@kensio/yulin 1.19.0 → 1.19.2

package/dist/service/cloudformation/terraform/sim-tf-attribute-reads.js

@@ -0,0 +1,60 @@
+/**
+ * How one Terraform attribute is read off the CloudFormation Resource standing
+ * in for it.
+ *
+ * `Ref` means the CloudFormation Resource's own Ref value returns it, and any
+ * other string is the `Fn::GetAtt` attribute name. The table is per Terraform
+ * type because the provider and CloudFormation disagree about which value is
+ * the Ref. An `AWS::SNS::Topic` Ref is the topic ARN, an `AWS::SQS::Queue` Ref
+ * is the queue URL, and an `AWS::S3::Bucket` Ref is the bucket name.
+ */
+export const terraformAttributeReads = new Map([
+    ["aws_s3_bucket.id", "Ref"],
+    ["aws_s3_bucket.bucket", "Ref"],
+    ["aws_s3_bucket.arn", "Arn"],
+    ["aws_s3_bucket.bucket_regional_domain_name", "RegionalDomainName"],
+    ["aws_s3_bucket.bucket_domain_name", "DomainName"],
+    ["aws_dynamodb_table.id", "Ref"],
+    ["aws_dynamodb_table.name", "Ref"],
+    ["aws_dynamodb_table.arn", "Arn"],
+    ["aws_dynamodb_table.stream_arn", "StreamArn"],
+    ["aws_sqs_queue.id", "Ref"],
+    ["aws_sqs_queue.url", "Ref"],
+    ["aws_sqs_queue.arn", "Arn"],
+    ["aws_sqs_queue.name", "QueueName"],
+    ["aws_sns_topic.id", "Ref"],
+    ["aws_sns_topic.arn", "Ref"],
+    ["aws_sns_topic.name", "TopicName"],
+    ["aws_lambda_function.arn", "Arn"],
+    /*
+     * `invoke_arn` is the API Gateway invocation URI in Terraform, and the
+     * CloudFormation property it feeds, `IntegrationUri`, takes the function ARN
+     * itself. The ARN is what a synthesized template carries, so that is what
+     * this reads. `qualified_arn` has no entry, because it names a version and
+     * dropping the qualifier would point at the wrong code.
+     */
+    ["aws_lambda_function.invoke_arn", "Arn"],
+    ["aws_lambda_function.function_name", "Ref"],
+    ["aws_lambda_function.id", "Ref"],
+    ["aws_iam_role.arn", "Arn"],
+    ["aws_iam_role.id", "Ref"],
+    ["aws_iam_role.name", "Ref"],
+    ["aws_kms_key.arn", "Arn"],
+    ["aws_kms_key.id", "Ref"],
+    ["aws_kms_key.key_id", "Ref"],
+    ["aws_apigatewayv2_api.id", "Ref"],
+    ["aws_apigatewayv2_api.api_endpoint", "ApiEndpoint"],
+    ["aws_apigatewayv2_integration.id", "Ref"],
+    ["aws_cognito_user_pool.id", "Ref"],
+    ["aws_cognito_user_pool.arn", "Arn"],
+    ["aws_cognito_user_pool_client.id", "Ref"],
+    ["aws_cloudwatch_log_group.arn", "Arn"],
+    ["aws_cloudwatch_log_group.name", "Ref"],
+    ["aws_cloudwatch_event_rule.arn", "Arn"],
+    ["aws_cloudwatch_event_rule.name", "Ref"],
+    ["aws_secretsmanager_secret.id", "Ref"],
+    ["aws_secretsmanager_secret.arn", "Ref"],
+    ["aws_ecr_repository.arn", "Arn"],
+    ["aws_ecr_repository.repository_url", "RepositoryUri"],
+]);
+//# sourceMappingURL=sim-tf-attribute-reads.js.map

package/dist/service/cloudformation/terraform/sim-tf-attribute-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attribute-reads.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-attribute-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAgC,IAAI,GAAG,CAAC;IAC1E,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC/B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,2CAA2C,EAAE,oBAAoB,CAAC;IACnE,CAAC,kCAAkC,EAAE,YAAY,CAAC;IAClD,CAAC,uBAAuB,EAAE,KAAK,CAAC;IAChC,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,+BAA+B,EAAE,WAAW,CAAC;IAC9C,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC;;;;;;OAMG;IACH,CAAC,gCAAgC,EAAE,KAAK,CAAC;IACzC,CAAC,mCAAmC,EAAE,KAAK,CAAC;IAC5C,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAC1B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAC1B,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACzB,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC7B,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC,CAAC,mCAAmC,EAAE,aAAa,CAAC;IACpD,CAAC,iCAAiC,EAAE,KAAK,CAAC;IAC1C,CAAC,0BAA0B,EAAE,KAAK,CAAC;IACnC,CAAC,2BAA2B,EAAE,KAAK,CAAC;IACpC,CAAC,iCAAiC,EAAE,KAAK,CAAC;IAC1C,CAAC,8BAA8B,EAAE,KAAK,CAAC;IACvC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,gCAAgC,EAAE,KAAK,CAAC;IACzC,CAAC,8BAA8B,EAAE,KAAK,CAAC;IACvC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,mCAAmC,EAAE,eAAe,CAAC;CACvD,CAAC,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-attributes.d.ts

@@ -0,0 +1,60 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+/**
+ * What a mapping function is given to build one CloudFormation Resource.
+ */
+export interface TerraformMappingContext {
+    readonly resource: TerraformResource;
+    readonly resolver: TerraformReferenceResolver;
+}
+/**
+ * The value of one Terraform attribute, as CloudFormation would carry it.
+ *
+ * An attribute the plan resolved returns its value. An attribute still unknown
+ * returns the intrinsic that reads it off the Resource producing it, taken from
+ * the reference the configuration records for that attribute. An attribute with
+ * neither returns undefined.
+ */
+export declare function attribute(context: TerraformMappingContext, key: string): SimCfnTemplateValue | undefined;
+/**
+ * A Terraform nested block, which the plan represents as a list of records even
+ * where the schema allows only one.
+ */
+export declare function block(context: TerraformMappingContext, key: string): Record<string, unknown> | undefined;
+/** Every entry of a Terraform nested block that repeats. */
+export declare function blocks(context: TerraformMappingContext, key: string): readonly Record<string, unknown>[];
+/**
+ * A CloudFormation `Tags` list built from a Terraform `tags` map.
+ *
+ * The provider also carries `tags_all`, which is `tags` merged with the
+ * provider's default tags. `tags_all` is the one that ends up on the resource.
+ */
+export declare function tags(context: TerraformMappingContext): SimCfnTemplateValue | undefined;
+/**
+ * One key of a Terraform attribute record.
+ *
+ * Provider attribute names are snake case, which this project's TypeScript
+ * settings will not let through a dotted access on an index signature.
+ */
+export declare function field(record: Record<string, unknown>, key: string): unknown;
+/**
+ * A Terraform value, carried as the template value CloudFormation reads.
+ *
+ * Only an absent value comes back undefined. `false`, `0` and `""` are values
+ * a resource was configured with, and a truthiness test here would drop
+ * `block_public_acls = false` as though it had never been written.
+ */
+export declare function templateValue(value: unknown): SimCfnTemplateValue | undefined;
+/**
+ * CloudFormation properties read straight off Terraform attributes.
+ *
+ * The table is keyed by CloudFormation property name and holds the Terraform
+ * attribute each one is read from. Most of a mapping is this, because most
+ * properties differ only in what they are called, and the ones that need more
+ * than a rename are added to what this returns.
+ */
+export declare function renamed(context: TerraformMappingContext, names: Readonly<Record<string, string>>): Record<string, SimCfnTemplateValue>;
+/** A property record with the keys carrying no value taken back out of it. */
+export declare function properties(record: Record<string, SimCfnTemplateValue | undefined>): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-attributes.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attributes.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAIxE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CAQjC;AAqCD;;;GAGG;AACH,wBAAgB,KAAK,CACnB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAYrC;AAED,4DAA4D;AAC5D,wBAAgB,MAAM,CACpB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAIpC;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAClB,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,GAAG,SAAS,CAcjC;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAM7E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,uBAAuB,EAChC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAMrC;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC,GACtD,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAMrC"}

package/dist/service/cloudformation/terraform/sim-tf-attributes.js

@@ -0,0 +1,121 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * The value of one Terraform attribute, as CloudFormation would carry it.
+ *
+ * An attribute the plan resolved returns its value. An attribute still unknown
+ * returns the intrinsic that reads it off the Resource producing it, taken from
+ * the reference the configuration records for that attribute. An attribute with
+ * neither returns undefined.
+ */
+export function attribute(context, key) {
+    const { resource, resolver } = context;
+    if (resource.unknown[key] === true) {
+        return referencedValue(resource, key, resolver);
+    }
+    return templateValue(resource.values[key]);
+}
+/**
+ * The intrinsic one unknown attribute reads, from the references its
+ * expression records.
+ *
+ * Terraform lists the attribute form and the bare resource form of the same
+ * reference. The attribute form resolves to a `Fn::GetAtt` and is the one
+ * wanted, so the first reference that resolves at all wins, and the list is
+ * ordered longest first to reach it.
+ */
+function referencedValue(resource, key, resolver) {
+    const expression = resource.expressions[key];
+    if (!isRecord(expression)) {
+        return undefined;
+    }
+    const references = longestFirst(expression.references ?? []);
+    for (const reference of references) {
+        const resolved = resolver.resolve(reference, resource.modulePath);
+        if (resolved !== undefined) {
+            return resolved;
+        }
+    }
+    return undefined;
+}
+/**
+ * A Terraform nested block, which the plan represents as a list of records even
+ * where the schema allows only one.
+ */
+export function block(context, key) {
+    const value = context.resource.values[key];
+    if (isRecord(value)) {
+        return value;
+    }
+    if (Array.isArray(value) && isRecord(value[0])) {
+        return value[0];
+    }
+    return undefined;
+}
+/** Every entry of a Terraform nested block that repeats. */
+export function blocks(context, key) {
+    const value = context.resource.values[key];
+    return Array.isArray(value) ? value.filter((entry) => isRecord(entry)) : [];
+}
+/**
+ * A CloudFormation `Tags` list built from a Terraform `tags` map.
+ *
+ * The provider also carries `tags_all`, which is `tags` merged with the
+ * provider's default tags. `tags_all` is the one that ends up on the resource.
+ */
+export function tags(context) {
+    const value = field(context.resource.values, "tags_all") ??
+        field(context.resource.values, "tags");
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const entries = Object.entries(value);
+    return entries.length === 0
+        ? undefined
+        : entries.map(([Key, Value]) => ({ Key, Value: Value }));
+}
+/**
+ * One key of a Terraform attribute record.
+ *
+ * Provider attribute names are snake case, which this project's TypeScript
+ * settings will not let through a dotted access on an index signature.
+ */
+export function field(record, key) {
+    return record[key];
+}
+/**
+ * A Terraform value, carried as the template value CloudFormation reads.
+ *
+ * Only an absent value comes back undefined. `false`, `0` and `""` are values
+ * a resource was configured with, and a truthiness test here would drop
+ * `block_public_acls = false` as though it had never been written.
+ */
+export function templateValue(value) {
+    if (value === null || value === undefined) {
+        return undefined;
+    }
+    return value;
+}
+/**
+ * CloudFormation properties read straight off Terraform attributes.
+ *
+ * The table is keyed by CloudFormation property name and holds the Terraform
+ * attribute each one is read from. Most of a mapping is this, because most
+ * properties differ only in what they are called, and the ones that need more
+ * than a rename are added to what this returns.
+ */
+export function renamed(context, names) {
+    const entries = Object.entries(names).map(([property, name]) => [property, attribute(context, name)]);
+    return properties(Object.fromEntries(entries));
+}
+/** A property record with the keys carrying no value taken back out of it. */
+export function properties(record) {
+    return Object.fromEntries(Object.entries(record).filter((entry) => entry[1] !== undefined));
+}
+//# sourceMappingURL=sim-tf-attributes.js.map

package/dist/service/cloudformation/terraform/sim-tf-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attributes.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAI9D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAW7D;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CACnB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CACpB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,OAAgC;IAEhC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,MAA+B,EAAE,GAAW;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgC,EAChC,KAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAU,CACpE,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,MAAuD;IAEvD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,KAAK,EAA0C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC1E,CACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-config.d.ts

@@ -0,0 +1,14 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource, TerraformResourceFold } from "./sim-tf-mapping.type.js";
+/** A parameter. */
+export declare function ssmParameter(context: TerraformMappingContext): TerraformMappedResource;
+/** A secret. Its value arrives as an aws_secretsmanager_secret_version. */
+export declare function secretsManagerSecret(context: TerraformMappingContext): TerraformMappedResource;
+/**
+ * The secret value, which Terraform keeps in a resource of its own.
+ *
+ * CloudFormation carries the value on the `AWS::SecretsManager::Secret`, and
+ * simulated Secrets Manager refuses a Secret with no value at all.
+ */
+export declare const secretsManagerFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-map-config.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-config.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-config.ts"],"names":[],"mappings":"AAOA,OAAO,EAAW,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,mBAAmB;AACnB,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAUzB;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAKzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAUvE,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-config.js

@@ -0,0 +1,36 @@
+import { renamed } from "./sim-tf-attributes.js";
+/** A parameter. */
+export function ssmParameter(context) {
+    return {
+        Type: "AWS::SSM::Parameter",
+        Properties: renamed(context, {
+            Name: "name",
+            Type: "type",
+            Value: "value",
+            Description: "description",
+        }),
+    };
+}
+/** A secret. Its value arrives as an aws_secretsmanager_secret_version. */
+export function secretsManagerSecret(context) {
+    return {
+        Type: "AWS::SecretsManager::Secret",
+        Properties: renamed(context, { Name: "name", Description: "description" }),
+    };
+}
+/**
+ * The secret value, which Terraform keeps in a resource of its own.
+ *
+ * CloudFormation carries the value on the `AWS::SecretsManager::Secret`, and
+ * simulated Secrets Manager refuses a Secret with no value at all.
+ */
+export const secretsManagerFolds = new Map([
+    [
+        "aws_secretsmanager_secret_version",
+        {
+            parentAttribute: "secret_id",
+            properties: (context) => renamed(context, { SecretString: "secret_string" }),
+        },
+    ],
+]);
+//# sourceMappingURL=sim-tf-map-config.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-config.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-config.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAgC,MAAM,wBAAwB,CAAC;AAM/E,mBAAmB;AACnB,MAAM,UAAU,YAAY,CAC1B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,aAAa;SAC3B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAClC,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,IAAI,GAAG,CAAC;IACN;QACE,mCAAmC;QACnC;YACE,eAAe,EAAE,WAAW;YAC5B,UAAU,EAAE,CAAC,OAAO,EAAuC,EAAE,CAC3D,OAAO,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;SACtD;KACF;CACF,CAAC,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-dynamodb.d.ts

@@ -0,0 +1,15 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/** A table, with the key schema rebuilt from its key attribute names. */
+export declare function dynamodbTable(context: TerraformMappingContext): TerraformMappedResource;
+/**
+ * A key schema, from the hash and range key attribute names.
+ *
+ * An optional string inside a nested block arrives as an empty string rather
+ * than as null, which is how a top-level optional attribute arrives. A range
+ * key that was never declared reads as `""`, and taking it at face value
+ * declares an index with a nameless RANGE element.
+ */
+export declare function keySchema(hashKey: unknown, rangeKey: unknown): SimCfnTemplateValue | undefined;
+//# sourceMappingURL=sim-tf-map-dynamodb.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-dynamodb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-dynamodb.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,yEAAyE;AACzE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAoBzB;AAsBD;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,GAChB,mBAAmB,GAAG,SAAS,CAUjC"}

package/dist/service/cloudformation/terraform/sim-tf-map-dynamodb.js

@@ -0,0 +1,74 @@
+import { block, blocks, field, properties, renamed, tags, } from "./sim-tf-attributes.js";
+/** A table, with the key schema rebuilt from its key attribute names. */
+export function dynamodbTable(context) {
+    const values = context.resource.values;
+    const ttl = block(context, "ttl");
+    return {
+        Type: "AWS::DynamoDB::Table",
+        Properties: {
+            ...renamed(context, { TableName: "name", BillingMode: "billing_mode" }),
+            ...properties({
+                AttributeDefinitions: attributeDefinitions(context),
+                KeySchema: keySchema(field(values, "hash_key"), field(values, "range_key")),
+                GlobalSecondaryIndexes: secondaryIndexes(context),
+                TimeToLiveSpecification: timeToLive(ttl),
+                Tags: tags(context),
+            }),
+        },
+    };
+}
+function attributeDefinitions(context) {
+    return blocks(context, "attribute").map((entry) => ({
+        AttributeName: field(entry, "name"),
+        AttributeType: field(entry, "type"),
+    }));
+}
+function timeToLive(ttl) {
+    return ttl === undefined
+        ? undefined
+        : {
+            AttributeName: field(ttl, "attribute_name"),
+            Enabled: field(ttl, "enabled") === true,
+        };
+}
+/**
+ * A key schema, from the hash and range key attribute names.
+ *
+ * An optional string inside a nested block arrives as an empty string rather
+ * than as null, which is how a top-level optional attribute arrives. A range
+ * key that was never declared reads as `""`, and taking it at face value
+ * declares an index with a nameless RANGE element.
+ */
+export function keySchema(hashKey, rangeKey) {
+    if (!named(hashKey)) {
+        return undefined;
+    }
+    const range = named(rangeKey)
+        ? [{ AttributeName: rangeKey, KeyType: "RANGE" }]
+        : [];
+    return [{ AttributeName: hashKey, KeyType: "HASH" }, ...range];
+}
+function named(value) {
+    return typeof value === "string" && value.length > 0;
+}
+function secondaryIndexes(context) {
+    const indexes = blocks(context, "global_secondary_index");
+    if (indexes.length === 0) {
+        return undefined;
+    }
+    return indexes.map((index) => ({
+        IndexName: field(index, "name"),
+        KeySchema: keySchema(field(index, "hash_key"), field(index, "range_key")) ?? [],
+        Projection: properties({
+            ProjectionType: field(index, "projection_type"),
+            NonKeyAttributes: nonEmptyList(field(index, "non_key_attributes")),
+        }),
+    }));
+}
+/** A Terraform list attribute, where the provider left anything in it. */
+function nonEmptyList(value) {
+    return Array.isArray(value) && value.length > 0
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=sim-tf-map-dynamodb.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-dynamodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-dynamodb.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,GAEL,MAAM,wBAAwB,CAAC;AAGhC,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAC3B,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAElC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;YACvE,GAAG,UAAU,CAAC;gBACZ,oBAAoB,EAAE,oBAAoB,CAAC,OAAO,CAAC;gBACnD,SAAS,EAAE,SAAS,CAClB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EACzB,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAC3B;gBACD,sBAAsB,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACjD,uBAAuB,EAAE,UAAU,CAAC,GAAG,CAAC;gBACxC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;QAC7C,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;KAC9C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,UAAU,CACjB,GAAwC;IAExC,OAAO,GAAG,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAW;YACrD,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,IAAI;SACxC,CAAC;AACR,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgB,EAChB,QAAiB;IAEjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACjD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAE1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;QACzC,SAAS,EACP,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE;QACtE,UAAU,EAAE,UAAU,CAAC;YACrB,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAW;YACzD,gBAAgB,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;SACnE,CAAC;KACH,CAAC,CAAC,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-http-api-route.d.ts

@@ -0,0 +1,5 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/** A route, which needs the integration it targets to have been created. */
+export declare function httpApiRoute(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-http-api-route.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-http-api-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-http-api-route.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-http-api-route.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,4EAA4E;AAC5E,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAazB"}

package/dist/service/cloudformation/terraform/sim-tf-map-http-api-route.js

@@ -0,0 +1,32 @@
+import { attribute, properties, renamed, } from "./sim-tf-attributes.js";
+/** A route, which needs the integration it targets to have been created. */
+export function httpApiRoute(context) {
+    return {
+        Type: "AWS::ApiGatewayV2::Route",
+        Properties: {
+            ...renamed(context, {
+                ApiId: "api_id",
+                RouteKey: "route_key",
+                AuthorizationType: "authorization_type",
+            }),
+            ...properties({ Target: routeTarget(context) }),
+        },
+        requires: ["Target"],
+    };
+}
+/**
+ * What the route sends a request to, as `integrations/<integration id>`.
+ *
+ * Terraform writes that string itself, and the integration ID inside it is
+ * unknown until the integration exists, which makes the whole string unknown.
+ * What survives is a reference to the integration, and a reference on its own
+ * is the ID without the prefix CloudFormation expects.
+ */
+function routeTarget(context) {
+    const target = attribute(context, "target");
+    if (target === undefined || typeof target === "string") {
+        return target;
+    }
+    return { "Fn::Join": ["", ["integrations/", target]] };
+}
+//# sourceMappingURL=sim-tf-map-http-api-route.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-http-api-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-http-api-route.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-http-api-route.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,SAAS,EACT,UAAU,EACV,OAAO,GAER,MAAM,wBAAwB,CAAC;AAGhC,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAC1B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,WAAW;gBACrB,iBAAiB,EAAE,oBAAoB;aACxC,CAAC;YACF,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;SAChD;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,OAAgC;IAEhC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE5C,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-http-api.d.ts

@@ -0,0 +1,12 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/** An HTTP API. */
+export declare function httpApi(context: TerraformMappingContext): TerraformMappedResource;
+/**
+ * An integration. Its URI is the value a plan most often cannot resolve,
+ * because it names a function that does not exist yet.
+ */
+export declare function httpApiIntegration(context: TerraformMappingContext): TerraformMappedResource;
+/** A stage. */
+export declare function httpApiStage(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-http-api.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-http-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-http-api.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-http-api.ts"],"names":[],"mappings":"AAOA,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,mBAAmB;AACnB,wBAAgB,OAAO,CACrB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAWzB;AAgBD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAWzB;AAED,eAAe;AACf,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CASzB"}

package/dist/service/cloudformation/terraform/sim-tf-map-http-api.js

@@ -0,0 +1,52 @@
+import { block, field, properties, renamed, tags, templateValue, } from "./sim-tf-attributes.js";
+/** An HTTP API. */
+export function httpApi(context) {
+    return {
+        Type: "AWS::ApiGatewayV2::Api",
+        Properties: {
+            ...renamed(context, { Name: "name", ProtocolType: "protocol_type" }),
+            ...properties({
+                CorsConfiguration: cors(block(context, "cors_configuration")),
+                Tags: tags(context),
+            }),
+        },
+    };
+}
+function cors(configured) {
+    if (configured === undefined) {
+        return undefined;
+    }
+    return properties({
+        AllowOrigins: templateValue(field(configured, "allow_origins")),
+        AllowMethods: templateValue(field(configured, "allow_methods")),
+        AllowHeaders: templateValue(field(configured, "allow_headers")),
+    });
+}
+/**
+ * An integration. Its URI is the value a plan most often cannot resolve,
+ * because it names a function that does not exist yet.
+ */
+export function httpApiIntegration(context) {
+    return {
+        Type: "AWS::ApiGatewayV2::Integration",
+        Properties: renamed(context, {
+            ApiId: "api_id",
+            IntegrationType: "integration_type",
+            IntegrationUri: "integration_uri",
+            PayloadFormatVersion: "payload_format_version",
+        }),
+        requires: ["IntegrationUri"],
+    };
+}
+/** A stage. */
+export function httpApiStage(context) {
+    return {
+        Type: "AWS::ApiGatewayV2::Stage",
+        Properties: renamed(context, {
+            ApiId: "api_id",
+            StageName: "name",
+            AutoDeploy: "auto_deploy",
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-http-api.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-http-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-http-api.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-http-api.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,EACJ,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAGhC,mBAAmB;AACnB,MAAM,UAAU,OAAO,CACrB,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;YACpE,GAAG,UAAU,CAAC;gBACZ,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;gBAC7D,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,UAA+C;IAE/C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC;QAChB,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;KAChE,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,KAAK,EAAE,QAAQ;YACf,eAAe,EAAE,kBAAkB;YACnC,cAAc,EAAE,iBAAiB;YACjC,oBAAoB,EAAE,wBAAwB;SAC/C,CAAC;QACF,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,eAAe;AACf,MAAM,UAAU,YAAY,CAC1B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,aAAa;SAC1B,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-iam.d.ts

@@ -0,0 +1,9 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource, TerraformResourceFold } from "./sim-tf-mapping.type.js";
+/** A role. The policies on it arrive as resources of their own. */
+export declare function iamRole(context: TerraformMappingContext): TerraformMappedResource;
+/** A log group. Terraform spells "never expire" as a retention of zero. */
+export declare function logGroup(context: TerraformMappingContext): TerraformMappedResource;
+/** The IAM resources that attach policy to a role declared elsewhere. */
+export declare const iamRoleFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-map-iam.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-iam.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-iam.ts"],"names":[],"mappings":"AAQA,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,mEAAmE;AACnE,wBAAgB,OAAO,CACrB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAgBzB;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CACtB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAYzB;AAED,yEAAyE;AACzE,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAWnE,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-iam.js

@@ -0,0 +1,80 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { attribute, field, properties, renamed, tags, templateValue, } from "./sim-tf-attributes.js";
+/** A role. The policies on it arrive as resources of their own. */
+export function iamRole(context) {
+    const assume = jsonDocument(field(context.resource.values, "assume_role_policy"));
+    return {
+        Type: "AWS::IAM::Role",
+        Properties: {
+            ...renamed(context, { RoleName: "name" }),
+            ...properties({
+                AssumeRolePolicyDocument: assume,
+                Tags: tags(context),
+            }),
+        },
+        lost: assume === undefined ? ["assume_role_policy"] : [],
+    };
+}
+/** A log group. Terraform spells "never expire" as a retention of zero. */
+export function logGroup(context) {
+    const retention = attribute(context, "retention_in_days");
+    return {
+        Type: "AWS::Logs::LogGroup",
+        Properties: {
+            ...renamed(context, { LogGroupName: "name" }),
+            ...properties({
+                RetentionInDays: retention === 0 ? undefined : retention,
+            }),
+        },
+    };
+}
+/** The IAM resources that attach policy to a role declared elsewhere. */
+export const iamRoleFolds = new Map([
+    [
+        "aws_iam_role_policy",
+        { parentAttribute: "role", properties: inlinePolicy },
+    ],
+    [
+        "aws_iam_role_policy_attachment",
+        { parentAttribute: "role", properties: managedPolicy },
+    ],
+]);
+function inlinePolicy(context) {
+    const document = jsonDocument(field(context.resource.values, "policy"));
+    if (document === undefined) {
+        return {};
+    }
+    return {
+        Policies: [{ PolicyName: policyName(context), PolicyDocument: document }],
+    };
+}
+function managedPolicy(context) {
+    const arn = attribute(context, "policy_arn");
+    return arn === undefined ? {} : { ManagedPolicyArns: [arn] };
+}
+/** The name of an inline role policy, which Terraform lets go unnamed. */
+function policyName(context) {
+    const name = attribute(context, "name");
+    return typeof name === "string" && name.length > 0 ? name : "inline";
+}
+/**
+ * A policy document, which Terraform carries as a JSON string and
+ * CloudFormation as an object.
+ *
+ * A document built with `jsonencode` around an ARN of the same plan is unknown
+ * in its entirety, so this returns nothing rather than a partial policy.
+ */
+function jsonDocument(value) {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const parsed = JSON.parse(value);
+    return isRecord(parsed) ? templateValue(parsed) : undefined;
+}
+//# sourceMappingURL=sim-tf-map-iam.js.map