@remotion/lambda 4.0.0-copy.4 → 4.0.0-esm.17

package/dist/shared/aws-clients.js

@@ -1,11 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getServiceQuotasClient = exports.getIamClient = exports.getLambdaClient = exports.getS3Client = exports.getCloudWatchLogsClient = exports.getServiceClient = void 0;
+exports.getStsClient = exports.getServiceQuotasClient = exports.getIamClient = exports.getLambdaClient = exports.getS3Client = exports.getCloudWatchLogsClient = exports.getServiceClient = void 0;
 const client_cloudwatch_logs_1 = require("@aws-sdk/client-cloudwatch-logs");
 const client_iam_1 = require("@aws-sdk/client-iam");
 const client_lambda_1 = require("@aws-sdk/client-lambda");
 const client_s3_1 = require("@aws-sdk/client-s3");
 const client_service_quotas_1 = require("@aws-sdk/client-service-quotas");
+const client_sts_1 = require("@aws-sdk/client-sts");
+const credential_providers_1 = require("@aws-sdk/credential-providers");
+const crypto_1 = require("crypto");
 const check_credentials_1 = require("./check-credentials");
 const is_in_lambda_1 = require("./is-in-lambda");
 const _clients = {};
@@ -13,6 +16,21 @@ const getCredentials = () => {
     if ((0, is_in_lambda_1.isInsideLambda)()) {
         return undefined;
     }
+    if (process.env.REMOTION_AWS_PROFILE) {
+        return (0, credential_providers_1.fromIni)({
+            profile: process.env.REMOTION_AWS_PROFILE,
+        });
+    }
+    if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
+        process.env.REMOTION_AWS_SECRET_ACCESS_KEY &&
+        process.env.REMOTION_AWS_SESSION_TOKEN) {
+        console.log('Using credentials from Remotion assumed role.');
+        return {
+            accessKeyId: process.env.REMOTION_AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
+            sessionToken: process.env.REMOTION_AWS_SESSION_TOKEN,
+        };
+    }
     if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
         process.env.REMOTION_AWS_SECRET_ACCESS_KEY) {
         return {
@@ -20,6 +38,21 @@ const getCredentials = () => {
             secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
         };
     }
+    if (process.env.AWS_PROFILE) {
+        return (0, credential_providers_1.fromIni)({
+            profile: process.env.AWS_PROFILE,
+        });
+    }
+    if (process.env.AWS_ACCESS_KEY_ID &&
+        process.env.AWS_SECRET_ACCESS_KEY &&
+        process.env.AWS_SESSION_TOKEN) {
+        console.log('Using credentials from AWS STS');
+        return {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+            sessionToken: process.env.AWS_SESSION_TOKEN,
+        };
+    }
     if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
         return {
             accessKeyId: process.env.AWS_ACCESS_KEY_ID,
@@ -28,17 +61,40 @@ const getCredentials = () => {
     }
     return undefined;
 };
-const getKey = ({ credentials, customCredentials, region, service, }) => [
-    credentials === null || credentials === void 0 ? void 0 : credentials.accessKeyId,
-    credentials === null || credentials === void 0 ? void 0 : credentials.secretAccessKey,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.accessKeyId,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.endpoint,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.secretAccessKey,
-    region,
-    service,
-].join('-');
+const getCredentialsHash = ({ customCredentials, region, service, }) => {
+    const hashComponents = {};
+    if (process.env.REMOTION_AWS_PROFILE) {
+        hashComponents.credentials = {
+            awsProfile: process.env.REMOTION_AWS_PROFILE,
+        };
+    }
+    else if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
+        process.env.REMOTION_AWS_SECRET_ACCESS_KEY) {
+        hashComponents.credentials = {
+            accessKeyId: process.env.REMOTION_AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
+        };
+    }
+    else if (process.env.AWS_PROFILE) {
+        hashComponents.credentials = {
+            awsProfile: process.env.AWS_PROFILE,
+        };
+    }
+    else if (process.env.AWS_ACCESS_KEY_ID &&
+        process.env.AWS_SECRET_ACCESS_KEY) {
+        hashComponents.credentials = {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+        };
+    }
+    hashComponents.customCredentials = customCredentials;
+    hashComponents.region = region;
+    hashComponents.service = service;
+    return (0, crypto_1.createHash)('sha256')
+        .update(JSON.stringify(hashComponents))
+        .digest('base64');
+};
 const getServiceClient = ({ region, service, customCredentials, }) => {
-    var _a;
     const Client = (() => {
         if (service === 'cloudwatch') {
             return client_cloudwatch_logs_1.CloudWatchLogsClient;
@@ -55,10 +111,12 @@ const getServiceClient = ({ region, service, customCredentials, }) => {
         if (service === 'servicequotas') {
             return client_service_quotas_1.ServiceQuotasClient;
         }
+        if (service === 'sts') {
+            return client_sts_1.STSClient;
+        }
         throw new TypeError('unknown client ' + service);
     })();
-    const key = getKey({
-        credentials: (_a = getCredentials()) !== null && _a !== void 0 ? _a : null,
+    const key = getCredentialsHash({
         region,
         customCredentials,
         service,
@@ -119,3 +177,7 @@ const getServiceQuotasClient = (region) => {
     });
 };
 exports.getServiceQuotasClient = getServiceQuotasClient;
+const getStsClient = (region) => {
+    return (0, exports.getServiceClient)({ region, service: 'sts', customCredentials: null });
+};
+exports.getStsClient = getStsClient;

package/dist/shared/check-credentials.js

@@ -17,6 +17,9 @@ const messageForVariable = (variable) => {
         .join('\n');
 };
 const checkCredentials = () => {
+    if (process.env.REMOTION_AWS_PROFILE || process.env.AWS_PROFILE) {
+        return;
+    }
     if (!process.env.AWS_ACCESS_KEY_ID &&
         !process.env.REMOTION_AWS_ACCESS_KEY_ID) {
         throw new Error(messageForVariable('AWS_ACCESS_KEY_ID or REMOTION_AWS_ACCESS_KEY_ID'));

package/dist/shared/chunk-progress.d.ts

@@ -0,0 +1,9 @@
+export declare const writeLambdaInitializedFile: ({ bucketName, expectedBucketOwner, attempt, chunk, renderId, framesRendered, }: {
+    bucketName: string;
+    expectedBucketOwner: string;
+    renderId: string;
+    chunk: number;
+    attempt: number;
+    framesRendered: number;
+}) => Promise<void>;
+export declare const getProgressOfChunk: (etag: string) => number;