@quadnix/octo-aws-cdk 0.0.11 → 0.0.13

package/dist/resources/iam-user/actions/add-iam-user.resource.action.js

@@ -0,0 +1,98 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { CreateUserCommand, GetUserCommand, IAMClient } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { RetryUtility } from '../../../utilities/retry/retry.utility.js';
+import { IamUser } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+let AddIamUserResourceAction = class AddIamUserResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.ADD &&
+            diff.node instanceof IamUser &&
+            hasNodeName(diff.node, 'iam-user') &&
+            diff.field === 'resourceId');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamUser = diff.node;
+        const properties = iamUser.properties;
+        const response = iamUser.response;
+        const tags = iamUser.tags;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        // Create IAM user.
+        const data = await iamClient.send(new CreateUserCommand({
+            Tags: Object.entries(tags).map(([key, value]) => ({ Key: key, Value: value })),
+            UserName: properties.username,
+        }));
+        // Wait for iam-user to be created.
+        await RetryUtility.retryPromise(async () => {
+            const result = await iamClient.send(new GetUserCommand({
+                UserName: properties.username,
+            }));
+            return result?.User?.Arn === data.User.Arn;
+        }, {
+            initialDelayInMs: 5000,
+            maxRetries: 36,
+            retryDelayInMs: 1000,
+        });
+        // Set response.
+        response.Arn = data.User.Arn;
+        response.policies = {};
+        response.UserId = data.User.UserId;
+        response.UserName = data.User.UserName;
+    }
+    async mock(diff, capture) {
+        const iamUser = diff.node;
+        const properties = iamUser.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof CreateUserCommand) {
+                return { User: { Arn: capture.Arn, UserId: capture.UserId, UserName: capture.UserName } };
+            }
+            else if (instance instanceof GetUserCommand) {
+                return { User: { Arn: capture.Arn } };
+            }
+        };
+    }
+};
+AddIamUserResourceAction = __decorate([
+    Action(IamUser),
+    __metadata("design:paramtypes", [Container])
+], AddIamUserResourceAction);
+export { AddIamUserResourceAction };
+/**
+ * @internal
+ */
+let AddIamUserResourceActionFactory = class AddIamUserResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new AddIamUserResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+AddIamUserResourceActionFactory = __decorate([
+    Factory(AddIamUserResourceAction)
+], AddIamUserResourceActionFactory);
+export { AddIamUserResourceActionFactory };
+//# sourceMappingURL=add-iam-user.resource.action.js.map

package/dist/resources/iam-user/actions/add-iam-user.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-iam-user.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/add-iam-user.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD;;GAEG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,iBAAiB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CACH,CAAC;QAEF,mCAAmC;QACnC,MAAM,YAAY,CAAC,YAAY,CAC7B,KAAK,IAAsB,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CACjC,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CACH,CAAC;YAEF,OAAO,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,IAAK,CAAC,GAAG,CAAC;QAC9C,CAAC,EACD;YACE,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,IAAI;SACrB,CACF,CAAC;QAEF,gBAAgB;QAChB,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,IAAK,CAAC,GAAI,CAAC;QAC/B,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,IAAK,CAAC,MAAO,CAAC;QACrC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAK,CAAC,QAAS,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB,EAAE,OAA2C;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,iBAAiB,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC5F,CAAC;iBAAM,IAAI,QAAQ,YAAY,cAAc,EAAE,CAAC;gBAC9C,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AA1EY,wBAAwB;IADpC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,wBAAwB,CA0EpC;;AAED;;GAEG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAG1C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,+BAA+B;IAD3C,OAAO,CAA2B,wBAAwB,CAAC;GAC/C,+BAA+B,CAU3C"}

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { IamUser } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+export declare class DeleteIamUserResourceAction implements IResourceAction<IamUser> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamUser>): Promise<void>;
+    mock(diff: Diff<IamUser>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class DeleteIamUserResourceActionFactory {
+    private static instance;
+    static create(): Promise<DeleteIamUserResourceAction>;
+}

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.js

@@ -0,0 +1,76 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DeleteUserCommand, IAMClient } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { IamUser } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+let DeleteIamUserResourceAction = class DeleteIamUserResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.DELETE &&
+            diff.node instanceof IamUser &&
+            hasNodeName(diff.node, 'iam-user') &&
+            diff.field === 'resourceId');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamUser = diff.node;
+        const properties = iamUser.properties;
+        const response = iamUser.response;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        // Delete IAM user.
+        await iamClient.send(new DeleteUserCommand({
+            UserName: response.UserName,
+        }));
+    }
+    async mock(diff) {
+        const iamUser = diff.node;
+        const properties = iamUser.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof DeleteUserCommand) {
+                return;
+            }
+        };
+    }
+};
+DeleteIamUserResourceAction = __decorate([
+    Action(IamUser),
+    __metadata("design:paramtypes", [Container])
+], DeleteIamUserResourceAction);
+export { DeleteIamUserResourceAction };
+/**
+ * @internal
+ */
+let DeleteIamUserResourceActionFactory = class DeleteIamUserResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new DeleteIamUserResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+DeleteIamUserResourceActionFactory = __decorate([
+    Factory(DeleteIamUserResourceAction)
+], DeleteIamUserResourceActionFactory);
+export { DeleteIamUserResourceActionFactory };
+//# sourceMappingURL=delete-iam-user.resource.action.js.map

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-iam-user.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/delete-iam-user.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,iBAAiB,CAAC;YACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAmB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,iBAAiB,EAAE,CAAC;gBAC1C,OAAO;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AA9CY,2BAA2B;IADvC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,2BAA2B,CA8CvC;;AAED;;GAEG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,kCAAkC;IAD9C,OAAO,CAA8B,2BAA2B,CAAC;GACrD,kCAAkC,CAU9C"}

package/dist/resources/iam-user/actions/update-iam-user-tags.resource.action.d.ts

@@ -0,0 +1,19 @@
+import { Container, type Diff, type DiffValueTypeTagUpdate, type IResourceAction } from '@quadnix/octo';
+import { GenericResourceTaggingAction } from '../../../utilities/actions/generic-resource-tagging.action.js';
+import { IamUser } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamUserTagsResourceAction extends GenericResourceTaggingAction implements IResourceAction<IamUser> {
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamUser, DiffValueTypeTagUpdate>): Promise<void>;
+    mock(diff: Diff<IamUser, DiffValueTypeTagUpdate>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamUserTagsResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamUserTagsResourceAction>;
+}

package/dist/resources/iam-user/actions/update-iam-user-tags.resource.action.js

@@ -0,0 +1,60 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Action, Container, Factory, } from '@quadnix/octo';
+import { GenericResourceTaggingAction } from '../../../utilities/actions/generic-resource-tagging.action.js';
+import { IamUser } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+let UpdateIamUserTagsResourceAction = class UpdateIamUserTagsResourceAction extends GenericResourceTaggingAction {
+    constructor(container) {
+        super(container);
+    }
+    filter(diff) {
+        return super.filter(diff);
+    }
+    async handle(diff) {
+        // Get properties.
+        const user = diff.node;
+        const properties = user.properties;
+        const response = user.response;
+        // `us-east-1` is the recommended region for global resources.
+        await super.handle(diff, { ...properties, awsRegionId: 'us-east-1', resourceArn: response.Arn });
+    }
+    async mock(diff) {
+        // Get properties.
+        const user = diff.node;
+        const properties = user.properties;
+        // `us-east-1` is the recommended region for global resources.
+        await super.mock(diff, { ...properties, awsRegionId: 'us-east-1' });
+    }
+};
+UpdateIamUserTagsResourceAction = __decorate([
+    Action(IamUser),
+    __metadata("design:paramtypes", [Container])
+], UpdateIamUserTagsResourceAction);
+export { UpdateIamUserTagsResourceAction };
+/**
+ * @internal
+ */
+let UpdateIamUserTagsResourceActionFactory = class UpdateIamUserTagsResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new UpdateIamUserTagsResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+UpdateIamUserTagsResourceActionFactory = __decorate([
+    Factory(UpdateIamUserTagsResourceAction)
+], UpdateIamUserTagsResourceActionFactory);
+export { UpdateIamUserTagsResourceActionFactory };
+//# sourceMappingURL=update-iam-user-tags.resource.action.js.map

package/dist/resources/iam-user/actions/update-iam-user-tags.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-iam-user-tags.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/update-iam-user-tags.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,MAAM,EACN,SAAS,EAGT,OAAO,GAER,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,4BAA4B,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAAgC,SAAQ,4BAA4B;IAC/E,YAAY,SAAoB;QAC9B,KAAK,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IAEQ,MAAM,CAAC,IAAU;QACxB,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,IAA2C;QAC/D,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,8DAA8D;QAC9D,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAI,EAAE,CAAC,CAAC;IACpG,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,IAA2C;QAC7D,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAEnC,8DAA8D;QAC9D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AA3BY,+BAA+B;IAD3C,MAAM,CAAC,OAAO,CAAC;qCAES,SAAS;GADrB,+BAA+B,CA2B3C;;AAED;;GAEG;AAEI,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;IAGjD,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,+BAA+B,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,sCAAsC;IADlD,OAAO,CAAkC,+BAA+B,CAAC;GAC7D,sCAAsC,CAUlD"}

package/dist/resources/iam-user/actions/update-iam-user-with-s3-storage-policy.resource.action.d.ts

@@ -0,0 +1,20 @@
+import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
+import { type IIamUserPolicyDiff, IamUser } from '../iam-user.resource.js';
+import type { IamUserSchema } from '../index.schema.js';
+/**
+ * @internal
+ */
+export declare class UpdateIamUserWithS3StoragePolicyResourceAction implements IResourceAction<IamUser> {
+    private readonly container;
+    constructor(container: Container);
+    filter(diff: Diff): boolean;
+    handle(diff: Diff<IamUser, IIamUserPolicyDiff>): Promise<void>;
+    mock(diff: Diff<IamUser, IIamUserPolicyDiff>, capture: Partial<IamUserSchema['response']>): Promise<void>;
+}
+/**
+ * @internal
+ */
+export declare class UpdateIamUserWithS3StoragePolicyResourceActionFactory {
+    private static instance;
+    static create(): Promise<UpdateIamUserWithS3StoragePolicyResourceAction>;
+}

package/dist/resources/iam-user/actions/update-iam-user-with-s3-storage-policy.resource.action.js

@@ -0,0 +1,150 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AttachUserPolicyCommand, CreatePolicyCommand, DeletePolicyCommand, DetachUserPolicyCommand, IAMClient, } from '@aws-sdk/client-iam';
+import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
+import { PolicyUtility } from '../../../utilities/policy/policy.utility.js';
+import { IamUser, isAddPolicyDiff, isDeletePolicyDiff } from '../iam-user.resource.js';
+/**
+ * @internal
+ */
+let UpdateIamUserWithS3StoragePolicyResourceAction = class UpdateIamUserWithS3StoragePolicyResourceAction {
+    constructor(container) {
+        this.container = container;
+    }
+    filter(diff) {
+        return (diff.action === DiffAction.UPDATE &&
+            diff.node instanceof IamUser &&
+            hasNodeName(diff.node, 'iam-user') &&
+            diff.field === 's3-storage-access-policy');
+    }
+    async handle(diff) {
+        // Get properties.
+        const iamUser = diff.node;
+        const iamUserPolicyDiff = diff.value;
+        const properties = iamUser.properties;
+        const response = iamUser.response;
+        // Get instances.
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        // Attach policies to IAM User to read/write from bucket.
+        if (isAddPolicyDiff(iamUserPolicyDiff)) {
+            const policyDocument = [];
+            const policy = iamUserPolicyDiff.policy;
+            if (policy.allowRead) {
+                policyDocument.push({
+                    Action: [
+                        's3:GetObject',
+                        's3:GetObjectAttributes',
+                        's3:GetObjectTagging',
+                        's3:GetObjectVersionAcl',
+                        's3:GetObjectVersionAttributes',
+                        's3:GetObjectVersionTagging',
+                        's3:ListBucket',
+                    ],
+                    Effect: 'Allow',
+                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
+                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
+                        : [
+                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}`,
+                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`,
+                        ],
+                    Sid: PolicyUtility.getSafeSid(`Allow read from bucket ${policy.bucketName}`),
+                });
+            }
+            if (policy.allowWrite) {
+                policyDocument.push({
+                    Action: ['s3:PutObject', 's3:DeleteObjectVersion', 's3:DeleteObject'],
+                    Effect: 'Allow',
+                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
+                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
+                        : [`arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`],
+                    Sid: PolicyUtility.getSafeSid(`Allow write from bucket ${policy.bucketName}`),
+                });
+            }
+            const data = await iamClient.send(new CreatePolicyCommand({
+                PolicyDocument: JSON.stringify({
+                    Statement: policyDocument,
+                    Version: '2012-10-17',
+                }),
+                PolicyName: iamUserPolicyDiff.policyId,
+            }));
+            await iamClient.send(new AttachUserPolicyCommand({
+                PolicyArn: data.Policy.Arn,
+                UserName: response.UserName,
+            }));
+            // Set response.
+            response.policies[iamUserPolicyDiff.policyId] = [data.Policy.Arn];
+        }
+        else if (isDeletePolicyDiff(iamUserPolicyDiff)) {
+            const policyARNs = response.policies[iamUserPolicyDiff.policyId] || [];
+            await Promise.all(policyARNs.map(async (policyArn) => {
+                await iamClient.send(new DetachUserPolicyCommand({
+                    PolicyArn: policyArn,
+                    UserName: response.UserName,
+                }));
+                await iamClient.send(new DeletePolicyCommand({
+                    PolicyArn: policyArn,
+                }));
+            }));
+            // Set response.
+            if (!Object.isFrozen(response)) {
+                delete response.policies[iamUserPolicyDiff.policyId];
+            }
+        }
+    }
+    async mock(diff, capture) {
+        // Get properties.
+        const iamUser = diff.node;
+        const iamUserPolicyDiff = diff.value;
+        const properties = iamUser.properties;
+        const iamClient = await this.container.get(IAMClient, {
+            args: [properties.awsAccountId],
+            metadata: { package: '@octo' },
+        });
+        iamClient.send = async (instance) => {
+            if (instance instanceof CreatePolicyCommand) {
+                return { Policy: { Arn: capture.policies[iamUserPolicyDiff.policyId][0] } };
+            }
+            else if (instance instanceof AttachUserPolicyCommand) {
+                return;
+            }
+            else if (instance instanceof DetachUserPolicyCommand) {
+                return;
+            }
+            else if (instance instanceof DeletePolicyCommand) {
+                return;
+            }
+        };
+    }
+};
+UpdateIamUserWithS3StoragePolicyResourceAction = __decorate([
+    Action(IamUser),
+    __metadata("design:paramtypes", [Container])
+], UpdateIamUserWithS3StoragePolicyResourceAction);
+export { UpdateIamUserWithS3StoragePolicyResourceAction };
+/**
+ * @internal
+ */
+let UpdateIamUserWithS3StoragePolicyResourceActionFactory = class UpdateIamUserWithS3StoragePolicyResourceActionFactory {
+    static async create() {
+        if (!this.instance) {
+            const container = Container.getInstance();
+            this.instance = new UpdateIamUserWithS3StoragePolicyResourceAction(container);
+        }
+        return this.instance;
+    }
+};
+UpdateIamUserWithS3StoragePolicyResourceActionFactory = __decorate([
+    Factory(UpdateIamUserWithS3StoragePolicyResourceAction)
+], UpdateIamUserWithS3StoragePolicyResourceActionFactory);
+export { UpdateIamUserWithS3StoragePolicyResourceActionFactory };
+//# sourceMappingURL=update-iam-user-with-s3-storage-policy.resource.action.js.map

package/dist/resources/iam-user/actions/update-iam-user-with-s3-storage-policy.resource.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-iam-user-with-s3-storage-policy.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/update-iam-user-with-s3-storage-policy.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAA2B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGhH;;GAEG;AAEI,IAAM,8CAA8C,GAApD,MAAM,8CAA8C;IACzD,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,0BAA0B,CAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAuC;QAClD,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,yDAAyD;QACzD,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvC,MAAM,cAAc,GAA6E,EAAE,CAAC;YACpG,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC;YAExC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE;wBACN,cAAc;wBACd,wBAAwB;wBACxB,qBAAqB;wBACrB,wBAAwB;wBACxB,+BAA+B;wBAC/B,4BAA4B;wBAC5B,eAAe;qBAChB;oBACD,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC;4BACE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,EAAE;4BACjE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI;yBACpE;oBACP,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,0BAA0B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;oBACrE,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC;oBAC3E,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,2BAA2B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC9E,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,mBAAmB,CAAC;gBACtB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC7B,SAAS,EAAE,cAAc;oBACzB,OAAO,EAAE,YAAY;iBACtB,CAAC;gBACF,UAAU,EAAE,iBAAiB,CAAC,QAAQ;aACvC,CAAC,CACH,CAAC;YACF,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,IAAI,CAAC,MAAO,CAAC,GAAG;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CACH,CAAC;YAEF,gBAAgB;YAChB,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAO,CAAC,GAAI,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBACjC,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;oBAC1B,SAAS,EAAE,SAAS;oBACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC,CACH,CAAC;gBACF,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,mBAAmB,CAAC;oBACtB,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;YAEF,gBAAgB;YAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAuC,EAAE,OAA2C;QAC7F,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC7D,IAAI,QAAQ,YAAY,mBAAmB,EAAE,CAAC;gBAC5C,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/E,CAAC;iBAAM,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;iBAAM,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;iBAAM,IAAI,QAAQ,YAAY,mBAAmB,EAAE,CAAC;gBACnD,OAAO;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF,CAAA;AAjIY,8CAA8C;IAD1D,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,8CAA8C,CAiI1D;;AAED;;GAEG;AAEI,IAAM,qDAAqD,GAA3D,MAAM,qDAAqD;IAGhE,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,8CAA8C,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,qDAAqD;IADjE,OAAO,CAAiD,8CAA8C,CAAC;GAC3F,qDAAqD,CAUjE"}

package/dist/resources/iam-user/iam-user.resource.d.ts

@@ -0,0 +1,47 @@
+import { AResource, Diff } from '@quadnix/octo';
+import { type IIamUserPolicyTypes, IamUserSchema } from './index.schema.js';
+/**
+ * @internal
+ */
+export type IIamUserAddPolicyDiff = {
+    action: 'add';
+    policy: IIamUserPolicyTypes[keyof IIamUserPolicyTypes];
+    policyId: string;
+    policyType: keyof IIamUserPolicyTypes;
+};
+/**
+ * @internal
+ */
+export type IIamUserDeletePolicyDiff = {
+    action: 'delete';
+    policyId: string;
+    policyType: keyof IIamUserPolicyTypes;
+};
+/**
+ * @internal
+ */
+export type IIamUserPolicyDiff = IIamUserAddPolicyDiff | IIamUserDeletePolicyDiff;
+/**
+ * @internal
+ */
+export declare function isAddPolicyDiff(policy: IIamUserPolicyDiff): policy is IIamUserAddPolicyDiff;
+/**
+ * @internal
+ */
+export declare function isDeletePolicyDiff(policy: IIamUserPolicyDiff): policy is IIamUserDeletePolicyDiff;
+/**
+ * @internal
+ */
+export declare class IamUser extends AResource<IamUserSchema, IamUser> {
+    properties: IamUserSchema['properties'];
+    response: IamUserSchema['response'];
+    constructor(resourceId: string, properties: IamUserSchema['properties']);
+    addS3BucketPolicy(policyId: string, bucketName: string, remoteDirectoryPath: string, options: {
+        allowRead: boolean;
+        allowWrite: boolean;
+    }): void;
+    deletePolicy(policyId: string): void;
+    diffInverse(diff: Diff<IamUser, IIamUserPolicyDiff>, deReferenceResource: (resourceId: string) => Promise<never>): Promise<void>;
+    diffProperties(previous: IamUser): Promise<Diff[]>;
+    diffUnpack(diff: Diff<IamUser>): Diff[];
+}