@mtndev/cli 2.0.0 → 2.0.1

package/esm/__chunks/ZO55YUSY.js

@@ -1,9 +0,0 @@
-// src/commands/aws/utils/resolve-policy-path.js
-import { fileURLToPath } from "url";
-function resolvePolicyPath(fileName) {
-  return fileURLToPath(new URL(`../iam/policies/${fileName}`, import.meta.url));
-}
-
-export {
-  resolvePolicyPath
-};

package/esm/commands/aws/iam/policies/s3-restrictions-deny-non-s3-services.js

@@ -1,28 +0,0 @@
-// src/commands/aws/iam/policies/s3-restrictions-deny-non-s3-services.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyNonS3Services",
-    Effect: "Deny",
-    NotAction: [
-      "s3:*",
-      "logs:*",
-      "sts:AssumeRole",
-      "iam:PassRole",
-      "kms:Decrypt",
-      "kms:GenerateDataKey",
-      "kms:DescribeKey",
-      "lambda:InvokeFunction"
-    ],
-    Resource: "*"
-  }
-];
-var s3_restrictions_deny_non_s3_services_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  s3_restrictions_deny_non_s3_services_default as default
-};

package/esm/commands/aws/iam/policies/sts-federation.js

@@ -1,19 +0,0 @@
-// src/commands/aws/iam/policies/sts-federation.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "StsFederation",
-    Effect: "Allow",
-    Action: ["sts:GetFederationToken", "sts:GetCallerIdentity"],
-    Resource: "*"
-  }
-];
-var sts_federation_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  sts_federation_default as default
-};

package/esm/commands/aws/iam/policies/user-admins-deny-list.js

@@ -1,183 +0,0 @@
-// src/commands/aws/iam/policies/user-admins-deny-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyAIServices",
-    Effect: "Deny",
-    Action: [
-      "bedrock:*",
-      "sagemaker:*",
-      "comprehend:*",
-      "comprehendmedical:*",
-      "rekognition:*",
-      "textract:*",
-      "personalize:*",
-      "forecast:*",
-      "lex:*",
-      "polly:*",
-      "translate:*",
-      "transcribe:*",
-      "kendra:*",
-      "q:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyOrgAndAccountWrites",
-    Effect: "Deny",
-    Action: [
-      "organizations:*",
-      "account:CloseAccount",
-      "account:DeleteAlternateContact",
-      "account:PutAlternateContact",
-      "account:PutChallengeQuestions",
-      "account:EnableRegion",
-      "account:DisableRegion",
-      "account:PutAccountName"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyBillingMutations",
-    Effect: "Deny",
-    Action: [
-      "aws-portal:Modify*",
-      "billing:Update*",
-      "billing:Put*",
-      "billing:Delete*",
-      "budgets:Modify*",
-      "budgets:Create*",
-      "budgets:Delete*",
-      "savingsplans:Create*",
-      "savingsplans:Delete*",
-      "supportplans:Create*",
-      "supportplans:Delete*",
-      "purchase-orders:Modify*",
-      "purchase-orders:Create*",
-      "cur:Put*",
-      "cur:Delete*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyCloudTrailTampering",
-    Effect: "Deny",
-    Action: [
-      "cloudtrail:StopLogging",
-      "cloudtrail:DeleteTrail",
-      "cloudtrail:UpdateTrail",
-      "cloudtrail:PutEventSelectors",
-      "cloudtrail:DeleteEventDataStore"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyExpensiveServices",
-    Effect: "Deny",
-    Action: [
-      "airflow:CreateEnvironment",
-      "airflow:UpdateEnvironment",
-      "mwaa:*",
-      "transfer:CreateServer",
-      "transfer:UpdateServer",
-      "transfer:StartServer",
-      "shield:CreateSubscription",
-      "shield:CreateProtection",
-      "shield:CreateProtectionGroup"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyKMSDestruction",
-    Effect: "Deny",
-    Action: [
-      "kms:ScheduleKeyDeletion",
-      "kms:DisableKey",
-      "kms:DisableKeyRotation"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "DenyNeptuneViaRds",
-    Effect: "Deny",
-    Action: [
-      "rds:CreateDBCluster",
-      "rds:CreateDBInstance",
-      "rds:ModifyDBCluster",
-      "rds:ModifyDBInstance",
-      "rds:RestoreDBClusterFromSnapshot",
-      "rds:RestoreDBInstanceFromDBSnapshot"
-    ],
-    Resource: "*",
-    Condition: {
-      StringEquals: {
-        "rds:DatabaseEngine": "neptune"
-      }
-    }
-  },
-  {
-    Sid: "DenyExpensiveGpuEc2",
-    Effect: "Deny",
-    Action: [
-      "ec2:RunInstances",
-      "ec2:RequestSpotInstances",
-      "ec2:RequestSpotFleet",
-      "ec2:ModifyInstanceAttribute"
-    ],
-    Resource: "*",
-    Condition: {
-      StringLike: {
-        "ec2:InstanceType": [
-          "p2.*",
-          "p3.*",
-          "p4d.*",
-          "p4de.*",
-          "p5.*",
-          "p5d.*",
-          "p5e.*",
-          "p5en.*",
-          "p6*",
-          "g3.*",
-          "g3s.*",
-          "g4dn.*",
-          "g4ad.*",
-          "g5.*",
-          "g5g.*",
-          "g6.*",
-          "g6e.*",
-          "g6f.*",
-          "inf1.*",
-          "inf2.*",
-          "trn1.*",
-          "trn1n.*",
-          "trn2.*",
-          "trn2a.*",
-          "trn2i.*",
-          "dl1.*",
-          "dl2q.*",
-          "f1.*",
-          "f2.*",
-          "vt1.*",
-          "hpc6id.*",
-          "u-12tb1.metal",
-          "u-18tb1.metal",
-          "u-24tb1.metal",
-          "u-6tb1.56xlarge",
-          "u-9tb1.112xlarge",
-          "x2iedn.*",
-          "x2idn.*",
-          "x2iezn.*"
-        ]
-      }
-    }
-  }
-];
-var user_admins_deny_list_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  user_admins_deny_list_default as default
-};

package/esm/commands/aws/iam/policies/user-admins-deny-regions-list.js

@@ -1,49 +0,0 @@
-// src/commands/aws/iam/policies/user-admins-deny-regions-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "DenyNonApprovedRegions",
-    Effect: "Deny",
-    NotAction: [
-      "iam:*",
-      "organizations:*",
-      "route53:*",
-      "route53domains:*",
-      "cloudfront:*",
-      "waf:*",
-      "wafv2:*",
-      "shield:*",
-      "globalaccelerator:*",
-      "sts:*",
-      "support:*",
-      "supportplans:*",
-      "trustedadvisor:*",
-      "health:*",
-      "budgets:*",
-      "ce:*",
-      "cur:*",
-      "account:*",
-      "billing:*",
-      "aws-portal:*",
-      "tag:*",
-      "resource-groups:*",
-      "ram:*",
-      "cloudshell:*"
-    ],
-    Resource: "*",
-    Condition: {
-      StringNotEquals: {
-        "aws:RequestedRegion": ["us-east-1", "us-east-2", "us-west-2"]
-      }
-    }
-  }
-];
-var user_admins_deny_regions_list_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  user_admins_deny_regions_list_default as default
-};

package/esm/commands/aws/iam/policies/user-admins-self-service-iam.js

@@ -1,64 +0,0 @@
-// src/commands/aws/iam/policies/user-admins-self-service-iam.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "ViewAccountInfo",
-    Effect: "Allow",
-    Action: ["iam:GetAccountPasswordPolicy", "iam:ListVirtualMFADevices"],
-    Resource: "*"
-  },
-  {
-    Sid: "ManageOwnPassword",
-    Effect: "Allow",
-    Action: ["iam:ChangePassword", "iam:GetUser"],
-    Resource: "arn:aws:iam::*:user/${aws:username}"
-  },
-  {
-    Sid: "ManageOwnAccessKeys",
-    Effect: "Allow",
-    Action: [
-      "iam:CreateAccessKey",
-      "iam:DeleteAccessKey",
-      "iam:ListAccessKeys",
-      "iam:UpdateAccessKey",
-      "iam:GetAccessKeyLastUsed"
-    ],
-    Resource: "arn:aws:iam::*:user/${aws:username}"
-  },
-  {
-    Sid: "ManageOwnMFA",
-    Effect: "Allow",
-    Action: [
-      "iam:CreateVirtualMFADevice",
-      "iam:DeleteVirtualMFADevice",
-      "iam:EnableMFADevice",
-      "iam:ListMFADevices",
-      "iam:ResyncMFADevice",
-      "iam:DeactivateMFADevice"
-    ],
-    Resource: [
-      "arn:aws:iam::*:mfa/${aws:username}",
-      "arn:aws:iam::*:user/${aws:username}"
-    ]
-  },
-  {
-    Sid: "ValidateIAMPolicies",
-    Effect: "Allow",
-    Action: [
-      "access-analyzer:ValidatePolicy",
-      "access-analyzer:CheckAccessNotGranted",
-      "access-analyzer:CheckNoNewAccess",
-      "access-analyzer:CheckNoPublicAccess"
-    ],
-    Resource: "*"
-  }
-];
-var user_admins_self_service_iam_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  user_admins_self_service_iam_default as default
-};

package/esm/commands/aws/iam/policies/user-admins-write-list.js

@@ -1,125 +0,0 @@
-// src/commands/aws/iam/policies/user-admins-write-list.json
-var Version = "2012-10-17";
-var Statement = [
-  {
-    Sid: "WriteComputeAndNetwork",
-    Effect: "Allow",
-    Action: [
-      "ec2:*",
-      "elasticloadbalancing:*",
-      "autoscaling:*",
-      "application-autoscaling:*",
-      "lambda:*",
-      "ecs:*",
-      "ecr:*",
-      "elasticfilesystem:*",
-      "route53:*",
-      "route53domains:*",
-      "cloudfront:*",
-      "apigateway:*",
-      "servicediscovery:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteDataAndStorage",
-    Effect: "Allow",
-    Action: ["s3:*", "rds:*", "pi:*", "dynamodb:*", "backup:*"],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteDeploymentAndOps",
-    Effect: "Allow",
-    Action: [
-      "cloudformation:*",
-      "cloudwatch:*",
-      "logs:*",
-      "events:*",
-      "scheduler:*",
-      "ssm:*",
-      "cloudtrail:*",
-      "xray:*",
-      "states:*",
-      "cloudshell:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteSecurityAndMessaging",
-    Effect: "Allow",
-    Action: [
-      "acm:*",
-      "secretsmanager:*",
-      "kms:*",
-      "sns:*",
-      "sqs:*",
-      "ses:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "WriteResourceOrganization",
-    Effect: "Allow",
-    Action: ["resource-groups:*", "tag:*", "ram:*"],
-    Resource: "*"
-  },
-  {
-    Sid: "SupportAndHealth",
-    Effect: "Allow",
-    Action: [
-      "support:*",
-      "supportplans:Get*",
-      "supportplans:List*",
-      "health:*",
-      "trustedadvisor:*"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "Sts",
-    Effect: "Allow",
-    Action: [
-      "sts:GetCallerIdentity",
-      "sts:GetFederationToken",
-      "sts:GetSessionToken"
-    ],
-    Resource: "*"
-  },
-  {
-    Sid: "IamPassRoleForServices",
-    Effect: "Allow",
-    Action: "iam:PassRole",
-    Resource: "arn:aws:iam::*:role/*",
-    Condition: {
-      StringEquals: {
-        "iam:PassedToService": [
-          "ec2.amazonaws.com",
-          "lambda.amazonaws.com",
-          "ecs.amazonaws.com",
-          "ecs-tasks.amazonaws.com",
-          "elasticloadbalancing.amazonaws.com",
-          "events.amazonaws.com",
-          "apigateway.amazonaws.com",
-          "rds.amazonaws.com",
-          "backup.amazonaws.com",
-          "cloudformation.amazonaws.com"
-        ]
-      }
-    }
-  },
-  {
-    Sid: "ServiceLinkedRoles",
-    Effect: "Allow",
-    Action: ["iam:CreateServiceLinkedRole", "iam:DeleteServiceLinkedRole"],
-    Resource: "*"
-  }
-];
-var user_admins_write_list_default = {
-  Version,
-  Statement
-};
-export {
-  Statement,
-  Version,
-  user_admins_write_list_default as default
-};