@prism-d1/cli 1.0.95 → 1.0.97

package/dist/src/utils/audit-bedrock.js

@@ -9,6 +9,23 @@ import { aws } from './aws.js';
  *
  * Audit-only: every AWS call here is a read.
  */
+/**
+ * The IAM action for every budget READ is the single coarse `budgets:ViewBudget`
+ * -- NOT the API operation name. AWS Budgets authorizes DescribeBudgets,
+ * DescribeBudgetNotificationsForAccount and DescribeSubscribersForNotification
+ * all against it, and a policy granting the operation names denies every one:
+ *
+ *   not authorized to perform: budgets:ViewBudget
+ *   on resource: arn:aws:budgets::<account>:budget/*
+ *   because no identity-based policy allows the budgets:ViewBudget action
+ *
+ * Measured live, and worth stating in the remediation because the obvious
+ * correction -- granting the operation name printed in the error code -- does
+ * not work. One constant so the three failure paths cannot drift apart, as the
+ * anomaly-monitor title did.
+ */
+const BUDGET_READ_REMEDIATION = 'Grant budgets:ViewBudget (the single IAM action covering all budget reads -- '
+    + 'granting budgets:DescribeBudgets instead does NOT work) and re-run.';
 /**
  * Bedrock spend lands on TWO billing surfaces, and a filter scoped to only the
  * first silently misses the second:
@@ -58,19 +75,22 @@ function budgetCovers(budget, hints) {
 function isCostBudget(budget) {
     return budget?.BudgetType === 'COST';
 }
-export function auditBudgets(profile, accountId) {
+export function auditBudgets(target, accountId) {
     // describe-budgets requires an explicit account id, and returns an EMPTY body
     // -- not {"Budgets": []} -- when no budgets exist.
-    const bud = aws(['budgets', 'describe-budgets', '--account-id', accountId], profile);
+    const bud = aws(['budgets', 'describe-budgets', '--account-id', accountId], target);
     if (!bud.ok) {
-        return { coveringBudgets: [], findings: [
+        // Propagate the reason. Without it the alerting check below cannot tell
+        // "no budget covers Bedrock" from "the budget list could not be read", and
+        // would report the former -- a confident statement about state we never saw.
+        return { coveringBudgets: [], listError: bud.errorCode || 'the DescribeBudgets call failed', findings: [
                 ['bedrock-budget', 'Budget covering Bedrock services'],
                 ['marketplace-budget', 'Budget covering Marketplace (Bedrock Edition) models'],
             ].map(([id, title]) => ({
                 id, category: 'budget', title,
                 status: 'INDETERMINATE', severity: 'HIGH',
                 detail: `Could not list budgets (${bud.errorCode || 'unknown error'}).`,
-                remediation: 'Grant budgets:DescribeBudgets and re-run.',
+                remediation: BUDGET_READ_REMEDIATION,
             })) };
     }
     const budgets = bud.json?.Budgets ?? [];
@@ -125,9 +145,19 @@ export function auditBudgets(profile, accountId) {
  * in ONE call. Subscribers need a call per notification, which is why this is
  * scoped to the budgets that actually cover Bedrock rather than all of them.
  */
-export function auditBudgetAlerting(profile, accountId, coveringBudgets) {
+export function auditBudgetAlerting(target, accountId, coveringBudgets, listError) {
     const id = 'budget-alerting';
     const title = 'Bedrock budgets actually notify someone';
+    // The budget list never loaded, so "no covering budget" is not something we
+    // established -- say so rather than describing an absence we cannot see.
+    if (listError) {
+        return {
+            id, category: 'budget', title,
+            status: 'INDETERMINATE', severity: 'HIGH',
+            detail: `Could not list budgets (${listError}), so it is unknown whether any Bedrock budget notifies anyone.`,
+            remediation: BUDGET_READ_REMEDIATION,
+        };
+    }
     if (coveringBudgets.length === 0) {
         // Nothing to evaluate. Not a PASS -- no alerting was established -- and not
         // a duplicate FAIL, since bedrock-budget/marketplace-budget already report
@@ -138,13 +168,13 @@ export function auditBudgetAlerting(profile, accountId, coveringBudgets) {
             detail: 'No COST budget covers Bedrock or Marketplace, so there is no budget whose alerting could be checked (see bedrock-budget and marketplace-budget above).',
         };
     }
-    const all = aws(['budgets', 'describe-budget-notifications-for-account', '--account-id', accountId], profile);
+    const all = aws(['budgets', 'describe-budget-notifications-for-account', '--account-id', accountId], target);
     if (!all.ok) {
         return {
             id, category: 'budget', title,
             status: 'INDETERMINATE', severity: 'HIGH',
             detail: `Could not read budget notifications (${all.errorCode || 'unknown error'}), so it is unknown whether ${coveringBudgets.join(', ')} alerts anyone.`,
-            remediation: 'Grant budgets:DescribeBudgetNotificationsForAccount and budgets:DescribeSubscribersForNotification, then re-run.',
+            remediation: BUDGET_READ_REMEDIATION,
         };
     }
     const perBudget = all.json?.BudgetNotificationsForAccount ?? [];
@@ -164,7 +194,7 @@ export function auditBudgetAlerting(profile, accountId, coveringBudgets) {
                 'budgets', 'describe-subscribers-for-notification',
                 '--account-id', accountId, '--budget-name', name,
                 '--notification', JSON.stringify(n),
-            ], profile);
+            ], target);
             if (subs.ok)
                 subscribers += (subs.json?.Subscribers ?? []).length;
         }
@@ -197,14 +227,14 @@ export function auditBudgetAlerting(profile, accountId, coveringBudgets) {
  * depending on account state, which is unstable in --json output.
  */
 const ANOMALY_TITLE = 'Cost anomaly monitor covering Bedrock, with an alert subscription';
-export function auditDetection(profile, region) {
+export function auditDetection(target, region) {
     const out = [];
     // Cost Explorer is an account-level opt-in that stays OFF until someone
     // enables it -- measured error: AccessDeniedException "User not enabled for
     // cost explorer access". Every CE-backed check must be gated on this, or the
     // audit reports "no anomaly monitor configured" when the truth is that it
     // could not look.
-    const ce = aws(['ce', 'get-anomaly-monitors'], profile);
+    const ce = aws(['ce', 'get-anomaly-monitors'], target);
     const ceDisabled = !ce.ok && /not enabled for cost explorer/i.test(ce.raw);
     out.push({
         id: 'cost-explorer-enabled', category: 'detection', title: 'Cost Explorer enabled',
@@ -240,7 +270,7 @@ export function auditDetection(profile, region) {
         // then auto-creates a "Default-Services-Monitor" (SERVICE dimension) WITH a
         // subscription -- observed live. So this check often passes as a side effect
         // of setting up budgets rather than deliberately.
-        const subs = aws(['ce', 'get-anomaly-subscriptions'], profile);
+        const subs = aws(['ce', 'get-anomaly-subscriptions'], target);
         const coveringArns = new Set(covering.map((m) => m.MonitorArn));
         const subscribed = subs.ok
             ? (subs.json?.AnomalySubscriptions ?? []).some((s) => (s.MonitorArnList ?? []).some((arn) => coveringArns.has(arn)))
@@ -266,7 +296,7 @@ export function auditDetection(profile, region) {
     }
     // CloudWatch is the only fast signal. Cost data lags 12-24h, so a cost-only
     // posture lets a stolen key run for up to a day before anything fires.
-    const alarms = aws(['cloudwatch', 'describe-alarms', '--region', region], profile);
+    const alarms = aws(['cloudwatch', 'describe-alarms', '--region', region], target);
     if (!alarms.ok) {
         out.push({
             id: 'bedrock-invocation-alarm', category: 'detection', title: 'CloudWatch alarm on Bedrock invocation volume',
@@ -287,8 +317,8 @@ export function auditDetection(profile, region) {
     }
     return out;
 }
-export function auditCommitments(profile, region) {
-    const pt = aws(['bedrock', 'list-provisioned-model-throughputs', '--region', region], profile);
+export function auditCommitments(target, region) {
+    const pt = aws(['bedrock', 'list-provisioned-model-throughputs', '--region', region], target);
     if (!pt.ok) {
         return {
             id: 'provisioned-throughput', category: 'commitment', title: 'Provisioned Throughput commitments',
@@ -307,9 +337,9 @@ export function auditCommitments(profile, region) {
         remediation: pts.length ? 'Confirm each commitment is intentional and still in use; an abandoned one bills indefinitely.' : undefined,
     };
 }
-export function auditForensics(profile, region) {
+export function auditForensics(target, region) {
     // Returns an EMPTY body when logging is off -- same trap as describe-budgets.
-    const log = aws(['bedrock', 'get-model-invocation-logging-configuration', '--region', region], profile);
+    const log = aws(['bedrock', 'get-model-invocation-logging-configuration', '--region', region], target);
     if (!log.ok) {
         return {
             id: 'model-invocation-logging', category: 'forensics', title: 'Bedrock model invocation logging',

package/dist/src/utils/audit-bedrock.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-bedrock.js","sourceRoot":"","sources":["../../../src/utils/audit-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAG/B;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAAG,CAAC,aAAa,CAAC,CAAC;AAE1C,SAAS,YAAY,CAAC,MAAW,EAAE,KAAe;IAChD,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;IACpC,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,MAAW;IAC/B,OAAO,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA2B,EAAE,SAAiB;IACzE,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAErF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACtC,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;gBACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;aAC/E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;gBAC7B,MAAM,EAAE,eAAwB,EAAE,QAAQ,EAAE,MAAe;gBAC3D,MAAM,EAAE,2BAA2B,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;gBACvE,WAAW,EAAE,2CAA2C;aACzD,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IAED,MAAM,OAAO,GAAU,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAE/C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtG,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,EAAE,CACpC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE1D,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;YAC9E;gBACE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kCAAkC;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACtC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACpB,CAAC,CAAC,gGAAgG;wBAClG,CAAC,CAAC,gBAAgB,CAAC,MAAM;4BACvB,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mJAAmJ;4BACnL,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,4EAA4E,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,mEAAmE,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC1N,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gGAAgG;aAC3I;YACD;gBACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sDAAsD;gBAC3G,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC9D,MAAM,EAAE,WAAW,CAAC,MAAM;oBACxB,CAAC,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1C,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC,CAAC,EAAE,CAAC;0BACtJ,sYAAsY;gBAC5Y,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sIAAsI;aACrL;SACF,EAAE,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,SAAiB,EACjB,eAAyB;IAEzB,MAAM,EAAE,GAAG,iBAAiB,CAAC;IAC7B,MAAM,KAAK,GAAG,yCAAyC,CAAC;IAExD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,4EAA4E;QAC5E,2EAA2E;QAC3E,eAAe;QACf,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wJAAwJ;SACjK,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,2CAA2C,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wCAAwC,GAAG,CAAC,SAAS,IAAI,eAAe,+BAA+B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC1J,WAAW,EAAE,kHAAkH;SAChI,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAU,GAAG,CAAC,IAAI,EAAE,6BAA6B,IAAI,EAAE,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAU,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAEhE,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC;gBACf,SAAS,EAAE,uCAAuC;gBAClD,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI;gBAChD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aACpC,EAAE,OAAO,CAAC,CAAC;YACZ,IAAI,IAAI,CAAC,EAAE;gBAAE,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAAM,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC;gBACE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;gBACjF,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE;aAC1F,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;kBAC1B,iIAAiI;YACrI,CAAC,CAAC,OAAO,QAAQ,oEAAoE;QACvF,WAAW,EAAE,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAE1F,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE,MAAc;IAAgB,MAAM,GAAG,GAAc,EAAE,CAAC;IAElH,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB;QAClF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC9D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,6IAA6I;YAC/I,CAAC,CAAC,EAAE,CAAC,EAAE;gBACL,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,2CAA2C,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;QACpF,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,8IAA8I,CAAC,CAAC,CAAC,SAAS;KACrL,CAAC,CAAC;IAEH,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,oCAAoC,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SAC5E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAU,EAAE,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,EAAE;QACF,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,kDAAkD;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CACtD,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC3B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACtB,CAAC,CAAC,iMAAiM;oBACnM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,4CAA4C,CAAC;gBACnE,CAAC,CAAC,UAAU,KAAK,IAAI;oBACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,sEAAsE,IAAI,CAAC,SAAS,IAAI,eAAe,qDAAqD;oBAChL,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM,wDAAwD;wBAClK,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iJAAiJ;YAC3K,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,sLAAsL;oBACxL,CAAC,CAAC,uGAAuG;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,4BAA4B,MAAM,KAAK,MAAM,CAAC,SAAS,IAAI,eAAe,IAAI;SACvF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;QAC1G,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClE,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC1B,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,qCAAqC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClI,CAAC,CAAC,uCAAuC,MAAM,0LAA0L;YAC3O,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iIAAiI;SAClL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,MAAc;IAC1E,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,oCAAoC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;YACjG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,4CAA4C,MAAM,KAAK,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAU,EAAE,CAAC,IAAI,EAAE,yBAAyB,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;QACjG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAChB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,qBAAqB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD;YAC9K,CAAC,CAAC,4CAA4C,MAAM,8EAA8E;QACpI,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC,CAAC,SAAS;KACtI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE,MAAc;IACxE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,4CAA4C,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACxG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;YAChG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,+CAA+C,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;QAChG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACxD,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,cAAc,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACvH,CAAC,CAAC,UAAU,MAAM,sMAAsM;QAC1N,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yKAAyK;KAChN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit-bedrock.js","sourceRoot":"","sources":["../../../src/utils/audit-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,MAAM,UAAU,CAAC;AAG1C;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,uBAAuB,GAC3B,+EAA+E;MAC7E,qEAAqE,CAAC;AAE1E;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAAG,CAAC,aAAa,CAAC,CAAC;AAE1C,SAAS,YAAY,CAAC,MAAW,EAAE,KAAe;IAChD,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;IACpC,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,MAAW;IAC/B,OAAO,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA6B,EAAE,SAAiB;IAC3E,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAEpF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,wEAAwE;QACxE,2EAA2E;QAC3E,6EAA6E;QAC7E,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,iCAAiC,EAAE,QAAQ,EAAE;gBACrG,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;gBACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;aAC/E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;gBAC7B,MAAM,EAAE,eAAwB,EAAE,QAAQ,EAAE,MAAe;gBAC3D,MAAM,EAAE,2BAA2B,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;gBACvE,WAAW,EAAE,uBAAuB;aACrC,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IAED,MAAM,OAAO,GAAU,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAE/C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtG,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,EAAE,CACpC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE1D,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;YAC9E;gBACE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kCAAkC;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACtC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACpB,CAAC,CAAC,gGAAgG;wBAClG,CAAC,CAAC,gBAAgB,CAAC,MAAM;4BACvB,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mJAAmJ;4BACnL,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,4EAA4E,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,mEAAmE,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC1N,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gGAAgG;aAC3I;YACD;gBACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sDAAsD;gBAC3G,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC9D,MAAM,EAAE,WAAW,CAAC,MAAM;oBACxB,CAAC,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1C,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC,CAAC,EAAE,CAAC;0BACtJ,sYAAsY;gBAC5Y,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sIAAsI;aACrL;SACF,EAAE,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA6B,EAC7B,SAAiB,EACjB,eAAyB,EACzB,SAAkB;IAElB,MAAM,EAAE,GAAG,iBAAiB,CAAC;IAC7B,MAAM,KAAK,GAAG,yCAAyC,CAAC;IAExD,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,2BAA2B,SAAS,iEAAiE;YAC7G,WAAW,EAAE,uBAAuB;SACrC,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,4EAA4E;QAC5E,2EAA2E;QAC3E,eAAe;QACf,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wJAAwJ;SACjK,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,2CAA2C,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wCAAwC,GAAG,CAAC,SAAS,IAAI,eAAe,+BAA+B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC1J,WAAW,EAAE,uBAAuB;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAU,GAAG,CAAC,IAAI,EAAE,6BAA6B,IAAI,EAAE,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAU,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAEhE,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC;gBACf,SAAS,EAAE,uCAAuC;gBAClD,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI;gBAChD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aACpC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,IAAI,CAAC,EAAE;gBAAE,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAAM,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC;gBACE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;gBACjF,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE;aAC1F,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;kBAC1B,iIAAiI;YACrI,CAAC,CAAC,OAAO,QAAQ,oEAAoE;QACvF,WAAW,EAAE,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAE1F,MAAM,UAAU,cAAc,CAAC,MAA6B,EAAE,MAAc;IAAgB,MAAM,GAAG,GAAc,EAAE,CAAC;IAEpH,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB;QAClF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC9D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,6IAA6I;YAC/I,CAAC,CAAC,EAAE,CAAC,EAAE;gBACL,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,2CAA2C,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;QACpF,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,8IAA8I,CAAC,CAAC,CAAC,SAAS;KACrL,CAAC,CAAC;IAEH,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,oCAAoC,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SAC5E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAU,EAAE,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,EAAE;QACF,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,kDAAkD;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CACtD,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC3B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACtB,CAAC,CAAC,iMAAiM;oBACnM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,4CAA4C,CAAC;gBACnE,CAAC,CAAC,UAAU,KAAK,IAAI;oBACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,sEAAsE,IAAI,CAAC,SAAS,IAAI,eAAe,qDAAqD;oBAChL,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM,wDAAwD;wBAClK,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iJAAiJ;YAC3K,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,sLAAsL;oBACxL,CAAC,CAAC,uGAAuG;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,4BAA4B,MAAM,KAAK,MAAM,CAAC,SAAS,IAAI,eAAe,IAAI;SACvF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;QAC1G,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClE,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC1B,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,qCAAqC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClI,CAAC,CAAC,uCAAuC,MAAM,0LAA0L;YAC3O,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iIAAiI;SAClL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA6B,EAAE,MAAc;IAC5E,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,oCAAoC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9F,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;YACjG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,4CAA4C,MAAM,KAAK,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAU,EAAE,CAAC,IAAI,EAAE,yBAAyB,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;QACjG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAChB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,qBAAqB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD;YAC9K,CAAC,CAAC,4CAA4C,MAAM,8EAA8E;QACpI,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC,CAAC,SAAS;KACtI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA6B,EAAE,MAAc;IAC1E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,4CAA4C,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;YAChG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,+CAA+C,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;QAChG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACxD,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,cAAc,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACvH,CAAC,CAAC,UAAU,MAAM,sMAAsM;QAC1N,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yKAAyK;KAChN,CAAC;AACJ,CAAC"}

package/dist/src/utils/audit-iam.d.ts

@@ -1,6 +1,7 @@
+import { AwsTarget } from './aws.js';
 import { Finding } from './audit.js';
-export declare function auditRoot(profile?: string): Finding[];
-export declare function auditPasswordPolicy(profile?: string): Finding;
-export declare function auditUsers(profile: string | undefined, maxKeyAge: number, unusedDays: number): Finding[];
-export declare function auditUserPolicies(profile?: string): Finding;
+export declare function auditRoot(target?: AwsTarget): Finding[];
+export declare function auditPasswordPolicy(target?: AwsTarget): Finding;
+export declare function auditUsers(target: AwsTarget | undefined, maxKeyAge: number, unusedDays: number): Finding[];
+export declare function auditUserPolicies(target?: AwsTarget): Finding;
 //# sourceMappingURL=audit-iam.d.ts.map

package/dist/src/utils/audit-iam.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-iam.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAY,MAAM,YAAY,CAAC;AAwE/C,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CA6CrD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAmC7D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,CA2ExG;AAED,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAgC3D"}
+{"version":3,"file":"audit-iam.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,SAAS,EAAa,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,OAAO,EAAY,MAAM,YAAY,CAAC;AAwE/C,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,EAAE,CA6CvD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAmC/D;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,CA2E1G;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAgC7D"}

package/dist/src/utils/audit-iam.js

@@ -7,14 +7,14 @@ import { aws, daysSince } from './aws.js';
  * This is the only non-read AWS call in the command. It produces a report
  * artifact and modifies no resource.
  */
-function credentialReport(profile) {
-    let got = aws(['iam', 'get-credential-report'], profile);
+function credentialReport(target) {
+    let got = aws(['iam', 'get-credential-report'], target);
     if (!got.ok && got.errorCode === 'ReportNotPresent') {
-        const gen = aws(['iam', 'generate-credential-report'], profile);
+        const gen = aws(['iam', 'generate-credential-report'], target);
         if (!gen.ok)
             return { error: gen.errorCode || 'generate-credential-report failed' };
         for (let i = 0; i < 10 && !got.ok; i++) {
-            got = aws(['iam', 'get-credential-report'], profile);
+            got = aws(['iam', 'get-credential-report'], target);
             if (!got.ok && got.errorCode !== 'ReportNotPresent')
                 break;
         }
@@ -47,12 +47,12 @@ function credentialReport(profile) {
     }
     return rows;
 }
-export function auditRoot(profile) {
+export function auditRoot(target) {
     const out = [];
     // GetAccountSummary answers the two most severe questions in one call and
     // needs no credential report. AccountMFAEnabled and AccountAccessKeysPresent
     // both describe the ROOT user specifically.
-    const summary = aws(['iam', 'get-account-summary'], profile);
+    const summary = aws(['iam', 'get-account-summary'], target);
     const map = summary.ok ? (summary.json?.SummaryMap ?? null) : null;
     if (!map) {
         out.push({
@@ -88,8 +88,8 @@ export function auditRoot(profile) {
     });
     return out;
 }
-export function auditPasswordPolicy(profile) {
-    const pol = aws(['iam', 'get-account-password-policy'], profile);
+export function auditPasswordPolicy(target) {
+    const pol = aws(['iam', 'get-account-password-policy'], target);
     // NoSuchEntity is the API saying "no policy set", which means AWS defaults
     // apply. That is a finding, not an error -- treating it as an error hides it.
     if (!pol.ok && pol.errorCode === 'NoSuchEntity') {
@@ -126,9 +126,9 @@ export function auditPasswordPolicy(profile) {
         remediation: weak.length ? 'Raise minimum length to 14+, require complexity, enable reuse prevention.' : undefined,
     };
 }
-export function auditUsers(profile, maxKeyAge, unusedDays) {
+export function auditUsers(target, maxKeyAge, unusedDays) {
     const out = [];
-    const report = credentialReport(profile);
+    const report = credentialReport(target);
     if ('error' in report) {
         for (const [id, title, sev] of [
             ['access-key-age', 'Long-lived access keys', 'HIGH'],
@@ -201,8 +201,8 @@ export function auditUsers(profile, maxKeyAge, unusedDays) {
     });
     return out;
 }
-export function auditUserPolicies(profile) {
-    const list = aws(['iam', 'list-users', '--query', 'Users[].UserName'], profile);
+export function auditUserPolicies(target) {
+    const list = aws(['iam', 'list-users', '--query', 'Users[].UserName'], target);
     if (!list.ok) {
         return {
             id: 'user-admin-policy', category: 'users', title: 'AdministratorAccess on IAM users',
@@ -214,7 +214,7 @@ export function auditUserPolicies(profile) {
     const admins = [];
     let unchecked = 0;
     for (const name of names) {
-        const att = aws(['iam', 'list-attached-user-policies', '--user-name', name], profile);
+        const att = aws(['iam', 'list-attached-user-policies', '--user-name', name], target);
         if (!att.ok) {
             unchecked++;
             continue;

package/dist/src/utils/audit-iam.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-iam.js","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAwB1C;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,OAAgB;IACxC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,mCAAmC,EAAE,CAAC;QACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB;gBAAE,MAAM;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,8BAA8B,EAAE,CAAC;IAE/E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,eAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,MAAM;YAClD,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,MAAM;YACtC,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM;gBAC/C,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC/C,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC;aAC/C,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YAC3D,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;YACvF,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YACnE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;SACxF,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QAC3D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACvD,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+HAA+H;QACnI,WAAW,EAAE,gMAAgM;KAC9M,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,KAAK,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACxD,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,sBAAsB;QAC1B,WAAW,EAAE,4DAA4D;KAC1E,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjE,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClC,MAAM,EAAE,yGAAyG;YACjH,WAAW,EAAE,2IAA2I;SACzJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,uCAAuC,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,IAAI,OAAO,SAAS,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,uBAAuB;QAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE3E,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;QAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;QAChG,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,SAAS;KACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA2B,EAAE,SAAiB,EAAE,UAAkB;IAC3F,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;YAC7B,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,CAAC;YACpD,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,CAAC;YAC5D,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;SAClB,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;gBAC5B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG;gBACtC,MAAM,EAAE,kCAAkC,MAAM,CAAC,KAAK,IAAI;gBAC1D,WAAW,EAAE,8EAA8E;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,6BAA6B,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6JAA6J;YACtR,CAAC,CAAC,sCAAsC,SAAS,IAAI;QACvD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,wJAAwJ,CAAC,CAAC,CAAC,SAAS;KACjM,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B;QAChF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,+CAA+C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;YAC/H,CAAC,CAAC,qCAAqC;QACzC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sHAAsH,CAAC,CAAC,CAAC,SAAS;KAC/J,CAAC,CAAC;IAEH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,+DAA+D;YAC/D,0CAA0C;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;QACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oHAAoH;YACpP,CAAC,CAAC,2CAA2C,UAAU,IAAI;QAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iFAAiF,CAAC,CAAC,CAAC,SAAS;KAC3H,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;YACrF,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,yBAAyB,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;QACrF,4EAA4E;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QACzE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,gDAAgD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;YAC1I,CAAC,CAAC,SAAS,GAAG,CAAC;gBACb,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,WAAW,SAAS,mDAAmD;gBAC5H,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,qDAAqD;QAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,SAAS;KACjI,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit-iam.js","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,SAAS,EAAE,MAAM,UAAU,CAAC;AAwBrD;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAExD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,mCAAmC,EAAE,CAAC;QACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB;gBAAE,MAAM;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,8BAA8B,EAAE,CAAC;IAE/E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,eAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,MAAM;YAClD,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,MAAM;YACtC,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM;gBAC/C,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC/C,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC;aAC/C,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAkB;IAC1C,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YAC3D,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;YACvF,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YACnE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;SACxF,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QAC3D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACvD,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+HAA+H;QACnI,WAAW,EAAE,gMAAgM;KAC9M,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,KAAK,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACxD,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,sBAAsB;QAC1B,WAAW,EAAE,4DAA4D;KAC1E,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,CAAC;IAEhE,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClC,MAAM,EAAE,yGAAyG;YACjH,WAAW,EAAE,2IAA2I;SACzJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,uCAAuC,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,IAAI,OAAO,SAAS,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,uBAAuB;QAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE3E,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;QAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;QAChG,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,SAAS;KACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA6B,EAAE,SAAiB,EAAE,UAAkB;IAC7F,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;YAC7B,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,CAAC;YACpD,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,CAAC;YAC5D,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;SAClB,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;gBAC5B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG;gBACtC,MAAM,EAAE,kCAAkC,MAAM,CAAC,KAAK,IAAI;gBAC1D,WAAW,EAAE,8EAA8E;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,6BAA6B,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6JAA6J;YACtR,CAAC,CAAC,sCAAsC,SAAS,IAAI;QACvD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,wJAAwJ,CAAC,CAAC,CAAC,SAAS;KACjM,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B;QAChF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,+CAA+C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;YAC/H,CAAC,CAAC,qCAAqC;QACzC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sHAAsH,CAAC,CAAC,CAAC,SAAS;KAC/J,CAAC,CAAC;IAEH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,+DAA+D;YAC/D,0CAA0C;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;QACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oHAAoH;YACpP,CAAC,CAAC,2CAA2C,UAAU,IAAI;QAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iFAAiF,CAAC,CAAC,CAAC,SAAS;KAC3H,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;YACrF,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,yBAAyB,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;QACrF,4EAA4E;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QACzE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,gDAAgD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;YAC1I,CAAC,CAAC,SAAS,GAAG,CAAC;gBACb,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,WAAW,SAAS,mDAAmD;gBAC5H,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,qDAAqD;QAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,SAAS;KACjI,CAAC;AACJ,CAAC"}

package/dist/src/utils/audit-org.d.ts

@@ -0,0 +1,84 @@
+import { AwsTarget } from './aws.js';
+import { Finding } from './audit.js';
+/**
+ * Organization-level preventive and detective guardrails.
+ *
+ * The account checks elsewhere in this group are all *descriptive*: they read
+ * the current state and report it. These two families are different in kind, and
+ * ARCC frames the pairing directly (SAX-08 Outcome 2, preventative/detective
+ * control symmetry):
+ *
+ *   - **SCPs are preventive.** They stop the action before it happens, and they
+ *     bind even a compromised admin, which is the one thing IAM hygiene cannot
+ *     promise. For LLMjacking specifically, a region-scoped deny is the single
+ *     highest-leverage control available: a stolen key can call `InvokeModel` in
+ *     any enabled region, so restricting Bedrock to the regions you actually use
+ *     shrinks the reachable surface by an order of magnitude at no running cost.
+ *
+ *   - **Config rules are detective and continuous.** `scan-account` and
+ *     `scan-org` are point-in-time samples; a rule evaluates on every
+ *     configuration change. Without them, a key created the day after an audit
+ *     goes unnoticed until the next one.
+ *
+ * ## What these checks can and cannot establish
+ *
+ * They detect that a policy **exists and is attached**. They do NOT prove
+ * enforcement. SCP evaluation involves inheritance from every ancestor, implicit
+ * deny, `NotAction`, condition keys and principal-tag exemptions, so a
+ * structural read can be satisfied by a policy that exempts the very principals
+ * that matter. ARCC names "insufficient testing leading to unexpected blocking"
+ * and supplies a live test-script pattern for exactly this reason. Every finding
+ * here therefore says "appears to" and points at live verification -- reporting
+ * an SCP as proof of enforcement would be a worse failure than reporting none.
+ */
+interface Statement {
+    Effect?: string;
+    Action?: string | string[];
+    NotAction?: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+}
+/** Names of policies containing a Deny that covers any of `actions`. */
+export declare function policiesDenying(policies: Array<{
+    name: string;
+    statements: Statement[];
+}>, actions: string[]): string[];
+/**
+ * Names of policies whose Deny is region-conditioned in a way that would
+ * constrain Bedrock.
+ *
+ * The common shape is a broad `Deny *` with
+ * `StringNotEquals: { "aws:RequestedRegion": [...] }` -- everything outside the
+ * listed regions is refused. A Bedrock-specific variant denies `bedrock:*` under
+ * the same condition. Both count; a region condition that cannot reach Bedrock
+ * (e.g. `Action: s3:*`) does not.
+ */
+export declare function policiesRestrictingBedrockRegion(policies: Array<{
+    name: string;
+    statements: Statement[];
+}>): string[];
+/**
+ * Expand each audited target to itself plus every ancestor up to the root.
+ *
+ * SCPs INHERIT downward: a policy attached to the root constrains every account
+ * in every OU beneath it. Judging attachment against the audited OU alone
+ * therefore ignores the most common place guardrails actually live, and would
+ * report a root-attached Bedrock region deny as absent -- a false FAIL on the
+ * highest-leverage control in this file. Verified against a live org where two
+ * of four customer SCPs sat at the root and were invisible to the OU-only view.
+ */
+export declare function expandToAncestors(target: AwsTarget | undefined, scopeTargetIds: string[]): {
+    ids: string[];
+    errors: string[];
+};
+/**
+ * @param scopeTargetIds Root and OU ids in scope, so attachment is judged
+ *        against what is actually being audited rather than the org at large.
+ *        `null` means the caller could not resolve the scope -- every
+ *        attachment-dependent check is then INDETERMINATE, because an empty
+ *        scope would otherwise make all four FAIL and present a permissions
+ *        problem as four real absences.
+ */
+export declare function auditServiceControlPolicies(target: AwsTarget | undefined, scopeTargetIds: string[] | null, scopeError?: string): Finding[];
+export declare function auditConfigRules(target: AwsTarget | undefined): Finding[];
+export {};
+//# sourceMappingURL=audit-org.d.ts.map

package/dist/src/utils/audit-org.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-org.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-org.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAY,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,UAAU,SAAS;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D;AA6BD,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,EAC1D,OAAO,EAAE,MAAM,EAAE,GAChB,MAAM,EAAE,CAMV;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,GACzD,MAAM,EAAE,CAWV;AAKD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,cAAc,EAAE,MAAM,EAAE,GACvB;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAsBrC;AAgCD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,EAC/B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,EAAE,CAgJX;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,EAAE,CAsDzE"}