@quadnix/octo-aws-cdk 0.0.19 → 0.2.0

package/dist/anchors/aws-subnet/aws-subnet.anchor.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws-subnet.anchor.schema.js","sourceRoot":"","sources":["../../../src/anchors/aws-subnet/aws-subnet.anchor.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAe,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,gBAAgB;IAA3D;;QAME;;;;;;;WAOG;QAWM,eAAU,GAAG,MAAM,EAMxB,CAAC;IACP,CAAC;CAAA;AAPU;IAVR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA0C,EAAY,EAAE,CAAC;YAClE,KAAK,CAAC,gBAAgB;YACtB,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU;SACjB;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;yDAOG"}
+{"version":3,"file":"aws-subnet.anchor.schema.js","sourceRoot":"","sources":["../../../src/anchors/aws-subnet/aws-subnet.anchor.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAe,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEhF;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAsB,SAAQ,gBAAgB;IAA3D;;QAME;;;;;;;WAOG;QAWM,eAAU,GAAG,MAAM,EAMxB,CAAC;IACP,CAAC;CAAA;AAPU;IAVR,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAA0C,EAAY,EAAE,CAAC;YAClE,KAAK,CAAC,gBAAgB;YACtB,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU;SACjB;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;yDAOG"}

package/dist/factories/aws-client.factory.d.ts

@@ -1,80 +1,90 @@
-import { EC2Client } from '@aws-sdk/client-ec2';
+import { CloudFrontClient } from '@aws-sdk/client-cloudfront';
 import { ECRClient } from '@aws-sdk/client-ecr';
-import { ECSClient } from '@aws-sdk/client-ecs';
-import { EFSClient } from '@aws-sdk/client-efs';
-import { ElasticLoadBalancingV2Client } from '@aws-sdk/client-elastic-load-balancing-v2';
-import { IAMClient } from '@aws-sdk/client-iam';
-import { ResourceGroupsTaggingAPIClient } from '@aws-sdk/client-resource-groups-tagging-api';
-import { S3Client } from '@aws-sdk/client-s3';
-import { STSClient } from '@aws-sdk/client-sts';
-import { Upload } from '@aws-sdk/lib-storage';
-import type { EndpointInputConfig } from '@smithy/middleware-endpoint/dist-types/resolveEndpointConfig.js';
-import type { AwsCredentialIdentityProvider } from '@smithy/types';
-declare class AwsClientFactory {
-    private static instances;
-    static create(awsAccountId: string, awsRegionId: string): Promise<any>;
-    static createInstance(...args: unknown[]): any;
-}
-/**
- * @internal
- */
-export declare class EC2ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): EC2Client;
-}
-/**
- * @internal
- */
-export declare class ECRClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): ECRClient;
-}
-/**
- * @internal
- */
-export declare class ECSClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): ECSClient;
-}
+import type { AwsCredentialIdentity, AwsCredentialIdentityProvider } from '@smithy/types';
 /**
+ * What an account model hands over: either the credentials themselves, or something that resolves
+ * them. The SDK takes both under its `credentials` option.
+ *
  * @internal
  */
-export declare class EFSClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): EFSClient;
-}
-/**
- * @internal
- */
-export declare class ElasticLoadBalancingV2ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): ElasticLoadBalancingV2Client;
-}
-/**
- * @internal
- */
-export declare class IAMClientFactory extends AwsClientFactory {
-    static create(awsAccountId: string): Promise<IAMClient>;
-    static createInstance(_awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): IAMClient;
-}
+export type AwsClientCredentials = AwsCredentialIdentity | AwsCredentialIdentityProvider;
 /**
+ * Serves the AWS SDK clients an external resource action needs, one per account and region.
+ *
+ * A global service - one whose endpoint is not a region a caller picks - overrides `create()` to
+ * supply the region itself, so its callers name the account alone.
+ *
+ * A resource terraform manages needs no client - the provider talks to AWS. Only an external
+ * resource, whose lifecycle octo drives itself, resolves one of these, and it must authenticate as
+ * the account that owns the resource rather than as whoever the ambient credential chain happens to
+ * name. An app spanning two accounts depends on that being per-account.
+ *
+ * The credentials, and any endpoint overrides, are registered by the account module against the
+ * account id. A subclass supplies the service name and builds the client.
+ *
  * @internal
  */
-export declare class ResourceGroupsTaggingAPIClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): ResourceGroupsTaggingAPIClient;
-}
-/**
- * @internal
- */
-export declare class S3ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): S3Client;
+declare class AwsClientFactory {
+    /**
+     * The AWS service name, as it appears in an account module's `endpoints` input, e.g. `ecr`.
+     */
+    protected static readonly serviceName: string;
+    private static readonly instances;
+    /**
+     * @throws {@link ContainerResolutionError} If either the account or the region is missing.
+     */
+    static create(awsAccountId: string, awsRegionId: string): Promise<any>;
+    /**
+     * @throws {@link ContainerResolutionError} Always. A subclass builds the client it serves.
+     */
+    static createInstance(...args: unknown[]): any;
+    /**
+     * Forgets every client built so far.
+     *
+     * The container builds a fresh factory result on every `get()`, so this cache is what makes two
+     * resolutions of one account and region the same client. It outlives a `TestContainer`, which
+     * only resets the container, so a test that changes what an account's credentials are clears it.
+     *
+     * @internal
+     */
+    static reset(): void;
+    /**
+     * @internal
+     */
+    private static build;
 }
 /**
  * @internal
  */
-export declare class S3UploadClientFactory {
-    static create(): Promise<typeof Upload>;
+export declare class ECRClientFactory extends AwsClientFactory {
+    protected static readonly serviceName: string;
+    /**
+     * @internal
+     */
+    static createInstance(awsRegionId: string, credentials: AwsClientCredentials, endpoint?: string): ECRClient;
 }
 /**
+ * CloudFront is one global service with one endpoint, so a caller names the account and nothing
+ * else. The region a global service is reached at is a fact about that service rather than
+ * something a caller chooses, so the factory supplies it - which is also what keeps the cache
+ * keyed the same way as every other client's.
+ *
  * @internal
  */
-export declare class STSClientFactory extends AwsClientFactory {
-    static create(awsAccountId: string): Promise<STSClient>;
-    static createInstance(_awsRegionId: string, credentials: AwsCredentialIdentityProvider, endpointInputConfig?: EndpointInputConfig): STSClient;
+export declare class CloudFrontClientFactory extends AwsClientFactory {
+    protected static readonly serviceName: string;
+    /**
+     * The region every CloudFront call is made to, whichever region the origins behind a distribution
+     * live in.
+     */
+    private static readonly awsRegionId;
+    /**
+     * @internal
+     */
+    static create(awsAccountId: string): Promise<CloudFrontClient>;
+    /**
+     * @internal
+     */
+    static createInstance(awsRegionId: string, credentials: AwsClientCredentials, endpoint?: string): CloudFrontClient;
 }
 export {};

package/dist/factories/aws-client.factory.js

@@ -4,19 +4,34 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { EC2Client } from '@aws-sdk/client-ec2';
+import { CloudFrontClient } from '@aws-sdk/client-cloudfront';
 import { ECRClient } from '@aws-sdk/client-ecr';
-import { ECSClient } from '@aws-sdk/client-ecs';
-import { EFSClient } from '@aws-sdk/client-efs';
-import { ElasticLoadBalancingV2Client } from '@aws-sdk/client-elastic-load-balancing-v2';
-import { IAMClient } from '@aws-sdk/client-iam';
-import { ResourceGroupsTaggingAPIClient } from '@aws-sdk/client-resource-groups-tagging-api';
-import { S3Client } from '@aws-sdk/client-s3';
-import { STSClient } from '@aws-sdk/client-sts';
-import { Upload } from '@aws-sdk/lib-storage';
 import { Container, ContainerResolutionError, Factory } from '@quadnix/octo';
+/**
+ * Serves the AWS SDK clients an external resource action needs, one per account and region.
+ *
+ * A global service - one whose endpoint is not a region a caller picks - overrides `create()` to
+ * supply the region itself, so its callers name the account alone.
+ *
+ * A resource terraform manages needs no client - the provider talks to AWS. Only an external
+ * resource, whose lifecycle octo drives itself, resolves one of these, and it must authenticate as
+ * the account that owns the resource rather than as whoever the ambient credential chain happens to
+ * name. An app spanning two accounts depends on that being per-account.
+ *
+ * The credentials, and any endpoint overrides, are registered by the account module against the
+ * account id. A subclass supplies the service name and builds the client.
+ *
+ * @internal
+ */
 class AwsClientFactory {
+    /**
+     * The AWS service name, as it appears in an account module's `endpoints` input, e.g. `ecr`.
+     */
+    static { this.serviceName = ''; }
     static { this.instances = {}; }
+    /**
+     * @throws {@link ContainerResolutionError} If either the account or the region is missing.
+     */
     static async create(awsAccountId, awsRegionId) {
         if (!awsAccountId || !awsRegionId) {
             throw new ContainerResolutionError(`Failed to create instance of ${this.name} due to insufficient arguments!`, AwsClientFactory.name);
@@ -24,52 +39,64 @@ class AwsClientFactory {
         if (!this.instances[this.name]) {
             this.instances[this.name] = [];
         }
-        let instanceIndex = this.instances[this.name].findIndex((i) => i.awsAccountId === awsAccountId && i.awsRegionId === awsRegionId);
-        if (instanceIndex === -1) {
-            const container = Container.getInstance();
-            const credentials = await container.get('AwsCredentialIdentityProvider', {
-                metadata: { awsAccountId, package: '@octo' },
-            });
-            let endpointInputConfig;
-            if (container.has('EndpointInputConfig', { metadata: { awsAccountId, package: '@octo' } })) {
-                endpointInputConfig = await container.get('EndpointInputConfig', {
-                    metadata: { awsAccountId, package: '@octo' },
-                });
-            }
-            this.instances[this.name].push({
-                awsAccountId,
-                awsRegionId,
-                value: this.createInstance(awsRegionId, credentials, endpointInputConfig),
-            });
-            instanceIndex = this.instances[this.name].length - 1;
+        // The pending client is cached, not the resolved one, so two callers asking at once share a
+        // client rather than racing to build two. Nothing is awaited before the cache is written.
+        let instance = this.instances[this.name].find((i) => i.awsAccountId === awsAccountId && i.awsRegionId === awsRegionId);
+        if (!instance) {
+            instance = { awsAccountId, awsRegionId, value: this.build(awsAccountId, awsRegionId) };
+            this.instances[this.name].push(instance);
         }
-        return this.instances[this.name][instanceIndex].value;
+        return instance.value;
     }
+    /**
+     * @throws {@link ContainerResolutionError} Always. A subclass builds the client it serves.
+     */
     static createInstance(...args) {
         if (args.length > 3) {
             throw new ContainerResolutionError('Invalid number of args in createInstance()!', AwsClientFactory.name);
         }
         throw new ContainerResolutionError('Method not implemented! Use derived class implementation', AwsClientFactory.name);
     }
-}
-/**
- * @internal
- */
-let EC2ClientFactory = class EC2ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new EC2Client({ ...credentials, ...endpointInputConfig, region: awsRegionId });
+    /**
+     * Forgets every client built so far.
+     *
+     * The container builds a fresh factory result on every `get()`, so this cache is what makes two
+     * resolutions of one account and region the same client. It outlives a `TestContainer`, which
+     * only resets the container, so a test that changes what an account's credentials are clears it.
+     *
+     * @internal
+     */
+    static reset() {
+        for (const key of Object.keys(AwsClientFactory.instances)) {
+            delete AwsClientFactory.instances[key];
+        }
     }
-};
-EC2ClientFactory = __decorate([
-    Factory(EC2Client, { metadata: { package: '@octo' } })
-], EC2ClientFactory);
-export { EC2ClientFactory };
+    /**
+     * @internal
+     */
+    static async build(awsAccountId, awsRegionId) {
+        const container = Container.getInstance();
+        const metadata = { awsAccountId, package: '@octo' };
+        const credentials = await container.get('AwsCredentialIdentityProvider', { metadata });
+        // An account pointed at a local stand-in registers one endpoint per service it serves.
+        let endpoint;
+        if (container.has('AwsServiceEndpoints', { metadata })) {
+            const endpoints = await container.get('AwsServiceEndpoints', { metadata });
+            endpoint = endpoints[this.serviceName];
+        }
+        return this.createInstance(awsRegionId, credentials, endpoint);
+    }
+}
 /**
  * @internal
  */
 let ECRClientFactory = class ECRClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new ECRClient({ ...credentials, ...endpointInputConfig, region: awsRegionId });
+    static { this.serviceName = 'ecr'; }
+    /**
+     * @internal
+     */
+    static createInstance(awsRegionId, credentials, endpoint) {
+        return new ECRClient({ credentials, endpoint, region: awsRegionId });
     }
 };
 ECRClientFactory = __decorate([
@@ -77,113 +104,35 @@ ECRClientFactory = __decorate([
 ], ECRClientFactory);
 export { ECRClientFactory };
 /**
+ * CloudFront is one global service with one endpoint, so a caller names the account and nothing
+ * else. The region a global service is reached at is a fact about that service rather than
+ * something a caller chooses, so the factory supplies it - which is also what keeps the cache
+ * keyed the same way as every other client's.
+ *
  * @internal
  */
-let ECSClientFactory = class ECSClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new ECSClient({ ...credentials, ...endpointInputConfig, region: awsRegionId });
-    }
-};
-ECSClientFactory = __decorate([
-    Factory(ECSClient, { metadata: { package: '@octo' } })
-], ECSClientFactory);
-export { ECSClientFactory };
-/**
- * @internal
- */
-let EFSClientFactory = class EFSClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new EFSClient({ ...credentials, ...endpointInputConfig, region: awsRegionId });
-    }
-};
-EFSClientFactory = __decorate([
-    Factory(EFSClient, { metadata: { package: '@octo' } })
-], EFSClientFactory);
-export { EFSClientFactory };
-/**
- * @internal
- */
-let ElasticLoadBalancingV2ClientFactory = class ElasticLoadBalancingV2ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new ElasticLoadBalancingV2Client({ ...credentials, ...endpointInputConfig, region: awsRegionId });
-    }
-};
-ElasticLoadBalancingV2ClientFactory = __decorate([
-    Factory(ElasticLoadBalancingV2Client, { metadata: { package: '@octo' } })
-], ElasticLoadBalancingV2ClientFactory);
-export { ElasticLoadBalancingV2ClientFactory };
-/**
- * @internal
- */
-let IAMClientFactory = class IAMClientFactory extends AwsClientFactory {
-    static async create(awsAccountId) {
-        return super.create(awsAccountId, 'global');
-    }
-    static createInstance(_awsRegionId, credentials, endpointInputConfig = {}) {
-        return new IAMClient({ ...credentials, ...endpointInputConfig });
-    }
-};
-IAMClientFactory = __decorate([
-    Factory(IAMClient, { metadata: { package: '@octo' } })
-], IAMClientFactory);
-export { IAMClientFactory };
-/**
- * @internal
- */
-let ResourceGroupsTaggingAPIClientFactory = class ResourceGroupsTaggingAPIClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new ResourceGroupsTaggingAPIClient({
-            ...credentials,
-            ...endpointInputConfig,
-            region: awsRegionId,
-        });
-    }
-};
-ResourceGroupsTaggingAPIClientFactory = __decorate([
-    Factory(ResourceGroupsTaggingAPIClient, { metadata: { package: '@octo' } })
-], ResourceGroupsTaggingAPIClientFactory);
-export { ResourceGroupsTaggingAPIClientFactory };
-/**
- * @internal
- */
-let S3ClientFactory = class S3ClientFactory extends AwsClientFactory {
-    static createInstance(awsRegionId, credentials, endpointInputConfig = {}) {
-        return new S3Client({
-            ...credentials,
-            ...endpointInputConfig,
-            region: awsRegionId,
-        });
-    }
-};
-S3ClientFactory = __decorate([
-    Factory(S3Client, { metadata: { package: '@octo' } })
-], S3ClientFactory);
-export { S3ClientFactory };
-/**
- * @internal
- */
-let S3UploadClientFactory = class S3UploadClientFactory {
-    static async create() {
-        return Upload;
-    }
-};
-S3UploadClientFactory = __decorate([
-    Factory('Upload', { metadata: { package: '@octo' } })
-], S3UploadClientFactory);
-export { S3UploadClientFactory };
-/**
- * @internal
- */
-let STSClientFactory = class STSClientFactory extends AwsClientFactory {
+let CloudFrontClientFactory = class CloudFrontClientFactory extends AwsClientFactory {
+    static { this.serviceName = 'cloudfront'; }
+    /**
+     * The region every CloudFront call is made to, whichever region the origins behind a distribution
+     * live in.
+     */
+    static { this.awsRegionId = 'us-east-1'; }
+    /**
+     * @internal
+     */
     static async create(awsAccountId) {
-        return super.create(awsAccountId, 'global');
+        return super.create(awsAccountId, this.awsRegionId);
     }
-    static createInstance(_awsRegionId, credentials, endpointInputConfig = {}) {
-        return new STSClient({ ...credentials, ...endpointInputConfig });
+    /**
+     * @internal
+     */
+    static createInstance(awsRegionId, credentials, endpoint) {
+        return new CloudFrontClient({ credentials, endpoint, region: awsRegionId });
     }
 };
-STSClientFactory = __decorate([
-    Factory(STSClient, { metadata: { package: '@octo' } })
-], STSClientFactory);
-export { STSClientFactory };
+CloudFrontClientFactory = __decorate([
+    Factory(CloudFrontClient, { metadata: { package: '@octo' } })
+], CloudFrontClientFactory);
+export { CloudFrontClientFactory };
 //# sourceMappingURL=aws-client.factory.js.map

package/dist/factories/aws-client.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws-client.factory.js","sourceRoot":"","sources":["../../src/factories/aws-client.factory.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7E,MAAM,gBAAgB;aACL,cAAS,GAAmF,EAAE,CAAC;IAE9G,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAoB,EAAE,WAAmB;QAC3D,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,IAAI,CAAC,IAAI,iCAAiC,EAC1E,gBAAgB,CAAC,IAAI,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CACxE,CAAC;QACF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAE1C,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,CAAgC,+BAA+B,EAAE;gBACtG,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE;aAC7C,CAAC,CAAC;YAEH,IAAI,mBAAoD,CAAC;YACzD,IAAI,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC3F,mBAAmB,GAAG,MAAM,SAAS,CAAC,GAAG,CAAsB,qBAAqB,EAAE;oBACpF,QAAQ,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE;iBAC7C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAC7B,YAAY;gBACZ,WAAW;gBACX,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,mBAAmB,CAAC;aAC1E,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,GAAG,IAAe;QACtC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,wBAAwB,CAAC,6CAA6C,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3G,CAAC;QAED,MAAM,IAAI,wBAAwB,CAChC,0DAA0D,EAC1D,gBAAgB,CAAC,IAAI,CACtB,CAAC;IACJ,CAAC;;AAGH;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AARY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAQ5B;;AAED;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AARY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAQ5B;;AAED;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AARY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAQ5B;;AAED;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AARY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAQ5B;;AAED;;GAEG;AAEI,IAAM,mCAAmC,GAAzC,MAAM,mCAAoC,SAAQ,gBAAgB;IACvE,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,4BAA4B,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3G,CAAC;CACF,CAAA;AARY,mCAAmC;IAD/C,OAAO,CAA+B,4BAA4B,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GAC3F,mCAAmC,CAQ/C;;AAED;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAU,cAAc,CAC5B,YAAoB,EACpB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACnE,CAAC;CACF,CAAA;AAZY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAY5B;;AAED;;GAEG;AAEI,IAAM,qCAAqC,GAA3C,MAAM,qCAAsC,SAAQ,gBAAgB;IACzE,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,8BAA8B,CAAC;YACxC,GAAG,WAAW;YACd,GAAG,mBAAmB;YACtB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAZY,qCAAqC;IADjD,OAAO,CAAiC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GAC/F,qCAAqC,CAYjD;;AAED;;GAEG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAAgB;IACnD,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,QAAQ,CAAC;YAClB,GAAG,WAAW;YACd,GAAG,mBAAmB;YACtB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAZY,eAAe;IAD3B,OAAO,CAAW,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACnD,eAAe,CAY3B;;AAED;;GAEG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,MAAM,CAAC,KAAK,CAAC,MAAM;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAJY,qBAAqB;IADjC,OAAO,CAAgB,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACxD,qBAAqB,CAIjC;;AAED;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;IACpD,MAAM,CAAU,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAU,cAAc,CAC5B,YAAoB,EACpB,WAA0C,EAC1C,sBAA2C,EAAE;QAE7C,OAAO,IAAI,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACnE,CAAC;CACF,CAAA;AAZY,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAY5B"}
+{"version":3,"file":"aws-client.factory.js","sourceRoot":"","sources":["../../src/factories/aws-client.factory.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAW7E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gBAAgB;IACpB;;OAEG;aACuB,gBAAW,GAAW,EAAE,CAAC;aAE3B,cAAS,GAE7B,EAAE,CAAC;IAEP;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAoB,EAAE,WAAmB;QAC3D,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,IAAI,CAAC,IAAI,iCAAiC,EAC1E,gBAAgB,CAAC,IAAI,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QAED,4FAA4F;QAC5F,0FAA0F;QAC1F,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CACxE,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;YACvF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,GAAG,IAAe;QACtC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,wBAAwB,CAAC,6CAA6C,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3G,CAAC;QAED,MAAM,IAAI,wBAAwB,CAChC,0DAA0D,EAC1D,gBAAgB,CAAC,IAAI,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK;QACV,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,OAAO,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAoB,EAAE,WAAmB;QAClE,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAEpD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,CAAuB,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE7G,uFAAuF;QACvF,IAAI,QAA4B,CAAC;QACjC,IAAI,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CAAyB,qBAAqB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnG,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;;AAGH;;GAEG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,gBAAgB;aACjB,gBAAW,GAAW,KAAK,AAAhB,CAAiB;IAE/D;;OAEG;IACH,MAAM,CAAU,cAAc,CAAC,WAAmB,EAAE,WAAiC,EAAE,QAAiB;QACtG,OAAO,IAAI,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;;AARU,gBAAgB;IAD5B,OAAO,CAAY,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACrD,gBAAgB,CAS5B;;AAED;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,gBAAgB;aACxB,gBAAW,GAAW,YAAY,AAAvB,CAAwB;IAEtE;;;OAGG;aACqB,gBAAW,GAAW,WAAW,AAAtB,CAAuB;IAE1D;;OAEG;IACH,MAAM,CAAU,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,MAAM,CAAU,cAAc,CAC5B,WAAmB,EACnB,WAAiC,EACjC,QAAiB;QAEjB,OAAO,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;;AAzBU,uBAAuB;IADnC,OAAO,CAAmB,gBAAgB,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;GACnE,uBAAuB,CA0BnC"}

package/dist/modules/account/aws-credentials-account/aws-credentials-account.module.d.ts

@@ -20,7 +20,7 @@ import { AwsCredentialsAccount } from './models/account/index.js';
  *     accessKeyId: 'EXAMPLE_KEY',
  *     secretAccessKey: 'EXAMPLE_SECRET'
  *   },
- *   endpoint: 'https://s3.amazonaws.com' // Optional
+ *   endpoints: { s3: 'https://s3.amazonaws.com' }, // Optional
  * });
  * ```
  *
@@ -28,8 +28,11 @@ import { AwsCredentialsAccount } from './models/account/index.js';
  *
  * @see {@link AwsCredentialsAccountModuleSchema} for the input schema.
  * @see {@link AModule} to learn more about modules.
- * @see {@link Account} to learn more about the `Account` model.
+ * @see [Account](/api/octo/class/Account) to learn more about the `Account` model.
  */
 export declare class AwsCredentialsAccountModule extends AModule<AwsCredentialsAccountModuleSchema, AwsCredentialsAccount> {
+    /**
+     * Creates the account from the supplied credentials, and anchors it for other modules to find.
+     */
     onInit(inputs: AwsCredentialsAccountModuleSchema): Promise<AwsCredentialsAccount>;
 }

package/dist/modules/account/aws-credentials-account/aws-credentials-account.module.js

@@ -4,10 +4,8 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
-import { AModule, Container, Module, ModuleError } from '@quadnix/octo';
+import { AModule, Container, Module } from '@quadnix/octo';
 import { AwsAccountAnchor } from '../../../anchors/aws-account/aws-account.anchor.js';
-import { STSClientFactory } from '../../../factories/aws-client.factory.js';
 import { AwsCredentialsAccountModuleSchema } from './index.schema.js';
 import { AwsCredentialsAccount } from './models/account/index.js';
 /**
@@ -29,7 +27,7 @@ import { AwsCredentialsAccount } from './models/account/index.js';
  *     accessKeyId: 'EXAMPLE_KEY',
  *     secretAccessKey: 'EXAMPLE_SECRET'
  *   },
- *   endpoint: 'https://s3.amazonaws.com' // Optional
+ *   endpoints: { s3: 'https://s3.amazonaws.com' }, // Optional
  * });
  * ```
  *
@@ -37,9 +35,12 @@ import { AwsCredentialsAccount } from './models/account/index.js';
  *
  * @see {@link AwsCredentialsAccountModuleSchema} for the input schema.
  * @see {@link AModule} to learn more about modules.
- * @see {@link Account} to learn more about the `Account` model.
+ * @see [Account](/api/octo/class/Account) to learn more about the `Account` model.
  */
 let AwsCredentialsAccountModule = class AwsCredentialsAccountModule extends AModule {
+    /**
+     * Creates the account from the supplied credentials, and anchors it for other modules to find.
+     */
     async onInit(inputs) {
         const app = inputs.app;
         const container = Container.getInstance();
@@ -48,25 +49,11 @@ let AwsCredentialsAccountModule = class AwsCredentialsAccountModule extends AMod
         app.addAccount(account);
         // Add anchors.
         account.addAnchor(new AwsAccountAnchor('AwsAccountAnchor', { awsAccountId: inputs.accountId }, account));
-        // Register AWS credentials.
-        const credentials = account.getCredentials();
-        container.registerValue('AwsCredentialIdentityProvider', credentials, {
-            metadata: { awsAccountId: inputs.accountId, package: '@octo' },
-        });
-        // Register Endpoint.
-        if (inputs.endpoint) {
-            container.registerValue('EndpointInputConfig', { endpoint: inputs.endpoint }, {
-                metadata: { awsAccountId: inputs.accountId, package: '@octo' },
-            });
-        }
-        // Ensure credentials are valid, and the account ID matches.
-        const stsClient = await container.get(STSClient, {
-            args: [inputs.accountId],
-            metadata: { package: '@octo' },
-        });
-        const data = await stsClient.send(new GetCallerIdentityCommand({}));
-        if (data.Account !== inputs.accountId) {
-            throw new ModuleError(`Account ID "${inputs.accountId}" does not belong to given credentials!`, this.constructor.name);
+        // Register AWS credentials, and any endpoint overrides, against the account they belong to.
+        const metadata = { awsAccountId: inputs.accountId, package: '@octo' };
+        container.replaceValue('AwsCredentialIdentityProvider', account.getCredentials(), { metadata });
+        if (Object.keys(inputs.endpoints).length > 0) {
+            container.replaceValue('AwsServiceEndpoints', inputs.endpoints, { metadata });
         }
         return account;
     }

package/dist/modules/account/aws-credentials-account/aws-credentials-account.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws-credentials-account.module.js","sourceRoot":"","sources":["../../../../src/modules/account/aws-credentials-account/aws-credentials-account.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,OAAiE;IAChH,KAAK,CAAC,MAAM,CAAC,MAAyC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAE1C,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExB,eAAe;QACf,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAEzG,4BAA4B;QAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,SAAS,CAAC,aAAa,CAAC,+BAA+B,EAAE,WAAW,EAAE;YACpE,QAAQ,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/D,CAAC,CAAC;QAEH,qBAAqB;QACrB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,SAAS,CAAC,aAAa,CACrB,qBAAqB,EACrB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAC7B;gBACE,QAAQ,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/D,CACF,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CAAqC,SAAS,EAAE;YACnF,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;YACxB,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CACnB,eAAe,MAAM,CAAC,SAAS,yCAAyC,EACxE,IAAI,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AA5CY,2BAA2B;IADvC,MAAM,CAA8B,OAAO,EAAE,iCAAiC,CAAC;GACnE,2BAA2B,CA4CvC"}
+{"version":3,"file":"aws-credentials-account.module.js","sourceRoot":"","sources":["../../../../src/modules/account/aws-credentials-account/aws-credentials-account.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACtF,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,OAAiE;IAChH;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,MAAyC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAE1C,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExB,eAAe;QACf,OAAO,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAEzG,4FAA4F;QAC5F,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACtE,SAAS,CAAC,YAAY,CAAC,+BAA+B,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAxBY,2BAA2B;IADvC,MAAM,CAA8B,OAAO,EAAE,iCAAiC,CAAC;GACnE,2BAA2B,CAwBvC"}

package/dist/modules/account/aws-credentials-account/index.schema.d.ts

@@ -31,9 +31,8 @@ export declare class AwsCredentialsAccountModuleSchema {
         secretAccessKey: string;
     };
     /**
-     * Optional custom endpoint URL for AWS services.
-     * This is useful for testing with LocalStack or other AWS-compatible services.
-     * When not provided, the default AWS endpoints will be used.
+     * A map of AWS service name to endpoint URL.
+     * Keys are Terraform AWS provider service names (e.g. `s3`, `ec2`, `sts`).
      */
-    endpoint?: string | null | undefined;
+    endpoints?: Record<string, string> | undefined;
 }

package/dist/modules/account/aws-credentials-account/index.schema.js

@@ -38,11 +38,10 @@ export class AwsCredentialsAccountModuleSchema {
          */
         this.credentials = Schema();
         /**
-         * Optional custom endpoint URL for AWS services.
-         * This is useful for testing with LocalStack or other AWS-compatible services.
-         * When not provided, the default AWS endpoints will be used.
+         * A map of AWS service name to endpoint URL.
+         * Keys are Terraform AWS provider service names (e.g. `s3`, `ec2`, `sts`).
          */
-        this.endpoint = Schema(null);
+        this.endpoints = Schema({});
     }
 }
 __decorate([
@@ -65,9 +64,9 @@ __decorate([
 ], AwsCredentialsAccountModuleSchema.prototype, "credentials", void 0);
 __decorate([
     Validate({
-        destruct: (value) => (value ? [value] : []),
+        destruct: (value) => Object.values(value),
         options: { minLength: 1 },
     }),
     __metadata("design:type", Object)
-], AwsCredentialsAccountModuleSchema.prototype, "endpoint", void 0);
+], AwsCredentialsAccountModuleSchema.prototype, "endpoints", void 0);
 //# sourceMappingURL=index.schema.js.map

package/dist/modules/account/aws-credentials-account/index.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../../src/modules/account/aws-credentials-account/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAY,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iCAAiC;IAA9C;QACE;;;WAGG;QAEH,cAAS,GAAG,MAAM,EAAU,CAAC;QAE7B;;;WAGG;QAEH,QAAG,GAAG,MAAM,EAAO,CAAC;QAEpB;;;;WAIG;QAQH,gBAAW,GAAG,MAAM,EAAoD,CAAC;QAEzE;;;;WAIG;QAKH,aAAQ,GAAI,MAAM,CAAgB,IAAI,CAAC,CAAC;IAC1C,CAAC;CAAA;AAjCC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;oEACX;AAO7B;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;;8DACvC;AAcpB;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAuD,EAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,eAAe;SACtB;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;sEACuE;AAWzE;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAoD,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;mEACsC"}
+{"version":3,"file":"index.schema.js","sourceRoot":"","sources":["../../../../src/modules/account/aws-credentials-account/index.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAY,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iCAAiC;IAA9C;QACE;;;WAGG;QAEH,cAAS,GAAG,MAAM,EAAU,CAAC;QAE7B;;;WAGG;QAEH,QAAG,GAAG,MAAM,EAAO,CAAC;QAEpB;;;;WAIG;QAQH,gBAAW,GAAG,MAAM,EAAoD,CAAC;QAEzE;;;WAGG;QAKH,cAAS,GAAI,MAAM,CAAyB,EAAE,CAAC,CAAC;IAClD,CAAC;CAAA;AAhCC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;;oEACX;AAO7B;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;;8DACvC;AAcpB;IAPC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAuD,EAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,eAAe;SACtB;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;sEACuE;AAUzE;IAJC,QAAQ,CAAC;QACR,QAAQ,EAAE,CAAC,KAAqD,EAAY,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,CAAC;QACpG,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KAC1B,CAAC;;oEAC8C"}