@gradientedge/cdk-utils 4.4.6 → 4.5.0

package/dist/src/lib/manager/aws/iam-manager.js

@@ -0,0 +1,381 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamManager = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const iam = __importStar(require("aws-cdk-lib/aws-iam"));
+const utils = __importStar(require("../../utils"));
+/**
+ * @stability stable
+ * @category cdk-utils.iam-manager
+ * @subcategory Construct
+ * @classdesc Provides operations on AWS IAM.
+ * - A new instance of this class is injected into {@link common.CommonConstruct} constructor.
+ * - If a custom construct extends {@link common.CommonConstruct}, an instance is available within the context.
+ * @example
+ * import * as common from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends common.common.CommonConstruct {
+ *   constructor(parent: cdk.Construct, id: string, props: common.CommonStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.iamManager.createRoleForEcsEvent('MyEcsRole', this, cluster, task)
+ *   }
+ * }
+ *
+ * @see [CDK IAM Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam-readme.html}
+ */
+class IamManager {
+    /**
+     * @summary Method to create iam statement to read secrets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    statementForReadSecrets(scope) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['secretsmanager:GetSecretValue'],
+            resources: [`arn:aws:secretsmanager:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:secret:*`],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to put events
+     */
+    statementForPutEvents() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['events:PutEvents'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to read app config
+     */
+    statementForReadAnyAppConfig() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: [
+                'ssm:GetDocument',
+                'ssm:ListDocuments',
+                'appconfig:ListApplications',
+                'appconfig:GetApplication',
+                'appconfig:ListEnvironments',
+                'appconfig:GetEnvironment',
+                'appconfig:ListConfigurationProfiles',
+                'appconfig:GetConfigurationProfile',
+                'appconfig:ListDeploymentStrategies',
+                'appconfig:GetDeploymentStrategy',
+                'appconfig:GetConfiguration',
+                'appconfig:ListDeployments',
+            ],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to list s3 buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForListBucket(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:ListBucket'],
+            resources: [bucket.bucketArn],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to list all s3 buckets
+     */
+    statementForListAllMyBuckets() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:ListAllMyBuckets'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to get s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForGetAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:GetObject', 's3:GetObjectAcl'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to delete s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForDeleteAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:DeleteObject'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write s3 objects in buckets
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {s3.IBucket} bucket
+     */
+    statementForPutAnyS3Objects(scope, bucket) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['s3:PutObject', 's3:PutObjectAcl'],
+            resources: [bucket.arnForObjects(`*`)],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to pass iam role
+     */
+    statementForPassRole() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['iam:PassRole'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to invalidate cloudfront cache
+     */
+    statementForCloudfrontInvalidation() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['cloudfront:GetInvalidation', 'cloudfront:CreateInvalidation'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam policy to invalidate cloudfront cache
+     */
+    policyForCloudfrontInvalidation() {
+        return new iam.PolicyDocument({
+            statements: [
+                this.statementForCreateAnyLogStream(),
+                this.statementForPutAnyLogEvent(),
+                this.statementForCloudfrontInvalidation(),
+                new iam.PolicyStatement({
+                    effect: iam.Effect.ALLOW,
+                    actions: [
+                        'ecr:GetDownloadUrlForLayer',
+                        'ecr:BatchGetImage',
+                        'ecr:BatchCheckLayerAvailability',
+                        'ecr:GetAuthorizationToken',
+                    ],
+                    resources: ['*'],
+                }),
+            ],
+        });
+    }
+    /**
+     * @summary Method to create iam role to invalidate cloudfront cache
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     */
+    roleForCloudfrontInvalidation(id, scope) {
+        return new iam.Role(scope, `${id}-install-deps-project-role`, {
+            assumedBy: new iam.ServicePrincipal('codebuild.amazonaws.com'),
+            inlinePolicies: {
+                codeBuildPolicy: this.policyForCloudfrontInvalidation(),
+            },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to assume iam role
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.ServicePrincipal[]} servicePrincipals
+     */
+    statementForAssumeRole(scope, servicePrincipals) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['sts:AssumeRole'],
+            principals: servicePrincipals,
+        });
+    }
+    /**
+     * @summary Method to create iam statement to pass ecs role
+     */
+    statementForEcsPassRole() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['iam:PassRole'],
+            resources: ['*'],
+            conditions: { StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' } },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to run ecs task
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    statementForRunEcsTask(scope, cluster, task) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['ecs:RunTask'],
+            resources: [task.taskDefinitionArn],
+            conditions: { ArnLike: { 'ecs:cluster': cluster.clusterArn } },
+        });
+    }
+    /**
+     * @summary Method to create iam statement to create log stream
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForCreateLogStream(scope, logGroup) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:CreateLogStream'],
+            resources: [
+                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+            ],
+            sid: 'AWSCloudTrailCreateLogStream2014110',
+        });
+    }
+    /**
+     * @summary Method to create iam statement to create any log stream
+     */
+    statementForCreateAnyLogStream() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:CreateLogStream'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write log events
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    statementForPutLogEvent(scope, logGroup) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:PutLogEvents'],
+            resources: [
+                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+            ],
+            sid: 'AWSCloudTrailPutLogEvents20141101',
+        });
+    }
+    /**
+     * @summary Method to create iam statement to write any log events
+     */
+    statementForPutAnyLogEvent() {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['logs:PutLogEvents'],
+            resources: ['*'],
+        });
+    }
+    /**
+     * @summary Method to create iam statement for cloud trail
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {logs.CfnLogGroup} logGroup
+     */
+    createRoleForCloudTrail(id, scope, logGroup) {
+        const policy = new iam.PolicyDocument({
+            statements: [this.statementForCreateLogStream(scope, logGroup), this.statementForPutLogEvent(scope, logGroup)],
+        });
+        const role = new iam.CfnRole(scope, `${id}`, {
+            assumeRolePolicyDocument: new iam.PolicyDocument({
+                statements: [this.statementForAssumeRole(scope, [new iam.ServicePrincipal('cloudtrail.amazonaws.com')])],
+            }),
+            policies: [
+                {
+                    policyName: `${id}-policy-${scope.props.stage}`,
+                    policyDocument: policy,
+                },
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.attrArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for ecs event
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {ecs.ICluster} cluster
+     * @param {ecs.ITaskDefinition} task
+     */
+    createRoleForEcsEvent(id, scope, cluster, task) {
+        const policy = new iam.PolicyDocument({
+            statements: [this.statementForRunEcsTask(scope, cluster, task), this.statementForEcsPassRole()],
+        });
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: new iam.ServicePrincipal('events.amazonaws.com'),
+            description: `Role for ${id} ECS Task execution from EventBridge`,
+            inlinePolicies: { policy },
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for ecs execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     */
+    createRoleForEcsExecution(id, scope, policy) {
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: new iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
+            description: `Role for ${id} ECS Task execution`,
+            inlinePolicies: { policy },
+            managedPolicies: [
+                iam.ManagedPolicy.fromManagedPolicyArn(scope, 'AmazonECSTaskExecutionRolePolicy', 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+    /**
+     * @summary Method to create iam statement for lambda execution
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {iam.PolicyDocument} policy
+     * @param {iam.ServicePrincipal} servicePrinicpal
+     */
+    createRoleForLambda(id, scope, policy, servicePrinicpal) {
+        const role = new iam.Role(scope, `${id}`, {
+            assumedBy: servicePrinicpal ?? new iam.ServicePrincipal('lambda.amazonaws.com'),
+            description: `Role for ${id} Lambda function`,
+            inlinePolicies: { policy },
+            managedPolicies: [
+                iam.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+            ],
+            roleName: `${id}-${scope.props.stage}`,
+        });
+        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        return role;
+    }
+}
+exports.IamManager = IamManager;
+//# sourceMappingURL=iam-manager.js.map

package/dist/src/lib/manager/aws/iam-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-manager.js","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/iam-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,yDAA0C;AAI1C,mDAAoC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,UAAU;IACrB;;;OAGG;IACI,uBAAuB,CAAC,KAA6B;QAC1D,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,+BAA+B,CAAC;YAC1C,SAAS,EAAE,CAAC,0BAA0B,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,WAAW,CAAC;SAC5G,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,qBAAqB;QAC1B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,kBAAkB,CAAC;YAC7B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,4BAA4B;QACjC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE;gBACP,iBAAiB;gBACjB,mBAAmB;gBACnB,4BAA4B;gBAC5B,0BAA0B;gBAC1B,4BAA4B;gBAC5B,0BAA0B;gBAC1B,qCAAqC;gBACrC,mCAAmC;gBACnC,oCAAoC;gBACpC,iCAAiC;gBACjC,4BAA4B;gBAC5B,2BAA2B;aAC5B;YACD,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAAC,KAA6B,EAAE,MAAkB;QAC7E,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,eAAe,CAAC;YAC1B,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,4BAA4B;QACjC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,qBAAqB,CAAC;YAChC,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,MAAkB;QAClF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,8BAA8B,CAAC,KAA6B,EAAE,MAAkB;QACrF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,MAAkB;QAClF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,oBAAoB;QACzB,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,kCAAkC;QACvC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,4BAA4B,EAAE,+BAA+B,CAAC;YACxE,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,+BAA+B;QACpC,OAAO,IAAI,GAAG,CAAC,cAAc,CAAC;YAC5B,UAAU,EAAE;gBACV,IAAI,CAAC,8BAA8B,EAAE;gBACrC,IAAI,CAAC,0BAA0B,EAAE;gBACjC,IAAI,CAAC,kCAAkC,EAAE;gBACzC,IAAI,GAAG,CAAC,eAAe,CAAC;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;oBACxB,OAAO,EAAE;wBACP,4BAA4B;wBAC5B,mBAAmB;wBACnB,iCAAiC;wBACjC,2BAA2B;qBAC5B;oBACD,SAAS,EAAE,CAAC,GAAG,CAAC;iBACjB,CAAC;aACH;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,6BAA6B,CAAC,EAAU,EAAE,KAA6B;QAC5E,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,4BAA4B,EAAE;YAC5D,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;YAC9D,cAAc,EAAE;gBACd,eAAe,EAAE,IAAI,CAAC,+BAA+B,EAAE;aACxD;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAAC,KAA6B,EAAE,iBAAyC;QACpG,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,UAAU,EAAE,iBAAiB;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,uBAAuB;QAC5B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,EAAE;SACjF,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACI,sBAAsB,CAAC,KAA6B,EAAE,OAAqB,EAAE,IAAyB;QAC3G,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACnC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,KAA6B,EAAE,QAA0B;QAC1F,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,sBAAsB,CAAC;YACjC,SAAS,EAAE;gBACT,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,cACvE,QAAQ,CAAC,YACX,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,wBAAwB;aACnE;YACD,GAAG,EAAE,qCAAqC;SAC3C,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,8BAA8B;QACnC,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,sBAAsB,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACI,uBAAuB,CAAC,KAA6B,EAAE,QAA0B;QACtF,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE;gBACT,gBAAgB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,cACvE,QAAQ,CAAC,YACX,eAAe,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,wBAAwB;aACnE;YACD,GAAG,EAAE,mCAAmC;SACzC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,0BAA0B;QAC/B,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACI,uBAAuB,CAAC,EAAU,EAAE,KAA6B,EAAE,QAA0B;QAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;SAC/G,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YAC3C,wBAAwB,EAAE,IAAI,GAAG,CAAC,cAAc,CAAC;gBAC/C,UAAU,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;aACzG,CAAC;YACF,QAAQ,EAAE;gBACR;oBACE,UAAU,EAAE,GAAG,EAAE,WAAW,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;oBAC/C,cAAc,EAAE,MAAM;iBACvB;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACI,qBAAqB,CAC1B,EAAU,EACV,KAA6B,EAC7B,OAAqB,EACrB,IAAyB;QAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC;YACpC,UAAU,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;SAChG,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;YAC3D,WAAW,EAAE,YAAY,EAAE,sCAAsC;YACjE,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;OAKG;IACI,yBAAyB,CAAC,EAAU,EAAE,KAA6B,EAAE,MAA0B;QACpG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;YAC9D,WAAW,EAAE,YAAY,EAAE,qBAAqB;YAChD,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,eAAe,EAAE;gBACf,GAAG,CAAC,aAAa,CAAC,oBAAoB,CACpC,KAAK,EACL,kCAAkC,EAClC,uEAAuE,CACxE;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACI,mBAAmB,CACxB,EAAU,EACV,KAA6B,EAC7B,MAA0B,EAC1B,gBAAuC;QAEvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,gBAAgB,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC;YAC/E,WAAW,EAAE,YAAY,EAAE,kBAAkB;YAC7C,cAAc,EAAE,EAAE,MAAM,EAAE;YAC1B,eAAe,EAAE;gBACf,GAAG,CAAC,aAAa,CAAC,oBAAoB,CACpC,KAAK,EACL,GAAG,EAAE,8BAA8B,EACnC,kEAAkE,CACnE;aACF;YACD,QAAQ,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;SACvC,CAAC,CAAA;QAEF,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAlYD,gCAkYC"}

package/dist/src/lib/manager/aws/index.d.ts

@@ -0,0 +1,24 @@
+export * from './acm-manager';
+export * from './api-manager';
+export * from './app-config-manager';
+export * from './cloudfront-manager';
+export * from './cloudtrail-manager';
+export * from './cloudwatch-manager';
+export * from './codebuild-manager';
+export * from './dynamodb-manager';
+export * from './ecr-manager';
+export * from './ecs-manager';
+export * from './eks-manager';
+export * from './elasticache-manager';
+export * from './event-manager';
+export * from './iam-manager';
+export * from './lambda-manager';
+export * from './log-manager';
+export * from './route53-manager';
+export * from './s3-manager';
+export * from './secrets-manager';
+export * from './sns-manager';
+export * from './ssm-manager';
+export * from './vpc-manager';
+export * from './waf-manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/lib/manager/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,uBAAuB,CAAA;AACrC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,kBAAkB,CAAA;AAChC,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/dist/src/lib/manager/aws/index.js

@@ -0,0 +1,36 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./acm-manager"), exports);
+__exportStar(require("./api-manager"), exports);
+__exportStar(require("./app-config-manager"), exports);
+__exportStar(require("./cloudfront-manager"), exports);
+__exportStar(require("./cloudtrail-manager"), exports);
+__exportStar(require("./cloudwatch-manager"), exports);
+__exportStar(require("./codebuild-manager"), exports);
+__exportStar(require("./dynamodb-manager"), exports);
+__exportStar(require("./ecr-manager"), exports);
+__exportStar(require("./ecs-manager"), exports);
+__exportStar(require("./eks-manager"), exports);
+__exportStar(require("./elasticache-manager"), exports);
+__exportStar(require("./event-manager"), exports);
+__exportStar(require("./iam-manager"), exports);
+__exportStar(require("./lambda-manager"), exports);
+__exportStar(require("./log-manager"), exports);
+__exportStar(require("./route53-manager"), exports);
+__exportStar(require("./s3-manager"), exports);
+__exportStar(require("./secrets-manager"), exports);
+__exportStar(require("./sns-manager"), exports);
+__exportStar(require("./ssm-manager"), exports);
+__exportStar(require("./vpc-manager"), exports);
+__exportStar(require("./waf-manager"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/lib/manager/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAA6B;AAC7B,gDAA6B;AAC7B,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,uDAAoC;AACpC,sDAAmC;AACnC,qDAAkC;AAClC,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B;AAC7B,wDAAqC;AACrC,kDAA+B;AAC/B,gDAA6B;AAC7B,mDAAgC;AAChC,gDAA6B;AAC7B,oDAAiC;AACjC,+CAA4B;AAC5B,oDAAiC;AACjC,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B;AAC7B,gDAA6B"}

package/dist/src/lib/manager/aws/lambda-manager.d.ts

@@ -0,0 +1,95 @@
+import * as pylambda from '@aws-cdk/aws-lambda-python-alpha';
+import * as cdk from 'aws-cdk-lib';
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
+import * as efs from 'aws-cdk-lib/aws-efs';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import * as common from '../../common';
+import * as types from '../../types';
+/**
+ * @stability stable
+ * @category cdk-utils.lambda-manager
+ * @subcategory Construct
+ * @classdesc Provides operations on AWS Lambda.
+ * - A new instance of this class is injected into {@link common.CommonConstruct} constructor.
+ * - If a custom construct extends {@link common.CommonConstruct}, an instance is available within the context.
+ * @example
+ * import * as common from '@gradientedge/cdk-utils'
+ *
+ * class CustomConstruct extends common.common.CommonConstruct {
+ *   constructor(parent: cdk.Construct, id: string, props: common.CommonStackProps) {
+ *     super(parent, id, props)
+ *     this.props = props
+ *     this.lambdaManager.createLambdaFunction('MyFunction', this, role, layers, code)
+ *   }
+ * }
+ *
+ * @see [CDK Lambda Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_lambda-readme.html}
+ */
+export declare class LambdaManager {
+    /**
+     * @summary Method to create a lambda layer (nodejs)
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {lambda.AssetCode} code
+     */
+    createLambdaLayer(id: string, scope: common.CommonConstruct, code: lambda.AssetCode): cdk.aws_lambda.LayerVersion;
+    /**
+     * @summary Method to create a lambda layer (python)
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {string} entry path to layer source
+     */
+    createPythonLambdaLayer(id: string, scope: common.CommonConstruct, entry: string): pylambda.PythonLayerVersion;
+    /**
+     * @summary Method to create a lambda function (python)
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {types.LambdaProps} props
+     * @param {iam.Role | iam.CfnRole} role
+     * @param {lambda.ILayerVersion[]} layers
+     * @param {string} entry path to lambda source
+     * @param {string?} index
+     * @param {string?} handler
+     * @param {Map<string, string>?} environment
+     * @param {ec2.IVpc?} vpc
+     * @param {ec2.ISecurityGroup[]?} securityGroups
+     * @param {efs.IAccessPoint?} accessPoint
+     * @param {string?} mountPath
+     * @param {ec2.SubnetSelection?} vpcSubnets
+     */
+    createPythonLambdaFunction(id: string, scope: common.CommonConstruct, props: types.LambdaProps, role: iam.Role | iam.CfnRole, layers: lambda.ILayerVersion[], entry: string, index?: string, handler?: string, environment?: any, vpc?: ec2.IVpc, securityGroups?: ec2.ISecurityGroup[], accessPoint?: efs.IAccessPoint, mountPath?: string, vpcSubnets?: ec2.SubnetSelection): pylambda.PythonFunction;
+    /**
+     * @summary Method to create a lambda function (nodejs)
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {types.LambdaProps} props
+     * @param {iam.Role | iam.CfnRole} role
+     * @param {lambda.ILayerVersion[]} layers
+     * @param {lambda.AssetCode} code
+     * @param {string?} handler
+     * @param {Map<string, string>?} environment
+     * @param {ec2.IVpc?} vpc
+     * @param {ec2.ISecurityGroup[]?} securityGroups
+     * @param {efs.IAccessPoint?} accessPoint
+     * @param {string?} mountPath
+     * @param {ec2.SubnetSelection?} vpcSubnets
+     */
+    createLambdaFunction(id: string, scope: common.CommonConstruct, props: types.LambdaProps, role: iam.Role | iam.CfnRole, layers: lambda.ILayerVersion[], code: lambda.AssetCode, handler?: string, environment?: any, vpc?: ec2.IVpc, securityGroups?: ec2.ISecurityGroup[], accessPoint?: efs.IAccessPoint, mountPath?: string, vpcSubnets?: ec2.SubnetSelection): cdk.aws_lambda.Function;
+    /**
+     * @summary Method to provision a Lambda@Edge function
+     *
+     * @param {string} id scoped id of the resource
+     * @param {common.CommonConstruct} scope scope in which this resource is defined
+     * @param {types.LambdaEdgeProps} props lambda@edge properties
+     * @param {lambda.ILayerVersion[]} layers
+     * @param {lambda.AssetCode} code
+     * @param {Map<string, string>?} environment
+     * @param {ec2.IVpc?} vpc
+     * @param {ec2.ISecurityGroup[]?} securityGroups
+     * @param {efs.IAccessPoint?} accessPoint
+     * @param {string?} mountPath
+     */
+    createEdgeFunction(id: string, scope: common.CommonConstruct, props: types.LambdaEdgeProps, layers: lambda.ILayerVersion[], code: lambda.AssetCode, environment?: any, vpc?: ec2.IVpc, securityGroups?: ec2.ISecurityGroup[], accessPoint?: efs.IAccessPoint, mountPath?: string): cdk.aws_cloudfront.experimental.EdgeFunction;
+}
+//# sourceMappingURL=lambda-manager.d.ts.map

package/dist/src/lib/manager/aws/lambda-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-manager.d.ts","sourceRoot":"","sources":["../../../../../src/lib/manager/aws/lambda-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,kCAAkC,CAAA;AAC5D,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAA;AAChD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAIpC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,aAAa;IACxB;;;;;OAKG;IACI,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS;IAa1F;;;;;OAKG;IACI,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM;IAavF;;;;;;;;;;;;;;;;OAgBG;IAEI,0BAA0B,CAC/B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,eAAe,EAC7B,KAAK,EAAE,KAAK,CAAC,WAAW,EACxB,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,EAC5B,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,EAC9B,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,GAAG,EACjB,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EACd,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,EACrC,WAAW,CAAC,EAAE,GAAG,CAAC,YAAY,EAC9B,SAAS,CAAC,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,GAAG,CAAC,eAAe;IAoClC;;;;;;;;;;;;;;;OAeG;IACI,oBAAoB,CACzB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,eAAe,EAC7B,KAAK,EAAE,KAAK,CAAC,WAAW,EACxB,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,EAC5B,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,EAC9B,IAAI,EAAE,MAAM,CAAC,SAAS,EACtB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,GAAG,EACjB,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EACd,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,EACrC,WAAW,CAAC,EAAE,GAAG,CAAC,YAAY,EAC9B,SAAS,CAAC,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,GAAG,CAAC,eAAe;IAmClC;;;;;;;;;;;;;OAaG;IACI,kBAAkB,CACvB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,CAAC,eAAe,EAC7B,KAAK,EAAE,KAAK,CAAC,eAAe,EAC5B,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,EAC9B,IAAI,EAAE,MAAM,CAAC,SAAS,EACtB,WAAW,CAAC,EAAE,GAAG,EACjB,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,EACd,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,EACrC,WAAW,CAAC,EAAE,GAAG,CAAC,YAAY,EAC9B,SAAS,CAAC,EAAE,MAAM;CAerB"}