@kirkelliott/zap 0.1.4 → 0.1.6

package/dist/cli.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+const client_lambda_1 = require("@aws-sdk/client-lambda");
 const client_s3_1 = require("@aws-sdk/client-s3");
 const commander_1 = require("commander");
 const promises_1 = require("node:fs/promises");
@@ -151,4 +152,22 @@ program
     const files = await walkZap(demoDir, 'demo');
     await Promise.all(files.map(({ filePath, key }) => deployFile(b, filePath, key)));
 });
+program
+    .command('repair')
+    .description('re-apply Lambda Function URL public access permissions')
+    .action(async () => {
+    const cfg = readConfig();
+    const region = cfg.region ?? 'us-east-1';
+    const fn = cfg.functionArn ?? cfg.function ?? 'zap-runtime';
+    const lambda = new client_lambda_1.LambdaClient({ region });
+    await lambda.send(new client_lambda_1.UpdateFunctionUrlConfigCommand({ FunctionName: fn, AuthType: 'NONE', Cors: { AllowOrigins: ['*'], AllowMethods: ['*'], AllowHeaders: ['*'] } }));
+    try {
+        await lambda.send(new client_lambda_1.RemovePermissionCommand({ FunctionName: fn, StatementId: 'public-access' }));
+    }
+    catch { }
+    await lambda.send(new client_lambda_1.AddPermissionCommand({ FunctionName: fn, StatementId: 'public-access', Action: 'lambda:InvokeFunctionUrl', Principal: '*', FunctionUrlAuthType: 'NONE' }));
+    console.log('✓  permissions repaired');
+    if (cfg.url)
+        console.log(`\n  → ${cfg.url.trim()}\n`);
+});
 program.parse();

package/dist/init.js

@@ -24,6 +24,19 @@ const policy = (bucket) => JSON.stringify({
         { Effect: 'Allow', Action: ['dynamodb:GetItem', 'dynamodb:PutItem', 'dynamodb:DeleteItem'], Resource: `arn:aws:dynamodb:*:*:table/${TABLE}` },
     ],
 });
+async function allowPublicUrl(lambda, functionArn) {
+    try {
+        await lambda.send(new client_lambda_1.RemovePermissionCommand({ FunctionName: functionArn, StatementId: 'public-access' }));
+    }
+    catch { }
+    await lambda.send(new client_lambda_1.AddPermissionCommand({
+        FunctionName: functionArn,
+        StatementId: 'public-access',
+        Action: 'lambda:InvokeFunctionUrl',
+        Principal: '*',
+        FunctionUrlAuthType: 'NONE',
+    }));
+}
 function step(label) {
     process.stdout.write(`  ${label.padEnd(24)}`);
     return (note = '') => console.log(`✓${note ? '  ' + note : ''}`);
@@ -137,10 +150,6 @@ async function init(region) {
     try {
         const { FunctionUrl } = await lambda.send(new client_lambda_1.GetFunctionUrlConfigCommand({ FunctionName: FUNCTION }));
         await lambda.send(new client_lambda_1.UpdateFunctionUrlConfigCommand({ FunctionName: FUNCTION, AuthType: 'NONE', Cors: { AllowOrigins: ['*'], AllowMethods: ['*'], AllowHeaders: ['*'] } }));
-        try {
-            await lambda.send(new client_lambda_1.AddPermissionCommand({ FunctionName: FUNCTION, StatementId: 'public-access', Action: 'lambda:InvokeFunctionUrl', Principal: '*', FunctionUrlAuthType: 'NONE' }));
-        }
-        catch { }
         url = FunctionUrl;
     }
     catch (err) {
@@ -151,15 +160,9 @@ async function init(region) {
             AuthType: 'NONE',
             Cors: { AllowOrigins: ['*'], AllowMethods: ['*'], AllowHeaders: ['*'] },
         }));
-        await lambda.send(new client_lambda_1.AddPermissionCommand({
-            FunctionName: FUNCTION,
-            StatementId: 'public-access',
-            Action: 'lambda:InvokeFunctionUrl',
-            Principal: '*',
-            FunctionUrlAuthType: 'NONE',
-        }));
         url = FunctionUrl;
     }
+    await allowPublicUrl(lambda, functionArn);
     done();
     (0, node_fs_1.writeFileSync)('.zaprc', JSON.stringify({ bucket, function: FUNCTION, table: TABLE, region, url, functionArn }, null, 2));
     console.log(`\n  → ${url.trim()}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirkelliott/zap",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Drop a .zap file in S3. It becomes an API endpoint.",
   "main": "dist/handler.js",
   "bin": {