@remotion/lambda 3.0.0-lambda.18 → 3.0.0-lambda.196

package/dist/api/get-functions.d.ts

@@ -4,7 +4,7 @@ import { FunctionInfo } from './get-function-info';
  *
  *
  * @description Lists Remotion Lambda render functions deployed to AWS Lambda.
- * @link https://remotion.dev/docs/lambda/getfunctions
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getfunctions
  * @param options.region The region of which the functions should be listed.
  * @param options.compatibleOnly Whether only functions compatible with the installed version of Remotion Lambda should be returned.
  * @returns An array with the objects containing information about the deployed functions.

package/dist/api/get-functions.js

@@ -9,7 +9,7 @@ const get_function_version_1 = require("../shared/get-function-version");
  *
  *
  * @description Lists Remotion Lambda render functions deployed to AWS Lambda.
- * @link https://remotion.dev/docs/lambda/getfunctions
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getfunctions
  * @param options.region The region of which the functions should be listed.
  * @param options.compatibleOnly Whether only functions compatible with the installed version of Remotion Lambda should be returned.
  * @returns An array with the objects containing information about the deployed functions.

package/dist/api/get-render-progress.d.ts

@@ -1,7 +1,7 @@
 import { AwsRegion } from '../pricing/aws-regions';
 /**
  * @description Gets the current status of a render originally triggered via renderVideoOnLambda().
- * @link https://remotion.dev/docs/lambda/getrenderprogress
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrenderprogress
  * @param {string} params.functionName The name of the function used to trigger the render.
  * @param {string} params.bucketName The name of the bucket that was used in the render.
  * @param {string} params.renderId The ID of the render that was returned by `renderVideoOnLambda()`.

package/dist/api/get-render-progress.js

@@ -5,7 +5,7 @@ const call_lambda_1 = require("../shared/call-lambda");
 const constants_1 = require("../shared/constants");
 /**
  * @description Gets the current status of a render originally triggered via renderVideoOnLambda().
- * @link https://remotion.dev/docs/lambda/getrenderprogress
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrenderprogress
  * @param {string} params.functionName The name of the function used to trigger the render.
  * @param {string} params.bucketName The name of the bucket that was used in the render.
  * @param {string} params.renderId The ID of the render that was returned by `renderVideoOnLambda()`.

package/dist/api/get-sites.d.ts

@@ -5,6 +5,7 @@ declare type Site = {
     lastModified: number | null;
     bucketName: string;
     id: string;
+    serveUrl: string;
 };
 declare type GetSitesReturnValue = {
     sites: Site[];

package/dist/api/get-sites.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.d.ts","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAGjD,OAAO,EAAC,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AAEvE,aAAK,IAAI,GAAG;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,aAAK,mBAAmB,GAAG;IAC1B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAIF,eAAO,MAAM,QAAQ;YAGZ,SAAS;MACd,QAAQ,mBAAmB,CAoD9B,CAAC"}
+{"version":3,"file":"get-sites.d.ts","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAIjD,OAAO,EAAC,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AAEvE,aAAK,IAAI,GAAG;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,aAAK,mBAAmB,GAAG;IAC1B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAIF,eAAO,MAAM,QAAQ;YAGZ,SAAS;MACd,QAAQ,mBAAmB,CAyD9B,CAAC"}

package/dist/api/get-sites.js

@@ -4,6 +4,7 @@ exports.getSites = void 0;
 const io_1 = require("../functions/helpers/io");
 const constants_1 = require("../shared/constants");
 const get_account_id_1 = require("../shared/get-account-id");
+const make_s3_url_1 = require("../shared/make-s3-url");
 const get_buckets_1 = require("./get-buckets");
 // TODO: Return the `serveUrl` as well
 // TODO: Add JSDoc comments
@@ -20,9 +21,9 @@ const getSites = async ({ region, }) => {
             expectedBucketOwner: accountId,
         });
         for (const file of ls) {
-            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/(.*)\/(.*)$/);
+            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/([0-9a-zA-Z]+)\/(.*)$/);
             if (!siteKeyMatch) {
-                throw new Error(`An file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
+                throw new Error(`A file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
             }
             const [, siteId] = siteKeyMatch;
             if (!sites[siteId]) {
@@ -31,6 +32,11 @@ const getSites = async ({ region, }) => {
                     bucketName: bucket.name,
                     lastModified: null,
                     id: siteId,
+                    serveUrl: (0, make_s3_url_1.makeS3ServeUrl)({
+                        bucketName: bucket.name,
+                        region,
+                        subFolder: (0, constants_1.getSitesKey)(siteId),
+                    }),
                 };
             }
             if (file.LastModified) {

package/dist/api/get-sites.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,+CAAuE;AAcvE,sCAAsC;AACtC,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GAGN,EAAgC,EAAE;;IAClC,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC3D,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,oCAAoC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACtI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;iBACV,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AAxDW,QAAA,QAAQ,YAwDnB"}
+{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,uDAAqD;AACrD,+CAAuE;AAevE,sCAAsC;AACtC,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GAGN,EAAgC,EAAE;;IAClC,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACrI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;oBACV,QAAQ,EAAE,IAAA,4BAAc,EAAC;wBACxB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,MAAM;wBACN,SAAS,EAAE,IAAA,uBAAW,EAAC,MAAM,CAAC;qBAC9B,CAAC;iBACF,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AA7DW,QAAA,QAAQ,YA6DnB"}

package/dist/api/iam-validation/role-permissions.d.ts

@@ -1,6 +1,6 @@
-import { iam, lambda, s3 } from 'aws-policies';
+import { iam, lambda, logs, s3 } from 'aws-policies';
 export declare const rolePermissions: {
-    actions: (s3 | iam | lambda)[];
+    actions: (s3 | iam | lambda | logs)[];
     resource: string[];
 }[];
 //# sourceMappingURL=role-permissions.d.ts.map

package/dist/api/iam-validation/role-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAG7C,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EAuBA,CAAC"}
+{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAOnD,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EA4BA,CAAC"}

package/dist/api/iam-validation/role-permissions.js

@@ -8,12 +8,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.s3.ListAllMyBuckets],
         resource: ['*'],
     },
-    {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
-    },
     {
         actions: [
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
+            aws_policies_1.s3.PutBucketAcl,
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
             aws_policies_1.s3.PutObjectAcl,
@@ -26,5 +25,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.lambda.InvokeFunction],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
+    {
+        actions: [aws_policies_1.logs.CreateLogStream, aws_policies_1.logs.PutLogEvents],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
+    },
 ];
 //# sourceMappingURL=role-permissions.js.map

package/dist/api/iam-validation/role-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAC7C,sDAAgF;AAEnE,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,YAAY,EAAE,iBAAE,CAAC,UAAU,EAAE,iBAAE,CAAC,YAAY,CAAC;QAC1D,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC5B;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;CACD,CAAC"}
+{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAEnB,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,OAAO,EAAE,CAAC,mBAAI,CAAC,eAAe,EAAE,mBAAI,CAAC,YAAY,CAAC;QAClD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;CACD,CAAC"}

package/dist/api/iam-validation/simulate-rule.d.ts

@@ -9,5 +9,6 @@ export declare const simulateRule: (options: {
     actionNames: string[];
     arn: string;
     resource: string[];
+    retries: number;
 }) => Promise<SimulationResult[]>;
 //# sourceMappingURL=simulate-rule.d.ts.map

package/dist/api/iam-validation/simulate-rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,KAAG,QAAQ,gBAAgB,EAAE,CAoC7B,CAAC"}
+{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB,KAAG,QAAQ,gBAAgB,EAAE,CAiD7B,CAAC"}

package/dist/api/iam-validation/simulate-rule.js

@@ -6,38 +6,51 @@ const aws_policies_1 = require("aws-policies");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulateRule = async (options) => {
     var _a;
-    if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
-        try {
-            await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
-            const result = [
-                {
-                    decision: 'allowed',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+    try {
+        if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
+            try {
+                await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
+                const result = [
+                    {
+                        decision: 'allowed',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
+            catch (err) {
+                const result = [
+                    {
+                        decision: 'explicitDeny',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
         }
-        catch (err) {
-            const result = [
-                {
-                    decision: 'explicitDeny',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+        const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
+            ActionNames: options.actionNames,
+            PolicySourceArn: options.arn,
+            ResourceArns: options.resource,
+        }));
+        return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
+            return {
+                decision: pol.EvalDecision,
+                name: pol.EvalActionName,
+            };
+        });
+    }
+    catch (err) {
+        // Sometimes the AWS Rate limit hits. In that case we retry up to two times
+        // after waiting for 2 seconds.
+        if (options.retries <= 0) {
+            throw err;
         }
+        await new Promise((resolve) => {
+            setTimeout(() => resolve, 2000);
+        });
+        return (0, exports.simulateRule)({ ...options, retries: options.retries - 1 });
     }
-    const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
-        ActionNames: options.actionNames,
-        PolicySourceArn: options.arn,
-        ResourceArns: options.resource,
-    }));
-    return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
-        return {
-            decision: pol.EvalDecision,
-            name: pol.EvalActionName,
-        };
-    });
 };
 exports.simulateRule = simulateRule;
 //# sourceMappingURL=simulate-rule.js.map

package/dist/api/iam-validation/simulate-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAKlC,EAA+B,EAAE;;IACjC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;QAC9C,IAAI;YACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;QAAC,OAAO,GAAG,EAAE;YACb,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,cAAc;oBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;KACD;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;KAC9B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;QAClE,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;YAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;SAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB"}
+{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAMlC,EAA+B,EAAE;;IACjC,IAAI;QACH,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;YAC9C,IAAI;gBACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;YAAC,OAAO,GAAG,EAAE;gBACb,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,cAAc;wBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;SACD;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,GAAG;YAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;SAC9B,CAAC,CACF,CAAC;QAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;YAClE,OAAO;gBACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;gBAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;aAClC,CAAC;QACH,CAAC,CAAC,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACb,2EAA2E;QAC3E,+BAA+B;QAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE;YACzB,MAAM,GAAG,CAAC;SACV;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,oBAAY,EAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,EAAC,CAAC,CAAC;KAChE;AACF,CAAC,CAAC;AAvDW,QAAA,YAAY,gBAuDvB"}

package/dist/api/iam-validation/simulate.d.ts

@@ -1,6 +1,6 @@
 import { AwsRegion } from '../../pricing/aws-regions';
 import { SimulationResult } from './simulate-rule';
-export declare const logPermissionOutput: (output: SimulationResult) => void;
+export declare const logPermissionOutput: (output: SimulationResult) => string;
 export declare const simulatePermissions: (options: {
     region: AwsRegion;
     onSimulation?: ((result: SimulationResult) => void) | undefined;

package/dist/api/iam-validation/simulate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAW7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,SAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAwB3B,CAAC"}
+{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAY7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,WAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAyB3B,CAAC"}

package/dist/api/iam-validation/simulate.js

@@ -2,10 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulatePermissions = exports.logPermissionOutput = void 0;
 const client_iam_1 = require("@aws-sdk/client-iam");
-const log_1 = require("../../cli/log");
 const aws_clients_1 = require("../../shared/aws-clients");
-const required_permissions_1 = require("./required-permissions");
 const simulate_rule_1 = require("./simulate-rule");
+const user_permissions_1 = require("./user-permissions");
 const getEmojiForStatus = (decision) => {
     switch (decision) {
         case 'allowed':
@@ -15,7 +14,7 @@ const getEmojiForStatus = (decision) => {
     }
 };
 const logPermissionOutput = (output) => {
-    log_1.Log.info([getEmojiForStatus(output.decision), output.name].join(' '));
+    return [getEmojiForStatus(output.decision), output.name].join(' ');
 };
 exports.logPermissionOutput = logPermissionOutput;
 const simulatePermissions = async (options) => {
@@ -25,12 +24,13 @@ const simulatePermissions = async (options) => {
         throw new Error('No valid AWS user detected');
     }
     const results = [];
-    for (const per of required_permissions_1.requiredPermissions) {
+    for (const per of user_permissions_1.requiredPermissions) {
         const result = await (0, simulate_rule_1.simulateRule)({
             actionNames: per.actions,
             arn: user.User.Arn,
             region: options.region,
             resource: per.resource,
+            retries: 2,
         });
         for (const res of result) {
             results.push(res);

package/dist/api/iam-validation/simulate.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AACnD,uCAAkC;AAElC,0DAAsD;AACtD,iEAA2D;AAC3D,mDAA6E;AAE7E,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,SAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,0CAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA5BW,QAAA,mBAAmB,uBA4B9B"}
+{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AAEnD,0DAAsD;AACtD,mDAA6E;AAC7E,yDAAuD;AAEvD,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,sCAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,CAAC;SACV,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA7BW,QAAA,mBAAmB,uBA6B9B"}

package/dist/api/iam-validation/suggested-policy.d.ts

@@ -1,11 +1,12 @@
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getuserpolicy
  */
 export declare const getUserPolicy: () => string;
+export declare const ROLE_NAME = "remotion-lambda-role";
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrolepolicy
  */
 export declare const getRolePolicy: () => string;
 //# sourceMappingURL=suggested-policy.d.ts.map

package/dist/api/iam-validation/suggested-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}
+{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E,eAAO,MAAM,SAAS,yBAAyB,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}

package/dist/api/iam-validation/suggested-policy.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRolePolicy = exports.getUserPolicy = void 0;
-const required_permissions_1 = require("./required-permissions");
+exports.getRolePolicy = exports.ROLE_NAME = exports.getUserPolicy = void 0;
 const role_permissions_1 = require("./role-permissions");
+const user_permissions_1 = require("./user-permissions");
 const suggestedPolicy = {
     Version: '2012-10-17',
     Statement: [
-        ...required_permissions_1.requiredPermissions.map((per, i) => {
+        ...user_permissions_1.requiredPermissions.map((per) => {
             return {
-                Sid: String(i),
+                Sid: per.id,
                 Effect: 'Allow',
                 Action: per.actions,
                 Resource: per.resource,
@@ -31,13 +31,14 @@ const suggestedRolePolicy = {
 };
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getuserpolicy
  */
 const getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
 exports.getUserPolicy = getUserPolicy;
+exports.ROLE_NAME = 'remotion-lambda-role';
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/getrolepolicy
  */
 const getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
 exports.getRolePolicy = getRolePolicy;

package/dist/api/iam-validation/suggested-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,iEAA2D;AAC3D,yDAAmD;AAEnD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,0CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACrC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE5E;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}
+{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,yDAAmD;AACnD,yDAAuD;AAEvD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,sCAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,OAAO;gBACN,GAAG,EAAE,GAAG,CAAC,EAAE;gBACX,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE/D,QAAA,SAAS,GAAG,sBAAsB,CAAC;AAEhD;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}

package/dist/api/iam-validation/user-permissions.d.ts

@@ -0,0 +1,7 @@
+import { iam, lambda, logs, s3 } from 'aws-policies';
+export declare const requiredPermissions: {
+    actions: (s3 | iam | lambda | logs)[];
+    resource: string[];
+    id: string;
+}[];
+//# sourceMappingURL=user-permissions.d.ts.map

package/dist/api/iam-validation/user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAQnD,eAAO,MAAM,mBAAmB,EAAE;IACjC,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACX,EAmEA,CAAC"}

package/{package/dist/api/iam-validation/required-permissions.js → dist/api/iam-validation/user-permissions.js}

@@ -3,61 +3,73 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.requiredPermissions = void 0;
 const aws_policies_1 = require("aws-policies");
 const constants_1 = require("../../shared/constants");
-// TODO: Update docs before release
+const hosted_layers_1 = require("../../shared/hosted-layers");
 exports.requiredPermissions = [
     {
+        id: 'Identity',
         actions: [aws_policies_1.iam.GetUser],
         // eslint-disable-next-line no-template-curly-in-string
         resource: ['arn:aws:iam::*:user/${aws:username}'],
     },
     {
+        id: 'PermissionValidation',
         actions: [aws_policies_1.iam.SimulatePrincipalPolicy],
         resource: ['*'],
     },
     {
-        // TODO: arn:aws:iam::976210361945:role/lambda-admin, can it be locked down more?
+        id: 'LambdaInvokation',
         actions: [aws_policies_1.iam.PassRole],
-        resource: ['*'],
+        resource: ['arn:aws:iam::*:role/remotion-lambda-role'],
     },
     {
+        id: 'Storage',
         actions: [
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
-            aws_policies_1.s3.DeleteBucket,
-            aws_policies_1.s3.PutBucketWebsite,
-            aws_policies_1.s3.DeleteBucketWebsite,
             aws_policies_1.s3.PutObjectAcl,
             aws_policies_1.s3.PutObject,
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
             aws_policies_1.s3.GetBucketLocation,
+            aws_policies_1.s3.PutBucketAcl,
+            aws_policies_1.s3.DeleteBucket,
+            aws_policies_1.s3.PutBucketWebsite,
+            aws_policies_1.s3.DeleteBucketWebsite,
         ],
         resource: [`arn:aws:s3:::${constants_1.REMOTION_BUCKET_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
+        id: 'BucketListing',
+        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        resource: ['*'],
     },
     {
-        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        id: 'FunctionListing',
+        actions: [aws_policies_1.lambda.ListFunctions, aws_policies_1.lambda.GetFunction],
         resource: ['*'],
     },
     {
+        id: 'FunctionManagement',
         actions: [
-            aws_policies_1.lambda.GetFunction,
             aws_policies_1.lambda.InvokeAsync,
             aws_policies_1.lambda.InvokeFunction,
             aws_policies_1.lambda.CreateFunction,
             aws_policies_1.lambda.DeleteFunction,
+            aws_policies_1.lambda.PutFunctionEventInvokeConfig,
         ],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.lambda.GetLayerVersion],
-        // TODO: Tighten up
-        resource: [`*`],
+        id: 'logs.PutRetentionPolicy',
+        actions: [aws_policies_1.logs.CreateLogGroup, aws_policies_1.logs.PutRetentionPolicy],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
     },
     {
-        actions: [aws_policies_1.lambda.ListFunctions],
-        resource: ['*'],
+        id: 'FetchBinaries',
+        actions: [aws_policies_1.lambda.GetLayerVersion],
+        resource: [hosted_layers_1.REMOTION_HOSTED_LAYER_ARN],
     },
 ];
-//# sourceMappingURL=required-permissions.js.map
+//# sourceMappingURL=user-permissions.js.map

package/dist/api/iam-validation/user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAChC,8DAAqE;AAExD,QAAA,mBAAmB,GAI1B;IACL;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,CAAC,kBAAG,CAAC,OAAO,CAAC;QACtB,uDAAuD;QACvD,QAAQ,EAAE,CAAC,qCAAqC,CAAC;KACjD;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,kBAAG,CAAC,uBAAuB,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,kBAAG,CAAC,QAAQ,CAAC;QACvB,QAAQ,EAAE,CAAC,0CAA0C,CAAC;KACtD;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,iBAAiB;YACpB,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,gBAAgB;YACnB,iBAAE,CAAC,mBAAmB;SACtB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,CAAC,qBAAM,CAAC,aAAa,EAAE,qBAAM,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE;YACR,qBAAM,CAAC,WAAW;YAClB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,4BAA4B;SACnC;QACD,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,mBAAI,CAAC,cAAc,EAAE,mBAAI,CAAC,kBAAkB,CAAC;QACvD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,qBAAM,CAAC,eAAe,CAAC;QACjC,QAAQ,EAAE,CAAC,yCAAyB,CAAC;KACrC;CACD,CAAC"}

package/dist/api/mock-functions.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '..';
+import { AwsRegion } from '../pricing/aws-regions';
 import { LambdaVersions } from '../shared/constants';
 import { FunctionInfo } from './get-function-info';
 export declare let mockFunctionsStore: (FunctionInfo & {

package/dist/api/mock-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}
+{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}

package/dist/api/render-still-on-lambda.d.ts

@@ -1,8 +1,8 @@
-import { StillImageFormat } from 'remotion';
+import { LogLevel, StillImageFormat } from 'remotion';
 import { AwsRegion } from '../pricing/aws-regions';
 /**
  * @description Renders a still frame on Lambda
- * @link https://remotion.dev/docs/lambda/renderstillonlambda
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/renderstillonlambda
  * @param params.functionName The name of the Lambda function that should be used
  * @param params.serveUrl The URL of the deployed project
  * @param params.composition The ID of the composition which should be rendered.
@@ -16,7 +16,7 @@ import { AwsRegion } from '../pricing/aws-regions';
  * @param params.privacy Whether the item in the S3 bucket should be public. Possible values: `"private"` and `"public"`
  * @returns `Promise<{estimatedPrice: CostsInfo; url: string; size: number}>`
  */
-export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, }: {
+export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, logLevel, }: {
     region: AwsRegion;
     functionName: string;
     serveUrl: string;
@@ -28,10 +28,12 @@ export declare const renderStillOnLambda: ({ functionName, serveUrl, inputProps,
     envVariables?: Record<string, string> | undefined;
     quality?: number | undefined;
     frame?: number | undefined;
+    logLevel?: "verbose" | "info" | "warn" | "error" | undefined;
 }) => Promise<{
     estimatedPrice: import("../shared/constants").CostsInfo;
     url: string;
     size: number;
     bucketName: string;
+    renderId: string;
 }>;
 //# sourceMappingURL=render-still-on-lambda.d.ts.map

package/dist/api/render-still-on-lambda.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-still-on-lambda.d.ts","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAGjD;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,mBAAmB;YAavB,SAAS;kBACH,MAAM;cACV,MAAM;iBACH,MAAM;gBACP,OAAO;iBACN,gBAAgB;aACpB,SAAS,GAAG,QAAQ;;;;;;;;;;EA4B7B,CAAC"}
+{"version":3,"file":"render-still-on-lambda.d.ts","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAE,gBAAgB,EAAC,MAAM,UAAU,CAAC;AACpD,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAIjD;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,mBAAmB;YAcvB,SAAS;kBACH,MAAM;cACV,MAAM;iBACH,MAAM;gBACP,OAAO;iBACN,gBAAgB;aACpB,SAAS,GAAG,QAAQ;;;;;;;;;;;;EAkC7B,CAAC"}

package/dist/api/render-still-on-lambda.js

@@ -3,9 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderStillOnLambda = void 0;
 const call_lambda_1 = require("../shared/call-lambda");
 const constants_1 = require("../shared/constants");
+const convert_to_serve_url_1 = require("../shared/convert-to-serve-url");
 /**
  * @description Renders a still frame on Lambda
- * @link https://remotion.dev/docs/lambda/renderstillonlambda
+ * @link https://remotion-lambda-alpha.netlify.app/docs/lambda/renderstillonlambda
  * @param params.functionName The name of the Lambda function that should be used
  * @param params.serveUrl The URL of the deployed project
  * @param params.composition The ID of the composition which should be rendered.
@@ -19,20 +20,23 @@ const constants_1 = require("../shared/constants");
  * @param params.privacy Whether the item in the S3 bucket should be public. Possible values: `"private"` and `"public"`
  * @returns `Promise<{estimatedPrice: CostsInfo; url: string; size: number}>`
  */
-const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, }) => {
+const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFormat, envVariables, quality, region, maxRetries, composition, privacy, frame, logLevel, }) => {
+    const realServeUrl = await (0, convert_to_serve_url_1.convertToServeUrl)(serveUrl, region);
     const res = await (0, call_lambda_1.callLambda)({
         functionName,
         type: constants_1.LambdaRoutines.still,
         payload: {
             composition,
-            serveUrl,
+            serveUrl: realServeUrl,
             inputProps,
             imageFormat,
             envVariables,
             quality,
-            maxRetries: maxRetries !== null && maxRetries !== void 0 ? maxRetries : 3,
+            maxRetries: maxRetries !== null && maxRetries !== void 0 ? maxRetries : constants_1.DEFAULT_MAX_RETRIES,
             frame: frame !== null && frame !== void 0 ? frame : 0,
             privacy,
+            attempt: 1,
+            logLevel,
         },
         region,
     });
@@ -41,6 +45,7 @@ const renderStillOnLambda = async ({ functionName, serveUrl, inputProps, imageFo
         url: res.output,
         size: res.size,
         bucketName: res.bucketName,
+        renderId: res.renderId,
     };
 };
 exports.renderStillOnLambda = renderStillOnLambda;

package/dist/api/render-still-on-lambda.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-still-on-lambda.js","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":";;;AAEA,uDAAiD;AACjD,mDAAmD;AACnD;;;;;;;;;;;;;;;GAeG;AAEI,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACzC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,OAAO,EACP,KAAK,GAaL,EAAE,EAAE;IACJ,MAAM,GAAG,GAAG,MAAM,IAAA,wBAAU,EAAC;QAC5B,YAAY;QACZ,IAAI,EAAE,0BAAc,CAAC,KAAK;QAC1B,OAAO,EAAE;YACR,WAAW;YACX,QAAQ;YACR,UAAU;YACV,WAAW;YACX,YAAY;YACZ,OAAO;YACP,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,CAAC;YAC3B,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,CAAC;YACjB,OAAO;SACP;QACD,MAAM;KACN,CAAC,CAAC;IACH,OAAO;QACN,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,EAAE,GAAG,CAAC,MAAM;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACH,CAAC,CAAC;AA/CW,QAAA,mBAAmB,uBA+C9B"}
+{"version":3,"file":"render-still-on-lambda.js","sourceRoot":"","sources":["../../src/api/render-still-on-lambda.ts"],"names":[],"mappings":";;;AAEA,uDAAiD;AACjD,mDAAwE;AACxE,yEAAiE;AACjE;;;;;;;;;;;;;;;GAeG;AAEI,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACzC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,OAAO,EACP,KAAK,EACL,QAAQ,GAcR,EAAE,EAAE;IACJ,MAAM,YAAY,GAAG,MAAM,IAAA,wCAAiB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,IAAA,wBAAU,EAAC;QAC5B,YAAY;QACZ,IAAI,EAAE,0BAAc,CAAC,KAAK;QAC1B,OAAO,EAAE;YACR,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,UAAU;YACV,WAAW;YACX,YAAY;YACZ,OAAO;YACP,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,+BAAmB;YAC7C,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,CAAC;YACjB,OAAO;YACP,OAAO,EAAE,CAAC;YACV,QAAQ;SACR;QACD,MAAM;KACN,CAAC,CAAC;IACH,OAAO;QACN,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,EAAE,GAAG,CAAC,MAAM;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACtB,CAAC;AACH,CAAC,CAAC;AAtDW,QAAA,mBAAmB,uBAsD9B"}