@gugananuvem/aws-local-simulator 1.0.34 → 1.0.39

package/src/utils/policy-cache.js

@@ -0,0 +1,215 @@
+/**
+ * Policy Cache - TTL configurable
+ * 
+ * Cacheia resultados de avaliação de políticas para evitar
+ * re-avaliação desnecessária (default: 60 segundos)
+ */
+
+const logger = require('./logger');
+
+class PolicyCache {
+  constructor(ttl = 60000) {
+    this.cache = new Map();
+    this.ttl = ttl; // milliseconds
+    this.hits = 0;
+    this.misses = 0;
+    this.stats = {
+      totalGets: 0,
+      totalSets: 0,
+      totalDeletes: 0,
+      averageHitRate: 0
+    };
+
+    // Cleanup de entries expiradas a cada 30 segundos
+    this.cleanupInterval = setInterval(() => this.cleanup(), 30000);
+  }
+
+  /**
+   * Get com verificação de expiração
+   */
+  get(key) {
+    this.stats.totalGets++;
+    
+    const entry = this.cache.get(key);
+    
+    if (!entry) {
+      this.misses++;
+      this.updateHitRate();
+      return null;
+    }
+
+    // Verificar se expirou
+    if (entry.expiresAt < Date.now()) {
+      this.cache.delete(key);
+      this.misses++;
+      this.updateHitRate();
+      return null;
+    }
+
+    this.hits++;
+    this.updateHitRate();
+    entry.lastAccessed = Date.now();
+    entry.accessCount++;
+
+    logger.debug(`Cache HIT: ${key}`);
+    return entry.value;
+  }
+
+  /**
+   * Set com TTL automático
+   */
+  set(key, value) {
+    this.stats.totalSets++;
+
+    const now = Date.now();
+    this.cache.set(key, {
+      value,
+      createdAt: now,
+      expiresAt: now + this.ttl,
+      lastAccessed: now,
+      accessCount: 0
+    });
+
+    logger.debug(`Cache SET: ${key} (expires in ${this.ttl}ms)`);
+  }
+
+  /**
+   * Invalidar entrada específica
+   */
+  delete(key) {
+    this.stats.totalDeletes++;
+    this.cache.delete(key);
+    logger.debug(`Cache DELETE: ${key}`);
+  }
+
+  /**
+   * Invalidar todas entries de um padrão
+   * Ex: "123456789012|*" → deleta todas ações desse principal
+   */
+  deletePattern(pattern) {
+    const regex = new RegExp(`^${pattern.replace(/\*/g, '.*')}$`);
+    let deleted = 0;
+
+    for (const key of this.cache.keys()) {
+      if (regex.test(key)) {
+        this.cache.delete(key);
+        deleted++;
+      }
+    }
+
+    logger.debug(`Cache DELETE PATTERN: ${pattern} (deleted ${deleted} entries)`);
+    return deleted;
+  }
+
+  /**
+   * Clear tudo
+   */
+  clear() {
+    const size = this.cache.size;
+    this.cache.clear();
+    logger.debug(`Cache CLEAR: removed ${size} entries`);
+  }
+
+  /**
+   * Cleanup de entries expiradas
+   */
+  cleanup() {
+    const now = Date.now();
+    let expired = 0;
+
+    for (const [key, entry] of this.cache.entries()) {
+      if (entry.expiresAt < now) {
+        this.cache.delete(key);
+        expired++;
+      }
+    }
+
+    if (expired > 0) {
+      logger.debug(`Cache CLEANUP: removed ${expired} expired entries`);
+    }
+  }
+
+  /**
+   * Retorna estatísticas do cache
+   */
+  getStats() {
+    this.updateHitRate();
+
+    return {
+      size: this.cache.size,
+      hits: this.hits,
+      misses: this.misses,
+      totalRequests: this.hits + this.misses,
+      hitRate: this.stats.averageHitRate.toFixed(2) + '%',
+      ttl: this.ttl,
+      stats: {
+        ...this.stats,
+        hits: this.hits,
+        misses: this.misses
+      }
+    };
+  }
+
+  /**
+   * Atualizar hit rate
+   */
+  updateHitRate() {
+    const total = this.hits + this.misses;
+    if (total > 0) {
+      this.stats.averageHitRate = (this.hits / total) * 100;
+    }
+  }
+
+  /**
+   * Set TTL
+   */
+  setTTL(ttl) {
+    this.ttl = ttl;
+    logger.info(`Cache TTL updated to ${ttl}ms`);
+  }
+
+  /**
+   * Get TTL
+   */
+  getTTL() {
+    return this.ttl;
+  }
+
+  /**
+   * Destruir e parar cleanup
+   */
+  destroy() {
+    clearInterval(this.cleanupInterval);
+    this.cache.clear();
+    logger.debug('Cache destroyed');
+  }
+
+  /**
+   * Invalidar cache de um principal
+   * Útil quando uma role tem suas políticas atualizadas
+   */
+  invalidatePrincipal(principal) {
+    const pattern = `${principal}|*`;
+    return this.deletePattern(pattern);
+  }
+
+  /**
+   * Invalidar cache de uma ação
+   * Útil quando uma SCP afetando uma ação é modificada
+   */
+  invalidateAction(action) {
+    const pattern = `*|${action}|*`;
+    return this.deletePattern(pattern);
+  }
+
+  /**
+   * Invalidar cache de um recurso
+   * Útil quando permissões em um recurso mudam
+   */
+  invalidateResource(resource) {
+    const pattern = `*|*|${resource}`;
+    return this.deletePattern(pattern);
+  }
+}
+
+module.exports = PolicyCache;

package/aws-config

@@ -1,154 +0,0 @@
-// lambda/layer/utils/aws-config.js
-const { DynamoDBClient } = require('@aws-sdk/client-dynamodb');
-const { DynamoDBDocumentClient } = require('@aws-sdk/lib-dynamodb');
-const { S3Client } = require('@aws-sdk/client-s3');
-const { SQSClient } = require('@aws-sdk/client-sqs');
-const { LambdaClient } = require('@aws-sdk/client-lambda');
-const { CognitoIdentityProviderClient } = require("@aws-sdk/client-cognito-identity-provider");
-
-// Detecta ambiente local
-const isLocal = process.env.IS_LOCAL === 'true' ||
-  process.env.NODE_ENV === 'development' ||
-  process.env.AWS_SAM_LOCAL === 'true';
-
-const isLocalS3 = process.env.IS_LOCAL_S3 === 'true'
-const isLocalSQS = process.env.IS_LOCAL_SQS === 'true'
-const isLocalDynamoDB = process.env.IS_LOCAL_DYNAMODB === 'true'
-const isLocalLambda = process.env.IS_LOCAL_LAMBDA === 'true'
-const isLocalCognito = process.env.IS_LOCAL_COGNITO === 'true'
-
-// Endpoints locais (configuráveis via variáveis de ambiente)
-const localEndpoints = {
-  dynamodb: process.env.DYNAMODB_ENDPOINT || 'http://localhost:8000',
-  s3: process.env.S3_ENDPOINT || 'http://localhost:4566',
-  sqs: process.env.SQS_ENDPOINT || 'http://localhost:9324',
-  lambda: process.env.LAMBDA_ENDPOINT || 'http://localhost:3001',
-  cognito: process.env.LOCAL_COGNITO || 'http://localhost:9229'
-};
-
-// Credenciais para ambiente local (não são validadas)
-const localCredentials = {
-  accessKeyId: process.env.AWS_ACCESS_KEY_ID || 'local',
-  secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || 'local',
-  sessionToken: process.env.AWS_SESSION_TOKEN || undefined
-};
-
-// Configuração base para todos os clients
-const baseConfig = {
-  region: process.env.AWS_REGION || 'us-east-1',
-  credentials: isLocal ? localCredentials : undefined
-};
-
-// ============ DynamoDB Client ============
-const dynamoDBClient = new DynamoDBClient({
-  ...baseConfig,
-  endpoint: isLocalDynamoDB ? localEndpoints.dynamodb : undefined,
-  region: process.env.AWS_REGION || "us-east-1"
-});
-
-const dynamoDBDocClient = DynamoDBDocumentClient.from(dynamoDBClient, {
-  marshallOptions: {
-    removeUndefinedValues: true,
-    convertEmptyValues: false
-  },
-  unmarshallOptions: {
-    wrapNumbers: false
-  }
-});
-
-const cognitoClient = new CognitoIdentityProviderClient({
-    ...baseConfig,
-    endpoint: isLocalCognito ? localEndpoints.cognito : undefined,
-    region: process.env.AWS_REGION || 'us-east-1'
-});
-
-// ============ S3 Client ============
-const s3Client = new S3Client({
-  ...baseConfig,
-  endpoint: isLocalS3 ? localEndpoints.s3 : undefined,
-  forcePathStyle: true, // Necessário para S3 local (LocalStack, MinIO, etc)
-  // Para S3 real, não usar forcePathStyle
-  ...(isLocalS3 ? {} : { forcePathStyle: false })
-});
-
-// ============ SQS Client ============
-const sqsClient = new SQSClient({
-  ...baseConfig,
-  endpoint: isLocalSQS ? localEndpoints.sqs : undefined
-});
-
-// ============ Lambda Client ============
-const lambdaClient = new LambdaClient({
-  ...baseConfig,
-  endpoint: isLocalLambda ? localEndpoints.lambda : undefined
-});
-
-// Log de configuração (apenas em desenvolvimento)
-if (isLocalDynamoDB || isLocalS3 || isLocalSQS || isLocalLambda) {
-  console.log('🔧 Ambiente LOCAL detectado:');
-  console.log(`   DynamoDB: ${localEndpoints.dynamodb}`);
-  console.log(`   S3: ${localEndpoints.s3} (forcePathStyle: true)`);
-  console.log(`   SQS: ${localEndpoints.sqs}`);
-  console.log(`   Lambda: ${localEndpoints.lambda}`);
-  console.log(`   Region: ${baseConfig.region}`);
-}
-if (isLocalDynamoDB || isLocalS3 || isLocalSQS || isLocalLambda) {
-  console.log('🔧 Ambiente LOCAL detectado:');
-  console.log(`   Region: ${baseConfig.region}`);
-}
-
-if (isLocalDynamoDB) {
-  console.log(`   DynamoDB: ${localEndpoints.dynamodb}`);
-}
-if (isLocalS3) {
-  console.log(`   S3: ${localEndpoints.s3} (forcePathStyle: true)`);
-}
-
-if (isLocalSQS) {
-  console.log(`   SQS: ${localEndpoints.sqs}`);
-}
-
-if (isLocalLambda) {
-  console.log(`   Lambda: ${localEndpoints.lambda}`);
-}
-
-if (isLocalCognito){
-  console.log(`   Cognito: ${localEndpoints.cognito}`);
-}
-
-module.exports = {
-  // Clients
-  dynamoDB: dynamoDBDocClient,
-  cognitoClient,
-  dynamoDBClient,
-  s3: s3Client,
-  sqs: sqsClient,
-  lambda: lambdaClient,
-
-  // Utilitários
-  isLocal,
-  localEndpoints,
-
-  // Configuração
-  config: {
-    region: baseConfig.region,
-    isLocal,
-    endpoints: localEndpoints
-  },
-
-  // Função para criar clients customizados (útil para testes)
-  createS3Client: (customEndpoint) => {
-    return new S3Client({
-      ...baseConfig,
-      endpoint: customEndpoint || localEndpoints.s3,
-      forcePathStyle: true
-    });
-  },
-
-  createDynamoDBClient: (customEndpoint) => {
-    return new DynamoDBClient({
-      ...baseConfig,
-      endpoint: customEndpoint || localEndpoints.dynamodb
-    });
-  }
-};