@gradientedge/cdk-utils 4.4.5 → 4.4.9

package/dist/src/lib/manager/aws/event-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-manager.js","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/event-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AACA,+DAAgD;AAChD,yDAA0C;AAC1C,+DAAgD;AAGhD,mDAAoC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,YAAY;IACvB;;;;;OAKG;IACI,cAAc,CAAC,EAAU,EAAE,KAA6B,EAAE,KAA0B;QACzF,IAAI,CAAC,KAAK;YAAE,MAAM,0BAA0B,CAAA;QAE5C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SAC3D,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;QACzE,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEvE,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;;;;OAOG;IACI,UAAU,CACf,EAAU,EACV,KAA6B,EAC7B,KAA2B,EAC3B,QAA2B,EAC3B,OAA8B;QAE9B,IAAI,CAAC,KAAK;YAAE,MAAM,2BAA2B,CAAA;QAE7C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAC3C,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAClD,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAA;QAEF,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;YACjC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBACvB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACxB,CAAC,CAAC,CAAA;SACH;QAED,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE7D,OAAO,IAAI,CAAA;IACb,CAAC;IACD;;;;;;;;;OASG;IACI,gBAAgB,CACrB,EAAU,EACV,KAA6B,EAC7B,KAAsB,EACtB,cAA+B,EAC/B,YAAqB,EACrB,YAAkB,EAClB,kBAA2B;QAE3B,IAAI,CAAC,KAAK;YAAE,MAAM,2BAA2B,CAAA;QAE7C,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,WAAW,EAAE,qDAAqD;YAClE,YAAY,EAAE,YAAY;YAC1B,YAAY,EAAE,YAAY;YAC1B,kBAAkB,EAAE,kBAAkB;YACtC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;SACjF,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE;YACvD,MAAM,EAAE,uBAAuB;YAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;YACzC,SAAS,EAAE,sBAAsB;YACjC,SAAS,EAAE,SAAS,CAAC,OAAO;SAC7B,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QAChE,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAE9D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACI,qBAAqB,CAC1B,EAAU,EACV,KAA6B,EAC7B,KAAsB,EACtB,OAAqB,EACrB,IAAyB,EACzB,SAAmB,EACnB,IAA4B,EAC5B,YAAkB;QAElB,IAAI,CAAC,KAAK;YAAE,MAAM,2BAA2B,CAAA;QAE7C,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,WAAW,EAAE,4EAA4E;YACzF,YAAY,EAAE,YAAY;YAC1B,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,OAAO,CAAC,UAAU;oBACvB,EAAE,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;oBAChC,aAAa,EAAE;wBACb,UAAU,EAAE,SAAS;wBACrB,oBAAoB,EAAE;4BACpB,mBAAmB,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;yBACvE;wBACD,SAAS,EAAE,CAAC;wBACZ,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;qBAC1C;oBACD,OAAO,EAAE,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;iBAChE;aACF;SACF,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QAChE,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAE9D,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AArJD,oCAqJC"}

package/dist/src/lib/manager/aws/iam-manager.d.ts

@@ -0,0 +1,155 @@
+import * as cdk from 'aws-cdk-lib';
+import * as ecs from 'aws-cdk-lib/aws-ecs';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as logs from 'aws-cdk-lib/aws-logs';
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as common from '../../common';
+/**
+ * @stability stable
+ * @category cdk-utils.iam-manager
+ * @subcategory Construct
+ * @classdesc Provides operations on AWS IAM.
+ * - A new instance of this class is injected into {@link common.CommonConstruct} constructor.
+ * - If a custom construct extends {@link common.CommonConstruct}, an instance is available within the context.
+ * @example
+ * import * as common from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends common.common.CommonConstruct {
+ *   constructor(parent: cdk.Construct, id: string, props: common.CommonStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.iamManager.createRoleForEcsEvent('MyEcsRole', this, cluster, task)
+ *   }
+ * }
+ *
+ * @see [CDK IAM Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam-readme.html}
+ */
+export declare class IamManager {
+    /**
+     * @summary Method to create iam statement to read secrets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    statementForReadSecrets(scope: common.CommonConstruct): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to put events
+     */
+    statementForPutEvents(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to read app config
+     */
+    statementForReadAnyAppConfig(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to list s3 buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForListBucket(scope: common.CommonConstruct, bucket: s3.IBucket): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to list all s3 buckets
+     */
+    statementForListAllMyBuckets(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to get s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForGetAnyS3Objects(scope: common.CommonConstruct, bucket: s3.IBucket): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to delete s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForDeleteAnyS3Objects(scope: common.CommonConstruct, bucket: s3.IBucket): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to write s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForPutAnyS3Objects(scope: common.CommonConstruct, bucket: s3.IBucket): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to pass iam role
+     */
+    statementForPassRole(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to invalidate cloudfront cache
+     */
+    statementForCloudfrontInvalidation(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam policy to invalidate cloudfront cache
+     */
+    policyForCloudfrontInvalidation(): cdk.aws_iam.PolicyDocument;
+    /**
+     * @summary Method to create iam role to invalidate cloudfront cache
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    roleForCloudfrontInvalidation(id: string, scope: common.CommonConstruct): cdk.aws_iam.Role;
+    /**
+     * @summary Method to create iam statement to assume iam role
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.ServicePrincipal[]} servicePrincipals
+     */
+    statementForAssumeRole(scope: common.CommonConstruct, servicePrincipals: iam.ServicePrincipal[]): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to pass ecs role
+     */
+    statementForEcsPassRole(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to run ecs task
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    statementForRunEcsTask(scope: common.CommonConstruct, cluster: ecs.ICluster, task: ecs.ITaskDefinition): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to create log stream
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForCreateLogStream(scope: common.CommonConstruct, logGroup: logs.CfnLogGroup): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to create any log stream
+     */
+    statementForCreateAnyLogStream(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to write log events
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForPutLogEvent(scope: common.CommonConstruct, logGroup: logs.CfnLogGroup): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to write any log events
+     */
+    statementForPutAnyLogEvent(): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement for cloud trail
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    createRoleForCloudTrail(id: string, scope: common.CommonConstruct, logGroup: logs.CfnLogGroup): cdk.aws_iam.CfnRole;
+    /**
+     * @summary Method to create iam statement for ecs event
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    createRoleForEcsEvent(id: string, scope: common.CommonConstruct, cluster: ecs.ICluster, task: ecs.ITaskDefinition): cdk.aws_iam.Role;
+    /**
+     * @summary Method to create iam statement for ecs execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     */
+    createRoleForEcsExecution(id: string, scope: common.CommonConstruct, policy: iam.PolicyDocument): cdk.aws_iam.Role;
+    /**
+     * @summary Method to create iam statement for lambda execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     * @param {iam.ServicePrincipal} servicePrinicpal
+     */
+    createRoleForLambda(id: string, scope: common.CommonConstruct, policy: iam.PolicyDocument, servicePrinicpal?: iam.ServicePrincipal): cdk.aws_iam.Role;
+}
+//# sourceMappingURL=iam-manager.d.ts.map

package/dist/src/lib/manager/aws/iam-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-manager.d.ts","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/iam-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAA;AAC1C,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAA;AAC5C,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAGtC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,UAAU;IACrB;;;OAGG;IACI,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe;IAQ5D;;OAEG;IACI,qBAAqB;IAQ5B;;OAEG;IACI,4BAA4B;IAqBnC;;;;OAIG;IACI,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO;IAQ/E;;OAEG;IACI,4BAA4B;IAQnC;;;;OAIG;IACI,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO;IAQpF;;;;OAIG;IACI,8BAA8B,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO;IAQvF;;;;OAIG;IACI,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO;IAQpF;;OAEG;IACI,oBAAoB;IAQ3B;;OAEG;IACI,kCAAkC;IAQzC;;OAEG;IACI,+BAA+B;IAoBtC;;;;OAIG;IACI,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe;IAS9E;;;;OAIG;IACI,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,GAAG,CAAC,gBAAgB,EAAE;IAQtG;;OAEG;IACI,uBAAuB;IAS9B;;;;;OAKG;IACI,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,eAAe;IAS7G;;;;OAIG;IACI,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW;IAa5F;;OAEG;IACI,8BAA8B;IAQrC;;;;OAIG;IACI,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW;IAaxF;;OAEG;IACI,0BAA0B;IAQjC;;;;;OAKG;IACI,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW;IAuBpG;;;;;;OAMG;IACI,qBAAqB,CAC1B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,eAAe,EAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ,EACrB,IAAI,EAAE,GAAG,CAAC,eAAe;IAmB3B;;;;;OAKG;IACI,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc;IAqBtG;;;;;;OAMG;IACI,mBAAmB,CACxB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,eAAe,EAC7B,MAAM,EAAE,GAAG,CAAC,cAAc,EAC1B,gBAAgB,CAAC,EAAE,GAAG,CAAC,gBAAgB;CAqB1C"}

package/dist/src/lib/manager/aws/iam-manager.js

@@ -0,0 +1,381 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamManager = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const iam = __importStar(require("aws-cdk-lib/aws-iam"));
+const utils = __importStar(require("../../utils"));
+/**
+ * @stability stable
+ * @category cdk-utils.iam-manager
+ * @subcategory Construct
+ * @classdesc Provides operations on AWS IAM.
+ * - A new instance of this class is injected into {@link common.CommonConstruct} constructor.
+ * - If a custom construct extends {@link common.CommonConstruct}, an instance is available within the context.
+ * @example
+ * import * as common from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends common.common.CommonConstruct {
+ *   constructor(parent: cdk.Construct, id: string, props: common.CommonStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.iamManager.createRoleForEcsEvent('MyEcsRole', this, cluster, task)
+ *   }
+ * }
+ *
+ * @see [CDK IAM Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam-readme.html}
+ */
+class IamManager {
+    /**
+     * @summary Method to create iam statement to read secrets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    statementForReadSecrets(scope) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['secretsmanager:GetSecretValue'],
+            resources: [`arn:aws:secretsmanager:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:secret:*`],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to put events
+     */
+    statementForPutEvents() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['events:PutEvents'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to read app config
+     */
+    statementForReadAnyAppConfig() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: [
+                'ssm:GetDocument',
+                'ssm:ListDocuments',
+                'appconfig:ListApplications',
+                'appconfig:GetApplication',
+                'appconfig:ListEnvironments',
+                'appconfig:GetEnvironment',
+                'appconfig:ListConfigurationProfiles',
+                'appconfig:GetConfigurationProfile',
+                'appconfig:ListDeploymentStrategies',
+                'appconfig:GetDeploymentStrategy',
+                'appconfig:GetConfiguration',
+                'appconfig:ListDeployments',
+            ],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to list s3 buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForListBucket(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:ListBucket'],
+            resources: [bucket.bucketArn],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to list all s3 buckets
+     */
+    statementForListAllMyBuckets() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:ListAllMyBuckets'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to get s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForGetAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:GetObject', 's3:GetObjectAcl'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to delete s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForDeleteAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:DeleteObject'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForPutAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:PutObject', 's3:PutObjectAcl'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to pass iam role
+     */
+    statementForPassRole() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['iam:PassRole'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to invalidate cloudfront cache
+     */
+    statementForCloudfrontInvalidation() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['cloudfront:GetInvalidation', 'cloudfront:CreateInvalidation'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam policy to invalidate cloudfront cache
+     */
+    policyForCloudfrontInvalidation() {
+        return new iam.PolicyDocument({
+            statements: [
+                this.statementForCreateAnyLogStream(),
+                this.statementForPutAnyLogEvent(),
+                this.statementForCloudfrontInvalidation(),
+                new iam.PolicyStatement({
+                    effect: iam.Effect.ALLOW,
+                    actions: [
+                        'ecr:GetDownloadUrlForLayer',
+                        'ecr:BatchGetImage',
+                        'ecr:BatchCheckLayerAvailability',
+                        'ecr:GetAuthorizationToken',
+                    ],
+                    resources: ['*'],
+                }),
+            ],
+        });
+    }
+    /**
+     * @summary Method to create iam role to invalidate cloudfront cache
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    roleForCloudfrontInvalidation(id, scope) {
+        return new iam.Role(scope, `${id}-install-deps-project-role`, {
+            assumedBy: new iam.ServicePrincipal('codebuild.amazonaws.com'),
+            inlinePolicies: {
+                codeBuildPolicy: this.policyForCloudfrontInvalidation(),
+            },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to assume iam role
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.ServicePrincipal[]} servicePrincipals
+     */
+    statementForAssumeRole(scope, servicePrincipals) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['sts:AssumeRole'],
+            principals: servicePrincipals,
+        });
+    }
+    /**
+     * @summary Method to create iam statement to pass ecs role
+     */
+    statementForEcsPassRole() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['iam:PassRole'],
+            resources: ['*'],
+            conditions: { StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' } },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to run ecs task
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    statementForRunEcsTask(scope, cluster, task) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['ecs:RunTask'],
+            resources: [task.taskDefinitionArn],
+            conditions: { ArnLike: { 'ecs:cluster': cluster.clusterArn } },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to create log stream
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForCreateLogStream(scope, logGroup) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:CreateLogStream'],
+            resources: [
+                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+            ],
+            sid: 'AWSCloudTrailCreateLogStream2014110',
+        });
+    }
+    /**
+     * @summary Method to create iam statement to create any log stream
+     */
+    statementForCreateAnyLogStream() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:CreateLogStream'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write log events
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForPutLogEvent(scope, logGroup) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:PutLogEvents'],
+            resources: [
+                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+            ],
+            sid: 'AWSCloudTrailPutLogEvents20141101',
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write any log events
+     */
+    statementForPutAnyLogEvent() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:PutLogEvents'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement for cloud trail
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    createRoleForCloudTrail(id, scope, logGroup) {
+        const policy = new iam.PolicyDocument({
+            statements: [this.statementForCreateLogStream(scope, logGroup), this.statementForPutLogEvent(scope, logGroup)],
+        });
+        const role = new iam.CfnRole(scope, `${id}`, {
+            assumeRolePolicyDocument: new iam.PolicyDocument({
+                statements: [this.statementForAssumeRole(scope, [new iam.ServicePrincipal('cloudtrail.amazonaws.com')])],
+            }),
+            policies: [
+                {
+                    policyName: `${id}-policy-${scope.props.stage}`,
+                    policyDocument: policy,
+                },
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.attrArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for ecs event
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    createRoleForEcsEvent(id, scope, cluster, task) {
+        const policy = new iam.PolicyDocument({
+            statements: [this.statementForRunEcsTask(scope, cluster, task), this.statementForEcsPassRole()],
+        });
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: new iam.ServicePrincipal('events.amazonaws.com'),
+            description: `Role for ${id} ECS Task execution from EventBridge`,
+            inlinePolicies: { policy },
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for ecs execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     */
+    createRoleForEcsExecution(id, scope, policy) {
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: new iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
+            description: `Role for ${id} ECS Task execution`,
+            inlinePolicies: { policy },
+            managedPolicies: [
+                iam.ManagedPolicy.fromManagedPolicyArn(scope, 'AmazonECSTaskExecutionRolePolicy', 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for lambda execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     * @param {iam.ServicePrincipal} servicePrinicpal
+     */
+    createRoleForLambda(id, scope, policy, servicePrinicpal) {
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: servicePrinicpal ?? new iam.ServicePrincipal('lambda.amazonaws.com'),
+            description: `Role for ${id} Lambda function`,
+            inlinePolicies: { policy },
+            managedPolicies: [
+                iam.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+}
+exports.IamManager = IamManager;
+//# sourceMappingURL=iam-manager.js.map

package/dist/src/lib/manager/aws/iam-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-manager.js","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/iam-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,yDAA0C;AAI1C,mDAAoC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,UAAU;IACrB;;;OAGG;IACI,uBAAuB,CAAC,KAA6B;QAC1D,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,+BAA+B,CAAC;YAC1C,SAAS,EAAE,CAAC,0BAA0B,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,WAAW,CAAC;SAC5G,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,qBAAqB;QAC1B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,4BAA4B;QACjC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE;gBACP,iBAAiB;gBACjB,mBAAmB;gBACnB,4BAA4B;gBAC5B,0BAA0B;gBAC1B,4BAA4B;gBAC5B,0BAA0B;gBAC1B,qCAAqC;gBACrC,mCAAmC;gBACnC,oCAAoC;gBACpC,iCAAiC;gBACjC,4BAA4B;gBAC5B,2BAA2B;aAC5B;YACD,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAAC,KAA6B,EAAE,MAAkB;QAC7E,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,eAAe,CAAC;YAC1B,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,4BAA4B;QACjC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,qBAAqB,CAAC;YAChC,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,MAAkB;QAClF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,8BAA8B,CAAC,KAA6B,EAAE,MAAkB;QACrF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,MAAkB;QAClF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,oBAAoB;QACzB,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,kCAAkC;QACvC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,4BAA4B,EAAE,+BAA+B,CAAC;YACxE,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,+BAA+B;QACpC,OAAO,IAAI,GAAG,CAAC,cAAc,CAAC;YAC5B,UAAU,EAAE;gBACV,IAAI,CAAC,8BAA8B,EAAE;gBACrC,IAAI,CAAC,0BAA0B,EAAE;gBACjC,IAAI,CAAC,kCAAkC,EAAE;gBACzC,IAAI,GAAG,CAAC,eAAe,CAAC;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;oBACxB,OAAO,EAAE;wBACP,4BAA4B;wBAC5B,mBAAmB;wBACnB,iCAAiC;wBACjC,2BAA2B;qBAC5B;oBACD,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC;aACH;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,6BAA6B,CAAC,EAAU,EAAE,KAA6B;QAC5E,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,4BAA4B,EAAE;YAC5D,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;YAC9D,cAAc,EAAE;gBACd,eAAe,EAAE,IAAI,CAAC,+BAA+B,EAAE;aACxD;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAAC,KAA6B,EAAE,iBAAyC;QACpG,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,UAAU,EAAE,iBAAiB;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC5B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,EAAE;SACjF,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACI,sBAAsB,CAAC,KAA6B,EAAE,OAAqB,EAAE,IAAyB;QAC3G,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACnC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,QAA0B;QAC1F,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,sBAAsB,CAAC;YACjC,SAAS,EAAE;gBACT,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,cACvE,QAAQ,CAAC,YACX,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,wBAAwB;aACnE;YACD,GAAG,EAAE,qCAAqC;SAC3C,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,8BAA8B;QACnC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,sBAAsB,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,uBAAuB,CAAC,KAA6B,EAAE,QAA0B;QACtF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE;gBACT,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,cACvE,QAAQ,CAAC,YACX,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,wBAAwB;aACnE;YACD,GAAG,EAAE,mCAAmC;SACzC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,0BAA0B;QAC/B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACI,uBAAuB,CAAC,EAAU,EAAE,KAA6B,EAAE,QAA0B;QAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;SAC/G,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAC3C,wBAAwB,EAAE,IAAI,GAAG,CAAC,cAAc,CAAC;gBAC/C,UAAU,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;aACzG,CAAC;YACF,QAAQ,EAAE;gBACR;oBACE,UAAU,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;oBAC/C,cAAc,EAAE,MAAM;iBACvB;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACI,qBAAqB,CAC1B,EAAU,EACV,KAA6B,EAC7B,OAAqB,EACrB,IAAyB;QAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;SAChG,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;YAC3D,WAAW,EAAE,YAAY,EAAE,sCAAsC;YACjE,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;OAKG;IACI,yBAAyB,CAAC,EAAU,EAAE,KAA6B,EAAE,MAA0B;QACpG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;YAC9D,WAAW,EAAE,YAAY,EAAE,qBAAqB;YAChD,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,eAAe,EAAE;gBACf,GAAG,CAAC,aAAa,CAAC,oBAAoB,CACpC,KAAK,EACL,kCAAkC,EAClC,uEAAuE,CACxE;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACI,mBAAmB,CACxB,EAAU,EACV,KAA6B,EAC7B,MAA0B,EAC1B,gBAAuC;QAEvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,gBAAgB,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;YAC/E,WAAW,EAAE,YAAY,EAAE,kBAAkB;YAC7C,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,eAAe,EAAE;gBACf,GAAG,CAAC,aAAa,CAAC,oBAAoB,CACpC,KAAK,EACL,GAAG,EAAE,8BAA8B,EACnC,kEAAkE,CACnE;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAlYD,gCAkYC"}

package/dist/src/lib/manager/aws/index.d.ts

@@ -0,0 +1,23 @@
+export * from './acm-manager';
+export * from './api-manager';
+export * from './app-config-manager';
+export * from './cloudfront-manager';
+export * from './cloudtrail-manager';
+export * from './cloudwatch-manager';
+export * from './codebuild-manager';
+export * from './dynamodb-manager';
+export * from './ecr-manager';
+export * from './ecs-manager';
+export * from './eks-manager';
+export * from './event-manager';
+export * from './iam-manager';
+export * from './lambda-manager';
+export * from './log-manager';
+export * from './route53-manager';
+export * from './s3-manager';
+export * from './secrets-manager';
+export * from './sns-manager';
+export * from './ssm-manager';
+export * from './vpc-manager';
+export * from './waf-manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/lib/manager/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/dist/src/lib/manager/aws/index.js

@@ -0,0 +1,35 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./acm-manager"), exports);
+__exportStar(require("./api-manager"), exports);
+__exportStar(require("./app-config-manager"), exports);
+__exportStar(require("./cloudfront-manager"), exports);
+__exportStar(require("./cloudtrail-manager"), exports);
+__exportStar(require("./cloudwatch-manager"), exports);
+__exportStar(require("./codebuild-manager"), exports);
+__exportStar(require("./dynamodb-manager"), exports);
+__exportStar(require("./ecr-manager"), exports);
+__exportStar(require("./ecs-manager"), exports);
+__exportStar(require("./eks-manager"), exports);
+__exportStar(require("./event-manager"), exports);
+__exportStar(require("./iam-manager"), exports);
+__exportStar(require("./lambda-manager"), exports);
+__exportStar(require("./log-manager"), exports);
+__exportStar(require("./route53-manager"), exports);
+__exportStar(require("./s3-manager"), exports);
+__exportStar(require("./secrets-manager"), exports);
+__exportStar(require("./sns-manager"), exports);
+__exportStar(require("./ssm-manager"), exports);
+__exportStar(require("./vpc-manager"), exports);
+__exportStar(require("./waf-manager"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/lib/manager/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAA6B;AAC7B,gDAA6B;AAC7B,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,sDAAmC;AACnC,qDAAkC;AAClC,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B;AAC7B,kDAA+B;AAC/B,gDAA6B;AAC7B,mDAAgC;AAChC,gDAA6B;AAC7B,oDAAiC;AACjC,+CAA4B;AAC5B,oDAAiC;AACjC,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B"}