@quadnix/octo-aws-cdk 0.0.19 → 0.2.0

package/dist/resources/iam-role/iam-role.resource.js

@@ -7,30 +7,28 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { AResource, Diff, DiffAction, DiffUtility, Resource, ResourceError } from '@quadnix/octo';
+import { ATerraformResource, Diff, DiffAction, DiffUtility, Resource, ResourceError, } from '@quadnix/octo';
+import { PolicyUtility } from '../../utilities/policy/policy.utility.js';
 import { IamRoleSchema, } from './index.schema.js';
 /**
  * @internal
  */
-export function isAddPolicyDiff(policy) {
-    return policy.action === 'add';
-}
-/**
- * @internal
- */
-export function isDeletePolicyDiff(policy) {
-    return policy.action === 'delete';
-}
-/**
- * @internal
- */
-let IamRole = class IamRole extends AResource {
+let IamRole = class IamRole extends ATerraformResource {
+    /**
+     * @internal
+     */
     constructor(resourceId, properties) {
         super(resourceId, properties, []);
         if (properties.policies.length === 0) {
             throw new ResourceError('At least one policy is required!', this);
         }
+        if (!properties.policies.some((p) => p.policyType === 'assume-role-policy')) {
+            throw new ResourceError('At least one assume-role-policy is required!', this);
+        }
     }
+    /**
+     * @internal
+     */
     addAssumeRolePolicy(policyId, awsService) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index === -1) {
@@ -41,6 +39,9 @@ let IamRole = class IamRole extends AResource {
             });
         }
     }
+    /**
+     * @internal
+     */
     addAwsPolicy(policyId, policy) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index === -1) {
@@ -51,6 +52,9 @@ let IamRole = class IamRole extends AResource {
             });
         }
     }
+    /**
+     * @internal
+     */
     addS3BucketPolicy(policyId, bucketName, remoteDirectoryPath, options) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index === -1) {
@@ -75,48 +79,23 @@ let IamRole = class IamRole extends AResource {
             };
         }
     }
+    /**
+     * @internal
+     */
     deletePolicy(policyId) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index > -1) {
             this.properties.policies.splice(index, 1);
         }
     }
-    async diffInverse(diff, deReferenceResource) {
-        if (diff.action === DiffAction.UPDATE && diff.field === 'tags') {
-            await super.diffInverse(diff, deReferenceResource);
-        }
-        else if (diff.action === DiffAction.UPDATE) {
-            if (isAddPolicyDiff(diff.value || {})) {
-                const newPolicy = diff.node.properties.policies.find((p) => p.policyId === diff.value.policyId);
-                if (newPolicy && !this.properties.policies.find((p) => p.policyId === newPolicy.policyId)) {
-                    this.properties.policies.push(newPolicy);
-                }
-            }
-            else if (isDeletePolicyDiff(diff.value || {})) {
-                const deletedPolicyIndex = this.properties.policies.findIndex((p) => {
-                    if (diff.value.policyType === 'aws-policy') {
-                        return p.policy === diff.value.policyId;
-                    }
-                    else {
-                        return p.policyId === diff.value.policyId;
-                    }
-                });
-                if (deletedPolicyIndex > -1) {
-                    this.properties.policies.splice(deletedPolicyIndex, 1);
-                }
-            }
-            else {
-                this.clonePropertiesInPlace(diff.node);
-            }
-            this.cloneResponseInPlace(diff.node);
-        }
-        else {
-            await super.diffInverse(diff, deReferenceResource);
-        }
-    }
+    /**
+     * @internal
+     */
     async diffProperties(previous) {
         if (!DiffUtility.isObjectDeepEquals(previous.properties, this.properties, ['policies'])) {
-            throw new ResourceError('Cannot update IAM Role immutable properties once it has been created!', this);
+            return [
+                new Diff(this, DiffAction.REPLACE, 'resourceId', this.getContext(), 'name is force-new on aws_iam_role; a change recreates the role'),
+            ];
         }
         if (this.properties.policies.length === 0) {
             return [new Diff(previous, DiffAction.DELETE, 'resourceId', previous.getContext())];
@@ -143,6 +122,9 @@ let IamRole = class IamRole extends AResource {
         }
         return diffs;
     }
+    /**
+     * @internal
+     */
     diffUnpack(diff) {
         if (diff.action === DiffAction.ADD && diff.field === 'resourceId') {
             const diffs = [diff];
@@ -178,6 +160,99 @@ let IamRole = class IamRole extends AResource {
             return [diff];
         }
     }
+    /**
+     * @internal
+     */
+    async toHCL(terraform) {
+        const assumeRolePolicies = this.properties.policies.filter((p) => p.policyType === 'assume-role-policy');
+        const policyStatement = assumeRolePolicies
+            .map((p) => {
+            if (p.policy === 'ecs-tasks.amazonaws.com') {
+                return {
+                    Action: 'sts:AssumeRole',
+                    Effect: 'Allow',
+                    Principal: { Service: 'ecs-tasks.amazonaws.com' },
+                };
+            }
+            return null;
+        })
+            .filter(Boolean);
+        const iamRoleOctoResource = terraform.addOctoTerraformResource(this, {
+            provider: { accountId: this.properties.awsAccountId },
+        });
+        const iamRoleTFResource = iamRoleOctoResource.addTerraformResource('aws_iam_role', this.resourceId, {
+            assume_role_policy: terraform.jsonencode({
+                Statement: policyStatement,
+                Version: '2012-10-17',
+            }),
+            name: this.properties.rolename,
+        });
+        iamRoleOctoResource.output({
+            Arn: terraform.raw(`${iamRoleTFResource.address}.arn`),
+            RoleId: terraform.raw(`${iamRoleTFResource.address}.unique_id`),
+            RoleName: terraform.raw(`${iamRoleTFResource.address}.name`),
+        });
+        const awsPolicies = this.properties.policies.filter((p) => p.policyType === 'aws-policy');
+        for (const policy of awsPolicies) {
+            iamRoleOctoResource.addTerraformResource('aws_iam_role_policy_attachment', `${this.resourceId}_${policy.policyId}`, {
+                policy_arn: policy.policy,
+                role: terraform.raw(`${iamRoleTFResource.address}.name`),
+            });
+        }
+        const s3Policies = this.properties.policies.filter((p) => p.policyType === 's3-storage-access-policy');
+        for (const policy of s3Policies) {
+            const s3Policy = policy.policy;
+            const isRootPath = s3Policy.remoteDirectoryPath === '' || s3Policy.remoteDirectoryPath === '/';
+            const bucketResources = isRootPath
+                ? [`arn:aws:s3:::${s3Policy.bucketName}`, `arn:aws:s3:::${s3Policy.bucketName}/*`]
+                : [
+                    `arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}`,
+                    `arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}/*`,
+                ];
+            const bucketWriteResources = isRootPath
+                ? [`arn:aws:s3:::${s3Policy.bucketName}`, `arn:aws:s3:::${s3Policy.bucketName}/*`]
+                : [`arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}/*`];
+            const policyStatements = [];
+            if (s3Policy.allowRead) {
+                policyStatements.push({
+                    Action: [
+                        's3:GetObject',
+                        's3:GetObjectAttributes',
+                        's3:GetObjectTagging',
+                        's3:GetObjectVersionAcl',
+                        's3:GetObjectVersionAttributes',
+                        's3:GetObjectVersionTagging',
+                        's3:ListBucket',
+                    ],
+                    Effect: 'Allow',
+                    Resource: bucketResources,
+                    Sid: PolicyUtility.getSafeSid(`Allow read from bucket ${s3Policy.bucketName}`),
+                });
+            }
+            if (s3Policy.allowWrite) {
+                policyStatements.push({
+                    Action: ['s3:PutObject', 's3:DeleteObjectVersion', 's3:DeleteObject'],
+                    Effect: 'Allow',
+                    Resource: bucketWriteResources,
+                    Sid: PolicyUtility.getSafeSid(`Allow write from bucket ${s3Policy.bucketName}`),
+                });
+            }
+            const iamPolicyTFResource = iamRoleOctoResource.addTerraformResource('aws_iam_policy', `${this.resourceId}_${policy.policyId}`, {
+                name: policy.policyId,
+                policy: terraform.jsonencode({
+                    Statement: policyStatements,
+                    Version: '2012-10-17',
+                }),
+            });
+            iamRoleOctoResource.addTerraformResource('aws_iam_role_policy_attachment', `${this.resourceId}_${policy.policyId}_attach`, {
+                policy_arn: terraform.raw(`${iamPolicyTFResource.address}.arn`),
+                role: terraform.raw(`${iamRoleTFResource.address}.name`),
+            });
+        }
+        if (Object.keys(this.tags).length > 0) {
+            iamRoleTFResource.attribute('tags', this.tags);
+        }
+    }
 };
 IamRole = __decorate([
     Resource('@octo', 'iam-role', IamRoleSchema),

package/dist/resources/iam-role/iam-role.resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-role.resource.js","sourceRoot":"","sources":["../../../src/resources/iam-role/iam-role.resource.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAClG,OAAO,EAIL,aAAa,GACd,MAAM,mBAAmB,CAAC;AAoB3B;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IACxD,OAAO,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;AACpC,CAAC;AAED;;GAEG;AAEI,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,SAAiC;IAI5D,YAAY,UAAkB,EAAE,UAAuC;QACrE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAElC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,QAAgB,EAAE,UAAoC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,UAAU;gBAClB,QAAQ;gBACR,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,MAAM;gBACd,QAAQ;gBACR,UAAU,EAAE,YAAY;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iBAAiB,CACf,QAAgB,EAChB,UAAkB,EAClB,mBAA2B,EAC3B,OAAoD;QAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,MAAM,GAA2B;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,mBAAmB;aACpB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM;gBACN,QAAQ;gBACR,UAAU,EAAE,0BAA0B;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG;gBACvC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,mBAAmB;aACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,WAAW,CACxB,IAAuC,EACvC,mBAA2D;QAE3D,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC/D,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAChG,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1F,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;iBAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClE,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;wBAC3C,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC1C,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC5C,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,QAAiB;QAC7C,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,aAAa,CAAC,uEAAuE,EAAE,IAAI,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAAgC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAClF,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9E,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAA6B,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAC/E,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEQ,UAAU,CAAC,IAAmB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAClE,MAAM,KAAK,GAAW,CAAC,IAAI,CAAC,CAAC;YAE7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAA6B,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAC/E,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC5E,MAAM,KAAK,GAAW,EAAE,CAAC;YAEzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAAgC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAClF,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;CACF,CAAA;AAxLY,OAAO;IADnB,QAAQ,CAAU,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC;;GACzC,OAAO,CAwLnB"}
+{"version":3,"file":"iam-role.resource.js","sourceRoot":"","sources":["../../../src/resources/iam-role/iam-role.resource.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,UAAU,EACV,WAAW,EACX,QAAQ,EACR,aAAa,GAEd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAIL,aAAa,GACd,MAAM,mBAAmB,CAAC;AAgB3B;;GAEG;AAEI,IAAM,OAAO,GAAb,MAAM,OAAQ,SAAQ,kBAA0C;IAIrE;;OAEG;IACH,YAAY,UAAkB,EAAE,UAAuC;QACrE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAElC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,aAAa,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,QAAgB,EAAE,UAAoC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,UAAU;gBAClB,QAAQ;gBACR,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,MAAM;gBACd,QAAQ;gBACR,UAAU,EAAE,YAAY;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAgB,EAChB,UAAkB,EAClB,mBAA2B,EAC3B,OAAoD;QAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,MAAM,GAA2B;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,mBAAmB;aACpB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC5B,MAAM;gBACN,QAAQ;gBACR,UAAU,EAAE,0BAA0B;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG;gBACvC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU;gBACV,mBAAmB;aACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,cAAc,CAAC,QAAiB;QAC7C,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACxF,OAAO;gBACL,IAAI,IAAI,CACN,IAAI,EACJ,UAAU,CAAC,OAAO,EAClB,YAAY,EACZ,IAAI,CAAC,UAAU,EAAE,EACjB,gEAAgE,CACjE;aACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAAgC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAClF,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9E,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAA6B,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAC/E,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACM,UAAU,CAAC,IAAmB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAClE,MAAM,KAAK,GAAW,CAAC,IAAI,CAAC,CAAC;YAE7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAA6B,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAC/E,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC5E,MAAM,KAAK,GAAW,EAAE,CAAC;YAEzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,CAAgC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;oBAClF,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAC9E,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CACH,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,KAAK,CAAC,SAA+B;QAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC;QACzG,MAAM,eAAe,GAAG,kBAAkB;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBAC3C,OAAO;oBACL,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE;iBAClD,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,MAAM,mBAAmB,GAAG,SAAS,CAAC,wBAAwB,CAAC,IAAe,EAAE;YAC9E,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;SACtD,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE;YAClG,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAC;gBACvC,SAAS,EAAE,eAAe;gBAC1B,OAAO,EAAE,YAAY;aACtB,CAAC;YACF,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;SAC/B,CAAC,CAAC;QACH,mBAAmB,CAAC,MAAM,CAAC;YACzB,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,MAAM,CAAC;YACtD,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,YAAY,CAAC;YAC/D,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,OAAO,CAAC;SAC7D,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC;QAC1F,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,mBAAmB,CAAC,oBAAoB,CACtC,gCAAgC,EAChC,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EACvC;gBACE,UAAU,EAAE,MAAM,CAAC,MAAgB;gBACnC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,OAAO,CAAC;aACzD,CACF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,0BAA0B,CAAC,CAAC;QACvG,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAgC,CAAC;YACzD,MAAM,UAAU,GAAG,QAAQ,CAAC,mBAAmB,KAAK,EAAE,IAAI,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC;YAC/F,MAAM,eAAe,GAAG,UAAU;gBAChC,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,UAAU,EAAE,EAAE,gBAAgB,QAAQ,CAAC,UAAU,IAAI,CAAC;gBAClF,CAAC,CAAC;oBACE,gBAAgB,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,mBAAmB,EAAE;oBACrE,gBAAgB,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,mBAAmB,IAAI;iBACxE,CAAC;YACN,MAAM,oBAAoB,GAAG,UAAU;gBACrC,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,UAAU,EAAE,EAAE,gBAAgB,QAAQ,CAAC,UAAU,IAAI,CAAC;gBAClF,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAE9E,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,gBAAgB,CAAC,IAAI,CAAC;oBACpB,MAAM,EAAE;wBACN,cAAc;wBACd,wBAAwB;wBACxB,qBAAqB;wBACrB,wBAAwB;wBACxB,+BAA+B;wBAC/B,4BAA4B;wBAC5B,eAAe;qBAChB;oBACD,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,eAAe;oBACzB,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,0BAA0B,QAAQ,CAAC,UAAU,EAAE,CAAC;iBAC/E,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACxB,gBAAgB,CAAC,IAAI,CAAC;oBACpB,MAAM,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;oBACrE,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,oBAAoB;oBAC9B,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,2BAA2B,QAAQ,CAAC,UAAU,EAAE,CAAC;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,oBAAoB,CAClE,gBAAgB,EAChB,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EACvC;gBACE,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC;oBAC3B,SAAS,EAAE,gBAAgB;oBAC3B,OAAO,EAAE,YAAY;iBACtB,CAAC;aACH,CACF,CAAC;YAEF,mBAAmB,CAAC,oBAAoB,CACtC,gCAAgC,EAChC,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,SAAS,EAC9C;gBACE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,OAAO,MAAM,CAAC;gBAC/D,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,OAAO,CAAC;aACzD,CACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;CACF,CAAA;AAzSY,OAAO;IADnB,QAAQ,CAAU,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC;;GACzC,OAAO,CAySnB"}

package/dist/resources/iam-role/index.d.ts

@@ -1,8 +1 @@
-import './actions/add-iam-role.resource.action.js';
-import './actions/delete-iam-role.resource.action.js';
-import './actions/update-iam-role-assume-role-policy.resource.action.js';
-import './actions/update-iam-role-with-aws-policy.resource.action.js';
-import './actions/update-iam-role-with-s3-storage-policy.resource.action.js';
-import './actions/update-iam-role-tags.resource.action.js';
-import './actions/validate-iam-role.resource.action.js';
 export { IamRole } from './iam-role.resource.js';

package/dist/resources/iam-role/index.js

@@ -1,9 +1,2 @@
-import './actions/add-iam-role.resource.action.js';
-import './actions/delete-iam-role.resource.action.js';
-import './actions/update-iam-role-assume-role-policy.resource.action.js';
-import './actions/update-iam-role-with-aws-policy.resource.action.js';
-import './actions/update-iam-role-with-s3-storage-policy.resource.action.js';
-import './actions/update-iam-role-tags.resource.action.js';
-import './actions/validate-iam-role.resource.action.js';
 export { IamRole } from './iam-role.resource.js';
 //# sourceMappingURL=index.js.map

package/dist/resources/iam-role/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/iam-role/index.ts"],"names":[],"mappings":"AAAA,OAAO,2CAA2C,CAAC;AACnD,OAAO,8CAA8C,CAAC;AACtD,OAAO,iEAAiE,CAAC;AACzE,OAAO,8DAA8D,CAAC;AACtE,OAAO,qEAAqE,CAAC;AAC7E,OAAO,mDAAmD,CAAC;AAC3D,OAAO,gDAAgD,CAAC;AAExD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/iam-role/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/resources/iam-role/index.schema.d.ts

@@ -57,8 +57,8 @@ export interface IIamRoleS3BucketPolicy {
 /**
  * The `IamRoleSchema` class is the schema for the `IamRole` resource,
  * which represents the AWS Identity and Access Management (IAM) Role resource.
- * This resource can create a iam role in AWS using the AWS JavaScript SDK V3 API.
- * See [official sdk docs](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/).
+ * Terraform provisions it as
+ * [`aws_iam_role`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role).
  *
  * @group Resources/IamRole
  *
@@ -86,15 +86,11 @@ export declare class IamRoleSchema extends BaseResourceSchema {
     /**
      * Saved response.
      * * `response.Arn`: The ARN of the role.
-     * * `response.policies`: A map of policy IDs to policy ARNs.
      * * `response.RoleId`: The ID of the role.
      * * `response.RoleName`: The name of the role.
      */
     response: {
         Arn?: string;
-        policies?: {
-            [key: string]: string[];
-        };
         RoleId?: string;
         RoleName?: string;
     };

package/dist/resources/iam-role/index.schema.js

@@ -11,8 +11,8 @@ import { BaseResourceSchema, Schema, Validate } from '@quadnix/octo';
 /**
  * The `IamRoleSchema` class is the schema for the `IamRole` resource,
  * which represents the AWS Identity and Access Management (IAM) Role resource.
- * This resource can create a iam role in AWS using the AWS JavaScript SDK V3 API.
- * See [official sdk docs](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/).
+ * Terraform provisions it as
+ * [`aws_iam_role`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role).
  *
  * @group Resources/IamRole
  *
@@ -35,11 +35,14 @@ export class IamRoleSchema extends BaseResourceSchema {
         /**
          * Saved response.
          * * `response.Arn`: The ARN of the role.
-         * * `response.policies`: A map of policy IDs to policy ARNs.
          * * `response.RoleId`: The ID of the role.
          * * `response.RoleName`: The name of the role.
          */
-        this.response = Schema();
+        this.response = Schema({
+            Arn: 'arn:aws:iam::000000000000:role/mock-role',
+            RoleId: 'ABC00123456789ABC0ABC',
+            RoleName: 'mock-role',
+        });
     }
 }
 __decorate([
@@ -56,9 +59,6 @@ __decorate([
             if (value.Arn) {
                 subjects.push(value.Arn);
             }
-            if (value.policies && Object.keys(value.policies).length > 0) {
-                subjects.push(...Object.values(value.policies).flat());
-            }
             if (value.RoleId) {
                 subjects.push(value.RoleId);
             }

package/dist/resources/iam-role/index.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../src/resources/iam-role/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAiErE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,aAAc,SAAQ,kBAAkB;IAArD;;QACE,uDAAuD;QACvD;;;;;WAKG;QAKM,eAAU,GAAG,MAAM,EAMxB,CAAC;QAEL;;;;;;WAMG;QAoBM,aAAQ,GAAG,MAAM,EAKtB,CAAC;IACP,CAAC;CAAA;AAxCU;IAJR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAkC,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;QAChG,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;iDAOG;AA4BI;IAnBR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAgC,EAAY,EAAE;YACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;+CAMG"}
+{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../src/resources/iam-role/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAiErE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,aAAc,SAAQ,kBAAkB;IAArD;;QACE,uDAAuD;QACvD;;;;;WAKG;QAKM,eAAU,GAAG,MAAM,EAMxB,CAAC;QAEL;;;;;WAKG;QAiBM,aAAQ,GAAG,MAAM,CAIvB;YACD,GAAG,EAAE,0CAA0C;YAC/C,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC;CAAA;AAvCU;IAJR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAkC,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;QAChG,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;iDAOG;AAwBI;IAhBR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAgC,EAAY,EAAE;YACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;+CASC"}

package/dist/resources/iam-user/iam-user.resource.d.ts

@@ -1,4 +1,4 @@
-import { AResource, Diff } from '@quadnix/octo';
+import { ATerraformResource, Diff, type TerraformModuleScope } from '@quadnix/octo';
 import { type IIamUserPolicyTypes, IamUserSchema } from './index.schema.js';
 /**
  * @internal
@@ -20,28 +20,34 @@ export type IIamUserDeletePolicyDiff = {
 /**
  * @internal
  */
-export type IIamUserPolicyDiff = IIamUserAddPolicyDiff | IIamUserDeletePolicyDiff;
-/**
- * @internal
- */
-export declare function isAddPolicyDiff(policy: IIamUserPolicyDiff): policy is IIamUserAddPolicyDiff;
-/**
- * @internal
- */
-export declare function isDeletePolicyDiff(policy: IIamUserPolicyDiff): policy is IIamUserDeletePolicyDiff;
-/**
- * @internal
- */
-export declare class IamUser extends AResource<IamUserSchema, IamUser> {
+export declare class IamUser extends ATerraformResource<IamUserSchema, IamUser> {
     properties: IamUserSchema['properties'];
     response: IamUserSchema['response'];
+    /**
+     * @internal
+     */
     constructor(resourceId: string, properties: IamUserSchema['properties']);
+    /**
+     * @internal
+     */
     addS3BucketPolicy(policyId: string, bucketName: string, remoteDirectoryPath: string, options: {
         allowRead: boolean;
         allowWrite: boolean;
     }): void;
+    /**
+     * @internal
+     */
     deletePolicy(policyId: string): void;
-    diffInverse(diff: Diff<IamUser, IIamUserPolicyDiff>, deReferenceResource: (resourceId: string) => Promise<never>): Promise<void>;
+    /**
+     * @internal
+     */
     diffProperties(previous: IamUser): Promise<Diff[]>;
+    /**
+     * @internal
+     */
     diffUnpack(diff: Diff<IamUser>): Diff[];
+    /**
+     * @internal
+     */
+    toHCL(terraform: TerraformModuleScope): Promise<void>;
 }

package/dist/resources/iam-user/iam-user.resource.js

@@ -7,27 +7,22 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { AResource, Diff, DiffAction, DiffUtility, Resource, ResourceError } from '@quadnix/octo';
+import { ATerraformResource, Diff, DiffAction, DiffUtility, Resource } from '@quadnix/octo';
+import { PolicyUtility } from '../../utilities/policy/policy.utility.js';
 import { IamUserSchema } from './index.schema.js';
 /**
  * @internal
  */
-export function isAddPolicyDiff(policy) {
-    return policy.action === 'add';
-}
-/**
- * @internal
- */
-export function isDeletePolicyDiff(policy) {
-    return policy.action === 'delete';
-}
-/**
- * @internal
- */
-let IamUser = class IamUser extends AResource {
+let IamUser = class IamUser extends ATerraformResource {
+    /**
+     * @internal
+     */
     constructor(resourceId, properties) {
         super(resourceId, properties, []);
     }
+    /**
+     * @internal
+     */
     addS3BucketPolicy(policyId, bucketName, remoteDirectoryPath, options) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index === -1) {
@@ -52,41 +47,23 @@ let IamUser = class IamUser extends AResource {
             };
         }
     }
+    /**
+     * @internal
+     */
     deletePolicy(policyId) {
         const index = this.properties.policies.findIndex((p) => p.policyId === policyId);
         if (index > -1) {
             this.properties.policies.splice(index, 1);
         }
     }
-    async diffInverse(diff, deReferenceResource) {
-        if (diff.action === DiffAction.UPDATE && diff.field === 'tags') {
-            await super.diffInverse(diff, deReferenceResource);
-        }
-        else if (diff.action === DiffAction.UPDATE) {
-            if (isAddPolicyDiff(diff.value || {})) {
-                const newPolicy = diff.node.properties.policies.find((p) => p.policyId === diff.value.policyId);
-                if (newPolicy) {
-                    this.properties.policies.push(newPolicy);
-                }
-            }
-            else if (isDeletePolicyDiff(diff.value || {})) {
-                const deletedPolicyIndex = this.properties.policies.findIndex((p) => p.policyId === diff.value.policyId);
-                if (deletedPolicyIndex > -1) {
-                    this.properties.policies.splice(deletedPolicyIndex, 1);
-                }
-            }
-            else {
-                this.clonePropertiesInPlace(diff.node);
-            }
-            this.cloneResponseInPlace(diff.node);
-        }
-        else {
-            await super.diffInverse(diff, deReferenceResource);
-        }
-    }
+    /**
+     * @internal
+     */
     async diffProperties(previous) {
         if (!DiffUtility.isObjectDeepEquals(previous.properties, this.properties, ['policies'])) {
-            throw new ResourceError('Cannot update IAM User immutable properties once it has been created!', this);
+            return [
+                new Diff(this, DiffAction.REPLACE, 'resourceId', this.getContext(), 'name is force-new on aws_iam_user; a change recreates the user'),
+            ];
         }
         const diffs = [];
         for (const policy of previous.properties.policies) {
@@ -110,6 +87,9 @@ let IamUser = class IamUser extends AResource {
         }
         return diffs;
     }
+    /**
+     * @internal
+     */
     diffUnpack(diff) {
         if (diff.action === DiffAction.ADD && diff.field === 'resourceId') {
             const diffs = [diff];
@@ -139,6 +119,75 @@ let IamUser = class IamUser extends AResource {
             return [diff];
         }
     }
+    /**
+     * @internal
+     */
+    async toHCL(terraform) {
+        const iamUserOctoResource = terraform.addOctoTerraformResource(this, {
+            provider: { accountId: this.properties.awsAccountId },
+        });
+        const iamUserTFResource = iamUserOctoResource.addTerraformResource('aws_iam_user', this.resourceId, {
+            name: this.properties.username,
+        });
+        iamUserOctoResource.output({
+            Arn: terraform.raw(`${iamUserTFResource.address}.arn`),
+            UserId: terraform.raw(`${iamUserTFResource.address}.unique_id`),
+            UserName: terraform.raw(`${iamUserTFResource.address}.name`),
+        });
+        const s3Policies = this.properties.policies.filter((p) => p.policyType === 's3-storage-access-policy');
+        for (const policy of s3Policies) {
+            const s3Policy = policy.policy;
+            const isRootPath = s3Policy.remoteDirectoryPath === '' || s3Policy.remoteDirectoryPath === '/';
+            const bucketReadResources = isRootPath
+                ? [`arn:aws:s3:::${s3Policy.bucketName}`, `arn:aws:s3:::${s3Policy.bucketName}/*`]
+                : [
+                    `arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}`,
+                    `arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}/*`,
+                ];
+            const bucketWriteResources = isRootPath
+                ? [`arn:aws:s3:::${s3Policy.bucketName}`, `arn:aws:s3:::${s3Policy.bucketName}/*`]
+                : [`arn:aws:s3:::${s3Policy.bucketName}/${s3Policy.remoteDirectoryPath}/*`];
+            const policyStatements = [];
+            if (s3Policy.allowRead) {
+                policyStatements.push({
+                    Action: [
+                        's3:GetObject',
+                        's3:GetObjectAttributes',
+                        's3:GetObjectTagging',
+                        's3:GetObjectVersionAcl',
+                        's3:GetObjectVersionAttributes',
+                        's3:GetObjectVersionTagging',
+                        's3:ListBucket',
+                    ],
+                    Effect: 'Allow',
+                    Resource: bucketReadResources,
+                    Sid: PolicyUtility.getSafeSid(`Allow read from bucket ${s3Policy.bucketName}`),
+                });
+            }
+            if (s3Policy.allowWrite) {
+                policyStatements.push({
+                    Action: ['s3:PutObject', 's3:DeleteObjectVersion', 's3:DeleteObject'],
+                    Effect: 'Allow',
+                    Resource: bucketWriteResources,
+                    Sid: PolicyUtility.getSafeSid(`Allow write from bucket ${s3Policy.bucketName}`),
+                });
+            }
+            const iamPolicyTFResource = iamUserOctoResource.addTerraformResource('aws_iam_policy', `${this.resourceId}_${policy.policyId}`, {
+                name: policy.policyId,
+                policy: terraform.jsonencode({
+                    Statement: policyStatements,
+                    Version: '2012-10-17',
+                }),
+            });
+            iamUserOctoResource.addTerraformResource('aws_iam_user_policy_attachment', `${this.resourceId}_${policy.policyId}_attach`, {
+                policy_arn: terraform.raw(`${iamPolicyTFResource.address}.arn`),
+                user: terraform.raw(`${iamUserTFResource.address}.name`),
+            });
+        }
+        if (Object.keys(this.tags).length > 0) {
+            iamUserTFResource.attribute('tags', this.tags);
+        }
+    }
 };
 IamUser = __decorate([
     Resource('@octo', 'iam-user', IamUserSchema),