@gradientedge/cdk-utils 8.118.0 → 8.119.0

package/dist/src/lib/services/aws/identity-access-management/main.js

@@ -1,41 +1,18 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IamManager = void 0;
-const cdk = __importStar(require("aws-cdk-lib"));
-const iam = __importStar(require("aws-cdk-lib/aws-iam"));
-const utils = __importStar(require("../../../utils"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_iam_1 = require("aws-cdk-lib/aws-iam");
+const utils_1 = require("../../../utils");
 /**
- * @classdesc Provides operations on AWS IAM.
+ * @classdesc Provides operations on AWS
  * - A new instance of this class is injected into {@link CommonConstruct} constructor.
  * - If a custom construct extends {@link CommonConstruct}, an instance is available within the context.
  * @example
  * import { CommonConstruct } from '@gradientedge/cdk-utils'
  *
  * class CustomConstruct extends CommonConstruct {
- *   constructor(parent: cdk.Construct, id: string, props: common.CommonStackProps) {
+ *   constructor(parent: Construct, id: string, props: common.CommonStackProps) {
  *     super(parent, id, props)
  *     this.props = props
  *     this.iamManager.createRoleForEcsEvent('MyEcsRole', this, cluster, task)
@@ -50,11 +27,11 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadSecrets(scope, resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['secretsmanager:GetSecretValue'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? [
-                `arn:aws:secretsmanager:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:secret:*`,
+                `arn:aws:secretsmanager:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:secret:*`,
             ],
         });
     }
@@ -63,20 +40,20 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutEvents(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['events:PutEvents'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
     /**
-     * @summary Method to create iam statement to start stepfunction execution
+     * @summary Method to create iam statement to start step function execution
      * @param resourceArns list of ARNs to allow access to
      */
     statementForStartExecution(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['states:StartExecution'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -85,9 +62,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPollQueue(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['sqs:ReceiveMessage', 'sqs:DeleteMessage', 'sqs:GetQueueAttributes'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -96,9 +73,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForInvokeLambda(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['lambda:InvokeFunction'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -107,7 +84,7 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadAnyAppConfig(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: [
                 'ssm:GetDocument',
                 'ssm:ListDocuments',
@@ -122,7 +99,7 @@ class IamManager {
                 'appconfig:GetConfiguration',
                 'appconfig:ListDeployments',
             ],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -131,9 +108,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForAppConfigExecution(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['appconfig:GetLatestConfiguration', 'appconfig:StartConfigurationSession'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -142,9 +119,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutXrayTelemetry(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['xray:PutTraceSegments', 'xray:PutTelemetryRecords'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -153,9 +130,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForDecryptKms(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['kms:Decrypt'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -165,9 +142,9 @@ class IamManager {
      * @param bucket
      */
     statementForListBucket(scope, bucket) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['s3:ListBucket'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: [bucket.bucketArn],
         });
     }
@@ -176,9 +153,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForListAllMyBuckets(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['s3:ListAllMyBuckets'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -189,9 +166,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForGetAnyS3Objects(scope, bucket, resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['s3:GetObject', 's3:GetObjectAcl'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -202,9 +179,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForDeleteAnyS3Objects(scope, bucket, resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['s3:DeleteObject'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -215,9 +192,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutAnyS3Objects(scope, bucket, resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['s3:PutObject', 's3:PutObjectAcl'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -226,9 +203,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPassRole(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['iam:PassRole'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -237,9 +214,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForCloudfrontInvalidation(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['cloudfront:GetInvalidation', 'cloudfront:CreateInvalidation'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -248,9 +225,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForWriteEfs(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['elasticfilesystem:*'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -259,19 +236,19 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     policyForCloudfrontInvalidation(resourceArns) {
-        return new iam.PolicyDocument({
+        return new aws_iam_1.PolicyDocument({
             statements: [
                 this.statementForCreateAnyLogStream(),
                 this.statementForPutAnyLogEvent(),
                 this.statementForCloudfrontInvalidation(),
-                new iam.PolicyStatement({
+                new aws_iam_1.PolicyStatement({
                     actions: [
                         'ecr:GetDownloadUrlForLayer',
                         'ecr:BatchGetImage',
                         'ecr:BatchCheckLayerAvailability',
                         'ecr:GetAuthorizationToken',
                     ],
-                    effect: iam.Effect.ALLOW,
+                    effect: aws_iam_1.Effect.ALLOW,
                     resources: resourceArns ?? ['*'],
                 }),
             ],
@@ -283,8 +260,8 @@ class IamManager {
      * @param scope scope in which this resource is defined
      */
     roleForCloudfrontInvalidation(id, scope) {
-        return new iam.Role(scope, `${id}-install-deps-project-role`, {
-            assumedBy: new iam.ServicePrincipal('codebuild.amazonaws.com'),
+        return new aws_iam_1.Role(scope, `${id}-install-deps-project-role`, {
+            assumedBy: new aws_iam_1.ServicePrincipal('codebuild.amazonaws.com'),
             inlinePolicies: {
                 codeBuildPolicy: this.policyForCloudfrontInvalidation(),
             },
@@ -296,9 +273,9 @@ class IamManager {
      * @param servicePrincipals
      */
     statementForAssumeRole(scope, servicePrincipals) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['sts:AssumeRole'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             principals: servicePrincipals,
         });
     }
@@ -307,10 +284,10 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForEcsPassRole(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['iam:PassRole'],
             conditions: { StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' } },
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -321,10 +298,10 @@ class IamManager {
      * @param task
      */
     statementForRunEcsTask(scope, cluster, task) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['ecs:RunTask'],
             conditions: { ArnLike: { 'ecs:cluster': cluster.clusterArn } },
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: [task.taskDefinitionArn],
         });
     }
@@ -334,11 +311,11 @@ class IamManager {
      * @param logGroup
      */
     statementForCreateLogStream(scope, logGroup) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['logs:CreateLogStream'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: [
-                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+                `arn:aws:logs:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${aws_cdk_lib_1.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
             ],
             sid: 'AWSCloudTrailCreateLogStream2014110',
         });
@@ -348,9 +325,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForCreateAnyLogStream(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['logs:CreateLogStream'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -360,11 +337,11 @@ class IamManager {
      * @param logGroup
      */
     statementForPutLogEvent(scope, logGroup) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['logs:PutLogEvents'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: [
-                `arn:aws:logs:${cdk.Stack.of(scope).region}:${cdk.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${cdk.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+                `arn:aws:logs:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${aws_cdk_lib_1.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
             ],
             sid: 'AWSCloudTrailPutLogEvents20141101',
         });
@@ -374,9 +351,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutAnyLogEvent(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['logs:PutLogEvents'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -385,7 +362,7 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadTableItems(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: [
                 'dynamodb:PartiQLSelect',
                 'dynamodb:DescribeTable',
@@ -396,7 +373,7 @@ class IamManager {
                 'dynamodb:GetRecords',
                 'dynamodb:BatchGetItem',
             ],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -405,9 +382,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForWriteTableItems(resourceArns) {
-        return new iam.PolicyStatement({
+        return new aws_iam_1.PolicyStatement({
             actions: ['dynamodb:BatchWriteItem', 'dynamodb:DeleteItem', 'dynamodb:PutItem', 'dynamodb:UpdateItem'],
-            effect: iam.Effect.ALLOW,
+            effect: aws_iam_1.Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -418,12 +395,12 @@ class IamManager {
      * @param logGroup
      */
     createRoleForCloudTrail(id, scope, logGroup) {
-        const policy = new iam.PolicyDocument({
+        const policy = new aws_iam_1.PolicyDocument({
             statements: [this.statementForCreateLogStream(scope, logGroup), this.statementForPutLogEvent(scope, logGroup)],
         });
-        const role = new iam.CfnRole(scope, `${id}`, {
-            assumeRolePolicyDocument: new iam.PolicyDocument({
-                statements: [this.statementForAssumeRole(scope, [new iam.ServicePrincipal('cloudtrail.amazonaws.com')])],
+        const role = new aws_iam_1.CfnRole(scope, `${id}`, {
+            assumeRolePolicyDocument: new aws_iam_1.PolicyDocument({
+                statements: [this.statementForAssumeRole(scope, [new aws_iam_1.ServicePrincipal('cloudtrail.amazonaws.com')])],
             }),
             policies: [
                 {
@@ -433,8 +410,8 @@ class IamManager {
             ],
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.attrArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.attrArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -445,17 +422,17 @@ class IamManager {
      * @param task
      */
     createRoleForEcsEvent(id, scope, cluster, task) {
-        const policy = new iam.PolicyDocument({
+        const policy = new aws_iam_1.PolicyDocument({
             statements: [this.statementForRunEcsTask(scope, cluster, task), this.statementForEcsPassRole()],
         });
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: new iam.ServicePrincipal('events.amazonaws.com'),
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: new aws_iam_1.ServicePrincipal('events.amazonaws.com'),
             description: `Role for ${id} ECS Task execution from EventBridge`,
             inlinePolicies: { policy },
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -465,17 +442,17 @@ class IamManager {
      * @param policy
      */
     createRoleForEcsExecution(id, scope, policy) {
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: new iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: new aws_iam_1.ServicePrincipal('ecs-tasks.amazonaws.com'),
             description: `Role for ${id} ECS Task execution`,
             inlinePolicies: { policy },
             managedPolicies: [
-                iam.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AmazonECSTaskExecutionRolePolicy`, 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
+                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AmazonECSTaskExecutionRolePolicy`, 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
             ],
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -483,20 +460,20 @@ class IamManager {
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
      * @param policy
-     * @param servicePrinicpal
+     * @param servicePrincipal
      */
-    createRoleForLambda(id, scope, policy, servicePrinicpal) {
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: servicePrinicpal ?? new iam.ServicePrincipal('lambda.amazonaws.com'),
+    createRoleForLambda(id, scope, policy, servicePrincipal) {
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('lambda.amazonaws.com'),
             description: `Role for ${id} Lambda function`,
             inlinePolicies: { policy },
             managedPolicies: [
-                iam.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
             ],
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -504,17 +481,17 @@ class IamManager {
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
      * @param policy
-     * @param servicePrinicpal
+     * @param servicePrincipal
      */
-    createRoleForAppConfigSecrets(id, scope, policy, servicePrinicpal) {
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: servicePrinicpal ?? new iam.ServicePrincipal('appconfig.amazonaws.com'),
+    createRoleForAppConfigSecrets(id, scope, policy, servicePrincipal) {
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('appconfig.amazonaws.com'),
             description: `Role for ${id} AppConfig Secrets`,
             inlinePolicies: { policy },
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -522,20 +499,20 @@ class IamManager {
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
      * @param policy
-     * @param servicePrinicpal
+     * @param servicePrincipal
      */
-    createRoleForStepFunction(id, scope, policy, servicePrinicpal) {
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: servicePrinicpal ?? new iam.ServicePrincipal('states.amazonaws.com'),
+    createRoleForStepFunction(id, scope, policy, servicePrincipal) {
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('states.amazonaws.com'),
             description: `Role for ${id} Lambda function`,
             inlinePolicies: { policy },
             managedPolicies: [
-                iam.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
             ],
             roleName: `${id}-${scope.props.stage}`,
         });
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -546,15 +523,15 @@ class IamManager {
      * @param stepFunctionArn the arn of the step function
      */
     createRoleForSqsToSfnPipe(id, scope, queueArn, stepFunctionArn) {
-        const role = new iam.Role(scope, `${id}`, {
-            assumedBy: new iam.ServicePrincipal('pipes.amazonaws.com'),
+        const role = new aws_iam_1.Role(scope, `${id}`, {
+            assumedBy: new aws_iam_1.ServicePrincipal('pipes.amazonaws.com'),
             description: `Role for ${id} Pipe`,
             roleName: `${id}-${scope.props.stage}`,
         });
         role.addToPolicy(this.statementForPollQueue([queueArn]));
         role.addToPolicy(this.statementForStartExecution([stepFunctionArn]));
-        utils.createCfnOutput(`${id}Arn`, scope, role.roleArn);
-        utils.createCfnOutput(`${id}Name`, scope, role.roleName);
+        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
+        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -566,17 +543,17 @@ class IamManager {
      * @param servicePrincipals
      */
     createPolicyForSqsEvent(id, scope, sqsQueue, eventBridgeRule, servicePrincipals) {
-        return new iam.PolicyDocument({
+        return new aws_iam_1.PolicyDocument({
             statements: [
-                new iam.PolicyStatement({
+                new aws_iam_1.PolicyStatement({
                     actions: ['sqs:*'],
                     conditions: {
                         ArnEquals: {
                             'aws:SourceArn': eventBridgeRule,
                         },
                     },
-                    effect: iam.Effect.ALLOW,
-                    principals: servicePrincipals ?? [new iam.ServicePrincipal('events.amazonaws.com')],
+                    effect: aws_iam_1.Effect.ALLOW,
+                    principals: servicePrincipals ?? [new aws_iam_1.ServicePrincipal('events.amazonaws.com')],
                     resources: [sqsQueue.queueArn],
                 }),
             ],

package/dist/src/lib/services/aws/key-management-service/main.d.ts

@@ -1,4 +1,4 @@
-import * as kms from 'aws-cdk-lib/aws-kms';
+import { Key } from 'aws-cdk-lib/aws-kms';
 import { CommonConstruct } from '../../../common';
 import { KmsKeyProps } from './types';
 /**
@@ -24,5 +24,5 @@ export declare class KmsManager {
      * @param scope scope in which this resource is defined
      * @param props KMS key props
      */
-    createKey(id: string, scope: CommonConstruct, props: KmsKeyProps): kms.Key;
+    createKey(id: string, scope: CommonConstruct, props: KmsKeyProps): Key;
 }

package/dist/src/lib/services/aws/key-management-service/main.js

@@ -1,31 +1,8 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KmsManager = void 0;
-const kms = __importStar(require("aws-cdk-lib/aws-kms"));
-const utils = __importStar(require("../../../utils"));
+const aws_kms_1 = require("aws-cdk-lib/aws-kms");
+const utils_1 = require("../../../utils");
 /**
  * @classdesc Provides operations on AWS KMS.
  * - A new instance of this class is injected into {@link CommonConstruct} constructor.
@@ -52,7 +29,7 @@ class KmsManager {
     createKey(id, scope, props) {
         if (!props)
             throw `KMS Key props undefined for ${id}`;
-        const key = new kms.Key(scope, `${id}`, {
+        const key = new aws_kms_1.Key(scope, `${id}`, {
             admins: props.admins,
             alias: `${props.alias}-${scope.props.stage}`,
             description: props.description,
@@ -64,8 +41,8 @@ class KmsManager {
             policy: props.policy,
             removalPolicy: props.removalPolicy,
         });
-        utils.createCfnOutput(`${id}-keyId`, scope, key.keyId);
-        utils.createCfnOutput(`${id}-keyArn`, scope, key.keyArn);
+        (0, utils_1.createCfnOutput)(`${id}-keyId`, scope, key.keyId);
+        (0, utils_1.createCfnOutput)(`${id}-keyArn`, scope, key.keyArn);
         return key;
     }
 }