@segment/action-destinations 3.442.0 → 3.443.0

package/dist/lib/AWS/sts.d.ts

@@ -5,3 +5,4 @@ export type AWSCredentials = {
     sessionToken: string;
 };
 export declare function getAWSCredentialsFromEKS(request: RequestClient): Promise<AWSCredentials>;
+export declare const assumeRole: (roleArn: string, externalId: string, region: string) => Promise<AWSCredentials>;

package/dist/lib/AWS/sts.js

@@ -1,7 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.assumeRole = void 0;
 exports.getAWSCredentialsFromEKS = getAWSCredentialsFromEKS;
 const fs_1 = require("fs");
+const client_sts_1 = require("@aws-sdk/client-sts");
+const actions_core_1 = require("@segment/actions-core");
+const uuid_1 = require("@lukeed/uuid");
 const awsCredentialsCache = {
     expires: 0,
     credentials: { accessKeyId: '', secretAccessKey: '', sessionToken: '' }
@@ -53,4 +57,33 @@ async function getAWSCredentialsFromEKS(request) {
     awsCredentialsCache.credentials = credentials;
     return credentials;
 }
+const assumeRole = async (roleArn, externalId, region) => {
+    const intermediaryARN = process.env.AMAZON_S3_ACTIONS_ROLE_ADDRESS;
+    const intermediaryExternalId = process.env.AMAZON_S3_ACTIONS_EXTERNAL_ID;
+    const intermediaryCreds = await getSTSCredentials(intermediaryARN, intermediaryExternalId, region);
+    return getSTSCredentials(roleArn, externalId, region, intermediaryCreds);
+};
+exports.assumeRole = assumeRole;
+const getSTSCredentials = async (roleId, externalId, region, credentials) => {
+    const options = { credentials, region: region };
+    const stsClient = new client_sts_1.STSClient(options);
+    const roleSessionName = (0, uuid_1.v4)();
+    const command = new client_sts_1.AssumeRoleCommand({
+        RoleArn: roleId,
+        RoleSessionName: roleSessionName,
+        ExternalId: externalId
+    });
+    const result = await stsClient.send(command);
+    if (!result.Credentials ||
+        !result.Credentials.AccessKeyId ||
+        !result.Credentials.SecretAccessKey ||
+        !result.Credentials.SessionToken) {
+        throw new actions_core_1.IntegrationError('Failed to assume role', actions_core_1.ErrorCodes.INVALID_AUTHENTICATION, 403);
+    }
+    return {
+        accessKeyId: result.Credentials.AccessKeyId,
+        secretAccessKey: result.Credentials.SecretAccessKey,
+        sessionToken: result.Credentials.SessionToken
+    };
+};
 //# sourceMappingURL=sts.js.map

package/dist/lib/AWS/sts.js.map

@@ -1 +1 @@
-{"version":3,"file":"sts.js","sourceRoot":"","sources":["../../../src/lib/AWS/sts.ts"],"names":[],"mappings":";;AA4GA,4DAqBC;AAjID,2BAAiC;AA6CjC,MAAM,mBAAmB,GAAwB;IAC/C,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;CACxE,CAAA;AAED,SAAS,QAAQ;IACf,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,qDAAqD,CAAA;IACrG,OAAO,IAAA,iBAAY,EAAC,aAAa,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAGD,KAAK,UAAU,uBAAuB,CAAC,OAAsB,EAAE,QAAgB;IAC7E,MAAM,cAAc,GAAG,MAAM,OAAO,CAClC,8FAA8F,EAC9F;QACE,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,QAAQ,EAAE;SACpC;KACF,CACF,CAAA;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,4BAA4B,CAAC,CAAA;IAE1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAsB,EACtB,UAAkB,EAClB,KAAa;IAEb,MAAM,WAAW,GAAG,MAAM,OAAO,CAC/B,uCAAuC;QACrC,kCAAkC;QAClC,uBAAuB;QACvB,2CAA2C;QAC3C,YAAY,UAAU,EAAE;QACxB,qBAAqB,KAAK,EAAE;QAC5B,qBAAqB,EACvB;QACE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,YAAY,EAAE,kCAAkC;YAChD,MAAM,EAAE,kBAAkB;SAC3B;KACF,CACF,CAAA;IAED,OAAO;QACL,WAAW,EACT,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,WAAW;QAC5G,eAAe,EACb,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,eAAe;QAChH,YAAY,EACV,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,YAAY;KAC9G,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,OAAsB;IAGnE,IAAI,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,OAAO,mBAAmB,CAAC,WAAW,CAAA;IACxC,CAAC;IAGD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IAGxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjG,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAI3E,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;IAClD,mBAAmB,CAAC,WAAW,GAAG,WAAW,CAAA;IAE7C,OAAO,WAAW,CAAA;AACpB,CAAC"}
+{"version":3,"file":"sts.js","sourceRoot":"","sources":["../../../src/lib/AWS/sts.ts"],"names":[],"mappings":";;;AA+GA,4DAqBC;AApID,2BAAiC;AAEjC,oDAAkE;AAClE,wDAAoE;AACpE,uCAA2C;AA4C3C,MAAM,mBAAmB,GAAwB;IAC/C,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;CACxE,CAAA;AAED,SAAS,QAAQ;IACf,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,qDAAqD,CAAA;IACrG,OAAO,IAAA,iBAAY,EAAC,aAAa,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAGD,KAAK,UAAU,uBAAuB,CAAC,OAAsB,EAAE,QAAgB;IAC7E,MAAM,cAAc,GAAG,MAAM,OAAO,CAClC,8FAA8F,EAC9F;QACE,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,QAAQ,EAAE;SACpC;KACF,CACF,CAAA;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,4BAA4B,CAAC,CAAA;IAE1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAsB,EACtB,UAAkB,EAClB,KAAa;IAEb,MAAM,WAAW,GAAG,MAAM,OAAO,CAC/B,uCAAuC;QACrC,kCAAkC;QAClC,uBAAuB;QACvB,2CAA2C;QAC3C,YAAY,UAAU,EAAE;QACxB,qBAAqB,KAAK,EAAE;QAC5B,qBAAqB,EACvB;QACE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,YAAY,EAAE,kCAAkC;YAChD,MAAM,EAAE,kBAAkB;SAC3B;KACF,CACF,CAAA;IAED,OAAO;QACL,WAAW,EACT,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,WAAW;QAC5G,eAAe,EACb,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,eAAe;QAChH,YAAY,EACV,WAAW,CAAC,IAAI,CAAC,iCAAiC,CAAC,+BAA+B,CAAC,WAAW,CAAC,YAAY;KAC9G,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,OAAsB;IAGnE,IAAI,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,OAAO,mBAAmB,CAAC,WAAW,CAAA;IACxC,CAAC;IAGD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IAGxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjG,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAI3E,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;IAClD,mBAAmB,CAAC,WAAW,GAAG,WAAW,CAAA;IAE7C,OAAO,WAAW,CAAA;AACpB,CAAC;AAEM,MAAM,UAAU,GAAG,KAAK,EAAE,OAAe,EAAE,UAAkB,EAAE,MAAc,EAA2B,EAAE;IAC/G,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,8BAAwC,CAAA;IAC5E,MAAM,sBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAuC,CAAA;IAClF,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAA;IAClG,OAAO,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAA;AAC1E,CAAC,CAAA;AALY,QAAA,UAAU,cAKtB;AAED,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAc,EAAE,UAAkB,EAAE,MAAc,EAAE,WAA4B,EAAE,EAAE;IACnH,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC/C,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,eAAe,GAAW,IAAA,SAAM,GAAE,CAAA;IACxC,MAAM,OAAO,GAAG,IAAI,8BAAiB,CAAC;QACpC,OAAO,EAAE,MAAM;QACf,eAAe,EAAE,eAAe;QAChC,UAAU,EAAE,UAAU;KACvB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5C,IACE,CAAC,MAAM,CAAC,WAAW;QACnB,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW;QAC/B,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;QACnC,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAChC,CAAC;QACD,MAAM,IAAI,+BAAgB,CAAC,uBAAuB,EAAE,yBAAU,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAA;IAC7F,CAAC;IAED,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW;QAC3C,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe;QACnD,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY;KAC9C,CAAA;AACH,CAAC,CAAA"}

package/dist/lib/AWS/utils.d.ts

@@ -0,0 +1 @@
+export declare const APP_AWS_REGION: string;

package/dist/lib/AWS/utils.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_AWS_REGION = void 0;
+exports.APP_AWS_REGION = process.env['AWS_REGION'] || `us-west-2`;
+//# sourceMappingURL=utils.js.map

package/dist/lib/AWS/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/lib/AWS/utils.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,WAAW,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@segment/action-destinations",
   "description": "Destination Actions engine and definitions.",
-  "version": "3.442.0",
+  "version": "3.443.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/segmentio/action-destinations",
@@ -46,8 +46,8 @@
     "@aws-sdk/client-sts": "3.614.0",
     "@bufbuild/protobuf": "^2.2.3",
     "@segment/a1-notation": "^2.1.4",
-    "@segment/actions-core": "^3.161.0",
-    "@segment/actions-shared": "^1.142.0",
+    "@segment/actions-core": "^3.162.0",
+    "@segment/actions-shared": "^1.143.0",
     "@types/node": "^22.13.1",
     "ajv-formats": "^2.1.1",
     "aws4": "^1.12.0",
@@ -91,5 +91,5 @@
       "__tests__/__helpers__/"
     ]
   },
-  "gitHead": "506c62d4e40e0cae653d5bde0b274bcc2fe036d3"
+  "gitHead": "9f761ec6b754ca6e4ebf25821c39730529f7e815"
 }