
-     * @param bucket
-     */
-    statementForListBucket(scope, bucket) {
-        return new PolicyStatement({
-            actions: ['s3:ListBucket'],
-            effect: Effect.ALLOW,
-            resources: [bucket.bucketArn],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to list all s3 buckets
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForListAllMyBuckets(resourceArns) {
-        return new PolicyStatement({
-            actions: ['s3:ListAllMyBuckets'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to get s3 objects in buckets
-     * @param scope scope in which this resource is defined
-     * @param bucket
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForGetAnyS3Objects(scope, bucket, resourceArns) {
-        return new PolicyStatement({
-            actions: ['s3:GetObject', 's3:GetObjectAcl'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? [bucket.arnForObjects(`*`)],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to delete s3 objects in buckets
-     * @param scope scope in which this resource is defined
-     * @param bucket
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForDeleteAnyS3Objects(scope, bucket, resourceArns) {
-        return new PolicyStatement({
-            actions: ['s3:DeleteObject'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? [bucket.arnForObjects(`*`)],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to write s3 objects in buckets
-     * @param scope scope in which this resource is defined
-     * @param bucket
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPutAnyS3Objects(scope, bucket, resourceArns) {
-        return new PolicyStatement({
-            actions: ['s3:PutObject', 's3:PutObjectAcl'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? [bucket.arnForObjects(`*`)],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to pass iam role
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPassRole(resourceArns) {
-        return new PolicyStatement({
-            actions: ['iam:PassRole'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to invalidate cloudfront cache
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForCloudfrontInvalidation(resourceArns) {
-        return new PolicyStatement({
-            actions: ['cloudfront:GetInvalidation', 'cloudfront:CreateInvalidation'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to access efs
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForWriteEfs(resourceArns) {
-        return new PolicyStatement({
-            actions: ['elasticfilesystem:*'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to assume iam role
-     * @param scope scope in which this resource is defined
-     * @param servicePrincipals
-     */
-    statementForAssumeRole(scope, servicePrincipals) {
-        return new PolicyStatement({
-            actions: ['sts:AssumeRole'],
-            effect: Effect.ALLOW,
-            principals: servicePrincipals,
-        });
-    }
-    /**
-     * @summary Method to create iam statement to pass ecs role
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForEcsPassRole(resourceArns) {
-        return new PolicyStatement({
-            actions: ['iam:PassRole'],
-            conditions: { StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' } },
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to run ecs task
-     * @param scope scope in which this resource is defined
-     * @param cluster
-     * @param task
-     */
-    statementForRunEcsTask(scope, cluster, task) {
-        return new PolicyStatement({
-            actions: ['ecs:RunTask'],
-            conditions: { ArnLike: { 'ecs:cluster': cluster.clusterArn } },
-            effect: Effect.ALLOW,
-            resources: [task.taskDefinitionArn],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to create log stream
-     * @param scope scope in which this resource is defined
-     * @param logGroup
-     */
-    statementForCreateLogStream(scope, logGroup) {
-        return new PolicyStatement({
-            actions: ['logs:CreateLogStream'],
-            effect: Effect.ALLOW,
-            resources: [
-                `arn:aws:logs:${Stack.of(scope).region}:${Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${Stack.of(scope).account}_CloudTrail_eu-west-1*`,
-            ],
-            sid: 'AWSCloudTrailCreateLogStream2014110',
-        });
-    }
-    /**
-     * @summary Method to create iam statement to create any log stream
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForCreateAnyLogStream(resourceArns) {
-        return new PolicyStatement({
-            actions: ['logs:CreateLogStream'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to write log events
-     * @param scope scope in which this resource is defined
-     * @param logGroup
-     */
-    statementForPutLogEvent(scope, logGroup) {
-        return new PolicyStatement({
-            actions: ['logs:PutLogEvents'],
-            effect: Effect.ALLOW,
-            resources: [
-                `arn:aws:logs:${Stack.of(scope).region}:${Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${Stack.of(scope).account}_CloudTrail_eu-west-1*`,
-            ],
-            sid: 'AWSCloudTrailPutLogEvents20141101',
-        });
-    }
-    /**
-     * @summary Method to create iam statement to write any log events
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForPutAnyLogEvent(resourceArns) {
-        return new PolicyStatement({
-            actions: ['logs:PutLogEvents'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to read items from dynamodb table
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForReadTableItems(resourceArns) {
-        return new PolicyStatement({
-            actions: [
-                'dynamodb:PartiQLSelect',
-                'dynamodb:DescribeTable',
-                'dynamodb:ListTables',
-                'dynamodb:GetItem',
-                'dynamodb:Scan',
-                'dynamodb:Query',
-                'dynamodb:GetRecords',
-                'dynamodb:BatchGetItem',
-            ],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to write items from dynamodb table
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementForWriteTableItems(resourceArns) {
-        return new PolicyStatement({
-            actions: ['dynamodb:BatchWriteItem', 'dynamodb:DeleteItem', 'dynamodb:PutItem', 'dynamodb:UpdateItem'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam statement to poll from dynamodb table
-     * @param resourceArns list of ARNs to allow access to
-     */
-    statementFordynamoDbStream(resourceArns) {
-        return new PolicyStatement({
-            actions: ['dynamodb:DescribeStream', 'dynamodb:GetRecords', 'dynamodb:GetShardIterator', 'dynamodb:ListStreams'],
-            effect: Effect.ALLOW,
-            resources: resourceArns ?? ['*'],
-        });
-    }
-    /**
-     * @summary Method to create iam policy to invalidate cloudfront cache
-     * @param resourceArns list of ARNs to allow access to
-     */
-    createPolicyForCloudfrontInvalidation(resourceArns) {
-        return new PolicyDocument({
-            statements: [
-                this.statementForCreateAnyLogStream(),
-                this.statementForPutAnyLogEvent(),
-                this.statementForCloudfrontInvalidation(),
-                new PolicyStatement({
-                    actions: [
-                        'ecr:GetDownloadUrlForLayer',
-                        'ecr:BatchGetImage',
-                        'ecr:BatchCheckLayerAvailability',
-                        'ecr:GetAuthorizationToken',
-                    ],
-                    effect: Effect.ALLOW,
-                    resources: resourceArns ?? ['*'],
-                }),
-            ],
-        });
-    }
-    /**
-     * @summary Method to create iam policy for sqs
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param sqsQueue
-     * @param eventBridgeRule
-     * @param servicePrincipals
-     */
-    createPolicyForSqsEvent(id, scope, sqsQueue, eventBridgeRule, servicePrincipals) {
-        return new PolicyDocument({
-            statements: [
-                new PolicyStatement({
-                    actions: ['sqs:*'],
-                    conditions: {
-                        ArnEquals: {
-                            'aws:SourceArn': eventBridgeRule,
-                        },
-                    },
-                    effect: Effect.ALLOW,
-                    principals: servicePrincipals ?? [new ServicePrincipal('events.amazonaws.com')],
-                    resources: [sqsQueue.queueArn],
-                }),
-            ],
-        });
-    }
-    /**
-     * @summary Method to create iam role to invalidate cloudfront cache
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     */
-    createRoleForCloudfrontInvalidation(id, scope) {
-        return new Role(scope, `${id}-install-deps-project-role`, {
-            assumedBy: new ServicePrincipal('codebuild.amazonaws.com'),
-            inlinePolicies: {
-                codeBuildPolicy: this.createPolicyForCloudfrontInvalidation(),
-            },
-            roleName: scope.resourceNameFormatter.format(`${id}-cf-invalidation`, scope.props.resourceNameOptions?.iam),
-        });
-    }
-    /**
-     * @summary Method to create iam statement for cloud trail
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param logGroup
-     */
-    createRoleForCloudTrail(id, scope, logGroup) {
-        const policy = new PolicyDocument({
-            statements: [this.statementForCreateLogStream(scope, logGroup), this.statementForPutLogEvent(scope, logGroup)],
-        });
-        const role = new CfnRole(scope, `${id}`, {
-            assumeRolePolicyDocument: new PolicyDocument({
-                statements: [this.statementForAssumeRole(scope, [new ServicePrincipal('cloudtrail.amazonaws.com')])],
-            }),
-            policies: [
-                {
-                    policyDocument: policy,
-                    policyName: scope.resourceNameFormatter.format(`${id}-policy`),
-                },
-            ],
-            roleName: scope.resourceNameFormatter.format(`${id}-trail`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.attrArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for ecs event
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param cluster
-     * @param task
-     */
-    createRoleForEcsEvent(id, scope, cluster, task) {
-        const policy = new PolicyDocument({
-            statements: [this.statementForRunEcsTask(scope, cluster, task), this.statementForEcsPassRole()],
-        });
-        const role = new Role(scope, `${id}`, {
-            assumedBy: new ServicePrincipal('events.amazonaws.com'),
-            description: `Role for ${id} ECS Task execution from EventBridge`,
-            inlinePolicies: { policy },
-            roleName: scope.resourceNameFormatter.format(`${id}-ecs-event`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for ecs execution
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param policy
-     */
-    createRoleForEcsExecution(id, scope, policy) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: new ServicePrincipal('ecs-tasks.amazonaws.com'),
-            description: `Role for ${id} ECS Task execution`,
-            inlinePolicies: { policy },
-            managedPolicies: [
-                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AmazonECSTaskExecutionRolePolicy`, 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
-            ],
-            roleName: scope.resourceNameFormatter.format(`${id}-ecs-exec`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for lambda execution
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param policy
-     * @param servicePrincipal
-     */
-    createRoleForLambda(id, scope, policy, servicePrincipal) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new ServicePrincipal('lambda.amazonaws.com'),
-            description: `Role for ${id} Lambda function`,
-            inlinePolicies: { policy },
-            managedPolicies: [
-                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
-            ],
-            roleName: scope.resourceNameFormatter.format(`${id}-lambda`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for appconfig secrets manager integration
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param policy
-     * @param servicePrincipal
-     */
-    createRoleForAppConfigSecrets(id, scope, policy, servicePrincipal) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new ServicePrincipal('appconfig.amazonaws.com'),
-            description: `Role for ${id} AppConfig Secrets`,
-            inlinePolicies: { policy },
-            roleName: scope.resourceNameFormatter.format(`${id}-config`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for step function execution
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param policy
-     * @param servicePrincipal
-     */
-    createRoleForStepFunction(id, scope, policy, servicePrincipal) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new ServicePrincipal('states.amazonaws.com'),
-            description: `Role for ${id} Lambda function`,
-            inlinePolicies: { policy },
-            managedPolicies: [
-                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
-            ],
-            roleName: scope.resourceNameFormatter.format(`${id}-sfn-exec`, scope.props.resourceNameOptions?.iam),
-        });
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for sqs to step function pipe
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param queueArn the arn of the sqs queue
-     * @param stepFunctionArn the arn of the step function
-     */
-    createRoleForSqsToSfnPipe(id, scope, queueArn, stepFunctionArn) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
-            description: `Role for ${id} Pipe`,
-            roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
-        });
-        role.addToPolicy(this.statementForPollQueue([queueArn]));
-        role.addToPolicy(this.statementForStartExecution([stepFunctionArn]));
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for sqs to lambda pipe
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param queueArn the arn of the sqs queue
-     * @param lambdaArn the arn of the lambda function
-     */
-    createRoleForSqsToLambdaPipe(id, scope, queueArn, lambdaArn) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
-            description: `Role for ${id} Pipe`,
-            roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
-        });
-        role.addToPolicy(this.statementForPollQueue([queueArn]));
-        role.addToPolicy(this.statementForInvokeLambda([lambdaArn]));
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-    /**
-     * @summary Method to create iam statement for dynamoDb to lambda function pipe
-     * @param id scoped id of the resource
-     * @param scope scope in which this resource is defined
-     * @param dynamoDbStreamArn the arn of the dynamoDb Stream queue
-     * @param lambdaFunctionArn the arn of the lambda function
-     */
-    createRoleForDynamoDbToLambdaPipe(id, scope, dynamoDbStreamArn, lambdaFunctionArn) {
-        const role = new Role(scope, `${id}`, {
-            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
-            description: `Role for ${id} Pipe`,
-            roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
-        });
-        role.addToPolicy(this.statementFordynamoDbStream([dynamoDbStreamArn]));
-        role.addToPolicy(this.statementForInvokeLambda([lambdaFunctionArn]));
-        createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        createCfnOutput(`${id}Name`, scope, role.roleName);
-        return role;
-    }
-}

package/dist/src/lib/aws/services/index.d.ts

@@ -1,28 +0,0 @@
-export * from './api-gateway/index.js';
-export * from './appconfig/index.js';
-export * from './certificate-manager/index.js';
-export * from './cloudfront/index.js';
-export * from './cloudtrail/index.js';
-export * from './cloudwatch/index.js';
-export * from './codebuild/index.js';
-export * from './constants.js';
-export * from './dynamodb/index.js';
-export * from './elastic-container-registry/index.js';
-export * from './elastic-container-service/index.js';
-export * from './elastic-file-system/index.js';
-export * from './elastic-kubernetes-service/index.js';
-export * from './elasticache/index.js';
-export * from './eventbridge/index.js';
-export * from './evidently/index.js';
-export * from './identity-access-management/index.js';
-export * from './key-management-service/index.js';
-export * from './lambda/index.js';
-export * from './route53/index.js';
-export * from './secrets-manager/index.js';
-export * from './simple-notification-service/index.js';
-export * from './simple-queue-service/index.js';
-export * from './simple-storage-service/index.js';
-export * from './step-function/index.js';
-export * from './systems-manager/index.js';
-export * from './virtual-private-cloud/index.js';
-export * from './web-application-firewall/index.js';

package/dist/src/lib/aws/services/index.js

@@ -1,28 +0,0 @@
-export * from './api-gateway/index.js';
-export * from './appconfig/index.js';
-export * from './certificate-manager/index.js';
-export * from './cloudfront/index.js';
-export * from './cloudtrail/index.js';
-export * from './cloudwatch/index.js';
-export * from './codebuild/index.js';
-export * from './constants.js';
-export * from './dynamodb/index.js';
-export * from './elastic-container-registry/index.js';
-export * from './elastic-container-service/index.js';
-export * from './elastic-file-system/index.js';
-export * from './elastic-kubernetes-service/index.js';
-export * from './elasticache/index.js';
-export * from './eventbridge/index.js';
-export * from './evidently/index.js';
-export * from './identity-access-management/index.js';
-export * from './key-management-service/index.js';
-export * from './lambda/index.js';
-export * from './route53/index.js';
-export * from './secrets-manager/index.js';
-export * from './simple-notification-service/index.js';
-export * from './simple-queue-service/index.js';
-export * from './simple-storage-service/index.js';
-export * from './step-function/index.js';
-export * from './systems-manager/index.js';
-export * from './virtual-private-cloud/index.js';
-export * from './web-application-firewall/index.js';

package/dist/src/lib/aws/services/key-management-service/index.d.ts

@@ -1,2 +0,0 @@
-export * from './main.js';
-export * from './types.js';

package/dist/src/lib/aws/services/key-management-service/index.js

@@ -1,2 +0,0 @@
-export * from './main.js';
-export * from './types.js';