@jjrawlins/cdk-iam-policy-builder-helper 0.0.85 → 0.0.86

package/methods_list.txt

@@ -775,6 +775,7 @@ appstream:AssociateAppBlockBuilderAppBlock
 appstream:AssociateApplicationFleet
 appstream:AssociateApplicationToEntitlement
 appstream:AssociateFleet
+appstream:AssociateSoftwareToImageBuilder
 appstream:BatchAssociateUserStack
 appstream:BatchDisassociateUserStack
 appstream:CopyImage
@@ -784,9 +785,11 @@ appstream:CreateAppBlockBuilderStreamingURL
 appstream:CreateApplication
 appstream:CreateDirectoryConfig
 appstream:CreateEntitlement
+appstream:CreateExportImageTask
 appstream:CreateFleet
 appstream:CreateImageBuilder
 appstream:CreateImageBuilderStreamingURL
+appstream:CreateImportedImage
 appstream:CreateStack
 appstream:CreateStreamingURL
 appstream:CreateThemeForStack
@@ -811,6 +814,7 @@ appstream:DescribeAppBlockBuilders
 appstream:DescribeAppBlocks
 appstream:DescribeApplicationFleetAssociations
 appstream:DescribeApplications
+appstream:DescribeAppLicenseUsage
 appstream:DescribeDirectoryConfigs
 appstream:DescribeEntitlements
 appstream:DescribeFleets
@@ -818,6 +822,7 @@ appstream:DescribeImageBuilders
 appstream:DescribeImagePermissions
 appstream:DescribeImages
 appstream:DescribeSessions
+appstream:DescribeSoftwareAssociations
 appstream:DescribeStacks
 appstream:DescribeThemeForStack
 appstream:DescribeUsageReportSubscriptions
@@ -828,15 +833,19 @@ appstream:DisassociateAppBlockBuilderAppBlock
 appstream:DisassociateApplicationFleet
 appstream:DisassociateApplicationFromEntitlement
 appstream:DisassociateFleet
+appstream:DisassociateSoftwareFromImageBuilder
 appstream:EnableUser
 appstream:ExpireSession
+appstream:GetExportImageTask
 appstream:ListAssociatedFleets
 appstream:ListAssociatedStacks
 appstream:ListEntitledApplications
+appstream:ListExportImageTasks
 appstream:ListTagsForResource
 appstream:StartAppBlockBuilder
 appstream:StartFleet
 appstream:StartImageBuilder
+appstream:StartSoftwareDeploymentToImageBuilder
 appstream:StopAppBlockBuilder
 appstream:StopFleet
 appstream:StopImageBuilder
@@ -6781,6 +6790,9 @@ ecs:UpdateServicePrimaryTaskSet
 ecs:UpdateTaskProtection
 ecs:UpdateTaskSet
 eks-auth:AssumeRoleForPodIdentity
+eks-mcp:CallPrivilegedTool
+eks-mcp:CallReadOnlyTool
+eks-mcp:InvokeMcp
 eks:AccessKubernetesApi
 eks:AssociateAccessPolicy
 eks:AssociateEncryptionConfig
@@ -7334,6 +7346,7 @@ es:CreateApplication
 es:CreateDomain
 es:CreateElasticsearchDomain
 es:CreateElasticsearchServiceRole
+es:CreateIndex
 es:CreateOutboundConnection
 es:CreateOutboundCrossClusterSearchConnection
 es:CreatePackage
@@ -7347,6 +7360,7 @@ es:DeleteElasticsearchDomain
 es:DeleteElasticsearchServiceRole
 es:DeleteInboundConnection
 es:DeleteInboundCrossClusterSearchConnection
+es:DeleteIndex
 es:DeleteOutboundConnection
 es:DeleteOutboundCrossClusterSearchConnection
 es:DeletePackage
@@ -7389,6 +7403,7 @@ es:GetCompatibleVersions
 es:GetDataSource
 es:GetDirectQueryDataSource
 es:GetDomainMaintenanceStatus
+es:GetIndex
 es:GetPackageVersionHistory
 es:GetUpgradeHistory
 es:GetUpgradeStatus
@@ -7423,6 +7438,7 @@ es:UpdateDataSource
 es:UpdateDirectQueryDataSource
 es:UpdateDomainConfig
 es:UpdateElasticsearchDomainConfig
+es:UpdateIndex
 es:UpdatePackage
 es:UpdatePackageScope
 es:UpdateScheduledAction
@@ -8777,6 +8793,7 @@ guardduty:ListTagsForResource
 guardduty:ListThreatEntitySets
 guardduty:ListThreatIntelSets
 guardduty:ListTrustedEntitySets
+guardduty:SendObjectMalwareScan
 guardduty:SendSecurityTelemetry
 guardduty:StartMalwareScan
 guardduty:StartMonitoringMembers

package/node_modules/@aws/lambda-invoke-store/README.md

@@ -33,19 +33,20 @@ export const handler = async (event, context) => {
   // The RIC has already initialized the InvokeStore with requestId and X-Ray traceId
 
   // Access Lambda context data
-  console.log(`Processing request: ${InvokeStore.getRequestId()}`);
+  const invokeStore = await InvokeStore.getInstanceAsync();
+  console.log(`Processing request: ${invokeStore.getRequestId()}`);
 
   // Store custom data
-  InvokeStore.set("userId", event.userId);
+  invokeStore.set("userId", event.userId);
 
   // Data persists across async operations
   await processData(event);
 
   // Retrieve custom data
-  const userId = InvokeStore.get("userId");
+  const userId = invokeStore.get("userId");
 
   return {
-    requestId: InvokeStore.getRequestId(),
+    requestId: invokeStore.getRequestId(),
     userId,
   };
 };
@@ -53,89 +54,96 @@ export const handler = async (event, context) => {
 // Context is preserved in async operations
 async function processData(event) {
   // Still has access to the same invoke context
-  console.log(`Processing in same context: ${InvokeStore.getRequestId()}`);
+  const invokeStore = await InvokeStore.getInstanceAsync();
+  console.log(`Processing in same context: ${invokeStore.getRequestId()}`);
 
   // Can set additional data
-  InvokeStore.set("processedData", { result: "success" });
+  invokeStore.set("processedData", { result: "success" });
 }
 ```
 
 ## API Reference
 
-### InvokeStore.getContext()
+### InvokeStore.getInstanceAsync()
+First, get an instance of the InvokeStore:
+```typescript
+const invokeStore = await InvokeStore.getInstanceAsync();
+```
+
+### invokeStore.getContext()
 
 Returns the complete current context or `undefined` if outside a context.
 
 ```typescript
-const context = InvokeStore.getContext();
+const context = invokeStore.getContext();
 ```
 
-### InvokeStore.get(key)
+### invokeStore.get(key)
 
 Gets a value from the current context.
 
 ```typescript
-const requestId = InvokeStore.get(InvokeStore.PROTECTED_KEYS.REQUEST_ID);
-const customValue = InvokeStore.get("customKey");
+const requestId = invokeStore.get(InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID);
+const customValue = invokeStore.get("customKey");
 ```
 
-### InvokeStore.set(key, value)
+### invokeStore.set(key, value)
 
 Sets a custom value in the current context. Protected Lambda fields cannot be modified.
 
 ```typescript
-InvokeStore.set("userId", "user-123");
-InvokeStore.set("timestamp", Date.now());
+invokeStore.set("userId", "user-123");
+invokeStore.set("timestamp", Date.now());
 
 // This will throw an error:
-// InvokeStore.set(InvokeStore.PROTECTED_KEYS.REQUEST_ID, 'new-id');
+// invokeStore.set(InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID, 'new-id');
 ```
 
-### InvokeStore.getRequestId()
+### invokeStore.getRequestId()
 
 Convenience method to get the current request ID.
 
 ```typescript
-const requestId = InvokeStore.getRequestId(); // Returns '-' if outside context
+const requestId = invokeStore.getRequestId(); // Returns '-' if outside context
 ```
 
-### InvokeStore.getTenantId()
+### invokeStore.getTenantId()
 
 Convenience method to get the tenant ID.
 
 ```typescript
-const requestId = InvokeStore.getTenantId();
+const requestId = invokeStore.getTenantId();
 ```
 
-### InvokeStore.getXRayTraceId()
+### invokeStore.getXRayTraceId()
 
 Convenience method to get the current [X-Ray trace ID](https://docs.aws.amazon.com/xray/latest/devguide/xray-concepts.html#xray-concepts-traces). This ID is used for distributed tracing across AWS services.
 
 ```typescript
-const traceId = InvokeStore.getXRayTraceId(); // Returns undefined if not set or outside context
+const traceId = invokeStore.getXRayTraceId(); // Returns undefined if not set or outside context
 ```
 
-### InvokeStore.hasContext()
+### invokeStore.hasContext()
 
 Checks if code is currently running within an invoke context.
 
 ```typescript
-if (InvokeStore.hasContext()) {
+if (invokeStore.hasContext()) {
   // We're inside an invoke context
 }
 ```
 
-### InvokeStore.run(context, fn)
+### invokeStore.run(context, fn)
 
 > **Note**: This method is primarily used by the Lambda Runtime Interface Client (RIC) to initialize the context for each invocation. Lambda function developers typically don't need to call this method directly.
 
 Runs a function within an invoke context.
 
 ```typescript
-InvokeStore.run(
+invokeStore.run(
   {
-    [InvokeStore.PROTECTED_KEYS.REQUEST_ID]: "request-123",
-    [InvokeStore.PROTECTED_KEYS.X_RAY_TRACE_ID]: "trace-456", // Optional X-Ray trace ID
+    [InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID]: "request-123",
+    [InvokeStoreBase.PROTECTED_KEYS.X_RAY_TRACE_ID]: "trace-456", // Optional X-Ray trace ID
     customField: "value", // Optional custom fields
   },
   () => {

package/node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js

@@ -1,66 +1,124 @@
 'use strict';
 
-var async_hooks = require('async_hooks');
-
-const noGlobalAwsLambda = process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "1" ||
-    process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "true";
-if (!noGlobalAwsLambda) {
-    globalThis.awslambda = globalThis.awslambda || {};
-}
 const PROTECTED_KEYS = {
-    REQUEST_ID: Symbol("_AWS_LAMBDA_REQUEST_ID"),
-    X_RAY_TRACE_ID: Symbol("_AWS_LAMBDA_X_RAY_TRACE_ID"),
-    TENANT_ID: Symbol("_AWS_LAMBDA_TENANT_ID"),
+    REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
+    X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
+    TENANT_ID: Symbol.for("_AWS_LAMBDA_TENANT_ID"),
 };
-class InvokeStoreImpl {
-    static storage = new async_hooks.AsyncLocalStorage();
+const NO_GLOBAL_AWS_LAMBDA = ["true", "1"].includes(process.env?.AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA ?? "");
+if (!NO_GLOBAL_AWS_LAMBDA) {
+    globalThis.awslambda = globalThis.awslambda || {};
+}
+class InvokeStoreBase {
     static PROTECTED_KEYS = PROTECTED_KEYS;
-    static run(context, fn) {
-        return this.storage.run({ ...context }, fn);
+    isProtectedKey(key) {
+        return Object.values(PROTECTED_KEYS).includes(key);
+    }
+    getRequestId() {
+        return this.get(PROTECTED_KEYS.REQUEST_ID) ?? "-";
     }
-    static getContext() {
-        return this.storage.getStore();
+    getXRayTraceId() {
+        return this.get(PROTECTED_KEYS.X_RAY_TRACE_ID);
     }
-    static get(key) {
-        const context = this.storage.getStore();
-        return context?.[key];
+    getTenantId() {
+        return this.get(PROTECTED_KEYS.TENANT_ID);
     }
-    static set(key, value) {
+}
+class InvokeStoreSingle extends InvokeStoreBase {
+    currentContext;
+    getContext() {
+        return this.currentContext;
+    }
+    hasContext() {
+        return this.currentContext !== undefined;
+    }
+    get(key) {
+        return this.currentContext?.[key];
+    }
+    set(key, value) {
         if (this.isProtectedKey(key)) {
-            throw new Error(`Cannot modify protected Lambda context field`);
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
         }
-        const context = this.storage.getStore();
-        if (context) {
-            context[key] = value;
+        this.currentContext = this.currentContext || {};
+        this.currentContext[key] = value;
+    }
+    run(context, fn) {
+        this.currentContext = context;
+        try {
+            return fn();
         }
+        finally {
+            this.currentContext = undefined;
+        }
+    }
+}
+class InvokeStoreMulti extends InvokeStoreBase {
+    als;
+    static async create() {
+        const instance = new InvokeStoreMulti();
+        const asyncHooks = await import('node:async_hooks');
+        instance.als = new asyncHooks.AsyncLocalStorage();
+        return instance;
     }
-    static getRequestId() {
-        return this.get(this.PROTECTED_KEYS.REQUEST_ID) ?? "-";
+    getContext() {
+        return this.als.getStore();
     }
-    static getXRayTraceId() {
-        return this.get(this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    hasContext() {
+        return this.als.getStore() !== undefined;
     }
-    static getTenantId() {
-        return this.get(this.PROTECTED_KEYS.TENANT_ID);
+    get(key) {
+        return this.als.getStore()?.[key];
     }
-    static hasContext() {
-        return this.storage.getStore() !== undefined;
+    set(key, value) {
+        if (this.isProtectedKey(key)) {
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
+        }
+        const store = this.als.getStore();
+        if (!store) {
+            throw new Error("No context available");
+        }
+        store[key] = value;
     }
-    static isProtectedKey(key) {
-        return (key === this.PROTECTED_KEYS.REQUEST_ID ||
-            key === this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    run(context, fn) {
+        return this.als.run(context, fn);
     }
 }
-let instance;
-if (!noGlobalAwsLambda && globalThis.awslambda?.InvokeStore) {
-    instance = globalThis.awslambda.InvokeStore;
-}
-else {
-    instance = InvokeStoreImpl;
-    if (!noGlobalAwsLambda && globalThis.awslambda) {
-        globalThis.awslambda.InvokeStore = instance;
+exports.InvokeStore = void 0;
+(function (InvokeStore) {
+    let instance = null;
+    async function getInstanceAsync() {
+        if (!instance) {
+            instance = (async () => {
+                const isMulti = "AWS_LAMBDA_MAX_CONCURRENCY" in process.env;
+                const newInstance = isMulti
+                    ? await InvokeStoreMulti.create()
+                    : new InvokeStoreSingle();
+                if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda?.InvokeStore) {
+                    return globalThis.awslambda.InvokeStore;
+                }
+                else if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda) {
+                    globalThis.awslambda.InvokeStore = newInstance;
+                    return newInstance;
+                }
+                else {
+                    return newInstance;
+                }
+            })();
+        }
+        return instance;
     }
-}
-const InvokeStore = instance;
+    InvokeStore.getInstanceAsync = getInstanceAsync;
+    InvokeStore._testing = process.env.AWS_LAMBDA_BENCHMARK_MODE === "1"
+        ? {
+            reset: () => {
+                instance = null;
+                if (globalThis.awslambda?.InvokeStore) {
+                    delete globalThis.awslambda.InvokeStore;
+                }
+                globalThis.awslambda = {};
+            },
+        }
+        : undefined;
+})(exports.InvokeStore || (exports.InvokeStore = {}));
 
-exports.InvokeStore = InvokeStore;
+exports.InvokeStoreBase = InvokeStoreBase;

package/node_modules/@aws/lambda-invoke-store/dist-es/invoke-store.js

@@ -1,64 +1,122 @@
-import { AsyncLocalStorage } from 'async_hooks';
-
-const noGlobalAwsLambda = process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "1" ||
-    process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "true";
-if (!noGlobalAwsLambda) {
-    globalThis.awslambda = globalThis.awslambda || {};
-}
 const PROTECTED_KEYS = {
-    REQUEST_ID: Symbol("_AWS_LAMBDA_REQUEST_ID"),
-    X_RAY_TRACE_ID: Symbol("_AWS_LAMBDA_X_RAY_TRACE_ID"),
-    TENANT_ID: Symbol("_AWS_LAMBDA_TENANT_ID"),
+    REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
+    X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
+    TENANT_ID: Symbol.for("_AWS_LAMBDA_TENANT_ID"),
 };
-class InvokeStoreImpl {
-    static storage = new AsyncLocalStorage();
+const NO_GLOBAL_AWS_LAMBDA = ["true", "1"].includes(process.env?.AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA ?? "");
+if (!NO_GLOBAL_AWS_LAMBDA) {
+    globalThis.awslambda = globalThis.awslambda || {};
+}
+class InvokeStoreBase {
     static PROTECTED_KEYS = PROTECTED_KEYS;
-    static run(context, fn) {
-        return this.storage.run({ ...context }, fn);
+    isProtectedKey(key) {
+        return Object.values(PROTECTED_KEYS).includes(key);
+    }
+    getRequestId() {
+        return this.get(PROTECTED_KEYS.REQUEST_ID) ?? "-";
     }
-    static getContext() {
-        return this.storage.getStore();
+    getXRayTraceId() {
+        return this.get(PROTECTED_KEYS.X_RAY_TRACE_ID);
     }
-    static get(key) {
-        const context = this.storage.getStore();
-        return context?.[key];
+    getTenantId() {
+        return this.get(PROTECTED_KEYS.TENANT_ID);
     }
-    static set(key, value) {
+}
+class InvokeStoreSingle extends InvokeStoreBase {
+    currentContext;
+    getContext() {
+        return this.currentContext;
+    }
+    hasContext() {
+        return this.currentContext !== undefined;
+    }
+    get(key) {
+        return this.currentContext?.[key];
+    }
+    set(key, value) {
         if (this.isProtectedKey(key)) {
-            throw new Error(`Cannot modify protected Lambda context field`);
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
         }
-        const context = this.storage.getStore();
-        if (context) {
-            context[key] = value;
+        this.currentContext = this.currentContext || {};
+        this.currentContext[key] = value;
+    }
+    run(context, fn) {
+        this.currentContext = context;
+        try {
+            return fn();
         }
+        finally {
+            this.currentContext = undefined;
+        }
+    }
+}
+class InvokeStoreMulti extends InvokeStoreBase {
+    als;
+    static async create() {
+        const instance = new InvokeStoreMulti();
+        const asyncHooks = await import('node:async_hooks');
+        instance.als = new asyncHooks.AsyncLocalStorage();
+        return instance;
     }
-    static getRequestId() {
-        return this.get(this.PROTECTED_KEYS.REQUEST_ID) ?? "-";
+    getContext() {
+        return this.als.getStore();
     }
-    static getXRayTraceId() {
-        return this.get(this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    hasContext() {
+        return this.als.getStore() !== undefined;
     }
-    static getTenantId() {
-        return this.get(this.PROTECTED_KEYS.TENANT_ID);
+    get(key) {
+        return this.als.getStore()?.[key];
     }
-    static hasContext() {
-        return this.storage.getStore() !== undefined;
+    set(key, value) {
+        if (this.isProtectedKey(key)) {
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
+        }
+        const store = this.als.getStore();
+        if (!store) {
+            throw new Error("No context available");
+        }
+        store[key] = value;
     }
-    static isProtectedKey(key) {
-        return (key === this.PROTECTED_KEYS.REQUEST_ID ||
-            key === this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    run(context, fn) {
+        return this.als.run(context, fn);
     }
 }
-let instance;
-if (!noGlobalAwsLambda && globalThis.awslambda?.InvokeStore) {
-    instance = globalThis.awslambda.InvokeStore;
-}
-else {
-    instance = InvokeStoreImpl;
-    if (!noGlobalAwsLambda && globalThis.awslambda) {
-        globalThis.awslambda.InvokeStore = instance;
+var InvokeStore;
+(function (InvokeStore) {
+    let instance = null;
+    async function getInstanceAsync() {
+        if (!instance) {
+            instance = (async () => {
+                const isMulti = "AWS_LAMBDA_MAX_CONCURRENCY" in process.env;
+                const newInstance = isMulti
+                    ? await InvokeStoreMulti.create()
+                    : new InvokeStoreSingle();
+                if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda?.InvokeStore) {
+                    return globalThis.awslambda.InvokeStore;
+                }
+                else if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda) {
+                    globalThis.awslambda.InvokeStore = newInstance;
+                    return newInstance;
+                }
+                else {
+                    return newInstance;
+                }
+            })();
+        }
+        return instance;
     }
-}
-const InvokeStore = instance;
+    InvokeStore.getInstanceAsync = getInstanceAsync;
+    InvokeStore._testing = process.env.AWS_LAMBDA_BENCHMARK_MODE === "1"
+        ? {
+            reset: () => {
+                instance = null;
+                if (globalThis.awslambda?.InvokeStore) {
+                    delete globalThis.awslambda.InvokeStore;
+                }
+                globalThis.awslambda = {};
+            },
+        }
+        : undefined;
+})(InvokeStore || (InvokeStore = {}));
 
-export { InvokeStore };
+export { InvokeStore, InvokeStoreBase };

package/node_modules/@aws/lambda-invoke-store/dist-types/invoke-store.benchmark.d.ts

@@ -0,0 +1 @@
+export {};