@reventlessdev/rescript-pulumi-aws 2.4.0-alpha.43

package/src/ECS/ECS_Cluster.res

@@ -0,0 +1,10 @@
+/** @pulumi/aws/ecs/cluster
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/ecs/cluster/
+*/
+type t = {arn: Pulumi.Output.t<string>, id: Pulumi.Output.t<string>}
+
+type args = {name?: Pulumi.Input.t<string>}
+
+@module("@pulumi/aws") @scope("ecs") @new
+external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
+  "Cluster"

package/src/ECS/ECS_Cluster.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/ECS/ECS_Container.res

@@ -0,0 +1,58 @@
+type protocol = | @as("tcp") TCP | @as("udp") UDP
+type portMapping = {containerPort?: int, hostPort?: int, protocol?: protocol}
+type keyValuePair = {name: string, value: string}
+type repositoryCredentials = {credentialsParameter: string}
+
+type secret = {
+  name: string,
+  /** secret to expose to the container. The supported values are either the full ARN of the
+   *  AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager
+   *  Parameter Store */
+  valueFrom: string,
+}
+
+type logOptions = {
+  @as("awslogs-create-group") awslogsCreateGroup: bool,
+  @as("awslogs-group") awslogsGroup: string,
+  @as("awslogs-region") awslogsRegion: string,
+  @as("awslogs-stream-prefix") awslogsStreamPrefix: string,
+}
+
+type logConfiguration = {logDriver: string, options?: logOptions}
+
+type ulimitName = [
+  | #core
+  | #cpu
+  | #data
+  | #fsize
+  | #locks
+  | #memlock
+  | #msgqueue
+  | #nice
+  | #nofile
+  | #nproc
+  | #rss
+  | #rtprio
+  | #rttime
+  | #sigpending
+  | #stack
+]
+type ulimit = {
+  name: ulimitName,
+  hardLimit: int,
+  softLimit: int,
+}
+
+type containerDefinition = {
+  name: string,
+  cpu?: int,
+  environment?: array<keyValuePair>,
+  essential?: bool,
+  image?: string,
+  logConfiguration?: logConfiguration,
+  memory?: int,
+  portMappings?: array<portMapping>,
+  repositoryCredentials?: repositoryCredentials,
+  secrets?: array<secret>,
+  ulimits?: array<ulimit>,
+}

package/src/ECS/ECS_Container.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/ECS/ECS_TaskDefinition.res

@@ -0,0 +1,31 @@
+/** @pulumi/aws/ecs/taskdefinition
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/ecs/taskdefinition/
+*/
+type t = {
+  arn: Pulumi.Output.t<string>,
+  id: Pulumi.Output.t<string>,
+  revision: Pulumi.Output.t<int>,
+}
+
+type args = {
+  /** unique name for your task definition. */
+  family: Pulumi.Input.t<string>,
+  /** A list of valid container definitions provided as a single valid JSON document. */
+  containerDefinitions: Pulumi.Input.t<string>,
+  /** Number of cpu units used by the task. If the requires_compatibilities is FARGATE this field is required. */
+  cpu?: Pulumi.Input.t<string>,
+  /** Amount (in MiB) of memory used by the task. If the requires_compatibilities is FARGATE this field is required. */
+  memory?: Pulumi.Input.t<string>,
+  /** Docker networking mode to use for the containers in the task. */
+  networkMode?: [#none | #bridge | #awsvpc | #host],
+  /** Set of launch types required by the task. */
+  requiresCompatibilities?: array<string>, // TODO: narrow down type
+  /** ARN of the task execution role that the Amazon ECS container agent and the Docker daemon can assume. */
+  executionRoleArn?: Pulumi.Input.t<string>,
+  /** ARN of IAM role that allows your Amazon ECS container task to make calls to other AWS services. */
+  taskRoleArn?: Pulumi.Input.t<string>,
+}
+
+@module("@pulumi/aws") @scope("ecs") @new
+external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
+  "TaskDefinition"

package/src/ECS/ECS_TaskDefinition.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/IAM/IAM.res

@@ -0,0 +1,148 @@
+/** @pulumi/aws/iam
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/iam/getpolicydocument
+*/
+type principal = {identifiers: array<string>, @as("type") type_: string}
+
+type statement = {
+  actions: array<string>,
+  principals: array<principal>,
+  resources: array<string>,
+}
+
+type args = {statements: array<statement>}
+
+@val @module("@pulumi/aws") @scope("iam")
+external getPolicyDocument: (
+  ~args: args=?,
+  ~opts: Pulumi.InvokeOptions.t=?,
+) => promise<PolicyDocument.t> = "getPolicyDocument"
+
+/** @pulumi/aws/iam
+  see: https://www.pulumi.com/registry/packages/aws/api-docs/iam/policy
+*/
+module Policy = {
+  type t = {arn: Pulumi.Output.t<Aws.arn>}
+
+  type args = {
+    policy: Pulumi.Input.t<string>,
+    description?: Pulumi.Input.t<string>,
+    name?: Pulumi.Input.t<string>,
+    namePrefix?: Pulumi.Input.t<string>,
+    path?: Pulumi.Input.t<string>,
+  }
+
+  @module("@pulumi/aws") @scope("iam") @new
+  external make: (~name: string, ~args: args, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
+    "Policy"
+
+  let assumeRolePolicy = (name, serviceId) =>
+    PolicyDocument.make(
+      ~id=name ++ "TrustPolicy",
+      ~statements=[
+        {
+          sid: name->String.split("-")->Array.getUnsafe(0) ++ "TrustPolicyStatement",
+          principal: PolicyDocument.Principals({service: PrincipalId(serviceId)}),
+          effect: PolicyDocument.Allow,
+          actions: PolicyDocument.Action("sts:AssumeRole"),
+        },
+      ],
+    )->PolicyDocument.toJsonString
+}
+
+module InlinePolicy = {
+  type t = {name: string, policy: string}
+
+  let makeForActions = (~name, ~actions) => {
+    {
+      name,
+      policy: PolicyDocument.make(
+        ~statements=[
+          {
+            sid: "InlinePolicyAllow",
+            effect: PolicyDocument.Allow,
+            actions: PolicyDocument.Actions(actions),
+            resources: PolicyDocument.AllResources,
+          },
+        ],
+      )->PolicyDocument.toJsonString,
+    }
+  }
+}
+
+module Role = {
+  type t = {
+    arn: Pulumi.Output.t<string>,
+    name: Pulumi.Output.t<string>,
+    id: Pulumi.Output.t<string>,
+  }
+
+  type args = {
+    name?: Pulumi.Input.t<string>,
+    assumeRolePolicy: Pulumi.Input.t<string>,
+    inlinePolicies?: Pulumi.Input.t<array<InlinePolicy.t>>, //deprecated
+    tags?: Pulumi.Input.t<Aws.tags>,
+  }
+
+  @module("@pulumi/aws") @scope("iam") @new
+  external make: (
+    ~name: string,
+    ~args: args=?,
+    ~opts: option<Pulumi.CustomResourceOptions.t>=?,
+  ) => t = "Role"
+
+  let makeWithDefaultPolicy = (
+    ~name: string,
+    ~servicePrincipal: Pulumi.Output.t<string>,
+    ~opts: option<Pulumi.CustomResourceOptions.t>=?,
+  ) =>
+    make(
+      ~name,
+      ~args={
+        assumeRolePolicy: servicePrincipal
+        ->Pulumi.Output.apply(principal => Policy.assumeRolePolicy(name, principal))
+        ->Pulumi.Output.asInput,
+      },
+      ~opts,
+    )
+
+  @module("@pulumi/aws") @scope(("iam", "Role"))
+  external get: (
+    ~name: string,
+    ~id: Pulumi.Input.t<string>,
+    ~opts: Pulumi.CustomResourceOptions.t=?,
+  ) => t = "get"
+}
+
+module RolePolicy = {
+  type t = {
+    arn: Pulumi.Output.t<string>,
+    name: Pulumi.Output.t<string>,
+    id: Pulumi.Output.t<string>,
+  }
+
+  type args = {
+    name?: Pulumi.Input.t<string>,
+    policy: Pulumi.Input.t<string>,
+    role: Pulumi.Input.t<string>,
+    tags?: Pulumi.Input.t<Aws.tags>,
+  }
+
+  @module("@pulumi/aws") @scope("iam") @new
+  external make: (~name: string, ~args: args=?, ~opts: Pulumi.CustomResourceOptions.t=?) => t =
+    "RolePolicy"
+}
+
+module RolePolicyAttachment = {
+  type t = {id: Pulumi.Output.t<string>}
+
+  type args = {policyArn: Pulumi.Input.t<string>, role: Pulumi.Input.t<string>}
+
+  @module("@pulumi/aws") @scope("iam") @new
+  external make: (
+    ~name: string,
+    ~args: args=?,
+    ~opts: option<Pulumi.CustomResourceOptions.t>,
+  ) => t = "RolePolicyAttachment"
+}
+
+module ManagedPolicies = IAM_ManagedPolicies

package/src/IAM/IAM.res.mjs

@@ -0,0 +1,61 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Aws from "@pulumi/aws";
+import * as PolicyDocument$PulumiAws from "./PolicyDocument.res.mjs";
+
+function assumeRolePolicy(name, serviceId) {
+  return PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "TrustPolicy", [{
+      Sid: name.split("-")[0] + "TrustPolicyStatement",
+      Principal: {
+        Service: serviceId
+      },
+      Effect: "Allow",
+      Action: "sts:AssumeRole"
+    }]));
+}
+
+let Policy = {
+  assumeRolePolicy: assumeRolePolicy
+};
+
+function makeForActions(name, actions) {
+  return {
+    name: name,
+    policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, undefined, [{
+        Sid: "InlinePolicyAllow",
+        Effect: "Allow",
+        Action: actions,
+        Resource: "*"
+      }]))
+  };
+}
+
+let InlinePolicy = {
+  makeForActions: makeForActions
+};
+
+function makeWithDefaultPolicy(name, servicePrincipal, opts) {
+  return new (Aws.iam.Role)(name, {
+    assumeRolePolicy: servicePrincipal.apply(principal => assumeRolePolicy(name, principal))
+  }, opts);
+}
+
+let Role = {
+  makeWithDefaultPolicy: makeWithDefaultPolicy
+};
+
+let RolePolicy = {};
+
+let RolePolicyAttachment = {};
+
+let ManagedPolicies;
+
+export {
+  Policy,
+  InlinePolicy,
+  Role,
+  RolePolicy,
+  RolePolicyAttachment,
+  ManagedPolicies,
+}
+/* @pulumi/aws Not a pure module */

package/src/IAM/IAM_ManagedPolicies.res

@@ -0,0 +1,32 @@
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external lambdaFullAccess: string = "LambdaFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external cognitoPowerUser: string = "AmazonCognitoPowerUser"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external dynamoDBFullAccess: string = "AmazonDynamoDBFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external iamFullAccess: string = "IAMFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external s3FullAccess: string = "AmazonS3FullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external snsFullAccess: string = "AmazonSNSFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external sqsFullAccess: string = "AmazonSQSFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external xrayFullAccess: string = "AWSXrayFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external cloudWatchFullAccess: string = "CloudWatchFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external cloudWatchEventsFullAccess: string = "CloudWatchEventsFullAccess"
+
+@val @module("@pulumi/aws/iam") @scope("ManagedPolicy")
+external lambdaVPCAccessExecutionRole: string = "AWSLambdaVPCAccessExecutionRole"

package/src/IAM/IAM_ManagedPolicies.res.mjs

@@ -0,0 +1,2 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+/* This output is empty. Its source's type definitions, externals and/or unused code got optimized away. */

package/src/IAM/PolicyDocument.res

@@ -0,0 +1,163 @@
+/**
+ https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html
+ */
+@schema
+type version = | @as("2008-10-17") Version2008 | @as("2012-10-17") Version2012
+
+@schema
+type effect = Allow | Deny
+
+@schema @unboxed type principalEntry = PrincipalId(string) | PrincipalIds(array<string>)
+@schema
+type principal = {
+  @as("AWS") aws?: principalEntry,
+  @as("Federated") federated?: principalEntry,
+  @as("Service") service?: principalEntry,
+  @as("CanonicalUser") canonicalUser?: principalEntry,
+}
+@schema @unboxed type principals = | @as("*") AllPrincipals | Principals(principal)
+
+@schema @unboxed
+type actions = | @as("*") AllActions | Action(string) | Actions(array<string>)
+
+@schema @unboxed
+type resources =
+  | @as("*") AllResources
+  | Resource(string)
+  | Resources(array<string>)
+
+//TODO allow entry like: "key": "singleValue"
+@schema @unboxed
+type conditionEntry = ConditionValue(string) | ConditionValues(array<string>)
+@schema
+type conditionMap = dict<conditionEntry>
+/**
+ https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Numeric
+ */
+@schema
+type condition = {
+  //String condition operators
+  @as("StringEquals") stringEquals?: conditionMap,
+  @as("StringNotEquals") stringNotEquals?: conditionMap,
+  @as("StringEqualsIgnoreCase") stringEqualsIgnoreCase?: conditionMap,
+  @as("StringNotEqualsIgnoreCase") stringNotEqualsIgnoreCase?: conditionMap,
+  @as("StringLike") stringLike?: conditionMap,
+  @as("StringNotLike") stringNotLike?: conditionMap,
+  //Numeric condition operators
+  @as("NumericEquals") numericEquals?: conditionMap,
+  @as("NumericNotEquals") numericNotEquals?: conditionMap,
+  @as("NumericLessThan") numericLessThan?: conditionMap,
+  @as("NumericLessThanEquals") numericLessThanEquals?: conditionMap,
+  @as("NumericGreaterThan") numericGreaterThan?: conditionMap,
+  @as("NumericGreaterThanEquals") numericGreaterThanEquals?: conditionMap,
+  //Date condition operators
+  @as("DateEquals") dateEquals?: conditionMap,
+  @as("DateNotEquals") dateNotEquals?: conditionMap,
+  @as("DateLessThan") dateLessThan?: conditionMap,
+  @as("DateLessThanEquals") dateThanEquals?: conditionMap,
+  @as("DateGreaterThan") dateGreaterThan?: conditionMap,
+  @as("DateGreaterThanEquals") dateGreaterThanEquals?: conditionMap,
+  //Boolean condition operators
+  @as("Bool") boolean?: conditionMap,
+  //Binary condition operators
+  @as("Binary") binary?: conditionMap,
+  //ARN condition operators
+  @as("ArnEquals") arnEquals?: conditionMap,
+  @as("ArnLike") arnLike?: conditionMap,
+  @as("ArnNotEquals") arnNotEquals?: conditionMap,
+  @as("ArnNotLike") arnNotLike?: conditionMap,
+  //If Exists operators
+  //String condition operators
+  @as("StringEqualsIfExists") stringEqualsIfExists?: conditionMap,
+  @as("StringNotEqualsIfExists") stringNotEqualsIfExists?: conditionMap,
+  @as("StringEqualsIgnoreCaseIfExists") stringEqualsIgnoreCaseIfExists?: conditionMap,
+  @as("StringNotEqualsIgnoreCaseIfExists") stringNotEqualsIgnoreCaseIfExists?: conditionMap,
+  @as("StringLikeIfExists") stringLikeIfExists?: conditionMap,
+  @as("StringNotLikeIfExists") stringNotLikeIfExists?: conditionMap,
+  //Numeric condition operators
+  @as("NumericEqualsIfExists") numericEqualsIfExists?: conditionMap,
+  @as("NumericNotEqualsIfExists") numericNotEqualsIfExists?: conditionMap,
+  @as("NumericLessThanIfExists") numericLessThanIfExists?: conditionMap,
+  @as("NumericLessThanEqualsIfExists") numericLessThanEqualsIfExists?: conditionMap,
+  @as("NumericGreaterThanIfExists") numericGreaterThanIfExists?: conditionMap,
+  @as("NumericGreaterThanEqualsIfExists") numericGreaterThanEqualsIfExists?: conditionMap,
+  //Date condition operators
+  @as("DateEqualsIfExists") dateEqualsIfExists?: conditionMap,
+  @as("DateNotEqualsIfExists") dateNotEqualsIfExists?: conditionMap,
+  @as("DateLessThanIfExists") dateLessThanIfExists?: conditionMap,
+  @as("DateLessThanEqualsIfExists") dateThanEqualsIfExists?: conditionMap,
+  @as("DateGreaterThanIfExists") dateGreaterThanIfExists?: conditionMap,
+  @as("DateGreaterThanEqualsIfExists") dateGreaterThanEqualsIfExists?: conditionMap,
+  //Boolean condition operators
+  @as("BoolIfExists") booleanIfExists?: conditionMap,
+  //Binary condition operators
+  @as("BinaryIfExists") binaryIfExists?: conditionMap,
+  //ARN condition operators
+  @as("ArnEqualsIfExists") arnEqualsIfExists?: conditionMap,
+  @as("ArnLikeIfExists") arnLikeIfExists?: conditionMap,
+  @as("ArnNotEqualsIfExists") arnNotEqualsIfExists?: conditionMap,
+  @as("ArnNotLikeIfExists") arnNotLikeIfExists?: conditionMap,
+  //Existence check operator
+  @as("Null") null?: conditionMap,
+}
+
+@schema
+type statement = {
+  @as("Sid") sid?: string,
+  @as("Principal") principal?: principals,
+  @as("NotPrincipal") notPrincipal?: principals,
+  @as("Effect") effect: effect,
+  @as("Action") actions?: actions,
+  @as("NotAction") notAction?: actions,
+  @as("Resource") resources?: resources,
+  @as("NotResource") notResource?: resources,
+  @as("Condition") conditions?: condition,
+}
+
+@schema
+type policy = {
+  @as("Version") version: version,
+  @as("Id") id?: string,
+  @as("Statement") statements: array<statement>, //TODO add single statement support
+}
+type t = policy
+
+let toJsonString: t => string = t => {
+  t
+  ->S.reverseConvertToJsonOrThrow(policySchema)
+  ->JSON.stringify(~space=1)
+}
+
+let fromJsonString: string => t = (policyString: string) =>
+  policyString->S.parseJsonStringOrThrow(policySchema)
+
+let make = (~version=Version2012, ~id=?, ~statements) => {
+  version,
+  ?id,
+  statements,
+}
+
+type mergeArgs = {
+  sourcePolicyDocuments: Pulumi.Input.t<array<Pulumi.Input.t<string>>>,
+  policyId: string,
+}
+type mergeResult = {json: string}
+
+@module("@pulumi/aws") @scope("iam")
+external merge: (~args: mergeArgs) => Pulumi.Output.t<mergeResult> = "getPolicyDocumentOutput"
+
+let mergePolicyDocuments: (string, array<t>) => Pulumi.Output.t<string> = (
+  policyId,
+  policyDocuments,
+) => {
+  merge(
+    ~args={
+      sourcePolicyDocuments: policyDocuments
+      ->Array.map(policyDocument => policyDocument->toJsonString->Pulumi.Input.make)
+      ->Pulumi.Input.make,
+      policyId,
+    },
+  )->Pulumi.Output.apply(policyDocument => {
+    policyDocument.json
+  })
+}

package/src/IAM/PolicyDocument.res.mjs

@@ -0,0 +1,164 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as S from "sury/src/S.res.mjs";
+import * as Aws from "@pulumi/aws";
+
+let versionSchema = S.union([
+  S.literal("2008-10-17"),
+  S.literal("2012-10-17")
+]);
+
+let effectSchema = S.union([
+  S.literal("Allow"),
+  S.literal("Deny")
+]);
+
+let principalEntrySchema = S.union([
+  S.schema(s => (s.m(S.string))),
+  S.schema(s => (s.m(S.array(S.string))))
+]);
+
+let principalSchema = S.schema(s => ({
+  AWS: s.m(S.option(principalEntrySchema)),
+  Federated: s.m(S.option(principalEntrySchema)),
+  Service: s.m(S.option(principalEntrySchema)),
+  CanonicalUser: s.m(S.option(principalEntrySchema))
+}));
+
+let principalsSchema = S.union([
+  S.literal("*"),
+  S.schema(s => (s.m(principalSchema)))
+]);
+
+let actionsSchema = S.union([
+  S.literal("*"),
+  S.schema(s => (s.m(S.string))),
+  S.schema(s => (s.m(S.array(S.string))))
+]);
+
+let resourcesSchema = S.union([
+  S.literal("*"),
+  S.schema(s => (s.m(S.string))),
+  S.schema(s => (s.m(S.array(S.string))))
+]);
+
+let conditionEntrySchema = S.union([
+  S.schema(s => (s.m(S.string))),
+  S.schema(s => (s.m(S.array(S.string))))
+]);
+
+let conditionMapSchema = S.dict(conditionEntrySchema);
+
+let conditionSchema = S.schema(s => ({
+  StringEquals: s.m(S.option(conditionMapSchema)),
+  StringNotEquals: s.m(S.option(conditionMapSchema)),
+  StringEqualsIgnoreCase: s.m(S.option(conditionMapSchema)),
+  StringNotEqualsIgnoreCase: s.m(S.option(conditionMapSchema)),
+  StringLike: s.m(S.option(conditionMapSchema)),
+  StringNotLike: s.m(S.option(conditionMapSchema)),
+  NumericEquals: s.m(S.option(conditionMapSchema)),
+  NumericNotEquals: s.m(S.option(conditionMapSchema)),
+  NumericLessThan: s.m(S.option(conditionMapSchema)),
+  NumericLessThanEquals: s.m(S.option(conditionMapSchema)),
+  NumericGreaterThan: s.m(S.option(conditionMapSchema)),
+  NumericGreaterThanEquals: s.m(S.option(conditionMapSchema)),
+  DateEquals: s.m(S.option(conditionMapSchema)),
+  DateNotEquals: s.m(S.option(conditionMapSchema)),
+  DateLessThan: s.m(S.option(conditionMapSchema)),
+  DateLessThanEquals: s.m(S.option(conditionMapSchema)),
+  DateGreaterThan: s.m(S.option(conditionMapSchema)),
+  DateGreaterThanEquals: s.m(S.option(conditionMapSchema)),
+  Bool: s.m(S.option(conditionMapSchema)),
+  Binary: s.m(S.option(conditionMapSchema)),
+  ArnEquals: s.m(S.option(conditionMapSchema)),
+  ArnLike: s.m(S.option(conditionMapSchema)),
+  ArnNotEquals: s.m(S.option(conditionMapSchema)),
+  ArnNotLike: s.m(S.option(conditionMapSchema)),
+  StringEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  StringNotEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  StringEqualsIgnoreCaseIfExists: s.m(S.option(conditionMapSchema)),
+  StringNotEqualsIgnoreCaseIfExists: s.m(S.option(conditionMapSchema)),
+  StringLikeIfExists: s.m(S.option(conditionMapSchema)),
+  StringNotLikeIfExists: s.m(S.option(conditionMapSchema)),
+  NumericEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  NumericNotEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  NumericLessThanIfExists: s.m(S.option(conditionMapSchema)),
+  NumericLessThanEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  NumericGreaterThanIfExists: s.m(S.option(conditionMapSchema)),
+  NumericGreaterThanEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  DateEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  DateNotEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  DateLessThanIfExists: s.m(S.option(conditionMapSchema)),
+  DateLessThanEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  DateGreaterThanIfExists: s.m(S.option(conditionMapSchema)),
+  DateGreaterThanEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  BoolIfExists: s.m(S.option(conditionMapSchema)),
+  BinaryIfExists: s.m(S.option(conditionMapSchema)),
+  ArnEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  ArnLikeIfExists: s.m(S.option(conditionMapSchema)),
+  ArnNotEqualsIfExists: s.m(S.option(conditionMapSchema)),
+  ArnNotLikeIfExists: s.m(S.option(conditionMapSchema)),
+  Null: s.m(S.option(conditionMapSchema))
+}));
+
+let statementSchema = S.schema(s => ({
+  Sid: s.m(S.option(S.string)),
+  Principal: s.m(S.option(principalsSchema)),
+  NotPrincipal: s.m(S.option(principalsSchema)),
+  Effect: s.m(effectSchema),
+  Action: s.m(S.option(actionsSchema)),
+  NotAction: s.m(S.option(actionsSchema)),
+  Resource: s.m(S.option(resourcesSchema)),
+  NotResource: s.m(S.option(resourcesSchema)),
+  Condition: s.m(S.option(conditionSchema))
+}));
+
+let policySchema = S.schema(s => ({
+  Version: s.m(versionSchema),
+  Id: s.m(S.option(S.string)),
+  Statement: s.m(S.array(statementSchema))
+}));
+
+function toJsonString(t) {
+  return JSON.stringify(S.reverseConvertToJsonOrThrow(t, policySchema), undefined, 1);
+}
+
+function fromJsonString(policyString) {
+  return S.parseJsonStringOrThrow(policyString, policySchema);
+}
+
+function make(versionOpt, id, statements) {
+  let version = versionOpt !== undefined ? versionOpt : "2012-10-17";
+  return {
+    Version: version,
+    Id: id,
+    Statement: statements
+  };
+}
+
+function mergePolicyDocuments(policyId, policyDocuments) {
+  return Aws.iam.getPolicyDocumentOutput({
+    sourcePolicyDocuments: policyDocuments.map(toJsonString),
+    policyId: policyId
+  }).apply(policyDocument => policyDocument.json);
+}
+
+export {
+  versionSchema,
+  effectSchema,
+  principalEntrySchema,
+  principalSchema,
+  principalsSchema,
+  actionsSchema,
+  resourcesSchema,
+  conditionEntrySchema,
+  conditionMapSchema,
+  conditionSchema,
+  statementSchema,
+  policySchema,
+  toJsonString,
+  fromJsonString,
+  make,
+  mergePolicyDocuments,
+}
+/* versionSchema Not a pure module */