@reventlessdev/reventless-aws 3.0.0-alpha.167

package/src/util/Util_CognitoGroupUser.res.mjs

@@ -0,0 +1,32 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Aws from "@pulumi/aws";
+import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
+import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
+
+function addUserGroup(name, userPoolId) {
+  return new (Aws.cognito.UserGroup)("UserGroup-" + name, {
+    name: name,
+    userPoolId: userPoolId
+  });
+}
+
+function makeAddRemoveUserToGroupPolicy(name, userPoolArn, opts) {
+  return userPoolArn.apply(userPoolArn => new (Aws.iam.Policy)(name + "AddRemoveUserToGroup", {
+    policy: PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "UserPoolPolicy", [{
+        Sid: "AllowAdminAddRemoveUserToGroup",
+        Effect: "Allow",
+        Action: [
+          "cognito-idp:AdminAddUserToGroup",
+          "cognito-idp:AdminRemoveUserFromGroup"
+        ],
+        Resource: userPoolArn
+      }]))
+  }, opts !== undefined ? Primitive_option.valFromOption(opts) : undefined));
+}
+
+export {
+  addUserGroup,
+  makeAddRemoveUserToGroupPolicy,
+}
+/* @pulumi/aws Not a pure module */

package/src/util/Util_CognitoGroupUser_Runtime.res

@@ -0,0 +1,65 @@
+// NOTE: following functions combine pulumi & aws-sdk -> should stay separated in reventless
+
+open AwsSdk
+
+/** add a user to a given group of a given userPool */
+let addUserToGroup = (
+  ~region: string,
+  ~userName: string,
+  ~groupName: string,
+  ~userPoolId: string,
+) =>
+  Effect.tryPromise(
+    ~catch=Cognito_Error.classify,
+    () => {
+      open CognitoIdentityServiceProvider
+      let client: CognitoIdentityServiceProvider.client = Raw.client(
+        ~options={endpoint: Util_Cognito_Runtime.userPoolEndpoint(region, userPoolId), region},
+      )
+      let addUserToGroupCommand: AdminAddUserToGroupCommand.t = {
+        username: userName,
+        groupName,
+        userPoolId,
+      }->AdminAddUserToGroupCommand.make
+      client->AdminAddUserToGroupCommand.Raw.send(addUserToGroupCommand)
+    },
+  )
+  ->Effect.map(_ => ())
+  ->Effect.retry(Cognito_Error.retrySchedule)
+  ->Effect.catchAll(err => {
+    let msg = Cognito_Error.message(err)
+    ReventlessCore.EffectLogger.logError(~comp=__MODULE__, `addUserToGroup: ${msg}`)
+    ->Effect.flatMap(_ => Effect.fail(msg))
+  })
+  ->Effect.runPromise
+
+/** remove a user from a given group of a given userPool */
+let removeUserFromGroup = (
+  ~region: string,
+  ~userName: string,
+  ~groupName: string,
+  ~userPoolId: string,
+) =>
+  Effect.tryPromise(
+    ~catch=Cognito_Error.classify,
+    () => {
+      open CognitoIdentityServiceProvider
+      let client: CognitoIdentityServiceProvider.client = Raw.client(
+        ~options={endpoint: Util_Cognito_Runtime.userPoolEndpoint(region, userPoolId), region},
+      )
+      let removeUserFromGroupCommand = AdminRemoveUserFromGroupCommand.make({
+        username: userName,
+        groupName,
+        userPoolId,
+      })
+      client->AdminRemoveUserFromGroupCommand.Raw.send(removeUserFromGroupCommand)
+    },
+  )
+  ->Effect.map(_ => ())
+  ->Effect.retry(Cognito_Error.retrySchedule)
+  ->Effect.catchAll(err => {
+    let msg = Cognito_Error.message(err)
+    ReventlessCore.EffectLogger.logError(~comp=__MODULE__, `removeUserFromGroup: ${msg}`)
+    ->Effect.flatMap(_ => Effect.fail(msg))
+  })
+  ->Effect.runPromise

package/src/util/Util_CognitoGroupUser_Runtime.res.mjs

@@ -0,0 +1,50 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Effect from "@reventlessdev/rescript-effect/src/Effect.res.mjs";
+import * as Effect$1 from "effect/Effect";
+import * as Cognito_Error$ReventlessAws from "../errors/Cognito_Error.res.mjs";
+import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
+import * as Util_Cognito_Runtime$ReventlessAws from "./Util_Cognito_Runtime.res.mjs";
+import * as ClientCognitoIdentityProvider from "@aws-sdk/client-cognito-identity-provider";
+
+function addUserToGroup(region, userName, groupName, userPoolId) {
+  return Effect$1.runPromise(Effect$1.catchAll(Effect$1.retry(Effect$1.map(Effect.tryPromise(Cognito_Error$ReventlessAws.classify, () => {
+    let client = new ClientCognitoIdentityProvider.CognitoIdentityProviderClient({
+      endpoint: Util_Cognito_Runtime$ReventlessAws.userPoolEndpoint(region, userPoolId),
+      region: region
+    });
+    let addUserToGroupCommand = new ClientCognitoIdentityProvider.AdminAddUserToGroupCommand({
+      Username: userName,
+      GroupName: groupName,
+      UserPoolId: userPoolId
+    });
+    return client.send(addUserToGroupCommand);
+  }), () => {}), Cognito_Error$ReventlessAws.retrySchedule), err => {
+    let msg = Cognito_Error$ReventlessAws.message(err);
+    return Effect$1.flatMap(EffectLogger$ReventlessCore.logError("Util_CognitoGroupUser_Runtime-ReventlessAws", undefined, `addUserToGroup: ` + msg), () => Effect$1.fail(msg));
+  }));
+}
+
+function removeUserFromGroup(region, userName, groupName, userPoolId) {
+  return Effect$1.runPromise(Effect$1.catchAll(Effect$1.retry(Effect$1.map(Effect.tryPromise(Cognito_Error$ReventlessAws.classify, () => {
+    let client = new ClientCognitoIdentityProvider.CognitoIdentityProviderClient({
+      endpoint: Util_Cognito_Runtime$ReventlessAws.userPoolEndpoint(region, userPoolId),
+      region: region
+    });
+    let removeUserFromGroupCommand = new ClientCognitoIdentityProvider.AdminRemoveUserFromGroupCommand({
+      Username: userName,
+      GroupName: groupName,
+      UserPoolId: userPoolId
+    });
+    return client.send(removeUserFromGroupCommand);
+  }), () => {}), Cognito_Error$ReventlessAws.retrySchedule), err => {
+    let msg = Cognito_Error$ReventlessAws.message(err);
+    return Effect$1.flatMap(EffectLogger$ReventlessCore.logError("Util_CognitoGroupUser_Runtime-ReventlessAws", undefined, `removeUserFromGroup: ` + msg), () => Effect$1.fail(msg));
+  }));
+}
+
+export {
+  addUserToGroup,
+  removeUserFromGroup,
+}
+/* Effect Not a pure module */

package/src/util/Util_Cognito_Runtime.res

@@ -0,0 +1,52 @@
+// NOTE: following functions combine pulumi & aws-sdk -> should stay separated in reventless
+
+/** sign up a user to a given userPool
+   NOTE: should be called in runtime
+*/
+open AwsSdk
+
+let userPoolEndpoint = (region, userPoolId) => `cognito-idp.${region}.amazonaws.com/${userPoolId}`
+
+let signUp = (
+  ~region: string,
+  ~userPoolId: string,
+  ~userPoolClientId: string,
+  ~userName: string,
+  ~password: string,
+): promise<CognitoIdentityServiceProvider.SignUpCommand.output> => {
+  open CognitoIdentityServiceProvider
+  let client = CognitoIdentityServiceProvider.Raw.client(
+    ~options={
+      endpoint: userPoolEndpoint(region, userPoolId),
+      region,
+    },
+  )
+  {
+    clientId: userPoolClientId,
+    username: userName,
+    password,
+  }
+  ->SignUpCommand.make
+  ->SignUpCommand.Raw.send(client, _)
+}
+
+/** sign up a user to a given userPool, if the user is not already present
+   NOTE: should be called in runtime
+*/
+// Intentionally silent on failure: user may already exist (idempotent sign-up).
+let signUpIfMissing = (
+  ~region: string,
+  ~userPoolId: string,
+  ~userPoolClientId: string,
+  ~userName: string,
+  ~password: string,
+) =>
+  Effect.tryPromise(
+    ~catch=Cognito_Error.classify,
+    () => signUp(~region, ~userPoolId, ~userPoolClientId, ~userName, ~password),
+  )
+  ->Effect.flatMap(result =>
+    ReventlessCore.EffectLogger.logInfo(~comp=__MODULE__, `Created User ${userName} ${result.userSub->Option.getOr("")}`)
+  )
+  ->Effect.catchAll(err => ReventlessCore.EffectLogger.logInfo(~comp=__MODULE__, Cognito_Error.message(err)))
+  ->Effect.runPromise

package/src/util/Util_Cognito_Runtime.res.mjs

@@ -0,0 +1,35 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Effect from "@reventlessdev/rescript-effect/src/Effect.res.mjs";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Effect$1 from "effect/Effect";
+import * as Cognito_Error$ReventlessAws from "../errors/Cognito_Error.res.mjs";
+import * as EffectLogger$ReventlessCore from "@reventlessdev/reventless-core/src/util/EffectLogger.res.mjs";
+import * as ClientCognitoIdentityProvider from "@aws-sdk/client-cognito-identity-provider";
+
+function userPoolEndpoint(region, userPoolId) {
+  return `cognito-idp.` + region + `.amazonaws.com/` + userPoolId;
+}
+
+function signUp(region, userPoolId, userPoolClientId, userName, password) {
+  let client = new ClientCognitoIdentityProvider.CognitoIdentityProviderClient({
+    endpoint: userPoolEndpoint(region, userPoolId),
+    region: region
+  });
+  return client.send(new ClientCognitoIdentityProvider.SignUpCommand({
+    ClientId: userPoolClientId,
+    Username: userName,
+    Password: password
+  }));
+}
+
+function signUpIfMissing(region, userPoolId, userPoolClientId, userName, password) {
+  return Effect$1.runPromise(Effect$1.catchAll(Effect$1.flatMap(Effect.tryPromise(Cognito_Error$ReventlessAws.classify, () => signUp(region, userPoolId, userPoolClientId, userName, password)), result => EffectLogger$ReventlessCore.logInfo("Util_Cognito_Runtime-ReventlessAws", undefined, `Created User ` + userName + ` ` + Stdlib_Option.getOr(result.UserSub, ""))), err => EffectLogger$ReventlessCore.logInfo("Util_Cognito_Runtime-ReventlessAws", undefined, Cognito_Error$ReventlessAws.message(err))));
+}
+
+export {
+  userPoolEndpoint,
+  signUp,
+  signUpIfMissing,
+}
+/* Effect Not a pure module */

package/src/util/Util_DeadLetterQueue.res

@@ -0,0 +1,154 @@
+// TODO: move DeadLetterQueue creation into separate Adapter and use it from Plugin_Builder
+open PulumiAws
+
+let name = "DeadLetterQueue"
+let nameFifo = "FIFO" ++ name
+
+let queue = SQS.Queue.make(
+  ~name,
+  ~args={
+    SQS.Queue.visibilityTimeoutSeconds: 180->Pulumi.Input.make,
+    sqsManagedSseEnabled: false->Pulumi.Input.make,
+  },
+)
+
+let fifoQueue = SQS.Queue.make(
+  ~name=nameFifo,
+  ~args={
+    SQS.Queue.fifoQueue: true->Pulumi.Input.make,
+    contentBasedDeduplication: true->Pulumi.Input.make,
+    visibilityTimeoutSeconds: 180->Pulumi.Input.make,
+    sqsManagedSseEnabled: false->Pulumi.Input.make,
+  },
+)
+
+let opts = {Pulumi.CustomResourceOptions.parent: queue->PulumiAws.SQS.Queue.toResource}
+let lambdaRole = IAM.Role.makeWithDefaultPolicy(
+  ~name,
+  ~servicePrincipal=AWS.Lambda.principal->Pulumi.Output.make,
+  ~opts,
+)
+
+let entryPointCode = `export const handler = async (event) => {
+  console.error("DEAD LETTER ITEM:", JSON.stringify(event));
+};`
+
+let archiveContents: dict<Pulumi.Archive.assetOrArchive> = Dict.make()
+archiveContents->Dict.set(
+  "index.mjs",
+  Pulumi.Asset.stringAsset(entryPointCode)->Pulumi.Archive.assetToAssetOrArchive,
+)
+let code = Pulumi.Archive.assetArchive(archiveContents)
+let sourceCodeHash = Util_Bundle.hashString(entryPointCode)
+
+let layers =
+  Lambda.reventlessLayerArn
+  ->Option.map(arn => [arn->Pulumi.Input.make])
+  ->Option.getOr([])
+  ->Pulumi.Input.make
+
+let handler = Lambda.Function.make(
+  ~name,
+  ~args={
+    handler: "index.handler"->Pulumi.Input.make,
+    runtime: "nodejs22.x"->Pulumi.Input.make,
+    code: code->Pulumi.Input.make,
+    sourceCodeHash: sourceCodeHash->Pulumi.Input.make,
+    role: lambdaRole.arn->Pulumi.Output.asInput,
+    memorySize: 128->Pulumi.Input.make,
+    timeout: 30->Pulumi.Input.make,
+    layers,
+    tags: AWS.Tags.make(~name, ReventlessCore.CommandTopic.componentType),
+    environment: (
+      {
+        Lambda.Function.variables: Dict.fromArray([
+          ("Environment", Pulumi.Pulumi.getStackName()->Pulumi.Input.make),
+        ]),
+      }: Lambda.Function.functionEnvironment
+    )->Pulumi.Input.make,
+  },
+  ~opts,
+)
+
+let lambda = handler->Pulumi.Output.make
+
+let _subscription = Util_EventSourceMapping.subscribeSqs(~lambda, ~name, ~queue, ~opts)
+let _fifoSubscription = Util_EventSourceMapping.subscribeSqs(
+  ~lambda,
+  ~name=nameFifo,
+  ~queue=fifoQueue,
+  ~opts,
+)
+let createQueuePolicyDocument = (name, queueArn: string, handlerArn: string) => {
+  open PulumiAws.PolicyDocument
+  PulumiAws.PolicyDocument.make(
+    ~id=name ++ "QueuePolicy",
+    ~statements=[
+      {
+        sid: "AllowLambdaToAccessQueue",
+        effect: Allow,
+        principal: Principals({
+          service: PrincipalId(AWS.Lambda.principal),
+        }),
+        actions: Actions(["sqs:ReceiveMessage", "sqs:DeleteMessage", "sqs:GetQueueAttributes"]),
+        resources: Resource(queueArn),
+        conditions: {
+          arnEquals: Dict.fromArray([("AWS:SourceArn", ConditionValue(handlerArn))]),
+        },
+      },
+    ],
+  )
+  ->PulumiAws.PolicyDocument.toJsonString
+  ->Pulumi.Input.make
+}
+
+let _ =
+  (queue.id, queue.arn, fifoQueue.id, fifoQueue.arn, handler.arn)
+  ->Pulumi.Output.all5
+  ->Pulumi.Output.apply(((queueId, queueArn, fifoQueueId, fifoQueueArn, handlerArn)) => {
+    let lambdaPolicyDocument = PulumiAws.PolicyDocument.make(
+      ~id=name ++ "SQSPolicy",
+      ~statements=[
+        {
+          sid: "AllowLambdaSendAndReceiveMessage",
+          effect: Allow,
+          actions: Actions([
+            "sqs:ReceiveMessage",
+            "sqs:DeleteMessage",
+            "sqs:GetQueueAttributes",
+            "sqs:ChangeMessageVisibility",
+          ]),
+          resources: Resources([queueArn, fifoQueueArn]),
+        },
+      ],
+    )
+
+    let _attachLambdaPolicy = PulumiAws.IAM.RolePolicy.make(
+      ~name,
+      ~args={
+        policy: PulumiAws.PolicyDocument.mergePolicyDocuments(
+          name ++ "LambdaPolicy",
+          [PulumiAws.Lambda.defaultLoggingPolicyDocument, lambdaPolicyDocument],
+        )->Pulumi.Output.asInput,
+        role: lambdaRole.id->Pulumi.Output.asInput,
+      },
+      ~opts,
+    )
+
+    let _attachQueuePolicy = PulumiAws.SQS.QueuePolicy.make(
+      ~name,
+      ~args={
+        queueUrl: queueId->Pulumi.Input.make,
+        policy: createQueuePolicyDocument(name, queueArn, handlerArn),
+      },
+      ~opts=Some(opts),
+    )
+    let _attachFifoQueuePolicy = PulumiAws.SQS.QueuePolicy.make(
+      ~name=nameFifo,
+      ~args={
+        queueUrl: fifoQueueId->Pulumi.Input.make,
+        policy: createQueuePolicyDocument(nameFifo, fifoQueueArn, handlerArn),
+      },
+      ~opts=Some(opts),
+    )
+  })

package/src/util/Util_DeadLetterQueue.res.mjs

@@ -0,0 +1,158 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Aws from "@pulumi/aws";
+import * as IAM$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/IAM.res.mjs";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Pulumi from "@pulumi/pulumi";
+import * as Lambda$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/Lambda/Lambda.res.mjs";
+import * as AWS$ReventlessAws from "../adapter/AWS.res.mjs";
+import * as AWS_Tags$ReventlessAws from "../adapter/AWS_Tags.res.mjs";
+import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
+import * as Util_Bundle$ReventlessAws from "./Util_Bundle.res.mjs";
+import * as CommandTopic$ReventlessCore from "@reventlessdev/reventless-core/src/components/CommandTopic/CommandTopic.res.mjs";
+import * as Util_EventSourceMapping$ReventlessAws from "./Util_EventSourceMapping.res.mjs";
+
+let name = "DeadLetterQueue";
+
+let nameFifo = "FIFO" + name;
+
+let queue = new (Aws.sqs.Queue)(name, {
+  visibilityTimeoutSeconds: 180,
+  sqsManagedSseEnabled: false
+});
+
+let fifoQueue = new (Aws.sqs.Queue)(nameFifo, {
+  contentBasedDeduplication: true,
+  fifoQueue: true,
+  visibilityTimeoutSeconds: 180,
+  sqsManagedSseEnabled: false
+});
+
+let opts_parent = queue;
+
+let opts = {
+  parent: opts_parent
+};
+
+let lambdaRole = IAM$PulumiAws.Role.makeWithDefaultPolicy(name, Pulumi.output(AWS$ReventlessAws.Lambda.principal), opts);
+
+let entryPointCode = `export const handler = async (event) => {
+  console.error("DEAD LETTER ITEM:", JSON.stringify(event));
+};`;
+
+let archiveContents = {};
+
+archiveContents["index.mjs"] = new (Pulumi.asset.StringAsset)(entryPointCode);
+
+let code = new (Pulumi.asset.AssetArchive)(archiveContents);
+
+let sourceCodeHash = Util_Bundle$ReventlessAws.hashString(entryPointCode);
+
+let layers = Stdlib_Option.getOr(Stdlib_Option.map(Lambda$PulumiAws.reventlessLayerArn, arn => [arn]), []);
+
+let handler = new (Aws.lambda.Function)(name, {
+  handler: "index.handler",
+  runtime: "nodejs22.x",
+  code: code,
+  role: lambdaRole.arn,
+  memorySize: 128,
+  timeout: 30,
+  layers: layers,
+  tags: AWS_Tags$ReventlessAws.make(name, CommandTopic$ReventlessCore.componentType),
+  environment: {
+    variables: Object.fromEntries([[
+        "Environment",
+        Pulumi.getStack()
+      ]])
+  },
+  sourceCodeHash: sourceCodeHash
+}, opts);
+
+let lambda = Pulumi.output(handler);
+
+let _subscription = Util_EventSourceMapping$ReventlessAws.subscribeSqs(lambda, name, queue, undefined, opts);
+
+let _fifoSubscription = Util_EventSourceMapping$ReventlessAws.subscribeSqs(lambda, nameFifo, fifoQueue, undefined, opts);
+
+function createQueuePolicyDocument(name, queueArn, handlerArn) {
+  return PolicyDocument$PulumiAws.toJsonString(PolicyDocument$PulumiAws.make(undefined, name + "QueuePolicy", [{
+      Sid: "AllowLambdaToAccessQueue",
+      Principal: {
+        Service: AWS$ReventlessAws.Lambda.principal
+      },
+      Effect: "Allow",
+      Action: [
+        "sqs:ReceiveMessage",
+        "sqs:DeleteMessage",
+        "sqs:GetQueueAttributes"
+      ],
+      Resource: queueArn,
+      Condition: {
+        ArnEquals: Object.fromEntries([[
+            "AWS:SourceArn",
+            handlerArn
+          ]])
+      }
+    }]));
+}
+
+Pulumi.all([
+  queue.id,
+  queue.arn,
+  fifoQueue.id,
+  fifoQueue.arn,
+  handler.arn
+]).apply(param => {
+  let handlerArn = param[4];
+  let fifoQueueArn = param[3];
+  let queueArn = param[1];
+  let lambdaPolicyDocument = PolicyDocument$PulumiAws.make(undefined, name + "SQSPolicy", [{
+      Sid: "AllowLambdaSendAndReceiveMessage",
+      Effect: "Allow",
+      Action: [
+        "sqs:ReceiveMessage",
+        "sqs:DeleteMessage",
+        "sqs:GetQueueAttributes",
+        "sqs:ChangeMessageVisibility"
+      ],
+      Resource: [
+        queueArn,
+        fifoQueueArn
+      ]
+    }]);
+  new (Aws.iam.RolePolicy)(name, {
+    policy: PolicyDocument$PulumiAws.mergePolicyDocuments(name + "LambdaPolicy", [
+      Lambda$PulumiAws.defaultLoggingPolicyDocument,
+      lambdaPolicyDocument
+    ]),
+    role: lambdaRole.id
+  }, opts);
+  new (Aws.sqs.QueuePolicy)(name, {
+    policy: createQueuePolicyDocument(name, queueArn, handlerArn),
+    queueUrl: param[0]
+  }, opts);
+  new (Aws.sqs.QueuePolicy)(nameFifo, {
+    policy: createQueuePolicyDocument(nameFifo, fifoQueueArn, handlerArn),
+    queueUrl: param[2]
+  }, opts);
+});
+
+export {
+  name,
+  nameFifo,
+  queue,
+  fifoQueue,
+  opts,
+  lambdaRole,
+  entryPointCode,
+  archiveContents,
+  code,
+  sourceCodeHash,
+  layers,
+  handler,
+  lambda,
+  _subscription,
+  _fifoSubscription,
+  createQueuePolicyDocument,
+}
+/* queue Not a pure module */