@quadnix/octo-aws-cdk 0.0.18 → 0.1.0

package/dist/resources/iam-role/actions/update-iam-role-with-s3-storage-policy.resource.action.js

@@ -1,157 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { AttachRolePolicyCommand, CreatePolicyCommand, DeletePolicyCommand, DetachRolePolicyCommand, IAMClient, } from '@aws-sdk/client-iam';
-import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
-import { PolicyUtility } from '../../../utilities/policy/policy.utility.js';
-import { IamRole, isAddPolicyDiff, isDeletePolicyDiff } from '../iam-role.resource.js';
-/**
- * @internal
- */
-let UpdateIamRoleWithS3StoragePolicyResourceAction = class UpdateIamRoleWithS3StoragePolicyResourceAction {
-    constructor(container) {
-        this.container = container;
-    }
-    filter(diff) {
-        return (diff.action === DiffAction.UPDATE &&
-            diff.node instanceof IamRole &&
-            hasNodeName(diff.node, 'iam-role') &&
-            diff.field === 's3-storage-access-policy');
-    }
-    async handle(diff) {
-        // Get properties.
-        const iamRole = diff.node;
-        const properties = iamRole.properties;
-        const response = iamRole.response;
-        const iamRolePolicyDiff = diff.value;
-        // Get instances.
-        const iamClient = await this.container.get(IAMClient, {
-            args: [properties.awsAccountId],
-            metadata: { package: '@octo' },
-        });
-        // Attach policies to IAM Role to read/write from bucket.
-        if (isAddPolicyDiff(iamRolePolicyDiff)) {
-            const policyDocument = [];
-            const policy = iamRolePolicyDiff.policy;
-            if (policy.allowRead) {
-                policyDocument.push({
-                    Action: [
-                        's3:GetObject',
-                        's3:GetObjectAttributes',
-                        's3:GetObjectTagging',
-                        's3:GetObjectVersionAcl',
-                        's3:GetObjectVersionAttributes',
-                        's3:GetObjectVersionTagging',
-                        's3:ListBucket',
-                    ],
-                    Effect: 'Allow',
-                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
-                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
-                        : [
-                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}`,
-                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`,
-                        ],
-                    Sid: PolicyUtility.getSafeSid(`Allow read from bucket ${policy.bucketName}`),
-                });
-            }
-            if (policy.allowWrite) {
-                policyDocument.push({
-                    Action: ['s3:PutObject', 's3:DeleteObjectVersion', 's3:DeleteObject'],
-                    Effect: 'Allow',
-                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
-                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
-                        : [`arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`],
-                    Sid: PolicyUtility.getSafeSid(`Allow write from bucket ${policy.bucketName}`),
-                });
-            }
-            const data = await iamClient.send(new CreatePolicyCommand({
-                PolicyDocument: JSON.stringify({
-                    Statement: policyDocument,
-                    Version: '2012-10-17',
-                }),
-                PolicyName: iamRolePolicyDiff.policyId,
-            }));
-            await iamClient.send(new AttachRolePolicyCommand({
-                PolicyArn: data.Policy.Arn,
-                RoleName: response.RoleName,
-            }));
-            const policies = response.policies ? { ...response.policies } : {};
-            policies[iamRolePolicyDiff.policyId] = [data.Policy.Arn];
-            return {
-                ...response,
-                policies,
-            };
-        }
-        else if (isDeletePolicyDiff(iamRolePolicyDiff)) {
-            const policyARNs = response.policies[iamRolePolicyDiff.policyId] || [];
-            await Promise.all(policyARNs.map(async (policyArn) => {
-                await iamClient.send(new DetachRolePolicyCommand({
-                    PolicyArn: policyArn,
-                    RoleName: response.RoleName,
-                }));
-                await iamClient.send(new DeletePolicyCommand({
-                    PolicyArn: policyArn,
-                }));
-            }));
-            const policies = { ...response.policies };
-            delete policies[iamRolePolicyDiff.policyId];
-            return {
-                ...response,
-                policies,
-            };
-        }
-        return response;
-    }
-    async mock(diff, capture) {
-        // Get properties.
-        const iamRole = diff.node;
-        const response = iamRole.response;
-        const iamRolePolicyDiff = diff.value;
-        // Attach policies to IAM Role to read/write from bucket.
-        if (isAddPolicyDiff(iamRolePolicyDiff)) {
-            const policies = response.policies ? { ...response.policies } : {};
-            policies[iamRolePolicyDiff.policyId] = [capture.policies[iamRolePolicyDiff.policyId][0]];
-            return {
-                ...response,
-                policies,
-            };
-        }
-        else if (isDeletePolicyDiff(iamRolePolicyDiff)) {
-            const policies = { ...response.policies };
-            delete policies[iamRolePolicyDiff.policyId];
-            return {
-                ...response,
-                policies,
-            };
-        }
-        return response;
-    }
-};
-UpdateIamRoleWithS3StoragePolicyResourceAction = __decorate([
-    Action(IamRole),
-    __metadata("design:paramtypes", [Container])
-], UpdateIamRoleWithS3StoragePolicyResourceAction);
-export { UpdateIamRoleWithS3StoragePolicyResourceAction };
-/**
- * @internal
- */
-let UpdateIamRoleWithS3StoragePolicyResourceActionFactory = class UpdateIamRoleWithS3StoragePolicyResourceActionFactory {
-    static async create() {
-        if (!this.instance) {
-            const container = Container.getInstance();
-            this.instance = new UpdateIamRoleWithS3StoragePolicyResourceAction(container);
-        }
-        return this.instance;
-    }
-};
-UpdateIamRoleWithS3StoragePolicyResourceActionFactory = __decorate([
-    Factory(UpdateIamRoleWithS3StoragePolicyResourceAction)
-], UpdateIamRoleWithS3StoragePolicyResourceActionFactory);
-export { UpdateIamRoleWithS3StoragePolicyResourceActionFactory };
-//# sourceMappingURL=update-iam-role-with-s3-storage-policy.resource.action.js.map

package/dist/resources/iam-role/actions/update-iam-role-with-s3-storage-policy.resource.action.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-iam-role-with-s3-storage-policy.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/update-iam-role-with-s3-storage-policy.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAA2B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGhH;;GAEG;AAEI,IAAM,8CAA8C,GAApD,MAAM,8CAA8C;IACzD,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,0BAA0B,CAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAuC;QAClD,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;QAErC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,yDAAyD;QACzD,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvC,MAAM,cAAc,GAA6E,EAAE,CAAC;YACpG,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAgC,CAAC;YAElE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE;wBACN,cAAc;wBACd,wBAAwB;wBACxB,qBAAqB;wBACrB,wBAAwB;wBACxB,+BAA+B;wBAC/B,4BAA4B;wBAC5B,eAAe;qBAChB;oBACD,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC;4BACE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,EAAE;4BACjE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI;yBACpE;oBACP,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,0BAA0B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;oBACrE,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC;oBAC3E,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,2BAA2B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC9E,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,mBAAmB,CAAC;gBACtB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC7B,SAAS,EAAE,cAAc;oBACzB,OAAO,EAAE,YAAY;iBACtB,CAAC;gBACF,UAAU,EAAE,iBAAiB,CAAC,QAAQ;aACvC,CAAC,CACH,CAAC;YACF,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,IAAI,CAAC,MAAO,CAAC,GAAG;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAO,CAAC,GAAI,CAAC,CAAC;YAC5D,OAAO;gBACL,GAAG,QAAQ;gBACX,QAAQ;aACT,CAAC;QACJ,CAAC;aAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBACjC,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,uBAAuB,CAAC;oBAC1B,SAAS,EAAE,SAAS;oBACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC,CACH,CAAC;gBACF,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,mBAAmB,CAAC;oBACtB,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,QAAQ;gBACX,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAuC,EACvC,OAA2C;QAE3C,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;QAErC,yDAAyD;QACzD,IAAI,eAAe,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,OAAO;gBACL,GAAG,QAAQ;gBACX,QAAQ;aACT,CAAC;QACJ,CAAC;aAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,QAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,QAAQ;gBACX,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAA;AA/IY,8CAA8C;IAD1D,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,8CAA8C,CA+I1D;;AAED;;GAEG;AAEI,IAAM,qDAAqD,GAA3D,MAAM,qDAAqD;IAGhE,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,8CAA8C,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,qDAAqD;IADjE,OAAO,CAAiD,8CAA8C,CAAC;GAC3F,qDAAqD,CAUjE"}

package/dist/resources/iam-role/actions/validate-iam-role.resource.action.d.ts

@@ -1,17 +0,0 @@
-import { ANodeAction, type Diff, type IResourceAction } from '@quadnix/octo';
-import { IamRole } from '../iam-role.resource.js';
-/**
- * @internal
- */
-export declare class ValidateIamRoleResourceAction extends ANodeAction implements IResourceAction<IamRole> {
-    constructor();
-    filter(diff: Diff): boolean;
-    handle(diff: Diff<IamRole>): Promise<void>;
-}
-/**
- * @internal
- */
-export declare class ValidateIamRoleResourceActionFactory {
-    private static instance;
-    static create(): Promise<ValidateIamRoleResourceAction>;
-}

package/dist/resources/iam-role/actions/validate-iam-role.resource.action.js

@@ -1,207 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { GetPolicyCommand, GetPolicyVersionCommand, GetRoleCommand, IAMClient, ListAttachedRolePoliciesCommand, } from '@aws-sdk/client-iam';
-import { ANodeAction, Action, DiffAction, Factory, TransactionError, hasNodeName, } from '@quadnix/octo';
-import { PolicyUtility } from '../../../utilities/policy/policy.utility.js';
-import { IamRole } from '../iam-role.resource.js';
-/**
- * @internal
- */
-let ValidateIamRoleResourceAction = class ValidateIamRoleResourceAction extends ANodeAction {
-    constructor() {
-        super();
-    }
-    filter(diff) {
-        return (diff.action === DiffAction.VALIDATE &&
-            diff.node instanceof IamRole &&
-            hasNodeName(diff.node, 'iam-role') &&
-            diff.field === 'resourceId');
-    }
-    async handle(diff) {
-        // Get properties.
-        const iamRole = diff.node;
-        const properties = iamRole.properties;
-        const response = iamRole.response;
-        // Get instances.
-        const iamClient = await this.container.get(IAMClient, {
-            args: [properties.awsAccountId],
-            metadata: { package: '@octo' },
-        });
-        // Check if IAM Role exists.
-        let getRoleResult;
-        try {
-            getRoleResult = await iamClient.send(new GetRoleCommand({
-                RoleName: response.RoleName,
-            }));
-        }
-        catch (error) {
-            if (error.name === 'NoSuchEntity') {
-                throw new TransactionError(`IAM Role with name ${response.RoleName} does not exist!`);
-            }
-            throw error;
-        }
-        const actualRole = getRoleResult.Role;
-        // Validate role name.
-        if (actualRole.RoleName !== properties.rolename) {
-            throw new TransactionError(`IAM Role name mismatch. Expected: ${properties.rolename}, Actual: ${actualRole.RoleName || 'undefined'}`);
-        }
-        // Validate role ID.
-        if (actualRole.RoleId !== response.RoleId) {
-            throw new TransactionError(`IAM Role ID mismatch. Expected: ${response.RoleId}, Actual: ${actualRole.RoleId || 'undefined'}`);
-        }
-        // Validate role ARN.
-        if (actualRole.Arn !== response.Arn) {
-            throw new TransactionError(`IAM Role ARN mismatch. Expected: ${response.Arn}, Actual: ${actualRole.Arn || 'undefined'}`);
-        }
-        // Validate ARN format (account should match).
-        const expectedArnPrefix = `arn:aws:iam::${properties.awsAccountId}:role/`;
-        if (!response.Arn.startsWith(expectedArnPrefix)) {
-            throw new TransactionError(`IAM Role ARN account mismatch. Expected prefix: ${expectedArnPrefix}, Actual: ${response.Arn}`);
-        }
-        // Validate assume role policy (trust policy).
-        const assumeRolePolicyDocument = JSON.parse(decodeURIComponent(actualRole.AssumeRolePolicyDocument));
-        const assumeRolePolicies = properties.policies.filter((p) => p.policyType === 'assume-role-policy');
-        const expectedStatements = [];
-        for (const policy of assumeRolePolicies) {
-            if (policy.policy === 'ecs-tasks.amazonaws.com') {
-                expectedStatements.push({
-                    Action: 'sts:AssumeRole',
-                    Effect: 'Allow',
-                    Principal: {
-                        Service: 'ecs-tasks.amazonaws.com',
-                    },
-                });
-            }
-        }
-        if (assumeRolePolicyDocument.Statement?.length !== expectedStatements.length) {
-            throw new TransactionError(`IAM Role assume role policy statement count mismatch. Expected: ${expectedStatements.length}, Actual: ${assumeRolePolicyDocument.Statement?.length || 0}`);
-        }
-        for (const expectedStatement of expectedStatements) {
-            const matchingStatement = assumeRolePolicyDocument.Statement?.find((statement) => statement.Action === expectedStatement.Action &&
-                statement.Effect === expectedStatement.Effect &&
-                JSON.stringify(statement.Principal) === JSON.stringify(expectedStatement.Principal));
-            if (!matchingStatement) {
-                throw new TransactionError(`IAM Role assume role policy missing statement for service: ${expectedStatement.Principal.Service}`);
-            }
-        }
-        // Validate attached policies.
-        const listAttachedPoliciesResult = await iamClient.send(new ListAttachedRolePoliciesCommand({
-            RoleName: response.RoleName,
-        }));
-        const attachedPolicies = listAttachedPoliciesResult.AttachedPolicies || [];
-        const expectedPolicyArns = new Set();
-        // Collect all expected policy ARNs from response.
-        if (response.policies) {
-            for (const policyArns of Object.values(response.policies)) {
-                for (const arn of policyArns) {
-                    expectedPolicyArns.add(arn);
-                }
-            }
-        }
-        // Validate policy count matches.
-        if (attachedPolicies.length !== expectedPolicyArns.size) {
-            throw new TransactionError(`IAM Role attached policy count mismatch. Expected: ${expectedPolicyArns.size}, Actual: ${attachedPolicies.length}`);
-        }
-        // Validate each expected policy is attached.
-        for (const expectedArn of expectedPolicyArns) {
-            const attachedPolicy = attachedPolicies.find((p) => p.PolicyArn === expectedArn);
-            if (!attachedPolicy) {
-                throw new TransactionError(`IAM Role missing attached policy: ${expectedArn}. Current policies: ${JSON.stringify(attachedPolicies.map((p) => p.PolicyArn))}`);
-            }
-        }
-        // Validate S3 storage access policies in detail.
-        const s3StoragePolicies = properties.policies.filter((p) => p.policyType === 's3-storage-access-policy');
-        for (const s3Policy of s3StoragePolicies) {
-            const policyArns = response.policies?.[s3Policy.policyId];
-            if (!policyArns || policyArns.length === 0) {
-                throw new TransactionError(`IAM Role response missing policy ARN for S3 storage policy: ${s3Policy.policyId}`);
-            }
-            const policyArn = policyArns[0];
-            // Get policy version.
-            const getPolicyResult = await iamClient.send(new GetPolicyCommand({
-                PolicyArn: policyArn,
-            }));
-            const policyVersion = getPolicyResult.Policy.DefaultVersionId;
-            // Get policy document.
-            const getPolicyVersionResult = await iamClient.send(new GetPolicyVersionCommand({
-                PolicyArn: policyArn,
-                VersionId: policyVersion,
-            }));
-            const policyDocument = JSON.parse(decodeURIComponent(getPolicyVersionResult.PolicyVersion.Document));
-            const policy = s3Policy.policy;
-            // Validate policy statements.
-            const expectedS3Statements = [];
-            if (policy.allowRead) {
-                expectedS3Statements.push({
-                    Action: [
-                        's3:GetObject',
-                        's3:GetObjectAttributes',
-                        's3:GetObjectTagging',
-                        's3:GetObjectVersionAcl',
-                        's3:GetObjectVersionAttributes',
-                        's3:GetObjectVersionTagging',
-                        's3:ListBucket',
-                    ],
-                    Effect: 'Allow',
-                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
-                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
-                        : [
-                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}`,
-                            `arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`,
-                        ],
-                    Sid: PolicyUtility.getSafeSid(`Allow read from bucket ${policy.bucketName}`),
-                });
-            }
-            if (policy.allowWrite) {
-                expectedS3Statements.push({
-                    Action: ['s3:PutObject', 's3:DeleteObjectVersion', 's3:DeleteObject'],
-                    Effect: 'Allow',
-                    Resource: policy.remoteDirectoryPath === '' || policy.remoteDirectoryPath === '/'
-                        ? [`arn:aws:s3:::${policy.bucketName}`, `arn:aws:s3:::${policy.bucketName}/*`]
-                        : [`arn:aws:s3:::${policy.bucketName}/${policy.remoteDirectoryPath}/*`],
-                    Sid: PolicyUtility.getSafeSid(`Allow write from bucket ${policy.bucketName}`),
-                });
-            }
-            if (policyDocument.Statement?.length !== expectedS3Statements.length) {
-                throw new TransactionError(`S3 storage policy ${s3Policy.policyId} statement count mismatch. Expected: ${expectedS3Statements.length}, Actual: ${policyDocument.Statement?.length || 0}`);
-            }
-            for (const expectedStatement of expectedS3Statements) {
-                const matchingStatement = policyDocument.Statement?.find((statement) => statement.Sid === expectedStatement.Sid &&
-                    statement.Effect === expectedStatement.Effect &&
-                    JSON.stringify(statement.Action) === JSON.stringify(expectedStatement.Action) &&
-                    JSON.stringify(statement.Resource) === JSON.stringify(expectedStatement.Resource));
-                if (!matchingStatement) {
-                    throw new TransactionError(`S3 storage policy ${s3Policy.policyId} missing statement with Sid: ${expectedStatement.Sid}`);
-                }
-            }
-        }
-    }
-};
-ValidateIamRoleResourceAction = __decorate([
-    Action(IamRole),
-    __metadata("design:paramtypes", [])
-], ValidateIamRoleResourceAction);
-export { ValidateIamRoleResourceAction };
-/**
- * @internal
- */
-let ValidateIamRoleResourceActionFactory = class ValidateIamRoleResourceActionFactory {
-    static async create() {
-        if (!this.instance) {
-            this.instance = new ValidateIamRoleResourceAction();
-        }
-        return this.instance;
-    }
-};
-ValidateIamRoleResourceActionFactory = __decorate([
-    Factory(ValidateIamRoleResourceAction)
-], ValidateIamRoleResourceActionFactory);
-export { ValidateIamRoleResourceActionFactory };
-//# sourceMappingURL=validate-iam-role.resource.action.js.map

package/dist/resources/iam-role/actions/validate-iam-role.resource.action.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validate-iam-role.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-role/actions/validate-iam-role.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EAEd,SAAS,EACT,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,MAAM,EAEN,UAAU,EACV,OAAO,EAEP,gBAAgB,EAChB,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD;;GAEG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,WAAW;IAC5D;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAED,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ;YACnC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,aAA+C,CAAC;QACpD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,SAAS,CAAC,IAAI,CAClC,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAS;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAClC,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,QAAQ,CAAC,QAAQ,kBAAkB,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAK,CAAC;QAEvC,sBAAsB;QACtB,IAAI,UAAU,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,qCAAqC,UAAU,CAAC,QAAQ,aAAa,UAAU,CAAC,QAAQ,IAAI,WAAW,EAAE,CAC1G,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,gBAAgB,CACxB,mCAAmC,QAAQ,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,IAAI,WAAW,EAAE,CAClG,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,QAAQ,CAAC,GAAG,aAAa,UAAU,CAAC,GAAG,IAAI,WAAW,EAAE,CAC7F,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,MAAM,iBAAiB,GAAG,gBAAgB,UAAU,CAAC,YAAY,QAAQ,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,GAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,gBAAgB,CACxB,mDAAmD,iBAAiB,aAAa,QAAQ,CAAC,GAAG,EAAE,CAChG,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,MAAM,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,wBAAyB,CAAC,CAAC,CAAC;QACtG,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC;QAEpG,MAAM,kBAAkB,GAA0E,EAAE,CAAC;QACrG,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBAChD,kBAAkB,CAAC,IAAI,CAAC;oBACtB,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE;wBACT,OAAO,EAAE,yBAAyB;qBACnC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,wBAAwB,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC7E,MAAM,IAAI,gBAAgB,CACxB,mEAAmE,kBAAkB,CAAC,MAAM,aAAa,wBAAwB,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE,CAC3J,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;YACnD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAChE,CAAC,SAAc,EAAE,EAAE,CACjB,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;gBAC7C,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;gBAC7C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CACtF,CAAC;YAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,gBAAgB,CACxB,8DAA8D,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,0BAA0B,GAAG,MAAM,SAAS,CAAC,IAAI,CACrD,IAAI,+BAA+B,CAAC;YAClC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CACH,CAAC;QAEF,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC3E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE7C,kDAAkD;QAClD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,gBAAgB,CAAC,MAAM,KAAK,kBAAkB,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,CACxB,sDAAsD,kBAAkB,CAAC,IAAI,aAAa,gBAAgB,CAAC,MAAM,EAAE,CACpH,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,KAAK,MAAM,WAAW,IAAI,kBAAkB,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC;YACjF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,gBAAgB,CACxB,qCAAqC,WAAW,uBAAuB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAClI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,0BAA0B,CAAC,CAAC;QACzG,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,gBAAgB,CAAC,+DAA+D,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjH,CAAC;YAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAEhC,sBAAsB;YACtB,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,IAAI,CAC1C,IAAI,gBAAgB,CAAC;gBACnB,SAAS,EAAE,SAAS;aACrB,CAAC,CACH,CAAC;YAEF,MAAM,aAAa,GAAG,eAAe,CAAC,MAAO,CAAC,gBAAiB,CAAC;YAEhE,uBAAuB;YACvB,MAAM,sBAAsB,GAAG,MAAM,SAAS,CAAC,IAAI,CACjD,IAAI,uBAAuB,CAAC;gBAC1B,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,aAAa;aACzB,CAAC,CACH,CAAC;YAEF,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,aAAc,CAAC,QAAS,CAAC,CAAC,CAAC;YACvG,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgC,CAAC;YAEzD,8BAA8B;YAC9B,MAAM,oBAAoB,GAA6E,EAAE,CAAC;YAE1G,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,oBAAoB,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE;wBACN,cAAc;wBACd,wBAAwB;wBACxB,qBAAqB;wBACrB,wBAAwB;wBACxB,+BAA+B;wBAC/B,4BAA4B;wBAC5B,eAAe;qBAChB;oBACD,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC;4BACE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,EAAE;4BACjE,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI;yBACpE;oBACP,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,0BAA0B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,oBAAoB,CAAC,IAAI,CAAC;oBACxB,MAAM,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;oBACrE,MAAM,EAAE,OAAO;oBACf,QAAQ,EACN,MAAM,CAAC,mBAAmB,KAAK,EAAE,IAAI,MAAM,CAAC,mBAAmB,KAAK,GAAG;wBACrE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC;wBAC9E,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC;oBAC3E,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,2BAA2B,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC9E,CAAC,CAAC;YACL,CAAC;YAED,IAAI,cAAc,CAAC,SAAS,EAAE,MAAM,KAAK,oBAAoB,CAAC,MAAM,EAAE,CAAC;gBACrE,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,QAAQ,CAAC,QAAQ,wCAAwC,oBAAoB,CAAC,MAAM,aAAa,cAAc,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE,CAC9J,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;gBACrD,MAAM,iBAAiB,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CACtD,CAAC,SAAc,EAAE,EAAE,CACjB,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC,GAAG;oBACvC,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;oBAC7C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC;oBAC7E,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CACpF,CAAC;gBAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,QAAQ,CAAC,QAAQ,gCAAgC,iBAAiB,CAAC,GAAG,EAAE,CAC9F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AA7OY,6BAA6B;IADzC,MAAM,CAAC,OAAO,CAAC;;GACH,6BAA6B,CA6OzC;;AAED;;GAEG;AAEI,IAAM,oCAAoC,GAA1C,MAAM,oCAAoC;IAG/C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,6BAA6B,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AATY,oCAAoC;IADhD,OAAO,CAAgC,6BAA6B,CAAC;GACzD,oCAAoC,CAShD"}

package/dist/resources/iam-user/actions/add-iam-user.resource.action.d.ts

@@ -1,20 +0,0 @@
-import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
-import { IamUser } from '../iam-user.resource.js';
-import type { IamUserSchema } from '../index.schema.js';
-/**
- * @internal
- */
-export declare class AddIamUserResourceAction implements IResourceAction<IamUser> {
-    private readonly container;
-    constructor(container: Container);
-    filter(diff: Diff): boolean;
-    handle(diff: Diff<IamUser>): Promise<IamUserSchema['response']>;
-    mock(_diff: Diff<IamUser>, capture: Partial<IamUserSchema['response']>): Promise<IamUserSchema['response']>;
-}
-/**
- * @internal
- */
-export declare class AddIamUserResourceActionFactory {
-    private static instance;
-    static create(): Promise<AddIamUserResourceAction>;
-}

package/dist/resources/iam-user/actions/add-iam-user.resource.action.js

@@ -1,90 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { CreateUserCommand, GetUserCommand, IAMClient } from '@aws-sdk/client-iam';
-import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
-import { RetryUtility } from '../../../utilities/retry/retry.utility.js';
-import { IamUser } from '../iam-user.resource.js';
-/**
- * @internal
- */
-let AddIamUserResourceAction = class AddIamUserResourceAction {
-    constructor(container) {
-        this.container = container;
-    }
-    filter(diff) {
-        return (diff.action === DiffAction.ADD &&
-            diff.node instanceof IamUser &&
-            hasNodeName(diff.node, 'iam-user') &&
-            diff.field === 'resourceId');
-    }
-    async handle(diff) {
-        // Get properties.
-        const iamUser = diff.node;
-        const properties = iamUser.properties;
-        const tags = iamUser.tags;
-        // Get instances.
-        const iamClient = await this.container.get(IAMClient, {
-            args: [properties.awsAccountId],
-            metadata: { package: '@octo' },
-        });
-        // Create IAM user.
-        const data = await iamClient.send(new CreateUserCommand({
-            Tags: Object.entries(tags).map(([key, value]) => ({ Key: key, Value: value })),
-            UserName: properties.username,
-        }));
-        // Wait for iam-user to be created.
-        await RetryUtility.retryPromise(async () => {
-            const result = await iamClient.send(new GetUserCommand({
-                UserName: properties.username,
-            }));
-            return result?.User?.Arn === data.User.Arn;
-        }, {
-            initialDelayInMs: 5000,
-            maxRetries: 36,
-            retryDelayInMs: 1000,
-        });
-        return {
-            Arn: data.User.Arn,
-            policies: {},
-            UserId: data.User.UserId,
-            UserName: data.User.UserName,
-        };
-    }
-    async mock(_diff, capture) {
-        return {
-            Arn: capture.Arn,
-            policies: {},
-            UserId: capture.UserId,
-            UserName: capture.UserName,
-        };
-    }
-};
-AddIamUserResourceAction = __decorate([
-    Action(IamUser),
-    __metadata("design:paramtypes", [Container])
-], AddIamUserResourceAction);
-export { AddIamUserResourceAction };
-/**
- * @internal
- */
-let AddIamUserResourceActionFactory = class AddIamUserResourceActionFactory {
-    static async create() {
-        if (!this.instance) {
-            const container = Container.getInstance();
-            this.instance = new AddIamUserResourceAction(container);
-        }
-        return this.instance;
-    }
-};
-AddIamUserResourceActionFactory = __decorate([
-    Factory(AddIamUserResourceAction)
-], AddIamUserResourceActionFactory);
-export { AddIamUserResourceActionFactory };
-//# sourceMappingURL=add-iam-user.resource.action.js.map

package/dist/resources/iam-user/actions/add-iam-user.resource.action.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"add-iam-user.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/add-iam-user.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGlD;;GAEG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG;YAC9B,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,iBAAiB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CACH,CAAC;QAEF,mCAAmC;QACnC,MAAM,YAAY,CAAC,YAAY,CAC7B,KAAK,IAAsB,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CACjC,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CACH,CAAC;YAEF,OAAO,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,IAAK,CAAC,GAAG,CAAC;QAC9C,CAAC,EACD;YACE,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,IAAI;SACrB,CACF,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,IAAK,CAAC,GAAI;YACpB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,CAAC,IAAK,CAAC,MAAO;YAC1B,QAAQ,EAAE,IAAI,CAAC,IAAK,CAAC,QAAS;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAoB,EAAE,OAA2C;QAC1E,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAI;YACjB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,OAAO,CAAC,MAAO;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAS;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AAlEY,wBAAwB;IADpC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,wBAAwB,CAkEpC;;AAED;;GAEG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAG1C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,+BAA+B;IAD3C,OAAO,CAA2B,wBAAwB,CAAC;GAC/C,+BAA+B,CAU3C"}

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.d.ts

@@ -1,18 +0,0 @@
-import { Container, type Diff, type IResourceAction } from '@quadnix/octo';
-import { IamUser } from '../iam-user.resource.js';
-/**
- * @internal
- */
-export declare class DeleteIamUserResourceAction implements IResourceAction<IamUser> {
-    private readonly container;
-    constructor(container: Container);
-    filter(diff: Diff): boolean;
-    handle(diff: Diff<IamUser>): Promise<void>;
-}
-/**
- * @internal
- */
-export declare class DeleteIamUserResourceActionFactory {
-    private static instance;
-    static create(): Promise<DeleteIamUserResourceAction>;
-}

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.js

@@ -1,63 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { DeleteUserCommand, IAMClient } from '@aws-sdk/client-iam';
-import { Action, Container, DiffAction, Factory, hasNodeName } from '@quadnix/octo';
-import { IamUser } from '../iam-user.resource.js';
-/**
- * @internal
- */
-let DeleteIamUserResourceAction = class DeleteIamUserResourceAction {
-    constructor(container) {
-        this.container = container;
-    }
-    filter(diff) {
-        return (diff.action === DiffAction.DELETE &&
-            diff.node instanceof IamUser &&
-            hasNodeName(diff.node, 'iam-user') &&
-            diff.field === 'resourceId');
-    }
-    async handle(diff) {
-        // Get properties.
-        const iamUser = diff.node;
-        const properties = iamUser.properties;
-        const response = iamUser.response;
-        // Get instances.
-        const iamClient = await this.container.get(IAMClient, {
-            args: [properties.awsAccountId],
-            metadata: { package: '@octo' },
-        });
-        // Delete IAM user.
-        await iamClient.send(new DeleteUserCommand({
-            UserName: response.UserName,
-        }));
-    }
-};
-DeleteIamUserResourceAction = __decorate([
-    Action(IamUser),
-    __metadata("design:paramtypes", [Container])
-], DeleteIamUserResourceAction);
-export { DeleteIamUserResourceAction };
-/**
- * @internal
- */
-let DeleteIamUserResourceActionFactory = class DeleteIamUserResourceActionFactory {
-    static async create() {
-        if (!this.instance) {
-            const container = Container.getInstance();
-            this.instance = new DeleteIamUserResourceAction(container);
-        }
-        return this.instance;
-    }
-};
-DeleteIamUserResourceActionFactory = __decorate([
-    Factory(DeleteIamUserResourceAction)
-], DeleteIamUserResourceActionFactory);
-export { DeleteIamUserResourceActionFactory };
-//# sourceMappingURL=delete-iam-user.resource.action.js.map

package/dist/resources/iam-user/actions/delete-iam-user.resource.action.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delete-iam-user.resource.action.js","sourceRoot":"","sources":["../../../../src/resources/iam-user/actions/delete-iam-user.resource.action.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;GAEG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,MAAM,CAAC,IAAU;QACf,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACjC,IAAI,CAAC,IAAI,YAAY,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,kBAAkB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACxF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,iBAAiB,CAAC;YACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA/BY,2BAA2B;IADvC,MAAM,CAAC,OAAO,CAAC;qCAE0B,SAAS;GADtC,2BAA2B,CA+BvC;;AAED;;GAEG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAG7C,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAVY,kCAAkC;IAD9C,OAAO,CAA8B,2BAA2B,CAAC;GACrD,kCAAkC,CAU9C"}

package/dist/resources/iam-user/actions/update-iam-user-tags.resource.action.d.ts

@@ -1,18 +0,0 @@
-import { Container, type Diff, type DiffValueTypeTagUpdate, type IResourceAction } from '@quadnix/octo';
-import { GenericResourceTaggingAction } from '../../../utilities/actions/generic-resource-tagging.action.js';
-import { IamUser } from '../iam-user.resource.js';
-/**
- * @internal
- */
-export declare class UpdateIamUserTagsResourceAction extends GenericResourceTaggingAction implements IResourceAction<IamUser> {
-    constructor(container: Container);
-    filter(diff: Diff): boolean;
-    handle(diff: Diff<IamUser, DiffValueTypeTagUpdate>): Promise<void>;
-}
-/**
- * @internal
- */
-export declare class UpdateIamUserTagsResourceActionFactory {
-    private static instance;
-    static create(): Promise<UpdateIamUserTagsResourceAction>;
-}