@remotion/lambda 4.0.0-lambda.3 → 4.0.0-newpaths.1

package/dist/api/get-aws-client.d.ts

@@ -3,11 +3,13 @@ import * as IamSdk from '@aws-sdk/client-iam';
 import * as LambdaSDK from '@aws-sdk/client-lambda';
 import * as S3SDK from '@aws-sdk/client-s3';
 import * as ServiceQuotasSDK from '@aws-sdk/client-service-quotas';
-import { AwsRegion } from '../client';
-import { ServiceMapping } from '../shared/aws-clients';
+import * as StsSdk from '@aws-sdk/client-sts';
+import type { AwsRegion } from '../client';
+import type { CustomCredentials, ServiceMapping } from '../shared/aws-clients';
 export declare type GetAwsClientInput<T extends keyof ServiceMapping> = {
     region: AwsRegion;
     service: T;
+    customCredentials?: CustomCredentials | null;
 };
 declare type SdkMapping = {
     s3: typeof S3SDK;
@@ -15,6 +17,7 @@ declare type SdkMapping = {
     iam: typeof IamSdk;
     lambda: typeof LambdaSDK;
     servicequotas: typeof ServiceQuotasSDK;
+    sts: typeof StsSdk;
 };
 export declare type GetAwsClientOutput<T extends keyof ServiceMapping> = {
     client: ServiceMapping[T];
@@ -25,7 +28,8 @@ export declare type GetAwsClientOutput<T extends keyof ServiceMapping> = {
  * @link https://remotion.dev/docs/lambda/getawsclient
  * @param {AwsRegion} params.region The region in which the S3 bucket resides in.
  * @param {string} params.service One of `iam`, `s3`, `cloudwatch`, `iam` or `servicequotas`
+ * @param {CustomCredentials} params.customCredentials Pass endpoint and credentials if you want to connect to a different cloud for S3
  * @returns {GetAwsClientOutput<T>} Returns `client` and `sdk` of a AWS service
  */
-export declare const getAwsClient: <T extends keyof ServiceMapping>({ region, service, }: GetAwsClientInput<T>) => GetAwsClientOutput<T>;
+export declare const getAwsClient: <T extends keyof ServiceMapping>({ region, service, customCredentials, }: GetAwsClientInput<T>) => GetAwsClientOutput<T>;
 export {};

package/dist/api/get-aws-client.js

@@ -29,23 +29,30 @@ const IamSdk = __importStar(require("@aws-sdk/client-iam"));
 const LambdaSDK = __importStar(require("@aws-sdk/client-lambda"));
 const S3SDK = __importStar(require("@aws-sdk/client-s3"));
 const ServiceQuotasSDK = __importStar(require("@aws-sdk/client-service-quotas"));
+const StsSdk = __importStar(require("@aws-sdk/client-sts"));
 const aws_clients_1 = require("../shared/aws-clients");
 /**
  * @description Gets the full AWS SDK and an instantiated client for an AWS service
  * @link https://remotion.dev/docs/lambda/getawsclient
  * @param {AwsRegion} params.region The region in which the S3 bucket resides in.
  * @param {string} params.service One of `iam`, `s3`, `cloudwatch`, `iam` or `servicequotas`
+ * @param {CustomCredentials} params.customCredentials Pass endpoint and credentials if you want to connect to a different cloud for S3
  * @returns {GetAwsClientOutput<T>} Returns `client` and `sdk` of a AWS service
  */
-const getAwsClient = ({ region, service, }) => {
+const getAwsClient = ({ region, service, customCredentials, }) => {
     return {
-        client: (0, aws_clients_1.getServiceClient)(region, service),
+        client: (0, aws_clients_1.getServiceClient)({
+            region,
+            service,
+            customCredentials: customCredentials !== null && customCredentials !== void 0 ? customCredentials : null,
+        }),
         sdk: {
             lambda: LambdaSDK,
             cloudwatch: CloudWatchSDK,
             iam: IamSdk,
             s3: S3SDK,
             servicequotas: ServiceQuotasSDK,
+            sts: StsSdk,
         }[service],
     };
 };

package/dist/api/get-buckets.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '../pricing/aws-regions';
+import type { AwsRegion } from '../pricing/aws-regions';
 export declare type BucketWithLocation = {
     name: string;
     creationDate: number;

package/dist/api/get-buckets.js

@@ -4,26 +4,43 @@ exports.getRemotionS3Buckets = void 0;
 const client_s3_1 = require("@aws-sdk/client-s3");
 const aws_clients_1 = require("../shared/aws-clients");
 const constants_1 = require("../shared/constants");
+const validate_bucketname_1 = require("../shared/validate-bucketname");
 const getRemotionS3Buckets = async (region) => {
-    const { Buckets } = await (0, aws_clients_1.getS3Client)(region).send(new client_s3_1.ListBucketsCommand({}));
+    const { Buckets } = await (0, aws_clients_1.getS3Client)(region, null).send(new client_s3_1.ListBucketsCommand({}));
     if (!Buckets) {
         return { remotionBuckets: [] };
     }
     const remotionBuckets = Buckets.filter((b) => { var _a; return (_a = b.Name) === null || _a === void 0 ? void 0 : _a.startsWith(constants_1.REMOTION_BUCKET_PREFIX); });
-    const locations = await Promise.all(remotionBuckets.map((bucket) => {
-        return (0, aws_clients_1.getS3Client)(region).send(new client_s3_1.GetBucketLocationCommand({
-            Bucket: bucket.Name,
-        }));
+    const locations = await Promise.all(remotionBuckets.map(async (bucket) => {
+        var _a, _b;
+        const { region: parsedRegion } = (0, validate_bucketname_1.parseBucketName)(bucket.Name);
+        if (parsedRegion) {
+            return parsedRegion;
+        }
+        try {
+            const result = await (0, aws_clients_1.getS3Client)(region, null).send(new client_s3_1.GetBucketLocationCommand({
+                Bucket: bucket.Name,
+            }));
+            // AWS docs: Buckets in Region us-east-1 have a LocationConstraint of null!!
+            return (_a = result.LocationConstraint) !== null && _a !== void 0 ? _a : 'us-east-1';
+        }
+        catch (err) {
+            // Sometimes the API returns a bucket even if it was deleted before
+            if ((_b = err.stack) === null || _b === void 0 ? void 0 : _b.includes('NoSuchBucket')) {
+                return null;
+            }
+            throw err;
+        }
     }));
-    const bucketsWithLocation = remotionBuckets.map((bucket, i) => {
-        var _a;
+    const bucketsWithLocation = remotionBuckets
+        .map((bucket, i) => {
         return {
             creationDate: bucket.CreationDate.getTime(),
             name: bucket.Name,
-            // AWS docs: Buckets in Region us-east-1 have a LocationConstraint of null!!
-            region: ((_a = locations[i].LocationConstraint) !== null && _a !== void 0 ? _a : 'us-east-1'),
+            region: locations[i],
         };
-    });
+    })
+        .filter((b) => b.region);
     return {
         remotionBuckets: bucketsWithLocation.filter((bucket) => {
             return bucket.region === region;

package/dist/api/get-compositions-on-lambda.d.ts

@@ -0,0 +1,28 @@
+import type { ChromiumOptions, LogLevel } from '@remotion/renderer';
+import type { TCompMetadata } from 'remotion';
+import type { AwsRegion } from '../client';
+export declare type GetCompositionsOnLambdaInput = {
+    chromiumOptions?: ChromiumOptions;
+    region: AwsRegion;
+    inputProps: unknown;
+    functionName: string;
+    serveUrl: string;
+    envVariables?: Record<string, string>;
+    logLevel?: LogLevel;
+    timeoutInMilliseconds?: number;
+};
+export declare type GetCompositionsOnLambdaOutput = TCompMetadata[];
+/**
+ * @description Returns the compositions from a serveUrl
+ * @link https://remotion.dev/docs/lambda/getcompositionsonlambda
+ * @param params.functionName The name of the Lambda function that should be used
+ * @param params.serveUrl The URL of the deployed project
+ * @param params.inputProps The input props that should be passed while the compositions are evaluated.
+ * @param params.envVariables Object containing environment variables to be inserted into the video environment
+ * @param params.region The AWS region in which the video should be rendered.
+ * @param params.logLevel The log level of the Lambda function
+ * @param params.timeoutInMilliseconds The timeout of the Lambda function
+ * @param params.chromiumOptions The options to pass to Chromium
+ * @returns The compositions
+ */
+export declare const getCompositionsOnLambda: ({ chromiumOptions, serveUrl, region, inputProps, functionName, envVariables, logLevel, timeoutInMilliseconds, }: GetCompositionsOnLambdaInput) => Promise<GetCompositionsOnLambdaOutput>;

package/dist/api/get-compositions-on-lambda.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCompositionsOnLambda = void 0;
+const version_1 = require("remotion/version");
+const defaults_1 = require("../defaults");
+const call_lambda_1 = require("../shared/call-lambda");
+const serialize_input_props_1 = require("../shared/serialize-input-props");
+/**
+ * @description Returns the compositions from a serveUrl
+ * @link https://remotion.dev/docs/lambda/getcompositionsonlambda
+ * @param params.functionName The name of the Lambda function that should be used
+ * @param params.serveUrl The URL of the deployed project
+ * @param params.inputProps The input props that should be passed while the compositions are evaluated.
+ * @param params.envVariables Object containing environment variables to be inserted into the video environment
+ * @param params.region The AWS region in which the video should be rendered.
+ * @param params.logLevel The log level of the Lambda function
+ * @param params.timeoutInMilliseconds The timeout of the Lambda function
+ * @param params.chromiumOptions The options to pass to Chromium
+ * @returns The compositions
+ */
+const getCompositionsOnLambda = async ({ chromiumOptions, serveUrl, region, inputProps, functionName, envVariables, logLevel, timeoutInMilliseconds, }) => {
+    var _a;
+    const serializedInputProps = await (0, serialize_input_props_1.serializeInputProps)({
+        inputProps,
+        region,
+        type: 'still',
+    });
+    try {
+        const res = await (0, call_lambda_1.callLambda)({
+            functionName,
+            type: defaults_1.LambdaRoutines.compositions,
+            payload: {
+                chromiumOptions: chromiumOptions !== null && chromiumOptions !== void 0 ? chromiumOptions : {},
+                serveUrl,
+                envVariables,
+                inputProps: serializedInputProps,
+                logLevel: logLevel !== null && logLevel !== void 0 ? logLevel : 'info',
+                timeoutInMilliseconds: timeoutInMilliseconds !== null && timeoutInMilliseconds !== void 0 ? timeoutInMilliseconds : 30000,
+                version: version_1.VERSION,
+            },
+            region,
+        });
+        return res.compositions;
+    }
+    catch (err) {
+        if ((_a = err.stack) === null || _a === void 0 ? void 0 : _a.includes('UnrecognizedClientException')) {
+            throw new Error('UnrecognizedClientException: The AWS credentials provided were probably mixed up. Learn how to fix this issue here: https://remotion.dev/docs/lambda/troubleshooting/unrecognizedclientexception');
+        }
+        throw err;
+    }
+};
+exports.getCompositionsOnLambda = getCompositionsOnLambda;

package/dist/api/get-function-info.d.ts

@@ -1,10 +1,9 @@
-import { AwsRegion } from '../pricing/aws-regions';
-import { LambdaVersions } from '../shared/constants';
+import type { AwsRegion } from '../pricing/aws-regions';
 export declare type FunctionInfo = {
     functionName: string;
     timeoutInSeconds: number;
     memorySizeInMb: number;
-    version: LambdaVersions | null;
+    version: string | null;
     diskSizeInMb: number;
 };
 export declare type GetFunctionInfoInput = {

package/dist/api/get-functions.d.ts

@@ -1,5 +1,5 @@
-import { AwsRegion } from '../pricing/aws-regions';
-import { FunctionInfo } from './get-function-info';
+import type { AwsRegion } from '../pricing/aws-regions';
+import type { FunctionInfo } from './get-function-info';
 export declare type GetFunctionsInput = {
     region: AwsRegion;
     compatibleOnly: boolean;

package/dist/api/get-functions.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getFunctions = void 0;
 const client_lambda_1 = require("@aws-sdk/client-lambda");
+const version_1 = require("remotion/version");
 const aws_clients_1 = require("../shared/aws-clients");
 const constants_1 = require("../shared/constants");
 const get_function_version_1 = require("../shared/get-function-version");
@@ -73,7 +74,7 @@ const getFunctions = async (options) => {
         if (!options.compatibleOnly) {
             return true;
         }
-        return l.version === constants_1.CURRENT_VERSION;
+        return l.version === version_1.VERSION;
     });
 };
 exports.getFunctions = getFunctions;

package/dist/api/get-or-create-bucket.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '../pricing/aws-regions';
+import type { AwsRegion } from '../pricing/aws-regions';
 export declare type GetOrCreateBucketInput = {
     region: AwsRegion;
     onBucketEnsured?: () => void;

package/dist/api/get-or-create-bucket.js

@@ -2,9 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getOrCreateBucket = void 0;
 const constants_1 = require("../shared/constants");
-const random_hash_1 = require("../shared/random-hash");
+const validate_bucketname_1 = require("../shared/validate-bucketname");
 const create_bucket_1 = require("./create-bucket");
-const enable_s3_website_1 = require("./enable-s3-website");
 const get_buckets_1 = require("./get-buckets");
 /**
  * @description Creates a bucket for Remotion Lambda in your S3 account. If one already exists, it will get returned instead.
@@ -22,16 +21,12 @@ const getOrCreateBucket = async (options) => {
         (_a = options.onBucketEnsured) === null || _a === void 0 ? void 0 : _a.call(options);
         return { bucketName: remotionBuckets[0].name };
     }
-    const bucketName = constants_1.REMOTION_BUCKET_PREFIX + (0, random_hash_1.randomHash)();
+    const bucketName = (0, validate_bucketname_1.makeBucketName)(options.region);
     await (0, create_bucket_1.createBucket)({
         bucketName,
         region: options.region,
     });
     (_b = options.onBucketEnsured) === null || _b === void 0 ? void 0 : _b.call(options);
-    await (0, enable_s3_website_1.enableS3Website)({
-        region: options.region,
-        bucketName,
-    });
     return { bucketName };
 };
 exports.getOrCreateBucket = getOrCreateBucket;

package/dist/api/get-regions.d.ts

@@ -1,7 +1,11 @@
-import { AwsRegion } from '../pricing/aws-regions';
+import type { AwsRegion } from '../pricing/aws-regions';
+declare type Options = {
+    enabledByDefaultOnly?: boolean;
+};
 /**
  * @description Gets an array of all supported AWS regions of this release of Remotion Lambda.
  * @link https://remotion.dev/docs/lambda/getregions
  * @returns {AwsRegion[]} A list of AWS regions.
  */
-export declare const getRegions: () => readonly AwsRegion[];
+export declare const getRegions: (options?: Options) => readonly AwsRegion[];
+export {};

package/dist/api/get-regions.js

@@ -1,13 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getRegions = void 0;
+const aws_regions_1 = require("../pricing/aws-regions");
 const regions_1 = require("../regions");
 /**
  * @description Gets an array of all supported AWS regions of this release of Remotion Lambda.
  * @link https://remotion.dev/docs/lambda/getregions
  * @returns {AwsRegion[]} A list of AWS regions.
  */
-const getRegions = () => {
-    return regions_1.AWS_REGIONS;
+const getRegions = (options) => {
+    var _a;
+    const onlyEnabledByDefault = (_a = options === null || options === void 0 ? void 0 : options.enabledByDefaultOnly) !== null && _a !== void 0 ? _a : false;
+    return onlyEnabledByDefault ? aws_regions_1.DEFAULT_AWS_REGIONS : regions_1.AWS_REGIONS;
 };
 exports.getRegions = getRegions;

package/dist/api/get-render-progress.d.ts

@@ -1,10 +1,12 @@
-import { AwsRegion } from '../pricing/aws-regions';
-import { RenderProgress } from '../shared/constants';
+import type { AwsRegion } from '../pricing/aws-regions';
+import type { CustomCredentials } from '../shared/aws-clients';
+import type { RenderProgress } from '../shared/constants';
 export declare type GetRenderInput = {
     functionName: string;
     bucketName: string;
     renderId: string;
     region: AwsRegion;
+    s3OutputProvider?: CustomCredentials;
 };
 /**
  * @description Gets the current status of a render originally triggered via renderMediaOnLambda().
@@ -13,6 +15,7 @@ export declare type GetRenderInput = {
  * @param {string} params.bucketName The name of the bucket that was used in the render.
  * @param {string} params.renderId The ID of the render that was returned by `renderMediaOnLambda()`.
  * @param {AwsRegion} params.region The region in which the render was triggered.
+ * @param {CustomCredentials} params.s3OutputProvider? Endpoint and credentials if the output file is stored outside of AWS.
  * @returns {Promise<RenderProgress>} See documentation for this function to see all properties on the return object.
  */
-export declare const getRenderProgress: ({ functionName, bucketName, renderId, region, }: GetRenderInput) => Promise<RenderProgress>;
+export declare const getRenderProgress: ({ functionName, bucketName, renderId, region, s3OutputProvider, }: GetRenderInput) => Promise<RenderProgress>;

package/dist/api/get-render-progress.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getRenderProgress = void 0;
+const version_1 = require("remotion/version");
 const call_lambda_1 = require("../shared/call-lambda");
 const constants_1 = require("../shared/constants");
 /**
@@ -10,15 +11,18 @@ const constants_1 = require("../shared/constants");
  * @param {string} params.bucketName The name of the bucket that was used in the render.
  * @param {string} params.renderId The ID of the render that was returned by `renderMediaOnLambda()`.
  * @param {AwsRegion} params.region The region in which the render was triggered.
+ * @param {CustomCredentials} params.s3OutputProvider? Endpoint and credentials if the output file is stored outside of AWS.
  * @returns {Promise<RenderProgress>} See documentation for this function to see all properties on the return object.
  */
-const getRenderProgress = async ({ functionName, bucketName, renderId, region, }) => {
+const getRenderProgress = async ({ functionName, bucketName, renderId, region, s3OutputProvider, }) => {
     const result = await (0, call_lambda_1.callLambda)({
         functionName,
         type: constants_1.LambdaRoutines.status,
         payload: {
             bucketName,
             renderId,
+            version: version_1.VERSION,
+            s3OutputProvider,
         },
         region,
     });

package/dist/api/get-sites.d.ts

@@ -1,5 +1,5 @@
-import { AwsRegion } from '../pricing/aws-regions';
-import { BucketWithLocation } from './get-buckets';
+import type { AwsRegion } from '../pricing/aws-regions';
+import type { BucketWithLocation } from './get-buckets';
 declare type Site = {
     sizeInBytes: number;
     lastModified: number | null;

package/dist/api/iam-validation/role-permissions.d.ts

@@ -1,4 +1,5 @@
-import { iam, lambda, logs, s3 } from 'aws-policies';
+import type { iam } from 'aws-policies';
+import { lambda, logs, s3 } from 'aws-policies';
 export declare const rolePermissions: {
     actions: (s3 | iam | lambda | logs)[];
     resource: string[];

package/dist/api/iam-validation/simulate-rule.d.ts

@@ -1,4 +1,4 @@
-import { AwsRegion } from '../../pricing/aws-regions';
+import type { AwsRegion } from '../../pricing/aws-regions';
 export declare type EvalDecision = 'allowed' | 'explicitDeny' | 'implicitDeny';
 export declare type SimulationResult = {
     decision: EvalDecision;

package/dist/api/iam-validation/simulate-rule.js

@@ -2,32 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulateRule = void 0;
 const client_iam_1 = require("@aws-sdk/client-iam");
-const aws_policies_1 = require("aws-policies");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulateRule = async (options) => {
     var _a;
     try {
-        if (options.actionNames.includes(aws_policies_1.iam.GetUser)) {
-            try {
-                await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
-                const result = [
-                    {
-                        decision: 'allowed',
-                        name: aws_policies_1.iam.GetUser,
-                    },
-                ];
-                return result;
-            }
-            catch (err) {
-                const result = [
-                    {
-                        decision: 'explicitDeny',
-                        name: aws_policies_1.iam.GetUser,
-                    },
-                ];
-                return result;
-            }
-        }
         const res = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.SimulatePrincipalPolicyCommand({
             ActionNames: options.actionNames,
             PolicySourceArn: options.arn,

package/dist/api/iam-validation/simulate.d.ts

@@ -1,5 +1,5 @@
-import { AwsRegion } from '../../pricing/aws-regions';
-import { SimulationResult } from './simulate-rule';
+import type { AwsRegion } from '../../pricing/aws-regions';
+import type { SimulationResult } from './simulate-rule';
 export declare const logPermissionOutput: (output: SimulationResult) => string;
 export declare type SimulatePermissionsInput = {
     region: AwsRegion;

package/dist/api/iam-validation/simulate.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulatePermissions = exports.logPermissionOutput = void 0;
-const client_iam_1 = require("@aws-sdk/client-iam");
+const client_sts_1 = require("@aws-sdk/client-sts");
 const aws_clients_1 = require("../../shared/aws-clients");
 const simulate_rule_1 = require("./simulate-rule");
 const user_permissions_1 = require("./user-permissions");
@@ -26,15 +26,34 @@ exports.logPermissionOutput = logPermissionOutput;
  */
 const simulatePermissions = async (options) => {
     var _a;
-    const user = await (0, aws_clients_1.getIamClient)(options.region).send(new client_iam_1.GetUserCommand({}));
-    if (!user || !user.User) {
-        throw new Error('No valid AWS user detected');
+    const callerIdentity = await (0, aws_clients_1.getStsClient)(options.region).send(new client_sts_1.GetCallerIdentityCommand({}));
+    if (!callerIdentity || !callerIdentity.Arn) {
+        throw new Error('No valid AWS Caller Identity detected');
+    }
+    const callerIdentityArnComponents = callerIdentity.Arn.match(/arn:aws:([^:]+)::(\d+):([^/]+)(.*)/);
+    if (!callerIdentityArnComponents) {
+        throw new Error('Unknown AWS Caller Identity ARN detected');
+    }
+    const callerIdentityArnType = callerIdentityArnComponents[1];
+    let callerArn;
+    if (callerIdentityArnType === 'iam' && callerIdentityArnComponents[3] === 'user') {
+        callerArn = callerIdentity.Arn;
+    }
+    else if (callerIdentityArnType === 'sts' && callerIdentityArnComponents[3] === 'assumed-role') {
+        const assumedRoleComponents = callerIdentityArnComponents[4].match(/\/([^/]+)\/(.*)/);
+        if (!assumedRoleComponents) {
+            throw new Error('Unsupported AWS Caller Identity as Assumed-Role ARN detected');
+        }
+        callerArn = `arn:aws:iam::${callerIdentityArnComponents[2]}:role/${assumedRoleComponents[1]}`;
+    }
+    else {
+        throw new Error('Unsupported AWS Caller Identity ARN detected');
     }
     const results = [];
     for (const per of user_permissions_1.requiredPermissions) {
         const result = await (0, simulate_rule_1.simulateRule)({
             actionNames: per.actions,
-            arn: user.User.Arn,
+            arn: callerArn,
             region: options.region,
             resource: per.resource,
             retries: 2,

package/dist/api/iam-validation/user-permissions.js

@@ -15,12 +15,6 @@ exports.requiredPermissions = [
         ],
         resource: ['*'],
     },
-    {
-        id: 'Identity',
-        actions: [aws_policies_1.iam.GetUser],
-        // eslint-disable-next-line no-template-curly-in-string
-        resource: ['arn:aws:iam::*:user/${aws:username}'],
-    },
     {
         id: 'PermissionValidation',
         actions: [aws_policies_1.iam.SimulatePrincipalPolicy],
@@ -43,8 +37,6 @@ exports.requiredPermissions = [
             aws_policies_1.s3.GetBucketLocation,
             aws_policies_1.s3.PutBucketAcl,
             aws_policies_1.s3.DeleteBucket,
-            aws_policies_1.s3.PutBucketWebsite,
-            aws_policies_1.s3.DeleteBucketWebsite,
         ],
         resource: [`arn:aws:s3:::${constants_1.REMOTION_BUCKET_PREFIX}*`],
     },

package/dist/api/mock-functions.d.ts

@@ -1,19 +1,18 @@
-import { AwsRegion } from '../pricing/aws-regions';
-import { LambdaVersions } from '../shared/constants';
-import { FunctionInfo } from './get-function-info';
+import type { AwsRegion } from '../pricing/aws-regions';
+import type { FunctionInfo } from './get-function-info';
 export declare let mockFunctionsStore: (FunctionInfo & {
     region: AwsRegion;
-    version: LambdaVersions;
+    version: string;
 })[];
 export declare const addFunction: (fn: FunctionInfo, region: AwsRegion) => void;
 export declare const deleteMockFunction: (name: string, region: string) => void;
 export declare const findFunction: (name: string, region: string) => (FunctionInfo & {
     region: AwsRegion;
-    version: LambdaVersions;
+    version: string;
 }) | undefined;
-export declare const getAllMockFunctions: (region: string, version: LambdaVersions | null) => (FunctionInfo & {
+export declare const getAllMockFunctions: (region: string, version: string | null) => (FunctionInfo & {
     region: AwsRegion;
-    version: LambdaVersions;
+    version: string;
 })[];
 export declare const cleanFnStore: () => void;
 export declare const markFunctionAsIncompatible: (functionName: string) => void;

package/dist/api/presign-url.d.ts

@@ -1,5 +1,5 @@
-import { AwsRegion } from '../pricing/aws-regions';
-export declare type PresignURLInput = {
+import type { AwsRegion } from '../pricing/aws-regions';
+declare type PresignURLInput = {
     region: AwsRegion;
     bucketName: string;
     objectKey: string;
@@ -17,3 +17,4 @@ export declare type PresignURLInput = {
  * @returns {Promise<string | null>} The public url of an object or `null` if `checkIfObjectExists=true` & object does not exist.
  */
 export declare const presignUrl: ({ region, bucketName, objectKey, checkIfObjectExists, expiresInSeconds, }: PresignURLInput) => Promise<string | null>;
+export {};

package/dist/api/presign-url.js

@@ -19,7 +19,7 @@ const validate_presign_expiration_1 = require("../shared/validate-presign-expira
 const presignUrl = async ({ region, bucketName, objectKey, checkIfObjectExists = false, expiresInSeconds, }) => {
     (0, validate_bucketname_1.validateBucketName)(bucketName, { mustStartWithRemotion: false });
     (0, validate_presign_expiration_1.validatePresignExpiration)(expiresInSeconds);
-    const s3Client = (0, aws_clients_1.getS3Client)(region);
+    const s3Client = (0, aws_clients_1.getS3Client)(region, null);
     if (checkIfObjectExists) {
         try {
             await s3Client.send(new client_s3_1.HeadObjectCommand({
@@ -31,6 +31,11 @@ const presignUrl = async ({ region, bucketName, objectKey, checkIfObjectExists =
             if (err.name === 'NotFound') {
                 return null;
             }
+            if (err.message === 'UnknownError' ||
+                err.$metadata
+                    .httpStatusCode === 403) {
+                throw new Error(`Unable to access item "${objectKey}" from bucket "${bucketName}". You must have permission for both "s3:GetObject" and "s3:ListBucket" actions.`);
+            }
             throw err;
         }
     }