@mstuercke/pulumi-modules 0.0.4 → 0.0.6

package/src/iam/SimpleIamRolePolicy.ts

@@ -1,165 +0,0 @@
-import {iam} from '@pulumi/aws'
-import type {SimpleIamRolePolicyConfig} from './SimpleIamRolePolicyConfig'
-import type {CustomResourceOptions, Input} from '@pulumi/pulumi'
-import type {RolePolicyArgs} from '@pulumi/aws/iam'
-import type {PolicyStatement} from '@pulumi/aws/iam/documents'
-
-export class SimpleIamRolePolicy extends iam.RolePolicy {
-  constructor(iamRoleId: string, config: SimpleIamRolePolicyConfig, opts?: CustomResourceOptions) {
-    switch (config.type) {
-      case 'custom':
-        super(config.name, mapIamRolePolicyConfig(iamRoleId, config.name, config.statements), opts)
-        break
-
-      case 'dynamodb':
-        if (config.level !== 'full-access') throw mapError(config)
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Action: ['dynamodb:*'],
-              Effect: 'Allow',
-              Resource: [`${config.tableArn}`, `${config.tableArn}/*`],
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'timestream':
-        if (config.level !== 'full-access') throw mapError(config)
-
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Action: ['timestream:*'],
-              Effect: 'Allow',
-              Resource: [config.dbArn, config.tableArn],
-            },
-            {
-              Action: ['timestream:DescribeEndpoints'],
-              Effect: 'Allow',
-              Resource: ['*'],
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 's3':
-        if (config.level !== 'full-access') throw mapError(config)
-
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Action: ['s3:*'],
-              Effect: 'Allow',
-              Resource: [`${config.bucketArn}`, `${config.bucketArn}/*`],
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'cognito':
-        if (config.level !== 'full-access') throw mapError(config)
-
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Action: ['cognito-idp:*'],
-              Effect: 'Allow',
-              Resource: [config.userPoolArn],
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'websocket':
-        if (config.level !== 'full-access') throw mapError(config)
-
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Effect: 'Allow',
-              Action: 'execute-api:*',
-              Resource: config.apiArn,
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'sns':
-        if (config.level !== 'publish-message') throw mapError(config)
-
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Effect: 'Allow',
-              Action: 'sns:Publish',
-              Resource: config.snsTopicArn,
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'execute-lambda':
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Effect: 'Allow',
-              Action: 'lambda:InvokeFunction',
-              Resource: config.lambdaArn,
-            },
-          ]),
-          opts,
-        )
-        break
-
-      case 'event-bridge':
-        super(
-          config.name,
-          mapIamRolePolicyConfig(iamRoleId, config.name, [
-            {
-              Effect: 'Allow',
-              Action: ['events:DescribeRule', 'events:DisableRule', 'events:EnableRule'],
-              Resource: config.ruleArn,
-            },
-          ]),
-          opts,
-        )
-        break
-
-      default:
-        throw mapError(config)
-    }
-  }
-}
-
-function mapIamRolePolicyConfig(
-  iamRoleId: Input<string>,
-  name: string,
-  statements: Input<Input<PolicyStatement>[]>,
-): RolePolicyArgs {
-  return {
-    role: iamRoleId,
-    name: name,
-    policy: {
-      Version: '2012-10-17',
-      Statement: statements,
-    },
-  }
-}
-
-function mapError(config: SimpleIamRolePolicyConfig): Error {
-  return new Error(`Unable to create policy with config: ${JSON.stringify(config)}`)
-}

package/src/iam/SimpleIamRolePolicyConfig.ts

@@ -1,75 +0,0 @@
-import type {Input} from '@pulumi/pulumi'
-import type {PolicyStatement} from '@pulumi/aws/iam/documents'
-
-export type SimpleIamRolePolicyConfig =
-  | CustomPolicyConfig
-  | DynamoDbPolicyConfig
-  | TimestreamPolicyConfig
-  | S3PolicyConfig
-  | CognitoPolicyConfig
-  | WebsocketPolicyConfig
-  | ExecuteLambdaConfig
-  | SnsPolicyConfig
-  | EventBridgeConfig
-
-interface CustomPolicyConfig {
-  type: 'custom'
-  name: string
-  statements: PolicyStatement[]
-}
-
-interface DynamoDbPolicyConfig {
-  type: 'dynamodb'
-  level: 'full-access'
-  name: string
-  tableArn: Input<string>
-}
-
-interface TimestreamPolicyConfig {
-  type: 'timestream'
-  level: 'full-access'
-  name: string
-  dbArn: Input<string>
-  tableArn: Input<string>
-}
-
-interface S3PolicyConfig {
-  type: 's3'
-  level: 'full-access'
-  name: string
-  bucketArn: Input<string>
-}
-
-interface CognitoPolicyConfig {
-  type: 'cognito'
-  level: 'full-access'
-  name: string
-  userPoolArn: Input<string>
-}
-
-interface WebsocketPolicyConfig {
-  type: 'websocket'
-  level: 'full-access'
-  name: string
-  apiArn: '*'
-}
-
-interface SnsPolicyConfig {
-  type: 'sns'
-  level: 'publish-message'
-  name: string
-  snsTopicArn: Input<string>
-}
-
-interface ExecuteLambdaConfig {
-  type: 'execute-lambda'
-  name: string
-  lambdaArn: Input<string>
-}
-
-interface EventBridgeConfig {
-  type: 'event-bridge'
-  level: 'enable-disable-rule'
-  name: string
-  ruleArn: Input<string>
-}

package/src/iam/index.ts

@@ -1,8 +0,0 @@
-import {SimpleIamRolePolicy} from './SimpleIamRolePolicy'
-
-export * from './SimpleIamRolePolicy'
-export * from './SimpleIamRolePolicyConfig'
-
-export const iam = {
-  SimpleIamRolePolicy,
-}

package/src/index.ts

@@ -1,31 +0,0 @@
-import {auth0} from './auth0'
-import {domain} from './domain'
-import {iam} from './iam'
-import {rest} from './rest'
-import {lambda} from './lambda'
-import {mongodb} from './mongodb'
-import {s3} from './s3'
-import {website} from './website'
-import {websocket} from './websocket'
-
-export * from './auth0'
-export * from './domain'
-export * from './iam'
-export * from './lambda'
-export * from './mongodb'
-export * from './rest'
-export * from './s3'
-export * from './website'
-export * from './websocket'
-
-export const mstuercke = {
-  auth0,
-  domain,
-  iam,
-  lambda,
-  mongodb,
-  rest,
-  s3,
-  website,
-  websocket,
-}

package/src/lambda/NodeLambdaFunction.ts

@@ -1,120 +0,0 @@
-import {iam, lambda} from '@pulumi/aws'
-import {getFile} from '@pulumi/archive'
-import {asset, type CustomResourceOptions, type Output, Resource} from '@pulumi/pulumi'
-
-import type {SimpleIamRolePolicyConfig} from '../iam'
-import type {WithInputs} from './WithInputs'
-import {mstuercke} from '../index'
-
-export type NodeLambdaFunctionArgs<EnvironmentVariables> = {
-  name: string
-  runtime?: string
-  functionHandler?: string
-  memorySize?: number
-  timeoutSeconds?: number
-  lambdaPath: string
-  additionalIamRolePolicies?: SimpleIamRolePolicyConfig[]
-  environmentVariables?: WithInputs<EnvironmentVariables>
-  projectId: string
-}
-
-export class NodeLambdaFunction<
-  EnvironmentVariables extends Record<string, string> = Record<string, string>,
-> extends Resource {
-  name: string
-  arn: Output<string>
-  invokeArn: Output<string>
-
-  constructor(args: NodeLambdaFunctionArgs<EnvironmentVariables>, opts?: CustomResourceOptions) {
-    super('mstuercke:lambda:NodeLambdaFunction', args.name, false, undefined, opts)
-    const {
-      name,
-      additionalIamRolePolicies = [],
-      environmentVariables = undefined,
-      runtime = 'nodejs22.x',
-      functionHandler = 'lambdaFunction.lambdaHandler',
-      memorySize = 128,
-      timeoutSeconds = 30,
-      projectId,
-    } = args
-
-    const role = new iam.Role(
-      name,
-      {
-        name: `${name}-lambda`,
-        assumeRolePolicy: JSON.stringify({
-          Version: '2012-10-17',
-          Statement: [
-            {
-              Action: 'sts:AssumeRole',
-              Principal: {Service: 'lambda.amazonaws.com'},
-              Effect: 'Allow',
-            },
-          ],
-        }),
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    role.id.apply((roleId) => {
-      new mstuercke.iam.SimpleIamRolePolicy(
-        roleId,
-        {
-          type: 'custom',
-          name: 'logging',
-          statements: [
-            {
-              Effect: 'Allow',
-              Action: ['logs:CreateLogGroup', 'logs:CreateLogStream', 'logs:PutLogEvents'],
-              Resource: '*',
-            },
-          ],
-        },
-        {parent: this},
-      )
-
-      for (const config of additionalIamRolePolicies) {
-        new mstuercke.iam.SimpleIamRolePolicy(roleId, config, {parent: this})
-      }
-    })
-
-    const lambdaZip = getFile({
-      type: 'zip',
-      sourceDir: args.lambdaPath,
-      outputPath: `dist/lambda/${name}.zip`,
-    })
-
-    const lambdaFunction = new lambda.Function(
-      name,
-      {
-        name: name,
-        handler: functionHandler,
-        runtime: runtime,
-        memorySize: memorySize,
-        timeout: timeoutSeconds,
-
-        code: new asset.FileArchive(lambdaZip.then((lambdaZip) => lambdaZip.outputPath)),
-        sourceCodeHash: lambdaZip.then((lambdaZip) => lambdaZip.outputBase64sha256),
-
-        role: role.arn,
-
-        environment: {
-          variables: {
-            ...environmentVariables,
-          },
-        },
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    this.name = name
-    this.arn = lambdaFunction.arn
-    this.invokeArn = lambdaFunction.invokeArn
-  }
-}

package/src/lambda/WithInputs.ts

@@ -1,5 +0,0 @@
-import type {Input} from '@pulumi/pulumi'
-
-export type WithInputs<T> = {
-  [key in keyof T]: Input<T[key]>
-}

package/src/lambda/index.ts

@@ -1,7 +0,0 @@
-import {NodeLambdaFunction} from './NodeLambdaFunction'
-
-export * from './NodeLambdaFunction'
-
-export const lambda = {
-  NodeLambdaFunction,
-}

package/src/mongodb/MongoDB.ts

@@ -1,86 +0,0 @@
-import {type CustomResourceOptions, type Output, Resource} from '@pulumi/pulumi'
-import {RandomPassword} from '@pulumi/random'
-import {DatabaseUser, Project, ProjectIpAccessList, Provider, ServerlessInstance} from '@pulumi/mongodbatlas'
-
-export type MongoDBArgs = {
-  organizationId: string
-  projectId: string
-  environmentName: string
-}
-
-export class MongoDB extends Resource {
-  readonly connectionString: Output<string>
-  readonly databaseName: string
-  readonly username: string
-  readonly password: Output<string>
-
-  constructor(args: MongoDBArgs, opts?: CustomResourceOptions) {
-    const {organizationId, projectId, environmentName} = args
-    super('mstuercke:mongodb:MongoDB', organizationId, false, undefined, opts)
-
-    new Provider('provider', {}, {parent: this})
-
-    const mongoProject = new Project(
-      'project',
-      {
-        orgId: organizationId,
-        name: `${projectId}-${environmentName}`,
-        tags: {
-          project: projectId,
-        },
-      },
-      {parent: this},
-    )
-
-    new ProjectIpAccessList(
-      'network-access',
-      {
-        projectId: mongoProject.id,
-        cidrBlock: '0.0.0.0/0',
-      },
-      {parent: mongoProject},
-    )
-
-    const mongoInstance = new ServerlessInstance(
-      'database',
-      {
-        projectId: mongoProject.id,
-        name: `${projectId}-${environmentName}`,
-        providerSettingsBackingProviderName: 'AWS',
-        providerSettingsProviderName: 'SERVERLESS',
-        providerSettingsRegionName: 'EU_WEST_1', // Ireland
-      },
-      {parent: mongoProject},
-    )
-
-    const username = `${projectId}-${environmentName}`
-    const password = new RandomPassword(
-      'password',
-      {
-        length: 32,
-      },
-      {parent: mongoProject},
-    )
-
-    const databaseName = projectId
-    new DatabaseUser(
-      'user',
-      {
-        projectId: mongoProject.id,
-        username,
-        password: password.result,
-        authDatabaseName: 'admin',
-        roles: [
-          {roleName: 'dbAdmin', databaseName},
-          {roleName: 'readWrite', databaseName},
-        ],
-      },
-      {parent: mongoProject},
-    )
-
-    this.connectionString = mongoInstance.connectionStringsStandardSrv
-    this.databaseName = databaseName
-    this.username = username
-    this.password = password.result
-  }
-}

package/src/mongodb/index.ts

@@ -1,9 +0,0 @@
-export * from './MongoDB'
-
-import {MongoDB} from './MongoDB'
-
-export * from './MongoDB'
-
-export const mongodb = {
-  MongoDB,
-}