@izara_project/izara-core-generate-service-code 1.0.68 → 1.0.70

package/src/emit/relationship/templates/GetRelationship_Main.ejs

@@ -66,7 +66,7 @@ import { consts as coreConsts } from '@izara_project/izara-core-library-core';
 export default async function getRelationship(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {

package/src/emit/relationship/templates/MoveRelationship_Main.ejs

@@ -69,7 +69,7 @@ import { consts as coreConsts } from '@izara_project/izara-core-library-core';
 export default async function moveRelationship(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {

package/src/emit/relationship/templates/UpdateRelationship_Main.ejs

@@ -62,7 +62,7 @@ const { PREFIX, TOPIC_NAME_GENERATE_CODE, TOPIC_NAME_GRAPH_HANDLER } = consts;
 export default async function updateRelationship(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {

package/src/emit/resource/emitResourceArtifacts.js

@@ -1,4 +1,4 @@
-import ejs from 'ejs';
+import ejsLib from 'ejs';
 import { readFile } from 'node:fs/promises';
 
 import {
@@ -92,7 +92,7 @@ export async function emitResourceArtifacts({
     renderLambdaRoleConfig(state),
     renderS3(state)
   ]);
-  return [
+  const artifacts = [
     {
       path: `${RESOURCE_ROOT}/generated-sns-in-sqs.yml`,
       content: normalizeYaml(inSqs)
@@ -106,18 +106,31 @@ export async function emitResourceArtifacts({
       content: normalizeYaml(dynamo)
     },
     {
-      path: `${RESOURCE_ROOT}/generated-s3.yml`,
-      content: normalizeYaml(s3)
+      path: `${APP_ROOT}/generate-shared-resource.yml`,
+      content: normalizeYaml(iam.iamContent)
     },
     {
-      path: `${APP_ROOT}/generate-shared-resource.yml`,
-      content: normalizeYaml(iam)
+      path: `${APP_ROOT}/role-name-config.yml`,
+      content: normalizeYaml(iam.roleNameConfigContent)
     },
     {
       path: `${INITIAL_SETUP_ROOT}/generatedLambdaRoleServiceConfig.js`,
       content: lambdaRoleConfig
     }
   ];
+  if (state.s3Buckets.length > 0) {
+    artifacts.push({
+      path: `${RESOURCE_ROOT}/generated-s3.yml`,
+      content: normalizeYaml(s3)
+    });
+  }
+  if (state.hasHttpApi) {
+    artifacts.push({
+      path: `${APP_ROOT}/cors.yml`,
+      content: renderCorsYaml()
+    });
+  }
+  return artifacts;
 }
 
 export const resourceArtifactPaths = [
@@ -126,7 +139,9 @@ export const resourceArtifactPaths = [
   `${RESOURCE_ROOT}/generated-dynamoDB-table.yml`,
   `${RESOURCE_ROOT}/generated-s3.yml`,
   `${APP_ROOT}/generate-shared-resource.yml`,
-  `${INITIAL_SETUP_ROOT}/generatedLambdaRoleServiceConfig.js`
+  `${APP_ROOT}/role-name-config.yml`,
+  `${INITIAL_SETUP_ROOT}/generatedLambdaRoleServiceConfig.js`,
+  `${APP_ROOT}/cors.yml`
 ];
 
 function createResourceState({ objects, relationships, flows }) {
@@ -134,62 +149,60 @@ function createResourceState({ objects, relationships, flows }) {
   const rbac = objects.some(hasRbacAddOn);
   const ownTopics = new Set(
     flows
-      .filter(flow => includesEvent(flow, 'ownTopic'))
-      .map(flow => upperFirst(flow.flowTag))
+      .filter((flow) => includesEvent(flow, 'ownTopic'))
+      .map((flow) => upperFirst(flow.flowTag))
   );
   const sqsQueues = new Set([
     ...LEGACY_PROCESS_QUEUES,
     ...flows
-      .filter(flow => includesEvent(flow, 'extTopic'))
-      .map(flow => `Process${upperFirst(flow.flowTag)}HdrSqs`)
+      .filter((flow) => includesEvent(flow, 'extTopic'))
+      .map((flow) => `Process${upperFirst(flow.flowTag)}HdrSqs`)
   ]);
-  flowExtTopicSteps(flows).forEach(({ flowTag, stepName }) =>
-    sqsQueues.add(`${flowTag}${stepName}HdrSqs`)
-  );
-  flows
-    .filter(flow => includesEvent(flow, 's3'))
-    .forEach(flow => {
-      const tag = upperFirst(flow.flowTag);
-      sqsQueues.add(`${tag}CreatePreSignUrlHdrSqs`);
-      sqsQueues.add(`${tag}ReservedLimitHdrSqs`);
-      sqsQueues.add(`${tag}ConfirmAfterUploadHdrSqs`);
-    });
+  for (const { flowTag, stepName } of flowExtTopicSteps(flows)) {
+    sqsQueues.add(`${flowTag}${stepName}HdrSqs`);
+  }
+  for (const flow of flows.filter((flow) => includesEvent(flow, 's3'))) {
+    const tag = upperFirst(flow.flowTag);
+    sqsQueues.add(`${tag}CreatePreSignUrlHdrSqs`);
+    sqsQueues.add(`${tag}ReservedLimitHdrSqs`);
+    sqsQueues.add(`${tag}ConfirmAfterUploadHdrSqs`);
+  }
   const dsqQueues = new Set(
     flows
-      .filter(flow => includesEvent(flow, 'dsq'))
-      .map(flow => `${upperFirst(flow.flowTag)}HdrDsq`)
-  );
-  flowDsqSteps(flows).forEach(({ flowTag, stepName }) =>
-    dsqQueues.add(`${flowTag}${stepName}HdrDsq`)
+      .filter((flow) => includesEvent(flow, 'dsq'))
+      .map((flow) => `${upperFirst(flow.flowTag)}HdrDsq`)
   );
+  for (const { flowTag, stepName } of flowDsqSteps(flows)) {
+    dsqQueues.add(`${flowTag}${stepName}HdrDsq`);
+  }
   if (crud) {
-    CRUD_ACTIONS.forEach(action => ownTopics.add(action));
-    ['Create', 'Update', 'Delete'].forEach(action =>
-      sqsQueues.add(`${action}CompleteHdrSqs`)
-    );
+    for (const action of CRUD_ACTIONS) {
+      ownTopics.add(action);
+    }
+    for (const action of ['Create', 'Update', 'Delete']) {
+      sqsQueues.add(`${action}CompleteHdrSqs`);
+    }
   }
   if (relationships.length > 0) {
-    RELATIONSHIP_ACTIONS.forEach(action => {
+    for (const action of RELATIONSHIP_ACTIONS) {
       ownTopics.add(action);
       sqsQueues.add(`${action}CompleteHdrSqs`);
-    });
+    }
     dsqQueues.add('GetRelationshipHdrDsq');
   }
   if (rbac) {
-    RBAC_ACTIONS.forEach(action => {
+    for (const action of RBAC_ACTIONS) {
       ownTopics.add(action);
       sqsQueues.add(`Process${action}HdrSqs`);
-    });
-    objects
-      .filter(hasRbacAddOn)
-      .forEach(object => {
-        const flowTag = upperFirst(object.objectType) + 'RbacFlow';
-        ownTopics.add(flowTag);
-      });
+    }
+    for (const object of objects.filter(hasRbacAddOn)) {
+      const flowTag = upperFirst(object.objectType) + 'RbacFlow';
+      ownTopics.add(flowTag);
+    }
   }
   const beforeLogicalByAction = new Map();
   for (const flow of flows.filter(
-    flow => flow?.generatedCodeConfig?.codeHookTag === 'beforeLogical'
+    (flow) => flow?.generatedCodeConfig?.codeHookTag === 'beforeLogical'
   )) {
     const action = upperFirst(flow.generatedCodeConfig.generatedCodeTag);
     if (!action || !flow.flowTag) continue;
@@ -202,10 +215,10 @@ function createResourceState({ objects, relationships, flows }) {
   );
   const customRoles = [
     ...new Set([
-      ...supportedCustomFlows(flows).map(flow =>
+      ...supportedCustomFlows(flows).map((flow) =>
         customFlowRoleName(flow.flowTag)
       ),
-      ...generatedOwnTopicFlows(flows).map(flow =>
+      ...generatedOwnTopicFlows(flows).map((flow) =>
         customFlowRoleName(flow.flowTag)
       ),
       ...flowExtTopicSteps(flows).map(({ flow }) =>
@@ -217,21 +230,28 @@ function createResourceState({ objects, relationships, flows }) {
   const websocket = hasSystemWebSocket(flows, {
     includeRelationshipOwnTopic: true
   });
-  const webSocketRoles = new Set(websocket ? ['WebSocketMainRole'] : []);
+  const webSocketRoles = new Set();
+  if (websocket) {
+    webSocketRoles.add('WebSocketMainRole');
+  }
   if (crud) webSocketRoles.add('FlowObjectsRole');
   if (relationships.length > 0) webSocketRoles.add('FlowRelationshipRole');
   if (rbac) webSocketRoles.add('FlowRbacRole');
-  [...supportedCustomFlows(flows), ...generatedOwnTopicFlows(flows)]
-    .filter(
-      flow => includesEvent(flow, 'ownTopic') || includesEvent(flow, 's3')
-    )
-    .forEach(flow => webSocketRoles.add(customFlowRoleName(flow.flowTag)));
+  const filteredWsFlows = [
+    ...supportedCustomFlows(flows),
+    ...generatedOwnTopicFlows(flows)
+  ].filter(
+    (flow) => includesEvent(flow, 'ownTopic') || includesEvent(flow, 's3')
+  );
+  for (const flow of filteredWsFlows) {
+    webSocketRoles.add(customFlowRoleName(flow.flowTag));
+  }
   const outTopics = new Set([
     ...ownTopics,
     ...beforeLogical.map(({ action }) => action),
     ...flows
-      .filter(flow => flow?.outputTopic && upperFirst(flow.flowTag))
-      .map(flow => upperFirst(flow.flowTag))
+      .filter((flow) => flow?.outputTopic && upperFirst(flow.flowTag))
+      .map((flow) => upperFirst(flow.flowTag))
   ]);
   const objectTableNames = [...collectTables(objects).keys()];
   const relationshipTableNames = [...collectTables(relationships).keys()];
@@ -240,15 +260,46 @@ function createResourceState({ objects, relationships, flows }) {
     ...collectTables(relationships)
   ]);
   const externalDynamoTables = objects.flatMap(
-    object => object.externalDynamoResources ?? []
+    (object) => object.externalDynamoResources ?? []
   );
   const s3Buckets = flows
-    .filter(flow => includesEvent(flow, 's3') && flow.createBucket === true)
-    .map(flow => flow.bucketName)
+    .filter((flow) => includesEvent(flow, 's3') && flow.createBucket === true)
+    .map((flow) => flow.bucketName)
     .filter(Boolean);
+  const s3FlowTags = flows
+    .filter((flow) => includesEvent(flow, 's3'))
+    .map((flow) => upperFirst(flow.flowTag));
+  const s3Subscriptions = flows
+    .filter((flow) => includesEvent(flow, 's3'))
+    .map((flow) => {
+      const tag = upperFirst(flow.flowTag);
+      const topicName = flow.outputTopic
+        ? flow.outputTopic.startsWith('Out')
+          ? flow.outputTopic
+          : `Out${upperFirst(flow.outputTopic)}`
+        : flow.s3Subscription?.topicName || 'OutCreate';
+      const queueName =
+        flow.s3Subscription?.queueName || `${tag}ReservedLimitHdrSqs`;
+      const subscriptionName =
+        flow.s3Subscription?.subscriptionName ||
+        `Subscription${topicName}To${queueName}`;
+      return { subscriptionName, topicName, queueName };
+    });
+  const systemTables = [...SYSTEM_TABLES];
+  if (s3FlowTags.length > 0) {
+    systemTables.push('ReservedDataMain');
+  }
+  const hasHttpApi =
+    crud ||
+    relationships.length > 0 ||
+    rbac ||
+    flows.some((flow) => includesEvent(flow, 'lambdaSyncApi'));
   return {
     crud,
     rbac,
+    s3Subscriptions,
+    s3FlowTags,
+    hasHttpApi,
     relationships: relationships.length > 0,
     ownTopics: [...ownTopics].filter(Boolean).sort(),
     sqsQueues: [...sqsQueues].filter(Boolean).sort(),
@@ -260,9 +311,9 @@ function createResourceState({ objects, relationships, flows }) {
     webSocketSubscriptions: websocket
       ? [...outTopics]
           .filter(
-            topic =>
+            (topic) =>
               flows.some(
-                flow =>
+                (flow) =>
                   (flow?.outputTopic ||
                     (includesEvent(flow, 'ownTopic') &&
                       flow.initiateBy === 'user')) &&
@@ -279,16 +330,16 @@ function createResourceState({ objects, relationships, flows }) {
       tableName,
       ...keys
     })),
-    allTableNames: [...new Set([...SYSTEM_TABLES, ...tableMap.keys()])].sort(),
+    allTableNames: [...new Set([...systemTables, ...tableMap.keys()])].sort(),
     objectTableNames,
     relationshipTableNames,
     externalDynamoTables,
     objectTablesByType: new Map(
       objects
-        .map(object => [
+        .map((object) => [
           object.objectType,
           Object.values(object.storageResources ?? {}).find(
-            resource => resource?.storageType === 'dynamoDB'
+            (resource) => resource?.storageType === 'dynamoDB'
           )?.tableName
         ])
         .filter(([, tableName]) => tableName)
@@ -300,22 +351,25 @@ function createResourceState({ objects, relationships, flows }) {
 
 async function renderS3(state) {
   if (state.s3Buckets.length === 0) return 'Resources:';
-  const template = await readFile(new URL('S3Bucket_Yaml.ejs', TEMPLATE_URL), 'utf8');
+  const template = await readFile(
+    new URL('S3Bucket_Yaml.ejs', TEMPLATE_URL),
+    'utf8'
+  );
   const chunks = await Promise.all(
-    state.s3Buckets.map(bucketName => ejs.render(template, { bucketName }))
+    state.s3Buckets.map((bucketName) => ejsLib.render(template, { bucketName }))
   );
   return `Resources:\n${chunks.join('\n')}`;
 }
 
 async function renderInSqs(state) {
   const chunks = await Promise.all([
-    ...state.ownTopics.map(queueName =>
+    ...state.ownTopics.map((queueName) =>
       render('ResourceYaml.ejs', { queueName })
     ),
-    ...state.sqsQueues.map(queueName =>
+    ...state.sqsQueues.map((queueName) =>
       render('ResourceSqsYaml.ejs', { queueName })
     ),
-    ...state.dsqQueues.map(queueName =>
+    ...state.dsqQueues.map((queueName) =>
       render('ResourceSqsYaml.ejs', { queueName })
     ),
     ...state.beforeLogical.map(({ action, flowTags }) =>
@@ -332,17 +386,39 @@ async function renderInSqs(state) {
         ]
       : [])
   ]);
-  return `Resources:\n${chunks.join('\n')}\n${state.webSocketSubscriptions.map(renderWebSocketSubscription).join('\n')}`;
+  const webSocketSubscriptions = await Promise.all(
+    state.webSocketSubscriptions.map((topicName) =>
+      renderWebSocketSubscription(topicName)
+    )
+  );
+  const s3Subscriptions = await Promise.all(
+    (state.s3Subscriptions ?? []).map(
+      ({ subscriptionName, topicName, queueName }) =>
+        render('S3Subscription_Yaml.ejs', {
+          subscriptionName,
+          topicName,
+          queueName
+        })
+    )
+  );
+  const parts = [chunks.join('\n')];
+  if (webSocketSubscriptions.length > 0) {
+    parts.push(webSocketSubscriptions.join('\n'));
+  }
+  if (s3Subscriptions.length > 0) {
+    parts.push(s3Subscriptions.join('\n'));
+  }
+  return `Resources:\n${parts.join('\n')}`;
 }
 
 async function renderOut(state) {
-  return `Resources:\n${(await Promise.all(state.outTopics.map(topicName => render('FlowOut_Yaml.ejs', { topicName })))).join('\n')}`;
+  return `Resources:\n${(await Promise.all(state.outTopics.map((topicName) => render('FlowOut_Yaml.ejs', { topicName })))).join('\n')}`;
 }
 
 async function renderDynamo(state) {
   const [system, ...tables] = await Promise.all([
-    render('SystemDynamoDB_Yaml.ejs', {}),
-    ...state.tables.map(table => render('DynamoDBTable_Yaml.ejs', table))
+    render('SystemDynamoDB_Yaml.ejs', { hasS3: state.s3FlowTags.length > 0 }),
+    ...state.tables.map((table) => render('DynamoDBTable_Yaml.ejs', table))
   ]);
   return `${system}\n${tables.join('\n')}`;
 }
@@ -354,18 +430,22 @@ async function renderIam(state) {
   if (state.rbac) roles.push('FlowRbacRole');
   if (state.websocket) roles.push('WebSocketMainRole');
   roles.push(...state.customRoles);
-  return render('SharedResource_Yaml.ejs', {
-    roles: roles.sort().map(roleName => ({
-      roleName,
-      statements: roleStatements(state, roleName)
-    }))
-  });
+  const sortedRoles = roles.sort();
+  return {
+    iamContent: await render('SharedResource_Yaml.ejs', {
+      roles: sortedRoles.map((roleName) => ({
+        roleName,
+        statements: roleStatements(state, roleName)
+      }))
+    }),
+    roleNameConfigContent: renderRoleNameConfigYaml(sortedRoles)
+  };
 }
 
 async function renderLambdaRoleConfig(state) {
   const s3Flows = state.flows
-    .filter(flow => includesEvent(flow, 's3'))
-    .map(flow => ({
+    .filter((flow) => includesEvent(flow, 's3'))
+    .map((flow) => ({
       roleName: upperFirst(flow.flowTag)
     }));
   return render('GeneratedLambdaRoleServiceConfig.ejs', {
@@ -385,14 +465,10 @@ function roleStatements(state, roleName) {
       ]
     });
   }
-  addStatement(
-    statements,
-    dynamoActionsForRole(roleName),
-    [
-      ...dynamoArns(roleTableNames(state, roleName)),
-      ...externalDynamoArns(roleExternalDynamoTables(state, roleName))
-    ]
-  );
+  addStatement(statements, dynamoActionsForRole(roleName), [
+    ...dynamoArns(roleTableNames(state, roleName)),
+    ...externalDynamoArns(roleExternalDynamoTables(state, roleName))
+  ]);
   addStatement(
     statements,
     SQS_CONSUMER_ACTIONS,
@@ -452,13 +528,13 @@ function roleTableNames(state, roleName) {
       'LogicalResultsData'
     ];
   const flow = state.flows.find(
-    candidate => customFlowRoleName(candidate?.flowTag ?? '') === roleName
+    (candidate) => customFlowRoleName(candidate?.flowTag ?? '') === roleName
   );
   if (!flow) return [];
   const tables = [];
   if (includesEvent(flow, 'ownTopic') || includesEvent(flow, 's3'))
     tables.push('WebSocketTask');
-  if (includesEvent(flow, 's3')) tables.push('UserUploadRecords');
+  if (includesEvent(flow, 's3')) tables.push('UserUploadRecords', 'ReservedDataMain');
   if (flow.statusType === 'storedCache') {
     const object = state.objectTablesByType.get(flow.objType?.objectType);
     if (object) tables.push(object);
@@ -477,68 +553,91 @@ function dynamoActionsForRole(roleName) {
 }
 
 function roleQueueNames(state, roleName) {
-  if (roleName === 'ProcFindDataRole') return LEGACY_PROCESS_QUEUES;
-  if (roleName === 'WebSocketMainRole')
-    return state.websocket ? ['WebSocketCompleteHdrSqs'] : [];
-  if (roleName === 'FlowObjectsRole')
+  if (roleName === 'ProcFindDataRole') {
+    return LEGACY_PROCESS_QUEUES;
+  }
+  if (roleName === 'WebSocketMainRole') {
+    if (state.websocket) {
+      return ['WebSocketCompleteHdrSqs'];
+    }
+    return [];
+  }
+  if (roleName === 'FlowObjectsRole') {
     return [
-      ...CRUD_ACTIONS.map(action => `${action}HdrSqs`),
-      ...CRUD_ACTIONS.filter(action => action !== 'Get').map(
-        action => `${action}CompleteHdrSqs`
+      ...CRUD_ACTIONS.map((action) => `${action}HdrSqs`),
+      ...CRUD_ACTIONS.filter((action) => action !== 'Get').map(
+        (action) => `${action}CompleteHdrSqs`
       ),
       ...state.beforeLogical
         .filter(({ action }) => CRUD_ACTIONS.includes(action))
         .map(({ action }) => `${action}BeforeLogicalHdrSqs`)
     ];
-  if (roleName === 'FlowRelationshipRole')
+  }
+  if (roleName === 'FlowRelationshipRole') {
     return [
-      ...RELATIONSHIP_ACTIONS.flatMap(action => [
+      ...RELATIONSHIP_ACTIONS.flatMap((action) => [
         `${action}HdrSqs`,
         `${action}CompleteHdrSqs`
       ]),
       'GetRelationshipHdrDsq'
     ];
-  if (roleName === 'FlowRbacRole')
-    return RBAC_ACTIONS.flatMap(action => [
+  }
+  if (roleName === 'FlowRbacRole') {
+    return RBAC_ACTIONS.flatMap((action) => [
       `${action}HdrSqs`,
       `Process${action}HdrSqs`
     ]);
+  }
   const flow = state.flows.find(
-    candidate => customFlowRoleName(candidate?.flowTag ?? '') === roleName
+    (candidate) => customFlowRoleName(candidate?.flowTag ?? '') === roleName
   );
-  if (!flow) return [];
+  if (!flow) {
+    return [];
+  }
   const tag = upperFirst(flow.flowTag);
-  return [
-    ...(includesEvent(flow, 'extTopic') ? [`${tag}HdrSqs`] : []),
-    ...(includesEvent(flow, 'ownTopic') ? [`${tag}HdrSqs`] : []),
-    ...(includesEvent(flow, 'dsq') ? [`${tag}HdrDsq`] : []),
+  const queueList = [];
+  if (includesEvent(flow, 'extTopic')) {
+    queueList.push(`${tag}HdrSqs`);
+  }
+  if (includesEvent(flow, 'ownTopic')) {
+    queueList.push(`${tag}HdrSqs`);
+  }
+  if (includesEvent(flow, 'dsq')) {
+    queueList.push(`${tag}HdrDsq`);
+  }
+  queueList.push(
     ...flowExtTopicSteps([flow]).map(
       ({ flowTag, stepName }) => `${flowTag}${stepName}HdrSqs`
-    ),
+    )
+  );
+  queueList.push(
     ...flowDsqSteps([flow]).map(
       ({ flowTag, stepName }) => `${flowTag}${stepName}HdrDsq`
-    ),
+    )
+  );
+  queueList.push(
     ...state.sqsQueues.filter(
-      queueName => includesEvent(flow, 's3') && queueName.startsWith(tag)
+      (queueName) => includesEvent(flow, 's3') && queueName.startsWith(tag)
     )
-  ];
+  );
+  return queueList;
 }
 
 function roleTopicNames(state, roleName) {
   if (roleName === 'ProcFindDataRole') return [];
   if (roleName === 'FlowObjectsRole')
-    return state.outTopics.filter(topic => CRUD_ACTIONS.includes(topic));
+    return state.outTopics.filter((topic) => CRUD_ACTIONS.includes(topic));
   if (roleName === 'FlowRelationshipRole')
-    return state.outTopics.filter(topic =>
+    return state.outTopics.filter((topic) =>
       RELATIONSHIP_ACTIONS.includes(topic)
     );
   if (roleName === 'FlowRbacRole')
-    return state.outTopics.filter(topic => RBAC_ACTIONS.includes(topic));
+    return state.outTopics.filter((topic) => RBAC_ACTIONS.includes(topic));
   const flow = state.flows.find(
-    candidate => customFlowRoleName(candidate?.flowTag ?? '') === roleName
+    (candidate) => customFlowRoleName(candidate?.flowTag ?? '') === roleName
   );
   return flow
-    ? state.outTopics.filter(topic => topic === upperFirst(flow.flowTag))
+    ? state.outTopics.filter((topic) => topic === upperFirst(flow.flowTag))
     : [];
 }
 
@@ -546,7 +645,7 @@ function dynamoArns(tableNames) {
   return [...new Set(tableNames)]
     .sort()
     .map(
-      tableName =>
+      (tableName) =>
         `arn:aws:dynamodb:${'${self:custom.iz_region}'}:${'${self:custom.iz_accountId}'}:table/${'${self:custom.iz_resourcePrefix}'}${tableName}`
     );
 }
@@ -601,7 +700,7 @@ function queueArns(queueNames) {
   return [...new Set(queueNames)]
     .sort()
     .map(
-      queueName =>
+      (queueName) =>
         `arn:aws:sqs:${'${self:custom.iz_region}'}:${'${self:custom.iz_accountId}'}:${'${self:custom.iz_resourcePrefix}'}${queueName}`
     );
 }
@@ -610,13 +709,13 @@ function topicArns(topicNames) {
   return [...new Set(topicNames)]
     .sort()
     .map(
-      topic =>
+      (topic) =>
         `arn:aws:sns:${'${self:custom.iz_region}'}:${'${self:custom.iz_accountId}'}:${'${self:custom.iz_serviceTag}'}_${'${self:custom.iz_stage}'}_${topic}_Out`
     );
 }
 
 function renderWebSocketSubscription(topicName) {
-  return `##===== WebSocket completion subscription\n  SubscriptionToOut${topicName}WebSocketComplete:\n    Type: AWS::SNS::Subscription\n    Properties:\n      TopicArn: !Ref Out${topicName}\n      Endpoint: "arn:aws:sqs:${'${self:custom.iz_region}'}:${'${self:custom.iz_accountId}'}:${'${self:custom.iz_resourcePrefix}'}WebSocketCompleteHdrSqs"\n      Protocol: "sqs"`;
+  return render('WebSocketSubscription_Yaml.ejs', { topicName });
 }
 
 function collectTables(schemas) {
@@ -629,13 +728,13 @@ function collectTables(schemas) {
     const pk =
       keyName(
         identifiers.find(
-          identifier =>
+          (identifier) =>
             identifier.type === 'partitionKey' ||
             identifier.type === 'identifier'
         )
       ) ?? 'PK';
     const sk = keyName(
-      identifiers.find(identifier => identifier.type === 'sortKey')
+      identifiers.find((identifier) => identifier.type === 'sortKey')
     );
     for (const resource of Object.values(schema.storageResources)) {
       if (
@@ -650,13 +749,13 @@ function collectTables(schemas) {
 }
 
 function keyName(identifier) {
-  if (!identifier) return undefined;
+  if (!identifier) return null;
   return (
     identifier.name ??
     identifier.fieldName ??
     (Array.isArray(identifier.fieldNames)
       ? identifier.fieldNames.join(identifier.deliminator ?? '_')
-      : undefined)
+      : null)
   );
 }
 
@@ -669,7 +768,7 @@ function isCrudObject(object) {
 function hasRbacAddOn(object) {
   return (
     Array.isArray(object?.addOnDataStructure) &&
-    object.addOnDataStructure.some(addOn => addOn?.type === 'rbac')
+    object.addOnDataStructure.some((addOn) => addOn?.type === 'rbac')
   );
 }
 function includesEvent(flow, event) {
@@ -683,8 +782,35 @@ function upperFirst(value) {
 function normalizeYaml(content) {
   return `${content.trimEnd()}\n`;
 }
+function renderCorsYaml() {
+  return `allowedOrigins:
+  - '*'
+allowedHeaders:
+  - content-type
+  - x-amz-date
+  - authorization
+  - x-api-key
+  - x-amz-security-token
+  - x-amz-user-agent
+  - x-amzn-trace-id
+allowedMethods:
+  - POST
+  - OPTIONS
+maxAge: 0
+allowCredentials: false
+`;
+}
+function renderRoleNameConfigYaml(roles) {
+  return [
+    '# for createIamRole',
+    ...roles.map(
+      (roleName) =>
+        `- arn:aws:iam::\${self:custom.iz_accountId}:role/\${self:custom.iz_resourcePrefix}${roleName}`
+    )
+  ].join('\n');
+}
 async function render(templateName, data) {
-  return ejs.render(
+  return ejsLib.render(
     await readFile(new URL(templateName, TEMPLATE_URL), 'utf8'),
     { resourceQueueName: data.queueName, ...data }
   );