@kirkelliott/zap 0.1.5 → 0.1.7

package/dist/cli.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+const client_lambda_1 = require("@aws-sdk/client-lambda");
 const client_s3_1 = require("@aws-sdk/client-s3");
 const commander_1 = require("commander");
 const promises_1 = require("node:fs/promises");
@@ -151,4 +152,47 @@ program
     const files = await walkZap(demoDir, 'demo');
     await Promise.all(files.map(({ filePath, key }) => deployFile(b, filePath, key)));
 });
+program
+    .command('debug')
+    .description('show Lambda function URL auth config and resource-based policy')
+    .action(async () => {
+    const cfg = readConfig();
+    const region = cfg.region ?? 'us-east-1';
+    const fn = cfg.functionArn ?? cfg.function ?? 'zap-runtime';
+    const lambda = new client_lambda_1.LambdaClient({ region });
+    try {
+        const { AuthType, FunctionUrl } = await lambda.send(new client_lambda_1.GetFunctionUrlConfigCommand({ FunctionName: fn }));
+        console.log(`url:       ${FunctionUrl}`);
+        console.log(`auth type: ${AuthType}`);
+    }
+    catch (err) {
+        console.log('function url: not found -', err.message);
+    }
+    try {
+        const { Policy } = await lambda.send(new client_lambda_1.GetPolicyCommand({ FunctionName: fn }));
+        console.log('\nresource policy:');
+        console.log(JSON.stringify(JSON.parse(Policy), null, 2));
+    }
+    catch (err) {
+        console.log('\nresource policy: none -', err.message);
+    }
+});
+program
+    .command('repair')
+    .description('re-apply Lambda Function URL public access permissions')
+    .action(async () => {
+    const cfg = readConfig();
+    const region = cfg.region ?? 'us-east-1';
+    const fn = cfg.functionArn ?? cfg.function ?? 'zap-runtime';
+    const lambda = new client_lambda_1.LambdaClient({ region });
+    await lambda.send(new client_lambda_1.UpdateFunctionUrlConfigCommand({ FunctionName: fn, AuthType: 'NONE', Cors: { AllowOrigins: ['*'], AllowMethods: ['*'], AllowHeaders: ['*'] } }));
+    try {
+        await lambda.send(new client_lambda_1.RemovePermissionCommand({ FunctionName: fn, StatementId: 'public-access' }));
+    }
+    catch { }
+    await lambda.send(new client_lambda_1.AddPermissionCommand({ FunctionName: fn, StatementId: 'public-access', Action: 'lambda:InvokeFunctionUrl', Principal: '*', FunctionUrlAuthType: 'NONE' }));
+    console.log('✓  permissions repaired');
+    if (cfg.url)
+        console.log(`\n  → ${cfg.url.trim()}\n`);
+});
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirkelliott/zap",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Drop a .zap file in S3. It becomes an API endpoint.",
   "main": "dist/handler.js",
   "bin": {