@takumi-stack/core 1.0.0 → 1.0.1

package/script/config-command/deploy-spa.ts

@@ -0,0 +1,126 @@
+/* eslint-disable no-console */
+import { CloudFrontClient, CreateInvalidationCommand } from '@aws-sdk/client-cloudfront';
+import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
+
+import { ExecSyncOptions, execSync } from 'child_process';
+import { writeFileSync } from 'fs';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+  BaseRegionName,
+  assumeRole,
+  getResourceName,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const deploySPA: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Deploy SPA Started >>');
+
+    const yarnCommand = args[5] || 'build';
+
+    const { envName, ephemeralEnvName, servicesNamesInput, envNameInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    console.log('>> STEP: (1/4) => LOADING CONFIGS');
+    const projectName = globalConstConfig.projectName;
+
+    const account =
+      accountMap
+        .split(' ')
+        .find((a) => a.includes('services'))
+        ?.split('=')[1] || '';
+    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
+
+    const role = await assumeRole({ account, region }, roleName);
+
+    console.log('>> STEP: (2/4) => RENDERING ENV');
+
+    const getParamName = (name: string) =>
+      getResourceName(name, {
+        isSingleProjectAccount,
+        projectName,
+        envName,
+        ephemeralEnvName,
+        serviceName: servicesNamesInput[0]!,
+      });
+
+    const ssm = new SSMClient(role);
+    const deployConfig = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
+
+    if (!deployConfig.Parameter?.Value) throw new Error('Invalid Config');
+    const { domain, bucketName, distributionId, assetMaxAge, indexMaxAge, baseDir, distDir } = JSON.parse(deployConfig.Parameter?.Value);
+
+    const calculatedEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-calculated') }));
+    if (!calculatedEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
+
+    const manualEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-manual') }));
+    if (!manualEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
+
+    const envFile = `${calculatedEnv.Parameter?.Value}\n${manualEnv.Parameter?.Value}`;
+
+    writeFileSync(`${process.cwd()}/${baseDir}/.env.${envNameInput}`, envFile);
+
+    console.log('>> STEP: (3/4) => BUILDING');
+
+    const command = `yarn && yarn ${yarnCommand} ${envNameInput}`;
+
+    execSync(command, { stdio: 'inherit', cwd: `${process.cwd()}/${baseDir}` });
+
+    const copyFolderCmd = `aws s3 cp ${distDir}/ s3://${bucketName}/ --recursive --cache-control "max-age=${assetMaxAge}" --exclude "index.html"`;
+    const copyIndexCmd = `aws s3 cp ${distDir}/index.html s3://${bucketName}/index.html --cache-control "max-age=${indexMaxAge}"`;
+    const execOptions: ExecSyncOptions = {
+      stdio: 'inherit',
+      cwd: `${process.cwd()}/${baseDir}`,
+      env: {
+        ...process.env,
+        AWS_ACCESS_KEY_ID: role.credentials.accessKeyId,
+        AWS_SECRET_ACCESS_KEY: role.credentials.secretAccessKey,
+        AWS_SESSION_TOKEN: role.credentials.sessionToken,
+        AWS_REGION: role.region,
+      },
+    };
+    execSync(copyFolderCmd, execOptions);
+    execSync(copyIndexCmd, execOptions);
+    console.log('STEP: (4/4) => CREATING INVALIDATION');
+
+    const cf = new CloudFrontClient(role);
+    await cf.send(
+      new CreateInvalidationCommand({
+        DistributionId: distributionId,
+        InvalidationBatch: {
+          CallerReference: Date.now().toString(),
+          Paths: {
+            Items: ['/*'],
+            Quantity: 1,
+          },
+        },
+      })
+    );
+    console.log(`>> DEPLOYED AT => ${domain}`);
+  } catch (error: any) {
+    console.log(error);
+    process.exit(1);
+  }
+};

package/script/config-command/deploy.ts

@@ -0,0 +1,50 @@
+/* eslint-disable no-console */
+import { execSync } from 'child_process';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const deploy: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Deploy Started >>');
+
+    const { envNameInput, roleName, outputFile, servicesNames, accountMap } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    const command = `npx cdk deploy \
+    --require-approval='never' \
+    --cloudformation-execution-policies=arn:aws:iam::aws:policy/AdministratorAccess \
+    --context env=${envNameInput} \
+    --context assume-role-credentials:writeIamRoleName=${roleName} \
+    --context assume-role-credentials:readIamRoleName=${roleName} \
+    --outputs-file ${outputFile} \
+    ${accountMap} ${servicesNames}`;
+
+    execSync(command, { stdio: 'inherit', env: process.env });
+  } catch (error: any) {
+    process.exit(1);
+  }
+};

package/script/config-command/destroy.ts

@@ -0,0 +1,49 @@
+/* eslint-disable no-console */
+import { execSync } from 'child_process';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const destroy: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Destroy Started >>');
+
+    const { envNameInput, roleName, outputFile, servicesNames, accountMap } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+    const command = `npx cdk destroy \
+      --require-approval='never' \
+      --cloudformation-execution-policies=arn:aws:iam::aws:policy/AdministratorAccess \
+      --context env=${envNameInput} \
+      --context assume-role-credentials:writeIamRoleName=${roleName} \
+      --context assume-role-credentials:readIamRoleName=${roleName} \
+      --outputs-file ${outputFile} \
+      ${accountMap} ${servicesNames}`;
+
+    execSync(command, { stdio: 'inherit', env: process.env });
+  } catch (error: any) {
+    process.exit(1);
+  }
+};

package/script/config-command/env-ssr.ts

@@ -0,0 +1,85 @@
+/* eslint-disable no-console */
+import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
+
+import { writeFileSync } from 'fs';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+  assumeRole,
+  getResourceName,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const envSSR: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Env SSR Started >>');
+
+    const { envName, ephemeralEnvName, servicesNamesInput, envNameInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    console.log('>> STEP: (1/2) => LOADING CONFIGS');
+    const projectName = globalConstConfig.projectName;
+
+    const account =
+      accountMap
+        .split(' ')
+        .find((a) => a.includes('services'))
+        ?.split('=')[1] || '';
+
+    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
+
+    console.log('>> STEP: (2/2) => RENDERING ENV');
+
+    const getParamName = (name: string) =>
+      getResourceName(name, {
+        isSingleProjectAccount,
+        projectName,
+        envName,
+        ephemeralEnvName,
+        serviceName: servicesNamesInput[0]!,
+      });
+
+    const role = await assumeRole({ account, region }, roleName);
+
+    const ssm = new SSMClient(role);
+    const deployConfig = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
+    if (!deployConfig.Parameter?.Value) throw new Error('Invalid Config');
+    const { baseDir } = JSON.parse(deployConfig.Parameter?.Value);
+
+    const calculatedEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-calculated') }));
+    if (!calculatedEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
+
+    const manualEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-manual') }));
+    if (!manualEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
+
+    const envFile = `${calculatedEnv.Parameter?.Value}\n${manualEnv.Parameter?.Value}`;
+
+    writeFileSync(`${process.cwd()}/${baseDir}/.env.${envNameInput}`, envFile);
+
+    console.log(`>> Env Created => ${process.cwd()}/${baseDir}/.env.${envNameInput}`);
+  } catch (error: any) {
+    console.log(error);
+    process.exit(1);
+  }
+};

package/script/config-command/invalidation-ssr.ts

@@ -0,0 +1,88 @@
+/* eslint-disable no-console */
+import { CloudFrontClient, CreateInvalidationCommand } from '@aws-sdk/client-cloudfront';
+import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+  assumeRole,
+  getResourceName,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const invalidationSSR: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Invalidation SSR Started >>');
+
+    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    console.log('>> STEP: (1/3) => LOADING CONFIGS');
+    const projectName = globalConstConfig.projectName;
+
+    const account =
+      accountMap
+        .split(' ')
+        .find((a) => a.includes('services'))
+        ?.split('=')[1] || '';
+    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
+
+    console.log('>> STEP: (2/3) => RENDERING ENV');
+
+    const getParamName = (name: string) =>
+      getResourceName(name, {
+        isSingleProjectAccount,
+        projectName,
+        envName,
+        ephemeralEnvName,
+        serviceName: servicesNamesInput[0]!,
+      });
+
+    const role = await assumeRole({ account, region }, roleName);
+
+    const ssm = new SSMClient(role);
+    const deployConfig = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
+    if (!deployConfig.Parameter?.Value) throw new Error('Invalid Config');
+    const { distributionId } = JSON.parse(deployConfig.Parameter?.Value);
+
+    console.log('STEP: (3/3) => CREATING INVALIDATION');
+
+    const cf = new CloudFrontClient(role);
+    await cf.send(
+      new CreateInvalidationCommand({
+        DistributionId: distributionId,
+        InvalidationBatch: {
+          CallerReference: Date.now().toString(),
+          Paths: {
+            Items: ['/*'],
+            Quantity: 1,
+          },
+        },
+      })
+    );
+    console.log(`>> Invalidation Created =>  DistributionId ${distributionId}`);
+  } catch (error: any) {
+    console.log(error);
+    process.exit(1);
+  }
+};

package/script/config-command/rds-migration.ts

@@ -0,0 +1,177 @@
+/* eslint-disable no-console */
+import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { SSMClient, GetParameterCommand } from '@aws-sdk/client-ssm';
+
+import { CustomDataSourceOptions, Secret } from '@takumi-stack/sdk';
+import { ExecSyncOptions, execSync } from 'child_process';
+import { log } from 'console';
+import { unlinkSync, writeFileSync } from 'fs';
+import { DataSource } from 'typeorm';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+  assumeRole,
+  getResourceName,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export let dataSource: DataSource;
+
+export const rdsMigration: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    console.log('<< Migration RDS Started >>');
+
+    const commandArg = args[5] || 'generate';
+
+    if (!['generate', 'run', 'revert'].includes(commandArg)) throw new Error('Action not allowed, you can use: generate, run or revert');
+
+    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    console.log('>> STEP: (1/2) => LOADING CONFIGS');
+    const projectName = globalConstConfig.projectName;
+
+    const account =
+      accountMap
+        .split(' ')
+        .find((a) => a.includes('services'))
+        ?.split('=')[1] || '';
+    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
+
+    const role = await assumeRole({ account, region }, roleName);
+
+    const getParamName = (name: string) =>
+      getResourceName(name, {
+        isSingleProjectAccount,
+        projectName,
+        envName,
+        ephemeralEnvName,
+        serviceName: servicesNamesInput[0]!,
+      });
+
+    const ssm = new SSMClient(role);
+    const configs = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
+
+    if (!configs.Parameter?.Value) throw new Error('Invalid Config');
+    const { baseDir, clusterSecretArn, publicAccess } = JSON.parse(configs.Parameter?.Value);
+
+    const sm: SecretsManagerClient = new SecretsManagerClient(role);
+    const response = await sm.send(
+      new GetSecretValueCommand({
+        SecretId: clusterSecretArn,
+      })
+    );
+
+    const DbSecrets: Secret['payload'] = JSON.parse(response.SecretString!);
+    const { username, password, host, port } = DbSecrets;
+    const localHost = '127.0.0.1';
+    const localPort = 1433;
+
+    const rdsConfigPath = `${process.cwd()}/${baseDir}/config/rds.ts`;
+    const rdsConfigValue = (await import(rdsConfigPath))['default'] as CustomDataSourceOptions;
+
+    const migrationsDefault = `${process.cwd()}/${baseDir}/migrations/*.{ts, js}`;
+
+    if (commandArg === 'generate') {
+      log('>> STEP: (2/2) => GENERATING MIGRATION');
+
+      writeFileSync(
+        `${process.cwd()}/${baseDir}/config/ormconfig.ts`,
+        `import { DataSource } from 'typeorm';
+
+      export const connectionSource = new DataSource({
+        type: 'postgres',
+        database: 'postgres',
+        host: process.env.CC_HOST,
+        port: Number(process.env.CC_PORT),
+        username: process.env.CC_USER,
+        password: process.env.CC_PASS,
+        entities: [...process.env.CC_ENTITIES!.split(',')],
+        migrations: [process.env.CC_MIGRATIONS!],
+      });`
+      );
+
+      const command = `npx typeorm-ts-node-esm migration:generate ./${baseDir}/migrations/m -d ./${baseDir}/config/ormconfig.ts`;
+
+      const execOptions: ExecSyncOptions = {
+        stdio: 'inherit',
+        cwd: `${process.cwd()}`,
+        env: {
+          ...process.env,
+          CC_HOST: publicAccess ? host : localHost,
+          CC_PORT: publicAccess ? `${port}` : `${localPort}`,
+          CC_USER: username,
+          CC_PASS: password,
+          CC_ENTITIES: rdsConfigValue.entities as any,
+          CC_MIGRATIONS: migrationsDefault,
+        },
+      };
+
+      try {
+        execSync(command, execOptions);
+        unlinkSync(`${process.cwd()}/${baseDir}/config/ormconfig.ts`);
+      } catch (error) {
+        unlinkSync(`${process.cwd()}/${baseDir}/config/ormconfig.ts`);
+        throw error;
+      }
+    }
+
+    if (commandArg === 'run') {
+      log('>> STEP: (2/2) => RUNNING MIGRATION');
+      const dataSource = new DataSource({
+        type: 'postgres',
+        database: 'postgres',
+        host: publicAccess ? host : localHost,
+        port: publicAccess ? port : localPort,
+        username,
+        password,
+        entities: rdsConfigValue.entities,
+        migrations: [migrationsDefault],
+      });
+      await dataSource.initialize();
+      await dataSource.runMigrations();
+    }
+
+    if (commandArg === 'revert') {
+      log('>> STEP: (2/2) => REVERT MIGRATION');
+      const dataSource = new DataSource({
+        type: 'postgres',
+        database: 'postgres',
+        host: publicAccess ? host : localHost,
+        port: publicAccess ? port : localPort,
+        username,
+        password,
+        entities: rdsConfigValue.entities,
+        migrations: [migrationsDefault],
+      });
+      await dataSource.initialize();
+      await dataSource.undoLastMigration();
+    }
+
+    console.log('MIGRATION READY! ✅');
+  } catch (error: any) {
+    console.log(error);
+    process.exit(1);
+  }
+};

package/script/config-command/rds-sync.ts

@@ -0,0 +1,108 @@
+/* eslint-disable no-console */
+import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';
+import { SSMClient, GetParameterCommand } from '@aws-sdk/client-ssm';
+
+import { CustomDataSourceOptions, Secret } from '@takumi-stack/sdk';
+import { log } from 'console';
+import { DataSource } from 'typeorm';
+
+import {
+  BaseEnvName,
+  BaseGlobalEnv,
+  BaseDeployTargetName,
+  BaseGlobalConstConfig,
+  BaseGlobalEnvConfig,
+  BaseGlobalDeployTargetConfig,
+  preScript,
+  assumeRole,
+  getResourceName,
+} from '../../common';
+
+import { ConfigCommand } from '..';
+
+export const rdsSync: ConfigCommand = async <
+  GlobalConst,
+  AllowedEnv extends BaseEnvName = BaseEnvName,
+  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
+  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
+>(
+  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
+  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
+  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
+  args: string[]
+): Promise<void> => {
+  try {
+    log('<< Sync RDS Started >>');
+
+    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
+      globalConstConfig,
+      globalEnvConfig,
+      globalDeployTargetConfig,
+      args
+    );
+
+    if (!['dev', 'develop'].includes(envName)) throw new Error('Sync only allowed in DEV');
+
+    log('>> STEP: (1/2) => LOADING CONFIGS');
+    const projectName = globalConstConfig.projectName;
+
+    const account =
+      accountMap
+        .split(' ')
+        .find((a) => a.includes('services'))
+        ?.split('=')[1] || '';
+
+    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
+
+    const role = await assumeRole({ account, region }, roleName);
+
+    const getParamName = (name: string) =>
+      getResourceName(name, {
+        isSingleProjectAccount,
+        projectName,
+        envName,
+        ephemeralEnvName,
+        serviceName: servicesNamesInput[0]!,
+      });
+
+    const ssm = new SSMClient(role);
+    const configs = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
+
+    if (!configs.Parameter?.Value) throw new Error('Invalid Config');
+    const { baseDir, clusterSecretArn, publicAccess } = JSON.parse(configs.Parameter?.Value);
+
+    const sm: SecretsManagerClient = new SecretsManagerClient(role);
+    const response = await sm.send(
+      new GetSecretValueCommand({
+        SecretId: clusterSecretArn,
+      })
+    );
+
+    const DbSecrets: Secret['payload'] = JSON.parse(response.SecretString!);
+
+    const rdsConfigPath = `${process.cwd()}/${baseDir}/config/rds.ts`;
+    const rdsConfigValue = (await import(rdsConfigPath))['default'] as CustomDataSourceOptions;
+
+    log('>> STEP: (2/2) => SYNC WITH DB');
+
+    const { username, password, host, port } = DbSecrets;
+    const localHost = '127.0.0.1';
+    const localPort = 1432;
+
+    const dataSource = new DataSource({
+      type: 'postgres',
+      database: 'postgres',
+      host: publicAccess ? host : localHost,
+      port: publicAccess ? port : localPort,
+      username,
+      password,
+      entities: rdsConfigValue.entities,
+    });
+    await dataSource.initialize();
+    await dataSource.synchronize();
+    console.log('SYNC READY! ✅');
+  } catch (error: any) {
+    console.log(error);
+    process.exit(1);
+  }
+};