@webiny/project-aws 0.0.0-unstable.3c5210ad37

package/pulumi/apps/core/LogDynamo.js

@@ -0,0 +1,122 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const LogDynamo = createAppModule({
+  name: "DynamoDbLog",
+  config(app, params) {
+    return app.addResource(aws.dynamodb.Table, {
+      name: "webiny-log",
+      config: {
+        attributes: [{
+          name: "PK",
+          type: "S"
+        }, {
+          name: "SK",
+          type: "S"
+        }, {
+          name: "GSI_TENANT",
+          type: "S"
+        }, {
+          name: "GSI1_PK",
+          type: "S"
+        }, {
+          name: "GSI1_SK",
+          type: "S"
+        }, {
+          name: "GSI2_PK",
+          type: "S"
+        }, {
+          name: "GSI2_SK",
+          type: "S"
+        }, {
+          name: "GSI3_PK",
+          type: "S"
+        }, {
+          name: "GSI3_SK",
+          type: "S"
+        }, {
+          name: "GSI4_PK",
+          type: "S"
+        }, {
+          name: "GSI4_SK",
+          type: "S"
+        }, {
+          name: "GSI5_PK",
+          type: "S"
+        }, {
+          name: "GSI5_SK",
+          type: "S"
+        }],
+        billingMode: "PAY_PER_REQUEST",
+        hashKey: "PK",
+        rangeKey: "SK",
+        globalSecondaryIndexes: [{
+          name: "GSI_TENANT",
+          keySchemas: [{
+            attributeName: "GSI_TENANT",
+            keyType: "HASH"
+          }],
+          projectionType: "KEYS_ONLY"
+        }, {
+          name: "GSI1",
+          keySchemas: [{
+            attributeName: "GSI1_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI1_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }, {
+          name: "GSI2",
+          keySchemas: [{
+            attributeName: "GSI2_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI2_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }, {
+          name: "GSI3",
+          keySchemas: [{
+            attributeName: "GSI3_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI3_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }, {
+          name: "GSI4",
+          keySchemas: [{
+            attributeName: "GSI4_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI4_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }, {
+          name: "GSI5",
+          keySchemas: [{
+            attributeName: "GSI5_PK",
+            keyType: "HASH"
+          }, {
+            attributeName: "GSI5_SK",
+            keyType: "RANGE"
+          }],
+          projectionType: "ALL"
+        }],
+        ttl: {
+          attributeName: "expiresAt",
+          enabled: true
+        }
+      },
+      opts: {
+        protect: params.protect
+      }
+    });
+  }
+});
+
+//# sourceMappingURL=LogDynamo.js.map

package/pulumi/apps/core/LogDynamo.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","LogDynamo","name","config","app","params","addResource","dynamodb","Table","attributes","type","billingMode","hashKey","rangeKey","globalSecondaryIndexes","keySchemas","attributeName","keyType","projectionType","ttl","enabled","opts","protect"],"sources":["LogDynamo.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp, type PulumiAppModule } from \"@webiny/pulumi\";\n\nexport type LogDynamo = PulumiAppModule<typeof LogDynamo>;\n\nexport const LogDynamo = createAppModule({\n    name: \"DynamoDbLog\",\n    config(app: PulumiApp, params: { protect: boolean }) {\n        return app.addResource(aws.dynamodb.Table, {\n            name: \"webiny-log\",\n            config: {\n                attributes: [\n                    { name: \"PK\", type: \"S\" },\n                    { name: \"SK\", type: \"S\" },\n                    { name: \"GSI_TENANT\", type: \"S\" },\n                    { name: \"GSI1_PK\", type: \"S\" },\n                    { name: \"GSI1_SK\", type: \"S\" },\n                    { name: \"GSI2_PK\", type: \"S\" },\n                    { name: \"GSI2_SK\", type: \"S\" },\n                    { name: \"GSI3_PK\", type: \"S\" },\n                    { name: \"GSI3_SK\", type: \"S\" },\n                    { name: \"GSI4_PK\", type: \"S\" },\n                    { name: \"GSI4_SK\", type: \"S\" },\n                    { name: \"GSI5_PK\", type: \"S\" },\n                    { name: \"GSI5_SK\", type: \"S\" }\n                ],\n                billingMode: \"PAY_PER_REQUEST\",\n                hashKey: \"PK\",\n                rangeKey: \"SK\",\n                globalSecondaryIndexes: [\n                    {\n                        name: \"GSI_TENANT\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI_TENANT\",\n                                keyType: \"HASH\"\n                            }\n                        ],\n                        projectionType: \"KEYS_ONLY\"\n                    },\n                    {\n                        name: \"GSI1\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI1_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI1_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI2\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI2_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI2_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI3\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI3_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI3_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI4\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI4_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI4_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI5\",\n                        keySchemas: [\n                            {\n                                attributeName: \"GSI5_PK\",\n                                keyType: \"HASH\"\n                            },\n                            {\n                                attributeName: \"GSI5_SK\",\n                                keyType: \"RANGE\"\n                            }\n                        ],\n                        projectionType: \"ALL\"\n                    }\n                ],\n                ttl: {\n                    attributeName: \"expiresAt\",\n                    enabled: true\n                }\n            },\n            opts: {\n                protect: params.protect\n            }\n        });\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAA8C,gBAAgB;AAItF,OAAO,MAAMC,SAAS,GAAGD,eAAe,CAAC;EACrCE,IAAI,EAAE,aAAa;EACnBC,MAAMA,CAACC,GAAc,EAAEC,MAA4B,EAAE;IACjD,OAAOD,GAAG,CAACE,WAAW,CAACP,GAAG,CAACQ,QAAQ,CAACC,KAAK,EAAE;MACvCN,IAAI,EAAE,YAAY;MAClBC,MAAM,EAAE;QACJM,UAAU,EAAE,CACR;UAAEP,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,YAAY;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACjC;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,CACjC;QACDC,WAAW,EAAE,iBAAiB;QAC9BC,OAAO,EAAE,IAAI;QACbC,QAAQ,EAAE,IAAI;QACdC,sBAAsB,EAAE,CACpB;UACIZ,IAAI,EAAE,YAAY;UAClBa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,YAAY;YAC3BC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,EACD;UACIhB,IAAI,EAAE,MAAM;UACZa,UAAU,EAAE,CACR;YACIC,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,EACD;YACID,aAAa,EAAE,SAAS;YACxBC,OAAO,EAAE;UACb,CAAC,CACJ;UACDC,cAAc,EAAE;QACpB,CAAC,CACJ;QACDC,GAAG,EAAE;UACDH,aAAa,EAAE,WAAW;UAC1BI,OAAO,EAAE;QACb;MACJ,CAAC;MACDC,IAAI,EAAE;QACFC,OAAO,EAAEjB,MAAM,CAACiB;MACpB;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/WatchCommand.d.ts

@@ -0,0 +1,7 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface WatchCommandParams {
+    deploymentId: pulumi.Output<string>;
+}
+export declare const WatchCommand: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    iotAuthorizerFunction: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
+}, WatchCommandParams>;

package/pulumi/apps/core/WatchCommand.js

@@ -0,0 +1,105 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+import { LAMBDA_RUNTIME } from "../../constants.js";
+import * as pulumi from "@pulumi/pulumi";
+import path from "path";
+import { CoreVpc } from "../index.js";
+export const WatchCommand = createAppModule({
+  name: "WatchCommand",
+  config(app, params) {
+    const roleName = "iot-authorizer-lambda-role";
+    const role = app.addResource(aws.iam.Role, {
+      name: roleName,
+      config: {
+        assumeRolePolicy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: "sts:AssumeRole",
+            Principal: {
+              Service: "lambda.amazonaws.com"
+            },
+            Effect: "Allow"
+          }]
+        }
+      },
+      meta: {
+        isLambdaFunctionRole: true
+      }
+    });
+    const vpc = app.getModule(CoreVpc, {
+      optional: true
+    });
+
+    // Only use `AWSLambdaVPCAccessExecutionRole` policy if VPC feature is enabled.
+    if (vpc) {
+      app.addResource(aws.iam.RolePolicyAttachment, {
+        name: `${roleName}-AWSLambdaVPCAccessExecutionRole`,
+        config: {
+          role: role.output,
+          policyArn: aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole
+        }
+      });
+    } else {
+      app.addResource(aws.iam.RolePolicyAttachment, {
+        name: `${roleName}-AWSLambdaBasicExecutionRole`,
+        config: {
+          role: role.output,
+          policyArn: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole
+        }
+      });
+    }
+    const iotAuthorizerFunction = app.addResource(aws.lambda.Function, {
+      name: "watch-command-iot-authorizer",
+      config: {
+        role: role.output.arn,
+        runtime: LAMBDA_RUNTIME,
+        handler: "handler.handler",
+        timeout: 10,
+        memorySize: 128,
+        description: "Authorizes 'webiny watch' command communication.",
+        code: new pulumi.asset.AssetArchive({
+          ".": new pulumi.asset.FileArchive(path.join(import.meta.dirname, "webinyWatchCommand"))
+        }),
+        environment: {
+          variables: {
+            WEBINY_WATCH_COMMAND_TOPIC: params.deploymentId.apply(deploymentId => {
+              return `webiny-watch-${deploymentId}`;
+            })
+          }
+        },
+        vpcConfig: vpc ? {
+          subnetIds: vpc.subnets.private.map(s => s.output.id),
+          securityGroupIds: [vpc.vpc.output.defaultSecurityGroupId]
+        } : undefined,
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+    const iotAuthorizer = app.addResource(aws.iot.Authorizer, {
+      name: "watch-command-iot-authorizer",
+      config: {
+        signingDisabled: true,
+        authorizerFunctionArn: iotAuthorizerFunction.output.arn,
+        status: "ACTIVE"
+      }
+    });
+    app.addResource(aws.lambda.Permission, {
+      name: "webiny-watch-iot-authorizer",
+      config: {
+        principal: "iot.amazonaws.com",
+        function: iotAuthorizerFunction.output.arn,
+        sourceArn: iotAuthorizer.output.arn,
+        action: "lambda:InvokeFunction"
+      }
+    });
+    app.addOutputs({
+      iotAuthorizerName: iotAuthorizer.output.name
+    });
+    return {
+      iotAuthorizerFunction
+    };
+  }
+});
+
+//# sourceMappingURL=WatchCommand.js.map

package/pulumi/apps/core/WatchCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","LAMBDA_RUNTIME","pulumi","path","CoreVpc","WatchCommand","name","config","app","params","roleName","role","addResource","iam","Role","assumeRolePolicy","Version","Statement","Action","Principal","Service","Effect","meta","isLambdaFunctionRole","vpc","getModule","optional","RolePolicyAttachment","output","policyArn","ManagedPolicy","AWSLambdaVPCAccessExecutionRole","AWSLambdaBasicExecutionRole","iotAuthorizerFunction","lambda","Function","arn","runtime","handler","timeout","memorySize","description","code","asset","AssetArchive","FileArchive","join","import","dirname","environment","variables","WEBINY_WATCH_COMMAND_TOPIC","deploymentId","apply","vpcConfig","subnetIds","subnets","private","map","s","id","securityGroupIds","defaultSecurityGroupId","undefined","loggingConfig","logFormat","iotAuthorizer","iot","Authorizer","signingDisabled","authorizerFunctionArn","status","Permission","principal","function","sourceArn","action","addOutputs","iotAuthorizerName"],"sources":["WatchCommand.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createAppModule, type PulumiApp } from \"@webiny/pulumi\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport path from \"path\";\nimport { CoreVpc } from \"~/pulumi/apps/index.js\";\n\nexport interface WatchCommandParams {\n    deploymentId: pulumi.Output<string>;\n}\n\nexport const WatchCommand = createAppModule({\n    name: \"WatchCommand\",\n    config(app: PulumiApp, params: WatchCommandParams) {\n        const roleName = \"iot-authorizer-lambda-role\";\n\n        const role = app.addResource(aws.iam.Role, {\n            name: roleName,\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Principal: {\n                                Service: \"lambda.amazonaws.com\"\n                            },\n                            Effect: \"Allow\"\n                        }\n                    ]\n                }\n            },\n            meta: { isLambdaFunctionRole: true }\n        });\n\n        const vpc = app.getModule(CoreVpc, { optional: true });\n\n        // Only use `AWSLambdaVPCAccessExecutionRole` policy if VPC feature is enabled.\n        if (vpc) {\n            app.addResource(aws.iam.RolePolicyAttachment, {\n                name: `${roleName}-AWSLambdaVPCAccessExecutionRole`,\n                config: {\n                    role: role.output,\n                    policyArn: aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole\n                }\n            });\n        } else {\n            app.addResource(aws.iam.RolePolicyAttachment, {\n                name: `${roleName}-AWSLambdaBasicExecutionRole`,\n                config: {\n                    role: role.output,\n                    policyArn: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole\n                }\n            });\n        }\n\n        const iotAuthorizerFunction = app.addResource(aws.lambda.Function, {\n            name: \"watch-command-iot-authorizer\",\n            config: {\n                role: role.output.arn,\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                timeout: 10,\n                memorySize: 128,\n                description: \"Authorizes 'webiny watch' command communication.\",\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(import.meta.dirname, \"webinyWatchCommand\")\n                    )\n                }),\n                environment: {\n                    variables: {\n                        WEBINY_WATCH_COMMAND_TOPIC: params.deploymentId.apply(deploymentId => {\n                            return `webiny-watch-${deploymentId}`;\n                        })\n                    }\n                },\n                vpcConfig: vpc\n                    ? {\n                          subnetIds: vpc.subnets.private.map(s => s.output.id),\n                          securityGroupIds: [vpc.vpc.output.defaultSecurityGroupId]\n                      }\n                    : undefined,\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        const iotAuthorizer = app.addResource(aws.iot.Authorizer, {\n            name: \"watch-command-iot-authorizer\",\n            config: {\n                signingDisabled: true,\n                authorizerFunctionArn: iotAuthorizerFunction.output.arn,\n                status: \"ACTIVE\"\n            }\n        });\n\n        app.addResource(aws.lambda.Permission, {\n            name: \"webiny-watch-iot-authorizer\",\n            config: {\n                principal: \"iot.amazonaws.com\",\n                function: iotAuthorizerFunction.output.arn,\n                sourceArn: iotAuthorizer.output.arn,\n                action: \"lambda:InvokeFunction\"\n            }\n        });\n\n        app.addOutputs({\n            iotAuthorizerName: iotAuthorizer.output.name\n        });\n\n        return { iotAuthorizerFunction };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,QAAwB,gBAAgB;AAChE,SAASC,cAAc;AACvB,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAOC,IAAI,MAAM,MAAM;AACvB,SAASC,OAAO;AAMhB,OAAO,MAAMC,YAAY,GAAGL,eAAe,CAAC;EACxCM,IAAI,EAAE,cAAc;EACpBC,MAAMA,CAACC,GAAc,EAAEC,MAA0B,EAAE;IAC/C,MAAMC,QAAQ,GAAG,4BAA4B;IAE7C,MAAMC,IAAI,GAAGH,GAAG,CAACI,WAAW,CAACb,GAAG,CAACc,GAAG,CAACC,IAAI,EAAE;MACvCR,IAAI,EAAEI,QAAQ;MACdH,MAAM,EAAE;QACJQ,gBAAgB,EAAE;UACdC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,gBAAgB;YACxBC,SAAS,EAAE;cACPC,OAAO,EAAE;YACb,CAAC;YACDC,MAAM,EAAE;UACZ,CAAC;QAET;MACJ,CAAC;MACDC,IAAI,EAAE;QAAEC,oBAAoB,EAAE;MAAK;IACvC,CAAC,CAAC;IAEF,MAAMC,GAAG,GAAGhB,GAAG,CAACiB,SAAS,CAACrB,OAAO,EAAE;MAAEsB,QAAQ,EAAE;IAAK,CAAC,CAAC;;IAEtD;IACA,IAAIF,GAAG,EAAE;MACLhB,GAAG,CAACI,WAAW,CAACb,GAAG,CAACc,GAAG,CAACc,oBAAoB,EAAE;QAC1CrB,IAAI,EAAE,GAAGI,QAAQ,kCAAkC;QACnDH,MAAM,EAAE;UACJI,IAAI,EAAEA,IAAI,CAACiB,MAAM;UACjBC,SAAS,EAAE9B,GAAG,CAACc,GAAG,CAACiB,aAAa,CAACC;QACrC;MACJ,CAAC,CAAC;IACN,CAAC,MAAM;MACHvB,GAAG,CAACI,WAAW,CAACb,GAAG,CAACc,GAAG,CAACc,oBAAoB,EAAE;QAC1CrB,IAAI,EAAE,GAAGI,QAAQ,8BAA8B;QAC/CH,MAAM,EAAE;UACJI,IAAI,EAAEA,IAAI,CAACiB,MAAM;UACjBC,SAAS,EAAE9B,GAAG,CAACc,GAAG,CAACiB,aAAa,CAACE;QACrC;MACJ,CAAC,CAAC;IACN;IAEA,MAAMC,qBAAqB,GAAGzB,GAAG,CAACI,WAAW,CAACb,GAAG,CAACmC,MAAM,CAACC,QAAQ,EAAE;MAC/D7B,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJI,IAAI,EAAEA,IAAI,CAACiB,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAEpC,cAAc;QACvBqC,OAAO,EAAE,iBAAiB;QAC1BC,OAAO,EAAE,EAAE;QACXC,UAAU,EAAE,GAAG;QACfC,WAAW,EAAE,kDAAkD;QAC/DC,IAAI,EAAE,IAAIxC,MAAM,CAACyC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAI1C,MAAM,CAACyC,KAAK,CAACE,WAAW,CAC7B1C,IAAI,CAAC2C,IAAI,CAACC,MAAM,CAACzB,IAAI,CAAC0B,OAAO,EAAE,oBAAoB,CACvD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAE;YACPC,0BAA0B,EAAE1C,MAAM,CAAC2C,YAAY,CAACC,KAAK,CAACD,YAAY,IAAI;cAClE,OAAO,gBAAgBA,YAAY,EAAE;YACzC,CAAC;UACL;QACJ,CAAC;QACDE,SAAS,EAAE9B,GAAG,GACR;UACI+B,SAAS,EAAE/B,GAAG,CAACgC,OAAO,CAACC,OAAO,CAACC,GAAG,CAACC,CAAC,IAAIA,CAAC,CAAC/B,MAAM,CAACgC,EAAE,CAAC;UACpDC,gBAAgB,EAAE,CAACrC,GAAG,CAACA,GAAG,CAACI,MAAM,CAACkC,sBAAsB;QAC5D,CAAC,GACDC,SAAS;QACfC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,aAAa,GAAG1D,GAAG,CAACI,WAAW,CAACb,GAAG,CAACoE,GAAG,CAACC,UAAU,EAAE;MACtD9D,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ8D,eAAe,EAAE,IAAI;QACrBC,qBAAqB,EAAErC,qBAAqB,CAACL,MAAM,CAACQ,GAAG;QACvDmC,MAAM,EAAE;MACZ;IACJ,CAAC,CAAC;IAEF/D,GAAG,CAACI,WAAW,CAACb,GAAG,CAACmC,MAAM,CAACsC,UAAU,EAAE;MACnClE,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJkE,SAAS,EAAE,mBAAmB;QAC9BC,QAAQ,EAAEzC,qBAAqB,CAACL,MAAM,CAACQ,GAAG;QAC1CuC,SAAS,EAAET,aAAa,CAACtC,MAAM,CAACQ,GAAG;QACnCwC,MAAM,EAAE;MACZ;IACJ,CAAC,CAAC;IAEFpE,GAAG,CAACqE,UAAU,CAAC;MACXC,iBAAiB,EAAEZ,aAAa,CAACtC,MAAM,CAACtB;IAC5C,CAAC,CAAC;IAEF,OAAO;MAAE2B;IAAsB,CAAC;EACpC;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/amazon.d.ts

@@ -0,0 +1,9 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+/**
+ * Amazon doesn't provide first/last name as separate attributes. Instead, it gives you a `name`.
+ * To handle this, developers will need to set up a pre-authentication Lambda trigger on the user pool,
+ * to generate proper first/last name using custom code.
+ */
+export declare const getAmazonIdpConfig: (userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/amazon.js

@@ -0,0 +1,24 @@
+/**
+ * Amazon doesn't provide first/last name as separate attributes. Instead, it gives you a `name`.
+ * To handle this, developers will need to set up a pre-authentication Lambda trigger on the user pool,
+ * to generate proper first/last name using custom code.
+ */
+export const getAmazonIdpConfig = (userPoolId, config) => {
+  return {
+    userPoolId,
+    providerName: "Amazon",
+    providerType: "LoginWithAmazon",
+    providerDetails: config.providerDetails,
+    idpIdentifiers: config.idpIdentifiers,
+    attributeMapping: {
+      "custom:id": "user_id",
+      username: "user_id",
+      email: "email",
+      given_name: "name",
+      family_name: "name",
+      ...config.attributeMapping
+    }
+  };
+};
+
+//# sourceMappingURL=amazon.js.map

package/pulumi/apps/core/cognitoIdentityProviders/amazon.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getAmazonIdpConfig","userPoolId","config","providerName","providerType","providerDetails","idpIdentifiers","attributeMapping","username","email","given_name","family_name"],"sources":["amazon.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\n\n/**\n * Amazon doesn't provide first/last name as separate attributes. Instead, it gives you a `name`.\n * To handle this, developers will need to set up a pre-authentication Lambda trigger on the user pool,\n * to generate proper first/last name using custom code.\n */\nexport const getAmazonIdpConfig = (\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n): IdentityProviderArgs => {\n    return {\n        userPoolId,\n        providerName: \"Amazon\",\n        providerType: \"LoginWithAmazon\",\n        providerDetails: config.providerDetails,\n        idpIdentifiers: config.idpIdentifiers,\n        attributeMapping: {\n            \"custom:id\": \"user_id\",\n            username: \"user_id\",\n            email: \"email\",\n            given_name: \"name\",\n            family_name: \"name\",\n            ...config.attributeMapping\n        }\n    };\n};\n"],"mappings":"AAIA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMA,kBAAkB,GAAGA,CAC9BC,UAAgC,EAChCC,MAAqC,KACd;EACvB,OAAO;IACHD,UAAU;IACVE,YAAY,EAAE,QAAQ;IACtBC,YAAY,EAAE,iBAAiB;IAC/BC,eAAe,EAAEH,MAAM,CAACG,eAAe;IACvCC,cAAc,EAAEJ,MAAM,CAACI,cAAc;IACrCC,gBAAgB,EAAE;MACd,WAAW,EAAE,SAAS;MACtBC,QAAQ,EAAE,SAAS;MACnBC,KAAK,EAAE,OAAO;MACdC,UAAU,EAAE,MAAM;MAClBC,WAAW,EAAE,MAAM;MACnB,GAAGT,MAAM,CAACK;IACd;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/apple.d.ts

@@ -0,0 +1,4 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+export declare const getAppleIdpConfig: (userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/apple.js

@@ -0,0 +1,19 @@
+export const getAppleIdpConfig = (userPoolId, config) => {
+  return {
+    userPoolId,
+    providerName: "Apple",
+    providerType: "SignInWithApple",
+    providerDetails: config.providerDetails,
+    idpIdentifiers: config.idpIdentifiers,
+    attributeMapping: {
+      "custom:id": "sub",
+      username: "sub",
+      email: "email",
+      given_name: "firstName",
+      family_name: "lastName",
+      ...config.attributeMapping
+    }
+  };
+};
+
+//# sourceMappingURL=apple.js.map

package/pulumi/apps/core/cognitoIdentityProviders/apple.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getAppleIdpConfig","userPoolId","config","providerName","providerType","providerDetails","idpIdentifiers","attributeMapping","username","email","given_name","family_name"],"sources":["apple.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\n\nexport const getAppleIdpConfig = (\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n): IdentityProviderArgs => {\n    return {\n        userPoolId,\n        providerName: \"Apple\",\n        providerType: \"SignInWithApple\",\n        providerDetails: config.providerDetails,\n        idpIdentifiers: config.idpIdentifiers,\n        attributeMapping: {\n            \"custom:id\": \"sub\",\n            username: \"sub\",\n            email: \"email\",\n            given_name: \"firstName\",\n            family_name: \"lastName\",\n            ...config.attributeMapping\n        }\n    };\n};\n"],"mappings":"AAIA,OAAO,MAAMA,iBAAiB,GAAGA,CAC7BC,UAAgC,EAChCC,MAAqC,KACd;EACvB,OAAO;IACHD,UAAU;IACVE,YAAY,EAAE,OAAO;IACrBC,YAAY,EAAE,iBAAiB;IAC/BC,eAAe,EAAEH,MAAM,CAACG,eAAe;IACvCC,cAAc,EAAEJ,MAAM,CAACI,cAAc;IACrCC,gBAAgB,EAAE;MACd,WAAW,EAAE,KAAK;MAClBC,QAAQ,EAAE,KAAK;MACfC,KAAK,EAAE,OAAO;MACdC,UAAU,EAAE,WAAW;MACvBC,WAAW,EAAE,UAAU;MACvB,GAAGT,MAAM,CAACK;IACd;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/configure.d.ts

@@ -0,0 +1,28 @@
+import { type UserPoolDomainArgs } from "@pulumi/aws/cognito/userPoolDomain.js";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+import { type PulumiApp } from "@webiny/pulumi";
+export type IdentityAttributeMapping = {
+    "custom:id": string;
+    username: string;
+    email: string;
+    family_name: string;
+    given_name: string;
+    [key: string]: string;
+};
+export interface CognitoIdentityProvidersConfig {
+    domain: string | {
+        name: UserPoolDomainArgs["domain"];
+        certificateArn?: UserPoolDomainArgs["certificateArn"];
+    };
+    identityProviders: CognitoIdentityProviderConfig[];
+    callbackUrls: string[];
+    logoutUrls?: string[];
+}
+export interface CognitoIdentityProviderConfig {
+    name?: string;
+    type: "google" | "facebook" | "amazon" | "apple" | "oidc";
+    providerDetails: IdentityProviderArgs["providerDetails"];
+    idpIdentifiers?: IdentityProviderArgs["idpIdentifiers"];
+    attributeMapping?: IdentityAttributeMapping;
+}
+export declare const configureAdminCognitoFederation: (app: PulumiApp, config: CognitoIdentityProvidersConfig) => void;

package/pulumi/apps/core/cognitoIdentityProviders/configure.js

@@ -0,0 +1,57 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { getIdpConfig } from "./getIdpConfig.js";
+import { getEnvVariableAwsRegion } from "../../../env/awsRegion.js";
+const isString = value => {
+  return typeof value === "string";
+};
+export const configureAdminCognitoFederation = (app, config) => {
+  const region = getEnvVariableAwsRegion();
+  const userPool = app.resources.userPool;
+  const appClient = app.resources.userPoolClient;
+
+  /**
+   * We need to create a user pool domain, which is used to interact with the federated identity providers.
+   */
+  const userPoolDomain = app.addResource(aws.cognito.UserPoolDomain, {
+    name: "cognitoUserPoolDomain",
+    config: {
+      domain: isString(config.domain) ? config.domain : config.domain.name,
+      certificateArn: isString(config.domain) ? undefined : config.domain.certificateArn,
+      userPoolId: userPool.output.id
+    }
+  });
+  app.addOutput("cognitoUserPoolDomain", pulumi.interpolate`${userPoolDomain.output.domain}.auth.${region}.amazoncognito.com`);
+  const idpConfigs = [];
+  for (const idp of config.identityProviders) {
+    const config = getIdpConfig(idp.type, userPool.output.id, idp);
+
+    // The idea to lowercase the provider name emerged while working on backwards compatibility issue.
+    // Basically, in cases where a user used the OIDC provider and did not specify a name, instead of
+    // using `OIDC` as the name, we wanted to ensure `oidc` is used. But, what I soon realized is that
+    // by simply lowercasing the name, we can avoid the need to check for the provider type and name.
+    // And although this will now happen for all providers, it's not a problem since Pulumi requires
+    // names to be all lowercase anyway.
+    const name = config.providerName.toString().toLowerCase();
+    app.addResource(aws.cognito.IdentityProvider, {
+      name,
+      config
+    });
+    idpConfigs.push(config);
+  }
+  appClient.config.supportedIdentityProviders(["COGNITO", ...idpConfigs.map(config => {
+    // For built-in identity providers, we use the type as the name. Only for OIDC,
+    // we allow the user to provide a custom name, and we only use the type as a fallback.
+    if (config.providerType === "OIDC") {
+      return config.providerName;
+    }
+    return config.providerType;
+  })]);
+  appClient.config.allowedOauthScopes(["profile", "email", "openid"]);
+  appClient.config.allowedOauthFlows(["implicit", "code"]);
+  appClient.config.allowedOauthFlowsUserPoolClient(true);
+  appClient.config.callbackUrls(config.callbackUrls);
+  appClient.config.logoutUrls(config.logoutUrls ?? config.callbackUrls);
+};
+
+//# sourceMappingURL=configure.js.map

package/pulumi/apps/core/cognitoIdentityProviders/configure.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","pulumi","getIdpConfig","getEnvVariableAwsRegion","isString","value","configureAdminCognitoFederation","app","config","region","userPool","resources","appClient","userPoolClient","userPoolDomain","addResource","cognito","UserPoolDomain","name","domain","certificateArn","undefined","userPoolId","output","id","addOutput","interpolate","idpConfigs","idp","identityProviders","type","providerName","toString","toLowerCase","IdentityProvider","push","supportedIdentityProviders","map","providerType","allowedOauthScopes","allowedOauthFlows","allowedOauthFlowsUserPoolClient","callbackUrls","logoutUrls"],"sources":["configure.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { type UserPoolDomainArgs } from \"@pulumi/aws/cognito/userPoolDomain.js\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport {\n    type PulumiApp,\n    type PulumiAppResource,\n    type PulumiAppResourceConstructor\n} from \"@webiny/pulumi\";\nimport { getIdpConfig } from \"./getIdpConfig.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n\nexport type IdentityAttributeMapping = {\n    \"custom:id\": string;\n    username: string;\n    email: string;\n    family_name: string;\n    given_name: string;\n    [key: string]: string;\n};\n\nexport interface CognitoIdentityProvidersConfig {\n    domain:\n        | string\n        | {\n              name: UserPoolDomainArgs[\"domain\"];\n              certificateArn?: UserPoolDomainArgs[\"certificateArn\"];\n          };\n    identityProviders: CognitoIdentityProviderConfig[];\n    callbackUrls: string[];\n    logoutUrls?: string[];\n}\n\nexport interface CognitoIdentityProviderConfig {\n    name?: string;\n    type: \"google\" | \"facebook\" | \"amazon\" | \"apple\" | \"oidc\";\n    providerDetails: IdentityProviderArgs[\"providerDetails\"];\n    idpIdentifiers?: IdentityProviderArgs[\"idpIdentifiers\"];\n    attributeMapping?: IdentityAttributeMapping;\n}\n\nconst isString = (value?: any): value is string => {\n    return typeof value === \"string\";\n};\n\nexport const configureAdminCognitoFederation = (\n    app: PulumiApp,\n    config: CognitoIdentityProvidersConfig\n) => {\n    const region = getEnvVariableAwsRegion();\n\n    const userPool = app.resources.userPool as PulumiAppResource<\n        PulumiAppResourceConstructor<aws.cognito.UserPool>\n    >;\n\n    const appClient = app.resources.userPoolClient as PulumiAppResource<\n        PulumiAppResourceConstructor<aws.cognito.UserPoolClient>\n    >;\n\n    /**\n     * We need to create a user pool domain, which is used to interact with the federated identity providers.\n     */\n    const userPoolDomain = app.addResource(aws.cognito.UserPoolDomain, {\n        name: \"cognitoUserPoolDomain\",\n        config: {\n            domain: isString(config.domain) ? config.domain : config.domain.name,\n            certificateArn: isString(config.domain) ? undefined : config.domain.certificateArn,\n            userPoolId: userPool.output.id\n        }\n    });\n\n    app.addOutput(\n        \"cognitoUserPoolDomain\",\n        pulumi.interpolate`${userPoolDomain.output.domain}.auth.${region}.amazoncognito.com`\n    );\n\n    const idpConfigs: aws.cognito.IdentityProviderArgs[] = [];\n\n    for (const idp of config.identityProviders) {\n        const config = getIdpConfig(idp.type, userPool.output.id, idp);\n\n        // The idea to lowercase the provider name emerged while working on backwards compatibility issue.\n        // Basically, in cases where a user used the OIDC provider and did not specify a name, instead of\n        // using `OIDC` as the name, we wanted to ensure `oidc` is used. But, what I soon realized is that\n        // by simply lowercasing the name, we can avoid the need to check for the provider type and name.\n        // And although this will now happen for all providers, it's not a problem since Pulumi requires\n        // names to be all lowercase anyway.\n        const name = config.providerName.toString().toLowerCase();\n\n        app.addResource(aws.cognito.IdentityProvider, { name, config });\n\n        idpConfigs.push(config);\n    }\n\n    appClient.config.supportedIdentityProviders([\n        \"COGNITO\",\n        ...idpConfigs.map(config => {\n            // For built-in identity providers, we use the type as the name. Only for OIDC,\n            // we allow the user to provide a custom name, and we only use the type as a fallback.\n            if (config.providerType === \"OIDC\") {\n                return config.providerName;\n            }\n            return config.providerType;\n        })\n    ]);\n\n    appClient.config.allowedOauthScopes([\"profile\", \"email\", \"openid\"]);\n    appClient.config.allowedOauthFlows([\"implicit\", \"code\"]);\n    appClient.config.allowedOauthFlowsUserPoolClient(true);\n    appClient.config.callbackUrls(config.callbackUrls);\n    appClient.config.logoutUrls(config.logoutUrls ?? config.callbackUrls);\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AAMxC,SAASC,YAAY;AACrB,SAASC,uBAAuB;AA+BhC,MAAMC,QAAQ,GAAIC,KAAW,IAAsB;EAC/C,OAAO,OAAOA,KAAK,KAAK,QAAQ;AACpC,CAAC;AAED,OAAO,MAAMC,+BAA+B,GAAGA,CAC3CC,GAAc,EACdC,MAAsC,KACrC;EACD,MAAMC,MAAM,GAAGN,uBAAuB,CAAC,CAAC;EAExC,MAAMO,QAAQ,GAAGH,GAAG,CAACI,SAAS,CAACD,QAE9B;EAED,MAAME,SAAS,GAAGL,GAAG,CAACI,SAAS,CAACE,cAE/B;;EAED;AACJ;AACA;EACI,MAAMC,cAAc,GAAGP,GAAG,CAACQ,WAAW,CAACf,GAAG,CAACgB,OAAO,CAACC,cAAc,EAAE;IAC/DC,IAAI,EAAE,uBAAuB;IAC7BV,MAAM,EAAE;MACJW,MAAM,EAAEf,QAAQ,CAACI,MAAM,CAACW,MAAM,CAAC,GAAGX,MAAM,CAACW,MAAM,GAAGX,MAAM,CAACW,MAAM,CAACD,IAAI;MACpEE,cAAc,EAAEhB,QAAQ,CAACI,MAAM,CAACW,MAAM,CAAC,GAAGE,SAAS,GAAGb,MAAM,CAACW,MAAM,CAACC,cAAc;MAClFE,UAAU,EAAEZ,QAAQ,CAACa,MAAM,CAACC;IAChC;EACJ,CAAC,CAAC;EAEFjB,GAAG,CAACkB,SAAS,CACT,uBAAuB,EACvBxB,MAAM,CAACyB,WAAW,GAAGZ,cAAc,CAACS,MAAM,CAACJ,MAAM,SAASV,MAAM,oBACpE,CAAC;EAED,MAAMkB,UAA8C,GAAG,EAAE;EAEzD,KAAK,MAAMC,GAAG,IAAIpB,MAAM,CAACqB,iBAAiB,EAAE;IACxC,MAAMrB,MAAM,GAAGN,YAAY,CAAC0B,GAAG,CAACE,IAAI,EAAEpB,QAAQ,CAACa,MAAM,CAACC,EAAE,EAAEI,GAAG,CAAC;;IAE9D;IACA;IACA;IACA;IACA;IACA;IACA,MAAMV,IAAI,GAAGV,MAAM,CAACuB,YAAY,CAACC,QAAQ,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;IAEzD1B,GAAG,CAACQ,WAAW,CAACf,GAAG,CAACgB,OAAO,CAACkB,gBAAgB,EAAE;MAAEhB,IAAI;MAAEV;IAAO,CAAC,CAAC;IAE/DmB,UAAU,CAACQ,IAAI,CAAC3B,MAAM,CAAC;EAC3B;EAEAI,SAAS,CAACJ,MAAM,CAAC4B,0BAA0B,CAAC,CACxC,SAAS,EACT,GAAGT,UAAU,CAACU,GAAG,CAAC7B,MAAM,IAAI;IACxB;IACA;IACA,IAAIA,MAAM,CAAC8B,YAAY,KAAK,MAAM,EAAE;MAChC,OAAO9B,MAAM,CAACuB,YAAY;IAC9B;IACA,OAAOvB,MAAM,CAAC8B,YAAY;EAC9B,CAAC,CAAC,CACL,CAAC;EAEF1B,SAAS,CAACJ,MAAM,CAAC+B,kBAAkB,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;EACnE3B,SAAS,CAACJ,MAAM,CAACgC,iBAAiB,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;EACxD5B,SAAS,CAACJ,MAAM,CAACiC,+BAA+B,CAAC,IAAI,CAAC;EACtD7B,SAAS,CAACJ,MAAM,CAACkC,YAAY,CAAClC,MAAM,CAACkC,YAAY,CAAC;EAClD9B,SAAS,CAACJ,MAAM,CAACmC,UAAU,CAACnC,MAAM,CAACmC,UAAU,IAAInC,MAAM,CAACkC,YAAY,CAAC;AACzE,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/facebook.d.ts

@@ -0,0 +1,4 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+export declare const getFacebookIdpConfig: (userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/facebook.js

@@ -0,0 +1,19 @@
+export const getFacebookIdpConfig = (userPoolId, config) => {
+  return {
+    userPoolId,
+    providerName: "Facebook",
+    providerType: "Facebook",
+    providerDetails: config.providerDetails,
+    idpIdentifiers: config.idpIdentifiers,
+    attributeMapping: {
+      "custom:id": "id",
+      username: "id",
+      email: "email",
+      given_name: "first_name",
+      family_name: "last_name",
+      ...config.attributeMapping
+    }
+  };
+};
+
+//# sourceMappingURL=facebook.js.map

package/pulumi/apps/core/cognitoIdentityProviders/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getFacebookIdpConfig","userPoolId","config","providerName","providerType","providerDetails","idpIdentifiers","attributeMapping","username","email","given_name","family_name"],"sources":["facebook.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\n\nexport const getFacebookIdpConfig = (\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n): IdentityProviderArgs => {\n    return {\n        userPoolId,\n        providerName: \"Facebook\",\n        providerType: \"Facebook\",\n        providerDetails: config.providerDetails,\n        idpIdentifiers: config.idpIdentifiers,\n        attributeMapping: {\n            \"custom:id\": \"id\",\n            username: \"id\",\n            email: \"email\",\n            given_name: \"first_name\",\n            family_name: \"last_name\",\n            ...config.attributeMapping\n        }\n    };\n};\n"],"mappings":"AAIA,OAAO,MAAMA,oBAAoB,GAAGA,CAChCC,UAAgC,EAChCC,MAAqC,KACd;EACvB,OAAO;IACHD,UAAU;IACVE,YAAY,EAAE,UAAU;IACxBC,YAAY,EAAE,UAAU;IACxBC,eAAe,EAAEH,MAAM,CAACG,eAAe;IACvCC,cAAc,EAAEJ,MAAM,CAACI,cAAc;IACrCC,gBAAgB,EAAE;MACd,WAAW,EAAE,IAAI;MACjBC,QAAQ,EAAE,IAAI;MACdC,KAAK,EAAE,OAAO;MACdC,UAAU,EAAE,YAAY;MACxBC,WAAW,EAAE,WAAW;MACxB,GAAGT,MAAM,CAACK;IACd;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.d.ts

@@ -0,0 +1,3 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+export declare const getIdpConfig: (type: CognitoIdentityProviderConfig["type"], userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => import("@pulumi/aws/cognito/identityProvider.js").IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.js

@@ -0,0 +1,17 @@
+import { getGoogleIdpConfig } from "./google.js";
+import { getFacebookIdpConfig } from "./facebook.js";
+import { getAppleIdpConfig } from "./apple.js";
+import { getAmazonIdpConfig } from "./amazon.js";
+import { getOidcIdpConfig } from "./oidc.js";
+const idpMap = {
+  google: getGoogleIdpConfig,
+  facebook: getFacebookIdpConfig,
+  amazon: getAmazonIdpConfig,
+  apple: getAppleIdpConfig,
+  oidc: getOidcIdpConfig
+};
+export const getIdpConfig = (type, userPoolId, config) => {
+  return idpMap[type](userPoolId, config);
+};
+
+//# sourceMappingURL=getIdpConfig.js.map

package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getGoogleIdpConfig","getFacebookIdpConfig","getAppleIdpConfig","getAmazonIdpConfig","getOidcIdpConfig","idpMap","google","facebook","amazon","apple","oidc","getIdpConfig","type","userPoolId","config"],"sources":["getIdpConfig.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\nimport { getGoogleIdpConfig } from \"./google.js\";\nimport { getFacebookIdpConfig } from \"./facebook.js\";\nimport { getAppleIdpConfig } from \"./apple.js\";\nimport { getAmazonIdpConfig } from \"./amazon.js\";\nimport { getOidcIdpConfig } from \"./oidc.js\";\n\nconst idpMap = {\n    google: getGoogleIdpConfig,\n    facebook: getFacebookIdpConfig,\n    amazon: getAmazonIdpConfig,\n    apple: getAppleIdpConfig,\n    oidc: getOidcIdpConfig\n};\n\nexport const getIdpConfig = (\n    type: CognitoIdentityProviderConfig[\"type\"],\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n) => {\n    return idpMap[type](userPoolId, config);\n};\n"],"mappings":"AAEA,SAASA,kBAAkB;AAC3B,SAASC,oBAAoB;AAC7B,SAASC,iBAAiB;AAC1B,SAASC,kBAAkB;AAC3B,SAASC,gBAAgB;AAEzB,MAAMC,MAAM,GAAG;EACXC,MAAM,EAAEN,kBAAkB;EAC1BO,QAAQ,EAAEN,oBAAoB;EAC9BO,MAAM,EAAEL,kBAAkB;EAC1BM,KAAK,EAAEP,iBAAiB;EACxBQ,IAAI,EAAEN;AACV,CAAC;AAED,OAAO,MAAMO,YAAY,GAAGA,CACxBC,IAA2C,EAC3CC,UAAgC,EAChCC,MAAqC,KACpC;EACD,OAAOT,MAAM,CAACO,IAAI,CAAC,CAACC,UAAU,EAAEC,MAAM,CAAC;AAC3C,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/google.d.ts

@@ -0,0 +1,4 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+export declare const getGoogleIdpConfig: (userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/google.js

@@ -0,0 +1,19 @@
+export const getGoogleIdpConfig = (userPoolId, config) => {
+  return {
+    userPoolId,
+    providerName: "Google",
+    providerType: "Google",
+    providerDetails: config.providerDetails,
+    idpIdentifiers: config.idpIdentifiers,
+    attributeMapping: {
+      "custom:id": "sub",
+      username: "sub",
+      email: "email",
+      given_name: "given_name",
+      family_name: "family_name",
+      ...config.attributeMapping
+    }
+  };
+};
+
+//# sourceMappingURL=google.js.map

package/pulumi/apps/core/cognitoIdentityProviders/google.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getGoogleIdpConfig","userPoolId","config","providerName","providerType","providerDetails","idpIdentifiers","attributeMapping","username","email","given_name","family_name"],"sources":["google.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\n\nexport const getGoogleIdpConfig = (\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n): IdentityProviderArgs => {\n    return {\n        userPoolId,\n        providerName: \"Google\",\n        providerType: \"Google\",\n        providerDetails: config.providerDetails,\n        idpIdentifiers: config.idpIdentifiers,\n        attributeMapping: {\n            \"custom:id\": \"sub\",\n            username: \"sub\",\n            email: \"email\",\n            given_name: \"given_name\",\n            family_name: \"family_name\",\n            ...config.attributeMapping\n        }\n    };\n};\n"],"mappings":"AAIA,OAAO,MAAMA,kBAAkB,GAAGA,CAC9BC,UAAgC,EAChCC,MAAqC,KACd;EACvB,OAAO;IACHD,UAAU;IACVE,YAAY,EAAE,QAAQ;IACtBC,YAAY,EAAE,QAAQ;IACtBC,eAAe,EAAEH,MAAM,CAACG,eAAe;IACvCC,cAAc,EAAEJ,MAAM,CAACI,cAAc;IACrCC,gBAAgB,EAAE;MACd,WAAW,EAAE,KAAK;MAClBC,QAAQ,EAAE,KAAK;MACfC,KAAK,EAAE,OAAO;MACdC,UAAU,EAAE,YAAY;MACxBC,WAAW,EAAE,aAAa;MAC1B,GAAGT,MAAM,CAACK;IACd;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/index.d.ts

@@ -0,0 +1 @@
+export * from "./configure.js";

package/pulumi/apps/core/cognitoIdentityProviders/index.js

@@ -0,0 +1,3 @@
+export * from "./configure.js";
+
+//# sourceMappingURL=index.js.map

package/pulumi/apps/core/cognitoIdentityProviders/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./configure.js\";\n"],"mappings":"AAAA","ignoreList":[]}

package/pulumi/apps/core/cognitoIdentityProviders/oidc.d.ts

@@ -0,0 +1,4 @@
+import type * as pulumi from "@pulumi/pulumi";
+import { type CognitoIdentityProviderConfig } from "./configure.js";
+import { type IdentityProviderArgs } from "@pulumi/aws/cognito/index.js";
+export declare const getOidcIdpConfig: (userPoolId: pulumi.Input<string>, config: CognitoIdentityProviderConfig) => IdentityProviderArgs;

package/pulumi/apps/core/cognitoIdentityProviders/oidc.js

@@ -0,0 +1,20 @@
+export const getOidcIdpConfig = (userPoolId, config) => {
+  return {
+    userPoolId,
+    providerName: config.name || "OIDC",
+    providerType: "OIDC",
+    providerDetails: config.providerDetails,
+    idpIdentifiers: config.idpIdentifiers,
+    attributeMapping: {
+      "custom:id": "sub",
+      username: "sub",
+      email: "email",
+      given_name: "given_name",
+      family_name: "family_name",
+      preferred_username: "email",
+      ...config.attributeMapping
+    }
+  };
+};
+
+//# sourceMappingURL=oidc.js.map

package/pulumi/apps/core/cognitoIdentityProviders/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["getOidcIdpConfig","userPoolId","config","providerName","name","providerType","providerDetails","idpIdentifiers","attributeMapping","username","email","given_name","family_name","preferred_username"],"sources":["oidc.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport { type CognitoIdentityProviderConfig } from \"./configure.js\";\nimport { type IdentityProviderArgs } from \"@pulumi/aws/cognito/index.js\";\n\nexport const getOidcIdpConfig = (\n    userPoolId: pulumi.Input<string>,\n    config: CognitoIdentityProviderConfig\n): IdentityProviderArgs => {\n    return {\n        userPoolId,\n        providerName: config.name || \"OIDC\",\n        providerType: \"OIDC\",\n        providerDetails: config.providerDetails,\n        idpIdentifiers: config.idpIdentifiers,\n        attributeMapping: {\n            \"custom:id\": \"sub\",\n            username: \"sub\",\n            email: \"email\",\n            given_name: \"given_name\",\n            family_name: \"family_name\",\n            preferred_username: \"email\",\n            ...config.attributeMapping\n        }\n    };\n};\n"],"mappings":"AAIA,OAAO,MAAMA,gBAAgB,GAAGA,CAC5BC,UAAgC,EAChCC,MAAqC,KACd;EACvB,OAAO;IACHD,UAAU;IACVE,YAAY,EAAED,MAAM,CAACE,IAAI,IAAI,MAAM;IACnCC,YAAY,EAAE,MAAM;IACpBC,eAAe,EAAEJ,MAAM,CAACI,eAAe;IACvCC,cAAc,EAAEL,MAAM,CAACK,cAAc;IACrCC,gBAAgB,EAAE;MACd,WAAW,EAAE,KAAK;MAClBC,QAAQ,EAAE,KAAK;MACfC,KAAK,EAAE,OAAO;MACdC,UAAU,EAAE,YAAY;MACxBC,WAAW,EAAE,aAAa;MAC1BC,kBAAkB,EAAE,OAAO;MAC3B,GAAGX,MAAM,CAACM;IACd;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/core/configureS3BucketMalwareProtection.d.ts

@@ -0,0 +1,2 @@
+import type { CorePulumiApp } from "../../../pulumi/apps/core/index.js";
+export declare const configureS3BucketMalwareProtection: (app: CorePulumiApp) => void;