@remotion/lambda 2.5.0-alpha.be0e6380 → 3.0.0-alpha.192

package/dist/api/get-sites.js

@@ -3,31 +3,40 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getSites = void 0;
 const io_1 = require("../functions/helpers/io");
 const constants_1 = require("../shared/constants");
+const get_account_id_1 = require("../shared/get-account-id");
+const make_s3_url_1 = require("../shared/make-s3-url");
 const get_buckets_1 = require("./get-buckets");
+// TODO: Return the `serveUrl` as well
 // TODO: Add JSDoc comments
-const getSites = async ({ region }) => {
+const getSites = async ({ region, }) => {
     var _a;
-    const { remotionBuckets } = await get_buckets_1.getRemotionS3Buckets(region);
+    const { remotionBuckets } = await (0, get_buckets_1.getRemotionS3Buckets)(region);
+    const accountId = await (0, get_account_id_1.getAccountId)({ region });
     const sites = {};
     for (const bucket of remotionBuckets) {
-        const ls = await io_1.lambdaLs({
-            bucketName: bucket.Name,
-            prefix: constants_1.getSitesKey(''),
+        const ls = await (0, io_1.lambdaLs)({
+            bucketName: bucket.name,
+            prefix: (0, constants_1.getSitesKey)(''),
             region,
-            expectedBucketOwner: null,
+            expectedBucketOwner: accountId,
         });
         for (const file of ls) {
-            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/(.*)\/(.*)$/);
+            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/([0-9a-zA-Z]+)\/(.*)$/);
             if (!siteKeyMatch) {
-                throw new Error(`An file was found in the bucket "${bucket.Name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
+                throw new Error(`A file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
             }
             const [, siteId] = siteKeyMatch;
             if (!sites[siteId]) {
                 sites[siteId] = {
-                    size: 0,
-                    bucketName: bucket.Name,
+                    sizeInBytes: 0,
+                    bucketName: bucket.name,
                     lastModified: null,
                     id: siteId,
+                    serveUrl: (0, make_s3_url_1.makeS3ServeUrl)({
+                        bucketName: bucket.name,
+                        region,
+                        subFolder: (0, constants_1.getSitesKey)(siteId),
+                    }),
                 };
             }
             if (file.LastModified) {
@@ -38,7 +47,7 @@ const getSites = async ({ region }) => {
                 }
             }
             if (file.Size) {
-                sites[siteId].size += file.Size;
+                sites[siteId].sizeInBytes += file.Size;
             }
         }
     }

package/dist/api/get-sites.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,+CAAmD;AASnD,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAAC,MAAM,EAAsB,EAAE,EAAE;;IAC/D,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,kCAAoB,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,aAAQ,CAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAc;YACjC,MAAM,EAAE,uBAAW,CAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,IAAI;SACzB,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC3D,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,oCAAoC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACtI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,IAAI,EAAE,CAAC;oBACP,UAAU,EAAE,MAAM,CAAC,IAAc;oBACjC,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;iBACV,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;aAChC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AAnDW,QAAA,QAAQ,YAmDnB"}
+{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,uDAAqD;AACrD,+CAAuE;AAevE,sCAAsC;AACtC,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GAGN,EAAgC,EAAE;;IAClC,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACrI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;oBACV,QAAQ,EAAE,IAAA,4BAAc,EAAC;wBACxB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,MAAM;wBACN,SAAS,EAAE,IAAA,uBAAW,EAAC,MAAM,CAAC;qBAC9B,CAAC;iBACF,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AA7DW,QAAA,QAAQ,YA6DnB"}

package/dist/api/iam-validation/role-permissions.d.ts

@@ -1,6 +1,6 @@
-import { iam, lambda, s3 } from 'aws-policies';
+import { iam, lambda, logs, s3 } from 'aws-policies';
 export declare const rolePermissions: {
-    actions: (s3 | iam | lambda)[];
+    actions: (s3 | iam | lambda | logs)[];
     resource: string[];
 }[];
 //# sourceMappingURL=role-permissions.d.ts.map

package/dist/api/iam-validation/role-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAG7C,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EAuBA,CAAC"}
+{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAOnD,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EA4BA,CAAC"}

package/dist/api/iam-validation/role-permissions.js

@@ -8,12 +8,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.s3.ListAllMyBuckets],
         resource: ['*'],
     },
-    {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
-    },
     {
         actions: [
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
+            aws_policies_1.s3.PutBucketAcl,
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
             aws_policies_1.s3.PutObjectAcl,
@@ -26,5 +25,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.lambda.InvokeFunction],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
+    {
+        actions: [aws_policies_1.logs.CreateLogStream, aws_policies_1.logs.PutLogEvents],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
+    },
 ];
 //# sourceMappingURL=role-permissions.js.map

package/dist/api/iam-validation/role-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAC7C,sDAAgF;AAEnE,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,YAAY,EAAE,iBAAE,CAAC,UAAU,EAAE,iBAAE,CAAC,YAAY,CAAC;QAC1D,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC5B;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;CACD,CAAC"}
+{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAEnB,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,OAAO,EAAE,CAAC,mBAAI,CAAC,eAAe,EAAE,mBAAI,CAAC,YAAY,CAAC;QAClD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;CACD,CAAC"}

package/dist/api/iam-validation/simulate-rule.d.ts

@@ -9,5 +9,6 @@ export declare const simulateRule: (options: {
     actionNames: string[];
     arn: string;
     resource: string[];
+    retries: number;
 }) => Promise<SimulationResult[]>;
 //# sourceMappingURL=simulate-rule.d.ts.map

package/dist/api/iam-validation/simulate-rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,KAAG,QAAQ,gBAAgB,EAAE,CAoC7B,CAAC"}
+{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB,KAAG,QAAQ,gBAAgB,EAAE,CAiD7B,CAAC"}

package/dist/api/iam-validation/simulate-rule.js

@@ -6,38 +6,51 @@ const aws_policies_1 = require("aws-policies");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulateRule = async (options) => {
     var _a;
-    if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
-        try {
-            await aws_clients_1.getIamClient(options.region).send(new client_iam_1.GetUserCommand({}));
-            const result = [
-                {
-                    decision: 'allowed',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+    try {
+        if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
+            try {
+                await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
+                const result = [
+                    {
+                        decision: 'allowed',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
+            catch (err) {
+                const result = [
+                    {
+                        decision: 'explicitDeny',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
         }
-        catch (err) {
-            const result = [
-                {
-                    decision: 'explicitDeny',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+        const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
+            ActionNames: options.actionNames,
+            PolicySourceArn: options.arn,
+            ResourceArns: options.resource,
+        }));
+        return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
+            return {
+                decision: pol.EvalDecision,
+                name: pol.EvalActionName,
+            };
+        });
+    }
+    catch (err) {
+        // Sometimes the AWS Rate limit hits. In that case we retry up to two times
+        // after waiting for 2 seconds.
+        if (options.retries <= 0) {
+            throw err;
         }
+        await new Promise((resolve) => {
+            setTimeout(() => resolve, 2000);
+        });
+        return (0, exports.simulateRule)({ ...options, retries: options.retries - 1 });
     }
-    const res = await aws_clients_1.getIamClient(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
-        ActionNames: options.actionNames,
-        PolicySourceArn: options.arn,
-        ResourceArns: options.resource,
-    }));
-    return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
-        return {
-            decision: pol.EvalDecision,
-            name: pol.EvalActionName,
-        };
-    });
 };
 exports.simulateRule = simulateRule;
 //# sourceMappingURL=simulate-rule.js.map

package/dist/api/iam-validation/simulate-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAKlC,EAA+B,EAAE;;IACjC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;QAC9C,IAAI;YACH,MAAM,0BAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;QAAC,OAAO,GAAG,EAAE;YACb,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,cAAc;oBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;KACD;IAED,MAAM,GAAG,GAAG,MAAM,0BAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;KAC9B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;QAClE,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;YAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;SAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB"}
+{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAMlC,EAA+B,EAAE;;IACjC,IAAI;QACH,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;YAC9C,IAAI;gBACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;YAAC,OAAO,GAAG,EAAE;gBACb,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,cAAc;wBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;SACD;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,GAAG;YAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;SAC9B,CAAC,CACF,CAAC;QAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;YAClE,OAAO;gBACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;gBAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;aAClC,CAAC;QACH,CAAC,CAAC,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACb,2EAA2E;QAC3E,+BAA+B;QAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE;YACzB,MAAM,GAAG,CAAC;SACV;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,oBAAY,EAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,EAAC,CAAC,CAAC;KAChE;AACF,CAAC,CAAC;AAvDW,QAAA,YAAY,gBAuDvB"}

package/dist/api/iam-validation/simulate.d.ts

@@ -1,6 +1,6 @@
 import { AwsRegion } from '../../pricing/aws-regions';
 import { SimulationResult } from './simulate-rule';
-export declare const logPermissionOutput: (output: SimulationResult) => void;
+export declare const logPermissionOutput: (output: SimulationResult) => string;
 export declare const simulatePermissions: (options: {
     region: AwsRegion;
     onSimulation?: ((result: SimulationResult) => void) | undefined;

package/dist/api/iam-validation/simulate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAW7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,SAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAwB3B,CAAC"}
+{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAY7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,WAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAyB3B,CAAC"}

package/dist/api/iam-validation/simulate.js

@@ -2,10 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulatePermissions = exports.logPermissionOutput = void 0;
 const client_iam_1 = require("@aws-sdk/client-iam");
-const log_1 = require("../../cli/log");
 const aws_clients_1 = require("../../shared/aws-clients");
-const required_permissions_1 = require("./required-permissions");
 const simulate_rule_1 = require("./simulate-rule");
+const user_permissions_1 = require("./user-permissions");
 const getEmojiForStatus = (decision) => {
     switch (decision) {
         case 'allowed':
@@ -15,22 +14,23 @@ const getEmojiForStatus = (decision) => {
     }
 };
 const logPermissionOutput = (output) => {
-    log_1.Log.info([getEmojiForStatus(output.decision), output.name].join(' '));
+    return [getEmojiForStatus(output.decision), output.name].join(' ');
 };
 exports.logPermissionOutput = logPermissionOutput;
 const simulatePermissions = async (options) => {
     var _a;
-    const user = await aws_clients_1.getIamClient(options.region).send(new client_iam_1.GetUserCommand({}));
+    const user = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
     if (!user || !user.User) {
         throw new Error('No valid AWS user detected');
     }
     const results = [];
-    for (const per of required_permissions_1.requiredPermissions) {
-        const result = await simulate_rule_1.simulateRule({
+    for (const per of user_permissions_1.requiredPermissions) {
+        const result = await (0, simulate_rule_1.simulateRule)({
             actionNames: per.actions,
             arn: user.User.Arn,
             region: options.region,
             resource: per.resource,
+            retries: 2,
         });
         for (const res of result) {
             results.push(res);

package/dist/api/iam-validation/simulate.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AACnD,uCAAkC;AAElC,0DAAsD;AACtD,iEAA2D;AAC3D,mDAA6E;AAE7E,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,SAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,0BAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,0CAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,4BAAY,CAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA5BW,QAAA,mBAAmB,uBA4B9B"}
+{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AAEnD,0DAAsD;AACtD,mDAA6E;AAC7E,yDAAuD;AAEvD,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,sCAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,CAAC;SACV,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA7BW,QAAA,mBAAmB,uBA6B9B"}

package/dist/api/iam-validation/suggested-policy.d.ts

@@ -1,11 +1,12 @@
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getuserpolicy
  */
 export declare const getUserPolicy: () => string;
+export declare const ROLE_NAME = "remotion-lambda-role";
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrolepolicy
  */
 export declare const getRolePolicy: () => string;
 //# sourceMappingURL=suggested-policy.d.ts.map

package/dist/api/iam-validation/suggested-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}
+{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E,eAAO,MAAM,SAAS,yBAAyB,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}

package/dist/api/iam-validation/suggested-policy.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRolePolicy = exports.getUserPolicy = void 0;
-const required_permissions_1 = require("./required-permissions");
+exports.getRolePolicy = exports.ROLE_NAME = exports.getUserPolicy = void 0;
 const role_permissions_1 = require("./role-permissions");
+const user_permissions_1 = require("./user-permissions");
 const suggestedPolicy = {
     Version: '2012-10-17',
     Statement: [
-        ...required_permissions_1.requiredPermissions.map((per, i) => {
+        ...user_permissions_1.requiredPermissions.map((per) => {
             return {
-                Sid: String(i),
+                Sid: per.id,
                 Effect: 'Allow',
                 Action: per.actions,
                 Resource: per.resource,
@@ -31,13 +31,14 @@ const suggestedRolePolicy = {
 };
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getuserpolicy
  */
 const getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
 exports.getUserPolicy = getUserPolicy;
+exports.ROLE_NAME = 'remotion-lambda-role';
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrolepolicy
  */
 const getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
 exports.getRolePolicy = getRolePolicy;

package/dist/api/iam-validation/suggested-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,iEAA2D;AAC3D,yDAAmD;AAEnD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,0CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACrC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE5E;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}
+{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,yDAAmD;AACnD,yDAAuD;AAEvD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,sCAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,OAAO;gBACN,GAAG,EAAE,GAAG,CAAC,EAAE;gBACX,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE/D,QAAA,SAAS,GAAG,sBAAsB,CAAC;AAEhD;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}

package/dist/api/iam-validation/user-permissions.d.ts

@@ -0,0 +1,7 @@
+import { iam, lambda, logs, s3 } from 'aws-policies';
+export declare const requiredPermissions: {
+    actions: (s3 | iam | lambda | logs)[];
+    resource: string[];
+    id: string;
+}[];
+//# sourceMappingURL=user-permissions.d.ts.map

package/dist/api/iam-validation/user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAQnD,eAAO,MAAM,mBAAmB,EAAE;IACjC,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACX,EAmEA,CAAC"}

package/dist/api/iam-validation/{required-permissions.js → user-permissions.js}

@@ -3,56 +3,73 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.requiredPermissions = void 0;
 const aws_policies_1 = require("aws-policies");
 const constants_1 = require("../../shared/constants");
-// TODO: Update docs before release
+const hosted_layers_1 = require("../../shared/hosted-layers");
 exports.requiredPermissions = [
     {
+        id: 'Identity',
         actions: [aws_policies_1.iam.GetUser],
         // eslint-disable-next-line no-template-curly-in-string
         resource: ['arn:aws:iam::*:user/${aws:username}'],
     },
     {
+        id: 'PermissionValidation',
         actions: [aws_policies_1.iam.SimulatePrincipalPolicy],
         resource: ['*'],
     },
     {
-        // TODO: arn:aws:iam::976210361945:role/lambda-admin, can it be locked down more?
+        id: 'LambdaInvokation',
         actions: [aws_policies_1.iam.PassRole],
-        resource: ['*'],
+        resource: ['arn:aws:iam::*:role/remotion-lambda-role'],
     },
     {
+        id: 'Storage',
         actions: [
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
-            aws_policies_1.s3.DeleteBucket,
-            aws_policies_1.s3.PutBucketWebsite,
-            aws_policies_1.s3.DeleteBucketWebsite,
             aws_policies_1.s3.PutObjectAcl,
             aws_policies_1.s3.PutObject,
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
             aws_policies_1.s3.GetBucketLocation,
+            aws_policies_1.s3.PutBucketAcl,
+            aws_policies_1.s3.DeleteBucket,
+            aws_policies_1.s3.PutBucketWebsite,
+            aws_policies_1.s3.DeleteBucketWebsite,
         ],
         resource: [`arn:aws:s3:::${constants_1.REMOTION_BUCKET_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
+        id: 'BucketListing',
+        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        resource: ['*'],
     },
     {
-        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        id: 'FunctionListing',
+        actions: [aws_policies_1.lambda.ListFunctions, aws_policies_1.lambda.GetFunction],
         resource: ['*'],
     },
     {
+        id: 'FunctionManagement',
         actions: [
-            aws_policies_1.lambda.GetFunction,
             aws_policies_1.lambda.InvokeAsync,
             aws_policies_1.lambda.InvokeFunction,
             aws_policies_1.lambda.CreateFunction,
             aws_policies_1.lambda.DeleteFunction,
+            aws_policies_1.lambda.PutFunctionEventInvokeConfig,
         ],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.lambda.ListFunctions],
-        resource: ['*'],
+        id: 'logs.PutRetentionPolicy',
+        actions: [aws_policies_1.logs.CreateLogGroup, aws_policies_1.logs.PutRetentionPolicy],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
+    },
+    {
+        id: 'FetchBinaries',
+        actions: [aws_policies_1.lambda.GetLayerVersion],
+        resource: [hosted_layers_1.REMOTION_HOSTED_LAYER_ARN],
     },
 ];
-//# sourceMappingURL=required-permissions.js.map
+//# sourceMappingURL=user-permissions.js.map

package/dist/api/iam-validation/user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAChC,8DAAqE;AAExD,QAAA,mBAAmB,GAI1B;IACL;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,CAAC,kBAAG,CAAC,OAAO,CAAC;QACtB,uDAAuD;QACvD,QAAQ,EAAE,CAAC,qCAAqC,CAAC;KACjD;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,kBAAG,CAAC,uBAAuB,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,kBAAG,CAAC,QAAQ,CAAC;QACvB,QAAQ,EAAE,CAAC,0CAA0C,CAAC;KACtD;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,iBAAiB;YACpB,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,gBAAgB;YACnB,iBAAE,CAAC,mBAAmB;SACtB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,CAAC,qBAAM,CAAC,aAAa,EAAE,qBAAM,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE;YACR,qBAAM,CAAC,WAAW;YAClB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,4BAA4B;SACnC;QACD,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,mBAAI,CAAC,cAAc,EAAE,mBAAI,CAAC,kBAAkB,CAAC;QACvD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,qBAAM,CAAC,eAAe,CAAC;QACjC,QAAQ,EAAE,CAAC,yCAAyB,CAAC;KACrC;CACD,CAAC"}

package/dist/api/mock-functions.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '..';
+import { AwsRegion } from '../pricing/aws-regions';
 import { LambdaVersions } from '../shared/constants';
 import { FunctionInfo } from './get-function-info';
 export declare let mockFunctionsStore: (FunctionInfo & {

package/dist/api/mock-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}
+{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}

package/dist/api/render-still-on-lambda.d.ts

@@ -1,8 +1,8 @@
-import { StillImageFormat } from 'remotion';
+import { LogLevel, StillImageFormat } from 'remotion';
 import { AwsRegion } from '../pricing/aws-regions';
 /**
  * @description Renders a still frame on Lambda
- * @link https://remotion.dev/docs/lambda/renderstillonlambda
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/renderstillonlambda
  * @param params.functionName The name of the Lambda function that should be used
  * @param params.serveUrl The URL of the deployed project
  * @param params.composition The ID of the composition which should be rendered.
@@ -16,7 +16,7 @@ import { AwsRegion } from '../pricing/aws-regions';
  * @param params.privacy Whether the item in the S3 bucket should be public. Possible values: `"private"` and `"public"`
  * @returns `Promise<{estimatedPrice: CostsInfo; url: string; size: number}>`
  */
-export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, }: {
+export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, logLevel, }: {
     region: AwsRegion;
     functionName: string;
     serveUrl: string;
@@ -28,10 +28,12 @@ export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps,
     envVariables?: Record<string, string> | undefined;
     quality?: number | undefined;
     frame?: number | undefined;
+    logLevel?: "verbose" | "info" | "warn" | "error" | undefined;
 }) => Promise<{
     estimatedPrice: import("../shared/constants").CostsInfo;
     url: string;
     size: number;
     bucketName: string;
+    renderId: string;
 }>;
 //# sourceMappingURL=render-still-on-lambda.d.ts.map

package/dist/api/render-still-on-lambda.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-still-on-lambda.d.ts","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAGjD;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,mBAAmB;YAavB,SAAS;kBACH,MAAM;cACV,MAAM;iBACH,MAAM;gBACP,OAAO;iBACN,gBAAgB;aACpB,SAAS,GAAG,QAAQ;;;;;;;;;;EA4B7B,CAAC"}
+{"version":3,"file":"render-still-on-lambda.d.ts","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAE,gBAAgB,EAAC,MAAM,UAAU,CAAC;AACpD,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAIjD;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,mBAAmB;YAcvB,SAAS;kBACH,MAAM;cACV,MAAM;iBACH,MAAM;gBACP,OAAO;iBACN,gBAAgB;aACpB,SAAS,GAAG,QAAQ;;;;;;;;;;;;EAkC7B,CAAC"}

package/dist/api/render-still-on-lambda.js

@@ -3,9 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderStillOnLambda = void 0;
 const call_lambda_1 = require("../shared/call-lambda");
 const constants_1 = require("../shared/constants");
+const convert_to_serve_url_1 = require("../shared/convert-to-serve-url");
 /**
  * @description Renders a still frame on Lambda
- * @link https://remotion.dev/docs/lambda/renderstillonlambda
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/renderstillonlambda
  * @param params.functionName The name of the Lambda function that should be used
  * @param params.serveUrl The URL of the deployed project
  * @param params.composition The ID of the composition which should be rendered.
@@ -19,20 +20,23 @@ const constants_1 = require("../shared/constants");
  * @param params.privacy Whether the item in the S3 bucket should be public. Possible values: `"private"` and `"public"`
  * @returns `Promise<{estimatedPrice: CostsInfo; url: string; size: number}>`
  */
-const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, }) => {
-    const res = await call_lambda_1.callLambda({
+const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, logLevel, }) => {
+    const realServeUrl = await (0, convert_to_serve_url_1.convertToServeUrl)(serveUrl, region);
+    const res = await (0, call_lambda_1.callLambda)({
         functionName,
         type: constants_1.LambdaRoutines.still,
         payload: {
             composition,
-            serveUrl,
+            serveUrl: realServeUrl,
             inputProps,
             imageFormat,
             envVariables,
             quality,
-            maxRetries: maxRetries !== null && maxRetries !== void 0 ? maxRetries : 3,
+            maxRetries: maxRetries !== null && maxRetries !== void 0 ? maxRetries : constants_1.DEFAULT_MAX_RETRIES,
             frame: frame !== null && frame !== void 0 ? frame : 0,
             privacy,
+            attempt: 1,
+            logLevel,
         },
         region,
     });
@@ -41,6 +45,7 @@ const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFo
         url: res.output,
         size: res.size,
         bucketName: res.bucketName,
+        renderId: res.renderId,
     };
 };
 exports.renderStillOnLambda = renderStillOnLambda;

package/dist/api/render-still-on-lambda.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-still-on-lambda.js","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":";;;AAEA,uDAAiD;AACjD,mDAAmD;AACnD;;;;;;;;;;;;;;;GAeG;AAEI,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACzC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,OAAO,EACP,KAAK,GAaL,EAAE,EAAE;IACJ,MAAM,GAAG,GAAG,MAAM,wBAAU,CAAC;QAC5B,YAAY;QACZ,IAAI,EAAE,0BAAc,CAAC,KAAK;QAC1B,OAAO,EAAE;YACR,WAAW;YACX,QAAQ;YACR,UAAU;YACV,WAAW;YACX,YAAY;YACZ,OAAO;YACP,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,CAAC;YAC3B,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,CAAC;YACjB,OAAO;SACP;QACD,MAAM;KACN,CAAC,CAAC;IACH,OAAO;QACN,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,EAAE,GAAG,CAAC,MAAM;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACH,CAAC,CAAC;AA/CW,QAAA,mBAAmB,uBA+C9B"}
+{"version":3,"file":"render-still-on-lambda.js","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":";;;AAEA,uDAAiD;AACjD,mDAAwE;AACxE,yEAAiE;AACjE;;;;;;;;;;;;;;;GAeG;AAEI,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACzC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,OAAO,EACP,KAAK,EACL,QAAQ,GAcR,EAAE,EAAE;IACJ,MAAM,YAAY,GAAG,MAAM,IAAA,wCAAiB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,IAAA,wBAAU,EAAC;QAC5B,YAAY;QACZ,IAAI,EAAE,0BAAc,CAAC,KAAK;QAC1B,OAAO,EAAE;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,UAAU;YACV,WAAW;YACX,YAAY;YACZ,OAAO;YACP,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,+BAAmB;YAC7C,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,CAAC;YACjB,OAAO;YACP,OAAO,EAAE,CAAC;YACV,QAAQ;SACR;QACD,MAAM;KACN,CAAC,CAAC;IACH,OAAO;QACN,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,EAAE,GAAG,CAAC,MAAM;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACtB,CAAC;AACH,CAAC,CAAC;AAtDW,QAAA,mBAAmB,uBAsD9B"}

package/dist/api/render-video-on-lambda.d.ts

@@ -1,8 +1,9 @@
-import { ImageFormat, PixelFormat, ProResProfile } from 'remotion';
+import { FrameRange, ImageFormat, LogLevel, PixelFormat, ProResProfile } from 'remotion';
 import { AwsRegion } from '../pricing/aws-regions';
+import { Privacy } from '../shared/constants';
 /**
  * @description Triggers a render on a lambda given a composition and a lambda function.
- * @link https://remotion.dev/docs/lambda/rendervideoonlambda
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/rendervideoonlambda
  * @param params.functionName The name of the Lambda function that should be used
  * @param params.serveUrl The URL of the deployed project
  * @param params.composition The ID of the composition which should be rendered.
@@ -15,9 +16,11 @@ import { AwsRegion } from '../pricing/aws-regions';
  * @param params.quality JPEG quality if JPEG was selected as the image format.
  * @param params.region The AWS region in which the video should be rendered.
  * @param params.maxRetries How often rendering a chunk may fail before the video render gets aborted.
+ * @param params.enableChunkOptimization Whether Remotion should restructure and optimize chunks for subsequent renders. Default true.
+ * @param params.logLevel Level of logging that Lambda function should perform. Default "info".
  * @returns `Promise<{renderId: string; bucketName: string}>`
  */
-export declare const renderVideoOnLambda: ({ functionName, serveUrl, inputProps, codec, imageFormat, crf, envVariables, pixelFormat, proResProfile, quality, region, maxRetries, composition, framesPerLambda, }: {
+export declare const renderVideoOnLambda: ({ functionName, serveUrl, inputProps, codec, imageFormat, crf, envVariables, pixelFormat, proResProfile, quality, region, maxRetries, composition, framesPerLambda, privacy, enableChunkOptimization, logLevel, frameRange, }: {
     region: AwsRegion;
     functionName: string;
     serveUrl: string;
@@ -29,9 +32,13 @@ export declare const renderVideoOnLambda: ({ functionName, serveUrl, inputProps,
     envVariables?: Record<string, string> | undefined;
     pixelFormat?: "yuv420p" | "yuva420p" | "yuv422p" | "yuv444p" | "yuv420p10le" | "yuv422p10le" | "yuv444p10le" | "yuva444p10le" | undefined;
     proResProfile?: "4444-xq" | "4444" | "hq" | "standard" | "light" | "proxy" | undefined;
+    privacy: Privacy;
     quality?: number | undefined;
     maxRetries: number;
     framesPerLambda?: number | undefined;
+    enableChunkOptimization?: boolean | undefined;
+    logLevel?: "verbose" | "info" | "warn" | "error" | undefined;
+    frameRange?: FrameRange | undefined;
 }) => Promise<{
     renderId: string;
     bucketName: string;