@jjrawlins/cdk-iam-policy-builder-helper 0.0.85 → 0.0.87

package/methods_list.txt

@@ -775,6 +775,7 @@ appstream:AssociateAppBlockBuilderAppBlock
 appstream:AssociateApplicationFleet
 appstream:AssociateApplicationToEntitlement
 appstream:AssociateFleet
+appstream:AssociateSoftwareToImageBuilder
 appstream:BatchAssociateUserStack
 appstream:BatchDisassociateUserStack
 appstream:CopyImage
@@ -784,9 +785,11 @@ appstream:CreateAppBlockBuilderStreamingURL
 appstream:CreateApplication
 appstream:CreateDirectoryConfig
 appstream:CreateEntitlement
+appstream:CreateExportImageTask
 appstream:CreateFleet
 appstream:CreateImageBuilder
 appstream:CreateImageBuilderStreamingURL
+appstream:CreateImportedImage
 appstream:CreateStack
 appstream:CreateStreamingURL
 appstream:CreateThemeForStack
@@ -811,6 +814,7 @@ appstream:DescribeAppBlockBuilders
 appstream:DescribeAppBlocks
 appstream:DescribeApplicationFleetAssociations
 appstream:DescribeApplications
+appstream:DescribeAppLicenseUsage
 appstream:DescribeDirectoryConfigs
 appstream:DescribeEntitlements
 appstream:DescribeFleets
@@ -818,6 +822,7 @@ appstream:DescribeImageBuilders
 appstream:DescribeImagePermissions
 appstream:DescribeImages
 appstream:DescribeSessions
+appstream:DescribeSoftwareAssociations
 appstream:DescribeStacks
 appstream:DescribeThemeForStack
 appstream:DescribeUsageReportSubscriptions
@@ -828,15 +833,19 @@ appstream:DisassociateAppBlockBuilderAppBlock
 appstream:DisassociateApplicationFleet
 appstream:DisassociateApplicationFromEntitlement
 appstream:DisassociateFleet
+appstream:DisassociateSoftwareFromImageBuilder
 appstream:EnableUser
 appstream:ExpireSession
+appstream:GetExportImageTask
 appstream:ListAssociatedFleets
 appstream:ListAssociatedStacks
 appstream:ListEntitledApplications
+appstream:ListExportImageTasks
 appstream:ListTagsForResource
 appstream:StartAppBlockBuilder
 appstream:StartFleet
 appstream:StartImageBuilder
+appstream:StartSoftwareDeploymentToImageBuilder
 appstream:StopAppBlockBuilder
 appstream:StopFleet
 appstream:StopImageBuilder
@@ -1472,6 +1481,7 @@ backup:CreateReportPlan
 backup:CreateRestoreAccessBackupVault
 backup:CreateRestoreTestingPlan
 backup:CreateRestoreTestingSelection
+backup:CreateTieringConfiguration
 backup:DeleteBackupPlan
 backup:DeleteBackupSelection
 backup:DeleteBackupVault
@@ -1484,6 +1494,7 @@ backup:DeleteRecoveryPoint
 backup:DeleteReportPlan
 backup:DeleteRestoreTestingPlan
 backup:DeleteRestoreTestingSelection
+backup:DeleteTieringConfiguration
 backup:DescribeBackupJob
 backup:DescribeBackupVault
 backup:DescribeCopyJob
@@ -1514,6 +1525,7 @@ backup:GetRestoreTestingInferredMetadata
 backup:GetRestoreTestingPlan
 backup:GetRestoreTestingSelection
 backup:GetSupportedResourceTypes
+backup:GetTieringConfiguration
 backup:ListBackupJobs
 backup:ListBackupJobSummaries
 backup:ListBackupPlans
@@ -1541,6 +1553,7 @@ backup:ListRestoreJobSummaries
 backup:ListRestoreTestingPlans
 backup:ListRestoreTestingSelections
 backup:ListTags
+backup:ListTieringConfigurations
 backup:PutBackupVaultAccessPolicy
 backup:PutBackupVaultLockConfiguration
 backup:PutBackupVaultNotifications
@@ -1564,6 +1577,7 @@ backup:UpdateRegionSettings
 backup:UpdateReportPlan
 backup:UpdateRestoreTestingPlan
 backup:UpdateRestoreTestingSelection
+backup:UpdateTieringConfiguration
 batch:CancelJob
 batch:CreateComputeEnvironment
 batch:CreateConsumableResource
@@ -2832,6 +2846,7 @@ cloudformation:DeregisterType
 cloudformation:DescribeAccountLimits
 cloudformation:DescribeChangeSet
 cloudformation:DescribeChangeSetHooks
+cloudformation:DescribeEvents
 cloudformation:DescribeGeneratedTemplate
 cloudformation:DescribeOrganizationsAccess
 cloudformation:DescribePublisher
@@ -6781,6 +6796,9 @@ ecs:UpdateServicePrimaryTaskSet
 ecs:UpdateTaskProtection
 ecs:UpdateTaskSet
 eks-auth:AssumeRoleForPodIdentity
+eks-mcp:CallPrivilegedTool
+eks-mcp:CallReadOnlyTool
+eks-mcp:InvokeMcp
 eks:AccessKubernetesApi
 eks:AssociateAccessPolicy
 eks:AssociateEncryptionConfig
@@ -7334,6 +7352,7 @@ es:CreateApplication
 es:CreateDomain
 es:CreateElasticsearchDomain
 es:CreateElasticsearchServiceRole
+es:CreateIndex
 es:CreateOutboundConnection
 es:CreateOutboundCrossClusterSearchConnection
 es:CreatePackage
@@ -7347,6 +7366,7 @@ es:DeleteElasticsearchDomain
 es:DeleteElasticsearchServiceRole
 es:DeleteInboundConnection
 es:DeleteInboundCrossClusterSearchConnection
+es:DeleteIndex
 es:DeleteOutboundConnection
 es:DeleteOutboundCrossClusterSearchConnection
 es:DeletePackage
@@ -7389,6 +7409,7 @@ es:GetCompatibleVersions
 es:GetDataSource
 es:GetDirectQueryDataSource
 es:GetDomainMaintenanceStatus
+es:GetIndex
 es:GetPackageVersionHistory
 es:GetUpgradeHistory
 es:GetUpgradeStatus
@@ -7423,6 +7444,7 @@ es:UpdateDataSource
 es:UpdateDirectQueryDataSource
 es:UpdateDomainConfig
 es:UpdateElasticsearchDomainConfig
+es:UpdateIndex
 es:UpdatePackage
 es:UpdatePackageScope
 es:UpdateScheduledAction
@@ -8777,6 +8799,7 @@ guardduty:ListTagsForResource
 guardduty:ListThreatEntitySets
 guardduty:ListThreatIntelSets
 guardduty:ListTrustedEntitySets
+guardduty:SendObjectMalwareScan
 guardduty:SendSecurityTelemetry
 guardduty:StartMalwareScan
 guardduty:StartMonitoringMembers
@@ -9311,20 +9334,26 @@ internetmonitor:UntagResource
 internetmonitor:UpdateMonitor
 invoicing:BatchGetInvoiceProfile
 invoicing:CreateInvoiceUnit
+invoicing:CreateProcurementPortalPreference
 invoicing:DeleteInvoiceUnit
+invoicing:DeleteProcurementPortalPreference
 invoicing:GetInvoiceCorrection
 invoicing:GetInvoiceEmailDeliveryPreferences
 invoicing:GetInvoicePDF
 invoicing:GetInvoiceUnit
+invoicing:GetProcurementPortalPreference
 invoicing:ListInvoiceCorrections
 invoicing:ListInvoiceSummaries
 invoicing:ListInvoiceUnits
+invoicing:ListProcurementPortalPreferences
 invoicing:ListTagsForResource
 invoicing:PutInvoiceEmailDeliveryPreferences
+invoicing:PutProcurementPortalPreference
 invoicing:StartInvoiceCorrection
 invoicing:TagResource
 invoicing:UntagResource
 invoicing:UpdateInvoiceUnit
+invoicing:UpdateProcurementPortalPreferenceStatus
 iot-device-tester:CheckVersion
 iot-device-tester:DownloadTestSuite
 iot-device-tester:LatestIdt
@@ -10315,6 +10344,8 @@ kafka:DescribeClusterV2
 kafka:DescribeConfiguration
 kafka:DescribeConfigurationRevision
 kafka:DescribeReplicator
+kafka:DescribeTopic
+kafka:DescribeTopicPartitions
 kafka:DescribeVpcConnection
 kafka:GetBootstrapBrokers
 kafka:GetClusterPolicy
@@ -10331,6 +10362,7 @@ kafka:ListNodes
 kafka:ListReplicators
 kafka:ListScramSecrets
 kafka:ListTagsForResource
+kafka:ListTopics
 kafka:ListVpcConnections
 kafka:PutClusterPolicy
 kafka:RebootBroker
@@ -12162,6 +12194,7 @@ mgn:ListConnectors
 mgn:ListExportErrors
 mgn:ListExports
 mgn:ListImportErrors
+mgn:ListImportFileEnrichments
 mgn:ListImports
 mgn:ListManagedAccounts
 mgn:ListNetworkMigrationAnalyses
@@ -12176,6 +12209,7 @@ mgn:ListNetworkMigrationExecutions
 mgn:ListNetworkMigrationMapperSegmentConstructs
 mgn:ListNetworkMigrationMapperSegments
 mgn:ListNetworkMigrationMappings
+mgn:ListNetworkMigrationMappingUpdates
 mgn:ListSourceServerActions
 mgn:ListTagsForResource
 mgn:ListTemplateActions
@@ -12205,11 +12239,13 @@ mgn:SendVcenterClientMetricsForMgn
 mgn:StartCutover
 mgn:StartExport
 mgn:StartImport
+mgn:StartImportFileEnrichment
 mgn:StartNetworkMigrationAnalysis
 mgn:StartNetworkMigrationCodeGeneration
 mgn:StartNetworkMigrationDeployedStacksDeletion
 mgn:StartNetworkMigrationDeployment
 mgn:StartNetworkMigrationMapping
+mgn:StartNetworkMigrationMappingUpdate
 mgn:StartReplication
 mgn:StartTest
 mgn:StopReplication
@@ -13605,6 +13641,14 @@ pricing:GetAttributeValues
 pricing:GetPriceListFileUrl
 pricing:GetProducts
 pricing:ListPriceLists
+pricingplanmanager:AssociateResourcesToSubscription
+pricingplanmanager:CancelSubscription
+pricingplanmanager:CancelSubscriptionChange
+pricingplanmanager:CreateSubscription
+pricingplanmanager:DisassociateResourcesFromSubscription
+pricingplanmanager:GetSubscription
+pricingplanmanager:ListSubscriptions
+pricingplanmanager:UpdateSubscription
 private-networks:AcknowledgeOrderReceipt
 private-networks:ActivateDeviceIdentifier
 private-networks:ActivateNetworkSite
@@ -16447,6 +16491,7 @@ securityhub:GetEnabledStandards
 securityhub:GetFindingAggregator
 securityhub:GetFindingHistory
 securityhub:GetFindings
+securityhub:GetFindingsTrendsV2
 securityhub:GetFreeTrialEndDate
 securityhub:GetFreeTrialUsage
 securityhub:GetInsightFindingTrend
@@ -16456,6 +16501,7 @@ securityhub:GetInvitationsCount
 securityhub:GetMasterAccount
 securityhub:GetMembers
 securityhub:GetResourcesStatisticsV2
+securityhub:GetResourcesTrendsV2
 securityhub:GetResourcesV2
 securityhub:GetSecurityControlDefinition
 securityhub:GetUsage

package/node_modules/@aws/lambda-invoke-store/README.md

@@ -33,19 +33,20 @@ export const handler = async (event, context) => {
   // The RIC has already initialized the InvokeStore with requestId and X-Ray traceId
 
   // Access Lambda context data
-  console.log(`Processing request: ${InvokeStore.getRequestId()}`);
+  const invokeStore = await InvokeStore.getInstanceAsync();
+  console.log(`Processing request: ${invokeStore.getRequestId()}`);
 
   // Store custom data
-  InvokeStore.set("userId", event.userId);
+  invokeStore.set("userId", event.userId);
 
   // Data persists across async operations
   await processData(event);
 
   // Retrieve custom data
-  const userId = InvokeStore.get("userId");
+  const userId = invokeStore.get("userId");
 
   return {
-    requestId: InvokeStore.getRequestId(),
+    requestId: invokeStore.getRequestId(),
     userId,
   };
 };
@@ -53,89 +54,96 @@ export const handler = async (event, context) => {
 // Context is preserved in async operations
 async function processData(event) {
   // Still has access to the same invoke context
-  console.log(`Processing in same context: ${InvokeStore.getRequestId()}`);
+  const invokeStore = await InvokeStore.getInstanceAsync();
+  console.log(`Processing in same context: ${invokeStore.getRequestId()}`);
 
   // Can set additional data
-  InvokeStore.set("processedData", { result: "success" });
+  invokeStore.set("processedData", { result: "success" });
 }
 ```
 
 ## API Reference
 
-### InvokeStore.getContext()
+### InvokeStore.getInstanceAsync()
+First, get an instance of the InvokeStore:
+```typescript
+const invokeStore = await InvokeStore.getInstanceAsync();
+```
+
+### invokeStore.getContext()
 
 Returns the complete current context or `undefined` if outside a context.
 
 ```typescript
-const context = InvokeStore.getContext();
+const context = invokeStore.getContext();
 ```
 
-### InvokeStore.get(key)
+### invokeStore.get(key)
 
 Gets a value from the current context.
 
 ```typescript
-const requestId = InvokeStore.get(InvokeStore.PROTECTED_KEYS.REQUEST_ID);
-const customValue = InvokeStore.get("customKey");
+const requestId = invokeStore.get(InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID);
+const customValue = invokeStore.get("customKey");
 ```
 
-### InvokeStore.set(key, value)
+### invokeStore.set(key, value)
 
 Sets a custom value in the current context. Protected Lambda fields cannot be modified.
 
 ```typescript
-InvokeStore.set("userId", "user-123");
-InvokeStore.set("timestamp", Date.now());
+invokeStore.set("userId", "user-123");
+invokeStore.set("timestamp", Date.now());
 
 // This will throw an error:
-// InvokeStore.set(InvokeStore.PROTECTED_KEYS.REQUEST_ID, 'new-id');
+// invokeStore.set(InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID, 'new-id');
 ```
 
-### InvokeStore.getRequestId()
+### invokeStore.getRequestId()
 
 Convenience method to get the current request ID.
 
 ```typescript
-const requestId = InvokeStore.getRequestId(); // Returns '-' if outside context
+const requestId = invokeStore.getRequestId(); // Returns '-' if outside context
 ```
 
-### InvokeStore.getTenantId()
+### invokeStore.getTenantId()
 
 Convenience method to get the tenant ID.
 
 ```typescript
-const requestId = InvokeStore.getTenantId();
+const requestId = invokeStore.getTenantId();
 ```
 
-### InvokeStore.getXRayTraceId()
+### invokeStore.getXRayTraceId()
 
 Convenience method to get the current [X-Ray trace ID](https://docs.aws.amazon.com/xray/latest/devguide/xray-concepts.html#xray-concepts-traces). This ID is used for distributed tracing across AWS services.
 
 ```typescript
-const traceId = InvokeStore.getXRayTraceId(); // Returns undefined if not set or outside context
+const traceId = invokeStore.getXRayTraceId(); // Returns undefined if not set or outside context
 ```
 
-### InvokeStore.hasContext()
+### invokeStore.hasContext()
 
 Checks if code is currently running within an invoke context.
 
 ```typescript
-if (InvokeStore.hasContext()) {
+if (invokeStore.hasContext()) {
   // We're inside an invoke context
 }
 ```
 
-### InvokeStore.run(context, fn)
+### invokeStore.run(context, fn)
 
 > **Note**: This method is primarily used by the Lambda Runtime Interface Client (RIC) to initialize the context for each invocation. Lambda function developers typically don't need to call this method directly.
 
 Runs a function within an invoke context.
 
 ```typescript
-InvokeStore.run(
+invokeStore.run(
   {
-    [InvokeStore.PROTECTED_KEYS.REQUEST_ID]: "request-123",
-    [InvokeStore.PROTECTED_KEYS.X_RAY_TRACE_ID]: "trace-456", // Optional X-Ray trace ID
+    [InvokeStoreBase.PROTECTED_KEYS.REQUEST_ID]: "request-123",
+    [InvokeStoreBase.PROTECTED_KEYS.X_RAY_TRACE_ID]: "trace-456", // Optional X-Ray trace ID
     customField: "value", // Optional custom fields
   },
   () => {

package/node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js

@@ -1,66 +1,124 @@
 'use strict';
 
-var async_hooks = require('async_hooks');
-
-const noGlobalAwsLambda = process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "1" ||
-    process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "true";
-if (!noGlobalAwsLambda) {
-    globalThis.awslambda = globalThis.awslambda || {};
-}
 const PROTECTED_KEYS = {
-    REQUEST_ID: Symbol("_AWS_LAMBDA_REQUEST_ID"),
-    X_RAY_TRACE_ID: Symbol("_AWS_LAMBDA_X_RAY_TRACE_ID"),
-    TENANT_ID: Symbol("_AWS_LAMBDA_TENANT_ID"),
+    REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
+    X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
+    TENANT_ID: Symbol.for("_AWS_LAMBDA_TENANT_ID"),
 };
-class InvokeStoreImpl {
-    static storage = new async_hooks.AsyncLocalStorage();
+const NO_GLOBAL_AWS_LAMBDA = ["true", "1"].includes(process.env?.AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA ?? "");
+if (!NO_GLOBAL_AWS_LAMBDA) {
+    globalThis.awslambda = globalThis.awslambda || {};
+}
+class InvokeStoreBase {
     static PROTECTED_KEYS = PROTECTED_KEYS;
-    static run(context, fn) {
-        return this.storage.run({ ...context }, fn);
+    isProtectedKey(key) {
+        return Object.values(PROTECTED_KEYS).includes(key);
+    }
+    getRequestId() {
+        return this.get(PROTECTED_KEYS.REQUEST_ID) ?? "-";
     }
-    static getContext() {
-        return this.storage.getStore();
+    getXRayTraceId() {
+        return this.get(PROTECTED_KEYS.X_RAY_TRACE_ID);
     }
-    static get(key) {
-        const context = this.storage.getStore();
-        return context?.[key];
+    getTenantId() {
+        return this.get(PROTECTED_KEYS.TENANT_ID);
     }
-    static set(key, value) {
+}
+class InvokeStoreSingle extends InvokeStoreBase {
+    currentContext;
+    getContext() {
+        return this.currentContext;
+    }
+    hasContext() {
+        return this.currentContext !== undefined;
+    }
+    get(key) {
+        return this.currentContext?.[key];
+    }
+    set(key, value) {
         if (this.isProtectedKey(key)) {
-            throw new Error(`Cannot modify protected Lambda context field`);
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
         }
-        const context = this.storage.getStore();
-        if (context) {
-            context[key] = value;
+        this.currentContext = this.currentContext || {};
+        this.currentContext[key] = value;
+    }
+    run(context, fn) {
+        this.currentContext = context;
+        try {
+            return fn();
         }
+        finally {
+            this.currentContext = undefined;
+        }
+    }
+}
+class InvokeStoreMulti extends InvokeStoreBase {
+    als;
+    static async create() {
+        const instance = new InvokeStoreMulti();
+        const asyncHooks = await import('node:async_hooks');
+        instance.als = new asyncHooks.AsyncLocalStorage();
+        return instance;
     }
-    static getRequestId() {
-        return this.get(this.PROTECTED_KEYS.REQUEST_ID) ?? "-";
+    getContext() {
+        return this.als.getStore();
     }
-    static getXRayTraceId() {
-        return this.get(this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    hasContext() {
+        return this.als.getStore() !== undefined;
     }
-    static getTenantId() {
-        return this.get(this.PROTECTED_KEYS.TENANT_ID);
+    get(key) {
+        return this.als.getStore()?.[key];
     }
-    static hasContext() {
-        return this.storage.getStore() !== undefined;
+    set(key, value) {
+        if (this.isProtectedKey(key)) {
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
+        }
+        const store = this.als.getStore();
+        if (!store) {
+            throw new Error("No context available");
+        }
+        store[key] = value;
     }
-    static isProtectedKey(key) {
-        return (key === this.PROTECTED_KEYS.REQUEST_ID ||
-            key === this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    run(context, fn) {
+        return this.als.run(context, fn);
     }
 }
-let instance;
-if (!noGlobalAwsLambda && globalThis.awslambda?.InvokeStore) {
-    instance = globalThis.awslambda.InvokeStore;
-}
-else {
-    instance = InvokeStoreImpl;
-    if (!noGlobalAwsLambda && globalThis.awslambda) {
-        globalThis.awslambda.InvokeStore = instance;
+exports.InvokeStore = void 0;
+(function (InvokeStore) {
+    let instance = null;
+    async function getInstanceAsync() {
+        if (!instance) {
+            instance = (async () => {
+                const isMulti = "AWS_LAMBDA_MAX_CONCURRENCY" in process.env;
+                const newInstance = isMulti
+                    ? await InvokeStoreMulti.create()
+                    : new InvokeStoreSingle();
+                if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda?.InvokeStore) {
+                    return globalThis.awslambda.InvokeStore;
+                }
+                else if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda) {
+                    globalThis.awslambda.InvokeStore = newInstance;
+                    return newInstance;
+                }
+                else {
+                    return newInstance;
+                }
+            })();
+        }
+        return instance;
     }
-}
-const InvokeStore = instance;
+    InvokeStore.getInstanceAsync = getInstanceAsync;
+    InvokeStore._testing = process.env.AWS_LAMBDA_BENCHMARK_MODE === "1"
+        ? {
+            reset: () => {
+                instance = null;
+                if (globalThis.awslambda?.InvokeStore) {
+                    delete globalThis.awslambda.InvokeStore;
+                }
+                globalThis.awslambda = {};
+            },
+        }
+        : undefined;
+})(exports.InvokeStore || (exports.InvokeStore = {}));
 
-exports.InvokeStore = InvokeStore;
+exports.InvokeStoreBase = InvokeStoreBase;