@pulumi/aws 7.4.0-alpha.1755086162 → 7.4.0-alpha.1755095636

package/wafv2/webAclRuleGroupAssociation.js

@@ -0,0 +1,423 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebAclRuleGroupAssociation = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Associates a WAFv2 Rule Group (custom or managed) with a Web ACL by adding a rule that references the Rule Group. Use this resource to apply the rules defined in a Rule Group to a Web ACL without duplicating rule definitions.
+ *
+ * This resource supports both:
+ *
+ * - **Custom Rule Groups**: User-created rule groups that you manage within your AWS account
+ * - **Managed Rule Groups**: Pre-configured rule groups provided by AWS or third-party vendors
+ *
+ * !> **Warning:** Verify the rule names in your `ruleActionOverride`s carefully. With managed rule groups, WAF silently ignores any override that uses an invalid rule name. With customer-owned rule groups, invalid rule names in your overrides will cause web ACL updates to fail. An invalid rule name is any name that doesn't exactly match the case-sensitive name of an existing rule in the rule group.
+ *
+ * !> **Warning:** Using this resource will cause the associated Web ACL resource to show configuration drift in the `rule` argument unless you add `lifecycle { ignoreChanges = [rule] }` to the Web ACL resource configuration. This is because this resource modifies the Web ACL's rules outside of the Web ACL resource's direct management.
+ *
+ * > **Note:** This resource creates a rule within the Web ACL that references the entire Rule Group. The rule group's individual rules are evaluated as a unit when requests are processed by the Web ACL.
+ *
+ * ## Example Usage
+ *
+ * ### Custom Rule Group - Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.wafv2.RuleGroup("example", {
+ *     name: "example-rule-group",
+ *     scope: "REGIONAL",
+ *     capacity: 10,
+ *     rules: [{
+ *         name: "block-suspicious-requests",
+ *         priority: 1,
+ *         action: {
+ *             block: {},
+ *         },
+ *         statement: {
+ *             geoMatchStatement: {
+ *                 countryCodes: [
+ *                     "CN",
+ *                     "RU",
+ *                 ],
+ *             },
+ *         },
+ *         visibilityConfig: {
+ *             cloudwatchMetricsEnabled: true,
+ *             metricName: "block-suspicious-requests",
+ *             sampledRequestsEnabled: true,
+ *         },
+ *     }],
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "example-rule-group",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const exampleWebAcl = new aws.wafv2.WebAcl("example", {
+ *     name: "example-web-acl",
+ *     scope: "REGIONAL",
+ *     defaultAction: {
+ *         allow: {},
+ *     },
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "example-web-acl",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const exampleWebAclRuleGroupAssociation = new aws.wafv2.WebAclRuleGroupAssociation("example", {
+ *     ruleName: "example-rule-group-rule",
+ *     priority: 100,
+ *     webAclArn: exampleWebAcl.arn,
+ *     ruleGroupReference: {
+ *         arn: example.arn,
+ *     },
+ * });
+ * ```
+ *
+ * ### Managed Rule Group - Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.wafv2.WebAcl("example", {
+ *     name: "example-web-acl",
+ *     scope: "REGIONAL",
+ *     defaultAction: {
+ *         allow: {},
+ *     },
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "example-web-acl",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const managedExample = new aws.wafv2.WebAclRuleGroupAssociation("managed_example", {
+ *     ruleName: "aws-common-rule-set",
+ *     priority: 50,
+ *     webAclArn: example.arn,
+ *     managedRuleGroup: {
+ *         name: "AWSManagedRulesCommonRuleSet",
+ *         vendorName: "AWS",
+ *     },
+ * });
+ * ```
+ *
+ * ### Managed Rule Group - With Version
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const managedVersioned = new aws.wafv2.WebAclRuleGroupAssociation("managed_versioned", {
+ *     ruleName: "aws-common-rule-set-versioned",
+ *     priority: 60,
+ *     webAclArn: example.arn,
+ *     managedRuleGroup: {
+ *         name: "AWSManagedRulesCommonRuleSet",
+ *         vendorName: "AWS",
+ *         version: "Version_1.0",
+ *     },
+ * });
+ * ```
+ *
+ * ### Managed Rule Group - With Rule Action Overrides
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const managedWithOverrides = new aws.wafv2.WebAclRuleGroupAssociation("managed_with_overrides", {
+ *     ruleName: "aws-common-rule-set-with-overrides",
+ *     priority: 70,
+ *     webAclArn: example.arn,
+ *     managedRuleGroup: {
+ *         name: "AWSManagedRulesCommonRuleSet",
+ *         vendorName: "AWS",
+ *         ruleActionOverrides: [
+ *             {
+ *                 name: "GenericRFI_BODY",
+ *                 actionToUse: {
+ *                     count: {
+ *                         customRequestHandling: {
+ *                             insertHeaders: [{
+ *                                 name: "X-RFI-Override",
+ *                                 value: "counted",
+ *                             }],
+ *                         },
+ *                     },
+ *                 },
+ *             },
+ *             {
+ *                 name: "SizeRestrictions_BODY",
+ *                 actionToUse: {
+ *                     captcha: {},
+ *                 },
+ *             },
+ *         ],
+ *     },
+ * });
+ * ```
+ *
+ * ### Custom Rule Group - With Override Action
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.wafv2.WebAclRuleGroupAssociation("example", {
+ *     ruleName: "example-rule-group-rule",
+ *     priority: 100,
+ *     webAclArn: exampleAwsWafv2WebAcl.arn,
+ *     overrideAction: "count",
+ *     ruleGroupReference: {
+ *         arn: exampleAwsWafv2RuleGroup.arn,
+ *     },
+ * });
+ * ```
+ *
+ * ### Custom Rule Group - With Rule Action Overrides
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.wafv2.RuleGroup("example", {
+ *     name: "example-rule-group",
+ *     scope: "REGIONAL",
+ *     capacity: 10,
+ *     rules: [
+ *         {
+ *             name: "geo-block-rule",
+ *             priority: 1,
+ *             action: {
+ *                 block: {},
+ *             },
+ *             statement: {
+ *                 geoMatchStatement: {
+ *                     countryCodes: [
+ *                         "CN",
+ *                         "RU",
+ *                     ],
+ *                 },
+ *             },
+ *             visibilityConfig: {
+ *                 cloudwatchMetricsEnabled: true,
+ *                 metricName: "geo-block-rule",
+ *                 sampledRequestsEnabled: true,
+ *             },
+ *         },
+ *         {
+ *             name: "rate-limit-rule",
+ *             priority: 2,
+ *             action: {
+ *                 block: {},
+ *             },
+ *             statement: {
+ *                 rateBasedStatement: {
+ *                     limit: 1000,
+ *                     aggregateKeyType: "IP",
+ *                 },
+ *             },
+ *             visibilityConfig: {
+ *                 cloudwatchMetricsEnabled: true,
+ *                 metricName: "rate-limit-rule",
+ *                 sampledRequestsEnabled: true,
+ *             },
+ *         },
+ *     ],
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "example-rule-group",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const exampleWebAcl = new aws.wafv2.WebAcl("example", {
+ *     name: "example-web-acl",
+ *     scope: "REGIONAL",
+ *     defaultAction: {
+ *         allow: {},
+ *     },
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "example-web-acl",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const exampleWebAclRuleGroupAssociation = new aws.wafv2.WebAclRuleGroupAssociation("example", {
+ *     ruleName: "example-rule-group-rule",
+ *     priority: 100,
+ *     webAclArn: exampleWebAcl.arn,
+ *     ruleGroupReference: {
+ *         arn: example.arn,
+ *         ruleActionOverrides: [
+ *             {
+ *                 name: "geo-block-rule",
+ *                 actionToUse: {
+ *                     count: {
+ *                         customRequestHandling: {
+ *                             insertHeaders: [{
+ *                                 name: "X-Geo-Block-Override",
+ *                                 value: "counted",
+ *                             }],
+ *                         },
+ *                     },
+ *                 },
+ *             },
+ *             {
+ *                 name: "rate-limit-rule",
+ *                 actionToUse: {
+ *                     captcha: {
+ *                         customRequestHandling: {
+ *                             insertHeaders: [{
+ *                                 name: "X-Rate-Limit-Override",
+ *                                 value: "captcha-required",
+ *                             }],
+ *                         },
+ *                     },
+ *                 },
+ *             },
+ *         ],
+ *     },
+ * });
+ * ```
+ *
+ * ### Custom Rule Group - CloudFront Web ACL
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const cloudfrontExample = new aws.wafv2.RuleGroup("cloudfront_example", {
+ *     name: "cloudfront-rule-group",
+ *     scope: "CLOUDFRONT",
+ *     capacity: 10,
+ *     rules: [{
+ *         name: "rate-limit",
+ *         priority: 1,
+ *         action: {
+ *             block: {},
+ *         },
+ *         statement: {
+ *             rateBasedStatement: {
+ *                 limit: 2000,
+ *                 aggregateKeyType: "IP",
+ *             },
+ *         },
+ *         visibilityConfig: {
+ *             cloudwatchMetricsEnabled: true,
+ *             metricName: "rate-limit",
+ *             sampledRequestsEnabled: true,
+ *         },
+ *     }],
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "cloudfront-rule-group",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const cloudfrontExampleWebAcl = new aws.wafv2.WebAcl("cloudfront_example", {
+ *     name: "cloudfront-web-acl",
+ *     scope: "CLOUDFRONT",
+ *     defaultAction: {
+ *         allow: {},
+ *     },
+ *     visibilityConfig: {
+ *         cloudwatchMetricsEnabled: true,
+ *         metricName: "cloudfront-web-acl",
+ *         sampledRequestsEnabled: true,
+ *     },
+ * });
+ * const cloudfrontExampleWebAclRuleGroupAssociation = new aws.wafv2.WebAclRuleGroupAssociation("cloudfront_example", {
+ *     ruleName: "cloudfront-rule-group-rule",
+ *     priority: 50,
+ *     webAclArn: cloudfrontExampleWebAcl.arn,
+ *     ruleGroupReference: {
+ *         arn: cloudfrontExample.arn,
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Using `pulumi import`, import WAFv2 web ACL custom rule group associations using `WebACLARN,RuleGroupARN,RuleName`. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:wafv2/webAclRuleGroupAssociation:WebAclRuleGroupAssociation example "arn:aws:wafv2:us-east-1:123456789012:regional/webacl/example-web-acl/12345678-1234-1234-1234-123456789012,arn:aws:wafv2:us-east-1:123456789012:regional/rulegroup/example-rule-group/87654321-4321-4321-4321-210987654321,example-rule-group-rule"
+ * ```
+ * Using `pulumi import`, import WAFv2 web ACL managed rule group associations using `WebACLARN,VendorName:RuleGroupName[:Version],RuleName`. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:wafv2/webAclRuleGroupAssociation:WebAclRuleGroupAssociation managed_example "arn:aws:wafv2:us-east-1:123456789012:regional/webacl/example-web-acl/12345678-1234-1234-1234-123456789012,AWS:AWSManagedRulesCommonRuleSet,aws-common-rule-set"
+ * ```
+ */
+class WebAclRuleGroupAssociation extends pulumi.CustomResource {
+    /**
+     * Get an existing WebAclRuleGroupAssociation resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new WebAclRuleGroupAssociation(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of WebAclRuleGroupAssociation.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === WebAclRuleGroupAssociation.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["managedRuleGroup"] = state ? state.managedRuleGroup : undefined;
+            resourceInputs["overrideAction"] = state ? state.overrideAction : undefined;
+            resourceInputs["priority"] = state ? state.priority : undefined;
+            resourceInputs["region"] = state ? state.region : undefined;
+            resourceInputs["ruleGroupReference"] = state ? state.ruleGroupReference : undefined;
+            resourceInputs["ruleName"] = state ? state.ruleName : undefined;
+            resourceInputs["timeouts"] = state ? state.timeouts : undefined;
+            resourceInputs["webAclArn"] = state ? state.webAclArn : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.priority === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'priority'");
+            }
+            if ((!args || args.ruleName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'ruleName'");
+            }
+            if ((!args || args.webAclArn === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'webAclArn'");
+            }
+            resourceInputs["managedRuleGroup"] = args ? args.managedRuleGroup : undefined;
+            resourceInputs["overrideAction"] = args ? args.overrideAction : undefined;
+            resourceInputs["priority"] = args ? args.priority : undefined;
+            resourceInputs["region"] = args ? args.region : undefined;
+            resourceInputs["ruleGroupReference"] = args ? args.ruleGroupReference : undefined;
+            resourceInputs["ruleName"] = args ? args.ruleName : undefined;
+            resourceInputs["timeouts"] = args ? args.timeouts : undefined;
+            resourceInputs["webAclArn"] = args ? args.webAclArn : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(WebAclRuleGroupAssociation.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.WebAclRuleGroupAssociation = WebAclRuleGroupAssociation;
+/** @internal */
+WebAclRuleGroupAssociation.__pulumiType = 'aws:wafv2/webAclRuleGroupAssociation:WebAclRuleGroupAssociation';
+//# sourceMappingURL=webAclRuleGroupAssociation.js.map

package/wafv2/webAclRuleGroupAssociation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAclRuleGroupAssociation.js","sourceRoot":"","sources":["../../wafv2/webAclRuleGroupAssociation.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8VG;AACH,MAAa,0BAA2B,SAAQ,MAAM,CAAC,cAAc;IACjE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuC,EAAE,IAAmC;QACrI,OAAO,IAAI,0BAA0B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,0BAA0B,CAAC,YAAY,CAAC;IAC3E,CAAC;IA0CD,YAAY,IAAY,EAAE,WAA8E,EAAE,IAAmC;QACzI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0D,CAAC;YACzE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAyD,CAAC;YACvE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,0BAA0B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;;AAvGL,gEAwGC;AA1FG,gBAAgB;AACO,uCAAY,GAAG,iEAAiE,CAAC"}