@intentius/chant-lexicon-aws 0.124.51 → 0.124.54

package/src/testdata/indexed/identity.listing.json

@@ -0,0 +1,65 @@
+{
+  "listing": "v1",
+  "source": { "name": "behold-lister", "version": "0.0.0-fixture" },
+  "scope": {
+    "substrate": "aws",
+    "scopeId": "000000000000",
+    "locations": ["us-east-1"],
+    "types": ["AWS::EC2::Instance", "AWS::IAM::Role", "AWS::S3::Bucket", "AWS::SQS::Queue"]
+  },
+  "startedAt": "2026-10-26T09:00:00.000Z",
+  "completedAt": "2026-10-26T09:00:03.000Z",
+  "resources": [
+    {
+      "listedType": "AWS::S3::Bucket",
+      "location": "us-east-1",
+      "nativeId": "cli-made-assets",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:s3:::cli-made-assets" }, { "kind": "import-id", "value": "cli-made-assets" }],
+      "tags": {},
+      "properties": { "BucketName": "cli-made-assets", "Arn": "arn:aws:s3:::cli-made-assets" },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::IAM::Role",
+      "location": "global",
+      "nativeId": "cli-made-role",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:iam::000000000000:role/cli-made-role" }, { "kind": "import-id", "value": "cli-made-role" }],
+      "tags": {},
+      "properties": {
+        "RoleName": "cli-made-role",
+        "Arn": "arn:aws:iam::000000000000:role/cli-made-role",
+        "AssumeRolePolicyDocument": { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" }, "Action": "sts:AssumeRole" }] }
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::SQS::Queue",
+      "location": "us-east-1",
+      "nativeId": "http://sqs.us-east-1.localhost.localstack.cloud:4566/000000000000/cli-made-queue",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:sqs:us-east-1:000000000000:cli-made-queue" }],
+      "tags": {},
+      "properties": {
+        "QueueName": "cli-made-queue",
+        "QueueUrl": "http://sqs.us-east-1.localhost.localstack.cloud:4566/000000000000/cli-made-queue",
+        "Arn": "arn:aws:sqs:us-east-1:000000000000:cli-made-queue"
+      },
+      "observedAt": "2026-10-26T09:00:02.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Instance",
+      "location": "us-east-1",
+      "nativeId": "i-0a1b2c3d4e5f60718",
+      "cloudIds": [{ "kind": "import-id", "value": "i-0a1b2c3d4e5f60718" }],
+      "tags": {},
+      "properties": { "InstanceId": "i-0a1b2c3d4e5f60718", "InstanceType": "t3.micro", "ImageId": "ami-0abcdef1234567890" },
+      "observedAt": "2026-10-26T09:00:02.000Z"
+    }
+  ],
+  "coverage": [
+    { "listedType": "AWS::EC2::Instance", "location": "us-east-1", "verdict": "listed" },
+    { "listedType": "AWS::IAM::Role", "location": "global", "verdict": "listed" },
+    { "listedType": "AWS::S3::Bucket", "location": "us-east-1", "verdict": "listed" },
+    { "listedType": "AWS::SQS::Queue", "location": "us-east-1", "verdict": "listed" }
+  ],
+  "notes": []
+}

package/src/testdata/indexed/import.listing.json

@@ -0,0 +1,126 @@
+{
+  "listing": "v1",
+  "source": { "name": "behold-lister", "version": "0.0.0-fixture" },
+  "scope": {
+    "substrate": "aws",
+    "scopeId": "000000000000",
+    "locations": ["us-east-1"],
+    "types": "*"
+  },
+  "startedAt": "2026-10-26T10:00:00.000Z",
+  "completedAt": "2026-10-26T10:00:04.000Z",
+  "resources": [
+    {
+      "listedType": "AWS::EC2::VPC",
+      "location": "us-east-1",
+      "nativeId": "vpc-0imp",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:ec2:us-east-1:000000000000:vpc/vpc-0imp" }, { "kind": "import-id", "value": "vpc-0imp" }],
+      "tags": { "Name": "shop", "aws:cloudformation:stack-name": "old-stack" },
+      "properties": {
+        "VpcId": "vpc-0imp",
+        "CidrBlock": "10.40.0.0/16",
+        "EnableDnsSupport": true,
+        "Tags": [{ "Key": "Name", "Value": "shop" }, { "Key": "aws:cloudformation:stack-name", "Value": "old-stack" }]
+      },
+      "observedAt": "2026-10-26T10:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Subnet",
+      "location": "us-east-1",
+      "nativeId": "subnet-0imp",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0imp" }, { "kind": "import-id", "value": "subnet-0imp" }],
+      "tags": { "Name": "shop-a" },
+      "properties": {
+        "SubnetId": "subnet-0imp",
+        "VpcId": "vpc-0imp",
+        "CidrBlock": "10.40.1.0/24",
+        "AvailabilityZone": "us-east-1a",
+        "Tags": [{ "Key": "Name", "Value": "shop-a" }]
+      },
+      "observedAt": "2026-10-26T10:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::SecurityGroup",
+      "location": "us-east-1",
+      "nativeId": "sg-0imp",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:ec2:us-east-1:000000000000:security-group/sg-0imp" }, { "kind": "import-id", "value": "sg-0imp" }],
+      "tags": {},
+      "properties": {
+        "GroupId": "sg-0imp",
+        "GroupDescription": "shop web",
+        "VpcId": "vpc-0imp"
+      },
+      "observedAt": "2026-10-26T10:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::IAM::Role",
+      "location": "global",
+      "nativeId": "imp-task-role",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:iam::000000000000:role/imp-task-role" }, { "kind": "import-id", "value": "imp-task-role" }],
+      "tags": {},
+      "properties": {
+        "RoleName": "imp-task-role",
+        "Arn": "arn:aws:iam::000000000000:role/imp-task-role",
+        "RoleId": "AROAIMPTASKROLE00000",
+        "AssumeRolePolicyDocument": { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Principal": { "Service": "ecs-tasks.amazonaws.com" }, "Action": "sts:AssumeRole" }] }
+      },
+      "observedAt": "2026-10-26T10:00:02.000Z"
+    },
+    {
+      "listedType": "AWS::ECS::TaskDefinition",
+      "location": "us-east-1",
+      "nativeId": "arn:aws:ecs:us-east-1:000000000000:task-definition/imp:1",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:ecs:us-east-1:000000000000:task-definition/imp:1" }],
+      "tags": {},
+      "properties": {
+        "TaskDefinitionArn": "arn:aws:ecs:us-east-1:000000000000:task-definition/imp:1",
+        "Family": "imp",
+        "Cpu": "256",
+        "Memory": "512",
+        "TaskRoleArn": "arn:aws:iam::000000000000:role/imp-task-role"
+      },
+      "observedAt": "2026-10-26T10:00:02.000Z"
+    },
+    {
+      "listedType": "AWS::RDS::DBInstance",
+      "location": "us-east-1",
+      "nativeId": "imp-db",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:rds:us-east-1:000000000000:db:imp-db" }, { "kind": "import-id", "value": "imp-db" }],
+      "tags": {},
+      "properties": {
+        "DBInstanceIdentifier": "imp-db",
+        "DBInstanceArn": "arn:aws:rds:us-east-1:000000000000:db:imp-db",
+        "DBInstanceClass": "db.t3.micro",
+        "Engine": "postgres",
+        "MasterUsername": "app",
+        "MasterUserPassword": "[REDACTED]",
+        "Endpoint": { "Address": "imp-db.local", "Port": "5432" }
+      },
+      "observedAt": "2026-10-26T10:00:03.000Z"
+    },
+    {
+      "listedType": "AWS::S3::Bucket",
+      "location": "us-east-1",
+      "nativeId": "imp-assets",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:s3:::imp-assets" }, { "kind": "import-id", "value": "imp-assets" }],
+      "tags": { "team": "shop" },
+      "properties": {
+        "BucketName": "imp-assets",
+        "Arn": "arn:aws:s3:::imp-assets",
+        "Tags": [{ "Key": "team", "Value": "shop" }]
+      },
+      "observedAt": "2026-10-26T10:00:03.000Z"
+    },
+    {
+      "listedType": "AWS::Example::NotGenerated",
+      "location": "us-east-1",
+      "nativeId": "x-1",
+      "cloudIds": [],
+      "tags": {},
+      "properties": { "Name": "x-1" },
+      "observedAt": "2026-10-26T10:00:03.000Z"
+    }
+  ],
+  "coverage": [{ "listedType": "*", "location": "*", "verdict": "listed" }],
+  "notes": []
+}

package/src/testdata/indexed/listing.json

@@ -0,0 +1,69 @@
+{
+  "listing": "v1",
+  "source": { "name": "behold-lister", "version": "0.0.0-fixture" },
+  "scope": { "substrate": "aws", "scopeId": "000000000000", "locations": ["us-east-1"], "types": ["AWS::EC2::Volume", "AWS::IoTFleetHub::Application", "AWS::RDS::DBInstance", "AWS::S3::Bucket"] },
+  "startedAt": "2026-10-26T09:00:00.000Z",
+  "completedAt": "2026-10-26T09:00:04.000Z",
+  "resources": [
+    {
+      "listedType": "AWS::RDS::DBInstance",
+      "location": "us-east-1",
+      "nativeId": "orders-db",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:rds:us-east-1:000000000000:db:orders-db" }, { "kind": "import-id", "value": "orders-db" }],
+      "tags": { "tofu-estate": "shop" },
+      "properties": {
+        "DBInstanceIdentifier": "orders-db",
+        "DBInstanceArn": "arn:aws:rds:us-east-1:000000000000:db:orders-db",
+        "Engine": "postgres",
+        "StorageEncrypted": true,
+        "MasterUserPassword": "<masked>",
+        "Tags": [{ "Key": "tofu-estate", "Value": "shop" }]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z",
+      "facts": { "markers": { "owner": "shop", "encoding": "escaped", "source": "live" }, "cloudIds": [{ "kind": "arn", "value": "arn:aws:rds:us-east-1:000000000000:db:orders-db" }, { "kind": "import-id", "value": "orders-db" }], "observedAt": "2026-10-26T09:00:01.000Z" }
+    },
+    {
+      "listedType": "AWS::RDS::DBInstance",
+      "location": "us-east-1",
+      "nativeId": "reports-db",
+      "cloudIds": [{ "kind": "import-id", "value": "reports-db" }],
+      "tags": {},
+      "properties": { "DBInstanceIdentifier": "reports-db", "Engine": "postgres", "StorageEncrypted": false },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Volume",
+      "location": "us-east-1",
+      "nativeId": "vol-0a1b2c3d4e5f60718",
+      "cloudIds": [{ "kind": "import-id", "value": "vol-0a1b2c3d4e5f60718" }],
+      "tags": {},
+      "properties": { "VolumeId": "vol-0a1b2c3d4e5f60718", "AvailabilityZone": "us-east-1a", "Size": 20, "Encrypted": true },
+      "observedAt": "2026-10-26T09:00:02.000Z"
+    },
+    {
+      "listedType": "AWS::S3::Bucket",
+      "location": "us-east-1",
+      "nativeId": "shop-assets",
+      "cloudIds": [{ "kind": "arn", "value": "arn:aws:s3:::shop-assets" }, { "kind": "import-id", "value": "shop-assets" }],
+      "tags": {},
+      "properties": { "BucketName": "shop-assets", "Arn": "arn:aws:s3:::shop-assets" },
+      "observedAt": "2026-10-26T09:00:03.000Z"
+    },
+    {
+      "listedType": "AWS::IoTFleetHub::Application",
+      "location": "us-east-1",
+      "nativeId": "fleet-console",
+      "cloudIds": [{ "kind": "import-id", "value": "fleet-console" }],
+      "tags": {},
+      "properties": { "ApplicationName": "fleet-console", "RoleArn": "arn:aws:iam::000000000000:role/fleet" },
+      "observedAt": "2026-10-26T09:00:03.000Z"
+    }
+  ],
+  "coverage": [
+    { "listedType": "AWS::EC2::Volume", "location": "us-east-1", "verdict": "listed" },
+    { "listedType": "AWS::IoTFleetHub::Application", "location": "us-east-1", "verdict": "listed" },
+    { "listedType": "AWS::RDS::DBInstance", "location": "us-east-1", "verdict": "listed" },
+    { "listedType": "AWS::S3::Bucket", "location": "us-east-1", "verdict": "listed" }
+  ],
+  "notes": []
+}

package/src/testdata/indexed/topology.listing.json

@@ -0,0 +1,350 @@
+{
+  "listing": "v1",
+  "source": {
+    "name": "behold-lister",
+    "version": "0.0.0-fixture"
+  },
+  "scope": {
+    "substrate": "aws",
+    "scopeId": "000000000000",
+    "locations": [
+      "us-east-1"
+    ],
+    "types": [
+      "AWS::EC2::Instance",
+      "AWS::EC2::InternetGateway",
+      "AWS::EC2::Route",
+      "AWS::EC2::RouteTable",
+      "AWS::EC2::SecurityGroup",
+      "AWS::EC2::Subnet",
+      "AWS::EC2::SubnetRouteTableAssociation",
+      "AWS::EC2::VPC",
+      "AWS::EC2::VPCGatewayAttachment",
+      "AWS::EKS::Cluster"
+    ]
+  },
+  "startedAt": "2026-10-26T09:00:00.000Z",
+  "completedAt": "2026-10-26T09:00:06.000Z",
+  "resources": [
+    {
+      "listedType": "AWS::EC2::VPC",
+      "location": "us-east-1",
+      "nativeId": "vpc-0a1",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "vpc-0a1"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "VpcId": "vpc-0a1",
+        "CidrBlock": "10.0.0.0/16"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Subnet",
+      "location": "us-east-1",
+      "nativeId": "subnet-0pub",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "subnet-0pub"
+        }
+      ],
+      "tags": {
+        "kubernetes.io/cluster/shop": "shared"
+      },
+      "properties": {
+        "SubnetId": "subnet-0pub",
+        "VpcId": "vpc-0a1",
+        "CidrBlock": "10.0.1.0/24",
+        "AvailabilityZone": "us-east-1a",
+        "Tags": [
+          {
+            "Key": "kubernetes.io/cluster/shop",
+            "Value": "shared"
+          }
+        ]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Subnet",
+      "location": "us-east-1",
+      "nativeId": "subnet-0priv",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "subnet-0priv"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "SubnetId": "subnet-0priv",
+        "VpcId": "vpc-0a1",
+        "CidrBlock": "10.0.2.0/24",
+        "AvailabilityZone": "us-east-1a"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::InternetGateway",
+      "location": "us-east-1",
+      "nativeId": "igw-0a1",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "igw-0a1"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "InternetGatewayId": "igw-0a1"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::VPCGatewayAttachment",
+      "location": "us-east-1",
+      "nativeId": "IGW|vpc-0a1",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "IGW|vpc-0a1"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "VpcId": "vpc-0a1",
+        "InternetGatewayId": "igw-0a1"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::RouteTable",
+      "location": "us-east-1",
+      "nativeId": "rtb-0pub",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "rtb-0pub"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "RouteTableId": "rtb-0pub",
+        "VpcId": "vpc-0a1"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Route",
+      "location": "us-east-1",
+      "nativeId": "rtb-0pub|0.0.0.0/0",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "rtb-0pub|0.0.0.0/0"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "RouteTableId": "rtb-0pub",
+        "DestinationCidrBlock": "0.0.0.0/0",
+        "GatewayId": "igw-0a1"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::SubnetRouteTableAssociation",
+      "location": "us-east-1",
+      "nativeId": "rtbassoc-0pub",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "rtbassoc-0pub"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "Id": "rtbassoc-0pub",
+        "SubnetId": "subnet-0pub",
+        "RouteTableId": "rtb-0pub"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::SecurityGroup",
+      "location": "us-east-1",
+      "nativeId": "sg-0web",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "sg-0web"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "GroupId": "sg-0web",
+        "GroupName": "web",
+        "GroupDescription": "web",
+        "VpcId": "vpc-0a1",
+        "SecurityGroupIngress": [
+          {
+            "IpProtocol": "tcp",
+            "FromPort": 22,
+            "ToPort": 22,
+            "CidrIp": "0.0.0.0/0"
+          }
+        ]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::SecurityGroup",
+      "location": "us-east-1",
+      "nativeId": "sg-0db",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "sg-0db"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "GroupId": "sg-0db",
+        "GroupName": "db",
+        "GroupDescription": "db",
+        "VpcId": "vpc-0a1",
+        "SecurityGroupIngress": [
+          {
+            "IpProtocol": "tcp",
+            "FromPort": 5432,
+            "ToPort": 5432,
+            "SourceSecurityGroupId": "sg-0web"
+          }
+        ]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Instance",
+      "location": "us-east-1",
+      "nativeId": "i-0web",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "i-0web"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "InstanceId": "i-0web",
+        "ImageId": "ami-0abc",
+        "InstanceType": "t3.micro",
+        "SubnetId": "subnet-0pub",
+        "SecurityGroupIds": [
+          "sg-0web"
+        ]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EC2::Instance",
+      "location": "us-east-1",
+      "nativeId": "i-0batch",
+      "cloudIds": [
+        {
+          "kind": "import-id",
+          "value": "i-0batch"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "InstanceId": "i-0batch",
+        "ImageId": "ami-0abc",
+        "InstanceType": "t3.micro",
+        "SubnetId": "subnet-0priv",
+        "SecurityGroupIds": [
+          "sg-0web"
+        ]
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    },
+    {
+      "listedType": "AWS::EKS::Cluster",
+      "location": "us-east-1",
+      "nativeId": "shop",
+      "cloudIds": [
+        {
+          "kind": "arn",
+          "value": "arn:aws:eks:us-east-1:000000000000:cluster/shop"
+        },
+        {
+          "kind": "import-id",
+          "value": "shop"
+        }
+      ],
+      "tags": {},
+      "properties": {
+        "Name": "shop"
+      },
+      "observedAt": "2026-10-26T09:00:01.000Z"
+    }
+  ],
+  "coverage": [
+    {
+      "listedType": "AWS::EC2::Instance",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::InternetGateway",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::Route",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::RouteTable",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::SecurityGroup",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::Subnet",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::SubnetRouteTableAssociation",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::VPC",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EC2::VPCGatewayAttachment",
+      "location": "us-east-1",
+      "verdict": "listed"
+    },
+    {
+      "listedType": "AWS::EKS::Cluster",
+      "location": "us-east-1",
+      "verdict": "listed"
+    }
+  ],
+  "notes": []
+}