@jjrawlins/cdk-iam-policy-builder-helper 0.0.85 → 0.0.87

package/node_modules/@aws/lambda-invoke-store/dist-es/invoke-store.js

@@ -1,64 +1,122 @@
-import { AsyncLocalStorage } from 'async_hooks';
-
-const noGlobalAwsLambda = process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "1" ||
-    process.env["AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA"] === "true";
-if (!noGlobalAwsLambda) {
-    globalThis.awslambda = globalThis.awslambda || {};
-}
 const PROTECTED_KEYS = {
-    REQUEST_ID: Symbol("_AWS_LAMBDA_REQUEST_ID"),
-    X_RAY_TRACE_ID: Symbol("_AWS_LAMBDA_X_RAY_TRACE_ID"),
-    TENANT_ID: Symbol("_AWS_LAMBDA_TENANT_ID"),
+    REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
+    X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
+    TENANT_ID: Symbol.for("_AWS_LAMBDA_TENANT_ID"),
 };
-class InvokeStoreImpl {
-    static storage = new AsyncLocalStorage();
+const NO_GLOBAL_AWS_LAMBDA = ["true", "1"].includes(process.env?.AWS_LAMBDA_NODEJS_NO_GLOBAL_AWSLAMBDA ?? "");
+if (!NO_GLOBAL_AWS_LAMBDA) {
+    globalThis.awslambda = globalThis.awslambda || {};
+}
+class InvokeStoreBase {
     static PROTECTED_KEYS = PROTECTED_KEYS;
-    static run(context, fn) {
-        return this.storage.run({ ...context }, fn);
+    isProtectedKey(key) {
+        return Object.values(PROTECTED_KEYS).includes(key);
+    }
+    getRequestId() {
+        return this.get(PROTECTED_KEYS.REQUEST_ID) ?? "-";
     }
-    static getContext() {
-        return this.storage.getStore();
+    getXRayTraceId() {
+        return this.get(PROTECTED_KEYS.X_RAY_TRACE_ID);
     }
-    static get(key) {
-        const context = this.storage.getStore();
-        return context?.[key];
+    getTenantId() {
+        return this.get(PROTECTED_KEYS.TENANT_ID);
     }
-    static set(key, value) {
+}
+class InvokeStoreSingle extends InvokeStoreBase {
+    currentContext;
+    getContext() {
+        return this.currentContext;
+    }
+    hasContext() {
+        return this.currentContext !== undefined;
+    }
+    get(key) {
+        return this.currentContext?.[key];
+    }
+    set(key, value) {
         if (this.isProtectedKey(key)) {
-            throw new Error(`Cannot modify protected Lambda context field`);
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
         }
-        const context = this.storage.getStore();
-        if (context) {
-            context[key] = value;
+        this.currentContext = this.currentContext || {};
+        this.currentContext[key] = value;
+    }
+    run(context, fn) {
+        this.currentContext = context;
+        try {
+            return fn();
         }
+        finally {
+            this.currentContext = undefined;
+        }
+    }
+}
+class InvokeStoreMulti extends InvokeStoreBase {
+    als;
+    static async create() {
+        const instance = new InvokeStoreMulti();
+        const asyncHooks = await import('node:async_hooks');
+        instance.als = new asyncHooks.AsyncLocalStorage();
+        return instance;
     }
-    static getRequestId() {
-        return this.get(this.PROTECTED_KEYS.REQUEST_ID) ?? "-";
+    getContext() {
+        return this.als.getStore();
     }
-    static getXRayTraceId() {
-        return this.get(this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    hasContext() {
+        return this.als.getStore() !== undefined;
     }
-    static getTenantId() {
-        return this.get(this.PROTECTED_KEYS.TENANT_ID);
+    get(key) {
+        return this.als.getStore()?.[key];
     }
-    static hasContext() {
-        return this.storage.getStore() !== undefined;
+    set(key, value) {
+        if (this.isProtectedKey(key)) {
+            throw new Error(`Cannot modify protected Lambda context field: ${String(key)}`);
+        }
+        const store = this.als.getStore();
+        if (!store) {
+            throw new Error("No context available");
+        }
+        store[key] = value;
     }
-    static isProtectedKey(key) {
-        return (key === this.PROTECTED_KEYS.REQUEST_ID ||
-            key === this.PROTECTED_KEYS.X_RAY_TRACE_ID);
+    run(context, fn) {
+        return this.als.run(context, fn);
     }
 }
-let instance;
-if (!noGlobalAwsLambda && globalThis.awslambda?.InvokeStore) {
-    instance = globalThis.awslambda.InvokeStore;
-}
-else {
-    instance = InvokeStoreImpl;
-    if (!noGlobalAwsLambda && globalThis.awslambda) {
-        globalThis.awslambda.InvokeStore = instance;
+var InvokeStore;
+(function (InvokeStore) {
+    let instance = null;
+    async function getInstanceAsync() {
+        if (!instance) {
+            instance = (async () => {
+                const isMulti = "AWS_LAMBDA_MAX_CONCURRENCY" in process.env;
+                const newInstance = isMulti
+                    ? await InvokeStoreMulti.create()
+                    : new InvokeStoreSingle();
+                if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda?.InvokeStore) {
+                    return globalThis.awslambda.InvokeStore;
+                }
+                else if (!NO_GLOBAL_AWS_LAMBDA && globalThis.awslambda) {
+                    globalThis.awslambda.InvokeStore = newInstance;
+                    return newInstance;
+                }
+                else {
+                    return newInstance;
+                }
+            })();
+        }
+        return instance;
     }
-}
-const InvokeStore = instance;
+    InvokeStore.getInstanceAsync = getInstanceAsync;
+    InvokeStore._testing = process.env.AWS_LAMBDA_BENCHMARK_MODE === "1"
+        ? {
+            reset: () => {
+                instance = null;
+                if (globalThis.awslambda?.InvokeStore) {
+                    delete globalThis.awslambda.InvokeStore;
+                }
+                globalThis.awslambda = {};
+            },
+        }
+        : undefined;
+})(InvokeStore || (InvokeStore = {}));
 
-export { InvokeStore };
+export { InvokeStore, InvokeStoreBase };

package/node_modules/@aws/lambda-invoke-store/dist-types/invoke-store.benchmark.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@aws/lambda-invoke-store/dist-types/invoke-store.d.ts

@@ -1,57 +1,50 @@
-/**
- * Generic store context that uses protected keys for Lambda fields
- * and allows custom user properties
- */
-export interface InvokeStoreContext {
-    [key: string | symbol]: unknown;
+interface Context {
+    [key: string]: unknown;
+    [key: symbol]: unknown;
+}
+declare global {
+    var awslambda: {
+        InvokeStore?: InvokeStoreBase;
+        [key: string]: unknown;
+    };
 }
 /**
- * InvokeStore implementation class
+ * Base class for AWS Lambda context storage implementations.
+ * Provides core functionality for managing Lambda execution context.
+ *
+ * Implementations handle either single-context (InvokeStoreSingle) or
+ * multi-context (InvokeStoreMulti) scenarios based on Lambda's execution environment.
+ *
+ * @public
  */
-declare class InvokeStoreImpl {
-    private static storage;
+export declare abstract class InvokeStoreBase {
     static readonly PROTECTED_KEYS: {
         readonly REQUEST_ID: symbol;
         readonly X_RAY_TRACE_ID: symbol;
         readonly TENANT_ID: symbol;
     };
-    /**
-     * Initialize and run code within an invoke context
-     */
-    static run<T>(context: InvokeStoreContext, fn: () => T | Promise<T>): T | Promise<T>;
-    /**
-     * Get the complete current context
-     */
-    static getContext(): InvokeStoreContext | undefined;
-    /**
-     * Get a specific value from the context by key
-     */
-    static get<T = unknown>(key: string | symbol): T | undefined;
-    /**
-     * Set a custom value in the current context
-     * Protected Lambda context fields cannot be overwritten
-     */
-    static set(key: string | symbol, value: unknown): void;
-    /**
-     * Get the current request ID
-     */
-    static getRequestId(): string;
-    /**
-     * Get the current X-ray trace ID
-     */
-    static getXRayTraceId(): string | undefined;
-    /**
-     * Get the current tenant ID
-     */
-    static getTenantId(): string | undefined;
-    /**
-     * Check if we're currently within an invoke context
-     */
-    static hasContext(): boolean;
-    /**
-     * Check if a key is protected (readonly Lambda context field)
-     */
-    private static isProtectedKey;
+    abstract getContext(): Context | undefined;
+    abstract hasContext(): boolean;
+    abstract get<T = unknown>(key: string | symbol): T | undefined;
+    abstract set<T = unknown>(key: string | symbol, value: T): void;
+    abstract run<T>(context: Context, fn: () => T): T;
+    protected isProtectedKey(key: string | symbol): boolean;
+    getRequestId(): string;
+    getXRayTraceId(): string | undefined;
+    getTenantId(): string | undefined;
+}
+/**
+ * Provides access to AWS Lambda execution context storage.
+ * Supports both single-context and multi-context environments through different implementations.
+ *
+ * The store manages protected Lambda context fields and allows storing/retrieving custom values
+ * within the execution context.
+ * @public
+ */
+export declare namespace InvokeStore {
+    function getInstanceAsync(): Promise<InvokeStoreBase>;
+    const _testing: {
+        reset: () => void;
+    } | undefined;
 }
-export declare const InvokeStore: typeof InvokeStoreImpl;
 export {};

package/node_modules/@aws/lambda-invoke-store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/lambda-invoke-store",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Invoke scoped data storage for AWS Lambda Node.js Runtime Environment",
   "homepage": "https://github.com/awslabs/aws-lambda-invoke-store",
   "main": "./dist-cjs/invoke-store.js",
@@ -32,7 +32,7 @@
     "build": "yarn clean && yarn build:types && node ./scripts/build-rollup.js",
     "build:types": "tsc -p tsconfig.types.json",
     "clean": "rm -rf dist-types dist-cjs dist-es",
-    "test": "vitest run",
+    "test": "vitest run --reporter verbose",
     "test:watch": "vitest watch",
     "release": "yarn build && changeset publish"
   },

package/node_modules/@aws-sdk/client-iam/README.md

@@ -208,6 +208,14 @@ see LICENSE for more information.
 
 ## Client Commands (Operations List)
 
+<details>
+<summary>
+AcceptDelegationRequest
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/AcceptDelegationRequestCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AcceptDelegationRequestCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AcceptDelegationRequestCommandOutput/)
+
+</details>
 <details>
 <summary>
 AddClientIDToOpenIDConnectProvider
@@ -231,6 +239,14 @@ AddUserToGroup
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/AddUserToGroupCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AddUserToGroupCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AddUserToGroupCommandOutput/)
 
+</details>
+<details>
+<summary>
+AssociateDelegationRequest
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/AssociateDelegationRequestCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AssociateDelegationRequestCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/AssociateDelegationRequestCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -719,6 +735,14 @@ GetCredentialReport
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetCredentialReportCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetCredentialReportCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetCredentialReportCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetDelegationRequest
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetDelegationRequestCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetDelegationRequestCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetDelegationRequestCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -735,6 +759,14 @@ GetGroupPolicy
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetGroupPolicyCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetGroupPolicyCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetGroupPolicyCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetHumanReadableSummary
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetHumanReadableSummaryCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetHumanReadableSummaryCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/GetHumanReadableSummaryCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -911,6 +943,14 @@ ListAttachedUserPolicies
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/ListAttachedUserPoliciesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ListAttachedUserPoliciesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ListAttachedUserPoliciesCommandOutput/)
 
+</details>
+<details>
+<summary>
+ListDelegationRequests
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/ListDelegationRequestsCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ListDelegationRequestsCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ListDelegationRequestsCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -1191,6 +1231,14 @@ PutUserPolicy
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/PutUserPolicyCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/PutUserPolicyCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/PutUserPolicyCommandOutput/)
 
+</details>
+<details>
+<summary>
+RejectDelegationRequest
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/RejectDelegationRequestCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/RejectDelegationRequestCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/RejectDelegationRequestCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -1231,6 +1279,14 @@ ResyncMFADevice
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/ResyncMFADeviceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ResyncMFADeviceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/ResyncMFADeviceCommandOutput/)
 
+</details>
+<details>
+<summary>
+SendDelegationToken
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/SendDelegationTokenCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/SendDelegationTokenCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/SendDelegationTokenCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -1415,6 +1471,14 @@ UpdateAssumeRolePolicy
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/UpdateAssumeRolePolicyCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/UpdateAssumeRolePolicyCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/UpdateAssumeRolePolicyCommandOutput/)
 
+</details>
+<details>
+<summary>
+UpdateDelegationRequest
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/UpdateDelegationRequestCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/UpdateDelegationRequestCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-iam/Interface/UpdateDelegationRequestCommandOutput/)
+
 </details>
 <details>
 <summary>