@webiny/project-aws 0.0.0-unstable.3c5210ad37

package/pulumi/apps/core/CoreAuditLogsDynamo.js

@@ -0,0 +1,186 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const CoreAuditLogsDynamo = createAppModule({
+  name: "AuditLogsDynamoDb",
+  config(app, params) {
+    return app.addResource(aws.dynamodb.Table, {
+      name: "webiny-audit-logs",
+      config: {
+        attributes: [{
+          name: "PK",
+          type: "S"
+        }, {
+          name: "SK",
+          type: "S"
+        }, {
+          name: "GSI_TENANT",
+          type: "S"
+        }, {
+          name: "GSI1_PK",
+          type: "S"
+        }, {
+          name: "GSI1_SK",
+          type: "N"
+        }, {
+          name: "GSI2_PK",
+          type: "S"
+        }, {
+          name: "GSI2_SK",
+          type: "N"
+        }, {
+          name: "GSI3_PK",
+          type: "S"
+        }, {
+          name: "GSI3_SK",
+          type: "N"
+        }, {
+          name: "GSI4_PK",
+          type: "S"
+        }, {
+          name: "GSI4_SK",
+          type: "N"
+        }, {
+          name: "GSI5_PK",
+          type: "S"
+        }, {
+          name: "GSI5_SK",
+          type: "N"
+        }, {
+          name: "GSI6_PK",
+          type: "S"
+        }, {
+          name: "GSI6_SK",
+          type: "N"
+        }, {
+          name: "GSI7_PK",
+          type: "S"
+        }, {
+          name: "GSI7_SK",
+          type: "N"
+        }, {
+          name: "GSI8_PK",
+          type: "S"
+        }, {
+          name: "GSI8_SK",
+          type: "N"
+        }, {
+          name: "GSI9_PK",
+          type: "S"
+        }, {
+          name: "GSI9_SK",
+          type: "N"
+        }],
+        billingMode: "PAY_PER_REQUEST",
+        hashKey: "PK",
+        rangeKey: "SK",
+        globalSecondaryIndexes: [{
+          name: "GSI_TENANT",
+          keySchemas: [{
+            attributeName: "GSI_TENANT",
+            keyType: "HASH"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI1",
+          keySchemas: [{
+            attributeName: "GSI1_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI1_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI2",
+          keySchemas: [{
+            attributeName: "GSI2_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI2_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI3",
+          keySchemas: [{
+            attributeName: "GSI3_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI3_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI4",
+          keySchemas: [{
+            attributeName: "GSI4_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI4_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI5",
+          keySchemas: [{
+            attributeName: "GSI5_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI5_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI6",
+          keySchemas: [{
+            attributeName: "GSI6_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI6_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI7",
+          keySchemas: [{
+            attributeName: "GSI7_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI7_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI8",
+          keySchemas: [{
+            attributeName: "GSI8_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI8_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI9",
+          keySchemas: [{
+            attributeName: "GSI9_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI9_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "KEYS_ONLY"
+        }],
+        ttl: {
+          attributeName: "expiresAt",
+          enabled: true
+        }
+      },
+      opts: {
+        protect: params.protect
+      }
+    });
+  }
+});
+
+//# sourceMappingURL=CoreAuditLogsDynamo.js.map

package/pulumi/apps/core/CoreAuditLogsDynamo.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","CoreAuditLogsDynamo","name","config","app","params","addResource","dynamodb","Table","attributes","type","billingMode","hashKey","rangeKey","globalSecondaryIndexes","keySchemas","attributeName","keyType","projectionType","ttl","enabled","opts","protect"],"sources":["CoreAuditLogsDynamo.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport type CoreAuditLogsDynamo = PulumiAppModule<typeof CoreAuditLogsDynamo>;\n\nexport const CoreAuditLogsDynamo = createAppModule({\n    name: \"AuditLogsDynamoDb\",\n    config(app: PulumiApp, params: { protect: boolean }) {\n        return app.addResource(aws.dynamodb.Table, {\n            name: \"webiny-audit-logs\",\n            config: {\n                attributes: [\n                    { name: \"PK\", type: \"S\" },\n                    { name: \"SK\", type: \"S\" },\n                    { name: \"GSI_TENANT\", type: \"S\" },\n                    { name: \"GSI1_PK\", type: \"S\" },\n                    { name: \"GSI1_SK\", type: \"N\" },\n                    { name: \"GSI2_PK\", type: \"S\" },\n                    { name: \"GSI2_SK\", type: \"N\" },\n                    { name: \"GSI3_PK\", type: \"S\" },\n                    { name: \"GSI3_SK\", type: \"N\" },\n                    { name: \"GSI4_PK\", type: \"S\" },\n                    { name: \"GSI4_SK\", type: \"N\" },\n                    { name: \"GSI5_PK\", type: \"S\" },\n                    { name: \"GSI5_SK\", type: \"N\" },\n                    { name: \"GSI6_PK\", type: \"S\" },\n                    { name: \"GSI6_SK\", type: \"N\" },\n                    { name: \"GSI7_PK\", type: \"S\" },\n                    { name: \"GSI7_SK\", type: \"N\" },\n                    { name: \"GSI8_PK\", type: \"S\" },\n                    { name: \"GSI8_SK\", type: \"N\" },\n                    { name: \"GSI9_PK\", type: \"S\" },\n                    { name: \"GSI9_SK\", type: \"N\" }\n                ],\n                billingMode: \"PAY_PER_REQUEST\",\n                hashKey: \"PK\",\n                rangeKey: \"SK\",\n                globalSecondaryIndexes: [\n                    {\n                        name: \"GSI_TENANT\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI_TENANT\",\n                                keyType: \"HASH\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI1\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI1_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI1_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI2\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI2_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI2_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI3\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI3_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI3_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI4\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI4_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI4_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI5\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI5_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI5_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI6\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI6_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI6_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI7\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI7_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI7_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI8\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI8_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI8_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI9\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI9_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI9_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    }\n                ],\n                ttl: {\n                    attributeName: \"expiresAt\",\n                    enabled: true\n                }\n            },\n            opts: {\n                protect: params.protect\n            }\n        });\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAIhD,OAAO,MAAMC,mBAAmB,GAAGD,eAAe,CAAC;EAC/CE,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAEC,MAA4B,EAAE;IACjD,OAAOD,GAAG,CAACE,WAAW,CAACP,GAAG,CAACQ,QAAQ,CAACC,KAAK,EAAE;MACvCN,IAAI,EAAE,mBAAmB;MACzBC,MAAM,EAAE;QACJM,UAAU,EAAE,CACR;UAAEP,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,YAAY;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACjC;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,CACjC;QACDC,WAAW,EAAE,iBAAiB;QAC9BC,OAAO,EAAE,IAAI;QACbC,QAAQ,EAAE,IAAI;QACdC,sBAAsB,EAAE,CACpB;UACIZ,IAAI,EAAE,YAAY;UAClBa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,YAAY;YAC3BC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,CACJ;QACDC,GAAG,EAAE;UACDH,aAAa,EAAE,WAAW;UAC1BI,OAAO,EAAE;QACb;MACJ,CAAC;MACDC,IAAI,EAAE;QACFC,OAAO,EAAEjB,MAAM,CAACiB;MACpB;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/CoreCognito.d.ts

@@ -0,0 +1,10 @@
+import { type PulumiAppModule } from "@webiny/pulumi";
+export interface CoreCognitoParams {
+    protect: boolean;
+    useEmailAsUsername: boolean;
+}
+export type CoreCognito = PulumiAppModule<typeof CoreCognito>;
+export declare const CoreCognito: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    userPool: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cognito/userPool").UserPool>;
+    userPoolClient: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cognito/userPoolClient").UserPoolClient>;
+}, CoreCognitoParams>;

package/pulumi/apps/core/CoreCognito.js

@@ -0,0 +1,110 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const CoreCognito = createAppModule({
+  name: "Cognito",
+  config(app, params) {
+    const userPool = app.addResource(aws.cognito.UserPool, {
+      name: "user-pool",
+      config: {
+        passwordPolicy: {
+          minimumLength: 8,
+          requireLowercase: false,
+          requireNumbers: false,
+          requireSymbols: false,
+          requireUppercase: false,
+          temporaryPasswordValidityDays: 7
+        },
+        adminCreateUserConfig: {
+          allowAdminCreateUserOnly: true
+        },
+        autoVerifiedAttributes: ["email"],
+        emailConfiguration: {
+          emailSendingAccount: "COGNITO_DEFAULT"
+        },
+        // In a legacy setup we use email as username.
+        // We need to provide a way for users to have this setup,
+        // because changing it would require whole cognito pool to be recreated.
+        usernameAttributes: params.useEmailAsUsername ? ["email"] : undefined,
+        aliasAttributes: params.useEmailAsUsername ? undefined : ["preferred_username"],
+        lambdaConfig: {},
+        mfaConfiguration: "OFF",
+        userPoolAddOns: {
+          advancedSecurityMode: "OFF" /* required */
+        },
+        verificationMessageTemplate: {
+          defaultEmailOption: "CONFIRM_WITH_CODE"
+        },
+        accountRecoverySetting: {
+          recoveryMechanisms: [{
+            name: "verified_email",
+            priority: 1
+          }]
+        },
+        schemas: [{
+          attributeDataType: "String",
+          name: "email",
+          required: true,
+          developerOnlyAttribute: false,
+          mutable: true,
+          stringAttributeConstraints: {
+            maxLength: "2048",
+            minLength: "0"
+          }
+        }, {
+          attributeDataType: "String",
+          name: "family_name",
+          required: true,
+          developerOnlyAttribute: false,
+          mutable: true,
+          stringAttributeConstraints: {
+            maxLength: "2048",
+            minLength: "0"
+          }
+        }, {
+          attributeDataType: "String",
+          name: "given_name",
+          required: true,
+          developerOnlyAttribute: false,
+          mutable: true,
+          stringAttributeConstraints: {
+            maxLength: "2048",
+            minLength: "0"
+          }
+        }, {
+          attributeDataType: "String",
+          name: "id",
+          required: false,
+          developerOnlyAttribute: false,
+          mutable: true,
+          stringAttributeConstraints: {
+            maxLength: "36",
+            minLength: "0"
+          }
+        }]
+      },
+      opts: {
+        protect: params.protect
+      }
+    });
+    const userPoolClient = app.addResource(aws.cognito.UserPoolClient, {
+      name: "user-pool-client",
+      config: {
+        userPoolId: userPool.output.id,
+        accessTokenValidity: 60,
+        idTokenValidity: 60,
+        refreshTokenValidity: 30,
+        tokenValidityUnits: {
+          accessToken: "minutes",
+          idToken: "minutes",
+          refreshToken: "days"
+        }
+      }
+    });
+    return {
+      userPool,
+      userPoolClient
+    };
+  }
+});
+
+//# sourceMappingURL=CoreCognito.js.map

package/pulumi/apps/core/CoreCognito.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","CoreCognito","name","config","app","params","userPool","addResource","cognito","UserPool","passwordPolicy","minimumLength","requireLowercase","requireNumbers","requireSymbols","requireUppercase","temporaryPasswordValidityDays","adminCreateUserConfig","allowAdminCreateUserOnly","autoVerifiedAttributes","emailConfiguration","emailSendingAccount","usernameAttributes","useEmailAsUsername","undefined","aliasAttributes","lambdaConfig","mfaConfiguration","userPoolAddOns","advancedSecurityMode","verificationMessageTemplate","defaultEmailOption","accountRecoverySetting","recoveryMechanisms","priority","schemas","attributeDataType","required","developerOnlyAttribute","mutable","stringAttributeConstraints","maxLength","minLength","opts","protect","userPoolClient","UserPoolClient","userPoolId","output","id","accessTokenValidity","idTokenValidity","refreshTokenValidity","tokenValidityUnits","accessToken","idToken","refreshToken"],"sources":["CoreCognito.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp, type PulumiAppModule } from \"@webiny/pulumi\";\n\nexport interface CoreCognitoParams {\n    protect: boolean;\n    useEmailAsUsername: boolean;\n}\n\nexport type CoreCognito = PulumiAppModule<typeof CoreCognito>;\n\nexport const CoreCognito = createAppModule({\n    name: \"Cognito\",\n    config(app: PulumiApp, params: CoreCognitoParams) {\n        const userPool = app.addResource(aws.cognito.UserPool, {\n            name: \"user-pool\",\n            config: {\n                passwordPolicy: {\n                    minimumLength: 8,\n                    requireLowercase: false,\n                    requireNumbers: false,\n                    requireSymbols: false,\n                    requireUppercase: false,\n                    temporaryPasswordValidityDays: 7\n                },\n                adminCreateUserConfig: {\n                    allowAdminCreateUserOnly: true\n                },\n                autoVerifiedAttributes: [\"email\"],\n                emailConfiguration: {\n                    emailSendingAccount: \"COGNITO_DEFAULT\"\n                },\n                // In a legacy setup we use email as username.\n                // We need to provide a way for users to have this setup,\n                // because changing it would require whole cognito pool to be recreated.\n                usernameAttributes: params.useEmailAsUsername ? [\"email\"] : undefined,\n                aliasAttributes: params.useEmailAsUsername ? undefined : [\"preferred_username\"],\n                lambdaConfig: {},\n                mfaConfiguration: \"OFF\",\n                userPoolAddOns: {\n                    advancedSecurityMode: \"OFF\" /* required */\n                },\n                verificationMessageTemplate: {\n                    defaultEmailOption: \"CONFIRM_WITH_CODE\"\n                },\n                accountRecoverySetting: {\n                    recoveryMechanisms: [{ name: \"verified_email\", priority: 1 }]\n                },\n                schemas: [\n                    {\n                        attributeDataType: \"String\",\n                        name: \"email\",\n                        required: true,\n                        developerOnlyAttribute: false,\n                        mutable: true,\n                        stringAttributeConstraints: {\n                            maxLength: \"2048\",\n                            minLength: \"0\"\n                        }\n                    },\n                    {\n                        attributeDataType: \"String\",\n                        name: \"family_name\",\n                        required: true,\n                        developerOnlyAttribute: false,\n                        mutable: true,\n                        stringAttributeConstraints: {\n                            maxLength: \"2048\",\n                            minLength: \"0\"\n                        }\n                    },\n                    {\n                        attributeDataType: \"String\",\n                        name: \"given_name\",\n                        required: true,\n                        developerOnlyAttribute: false,\n                        mutable: true,\n                        stringAttributeConstraints: {\n                            maxLength: \"2048\",\n                            minLength: \"0\"\n                        }\n                    },\n                    {\n                        attributeDataType: \"String\",\n                        name: \"id\",\n                        required: false,\n                        developerOnlyAttribute: false,\n                        mutable: true,\n                        stringAttributeConstraints: {\n                            maxLength: \"36\",\n                            minLength: \"0\"\n                        }\n                    }\n                ]\n            },\n            opts: {\n                protect: params.protect\n            }\n        });\n\n        const userPoolClient = app.addResource(aws.cognito.UserPoolClient, {\n            name: \"user-pool-client\",\n            config: {\n                userPoolId: userPool.output.id,\n                accessTokenValidity: 60,\n                idTokenValidity: 60,\n                refreshTokenValidity: 30,\n                tokenValidityUnits: {\n                    accessToken: \"minutes\",\n                    idToken: \"minutes\",\n                    refreshToken: \"days\"\n                }\n            }\n        });\n\n        return {\n            userPool,\n            userPoolClient\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAA8C,gBAAgB;AAStF,OAAO,MAAMC,WAAW,GAAGD,eAAe,CAAC;EACvCE,IAAI,EAAE,SAAS;EACfC,MAAMA,CAACC,GAAc,EAAEC,MAAyB,EAAE;IAC9C,MAAMC,QAAQ,GAAGF,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,OAAO,CAACC,QAAQ,EAAE;MACnDP,IAAI,EAAE,WAAW;MACjBC,MAAM,EAAE;QACJO,cAAc,EAAE;UACZC,aAAa,EAAE,CAAC;UAChBC,gBAAgB,EAAE,KAAK;UACvBC,cAAc,EAAE,KAAK;UACrBC,cAAc,EAAE,KAAK;UACrBC,gBAAgB,EAAE,KAAK;UACvBC,6BAA6B,EAAE;QACnC,CAAC;QACDC,qBAAqB,EAAE;UACnBC,wBAAwB,EAAE;QAC9B,CAAC;QACDC,sBAAsB,EAAE,CAAC,OAAO,CAAC;QACjCC,kBAAkB,EAAE;UAChBC,mBAAmB,EAAE;QACzB,CAAC;QACD;QACA;QACA;QACAC,kBAAkB,EAAEjB,MAAM,CAACkB,kBAAkB,GAAG,CAAC,OAAO,CAAC,GAAGC,SAAS;QACrEC,eAAe,EAAEpB,MAAM,CAACkB,kBAAkB,GAAGC,SAAS,GAAG,CAAC,oBAAoB,CAAC;QAC/EE,YAAY,EAAE,CAAC,CAAC;QAChBC,gBAAgB,EAAE,KAAK;QACvBC,cAAc,EAAE;UACZC,oBAAoB,EAAE,KAAK,CAAC;QAChC,CAAC;QACDC,2BAA2B,EAAE;UACzBC,kBAAkB,EAAE;QACxB,CAAC;QACDC,sBAAsB,EAAE;UACpBC,kBAAkB,EAAE,CAAC;YAAE/B,IAAI,EAAE,gBAAgB;YAAEgC,QAAQ,EAAE;UAAE,CAAC;QAChE,CAAC;QACDC,OAAO,EAAE,CACL;UACIC,iBAAiB,EAAE,QAAQ;UAC3BlC,IAAI,EAAE,OAAO;UACbmC,QAAQ,EAAE,IAAI;UACdC,sBAAsB,EAAE,KAAK;UAC7BC,OAAO,EAAE,IAAI;UACbC,0BAA0B,EAAE;YACxBC,SAAS,EAAE,MAAM;YACjBC,SAAS,EAAE;UACf;QACJ,CAAC,EACD;UACIN,iBAAiB,EAAE,QAAQ;UAC3BlC,IAAI,EAAE,aAAa;UACnBmC,QAAQ,EAAE,IAAI;UACdC,sBAAsB,EAAE,KAAK;UAC7BC,OAAO,EAAE,IAAI;UACbC,0BAA0B,EAAE;YACxBC,SAAS,EAAE,MAAM;YACjBC,SAAS,EAAE;UACf;QACJ,CAAC,EACD;UACIN,iBAAiB,EAAE,QAAQ;UAC3BlC,IAAI,EAAE,YAAY;UAClBmC,QAAQ,EAAE,IAAI;UACdC,sBAAsB,EAAE,KAAK;UAC7BC,OAAO,EAAE,IAAI;UACbC,0BAA0B,EAAE;YACxBC,SAAS,EAAE,MAAM;YACjBC,SAAS,EAAE;UACf;QACJ,CAAC,EACD;UACIN,iBAAiB,EAAE,QAAQ;UAC3BlC,IAAI,EAAE,IAAI;UACVmC,QAAQ,EAAE,KAAK;UACfC,sBAAsB,EAAE,KAAK;UAC7BC,OAAO,EAAE,IAAI;UACbC,0BAA0B,EAAE;YACxBC,SAAS,EAAE,IAAI;YACfC,SAAS,EAAE;UACf;QACJ,CAAC;MAET,CAAC;MACDC,IAAI,EAAE;QACFC,OAAO,EAAEvC,MAAM,CAACuC;MACpB;IACJ,CAAC,CAAC;IAEF,MAAMC,cAAc,GAAGzC,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,OAAO,CAACsC,cAAc,EAAE;MAC/D5C,IAAI,EAAE,kBAAkB;MACxBC,MAAM,EAAE;QACJ4C,UAAU,EAAEzC,QAAQ,CAAC0C,MAAM,CAACC,EAAE;QAC9BC,mBAAmB,EAAE,EAAE;QACvBC,eAAe,EAAE,EAAE;QACnBC,oBAAoB,EAAE,EAAE;QACxBC,kBAAkB,EAAE;UAChBC,WAAW,EAAE,SAAS;UACtBC,OAAO,EAAE,SAAS;UAClBC,YAAY,EAAE;QAClB;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACHlD,QAAQ;MACRuC;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/CoreDynamo.d.ts

@@ -0,0 +1,5 @@
+import { type PulumiAppModule } from "@webiny/pulumi";
+export type CoreDynamo = PulumiAppModule<typeof CoreDynamo>;
+export declare const CoreDynamo: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/dynamodb/table").Table>, {
+    protect: boolean;
+}>;

package/pulumi/apps/core/CoreDynamo.js

@@ -0,0 +1,74 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const CoreDynamo = createAppModule({
+  name: "DynamoDb",
+  config(app, params) {
+    return app.addResource(aws.dynamodb.Table, {
+      name: "webiny",
+      config: {
+        attributes: [{
+          name: "PK",
+          type: "S"
+        }, {
+          name: "SK",
+          type: "S"
+        }, {
+          name: "GSI_TENANT",
+          type: "S"
+        }, {
+          name: "GSI1_PK",
+          type: "S"
+        }, {
+          name: "GSI1_SK",
+          type: "S"
+        }, {
+          name: "GSI2_PK",
+          type: "S"
+        }, {
+          name: "GSI2_SK",
+          type: "S"
+        }],
+        billingMode: "PAY_PER_REQUEST",
+        hashKey: "PK",
+        rangeKey: "SK",
+        globalSecondaryIndexes: [{
+          name: "GSI_TENANT",
+          keySchemas: [{
+            attributeName: "GSI_TENANT",
+            keyType: "HASH"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI1",
+          keySchemas: [{
+            attributeName: "GSI1_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI1_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }, {
+          name: "GSI2",
+          keySchemas: [{
+            attributeName: "GSI2_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI2_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }],
+        ttl: {
+          attributeName: "expiresAt",
+          enabled: true
+        }
+      },
+      opts: {
+        protect: params.protect
+      }
+    });
+  }
+});
+
+//# sourceMappingURL=CoreDynamo.js.map

package/pulumi/apps/core/CoreDynamo.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","CoreDynamo","name","config","app","params","addResource","dynamodb","Table","attributes","type","billingMode","hashKey","rangeKey","globalSecondaryIndexes","keySchemas","attributeName","keyType","projectionType","ttl","enabled","opts","protect"],"sources":["CoreDynamo.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp, type PulumiAppModule } from \"@webiny/pulumi\";\n\nexport type CoreDynamo = PulumiAppModule<typeof CoreDynamo>;\n\nexport const CoreDynamo = createAppModule({\n    name: \"DynamoDb\",\n    config(app: PulumiApp, params: { protect: boolean }) {\n        return app.addResource(aws.dynamodb.Table, {\n            name: \"webiny\",\n            config: {\n                attributes: [\n                    { name: \"PK\", type: \"S\" },\n                    { name: \"SK\", type: \"S\" },\n                    { name: \"GSI_TENANT\", type: \"S\" },\n                    { name: \"GSI1_PK\", type: \"S\" },\n                    { name: \"GSI1_SK\", type: \"S\" },\n                    { name: \"GSI2_PK\", type: \"S\" },\n                    { name: \"GSI2_SK\", type: \"S\" }\n                ],\n                billingMode: \"PAY_PER_REQUEST\",\n                hashKey: \"PK\",\n                rangeKey: \"SK\",\n                globalSecondaryIndexes: [\n                    {\n                        name: \"GSI_TENANT\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI_TENANT\",\n                                keyType: \"HASH\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI1\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI1_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI1_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI2\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI2_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI2_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    }\n                ],\n                ttl: {\n                    attributeName: \"expiresAt\",\n                    enabled: true\n                }\n            },\n            opts: {\n                protect: params.protect\n            }\n        });\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAA8C,gBAAgB;AAItF,OAAO,MAAMC,UAAU,GAAGD,eAAe,CAAC;EACtCE,IAAI,EAAE,UAAU;EAChBC,MAAMA,CAACC,GAAc,EAAEC,MAA4B,EAAE;IACjD,OAAOD,GAAG,CAACE,WAAW,CAACP,GAAG,CAACQ,QAAQ,CAACC,KAAK,EAAE;MACvCN,IAAI,EAAE,QAAQ;MACdC,MAAM,EAAE;QACJM,UAAU,EAAE,CACR;UAAEP,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,YAAY;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACjC;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,CACjC;QACDC,WAAW,EAAE,iBAAiB;QAC9BC,OAAO,EAAE,IAAI;QACbC,QAAQ,EAAE,IAAI;QACdC,sBAAsB,EAAE,CACpB;UACIZ,IAAI,EAAE,YAAY;UAClBa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,YAAY;YAC3BC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,CACJ;QACDC,GAAG,EAAE;UACDH,aAAa,EAAE,WAAW;UAC1BI,OAAO,EAAE;QACb;MACJ,CAAC;MACDC,IAAI,EAAE;QACFC,OAAO,EAAEjB,MAAM,CAACiB;MACpB;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/CoreEventBus.d.ts

@@ -0,0 +1 @@
+export declare const CoreEventBus: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventBus").EventBus>, void>;

package/pulumi/apps/core/CoreEventBus.js

@@ -0,0 +1,13 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const CoreEventBus = createAppModule({
+  name: "CoreEventBus",
+  config(app) {
+    return app.addResource(aws.cloudwatch.EventBus, {
+      name: "event-bus",
+      config: {}
+    });
+  }
+});
+
+//# sourceMappingURL=CoreEventBus.js.map

package/pulumi/apps/core/CoreEventBus.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","CoreEventBus","name","config","app","addResource","cloudwatch","EventBus"],"sources":["CoreEventBus.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp } from \"@webiny/pulumi\";\n\nexport const CoreEventBus = createAppModule({\n    name: \"CoreEventBus\",\n    config(app: PulumiApp) {\n        return app.addResource(aws.cloudwatch.EventBus, {\n            name: \"event-bus\",\n            config: {}\n        });\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAAwB,gBAAgB;AAEhE,OAAO,MAAMC,YAAY,GAAGD,eAAe,CAAC;EACxCE,IAAI,EAAE,cAAc;EACpBC,MAAMA,CAACC,GAAc,EAAE;IACnB,OAAOA,GAAG,CAACC,WAAW,CAACN,GAAG,CAACO,UAAU,CAACC,QAAQ,EAAE;MAC5CL,IAAI,EAAE,WAAW;MACjBC,MAAM,EAAE,CAAC;IACb,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/CoreFileManager.d.ts

@@ -0,0 +1,11 @@
+import { type PulumiAppModule } from "@webiny/pulumi";
+export type CoreFileManger = PulumiAppModule<typeof CoreFileManger>;
+export declare const CoreFileManger: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    bucket: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/s3/bucket").Bucket>;
+    bucketOwnershipControls: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/s3/bucketOwnershipControls").BucketOwnershipControls>;
+    bucketAcl: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/s3/bucketAcl").BucketAcl>;
+    blockPublicAccessBlock: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/s3/bucketPublicAccessBlock").BucketPublicAccessBlock>;
+    bucketCorsConfiguration: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/s3/bucketCorsConfiguration").BucketCorsConfiguration>;
+}, {
+    protect: boolean;
+}>;

package/pulumi/apps/core/CoreFileManager.js

@@ -0,0 +1,72 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const CoreFileManger = createAppModule({
+  name: "FileManagerBucket",
+  config(app, params) {
+    const name = "fm-bucket";
+    const bucket = app.addResource(aws.s3.Bucket, {
+      name,
+      config: {
+        // We definitely don't want to force-destroy if "protected" flag is true.
+        forceDestroy: !params.protect
+      },
+      opts: {
+        protect: params.protect
+      }
+    });
+    const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {
+      name: `${name}-ownership-controls`,
+      config: {
+        bucket: bucket.output.id,
+        rule: {
+          objectOwnership: "BucketOwnerPreferred"
+        }
+      }
+    });
+    const bucketAcl = app.addResource(aws.s3.BucketAcl, {
+      name: `${name}-acl`,
+      config: {
+        bucket: bucket.output.id,
+        acl: aws.s3.CannedAcl.Private
+      },
+      opts: {
+        dependsOn: [bucketOwnershipControls.output]
+      }
+    });
+
+    // We need these rules to be able to upload to this bucket from the browser.
+    const bucketCorsConfiguration = app.addResource(aws.s3.BucketCorsConfiguration, {
+      name: `${name}-cors`,
+      config: {
+        bucket: bucket.output.id,
+        corsRules: [{
+          allowedHeaders: ["*"],
+          allowedMethods: ["POST", "GET", "PUT"],
+          allowedOrigins: ["*"],
+          maxAgeSeconds: 3000
+        }]
+      }
+    });
+
+    // Block any public access
+    const blockPublicAccessBlock = app.addResource(aws.s3.BucketPublicAccessBlock, {
+      name: `${name}-block-public-access`,
+      config: {
+        bucket: bucket.output.id,
+        blockPublicAcls: true,
+        blockPublicPolicy: true,
+        ignorePublicAcls: true,
+        restrictPublicBuckets: true
+      }
+    });
+    return {
+      bucket,
+      bucketOwnershipControls,
+      bucketAcl,
+      blockPublicAccessBlock,
+      bucketCorsConfiguration
+    };
+  }
+});
+
+//# sourceMappingURL=CoreFileManager.js.map

package/pulumi/apps/core/CoreFileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","CoreFileManger","name","config","app","params","bucket","addResource","s3","Bucket","forceDestroy","protect","opts","bucketOwnershipControls","BucketOwnershipControls","output","id","rule","objectOwnership","bucketAcl","BucketAcl","acl","CannedAcl","Private","dependsOn","bucketCorsConfiguration","BucketCorsConfiguration","corsRules","allowedHeaders","allowedMethods","allowedOrigins","maxAgeSeconds","blockPublicAccessBlock","BucketPublicAccessBlock","blockPublicAcls","blockPublicPolicy","ignorePublicAcls","restrictPublicBuckets"],"sources":["CoreFileManager.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp, type PulumiAppModule } from \"@webiny/pulumi\";\n\nexport type CoreFileManger = PulumiAppModule<typeof CoreFileManger>;\n\nexport const CoreFileManger = createAppModule({\n    name: \"FileManagerBucket\",\n    config(app: PulumiApp, params: { protect: boolean }) {\n        const name = \"fm-bucket\";\n\n        const bucket = app.addResource(aws.s3.Bucket, {\n            name,\n            config: {\n                // We definitely don't want to force-destroy if \"protected\" flag is true.\n                forceDestroy: !params.protect\n            },\n            opts: {\n                protect: params.protect\n            }\n        });\n\n        const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {\n            name: `${name}-ownership-controls`,\n            config: {\n                bucket: bucket.output.id,\n                rule: {\n                    objectOwnership: \"BucketOwnerPreferred\"\n                }\n            }\n        });\n\n        const bucketAcl = app.addResource(aws.s3.BucketAcl, {\n            name: `${name}-acl`,\n            config: {\n                bucket: bucket.output.id,\n                acl: aws.s3.CannedAcl.Private\n            },\n            opts: {\n                dependsOn: [bucketOwnershipControls.output]\n            }\n        });\n\n        // We need these rules to be able to upload to this bucket from the browser.\n        const bucketCorsConfiguration = app.addResource(aws.s3.BucketCorsConfiguration, {\n            name: `${name}-cors`,\n            config: {\n                bucket: bucket.output.id,\n                corsRules: [\n                    {\n                        allowedHeaders: [\"*\"],\n                        allowedMethods: [\"POST\", \"GET\", \"PUT\"],\n                        allowedOrigins: [\"*\"],\n                        maxAgeSeconds: 3000\n                    }\n                ]\n            }\n        });\n\n        // Block any public access\n        const blockPublicAccessBlock = app.addResource(aws.s3.BucketPublicAccessBlock, {\n            name: `${name}-block-public-access`,\n            config: {\n                bucket: bucket.output.id,\n                blockPublicAcls: true,\n                blockPublicPolicy: true,\n                ignorePublicAcls: true,\n                restrictPublicBuckets: true\n            }\n        });\n\n        return {\n            bucket,\n            bucketOwnershipControls,\n            bucketAcl,\n            blockPublicAccessBlock,\n            bucketCorsConfiguration\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAA8C,gBAAgB;AAItF,OAAO,MAAMC,cAAc,GAAGD,eAAe,CAAC;EAC1CE,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAEC,MAA4B,EAAE;IACjD,MAAMH,IAAI,GAAG,WAAW;IAExB,MAAMI,MAAM,GAAGF,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,EAAE,CAACC,MAAM,EAAE;MAC1CP,IAAI;MACJC,MAAM,EAAE;QACJ;QACAO,YAAY,EAAE,CAACL,MAAM,CAACM;MAC1B,CAAC;MACDC,IAAI,EAAE;QACFD,OAAO,EAAEN,MAAM,CAACM;MACpB;IACJ,CAAC,CAAC;IAEF,MAAME,uBAAuB,GAAGT,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,EAAE,CAACM,uBAAuB,EAAE;MAC5EZ,IAAI,EAAE,GAAGA,IAAI,qBAAqB;MAClCC,MAAM,EAAE;QACJG,MAAM,EAAEA,MAAM,CAACS,MAAM,CAACC,EAAE;QACxBC,IAAI,EAAE;UACFC,eAAe,EAAE;QACrB;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,SAAS,GAAGf,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,EAAE,CAACY,SAAS,EAAE;MAChDlB,IAAI,EAAE,GAAGA,IAAI,MAAM;MACnBC,MAAM,EAAE;QACJG,MAAM,EAAEA,MAAM,CAACS,MAAM,CAACC,EAAE;QACxBK,GAAG,EAAEtB,GAAG,CAACS,EAAE,CAACc,SAAS,CAACC;MAC1B,CAAC;MACDX,IAAI,EAAE;QACFY,SAAS,EAAE,CAACX,uBAAuB,CAACE,MAAM;MAC9C;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMU,uBAAuB,GAAGrB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,EAAE,CAACkB,uBAAuB,EAAE;MAC5ExB,IAAI,EAAE,GAAGA,IAAI,OAAO;MACpBC,MAAM,EAAE;QACJG,MAAM,EAAEA,MAAM,CAACS,MAAM,CAACC,EAAE;QACxBW,SAAS,EAAE,CACP;UACIC,cAAc,EAAE,CAAC,GAAG,CAAC;UACrBC,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;UACtCC,cAAc,EAAE,CAAC,GAAG,CAAC;UACrBC,aAAa,EAAE;QACnB,CAAC;MAET;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,sBAAsB,GAAG5B,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,EAAE,CAACyB,uBAAuB,EAAE;MAC3E/B,IAAI,EAAE,GAAGA,IAAI,sBAAsB;MACnCC,MAAM,EAAE;QACJG,MAAM,EAAEA,MAAM,CAACS,MAAM,CAACC,EAAE;QACxBkB,eAAe,EAAE,IAAI;QACrBC,iBAAiB,EAAE,IAAI;QACvBC,gBAAgB,EAAE,IAAI;QACtBC,qBAAqB,EAAE;MAC3B;IACJ,CAAC,CAAC;IAEF,OAAO;MACH/B,MAAM;MACNO,uBAAuB;MACvBM,SAAS;MACTa,sBAAsB;MACtBP;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/CoreOpenSearch.d.ts

@@ -0,0 +1,16 @@
+import * as aws from "@pulumi/aws";
+import { type PulumiAppRemoteResource, type PulumiAppResource, type PulumiAppResourceConstructor } from "@webiny/pulumi";
+export interface OpenSearchParams {
+    protect: boolean;
+}
+export declare const OpenSearch: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    domain: PulumiAppResource<PulumiAppResourceConstructor<import("@pulumi/aws/opensearch/domain.js").Domain, any>> | PulumiAppRemoteResource<aws.opensearch.GetDomainResult>;
+    domainPolicy: PulumiAppResource<typeof import("@pulumi/aws/opensearch/domainPolicy.js").DomainPolicy> | undefined;
+    table: PulumiAppResource<typeof import("@pulumi/aws/dynamodb/table.js").Table>;
+    dynamoToElastic: {
+        role: PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+        policy: PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+        lambda: PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+        eventSourceMapping: PulumiAppResource<typeof import("@pulumi/aws/lambda/eventSourceMapping.js").EventSourceMapping>;
+    };
+}, OpenSearchParams>;