@remotion/lambda 3.0.0-lambda.99 → 3.0.0-pnpm.295

package/dist/api/get-sites.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.d.ts","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAIjD,OAAO,EAAC,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AAEvE,aAAK,IAAI,GAAG;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,aAAK,mBAAmB,GAAG;IAC1B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAIF,eAAO,MAAM,QAAQ;YAGZ,SAAS;MACd,QAAQ,mBAAmB,CAyD9B,CAAC"}
+{"version":3,"file":"get-sites.d.ts","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAIjD,OAAO,EAAC,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AAEvE,aAAK,IAAI,GAAG;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,oBAAY,aAAa,GAAG;IAC3B,MAAM,EAAE,SAAS,CAAC;CAClB,CAAC;AAEF,oBAAY,cAAc,GAAG;IAC5B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,gBAElB,aAAa,KAAG,QAAQ,cAAc,CA2DxC,CAAC"}

package/dist/api/get-sites.js

@@ -6,8 +6,13 @@ const constants_1 = require("../shared/constants");
 const get_account_id_1 = require("../shared/get-account-id");
 const make_s3_url_1 = require("../shared/make-s3-url");
 const get_buckets_1 = require("./get-buckets");
-// TODO: Return the `serveUrl` as well
-// TODO: Add JSDoc comments
+/**
+ *
+ * @description Gets all the deployed sites for a certain AWS region.
+ * @link https://v3.remotion.dev/docs/lambda/getsites
+ * @param {AwsRegion} params.region The AWS region that you want to query for.
+ * @returns {Promise<GetSitesOutput>} A Promise containing an object with `sites` and `bucket` keys. Consult documentation for details.
+ */
 const getSites = async ({ region, }) => {
     var _a;
     const { remotionBuckets } = await (0, get_buckets_1.getRemotionS3Buckets)(region);
@@ -21,7 +26,7 @@ const getSites = async ({ region, }) => {
             expectedBucketOwner: accountId,
         });
         for (const file of ls) {
-            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/([0-9a-zA-Z]+)\/(.*)$/);
+            const siteKeyMatch = (_a = file.Key) === null || _a === void 0 ? void 0 : _a.match(/sites\/([0-9a-zA-Z-!_.*'()]+)\/(.*)$/);
             if (!siteKeyMatch) {
                 throw new Error(`A file was found in the bucket "${bucket.name}" with the key ${file.Key} which is an unexpected folder structure. Delete this file.`);
             }

package/dist/api/get-sites.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,uDAAqD;AACrD,+CAAuE;AAevE,sCAAsC;AACtC,2BAA2B;AACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GAGN,EAAgC,EAAE;;IAClC,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACrI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;oBACV,QAAQ,EAAE,IAAA,4BAAc,EAAC;wBACxB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,MAAM;wBACN,SAAS,EAAE,IAAA,uBAAW,EAAC,MAAM,CAAC;qBAC9B,CAAC;iBACF,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AA7DW,QAAA,QAAQ,YA6DnB"}
+{"version":3,"file":"get-sites.js","sourceRoot":"","sources":["../../src/api/get-sites.ts"],"names":[],"mappings":";;;AAAA,gDAAiD;AAEjD,mDAAgD;AAChD,6DAAsD;AACtD,uDAAqD;AACrD,+CAAuE;AAmBvE;;;;;;GAMG;AACI,MAAM,QAAQ,GAAG,KAAK,EAAE,EAC9B,MAAM,GACS,EAA2B,EAAE;;IAC5C,MAAM,EAAC,eAAe,EAAC,GAAG,MAAM,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAY,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAA0B,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,IAAA,aAAQ,EAAC;YACzB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,IAAA,uBAAW,EAAC,EAAE,CAAC;YACvB,MAAM;YACN,mBAAmB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,EAAE,EAAE;YACtB,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,0CAAE,KAAK,CACnC,sCAAsC,CACtC,CAAC;YACF,IAAI,CAAC,YAAY,EAAE;gBAClB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,IAAI,CAAC,GAAG,6DAA6D,CACrI,CAAC;aACF;YAED,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,KAAK,CAAC,MAAM,CAAC,GAAG;oBACf,WAAW,EAAE,CAAC;oBACd,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,YAAY,EAAE,IAAI;oBAClB,EAAE,EAAE,MAAM;oBACV,QAAQ,EAAE,IAAA,4BAAc,EAAC;wBACxB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,MAAM;wBACN,SAAS,EAAE,IAAA,uBAAW,EAAC,MAAM,CAAC;qBAC9B,CAAC;iBACF,CAAC;aACF;YAED,IAAI,IAAI,CAAC,YAAY,EAAE;gBACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;gBACvD,IACC,mBAAmB,KAAK,IAAI;oBAC5B,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAChD;oBACD,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzD;aACD;YAED,IAAI,IAAI,CAAC,IAAI,EAAE;gBACd,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;aACvC;SACD;KACD;IAED,MAAM,UAAU,GAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC;AACtD,CAAC,CAAC;AA7DW,QAAA,QAAQ,YA6DnB"}

package/dist/api/iam-validation/role-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAGnD,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EA2BA,CAAC"}
+{"version":3,"file":"role-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAOnD,eAAO,MAAM,eAAe,EAAE;IAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,EA4BA,CAAC"}

package/dist/api/iam-validation/role-permissions.js

@@ -8,12 +8,11 @@ exports.rolePermissions = [
         actions: [aws_policies_1.s3.ListAllMyBuckets],
         resource: ['*'],
     },
-    {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
-    },
     {
         actions: [
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
+            aws_policies_1.s3.PutBucketAcl,
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
             aws_policies_1.s3.PutObjectAcl,
@@ -28,7 +27,9 @@ exports.rolePermissions = [
     },
     {
         actions: [aws_policies_1.logs.CreateLogStream, aws_policies_1.logs.PutLogEvents],
-        resource: ['*'],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
     },
 ];
 //# sourceMappingURL=role-permissions.js.map

package/dist/api/iam-validation/role-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAAgF;AAEnE,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,YAAY,EAAE,iBAAE,CAAC,UAAU,EAAE,iBAAE,CAAC,YAAY,CAAC;QAC1D,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC5B;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,OAAO,EAAE,CAAC,mBAAI,CAAC,eAAe,EAAE,mBAAI,CAAC,YAAY,CAAC;QAClD,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;CACD,CAAC"}
+{"version":3,"file":"role-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/role-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAEnB,QAAA,eAAe,GAGtB;IACL;QACC,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,OAAO,EAAE;YACR,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,iBAAiB;SACpB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,OAAO,EAAE,CAAC,qBAAM,CAAC,cAAc,CAAC;QAChC,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,OAAO,EAAE,CAAC,mBAAI,CAAC,eAAe,EAAE,mBAAI,CAAC,YAAY,CAAC;QAClD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;CACD,CAAC"}

package/dist/api/iam-validation/simulate-rule.d.ts

@@ -9,5 +9,6 @@ export declare const simulateRule: (options: {
     actionNames: string[];
     arn: string;
     resource: string[];
+    retries: number;
 }) => Promise<SimulationResult[]>;
 //# sourceMappingURL=simulate-rule.d.ts.map

package/dist/api/iam-validation/simulate-rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB,KAAG,QAAQ,gBAAgB,EAAE,CAoC7B,CAAC"}
+{"version":3,"file":"simulate-rule.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,oBAAY,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,cAAc,CAAC;AAEvE,oBAAY,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,eAAO,MAAM,YAAY,YAAmB;IAC3C,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB,KAAG,QAAQ,gBAAgB,EAAE,CAiD7B,CAAC"}

package/dist/api/iam-validation/simulate-rule.js

@@ -6,38 +6,51 @@ const aws_policies_1 = require("aws-policies");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulateRule = async (options) => {
     var _a;
-    if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
-        try {
-            await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
-            const result = [
-                {
-                    decision: 'allowed',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+    try {
+        if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
+            try {
+                await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
+                const result = [
+                    {
+                        decision: 'allowed',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
+            catch (err) {
+                const result = [
+                    {
+                        decision: 'explicitDeny',
+                        name: aws_policies_1.iam.GetUser,
+                    },
+                ];
+                return result;
+            }
         }
-        catch (err) {
-            const result = [
-                {
-                    decision: 'explicitDeny',
-                    name: aws_policies_1.iam.GetUser,
-                },
-            ];
-            return result;
+        const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
+            ActionNames: options.actionNames,
+            PolicySourceArn: options.arn,
+            ResourceArns: options.resource,
+        }));
+        return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
+            return {
+                decision: pol.EvalDecision,
+                name: pol.EvalActionName,
+            };
+        });
+    }
+    catch (err) {
+        // Sometimes the AWS Rate limit hits. In that case we retry up to two times
+        // after waiting for 2 seconds.
+        if (options.retries <= 0) {
+            throw err;
         }
+        await new Promise((resolve) => {
+            setTimeout(resolve, 2000);
+        });
+        return (0, exports.simulateRule)({ ...options, retries: options.retries - 1 });
     }
-    const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
-        ActionNames: options.actionNames,
-        PolicySourceArn: options.arn,
-        ResourceArns: options.resource,
-    }));
-    return ((_a = res.EvaluationResults) !== null && _a !== void 0 ? _a : []).map((pol) => {
-        return {
-            decision: pol.EvalDecision,
-            name: pol.EvalActionName,
-        };
-    });
 };
 exports.simulateRule = simulateRule;
 //# sourceMappingURL=simulate-rule.js.map

package/dist/api/iam-validation/simulate-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAKlC,EAA+B,EAAE;;IACjC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;QAC9C,IAAI;YACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;QAAC,OAAO,GAAG,EAAE;YACb,MAAM,MAAM,GAAuB;gBAClC;oBACC,QAAQ,EAAE,cAAc;oBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;iBACjB;aACD,CAAC;YACF,OAAO,MAAM,CAAC;SACd;KACD;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;KAC9B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;QAClE,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;YAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;SAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,YAAY,gBAyCvB"}
+{"version":3,"file":"simulate-rule.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate-rule.ts"],"names":[],"mappings":";;;AAAA,oDAG6B;AAC7B,+CAAiC;AAEjC,0DAAsD;AAS/C,MAAM,YAAY,GAAG,KAAK,EAAE,OAMlC,EAA+B,EAAE;;IACjC,IAAI;QACH,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAG,CAAC,OAAO,CAAC,EAAE;YAC9C,IAAI;gBACH,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;YAAC,OAAO,GAAG,EAAE;gBACb,MAAM,MAAM,GAAuB;oBAClC;wBACC,QAAQ,EAAE,cAAc;wBACxB,IAAI,EAAE,kBAAG,CAAC,OAAO;qBACjB;iBACD,CAAC;gBACF,OAAO,MAAM,CAAC;aACd;SACD;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,IAAI,2CAA8B,CAAC;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,GAAG;YAC5B,YAAY,EAAE,OAAO,CAAC,QAAQ;SAC9B,CAAC,CACF,CAAC;QAEF,OAAO,CAAC,MAAA,GAAG,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,EAAE;YAClE,OAAO;gBACN,QAAQ,EAAE,GAAG,CAAC,YAA4B;gBAC1C,IAAI,EAAE,GAAG,CAAC,cAAwB;aAClC,CAAC;QACH,CAAC,CAAC,CAAC;KACH;IAAC,OAAO,GAAG,EAAE;QACb,2EAA2E;QAC3E,+BAA+B;QAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE;YACzB,MAAM,GAAG,CAAC;SACV;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,oBAAY,EAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,EAAC,CAAC,CAAC;KAChE;AACF,CAAC,CAAC;AAvDW,QAAA,YAAY,gBAuDvB"}

package/dist/api/iam-validation/simulate.d.ts

@@ -1,10 +1,19 @@
 import { AwsRegion } from '../../pricing/aws-regions';
 import { SimulationResult } from './simulate-rule';
-export declare const logPermissionOutput: (output: SimulationResult) => void;
-export declare const simulatePermissions: (options: {
+export declare const logPermissionOutput: (output: SimulationResult) => string;
+export declare type SimulatePermissionsInput = {
     region: AwsRegion;
-    onSimulation?: ((result: SimulationResult) => void) | undefined;
-}) => Promise<{
+    onSimulation?: (result: SimulationResult) => void;
+};
+export declare type SimulatePermissionsOutput = {
     results: SimulationResult[];
-}>;
+};
+/**
+ * @description Simulates calls using the AWS Simulator to validate the correct permissions.
+ * @link http://v3.remotion.dev/docs/lambda/simulatepermissions
+ * @param {AwsRegion} options.region The region which you would like to validate
+ * @param {(result: SimulationResult) => void} options.onSimulation The region which you would like to validate
+ * @returns {Promise<SimulatePermissionsOutput>} See documentation for detailed response structure.
+ */
+export declare const simulatePermissions: (options: SimulatePermissionsInput) => Promise<SimulatePermissionsOutput>;
 //# sourceMappingURL=simulate.d.ts.map

package/dist/api/iam-validation/simulate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAGpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAW7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,SAE3D,CAAC;AAEF,eAAO,MAAM,mBAAmB;YACvB,SAAS;6BACO,gBAAgB,KAAK,IAAI;;aAExC,gBAAgB,EAAE;EAwB3B,CAAC"}
+{"version":3,"file":"simulate.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EAA6B,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAY7E,eAAO,MAAM,mBAAmB,WAAY,gBAAgB,WAE3D,CAAC;AAEF,oBAAY,wBAAwB,GAAG;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAClD,CAAC;AAEF,oBAAY,yBAAyB,GAAG;IACvC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,YACtB,wBAAwB,KAC/B,QAAQ,yBAAyB,CAwBnC,CAAC"}

package/dist/api/iam-validation/simulate.js

@@ -2,10 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulatePermissions = exports.logPermissionOutput = void 0;
 const client_iam_1 = require("@aws-sdk/client-iam");
-const log_1 = require("../../cli/log");
 const aws_clients_1 = require("../../shared/aws-clients");
-const required_permissions_1 = require("./required-permissions");
 const simulate_rule_1 = require("./simulate-rule");
+const user_permissions_1 = require("./user-permissions");
 const getEmojiForStatus = (decision) => {
     switch (decision) {
         case 'allowed':
@@ -15,9 +14,16 @@ const getEmojiForStatus = (decision) => {
     }
 };
 const logPermissionOutput = (output) => {
-    log_1.Log.info([getEmojiForStatus(output.decision), output.name].join(' '));
+    return [getEmojiForStatus(output.decision), output.name].join(' ');
 };
 exports.logPermissionOutput = logPermissionOutput;
+/**
+ * @description Simulates calls using the AWS Simulator to validate the correct permissions.
+ * @link http://v3.remotion.dev/docs/lambda/simulatepermissions
+ * @param {AwsRegion} options.region The region which you would like to validate
+ * @param {(result: SimulationResult) => void} options.onSimulation The region which you would like to validate
+ * @returns {Promise<SimulatePermissionsOutput>} See documentation for detailed response structure.
+ */
 const simulatePermissions = async (options) => {
     var _a;
     const user = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
@@ -25,12 +31,13 @@ const simulatePermissions = async (options) => {
         throw new Error('No valid AWS user detected');
     }
     const results = [];
-    for (const per of required_permissions_1.requiredPermissions) {
+    for (const per of user_permissions_1.requiredPermissions) {
         const result = await (0, simulate_rule_1.simulateRule)({
             actionNames: per.actions,
             arn: user.User.Arn,
             region: options.region,
             resource: per.resource,
+            retries: 2,
         });
         for (const res of result) {
             results.push(res);

package/dist/api/iam-validation/simulate.js.map

@@ -1 +1 @@
-{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AACnD,uCAAkC;AAElC,0DAAsD;AACtD,iEAA2D;AAC3D,mDAA6E;AAE7E,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,SAAG,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAEK,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAEE,EAAE;;IACJ,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,0CAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA5BW,QAAA,mBAAmB,uBA4B9B"}
+{"version":3,"file":"simulate.js","sourceRoot":"","sources":["../../../src/api/iam-validation/simulate.ts"],"names":[],"mappings":";;;AAAA,oDAAmD;AAEnD,0DAAsD;AACtD,mDAA6E;AAC7E,yDAAuD;AAEvD,MAAM,iBAAiB,GAAG,CAAC,QAAsB,EAAE,EAAE;IACpD,QAAQ,QAAQ,EAAE;QACjB,KAAK,SAAS;YACb,OAAO,GAAG,CAAC;QACZ;YACC,OAAO,GAAG,CAAC;KACZ;AACF,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC/D,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC,CAAC;AAFW,QAAA,mBAAmB,uBAE9B;AAWF;;;;;;GAMG;AACI,MAAM,mBAAmB,GAAG,KAAK,EACvC,OAAiC,EACI,EAAE;;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,2BAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;KAC9C;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,sCAAmB,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;YACjC,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAa;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,CAAC;SACV,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;YACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,MAAA,OAAO,CAAC,YAAY,+CAApB,OAAO,EAAgB,GAAG,CAAC,CAAC;SAC5B;KACD;IAED,OAAO,EAAC,OAAO,EAAC,CAAC;AAClB,CAAC,CAAC;AA1BW,QAAA,mBAAmB,uBA0B9B"}

package/dist/api/iam-validation/suggested-policy.d.ts

@@ -1,11 +1,12 @@
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://v3.remotion.dev/docs/lambda/getuserpolicy
  */
 export declare const getUserPolicy: () => string;
+export declare const ROLE_NAME = "remotion-lambda-role";
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://v3.remotion.dev/docs/lambda/getrolepolicy
  */
 export declare const getRolePolicy: () => string;
 //# sourceMappingURL=suggested-policy.d.ts.map

package/dist/api/iam-validation/suggested-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}
+{"version":3,"file":"suggested-policy.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AAEH,eAAO,MAAM,aAAa,cAAiD,CAAC;AAE5E,eAAO,MAAM,SAAS,yBAAyB,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,aAAa,cAAqD,CAAC"}

package/dist/api/iam-validation/suggested-policy.js

@@ -1,14 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRolePolicy = exports.getUserPolicy = void 0;
-const required_permissions_1 = require("./required-permissions");
+exports.getRolePolicy = exports.ROLE_NAME = exports.getUserPolicy = void 0;
 const role_permissions_1 = require("./role-permissions");
+const user_permissions_1 = require("./user-permissions");
 const suggestedPolicy = {
     Version: '2012-10-17',
     Statement: [
-        ...required_permissions_1.requiredPermissions.map((per, i) => {
+        ...user_permissions_1.requiredPermissions.map((per) => {
             return {
-                Sid: String(i),
+                Sid: per.id,
                 Effect: 'Allow',
                 Action: per.actions,
                 Resource: per.resource,
@@ -31,13 +31,14 @@ const suggestedRolePolicy = {
 };
 /**
  * @description Returns an inline JSON policy to be assigned to the AWS user whose credentials are being used for excuting CLI commands or calling Node.JS functions.
- * @link https://remotion.dev/docs/lambda/getuserpolicy
+ * @link https://v3.remotion.dev/docs/lambda/getuserpolicy
  */
 const getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
 exports.getUserPolicy = getUserPolicy;
+exports.ROLE_NAME = 'remotion-lambda-role';
 /**
  * @description Returns an inline JSON policy to be assigned to the 'remotion-lambda-role' role that needs to be created in your AWS account.
- * @link https://remotion.dev/docs/lambda/getrolepolicy
+ * @link https://v3.remotion.dev/docs/lambda/getrolepolicy
  */
 const getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
 exports.getRolePolicy = getRolePolicy;

package/dist/api/iam-validation/suggested-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,iEAA2D;AAC3D,yDAAmD;AAEnD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,0CAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACrC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE5E;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}
+{"version":3,"file":"suggested-policy.js","sourceRoot":"","sources":["../../../src/api/iam-validation/suggested-policy.ts"],"names":[],"mappings":";;;AAAA,yDAAmD;AACnD,yDAAuD;AAEvD,MAAM,eAAe,GAAG;IACvB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,sCAAmB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,OAAO;gBACN,GAAG,EAAE,GAAG,CAAC,EAAE;gBACX,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV,GAAG,kCAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACjC,OAAO;gBACN,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;QACH,CAAC,CAAC;KACF;CACD,CAAC;AAEF;;;GAGG;AAEI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAA/D,QAAA,aAAa,iBAAkD;AAE/D,QAAA,SAAS,GAAG,sBAAsB,CAAC;AAEhD;;;GAGG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAAnE,QAAA,aAAa,iBAAsD"}

package/dist/api/iam-validation/{required-permissions.d.ts → user-permissions.d.ts}

@@ -2,5 +2,6 @@ import { iam, lambda, logs, s3 } from 'aws-policies';
 export declare const requiredPermissions: {
     actions: (s3 | iam | lambda | logs)[];
     resource: string[];
+    id: string;
 }[];
-//# sourceMappingURL=required-permissions.d.ts.map
+//# sourceMappingURL=user-permissions.d.ts.map

package/dist/api/iam-validation/user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.d.ts","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAC,MAAM,cAAc,CAAC;AAQnD,eAAO,MAAM,mBAAmB,EAAE;IACjC,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACX,EAmEA,CAAC"}

package/dist/api/iam-validation/{required-permissions.js → user-permissions.js}

@@ -3,46 +3,54 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.requiredPermissions = void 0;
 const aws_policies_1 = require("aws-policies");
 const constants_1 = require("../../shared/constants");
-// TODO: Update docs before release
+const hosted_layers_1 = require("../../shared/hosted-layers");
 exports.requiredPermissions = [
     {
+        id: 'Identity',
         actions: [aws_policies_1.iam.GetUser],
         // eslint-disable-next-line no-template-curly-in-string
         resource: ['arn:aws:iam::*:user/${aws:username}'],
     },
     {
+        id: 'PermissionValidation',
         actions: [aws_policies_1.iam.SimulatePrincipalPolicy],
         resource: ['*'],
     },
     {
-        // TODO: arn:aws:iam::678892195805:role/lambda-admin, can it be locked down more?
+        id: 'LambdaInvokation',
         actions: [aws_policies_1.iam.PassRole],
-        resource: ['*'],
+        resource: ['arn:aws:iam::*:role/remotion-lambda-role'],
     },
     {
+        id: 'Storage',
         actions: [
             aws_policies_1.s3.GetObject,
             aws_policies_1.s3.DeleteObject,
-            aws_policies_1.s3.DeleteBucket,
-            aws_policies_1.s3.PutBucketWebsite,
-            aws_policies_1.s3.DeleteBucketWebsite,
             aws_policies_1.s3.PutObjectAcl,
             aws_policies_1.s3.PutObject,
+            aws_policies_1.s3.CreateBucket,
+            aws_policies_1.s3.ListBucket,
             aws_policies_1.s3.GetBucketLocation,
+            aws_policies_1.s3.PutBucketAcl,
+            aws_policies_1.s3.DeleteBucket,
+            aws_policies_1.s3.PutBucketWebsite,
+            aws_policies_1.s3.DeleteBucketWebsite,
         ],
         resource: [`arn:aws:s3:::${constants_1.REMOTION_BUCKET_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.s3.CreateBucket, aws_policies_1.s3.ListBucket, aws_policies_1.s3.PutBucketAcl],
-        resource: [`arn:aws:s3:::*`],
+        id: 'BucketListing',
+        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        resource: ['*'],
     },
     {
-        actions: [aws_policies_1.s3.ListAllMyBuckets],
+        id: 'FunctionListing',
+        actions: [aws_policies_1.lambda.ListFunctions, aws_policies_1.lambda.GetFunction],
         resource: ['*'],
     },
     {
+        id: 'FunctionManagement',
         actions: [
-            aws_policies_1.lambda.GetFunction,
             aws_policies_1.lambda.InvokeAsync,
             aws_policies_1.lambda.InvokeFunction,
             aws_policies_1.lambda.CreateFunction,
@@ -52,17 +60,16 @@ exports.requiredPermissions = [
         resource: [`arn:aws:lambda:*:*:function:${constants_1.RENDER_FN_PREFIX}*`],
     },
     {
-        actions: [aws_policies_1.lambda.GetLayerVersion],
-        // TODO: Tighten up
-        resource: [`*`],
-    },
-    {
-        actions: [aws_policies_1.lambda.ListFunctions],
-        resource: ['*'],
+        id: 'LogsRetention',
+        actions: [aws_policies_1.logs.CreateLogGroup, aws_policies_1.logs.PutRetentionPolicy],
+        resource: [
+            `arn:aws:logs:*:*:log-group:${constants_1.LOG_GROUP_PREFIX}${constants_1.RENDER_FN_PREFIX}*`,
+        ],
     },
     {
-        actions: [aws_policies_1.logs.CreateLogGroup, aws_policies_1.logs.PutRetentionPolicy],
-        resource: ['*'],
+        id: 'FetchBinaries',
+        actions: [aws_policies_1.lambda.GetLayerVersion],
+        resource: [hosted_layers_1.REMOTION_HOSTED_LAYER_ARN],
     },
 ];
-//# sourceMappingURL=required-permissions.js.map
+//# sourceMappingURL=user-permissions.js.map

package/dist/api/iam-validation/user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.js","sourceRoot":"","sources":["../../../src/api/iam-validation/user-permissions.ts"],"names":[],"mappings":";;;AAAA,+CAAmD;AACnD,sDAIgC;AAChC,8DAAqE;AAExD,QAAA,mBAAmB,GAI1B;IACL;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,CAAC,kBAAG,CAAC,OAAO,CAAC;QACtB,uDAAuD;QACvD,QAAQ,EAAE,CAAC,qCAAqC,CAAC;KACjD;IACD;QACC,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,kBAAG,CAAC,uBAAuB,CAAC;QACtC,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,kBAAG,CAAC,QAAQ,CAAC;QACvB,QAAQ,EAAE,CAAC,0CAA0C,CAAC;KACtD;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EAAE;YACR,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,SAAS;YACZ,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,UAAU;YACb,iBAAE,CAAC,iBAAiB;YACpB,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,YAAY;YACf,iBAAE,CAAC,gBAAgB;YACnB,iBAAE,CAAC,mBAAmB;SACtB;QACD,QAAQ,EAAE,CAAC,gBAAgB,kCAAsB,GAAG,CAAC;KACrD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,iBAAE,CAAC,gBAAgB,CAAC;QAC9B,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,CAAC,qBAAM,CAAC,aAAa,EAAE,qBAAM,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,CAAC,GAAG,CAAC;KACf;IACD;QACC,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE;YACR,qBAAM,CAAC,WAAW;YAClB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,cAAc;YACrB,qBAAM,CAAC,4BAA4B;SACnC;QACD,QAAQ,EAAE,CAAC,+BAA+B,4BAAgB,GAAG,CAAC;KAC9D;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,mBAAI,CAAC,cAAc,EAAE,mBAAI,CAAC,kBAAkB,CAAC;QACvD,QAAQ,EAAE;YACT,8BAA8B,4BAAgB,GAAG,4BAAgB,GAAG;SACpE;KACD;IACD;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,CAAC,qBAAM,CAAC,eAAe,CAAC;QACjC,QAAQ,EAAE,CAAC,yCAAyB,CAAC;KACrC;CACD,CAAC"}

package/dist/api/mock-functions.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '..';
+import { AwsRegion } from '../pricing/aws-regions';
 import { LambdaVersions } from '../shared/constants';
 import { FunctionInfo } from './get-function-info';
 export declare let mockFunctionsStore: (FunctionInfo & {

package/dist/api/mock-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}
+{"version":3,"file":"mock-functions.d.ts","sourceRoot":"","sources":["../../src/api/mock-functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAC,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAEjD,eAAO,IAAI,kBAAkB,EAAE,CAAC,YAAY,GAAG;IAC9C,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACxB,CAAC,EAAO,CAAC;AAEV,eAAO,MAAM,WAAW,OAAQ,YAAY,UAAU,SAAS,SAM9D,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,MAAM,UAAU,MAAM,SAI9D,CAAC;AAEF,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM;YAlBhD,SAAS;aACR,cAAc;cAqBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACvB,MAAM,WACL,cAAc,GAAG,IAAI;YA1BtB,SAAS;aACR,cAAc;IA8BvB,CAAC;AAEF,eAAO,MAAM,YAAY,YAExB,CAAC;AAEF,eAAO,MAAM,0BAA0B,iBAAkB,MAAM,SAM9D,CAAC"}

package/dist/api/presign-url.d.ts

@@ -0,0 +1,20 @@
+import { AwsRegion } from '../pricing/aws-regions';
+export declare type PresignURLInput = {
+    region: AwsRegion;
+    bucketName: string;
+    objectKey: string;
+    checkIfObjectExists?: boolean;
+    expiresInSeconds: number;
+};
+/**
+ * @description Returns a public url of an object stored in Remotion's S3 bucket.
+ * @link https://v3.remotion.dev/docs/lambda/presignurl
+ * @param {AwsRegion} params.region The region in which the S3 bucket resides in.
+ * @param {string} params.bucketName The name of the bucket to fetch the object from.
+ * @param {string} params.objectKey Key of the S3 object to get.
+ * @param {string} params.expiresIn The number of seconds before the presigned URL expires. Default 120.
+ * @param {boolean} params.checkIfObjectExists Whether the function should check if the object exists in the bucket before generating the presigned url.
+ * @returns {Promise<string | null>} The public url of an object or `null` if `checkIfObjectExists=true` & object does not exist.
+ */
+export declare const presignUrl: ({ region, bucketName, objectKey, checkIfObjectExists, expiresInSeconds, }: PresignURLInput) => Promise<string | null>;
+//# sourceMappingURL=presign-url.d.ts.map

package/dist/api/presign-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presign-url.d.ts","sourceRoot":"","sources":["../../src/api/presign-url.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,SAAS,EAAC,MAAM,wBAAwB,CAAC;AAKjD,oBAAY,eAAe,GAAG;IAC7B,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU,8EAMpB,eAAe,KAAG,QAAQ,MAAM,GAAG,IAAI,CAiCzC,CAAC"}

package/dist/api/presign-url.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.presignUrl = void 0;
+const client_s3_1 = require("@aws-sdk/client-s3");
+const s3_request_presigner_1 = require("@aws-sdk/s3-request-presigner");
+const aws_clients_1 = require("../shared/aws-clients");
+const validate_bucketname_1 = require("../shared/validate-bucketname");
+const validate_presign_expiration_1 = require("../shared/validate-presign-expiration");
+/**
+ * @description Returns a public url of an object stored in Remotion's S3 bucket.
+ * @link https://v3.remotion.dev/docs/lambda/presignurl
+ * @param {AwsRegion} params.region The region in which the S3 bucket resides in.
+ * @param {string} params.bucketName The name of the bucket to fetch the object from.
+ * @param {string} params.objectKey Key of the S3 object to get.
+ * @param {string} params.expiresIn The number of seconds before the presigned URL expires. Default 120.
+ * @param {boolean} params.checkIfObjectExists Whether the function should check if the object exists in the bucket before generating the presigned url.
+ * @returns {Promise<string | null>} The public url of an object or `null` if `checkIfObjectExists=true` & object does not exist.
+ */
+const presignUrl = async ({ region, bucketName, objectKey, checkIfObjectExists = false, expiresInSeconds, }) => {
+    (0, validate_bucketname_1.validateBucketName)(bucketName);
+    (0, validate_presign_expiration_1.validatePresignExpiration)(expiresInSeconds);
+    const s3Client = (0, aws_clients_1.getS3Client)(region);
+    if (checkIfObjectExists) {
+        try {
+            await s3Client.send(new client_s3_1.HeadObjectCommand({
+                Bucket: bucketName,
+                Key: objectKey,
+            }));
+        }
+        catch (err) {
+            if (err.name === 'NotFound') {
+                return null;
+            }
+            throw err;
+        }
+    }
+    const objCommand = new client_s3_1.GetObjectCommand({
+        Bucket: bucketName,
+        Key: objectKey,
+    });
+    const publicUrl = await (0, s3_request_presigner_1.getSignedUrl)(s3Client, objCommand, {
+        expiresIn: expiresInSeconds,
+    });
+    return publicUrl;
+};
+exports.presignUrl = presignUrl;
+//# sourceMappingURL=presign-url.js.map

package/dist/api/presign-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presign-url.js","sourceRoot":"","sources":["../../src/api/presign-url.ts"],"names":[],"mappings":";;;AAAA,kDAAuE;AACvE,wEAA2D;AAE3D,uDAAkD;AAClD,uEAAiE;AACjE,uFAAgF;AAUhF;;;;;;;;;GASG;AACI,MAAM,UAAU,GAAG,KAAK,EAAE,EAChC,MAAM,EACN,UAAU,EACV,SAAS,EACT,mBAAmB,GAAG,KAAK,EAC3B,gBAAgB,GACC,EAA0B,EAAE;IAC7C,IAAA,wCAAkB,EAAC,UAAU,CAAC,CAAC;IAC/B,IAAA,uDAAyB,EAAC,gBAAgB,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,IAAA,yBAAW,EAAC,MAAM,CAAC,CAAC;IAErC,IAAI,mBAAmB,EAAE;QACxB,IAAI;YACH,MAAM,QAAQ,CAAC,IAAI,CAClB,IAAI,6BAAiB,CAAC;gBACrB,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,SAAS;aACd,CAAC,CACF,CAAC;SACF;QAAC,OAAO,GAAG,EAAE;YACb,IAAK,GAAsB,CAAC,IAAI,KAAK,UAAU,EAAE;gBAChD,OAAO,IAAI,CAAC;aACZ;YAED,MAAM,GAAG,CAAC;SACV;KACD;IAED,MAAM,UAAU,GAAG,IAAI,4BAAgB,CAAC;QACvC,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,SAAS;KACd,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,IAAA,mCAAY,EAAC,QAAQ,EAAE,UAAU,EAAE;QAC1D,SAAS,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC;AAvCW,QAAA,UAAU,cAuCrB"}