@reventlessdev/reventless-aws 3.0.0-alpha.251 → 3.0.0-alpha.253

package/src/Platform.res.mjs

@@ -59,6 +59,7 @@ import * as Geocoder_AwsLocation$ReventlessAws from "./adapter/Geocoder/Geocoder
 import * as QueryEngine_DynamoDb$ReventlessAws from "./adapter/QueryEngine/QueryEngine_DynamoDb.res.mjs";
 import * as PluginRuntime_Builder$ReventlessAws from "./plugin/runtime/PluginRuntime_Builder.res.mjs";
 import * as PluginsReadModelSpec$ReventlessCore from "@reventlessdev/reventless-core/src/plugin/lifecycle/PluginsReadModelSpec.res.mjs";
+import * as StorePrefixCollision$ReventlessCore from "@reventlessdev/reventless-core/src/util/StorePrefixCollision.res.mjs";
 import * as ExtensionPoint_Builder$ReventlessAws from "./components/ExtensionPoint_Builder.res.mjs";
 import * as StateViewSlice_Builder$ReventlessAws from "./components/StateViewSlice_Builder.res.mjs";
 import * as Task_Builder_PerBucket$ReventlessAws from "./components/Task_Builder_PerBucket.res.mjs";
@@ -156,8 +157,8 @@ function MakeWithConfig(Config) {
   };
   let platformStackRef = Stdlib_Option.map(new Pulumi.Config("platform").get("stack"), stack => new Pulumi.StackReference(stack));
   let domainBaseFragment = GraphQL_Stitcher$ReventlessCore.encode({
-    types: [],
-    mutations: [],
+    types: Platform_AdminApi$ReventlessCore.uploadTypes,
+    mutations: Platform_AdminApi$ReventlessCore.uploadMutationFields,
     queries: ["  Platform_ping: String"],
     subscriptions: [],
     subscriptionSources: []
@@ -904,6 +905,17 @@ function MakeWithConfig(Config) {
           ]]);
       }
     });
+    let collisions = StorePrefixCollision$ReventlessCore.collisionsFor(declaredStores.map(param => {
+      let store = param[1];
+      let plugin = param[0];
+      return {
+        qualified: plugin + `.` + store,
+        prefix: Util_StoreLayout$ReventlessAws.keyPrefixFor(plugin, store)
+      };
+    }));
+    if (collisions.length !== 0) {
+      Stdlib_JsError.throwWithMessage(collisions.map(StorePrefixCollision$ReventlessCore.collisionMessage).join("\n\n"));
+    }
     if (declaredStores.length !== 0) {
       let tmp;
       tmp = storeLayout === "PerStore" ? "bucket per store" : "shared bucket, {store}/… prefixes";
@@ -917,7 +929,7 @@ function MakeWithConfig(Config) {
       let store = param[1];
       let plugin = param[0];
       let bucketName = Util_StoreLayout$ReventlessAws.bucketNameFor(storeLayout, stackName, plugin, store);
-      let keyPrefix = Util_StoreLayout$ReventlessAws.keyPrefixFor(store);
+      let keyPrefix = Util_StoreLayout$ReventlessAws.keyPrefixFor(plugin, store);
       let b = storeBuckets[bucketName];
       let bucket;
       if (b !== undefined) {
@@ -931,13 +943,11 @@ function MakeWithConfig(Config) {
         bucket = b$1;
       }
       let storeHandle = Capability_ObjectStore_S3$ReventlessAws.underPrefix(bucket, keyPrefix);
-      let presign = Upload_Presign_S3$ReventlessAws.make(storeHandle.bucketName, undefined, storeHandle.keyPrefix, `UploadPresign-` + plugin + `-` + store, undefined);
       return [
         plugin + `.` + store,
         keyPrefix,
         bucketName,
-        storeHandle.bucketName,
-        presign.url
+        storeHandle.bucketName
       ];
     });
     let declaredServedBuckets = Stdlib_Array.filterMap(storeBucketOrder, bucketName => Stdlib_Option.map(storeBuckets[bucketName], b => ({
@@ -966,15 +976,23 @@ function MakeWithConfig(Config) {
       store: param[0],
       keyPrefix: param[1],
       bucketName: param[3],
-      uploadUrl: param[4],
       baseUrl: storeServingBaseUrl
     }));
     objectStoreEndpointsRef.contents = declaredStoreEndpoints;
+    let store = Stdlib_Option.flatMap(hostUiBundle, c => c.uploadBucket);
+    let uploadServiceStores = declaredStoreServices.map(param => ({
+      qualified: param[0],
+      bucketName: param[3],
+      servedPrefix: param[1]
+    })).concat(store !== undefined ? [{
+          qualified: store.keyPrefix,
+          bucketName: store.bucketName,
+          servedPrefix: store.keyPrefix
+        }] : []);
+    if (uploadServiceStores.length !== 0) {
+      Upload_Presign_S3$ReventlessAws.make(domainApi, uploadServiceStores, undefined, undefined, {});
+    }
     if (declaredStoreEndpoints.length !== 0) {
-      Pulumi$Pulumi.$$export("uploadEndpoints", Pulumi.all(declaredStoreEndpoints.map(e => e.uploadUrl.apply(u => [
-        e.store,
-        u
-      ]))).apply(pairs => Object.fromEntries(pairs)));
       Pulumi$Pulumi.$$export("objectStores", Pulumi.all(declaredStoreEndpoints.map(e => Pulumi.all([
         e.bucketName,
         Output$Pulumi.allOpt(e.baseUrl)
@@ -1019,14 +1037,14 @@ function MakeWithConfig(Config) {
       } else {
         customDomain = undefined;
       }
-      let store = hostUiBundle.uploadBucket;
+      let store$1 = hostUiBundle.uploadBucket;
       let servedBuckets = (
-        store !== undefined ? [{
-              id: store.keyPrefix,
-              prefixes: [store.keyPrefix],
-              bucketId: store.bucketId,
-              bucketArn: store.bucketArn,
-              bucketRegionalDomainName: store.bucketRegionalDomainName
+        store$1 !== undefined ? [{
+              id: store$1.keyPrefix,
+              prefixes: [store$1.keyPrefix],
+              bucketId: store$1.bucketId,
+              bucketArn: store$1.bucketArn,
+              bucketRegionalDomainName: store$1.bucketRegionalDomainName
             }] : []
       ).concat(declaredServedBuckets);
       let match$4 = Plugin_Stack$ReventlessAws.makeUiBundleDistribution("host-ui", Stdlib_Option.getOr(hostUiBundle.bundleVersion, version), Stdlib_Option.getOr(hostUiBundle.assetsDir, Util_Bundle$ReventlessAws.resolvePackageRoot(true, "@reventlessdev/reventless-host-shell") + "/dist"), true, undefined, true, [
@@ -1039,15 +1057,6 @@ function MakeWithConfig(Config) {
       let domainEventsEndpointOutput = domainEventsApiOpt !== undefined ? AppSync_EventsApi$ReventlessAws.httpEndpoint(domainEventsApiOpt).apply(ep => ep + "/event") : Pulumi.output(undefined);
       let index = hostUiBundle.geocoderPlaceIndex;
       let geocoderEndpointOutput = index !== undefined ? Geocoder_AwsLocation$ReventlessAws.make(index.indexName, undefined, undefined).url.apply(u => u) : Pulumi.output(undefined);
-      let store$1 = hostUiBundle.uploadBucket;
-      let uploadEndpointOutput = store$1 !== undefined ? Upload_Presign_S3$ReventlessAws.make(store$1.bucketName, undefined, undefined, undefined, undefined).url.apply(u => u) : Pulumi.output(undefined);
-      let storeUploadEndpointsOutput = Pulumi.all(declaredStoreServices.map(param => {
-        let qualified = param[0];
-        return param[4].apply(u => [
-          qualified,
-          u
-        ]);
-      }));
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -1056,26 +1065,19 @@ function MakeWithConfig(Config) {
           cognitoPool.clientId
         ]),
         domainEventsEndpointOutput,
-        geocoderEndpointOutput,
-        Pulumi.all([
-          uploadEndpointOutput,
-          storeUploadEndpointsOutput
-        ])
+        geocoderEndpointOutput
       ]).apply(param => {
-        let match = param[3];
-        let storeUploadEps = match[1];
-        let uploadEpOpt = match[0];
         let geocoderEpOpt = param[2];
         let eventsEpOpt = param[1];
-        let match$1 = param[0];
+        let match = param[0];
         let fields = [
           [
             "apiEndpoint",
-            match$1[0]
+            match[0]
           ],
           [
             "platformApiEndpoint",
-            match$1[1]
+            match[1]
           ],
           [
             "region",
@@ -1087,11 +1089,11 @@ function MakeWithConfig(Config) {
           ],
           [
             "cognitoUserPoolId",
-            match$1[2]
+            match[2]
           ],
           [
             "cognitoClientId",
-            match$1[3]
+            match[3]
           ],
           [
             "liveUpdates",
@@ -1116,18 +1118,7 @@ function MakeWithConfig(Config) {
               "geocoderEndpoint",
               geocoderEpOpt
             ]]) : withEvents;
-        let withUpload = uploadEpOpt !== undefined ? withGeocoder.concat([[
-              "uploadEndpoint",
-              uploadEpOpt
-            ]]) : withGeocoder;
-        let withStoreUploads = storeUploadEps.length !== 0 ? withUpload.concat([[
-              "uploadEndpoints",
-              Object.fromEntries(storeUploadEps.map(param => [
-                param[0],
-                param[1]
-              ]))
-            ]]) : withUpload;
-        return JSON.stringify(Object.fromEntries(withStoreUploads));
+        return JSON.stringify(Object.fromEntries(withGeocoder));
       });
       new (Aws.s3.BucketObject)("host-ui-config-json", {
         bucket: bucketName,
@@ -1334,8 +1325,8 @@ function Make($star) {
   };
   let platformStackRef = Stdlib_Option.map(new Pulumi.Config("platform").get("stack"), stack => new Pulumi.StackReference(stack));
   let domainBaseFragment = GraphQL_Stitcher$ReventlessCore.encode({
-    types: [],
-    mutations: [],
+    types: Platform_AdminApi$ReventlessCore.uploadTypes,
+    mutations: Platform_AdminApi$ReventlessCore.uploadMutationFields,
     queries: ["  Platform_ping: String"],
     subscriptions: [],
     subscriptionSources: []
@@ -2059,6 +2050,17 @@ function Make($star) {
           ]]);
       }
     });
+    let collisions = StorePrefixCollision$ReventlessCore.collisionsFor(declaredStores.map(param => {
+      let store = param[1];
+      let plugin = param[0];
+      return {
+        qualified: plugin + `.` + store,
+        prefix: Util_StoreLayout$ReventlessAws.keyPrefixFor(plugin, store)
+      };
+    }));
+    if (collisions.length !== 0) {
+      Stdlib_JsError.throwWithMessage(collisions.map(StorePrefixCollision$ReventlessCore.collisionMessage).join("\n\n"));
+    }
     if (declaredStores.length !== 0) {
       let tmp;
       tmp = storeLayout === "PerStore" ? "bucket per store" : "shared bucket, {store}/… prefixes";
@@ -2072,7 +2074,7 @@ function Make($star) {
       let store = param[1];
       let plugin = param[0];
       let bucketName = Util_StoreLayout$ReventlessAws.bucketNameFor(storeLayout, stackName, plugin, store);
-      let keyPrefix = Util_StoreLayout$ReventlessAws.keyPrefixFor(store);
+      let keyPrefix = Util_StoreLayout$ReventlessAws.keyPrefixFor(plugin, store);
       let b = storeBuckets[bucketName];
       let bucket;
       if (b !== undefined) {
@@ -2086,13 +2088,11 @@ function Make($star) {
         bucket = b$1;
       }
       let storeHandle = Capability_ObjectStore_S3$ReventlessAws.underPrefix(bucket, keyPrefix);
-      let presign = Upload_Presign_S3$ReventlessAws.make(storeHandle.bucketName, undefined, storeHandle.keyPrefix, `UploadPresign-` + plugin + `-` + store, undefined);
       return [
         plugin + `.` + store,
         keyPrefix,
         bucketName,
-        storeHandle.bucketName,
-        presign.url
+        storeHandle.bucketName
       ];
     });
     let declaredServedBuckets = Stdlib_Array.filterMap(storeBucketOrder, bucketName => Stdlib_Option.map(storeBuckets[bucketName], b => ({
@@ -2121,15 +2121,23 @@ function Make($star) {
       store: param[0],
       keyPrefix: param[1],
       bucketName: param[3],
-      uploadUrl: param[4],
       baseUrl: storeServingBaseUrl
     }));
     objectStoreEndpointsRef.contents = declaredStoreEndpoints;
+    let store = Stdlib_Option.flatMap(hostUiBundle, c => c.uploadBucket);
+    let uploadServiceStores = declaredStoreServices.map(param => ({
+      qualified: param[0],
+      bucketName: param[3],
+      servedPrefix: param[1]
+    })).concat(store !== undefined ? [{
+          qualified: store.keyPrefix,
+          bucketName: store.bucketName,
+          servedPrefix: store.keyPrefix
+        }] : []);
+    if (uploadServiceStores.length !== 0) {
+      Upload_Presign_S3$ReventlessAws.make(domainApi, uploadServiceStores, undefined, undefined, {});
+    }
     if (declaredStoreEndpoints.length !== 0) {
-      Pulumi$Pulumi.$$export("uploadEndpoints", Pulumi.all(declaredStoreEndpoints.map(e => e.uploadUrl.apply(u => [
-        e.store,
-        u
-      ]))).apply(pairs => Object.fromEntries(pairs)));
       Pulumi$Pulumi.$$export("objectStores", Pulumi.all(declaredStoreEndpoints.map(e => Pulumi.all([
         e.bucketName,
         Output$Pulumi.allOpt(e.baseUrl)
@@ -2174,14 +2182,14 @@ function Make($star) {
       } else {
         customDomain = undefined;
       }
-      let store = hostUiBundle.uploadBucket;
+      let store$1 = hostUiBundle.uploadBucket;
       let servedBuckets = (
-        store !== undefined ? [{
-              id: store.keyPrefix,
-              prefixes: [store.keyPrefix],
-              bucketId: store.bucketId,
-              bucketArn: store.bucketArn,
-              bucketRegionalDomainName: store.bucketRegionalDomainName
+        store$1 !== undefined ? [{
+              id: store$1.keyPrefix,
+              prefixes: [store$1.keyPrefix],
+              bucketId: store$1.bucketId,
+              bucketArn: store$1.bucketArn,
+              bucketRegionalDomainName: store$1.bucketRegionalDomainName
             }] : []
       ).concat(declaredServedBuckets);
       let match$4 = Plugin_Stack$ReventlessAws.makeUiBundleDistribution("host-ui", Stdlib_Option.getOr(hostUiBundle.bundleVersion, version), Stdlib_Option.getOr(hostUiBundle.assetsDir, Util_Bundle$ReventlessAws.resolvePackageRoot(true, "@reventlessdev/reventless-host-shell") + "/dist"), true, undefined, true, [
@@ -2194,15 +2202,6 @@ function Make($star) {
       let domainEventsEndpointOutput = domainEventsApiOpt !== undefined ? AppSync_EventsApi$ReventlessAws.httpEndpoint(domainEventsApiOpt).apply(ep => ep + "/event") : Pulumi.output(undefined);
       let index = hostUiBundle.geocoderPlaceIndex;
       let geocoderEndpointOutput = index !== undefined ? Geocoder_AwsLocation$ReventlessAws.make(index.indexName, undefined, undefined).url.apply(u => u) : Pulumi.output(undefined);
-      let store$1 = hostUiBundle.uploadBucket;
-      let uploadEndpointOutput = store$1 !== undefined ? Upload_Presign_S3$ReventlessAws.make(store$1.bucketName, undefined, undefined, undefined, undefined).url.apply(u => u) : Pulumi.output(undefined);
-      let storeUploadEndpointsOutput = Pulumi.all(declaredStoreServices.map(param => {
-        let qualified = param[0];
-        return param[4].apply(u => [
-          qualified,
-          u
-        ]);
-      }));
       let configJsonContent = Pulumi.all([
         Pulumi.all([
           resolvedDomainApiEndpoint,
@@ -2211,26 +2210,19 @@ function Make($star) {
           cognitoPool.clientId
         ]),
         domainEventsEndpointOutput,
-        geocoderEndpointOutput,
-        Pulumi.all([
-          uploadEndpointOutput,
-          storeUploadEndpointsOutput
-        ])
+        geocoderEndpointOutput
       ]).apply(param => {
-        let match = param[3];
-        let storeUploadEps = match[1];
-        let uploadEpOpt = match[0];
         let geocoderEpOpt = param[2];
         let eventsEpOpt = param[1];
-        let match$1 = param[0];
+        let match = param[0];
         let fields = [
           [
             "apiEndpoint",
-            match$1[0]
+            match[0]
           ],
           [
             "platformApiEndpoint",
-            match$1[1]
+            match[1]
           ],
           [
             "region",
@@ -2242,11 +2234,11 @@ function Make($star) {
           ],
           [
             "cognitoUserPoolId",
-            match$1[2]
+            match[2]
           ],
           [
             "cognitoClientId",
-            match$1[3]
+            match[3]
           ],
           [
             "liveUpdates",
@@ -2271,18 +2263,7 @@ function Make($star) {
               "geocoderEndpoint",
               geocoderEpOpt
             ]]) : withEvents;
-        let withUpload = uploadEpOpt !== undefined ? withGeocoder.concat([[
-              "uploadEndpoint",
-              uploadEpOpt
-            ]]) : withGeocoder;
-        let withStoreUploads = storeUploadEps.length !== 0 ? withUpload.concat([[
-              "uploadEndpoints",
-              Object.fromEntries(storeUploadEps.map(param => [
-                param[0],
-                param[1]
-              ]))
-            ]]) : withUpload;
-        return JSON.stringify(Object.fromEntries(withStoreUploads));
+        return JSON.stringify(Object.fromEntries(withGeocoder));
       });
       new (Aws.s3.BucketObject)("host-ui-config-json", {
         bucket: bucketName,

package/src/adapter/Geocoder/Geocoder_AwsLocation_Ops.res

@@ -60,14 +60,16 @@ type response = {
   body: string,
 }
 
-// Permissive CORS so the browser demo can call the endpoint from any origin.
-let corsHeaders = () =>
-  Dict.fromArray([
-    ("content-type", "application/json"),
-    ("access-control-allow-origin", "*"),
-    ("access-control-allow-methods", "GET,OPTIONS"),
-    ("access-control-allow-headers", "*"),
-  ])
+// CORS belongs to the Function URL's own `cors` configuration and to nothing
+// else. AWS injects the allow-origin header itself whenever the request carries
+// an `Origin`, so a handler that also sets one sends the header *twice* — and a
+// browser rejects `Access-Control-Allow-Origin: *, *` outright, failing every
+// cross-origin call while leaving `curl` (which sends no `Origin`, so AWS adds
+// nothing) working perfectly.
+//
+// It is also the only way `~corsOrigins` can mean anything: a hardcoded `*`
+// here would keep answering `*` for a deployment that narrowed the allow-list.
+let jsonHeaders = () => Dict.fromArray([("content-type", "application/json")])
 
 // Pull `q` from the parsed query-string params, falling back to the raw string.
 let readQueryParam = (event: functionUrlEvent): option<string> =>
@@ -93,7 +95,7 @@ let handler = async (event: functionUrlEvent): response => {
     let indexName = getEnv("PLACE_INDEX_NAME")->Option.getOr("")
     let q = readQueryParam(event)->Option.getOr("")
     if indexName == "" || q == "" {
-      {statusCode: 200, headers: corsHeaders(), body: "[]"}
+      {statusCode: 200, headers: jsonHeaders(), body: "[]"}
     } else {
       let client = makeLocationClient()
       let resp = await client->send(
@@ -124,13 +126,13 @@ let handler = async (event: functionUrlEvent): response => {
         )
       {
         statusCode: 200,
-        headers: corsHeaders(),
+        headers: jsonHeaders(),
         body: results->JSON.Encode.array->JSON.stringify,
       }
     }
   } catch {
   | exn =>
     Console.error2("Geocoder: search failed", exn)
-    {statusCode: 200, headers: corsHeaders(), body: "[]"}
+    {statusCode: 200, headers: jsonHeaders(), body: "[]"}
   }
 }

package/src/adapter/Geocoder/Geocoder_AwsLocation_Ops.res.mjs

@@ -12,25 +12,11 @@ function getEnv(k) {
   }
 }
 
-function corsHeaders() {
-  return Object.fromEntries([
-    [
+function jsonHeaders() {
+  return Object.fromEntries([[
       "content-type",
       "application/json"
-    ],
-    [
-      "access-control-allow-origin",
-      "*"
-    ],
-    [
-      "access-control-allow-methods",
-      "GET,OPTIONS"
-    ],
-    [
-      "access-control-allow-headers",
-      "*"
-    ]
-  ]);
+    ]]);
 }
 
 function readQueryParam(event) {
@@ -59,7 +45,10 @@ async function handler(event) {
     if (indexName === "" || q === "") {
       return {
         statusCode: 200,
-        headers: corsHeaders(),
+        headers: Object.fromEntries([[
+            "content-type",
+            "application/json"
+          ]]),
         body: "[]"
       };
     }
@@ -101,7 +90,10 @@ async function handler(event) {
     });
     return {
       statusCode: 200,
-      headers: corsHeaders(),
+      headers: Object.fromEntries([[
+          "content-type",
+          "application/json"
+        ]]),
       body: JSON.stringify(results)
     };
   } catch (raw_exn) {
@@ -109,7 +101,10 @@ async function handler(event) {
     console.error("Geocoder: search failed", exn);
     return {
       statusCode: 200,
-      headers: corsHeaders(),
+      headers: Object.fromEntries([[
+          "content-type",
+          "application/json"
+        ]]),
       body: "[]"
     };
   }
@@ -117,7 +112,7 @@ async function handler(event) {
 
 export {
   getEnv,
-  corsHeaders,
+  jsonHeaders,
   readQueryParam,
   handler,
 }

package/src/adapter/Task/TaskBucket_S3.res

@@ -125,10 +125,21 @@ let connect = (
 let make: ReventlessCore.Task_Adapter.bucketMaker<bucketParts> = (~name, ~opts) => {
   let opts = opts->ReventlessCore.Util.Pulumi.ComponentResourceOptions.toCustomResourceOptions
 
+  // A task bucket holds transient input a slice consumes, so disposability
+  // follows the stack, exactly as it does for declared stores. It matters
+  // because a bucket name change is a *replace*, and a replace of a non-empty
+  // bucket fails the deploy with `BucketNotEmpty` — which would wedge precisely
+  // the throwaway stacks that are recreated most often. Protected stacks keep
+  // the safe default and drain by hand.
+  let forceDestroy =
+    Util_StoreLayout.protectionFor(~stack=Pulumi.Pulumi.getStackName()) ==
+      Util_StoreLayout.Unprotected
+
   let bucket = {
     PulumiAws.S3.Bucket.make(
       ~name,
       ~args={
+        forceDestroy: forceDestroy->Pulumi.Input.make,
         corsRules: [
           {
             PulumiAws.S3.Bucket.allowedHeaders: ["*"],

package/src/adapter/Task/TaskBucket_S3.res.mjs

@@ -11,6 +11,7 @@ import * as Adapter$ReventlessCore from "@reventlessdev/reventless-core/src/adap
 import * as PolicyDocument$PulumiAws from "@reventlessdev/rescript-pulumi-aws/src/IAM/PolicyDocument.res.mjs";
 import * as Util_Pulumi$ReventlessCore from "@reventlessdev/reventless-core/src/util/Util_Pulumi.res.mjs";
 import * as Adapter_Helpers$ReventlessAws from "../Adapter_Helpers.res.mjs";
+import * as Util_StoreLayout$ReventlessAws from "../../util/Util_StoreLayout.res.mjs";
 import * as TaskBucket_S3_Runtime$ReventlessAws from "./TaskBucket_S3_Runtime.res.mjs";
 
 function subscribeLambda2S3Bucket(lambda, name, bucket, opts) {
@@ -75,6 +76,7 @@ function connect(name, bucket, bucketMode, commandTopics, runtime, opts) {
 
 function make(name, opts) {
   let opts$1 = Util_Pulumi$ReventlessCore.ComponentResourceOptions.toCustomResourceOptions(opts);
+  let forceDestroy = Util_StoreLayout$ReventlessAws.protectionFor(Pulumi.getStack(), undefined) === "Unprotected";
   let bucket = new (Aws.s3.Bucket)(name, {
     corsRules: [{
         allowedHeaders: ["*"],
@@ -93,6 +95,7 @@ function make(name, opts) {
         ],
         maxAgeSeconds: 3000
       }],
+    forceDestroy: forceDestroy,
     tags: AWS_Tags$ReventlessAws.make(name, Task$ReventlessCore.componentType, {
       TAG: "Other",
       _0: "Bucket"