@quadnix/octo-aws-cdk 0.0.11 → 0.0.13

package/dist/resources/iam-role/actions/add-iam-role.resource.action.d.ts

@@ -0,0 +1,20 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { IamRole } from '../iam-role.resource.js';
+import type { IamRoleSchema } from '../index.schema.js';
+/**
+ * @internal
+ */
+export declare class AddIamRoleResourceAction implements IResourceAction<IamRole> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole>): Promise<void>;
+    mock(diff: Diff<IamRole>, capture: Partial<IamRoleSchema['response']>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class AddIamRoleResourceActionFactory {
+    private static instance;
+    static create(): Promise<AddIamRoleResourceAction>;
+}

package/dist/resources/iam-role/actions/add-iam-role.resource.action.js

@@ -0,0 +1,116 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { CreateRoleCommand, GetRoleCommand, IAMClient } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { RetryUtility } from '../../../utilities/retry/retry.utility.js';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+let AddIamRoleResourceAction = class AddIamRoleResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.ADD &&
+            diff.node instanceof IamRole &&
+            hasNodeName(diff.node, 'iam-role') &&
+            diff.field === 'resourceId');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const response = iamRole.response;
+        const tags = iamRole.tags;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        const policyDocument = [];
+        const assumeRolePolicies = properties.policies.filter((p) => p.policyType === 'assume-role-policy');
+        for (const policy of assumeRolePolicies) {
+            if (policy.policy === 'ecs-tasks.amazonaws.com') {
+                policyDocument.push({
+                    Action: 'sts:AssumeRole',
+                    Effect: 'Allow',
+                    Principal: {
+                        Service: 'ecs-tasks.amazonaws.com',
+                    },
+                });
+            }
+        }
+        // Create IAM role with assume role policies.
+        const data = await iamClient.send(new CreateRoleCommand({
+            AssumeRolePolicyDocument: JSON.stringify({
+                Statement: policyDocument,
+                Version: '2012-10-17',
+            }),
+            RoleName: properties.rolename,
+            Tags: Object.entries(tags).map(([key, value]) => ({ Key: key, Value: value })),
+        }));
+        // Wait for iam-role to be created.
+        await RetryUtility.retryPromise(async () => {
+            const result = await iamClient.send(new GetRoleCommand({
+                RoleName: properties.rolename,
+            }));
+            return result?.Role?.Arn === data.Role.Arn;
+        }, {
+            initialDelayInMs: 5000,
+            maxRetries: 36,
+            retryDelayInMs: 1000,
+        });
+        // Set response.
+        response.Arn = data.Role.Arn;
+        response.policies = {};
+        response.RoleId = data.Role.RoleId;
+        response.RoleName = data.Role.RoleName;
+    }
+    async mock(diff, capture) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof CreateRoleCommand) {
+                return { Role: { Arn: capture.Arn, RoleId: capture.RoleId, RoleName: capture.RoleName } };
+            }
+            else if (instance instanceof GetRoleCommand) {
+                return { Role: { Arn: capture.Arn } };
+            }
+        };
+    }
+};
+AddIamRoleResourceAction = __decorate([
+    Action(IamRole),
+    __metadata("design:paramtypes", [Container])
+], AddIamRoleResourceAction);
+export { AddIamRoleResourceAction };
+/**
+ * @internal
+ */
+let AddIamRoleResourceActionFactory = class AddIamRoleResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new AddIamRoleResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+AddIamRoleResourceActionFactory = __decorate([
+    Factory(AddIamRoleResourceAction)
+], AddIamRoleResourceActionFactory);
+export { AddIamRoleResourceActionFactory };
+//# sourceMappingURL=add-iam-role.resource.action.js.map

package/dist/resources/iam-role/actions/add-iam-role.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-iam-role.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/add-iam-role.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD;;GAEG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,cAAc,GAA0E,EAAE,CAAC;QAEjG,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC;QACpG,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBAChD,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE;wBACT,OAAO,EAAE,yBAAyB;qBACnC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,iBAAiB,CAAC;YACpB,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvC,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,YAAY;aACtB,CAAC;YACF,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SAC/E,CAAC,CACH,CAAC;QAEF,mCAAmC;QACnC,MAAM,YAAY,CAAC,YAAY,CAC7B,KAAK,IAAsB,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CACjC,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CACH,CAAC;YAEF,OAAO,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,IAAK,CAAC,GAAG,CAAC;QAC9C,CAAC,EACD;YACE,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,IAAI;SACrB,CACF,CAAC;QAEF,gBAAgB;QAChB,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,IAAK,CAAC,GAAI,CAAC;QAC/B,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,IAAK,CAAC,MAAO,CAAC;QACrC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAK,CAAC,QAAS,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB,EAAE,OAA2C;QACzE,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,iBAAiB,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC5F,CAAC;iBAAM,IAAI,QAAQ,YAAY,cAAc,EAAE,CAAC;gBAC9C,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AA9FY,wBAAwB;IADpC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,wBAAwB,CA8FpC;;AAED;;GAEG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAG1C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,+BAA+B;IAD3C,OAAO,CAA2B,wBAAwB,CAAC;GAC/C,+BAA+B,CAU3C"}

package/dist/resources/iam-role/actions/delete-iam-role.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+export declare class DeleteIamRoleResourceAction implements IResourceAction<IamRole> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole>): Promise<void>;
+    mock(diff: Diff<IamRole>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class DeleteIamRoleResourceActionFactory {
+    private static instance;
+    static create(): Promise<DeleteIamRoleResourceAction>;
+}

package/dist/resources/iam-role/actions/delete-iam-role.resource.action.js

@@ -0,0 +1,77 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DeleteRoleCommand, IAMClient } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+let DeleteIamRoleResourceAction = class DeleteIamRoleResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.DELETE &&
+            diff.node instanceof IamRole &&
+            hasNodeName(diff.node, 'iam-role') &&
+            diff.field === 'resourceId');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const response = iamRole.response;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        // Delete IAM role.
+        await iamClient.send(new DeleteRoleCommand({
+            RoleName: response.RoleName,
+        }));
+    }
+    async mock(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof DeleteRoleCommand) {
+                return;
+            }
+        };
+    }
+};
+DeleteIamRoleResourceAction = __decorate([
+    Action(IamRole),
+    __metadata("design:paramtypes", [Container])
+], DeleteIamRoleResourceAction);
+export { DeleteIamRoleResourceAction };
+/**
+ * @internal
+ */
+let DeleteIamRoleResourceActionFactory = class DeleteIamRoleResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new DeleteIamRoleResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+DeleteIamRoleResourceActionFactory = __decorate([
+    Factory(DeleteIamRoleResourceAction)
+], DeleteIamRoleResourceActionFactory);
+export { DeleteIamRoleResourceActionFactory };
+//# sourceMappingURL=delete-iam-role.resource.action.js.map

package/dist/resources/iam-role/actions/delete-iam-role.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-iam-role.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/delete-iam-role.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,iBAAiB,CAAC;YACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB;QAC5B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,iBAAiB,EAAE,CAAC;gBAC1C,OAAO;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AA/CY,2BAA2B;IADvC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,2BAA2B,CA+CvC;;AAED;;GAEG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,kCAAkC;IAD9C,OAAO,CAA8B,2BAA2B,CAAC;GACrD,kCAAkC,CAU9C"}

package/dist/resources/iam-role/actions/update-iam-role-assume-role-policy.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleAssumeRolePolicyResourceAction implements IResourceAction<IamRole> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole>): Promise<void>;
+    mock(diff: Diff<IamRole>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleAssumeRolePolicyResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamRoleAssumeRolePolicyResourceAction>;
+}

package/dist/resources/iam-role/actions/update-iam-role-assume-role-policy.resource.action.js

@@ -0,0 +1,93 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { IAMClient, UpdateAssumeRolePolicyCommand } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+let UpdateIamRoleAssumeRolePolicyResourceAction = class UpdateIamRoleAssumeRolePolicyResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.UPDATE &&
+            diff.node instanceof IamRole &&
+            hasNodeName(diff.node, 'iam-role') &&
+            diff.field === 'assume-role-policy');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        const policyDocument = [];
+        const assumeRolePolicies = properties.policies.filter((p) => p.policyType === 'assume-role-policy');
+        for (const policy of assumeRolePolicies) {
+            if (policy.policy === 'ecs-tasks.amazonaws.com') {
+                policyDocument.push({
+                    Action: 'sts:AssumeRole',
+                    Effect: 'Allow',
+                    Principal: {
+                        Service: 'ecs-tasks.amazonaws.com',
+                    },
+                });
+            }
+        }
+        // Update IAM role assume role policies.
+        await iamClient.send(new UpdateAssumeRolePolicyCommand({
+            PolicyDocument: JSON.stringify({
+                Statement: policyDocument,
+                Version: '2012-10-17',
+            }),
+            RoleName: properties.rolename,
+        }));
+    }
+    async mock(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof UpdateAssumeRolePolicyCommand) {
+                return;
+            }
+        };
+    }
+};
+UpdateIamRoleAssumeRolePolicyResourceAction = __decorate([
+    Action(IamRole),
+    __metadata("design:paramtypes", [Container])
+], UpdateIamRoleAssumeRolePolicyResourceAction);
+export { UpdateIamRoleAssumeRolePolicyResourceAction };
+/**
+ * @internal
+ */
+let UpdateIamRoleAssumeRolePolicyResourceActionFactory = class UpdateIamRoleAssumeRolePolicyResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new UpdateIamRoleAssumeRolePolicyResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+UpdateIamRoleAssumeRolePolicyResourceActionFactory = __decorate([
+    Factory(UpdateIamRoleAssumeRolePolicyResourceAction)
+], UpdateIamRoleAssumeRolePolicyResourceActionFactory);
+export { UpdateIamRoleAssumeRolePolicyResourceActionFactory };
+//# sourceMappingURL=update-iam-role-assume-role-policy.resource.action.js.map

package/dist/resources/iam-role/actions/update-iam-role-assume-role-policy.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-iam-role-assume-role-policy.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/update-iam-role-assume-role-policy.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,2CAA2C,GAAjD,MAAM,2CAA2C;IACtD,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,oBAAoB,CACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,cAAc,GAA0E,EAAE,CAAC;QAEjG,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC;QACpG,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBAChD,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE;wBACT,OAAO,EAAE,yBAAyB;qBACnC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,6BAA6B,CAAC;YAChC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,YAAY;aACtB,CAAC;YACF,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB;QAC5B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,6BAA6B,EAAE,CAAC;gBACtD,OAAO;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AAjEY,2CAA2C;IADvD,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,2CAA2C,CAiEvD;;AAED;;GAEG;AAEI,IAAM,kDAAkD,GAAxD,MAAM,kDAAkD;IAG7D,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,2CAA2C,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,kDAAkD;IAD9D,OAAO,CAA8C,2CAA2C,CAAC;GACrF,kDAAkD,CAU9D"}

package/dist/resources/iam-role/actions/update-iam-role-tags.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type DiffValueTypeTagUpdate, type IResourceAction } from '@quadnix/octo';
+import { GenericResourceTaggingAction } from '../../../utilities/actions/generic-resource-tagging.action.js';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleTagsResourceAction extends GenericResourceTaggingAction implements IResourceAction<IamRole> {
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole, DiffValueTypeTagUpdate>): Promise<void>;
+    mock(diff: Diff<IamRole, DiffValueTypeTagUpdate>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleTagsResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamRoleTagsResourceAction>;
+}

package/dist/resources/iam-role/actions/update-iam-role-tags.resource.action.js

@@ -0,0 +1,60 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Action, Container, Factory, } from '@quadnix/octo';
+import { GenericResourceTaggingAction } from '../../../utilities/actions/generic-resource-tagging.action.js';
+import { IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+let UpdateIamRoleTagsResourceAction = class UpdateIamRoleTagsResourceAction extends GenericResourceTaggingAction {
+    constructor(container) {
+        super(container);
+    }
+    filter(diff) {
+        return super.filter(diff);
+    }
+    async handle(diff) {
+        // Get properties.
+        const role = diff.node;
+        const properties = role.properties;
+        const response = role.response;
+        // `us-east-1` is the recommended region for global resources.
+        await super.handle(diff, { ...properties, awsRegionId: 'us-east-1', resourceArn: response.Arn });
+    }
+    async mock(diff) {
+        // Get properties.
+        const role = diff.node;
+        const properties = role.properties;
+        // `us-east-1` is the recommended region for global resources.
+        await super.mock(diff, { ...properties, awsRegionId: 'us-east-1' });
+    }
+};
+UpdateIamRoleTagsResourceAction = __decorate([
+    Action(IamRole),
+    __metadata("design:paramtypes", [Container])
+], UpdateIamRoleTagsResourceAction);
+export { UpdateIamRoleTagsResourceAction };
+/**
+ * @internal
+ */
+let UpdateIamRoleTagsResourceActionFactory = class UpdateIamRoleTagsResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new UpdateIamRoleTagsResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+UpdateIamRoleTagsResourceActionFactory = __decorate([
+    Factory(UpdateIamRoleTagsResourceAction)
+], UpdateIamRoleTagsResourceActionFactory);
+export { UpdateIamRoleTagsResourceActionFactory };
+//# sourceMappingURL=update-iam-role-tags.resource.action.js.map

package/dist/resources/iam-role/actions/update-iam-role-tags.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-iam-role-tags.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/update-iam-role-tags.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,MAAM,EACN,SAAS,EAGT,OAAO,GAER,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,4BAA4B,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAAgC,SAAQ,4BAA4B;IAC/E,YAAY,SAAoB;QAC9B,KAAK,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IAEQ,MAAM,CAAC,IAAU;QACxB,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,IAA2C;QAC/D,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,8DAA8D;QAC9D,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAI,EAAE,CAAC,CAAC;IACpG,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,IAA2C;QAC7D,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAEnC,8DAA8D;QAC9D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AA3BY,+BAA+B;IAD3C,MAAM,CAAC,OAAO,CAAC;qCAES,SAAS;GADrB,+BAA+B,CA2B3C;;AAED;;GAEG;AAEI,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAGjD,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,+BAA+B,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,sCAAsC;IADlD,OAAO,CAAkC,+BAA+B,CAAC;GAC7D,sCAAsC,CAUlD"}

package/dist/resources/iam-role/actions/update-iam-role-with-aws-policy.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { type IIamRolePolicyDiff, IamRole } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleWithAwsPolicyResourceAction implements IResourceAction<IamRole> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole, IIamRolePolicyDiff>): Promise<void>;
+    mock(diff: Diff<IamRole>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleWithAwsPolicyResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamRoleWithAwsPolicyResourceAction>;
+}

package/dist/resources/iam-role/actions/update-iam-role-with-aws-policy.resource.action.js

@@ -0,0 +1,96 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AttachRolePolicyCommand, DetachRolePolicyCommand, IAMClient } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { IamRole, isAddPolicyDiff, isDeletePolicyDiff } from '../iam-role.resource.js';
+/**
+ * @internal
+ */
+let UpdateIamRoleWithAwsPolicyResourceAction = class UpdateIamRoleWithAwsPolicyResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.UPDATE &&
+            diff.node instanceof IamRole &&
+            hasNodeName(diff.node, 'iam-role') &&
+            diff.field === 'aws-policy');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const iamRolePolicyDiff = diff.value;
+        const properties = iamRole.properties;
+        const response = iamRole.response;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        // Attach AWS policies to IAM Role.
+        if (isAddPolicyDiff(iamRolePolicyDiff)) {
+            await iamClient.send(new AttachRolePolicyCommand({
+                PolicyArn: iamRolePolicyDiff.policy,
+                RoleName: response.RoleName,
+            }));
+            // Set response.
+            response.policies[iamRolePolicyDiff.policyId] = [iamRolePolicyDiff.policy];
+        }
+        else if (isDeletePolicyDiff(iamRolePolicyDiff)) {
+            await iamClient.send(new DetachRolePolicyCommand({
+                PolicyArn: iamRolePolicyDiff.policyId,
+                RoleName: response.RoleName,
+            }));
+            // Set response.
+            if (!Object.isFrozen(response)) {
+                delete response.policies[iamRolePolicyDiff.policyId];
+            }
+        }
+    }
+    async mock(diff) {
+        // Get properties.
+        const iamRole = diff.node;
+        const properties = iamRole.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof AttachRolePolicyCommand) {
+                return;
+            }
+            else if (instance instanceof DetachRolePolicyCommand) {
+                return;
+            }
+        };
+    }
+};
+UpdateIamRoleWithAwsPolicyResourceAction = __decorate([
+    Action(IamRole),
+    __metadata("design:paramtypes", [Container])
+], UpdateIamRoleWithAwsPolicyResourceAction);
+export { UpdateIamRoleWithAwsPolicyResourceAction };
+/**
+ * @internal
+ */
+let UpdateIamRoleWithAwsPolicyResourceActionFactory = class UpdateIamRoleWithAwsPolicyResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new UpdateIamRoleWithAwsPolicyResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+UpdateIamRoleWithAwsPolicyResourceActionFactory = __decorate([
+    Factory(UpdateIamRoleWithAwsPolicyResourceAction)
+], UpdateIamRoleWithAwsPolicyResourceActionFactory);
+export { UpdateIamRoleWithAwsPolicyResourceActionFactory };
+//# sourceMappingURL=update-iam-role-with-aws-policy.resource.action.js.map

package/dist/resources/iam-role/actions/update-iam-role-with-aws-policy.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-iam-role-with-aws-policy.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/update-iam-role-with-aws-policy.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAA2B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEhH;;GAEG;AAEI,IAAM,wCAAwC,GAA9C,MAAM,wCAAwC;IACnD,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAuC;QAClD,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mCAAmC;QACnC,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvC,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,iBAAiB,CAAC,MAAgB;gBAC7C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CACH,CAAC;YAEF,gBAAgB;YAChB,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAgB,CAAC,CAAC;QACxF,CAAC;aAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,iBAAiB,CAAC,QAAQ;gBACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CACH,CAAC;YAEF,gBAAgB;YAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB;QAC5B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBAChD,OAAO;YACT,CAAC;iBAAM,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AApEY,wCAAwC;IADpD,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,wCAAwC,CAoEpD;;AAED;;GAEG;AAEI,IAAM,+CAA+C,GAArD,MAAM,+CAA+C;IAG1D,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wCAAwC,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,+CAA+C;IAD3D,OAAO,CAA2C,wCAAwC,CAAC;GAC/E,+CAA+C,CAU3D"}

package/dist/resources/iam-role/actions/update-iam-role-with-s3-storage-policy.resource.action.d.ts

@@ -0,0 +1,20 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { type IIamRolePolicyDiff, IamRole } from '../iam-role.resource.js';
+import type { IamRoleSchema } from '../index.schema.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleWithS3StoragePolicyResourceAction implements IResourceAction<IamRole> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamRole, IIamRolePolicyDiff>): Promise<void>;
+    mock(diff: Diff<IamRole, IIamRolePolicyDiff>, capture: Partial<IamRoleSchema['response']>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamRoleWithS3StoragePolicyResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamRoleWithS3StoragePolicyResourceAction>;
+}