@gradientedge/cdk-utils 9.84.0 → 9.86.0

package/dist/src/lib/aws/services/identity-access-management/main.js

@@ -1,9 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IamManager = void 0;
-const aws_cdk_lib_1 = require("aws-cdk-lib");
-const aws_iam_1 = require("aws-cdk-lib/aws-iam");
-const utils_1 = require("../../utils");
+import { Stack } from 'aws-cdk-lib';
+import { CfnRole, Effect, ManagedPolicy, PolicyDocument, PolicyStatement, Role, ServicePrincipal, } from 'aws-cdk-lib/aws-iam';
+import { createCfnOutput } from '../../utils/index.js';
 /**
  * @classdesc Provides operations on AWS
  * - A new instance of this class is injected into {@link CommonConstruct} constructor.
@@ -20,18 +17,18 @@ const utils_1 = require("../../utils");
  * }
  * @see [CDK IAM Module]{@link https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam-readme.html}
  */
-class IamManager {
+export class IamManager {
     /**
      * @summary Method to create iam statement to read secrets
      * @param scope scope in which this resource is defined
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadSecrets(scope, resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['secretsmanager:GetSecretValue'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? [
-                `arn:aws:secretsmanager:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:secret:*`,
+                `arn:aws:secretsmanager:${Stack.of(scope).region}:${Stack.of(scope).account}:secret:*`,
             ],
         });
     }
@@ -40,9 +37,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutEvents(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['events:PutEvents'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -51,9 +48,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForStartExecution(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['states:StartExecution'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -62,9 +59,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPollQueue(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['sqs:ReceiveMessage', 'sqs:DeleteMessage', 'sqs:GetQueueAttributes'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -73,9 +70,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForInvokeLambda(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['lambda:InvokeFunction'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -84,7 +81,7 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadAnyAppConfig(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: [
                 'ssm:GetDocument',
                 'ssm:ListDocuments',
@@ -99,7 +96,7 @@ class IamManager {
                 'appconfig:GetConfiguration',
                 'appconfig:ListDeployments',
             ],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -108,9 +105,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForAppConfigExecution(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['appconfig:GetLatestConfiguration', 'appconfig:StartConfigurationSession'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -119,9 +116,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutXrayTelemetry(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['xray:PutTraceSegments', 'xray:PutTelemetryRecords'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -130,9 +127,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForDecryptKms(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['kms:Decrypt'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -142,9 +139,9 @@ class IamManager {
      * @param bucket
      */
     statementForListBucket(scope, bucket) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['s3:ListBucket'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: [bucket.bucketArn],
         });
     }
@@ -153,9 +150,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForListAllMyBuckets(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['s3:ListAllMyBuckets'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -166,9 +163,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForGetAnyS3Objects(scope, bucket, resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['s3:GetObject', 's3:GetObjectAcl'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -179,9 +176,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForDeleteAnyS3Objects(scope, bucket, resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['s3:DeleteObject'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -192,9 +189,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutAnyS3Objects(scope, bucket, resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['s3:PutObject', 's3:PutObjectAcl'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? [bucket.arnForObjects(`*`)],
         });
     }
@@ -203,9 +200,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPassRole(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['iam:PassRole'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -214,9 +211,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForCloudfrontInvalidation(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['cloudfront:GetInvalidation', 'cloudfront:CreateInvalidation'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -225,9 +222,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForWriteEfs(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['elasticfilesystem:*'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -237,9 +234,9 @@ class IamManager {
      * @param servicePrincipals
      */
     statementForAssumeRole(scope, servicePrincipals) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['sts:AssumeRole'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             principals: servicePrincipals,
         });
     }
@@ -248,10 +245,10 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForEcsPassRole(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['iam:PassRole'],
             conditions: { StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' } },
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -262,10 +259,10 @@ class IamManager {
      * @param task
      */
     statementForRunEcsTask(scope, cluster, task) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['ecs:RunTask'],
             conditions: { ArnLike: { 'ecs:cluster': cluster.clusterArn } },
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: [task.taskDefinitionArn],
         });
     }
@@ -275,11 +272,11 @@ class IamManager {
      * @param logGroup
      */
     statementForCreateLogStream(scope, logGroup) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['logs:CreateLogStream'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: [
-                `arn:aws:logs:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${aws_cdk_lib_1.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+                `arn:aws:logs:${Stack.of(scope).region}:${Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${Stack.of(scope).account}_CloudTrail_eu-west-1*`,
             ],
             sid: 'AWSCloudTrailCreateLogStream2014110',
         });
@@ -289,9 +286,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForCreateAnyLogStream(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['logs:CreateLogStream'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -301,11 +298,11 @@ class IamManager {
      * @param logGroup
      */
     statementForPutLogEvent(scope, logGroup) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['logs:PutLogEvents'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: [
-                `arn:aws:logs:${aws_cdk_lib_1.Stack.of(scope).region}:${aws_cdk_lib_1.Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${aws_cdk_lib_1.Stack.of(scope).account}_CloudTrail_eu-west-1*`,
+                `arn:aws:logs:${Stack.of(scope).region}:${Stack.of(scope).account}:log-group:${logGroup.logGroupName}:log-stream:${Stack.of(scope).account}_CloudTrail_eu-west-1*`,
             ],
             sid: 'AWSCloudTrailPutLogEvents20141101',
         });
@@ -315,9 +312,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForPutAnyLogEvent(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['logs:PutLogEvents'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -326,7 +323,7 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForReadTableItems(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: [
                 'dynamodb:PartiQLSelect',
                 'dynamodb:DescribeTable',
@@ -337,7 +334,7 @@ class IamManager {
                 'dynamodb:GetRecords',
                 'dynamodb:BatchGetItem',
             ],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -346,9 +343,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementForWriteTableItems(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['dynamodb:BatchWriteItem', 'dynamodb:DeleteItem', 'dynamodb:PutItem', 'dynamodb:UpdateItem'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -357,9 +354,9 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     statementFordynamoDbStream(resourceArns) {
-        return new aws_iam_1.PolicyStatement({
+        return new PolicyStatement({
             actions: ['dynamodb:DescribeStream', 'dynamodb:GetRecords', 'dynamodb:GetShardIterator', 'dynamodb:ListStreams'],
-            effect: aws_iam_1.Effect.ALLOW,
+            effect: Effect.ALLOW,
             resources: resourceArns ?? ['*'],
         });
     }
@@ -368,19 +365,19 @@ class IamManager {
      * @param resourceArns list of ARNs to allow access to
      */
     createPolicyForCloudfrontInvalidation(resourceArns) {
-        return new aws_iam_1.PolicyDocument({
+        return new PolicyDocument({
             statements: [
                 this.statementForCreateAnyLogStream(),
                 this.statementForPutAnyLogEvent(),
                 this.statementForCloudfrontInvalidation(),
-                new aws_iam_1.PolicyStatement({
+                new PolicyStatement({
                     actions: [
                         'ecr:GetDownloadUrlForLayer',
                         'ecr:BatchGetImage',
                         'ecr:BatchCheckLayerAvailability',
                         'ecr:GetAuthorizationToken',
                     ],
-                    effect: aws_iam_1.Effect.ALLOW,
+                    effect: Effect.ALLOW,
                     resources: resourceArns ?? ['*'],
                 }),
             ],
@@ -395,17 +392,17 @@ class IamManager {
      * @param servicePrincipals
      */
     createPolicyForSqsEvent(id, scope, sqsQueue, eventBridgeRule, servicePrincipals) {
-        return new aws_iam_1.PolicyDocument({
+        return new PolicyDocument({
             statements: [
-                new aws_iam_1.PolicyStatement({
+                new PolicyStatement({
                     actions: ['sqs:*'],
                     conditions: {
                         ArnEquals: {
                             'aws:SourceArn': eventBridgeRule,
                         },
                     },
-                    effect: aws_iam_1.Effect.ALLOW,
-                    principals: servicePrincipals ?? [new aws_iam_1.ServicePrincipal('events.amazonaws.com')],
+                    effect: Effect.ALLOW,
+                    principals: servicePrincipals ?? [new ServicePrincipal('events.amazonaws.com')],
                     resources: [sqsQueue.queueArn],
                 }),
             ],
@@ -417,8 +414,8 @@ class IamManager {
      * @param scope scope in which this resource is defined
      */
     createRoleForCloudfrontInvalidation(id, scope) {
-        return new aws_iam_1.Role(scope, `${id}-install-deps-project-role`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('codebuild.amazonaws.com'),
+        return new Role(scope, `${id}-install-deps-project-role`, {
+            assumedBy: new ServicePrincipal('codebuild.amazonaws.com'),
             inlinePolicies: {
                 codeBuildPolicy: this.createPolicyForCloudfrontInvalidation(),
             },
@@ -432,12 +429,12 @@ class IamManager {
      * @param logGroup
      */
     createRoleForCloudTrail(id, scope, logGroup) {
-        const policy = new aws_iam_1.PolicyDocument({
+        const policy = new PolicyDocument({
             statements: [this.statementForCreateLogStream(scope, logGroup), this.statementForPutLogEvent(scope, logGroup)],
         });
-        const role = new aws_iam_1.CfnRole(scope, `${id}`, {
-            assumeRolePolicyDocument: new aws_iam_1.PolicyDocument({
-                statements: [this.statementForAssumeRole(scope, [new aws_iam_1.ServicePrincipal('cloudtrail.amazonaws.com')])],
+        const role = new CfnRole(scope, `${id}`, {
+            assumeRolePolicyDocument: new PolicyDocument({
+                statements: [this.statementForAssumeRole(scope, [new ServicePrincipal('cloudtrail.amazonaws.com')])],
             }),
             policies: [
                 {
@@ -447,8 +444,8 @@ class IamManager {
             ],
             roleName: scope.resourceNameFormatter.format(`${id}-trail`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.attrArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.attrArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -459,17 +456,17 @@ class IamManager {
      * @param task
      */
     createRoleForEcsEvent(id, scope, cluster, task) {
-        const policy = new aws_iam_1.PolicyDocument({
+        const policy = new PolicyDocument({
             statements: [this.statementForRunEcsTask(scope, cluster, task), this.statementForEcsPassRole()],
         });
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('events.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: new ServicePrincipal('events.amazonaws.com'),
             description: `Role for ${id} ECS Task execution from EventBridge`,
             inlinePolicies: { policy },
             roleName: scope.resourceNameFormatter.format(`${id}-ecs-event`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -479,17 +476,17 @@ class IamManager {
      * @param policy
      */
     createRoleForEcsExecution(id, scope, policy) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('ecs-tasks.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: new ServicePrincipal('ecs-tasks.amazonaws.com'),
             description: `Role for ${id} ECS Task execution`,
             inlinePolicies: { policy },
             managedPolicies: [
-                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AmazonECSTaskExecutionRolePolicy`, 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
+                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AmazonECSTaskExecutionRolePolicy`, 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'),
             ],
             roleName: scope.resourceNameFormatter.format(`${id}-ecs-exec`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -500,17 +497,17 @@ class IamManager {
      * @param servicePrincipal
      */
     createRoleForLambda(id, scope, policy, servicePrincipal) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('lambda.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new ServicePrincipal('lambda.amazonaws.com'),
             description: `Role for ${id} Lambda function`,
             inlinePolicies: { policy },
             managedPolicies: [
-                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
             ],
             roleName: scope.resourceNameFormatter.format(`${id}-lambda`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -521,14 +518,14 @@ class IamManager {
      * @param servicePrincipal
      */
     createRoleForAppConfigSecrets(id, scope, policy, servicePrincipal) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('appconfig.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new ServicePrincipal('appconfig.amazonaws.com'),
             description: `Role for ${id} AppConfig Secrets`,
             inlinePolicies: { policy },
             roleName: scope.resourceNameFormatter.format(`${id}-config`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -539,17 +536,17 @@ class IamManager {
      * @param servicePrincipal
      */
     createRoleForStepFunction(id, scope, policy, servicePrincipal) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: servicePrincipal ?? new aws_iam_1.ServicePrincipal('states.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: servicePrincipal ?? new ServicePrincipal('states.amazonaws.com'),
             description: `Role for ${id} Lambda function`,
             inlinePolicies: { policy },
             managedPolicies: [
-                aws_iam_1.ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
+                ManagedPolicy.fromManagedPolicyArn(scope, `${id}-AWSLambdaBasicExecutionRole`, 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'),
             ],
             roleName: scope.resourceNameFormatter.format(`${id}-sfn-exec`, scope.props.resourceNameOptions?.iam),
         });
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -560,15 +557,15 @@ class IamManager {
      * @param stepFunctionArn the arn of the step function
      */
     createRoleForSqsToSfnPipe(id, scope, queueArn, stepFunctionArn) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('pipes.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
             description: `Role for ${id} Pipe`,
             roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
         });
         role.addToPolicy(this.statementForPollQueue([queueArn]));
         role.addToPolicy(this.statementForStartExecution([stepFunctionArn]));
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -579,15 +576,15 @@ class IamManager {
      * @param lambdaArn the arn of the lambda function
      */
     createRoleForSqsToLambdaPipe(id, scope, queueArn, lambdaArn) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('pipes.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
             description: `Role for ${id} Pipe`,
             roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
         });
         role.addToPolicy(this.statementForPollQueue([queueArn]));
         role.addToPolicy(this.statementForInvokeLambda([lambdaArn]));
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
     /**
@@ -598,16 +595,15 @@ class IamManager {
      * @param lambdaFunctionArn the arn of the lambda function
      */
     createRoleForDynamoDbToLambdaPipe(id, scope, dynamoDbStreamArn, lambdaFunctionArn) {
-        const role = new aws_iam_1.Role(scope, `${id}`, {
-            assumedBy: new aws_iam_1.ServicePrincipal('pipes.amazonaws.com'),
+        const role = new Role(scope, `${id}`, {
+            assumedBy: new ServicePrincipal('pipes.amazonaws.com'),
             description: `Role for ${id} Pipe`,
             roleName: scope.resourceNameFormatter.format(`${id}-pipe`, scope.props.resourceNameOptions?.iam),
         });
         role.addToPolicy(this.statementFordynamoDbStream([dynamoDbStreamArn]));
         role.addToPolicy(this.statementForInvokeLambda([lambdaFunctionArn]));
-        (0, utils_1.createCfnOutput)(`${id}Arn`, scope, role.roleArn);
-        (0, utils_1.createCfnOutput)(`${id}Name`, scope, role.roleName);
+        createCfnOutput(`${id}Arn`, scope, role.roleArn);
+        createCfnOutput(`${id}Name`, scope, role.roleName);
         return role;
     }
 }
-exports.IamManager = IamManager;

package/dist/src/lib/aws/services/index.d.ts

@@ -1,28 +1,28 @@
-export * from './api-gateway';
-export * from './appconfig';
-export * from './certificate-manager';
-export * from './cloudfront';
-export * from './cloudtrail';
-export * from './cloudwatch';
-export * from './codebuild';
-export * from './constants';
-export * from './dynamodb';
-export * from './elastic-container-registry';
-export * from './elastic-container-service';
-export * from './elastic-file-system';
-export * from './elastic-kubernetes-service';
-export * from './elasticache';
-export * from './eventbridge';
-export * from './evidently';
-export * from './identity-access-management';
-export * from './key-management-service';
-export * from './lambda';
-export * from './route53';
-export * from './secrets-manager';
-export * from './simple-notification-service';
-export * from './simple-queue-service';
-export * from './simple-storage-service';
-export * from './step-function';
-export * from './systems-manager';
-export * from './virtual-private-cloud';
-export * from './web-application-firewall';
+export * from './api-gateway/index.js';
+export * from './appconfig/index.js';
+export * from './certificate-manager/index.js';
+export * from './cloudfront/index.js';
+export * from './cloudtrail/index.js';
+export * from './cloudwatch/index.js';
+export * from './codebuild/index.js';
+export * from './constants.js';
+export * from './dynamodb/index.js';
+export * from './elastic-container-registry/index.js';
+export * from './elastic-container-service/index.js';
+export * from './elastic-file-system/index.js';
+export * from './elastic-kubernetes-service/index.js';
+export * from './elasticache/index.js';
+export * from './eventbridge/index.js';
+export * from './evidently/index.js';
+export * from './identity-access-management/index.js';
+export * from './key-management-service/index.js';
+export * from './lambda/index.js';
+export * from './route53/index.js';
+export * from './secrets-manager/index.js';
+export * from './simple-notification-service/index.js';
+export * from './simple-queue-service/index.js';
+export * from './simple-storage-service/index.js';
+export * from './step-function/index.js';
+export * from './systems-manager/index.js';
+export * from './virtual-private-cloud/index.js';
+export * from './web-application-firewall/index.js';