@remotion/lambda 3.0.0-lambda.25 → 3.0.0-lambda.288

package/dist/api/get-sites.js

@@ -4,9 +4,15 @@ exports.getSites = void 0;
 const io_1 = require("../functions/helpers/io");
 const constants_1 = require("../shared/constants");
 const get_account_id_1 = require("../shared/get-account-id");
+const make_s3_url_1 = require("../shared/make-s3-url");
 const get_buckets_1 = require("./get-buckets");
-// TODO: Return the `serveUrl` as well
-// TODO: Add JSDoc comments
+/**
+ *
+ * @description Gets all the deployed sites for a certain AWS region.
+ * @link https://v3.remotion.dev/docs/lambda/getsites
+ * @param {AwsRegion} params.region The AWS region that you want to query for.
+ * @returns {Promise<GetSitesOutput>} A Promise containing an object with `sites` and `bucket` keys. Consult documentation for details.
+ */
 const getSites = async ({ region, }) => {
     var _a;
     const { remotionBuckets } = await (0, get_buckets_1.getRemotionS3Buckets)(region);
@@ -20,9 +26,9 @@ const getSites = async ({ region, }) => {
             expectedBucketOwner: accountId,
         });
         for (const file of ls) {
-            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/(.*)\/(.*)$/);
+            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/([0-9a-zA-Z-!_.*'()]+)\/(.*)$/);
             if (!siteKeyMatch) {
-                throw new Error(`An file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
+                throw new Error(`A file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
             }
             const [, siteId] = siteKeyMatch;
             if (!sites[siteId]) {
@@ -31,6 +37,11 @@ const getSites = async ({ region, }) => {
                     bucketName: bucket.name,
                     lastModified: null,
                     id: siteId,
+                    serveUrl: (0, make_s3_url_1.makeS3ServeUrl)({
+                        bucketName: bucket.name,
+                        region,
+                        subFolder: (0, constants_1.getSitesKey)(siteId),
+                    }),
                 };
             }
             if (file.LastModified) {

package/dist/api/get-sites.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,+CAAuE;AAcvE,sCAAsC;AACtC,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GAGN,EAAgC,EAAE;;IAClC,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC3D,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,oCAAoC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACtI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;iBACV,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AAxDW,QAAA,QAAQ,YAwDnB"}
+{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,uDAAqD;AACrD,+CAAuE;AAmBvE;;;;;;GAMG;AACI,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GACS,EAA2B,EAAE;;IAC5C,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CACnC,sCAAsC,CACtC,CAAC;YACF,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACrI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;oBACV,QAAQ,EAAE,IAAA,4BAAc,EAAC;wBACxB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,MAAM;wBACN,SAAS,EAAE,IAAA,uBAAW,EAAC,MAAM,CAAC;qBAC9B,CAAC;iBACF,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AA7DW,QAAA,QAAQ,YA6DnB"}

package/dist/api/iam-validation/role-permissions.d.ts

@@ -1,6 +1,6 @@
-import { iam, lambda, s3 } from 'aws-policies';
+import { iam, lambda, logs, s3 } from 'aws-policies';
 export declare const rolePermissions: {
-    actions: (s3 | iam | lambda)[];
+    actions: (s3 | iam | lambda | logs)[];
     resource: string[];
 }[];
 //# sourceMappingURL=role-permissions.d.ts.map

package/dist/api/iam-validation/role-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAG7C,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EAuBA,CAAC"}
+{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAOnD,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EA4BA,CAAC"}

package/dist/api/iam-validation/role-permissions.js

@@ -8,12 +8,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.s3.ListAllMyBuckets],
         resource: ['*'],
     },
-    {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
-    },
     {
         actions: [
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
+            aws_policies_1.s3.PutBucketAcl,
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
             aws_policies_1.s3.PutObjectAcl,
@@ -26,5 +25,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.lambda.InvokeFunction],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
+    {
+        actions: [aws_policies_1.logs.CreateLogStream, aws_policies_1.logs.PutLogEvents],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
+    },
 ];
 //# sourceMappingURL=role-permissions.js.map

package/dist/api/iam-validation/role-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAC7C,sDAAgF;AAEnE,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,YAAY,EAAE,iBAAE,CAAC,UAAU,EAAE,iBAAE,CAAC,YAAY,CAAC;QAC1D,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC5B;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;CACD,CAAC"}
+{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAEnB,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,OAAO,EAAE,CAAC,mBAAI,CAAC,eAAe,EAAE,mBAAI,CAAC,YAAY,CAAC;QAClD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;CACD,CAAC"}

package/dist/api/iam-validation/simulate-rule.d.ts

@@ -9,5 +9,6 @@ export declare const simulateRule: (options: {
     actionNames: string[];
     arn: string;
     resource: string[];
+    retries: number;
 }) => Promise<SimulationResult[]>;
 //# sourceMappingURL=simulate-rule.d.ts.map

package/dist/api/iam-validation/simulate-rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,KAAG,QAAQ,gBAAgB,EAAE,CAoC7B,CAAC"}
+{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB,KAAG,QAAQ,gBAAgB,EAAE,CAiD7B,CAAC"}

package/dist/api/iam-validation/simulate-rule.js

@@ -6,38 +6,51 @@ const aws_policies_1 = require("aws-policies");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulateRule = async (options) => {
     var _a;
-    if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
-        try {
-            await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
-            const result = [
-                {
-                    decision: 'allowed',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+    try {
+        if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
+            try {
+                await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
+                const result = [
+                    {
+                        decision: 'allowed',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
+            catch (err) {
+                const result = [
+                    {
+                        decision: 'explicitDeny',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
         }
-        catch (err) {
-            const result = [
-                {
-                    decision: 'explicitDeny',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+        const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
+            ActionNames: options.actionNames,
+            PolicySourceArn: options.arn,
+            ResourceArns: options.resource,
+        }));
+        return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
+            return {
+                decision: pol.EvalDecision,
+                name: pol.EvalActionName,
+            };
+        });
+    }
+    catch (err) {
+        // Sometimes the AWS Rate limit hits. In that case we retry up to two times
+        // after waiting for 2 seconds.
+        if (options.retries <= 0) {
+            throw err;
         }
+        await new Promise((resolve) => {
+            setTimeout(resolve, 2000);
+        });
+        return (0, exports.simulateRule)({ ...options, retries: options.retries - 1 });
     }
-    const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
-        ActionNames: options.actionNames,
-        PolicySourceArn: options.arn,
-        ResourceArns: options.resource,
-    }));
-    return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
-        return {
-            decision: pol.EvalDecision,
-            name: pol.EvalActionName,
-        };
-    });
 };
 exports.simulateRule = simulateRule;
 //# sourceMappingURL=simulate-rule.js.map

package/dist/api/iam-validation/simulate-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAKlC,EAA+B,EAAE;;IACjC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;QAC9C,IAAI;YACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;QAAC,OAAO,GAAG,EAAE;YACb,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,cAAc;oBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;KACD;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;KAC9B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;QAClE,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;YAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;SAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB"}
+{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAMlC,EAA+B,EAAE;;IACjC,IAAI;QACH,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;YAC9C,IAAI;gBACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;YAAC,OAAO,GAAG,EAAE;gBACb,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,cAAc;wBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;SACD;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,GAAG;YAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;SAC9B,CAAC,CACF,CAAC;QAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;YAClE,OAAO;gBACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;gBAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;aAClC,CAAC;QACH,CAAC,CAAC,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACb,2EAA2E;QAC3E,+BAA+B;QAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE;YACzB,MAAM,GAAG,CAAC;SACV;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,oBAAY,EAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,EAAC,CAAC,CAAC;KAChE;AACF,CAAC,CAAC;AAvDW,QAAA,YAAY,gBAuDvB"}

package/dist/api/iam-validation/simulate.d.ts

@@ -1,10 +1,19 @@
 import { AwsRegion } from '../../pricing/aws-regions';
 import { SimulationResult } from './simulate-rule';
-export declare const logPermissionOutput: (output: SimulationResult) => void;
-export declare const simulatePermissions: (options: {
+export declare const logPermissionOutput: (output: SimulationResult) => string;
+export declare type SimulatePermissionsInput = {
     region: AwsRegion;
-    onSimulation?: ((result: SimulationResult) => void) | undefined;
-}) => Promise<{
+    onSimulation?: (result: SimulationResult) => void;
+};
+export declare type SimulatePermissionsOutput = {
     results: SimulationResult[];
-}>;
+};
+/**
+ * @description Simulates calls using the AWS Simulator to validate the correct permissions.
+ * @link http://v3.remotion.dev/docs/lambda/simulatepermissions
+ * @param {AwsRegion} options.region The region which you would like to validate
+ * @param {(result: SimulationResult) => void} options.onSimulation The region which you would like to validate
+ * @returns {Promise<SimulatePermissionsOutput>} See documentation for detailed response structure.
+ */
+export declare const simulatePermissions: (options: SimulatePermissionsInput) => Promise<SimulatePermissionsOutput>;
 //# sourceMappingURL=simulate.d.ts.map

package/dist/api/iam-validation/simulate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAW7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,SAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAwB3B,CAAC"}
+{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAY7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,WAE3D,CAAC;AAEF,oBAAY,wBAAwB,GAAG;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAClD,CAAC;AAEF,oBAAY,yBAAyB,GAAG;IACvC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,YACtB,wBAAwB,KAC/B,QAAQ,yBAAyB,CAwBnC,CAAC"}

package/dist/api/iam-validation/simulate.js

@@ -2,10 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulatePermissions = exports.logPermissionOutput = void 0;
 const client_iam_1 = require("@aws-sdk/client-iam");
-const log_1 = require("../../cli/log");
 const aws_clients_1 = require("../../shared/aws-clients");
-const required_permissions_1 = require("./required-permissions");
 const simulate_rule_1 = require("./simulate-rule");
+const user_permissions_1 = require("./user-permissions");
 const getEmojiForStatus = (decision) => {
     switch (decision) {
         case 'allowed':
@@ -15,9 +14,16 @@ const getEmojiForStatus = (decision) => {
     }
 };
 const logPermissionOutput = (output) => {
-    log_1.Log.info([getEmojiForStatus(output.decision), output.name].join(' '));
+    return [getEmojiForStatus(output.decision), output.name].join(' ');
 };
 exports.logPermissionOutput = logPermissionOutput;
+/**
+ * @description Simulates calls using the AWS Simulator to validate the correct permissions.
+ * @link http://v3.remotion.dev/docs/lambda/simulatepermissions
+ * @param {AwsRegion} options.region The region which you would like to validate
+ * @param {(result: SimulationResult) => void} options.onSimulation The region which you would like to validate
+ * @returns {Promise<SimulatePermissionsOutput>} See documentation for detailed response structure.
+ */
 const simulatePermissions = async (options) => {
     var _a;
     const user = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
@@ -25,12 +31,13 @@ const simulatePermissions = async (options) => {
         throw new Error('No valid AWS user detected');
     }
     const results = [];
-    for (const per of required_permissions_1.requiredPermissions) {
+    for (const per of user_permissions_1.requiredPermissions) {
         const result = await (0, simulate_rule_1.simulateRule)({
             actionNames: per.actions,
             arn: user.User.Arn,
             region: options.region,
             resource: per.resource,
+            retries: 2,
         });
         for (const res of result) {
             results.push(res);

package/dist/api/iam-validation/simulate.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AACnD,uCAAkC;AAElC,0DAAsD;AACtD,iEAA2D;AAC3D,mDAA6E;AAE7E,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,SAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,0CAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA5BW,QAAA,mBAAmB,uBA4B9B"}
+{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AAEnD,0DAAsD;AACtD,mDAA6E;AAC7E,yDAAuD;AAEvD,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAWF;;;;;;GAMG;AACI,MAAM,mBAAmB,GAAG,KAAK,EACvC,OAAiC,EACI,EAAE;;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,sCAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,CAAC;SACV,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA1BW,QAAA,mBAAmB,uBA0B9B"}

package/dist/api/iam-validation/suggested-policy.d.ts

@@ -1,11 +1,12 @@
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://v3.remotion.dev/docs/lambda/getuserpolicy
  */
 export declare const getUserPolicy: () => string;
+export declare const ROLE_NAME = "remotion-lambda-role";
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://v3.remotion.dev/docs/lambda/getrolepolicy
  */
 export declare const getRolePolicy: () => string;
 //# sourceMappingURL=suggested-policy.d.ts.map

package/dist/api/iam-validation/suggested-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}
+{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E,eAAO,MAAM,SAAS,yBAAyB,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}

package/dist/api/iam-validation/suggested-policy.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRolePolicy = exports.getUserPolicy = void 0;
-const required_permissions_1 = require("./required-permissions");
+exports.getRolePolicy = exports.ROLE_NAME = exports.getUserPolicy = void 0;
 const role_permissions_1 = require("./role-permissions");
+const user_permissions_1 = require("./user-permissions");
 const suggestedPolicy = {
     Version: '2012-10-17',
     Statement: [
-        ...required_permissions_1.requiredPermissions.map((per, i) => {
+        ...user_permissions_1.requiredPermissions.map((per) => {
             return {
-                Sid: String(i),
+                Sid: per.id,
                 Effect: 'Allow',
                 Action: per.actions,
                 Resource: per.resource,
@@ -31,13 +31,14 @@ const suggestedRolePolicy = {
 };
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://v3.remotion.dev/docs/lambda/getuserpolicy
  */
 const getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
 exports.getUserPolicy = getUserPolicy;
+exports.ROLE_NAME = 'remotion-lambda-role';
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://v3.remotion.dev/docs/lambda/getrolepolicy
  */
 const getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
 exports.getRolePolicy = getRolePolicy;

package/dist/api/iam-validation/suggested-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,iEAA2D;AAC3D,yDAAmD;AAEnD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,0CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACrC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE5E;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}
+{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,yDAAmD;AACnD,yDAAuD;AAEvD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,sCAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,OAAO;gBACN,GAAG,EAAE,GAAG,CAAC,EAAE;gBACX,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE/D,QAAA,SAAS,GAAG,sBAAsB,CAAC;AAEhD;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}

package/dist/api/iam-validation/user-permissions.d.ts

@@ -0,0 +1,7 @@
+import { iam, lambda, logs, s3 } from 'aws-policies';
+export declare const requiredPermissions: {
+    actions: (s3 | iam | lambda | logs)[];
+    resource: string[];
+    id: string;
+}[];
+//# sourceMappingURL=user-permissions.d.ts.map

package/dist/api/iam-validation/user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAQnD,eAAO,MAAM,mBAAmB,EAAE;IACjC,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACX,EAmEA,CAAC"}

package/dist/api/iam-validation/{required-permissions.js → user-permissions.js}

@@ -3,61 +3,73 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.requiredPermissions = void 0;
 const aws_policies_1 = require("aws-policies");
 const constants_1 = require("../../shared/constants");
-// TODO: Update docs before release
+const hosted_layers_1 = require("../../shared/hosted-layers");
 exports.requiredPermissions = [
     {
+        id: 'Identity',
         actions: [aws_policies_1.iam.GetUser],
         // eslint-disable-next-line no-template-curly-in-string
         resource: ['arn:aws:iam::*:user/${aws:username}'],
     },
     {
+        id: 'PermissionValidation',
         actions: [aws_policies_1.iam.SimulatePrincipalPolicy],
         resource: ['*'],
     },
     {
-        // TODO: arn:aws:iam::678892195805:role/lambda-admin, can it be locked down more?
+        id: 'LambdaInvokation',
         actions: [aws_policies_1.iam.PassRole],
-        resource: ['*'],
+        resource: ['arn:aws:iam::*:role/remotion-lambda-role'],
     },
     {
+        id: 'Storage',
         actions: [
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
-            aws_policies_1.s3.DeleteBucket,
-            aws_policies_1.s3.PutBucketWebsite,
-            aws_policies_1.s3.DeleteBucketWebsite,
             aws_policies_1.s3.PutObjectAcl,
             aws_policies_1.s3.PutObject,
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
             aws_policies_1.s3.GetBucketLocation,
+            aws_policies_1.s3.PutBucketAcl,
+            aws_policies_1.s3.DeleteBucket,
+            aws_policies_1.s3.PutBucketWebsite,
+            aws_policies_1.s3.DeleteBucketWebsite,
         ],
         resource: [`arn:aws:s3:::${constants_1.REMOTION_BUCKET_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
+        id: 'BucketListing',
+        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        resource: ['*'],
     },
     {
-        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        id: 'FunctionListing',
+        actions: [aws_policies_1.lambda.ListFunctions, aws_policies_1.lambda.GetFunction],
         resource: ['*'],
     },
     {
+        id: 'FunctionManagement',
         actions: [
-            aws_policies_1.lambda.GetFunction,
             aws_policies_1.lambda.InvokeAsync,
             aws_policies_1.lambda.InvokeFunction,
             aws_policies_1.lambda.CreateFunction,
             aws_policies_1.lambda.DeleteFunction,
+            aws_policies_1.lambda.PutFunctionEventInvokeConfig,
         ],
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.lambda.GetLayerVersion],
-        // TODO: Tighten up
-        resource: [`*`],
+        id: 'LogsRetention',
+        actions: [aws_policies_1.logs.CreateLogGroup, aws_policies_1.logs.PutRetentionPolicy],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
     },
     {
-        actions: [aws_policies_1.lambda.ListFunctions],
-        resource: ['*'],
+        id: 'FetchBinaries',
+        actions: [aws_policies_1.lambda.GetLayerVersion],
+        resource: [hosted_layers_1.REMOTION_HOSTED_LAYER_ARN],
     },
 ];
-//# sourceMappingURL=required-permissions.js.map
+//# sourceMappingURL=user-permissions.js.map

package/dist/api/iam-validation/user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAChC,8DAAqE;AAExD,QAAA,mBAAmB,GAI1B;IACL;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,CAAC,kBAAG,CAAC,OAAO,CAAC;QACtB,uDAAuD;QACvD,QAAQ,EAAE,CAAC,qCAAqC,CAAC;KACjD;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,kBAAG,CAAC,uBAAuB,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,kBAAG,CAAC,QAAQ,CAAC;QACvB,QAAQ,EAAE,CAAC,0CAA0C,CAAC;KACtD;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,iBAAiB;YACpB,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,gBAAgB;YACnB,iBAAE,CAAC,mBAAmB;SACtB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,CAAC,qBAAM,CAAC,aAAa,EAAE,qBAAM,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE;YACR,qBAAM,CAAC,WAAW;YAClB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,4BAA4B;SACnC;QACD,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,mBAAI,CAAC,cAAc,EAAE,mBAAI,CAAC,kBAAkB,CAAC;QACvD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,qBAAM,CAAC,eAAe,CAAC;QACjC,QAAQ,EAAE,CAAC,yCAAyB,CAAC;KACrC;CACD,CAAC"}

package/dist/api/mock-functions.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '..';
+import { AwsRegion } from '../pricing/aws-regions';
 import { LambdaVersions } from '../shared/constants';
 import { FunctionInfo } from './get-function-info';
 export declare let mockFunctionsStore: (FunctionInfo & {

package/dist/api/mock-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}
+{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}

package/dist/api/render-media-on-lambda.d.ts

@@ -0,0 +1,52 @@
+import { FrameRange, ImageFormat, LogLevel, PixelFormat, ProResProfile } from 'remotion';
+import { AwsRegion } from '../pricing/aws-regions';
+import { Privacy } from '../shared/constants';
+export declare type RenderMediaOnLambdaInput = {
+    region: AwsRegion;
+    functionName: string;
+    serveUrl: string;
+    composition: string;
+    inputProps: unknown;
+    codec: 'h264-mkv' | 'mp3' | 'aac' | 'wav';
+    imageFormat: ImageFormat;
+    crf?: number | undefined;
+    envVariables?: Record<string, string>;
+    pixelFormat?: PixelFormat;
+    proResProfile?: ProResProfile;
+    privacy: Privacy;
+    quality?: number;
+    maxRetries: number;
+    framesPerLambda?: number;
+    enableChunkOptimization?: boolean;
+    logLevel?: LogLevel;
+    frameRange?: FrameRange;
+};
+export declare type RenderMediaOnLambdaOutput = {
+    renderId: string;
+    bucketName: string;
+};
+/**
+ * @description Triggers a render on a lambda given a composition and a lambda function.
+ * @link https://v3.remotion.dev/docs/lambda/rendermediaonlambda
+ * @param params.functionName The name of the Lambda function that should be used
+ * @param params.serveUrl The URL of the deployed project
+ * @param params.composition The ID of the composition which should be rendered.
+ * @param params.inputProps The input props that should be passed to the composition.
+ * @param params.codec The video codec which should be used for encoding.
+ * @param params.imageFormat In which image format the frames should be rendered.
+ * @param params.crf The constant rate factor to be used during encoding.
+ * @param params.envVariables Object containing environment variables to be inserted into the video environment
+ * @param params.proResProfile The ProRes profile if rendering a ProRes video
+ * @param params.quality JPEG quality if JPEG was selected as the image format.
+ * @param params.region The AWS region in which the video should be rendered.
+ * @param params.maxRetries How often rendering a chunk may fail before the video render gets aborted.
+ * @param params.enableChunkOptimization Whether Remotion should restructure and optimize chunks for subsequent renders. Default true.
+ * @param params.logLevel Level of logging that Lambda function should perform. Default "info".
+ * @returns {Promise<RenderMediaOnLambdaOutput>} See documentation for detailed structure
+ */
+export declare const renderMediaOnLambda: ({ functionName, serveUrl, inputProps, codec, imageFormat, crf, envVariables, pixelFormat, proResProfile, quality, region, maxRetries, composition, framesPerLambda, privacy, enableChunkOptimization, logLevel, frameRange, }: RenderMediaOnLambdaInput) => Promise<RenderMediaOnLambdaOutput>;
+/**
+ * @deprecated Renamed to renderMediaOnLambda()
+ */
+export declare const renderVideoOnLambda: ({ functionName, serveUrl, inputProps, codec, imageFormat, crf, envVariables, pixelFormat, proResProfile, quality, region, maxRetries, composition, framesPerLambda, privacy, enableChunkOptimization, logLevel, frameRange, }: RenderMediaOnLambdaInput) => Promise<RenderMediaOnLambdaOutput>;
+//# sourceMappingURL=render-media-on-lambda.d.ts.map

package/dist/api/render-media-on-lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-media-on-lambda.d.ts","sourceRoot":"","sources":["../../src/api/render-media-on-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,UAAU,EACV,WAAW,EAEX,QAAQ,EACR,WAAW,EACX,aAAa,EACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAGN,OAAO,EACP,MAAM,qBAAqB,CAAC;AAI7B,oBAAY,wBAAwB,GAAG;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC1C,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,oBAAY,yBAAyB,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,mBAAmB,kOAmB7B,wBAAwB,KAAG,QAAQ,yBAAyB,CA8B9D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,kOAnC7B,wBAAwB,KAAG,QAAQ,yBAAyB,CAmCT,CAAC"}

package/dist/api/render-media-on-lambda.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderVideoOnLambda = exports.renderMediaOnLambda = void 0;
+const remotion_1 = require("remotion");
+const call_lambda_1 = require("../shared/call-lambda");
+const constants_1 = require("../shared/constants");
+const convert_to_serve_url_1 = require("../shared/convert-to-serve-url");
+const validate_frames_per_lambda_1 = require("../shared/validate-frames-per-lambda");
+/**
+ * @description Triggers a render on a lambda given a composition and a lambda function.
+ * @link https://v3.remotion.dev/docs/lambda/rendermediaonlambda
+ * @param params.functionName The name of the Lambda function that should be used
+ * @param params.serveUrl The URL of the deployed project
+ * @param params.composition The ID of the composition which should be rendered.
+ * @param params.inputProps The input props that should be passed to the composition.
+ * @param params.codec The video codec which should be used for encoding.
+ * @param params.imageFormat In which image format the frames should be rendered.
+ * @param params.crf The constant rate factor to be used during encoding.
+ * @param params.envVariables Object containing environment variables to be inserted into the video environment
+ * @param params.proResProfile The ProRes profile if rendering a ProRes video
+ * @param params.quality JPEG quality if JPEG was selected as the image format.
+ * @param params.region The AWS region in which the video should be rendered.
+ * @param params.maxRetries How often rendering a chunk may fail before the video render gets aborted.
+ * @param params.enableChunkOptimization Whether Remotion should restructure and optimize chunks for subsequent renders. Default true.
+ * @param params.logLevel Level of logging that Lambda function should perform. Default "info".
+ * @returns {Promise<RenderMediaOnLambdaOutput>} See documentation for detailed structure
+ */
+const renderMediaOnLambda = async ({ functionName, serveUrl, inputProps, codec, imageFormat, crf, envVariables, pixelFormat, proResProfile, quality, region, maxRetries, composition, framesPerLambda, privacy, enableChunkOptimization, logLevel, frameRange, }) => {
+    (0, validate_frames_per_lambda_1.validateFramesPerLambda)(framesPerLambda);
+    const realServeUrl = await (0, convert_to_serve_url_1.convertToServeUrl)(serveUrl, region);
+    const res = await (0, call_lambda_1.callLambda)({
+        functionName,
+        type: constants_1.LambdaRoutines.start,
+        payload: {
+            framesPerLambda: framesPerLambda !== null && framesPerLambda !== void 0 ? framesPerLambda : constants_1.DEFAULT_FRAMES_PER_LAMBDA,
+            composition,
+            serveUrl: realServeUrl,
+            inputProps,
+            codec,
+            imageFormat,
+            crf,
+            envVariables,
+            pixelFormat,
+            proResProfile,
+            quality,
+            maxRetries,
+            privacy,
+            enableChunkOptimization,
+            logLevel: logLevel !== null && logLevel !== void 0 ? logLevel : remotion_1.Internals.Logging.DEFAULT_LOG_LEVEL,
+            frameRange: frameRange !== null && frameRange !== void 0 ? frameRange : null,
+        },
+        region,
+    });
+    return {
+        renderId: res.renderId,
+        bucketName: res.bucketName,
+    };
+};
+exports.renderMediaOnLambda = renderMediaOnLambda;
+/**
+ * @deprecated Renamed to renderMediaOnLambda()
+ */
+exports.renderVideoOnLambda = exports.renderMediaOnLambda;
+//# sourceMappingURL=render-media-on-lambda.js.map

package/dist/api/render-media-on-lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-media-on-lambda.js","sourceRoot":"","sources":["../../src/api/render-media-on-lambda.ts"],"names":[],"mappings":";;;AAAA,uCAOkB;AAElB,uDAAiD;AACjD,mDAI6B;AAC7B,yEAAiE;AACjE,qFAA6E;AA4B7E;;;;;;;;;;;;;;;;;;GAkBG;AAEI,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACzC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,KAAK,EACL,WAAW,EACX,GAAG,EACH,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,MAAM,EACN,UAAU,EACV,WAAW,EACX,eAAe,EACf,OAAO,EACP,uBAAuB,EACvB,QAAQ,EACR,UAAU,GACgB,EAAsC,EAAE;IAClE,IAAA,oDAAuB,EAAC,eAAe,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,IAAA,wCAAiB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,IAAA,wBAAU,EAAC;QAC5B,YAAY;QACZ,IAAI,EAAE,0BAAc,CAAC,KAAK;QAC1B,OAAO,EAAE;YACR,eAAe,EAAE,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,qCAAyB;YAC7D,WAAW;YACX,QAAQ,EAAE,YAAY;YACtB,UAAU;YACV,KAAK;YACL,WAAW;YACX,GAAG;YACH,YAAY;YACZ,WAAW;YACX,aAAa;YACb,OAAO;YACP,UAAU;YACV,OAAO;YACP,uBAAuB;YACvB,QAAQ,EAAE,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,oBAAS,CAAC,OAAO,CAAC,iBAAiB;YACzD,UAAU,EAAE,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,IAAI;SAC9B;QACD,MAAM;KACN,CAAC,CAAC;IACH,OAAO;QACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACH,CAAC,CAAC;AAjDW,QAAA,mBAAmB,uBAiD9B;AAEF;;GAEG;AACU,QAAA,mBAAmB,GAAG,2BAAmB,CAAC"}