@webiny/project-aws 0.0.0-unstable.3c5210ad37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +11 -0
- package/_templates/appTemplates/admin/src/App.scss +2 -0
- package/_templates/appTemplates/admin/src/App.tsx +13 -0
- package/_templates/appTemplates/admin/src/Extensions.tsx +7 -0
- package/_templates/appTemplates/admin/src/index.tsx +11 -0
- package/_templates/appTemplates/admin/tsconfig.json +7 -0
- package/_templates/appTemplates/admin/webiny.application.ts +3 -0
- package/_templates/appTemplates/admin/webiny.config.ts +3 -0
- package/_templates/appTemplates/api/graphql/package.json +43 -0
- package/_templates/appTemplates/api/graphql/src/extensions.ts +9 -0
- package/_templates/appTemplates/api/graphql/src/index.ts +80 -0
- package/_templates/appTemplates/api/graphql/src/security.ts +43 -0
- package/_templates/appTemplates/api/graphql/tsconfig.json +7 -0
- package/_templates/appTemplates/api/graphql/webiny.config.ts +8 -0
- package/_templates/appTemplates/api/migration/src/index.ts +23 -0
- package/_templates/appTemplates/api/migration/tsconfig.json +7 -0
- package/_templates/appTemplates/api/migration/webiny.config.ts +8 -0
- package/_templates/appTemplates/api/webiny.application.ts +3 -0
- package/_templates/appTemplates/blueGreen/webiny.application.ts +3 -0
- package/_templates/appTemplates/core/webiny.application.ts +3 -0
- package/_templates/appTemplates/syncSystem/webiny.application.ts +3 -0
- package/_templates/extensions/ApiLambdaFunction/package.json +9 -0
- package/_templates/extensions/ApiLambdaFunction/tsconfig.json +7 -0
- package/_templates/extensions/ApiLambdaFunction/webiny.config.ts +8 -0
- package/_templates/extensions/OpenSearch/api/graphql/src/index.ts +90 -0
- package/_templates/extensions/OpenSearch/api/migration/src/index.ts +33 -0
- package/_templates/extensions/OpenSearch/coreDdbToEsHandler/dynamoToElastic/src/index.ts +15 -0
- package/_templates/extensions/OpenSearch/coreDdbToEsHandler/dynamoToElastic/tsconfig.json +7 -0
- package/_templates/extensions/OpenSearch/coreDdbToEsHandler/dynamoToElastic/webiny.config.ts +8 -0
- package/abstractions/ApiGqlClient.d.ts +23 -0
- package/abstractions/ApiGqlClient.js +4 -0
- package/abstractions/ApiGqlClient.js.map +1 -0
- package/abstractions/InvokeLambdaFunction.d.ts +18 -0
- package/abstractions/InvokeLambdaFunction.js +4 -0
- package/abstractions/InvokeLambdaFunction.js.map +1 -0
- package/abstractions/index.d.ts +5 -0
- package/abstractions/index.js +7 -0
- package/abstractions/index.js.map +1 -0
- package/abstractions/services/AdminStackOutputService.d.ts +13 -0
- package/abstractions/services/AdminStackOutputService.js +4 -0
- package/abstractions/services/AdminStackOutputService.js.map +1 -0
- package/abstractions/services/ApiStackOutputService.d.ts +30 -0
- package/abstractions/services/ApiStackOutputService.js +4 -0
- package/abstractions/services/ApiStackOutputService.js.map +1 -0
- package/abstractions/services/CoreStackOutputService.d.ts +16 -0
- package/abstractions/services/CoreStackOutputService.js +4 -0
- package/abstractions/services/CoreStackOutputService.js.map +1 -0
- package/admin.d.ts +22 -0
- package/admin.js +7 -0
- package/admin.js.map +1 -0
- package/api.d.ts +22 -0
- package/api.js +7 -0
- package/api.js.map +1 -0
- package/apps/createAdminApp.d.ts +15 -0
- package/apps/createAdminApp.js +15 -0
- package/apps/createAdminApp.js.map +1 -0
- package/apps/createAdminAppConfig.d.ts +2 -0
- package/apps/createAdminAppConfig.js +21 -0
- package/apps/createAdminAppConfig.js.map +1 -0
- package/apps/createApiApp.d.ts +65 -0
- package/apps/createApiApp.js +25 -0
- package/apps/createApiApp.js.map +1 -0
- package/apps/createBlueGreenApp.d.ts +24 -0
- package/apps/createBlueGreenApp.js +20 -0
- package/apps/createBlueGreenApp.js.map +1 -0
- package/apps/createCoreApp.d.ts +36 -0
- package/apps/createCoreApp.js +16 -0
- package/apps/createCoreApp.js.map +1 -0
- package/apps/createReactAppConfig.d.ts +53 -0
- package/apps/createReactAppConfig.js +79 -0
- package/apps/createReactAppConfig.js.map +1 -0
- package/apps/createSyncSystemApp.d.ts +21 -0
- package/apps/createSyncSystemApp.js +11 -0
- package/apps/createSyncSystemApp.js.map +1 -0
- package/apps/index.d.ts +7 -0
- package/apps/index.js +9 -0
- package/apps/index.js.map +1 -0
- package/cli.d.ts +9 -0
- package/cli.js +6 -0
- package/cli.js.map +1 -0
- package/exports/extensions.d.ts +5 -0
- package/exports/extensions.js +7 -0
- package/exports/extensions.js.map +1 -0
- package/exports/infra/admin.d.ts +1 -0
- package/exports/infra/admin.js +3 -0
- package/exports/infra/admin.js.map +1 -0
- package/exports/infra/api.d.ts +1 -0
- package/exports/infra/api.js +3 -0
- package/exports/infra/api.js.map +1 -0
- package/exports/infra/core.d.ts +1 -0
- package/exports/infra/core.js +3 -0
- package/exports/infra/core.js.map +1 -0
- package/exports/infra/index.d.ts +1 -0
- package/exports/infra/index.js +3 -0
- package/exports/infra/index.js.map +1 -0
- package/extensions/ApiLambdaFunction.d.ts +11 -0
- package/extensions/ApiLambdaFunction.js +68 -0
- package/extensions/ApiLambdaFunction.js.map +1 -0
- package/extensions/AwsDefaultRegion.d.ts +8 -0
- package/extensions/AwsDefaultRegion.js +22 -0
- package/extensions/AwsDefaultRegion.js.map +1 -0
- package/extensions/OpenSearch/EnsureOsServiceRoleBeforeCoreDeploy.d.ts +10 -0
- package/extensions/OpenSearch/EnsureOsServiceRoleBeforeCoreDeploy.js +40 -0
- package/extensions/OpenSearch/EnsureOsServiceRoleBeforeCoreDeploy.js.map +1 -0
- package/extensions/OpenSearch/EnsureOsWasDeployed.d.ts +11 -0
- package/extensions/OpenSearch/EnsureOsWasDeployed.js +34 -0
- package/extensions/OpenSearch/EnsureOsWasDeployed.js.map +1 -0
- package/extensions/OpenSearch/InjectDdbEsLambdaFnHandler.d.ts +12 -0
- package/extensions/OpenSearch/InjectDdbEsLambdaFnHandler.js +31 -0
- package/extensions/OpenSearch/InjectDdbEsLambdaFnHandler.js.map +1 -0
- package/extensions/OpenSearch/ReplaceApiLambdaFnHandlers.d.ts +12 -0
- package/extensions/OpenSearch/ReplaceApiLambdaFnHandlers.js +32 -0
- package/extensions/OpenSearch/ReplaceApiLambdaFnHandlers.js.map +1 -0
- package/extensions/OpenSearch.d.ts +17 -0
- package/extensions/OpenSearch.js +35 -0
- package/extensions/OpenSearch.js.map +1 -0
- package/extensions/ProjectAws/AdminStackOutputService.d.ts +1 -0
- package/extensions/ProjectAws/AdminStackOutputService.js +3 -0
- package/extensions/ProjectAws/AdminStackOutputService.js.map +1 -0
- package/extensions/ProjectAws/ApiStackOutputService.d.ts +1 -0
- package/extensions/ProjectAws/ApiStackOutputService.js +3 -0
- package/extensions/ProjectAws/ApiStackOutputService.js.map +1 -0
- package/extensions/ProjectAws/AutoInstall/AutoInstallAfterApiDeploy.d.ts +17 -0
- package/extensions/ProjectAws/AutoInstall/AutoInstallAfterApiDeploy.js +108 -0
- package/extensions/ProjectAws/AutoInstall/AutoInstallAfterApiDeploy.js.map +1 -0
- package/extensions/ProjectAws/AutoInstall.d.ts +33 -0
- package/extensions/ProjectAws/AutoInstall.js +19 -0
- package/extensions/ProjectAws/AutoInstall.js.map +1 -0
- package/extensions/ProjectAws/BlueGreenDeployments/EnsureVariantBeforeDeploy.d.ts +10 -0
- package/extensions/ProjectAws/BlueGreenDeployments/EnsureVariantBeforeDeploy.js +27 -0
- package/extensions/ProjectAws/BlueGreenDeployments/EnsureVariantBeforeDeploy.js.map +1 -0
- package/extensions/ProjectAws/BlueGreenDeployments/PrintDeploymentInfoAfterDeploy.d.ts +20 -0
- package/extensions/ProjectAws/BlueGreenDeployments/PrintDeploymentInfoAfterDeploy.js +54 -0
- package/extensions/ProjectAws/BlueGreenDeployments/PrintDeploymentInfoAfterDeploy.js.map +1 -0
- package/extensions/ProjectAws/BlueGreenDeployments/SetPrimaryVariantCliCommand.d.ts +18 -0
- package/extensions/ProjectAws/BlueGreenDeployments/SetPrimaryVariantCliCommand.js +60 -0
- package/extensions/ProjectAws/BlueGreenDeployments/SetPrimaryVariantCliCommand.js.map +1 -0
- package/extensions/ProjectAws/BuildAppWorkspace.d.ts +12 -0
- package/extensions/ProjectAws/BuildAppWorkspace.js +66 -0
- package/extensions/ProjectAws/BuildAppWorkspace.js.map +1 -0
- package/extensions/ProjectAws/CoreStackOutputService.d.ts +1 -0
- package/extensions/ProjectAws/CoreStackOutputService.js +3 -0
- package/extensions/ProjectAws/CoreStackOutputService.js.map +1 -0
- package/extensions/ProjectAws/ExecuteDataMigrations.d.ts +16 -0
- package/extensions/ProjectAws/ExecuteDataMigrations.js +69 -0
- package/extensions/ProjectAws/ExecuteDataMigrations.js.map +1 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVars.d.ts +13 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVars.js +43 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVars.js.map +1 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeBuild.d.ts +13 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeBuild.js +24 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeBuild.js.map +1 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeWatch.d.ts +13 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeWatch.js +24 -0
- package/extensions/ProjectAws/SetAdminEnvVars/SetAdminEnvVarsBeforeWatch.js.map +1 -0
- package/extensions/ProjectAws/SetDatabaseSetupOutput.d.ts +10 -0
- package/extensions/ProjectAws/SetDatabaseSetupOutput.js +29 -0
- package/extensions/ProjectAws/SetDatabaseSetupOutput.js.map +1 -0
- package/extensions/ProjectAws/UploadAdminAppToS3.d.ts +13 -0
- package/extensions/ProjectAws/UploadAdminAppToS3.js +69 -0
- package/extensions/ProjectAws/UploadAdminAppToS3.js.map +1 -0
- package/extensions/ProjectAws/definitions.d.ts +3 -0
- package/extensions/ProjectAws/definitions.js +9 -0
- package/extensions/ProjectAws/definitions.js.map +1 -0
- package/extensions/ProjectAws.d.ts +2 -0
- package/extensions/ProjectAws.js +52 -0
- package/extensions/ProjectAws.js.map +1 -0
- package/extensions/definitions.d.ts +3 -0
- package/extensions/definitions.js +6 -0
- package/extensions/definitions.js.map +1 -0
- package/extensions/index.d.ts +5 -0
- package/extensions/index.js +7 -0
- package/extensions/index.js.map +1 -0
- package/features/ApiGqlClient.d.ts +21 -0
- package/features/ApiGqlClient.js +59 -0
- package/features/ApiGqlClient.js.map +1 -0
- package/features/InvokeLambdaFunction.d.ts +10 -0
- package/features/InvokeLambdaFunction.js +38 -0
- package/features/InvokeLambdaFunction.js.map +1 -0
- package/features/index.d.ts +2 -0
- package/features/index.js +4 -0
- package/features/index.js.map +1 -0
- package/index.d.ts +6 -0
- package/index.js +8 -0
- package/index.js.map +1 -0
- package/infra.d.ts +425 -0
- package/infra.js +54 -0
- package/infra.js.map +1 -0
- package/package.json +60 -0
- package/project.d.ts +139 -0
- package/project.js +10 -0
- package/project.js.map +1 -0
- package/pulumi/apps/admin/createAdminPulumiApp.d.ts +12 -0
- package/pulumi/apps/admin/createAdminPulumiApp.js +52 -0
- package/pulumi/apps/admin/createAdminPulumiApp.js.map +1 -0
- package/pulumi/apps/admin/index.d.ts +1 -0
- package/pulumi/apps/admin/index.js +3 -0
- package/pulumi/apps/admin/index.js.map +1 -0
- package/pulumi/apps/api/ApiBackgroundTask.d.ts +12 -0
- package/pulumi/apps/api/ApiBackgroundTask.js +148 -0
- package/pulumi/apps/api/ApiBackgroundTask.js.map +1 -0
- package/pulumi/apps/api/ApiCloudfront.d.ts +3 -0
- package/pulumi/apps/api/ApiCloudfront.js +136 -0
- package/pulumi/apps/api/ApiCloudfront.js.map +1 -0
- package/pulumi/apps/api/ApiFileManager.d.ts +11 -0
- package/pulumi/apps/api/ApiFileManager.js +39 -0
- package/pulumi/apps/api/ApiFileManager.js.map +1 -0
- package/pulumi/apps/api/ApiGateway.d.ts +18 -0
- package/pulumi/apps/api/ApiGateway.js +80 -0
- package/pulumi/apps/api/ApiGateway.js.map +1 -0
- package/pulumi/apps/api/ApiGraphql.d.ts +22 -0
- package/pulumi/apps/api/ApiGraphql.js +164 -0
- package/pulumi/apps/api/ApiGraphql.js.map +1 -0
- package/pulumi/apps/api/ApiMigration.d.ts +5 -0
- package/pulumi/apps/api/ApiMigration.js +83 -0
- package/pulumi/apps/api/ApiMigration.js.map +1 -0
- package/pulumi/apps/api/ApiOutput.d.ts +23 -0
- package/pulumi/apps/api/ApiOutput.js +36 -0
- package/pulumi/apps/api/ApiOutput.js.map +1 -0
- package/pulumi/apps/api/ApiScheduler.d.ts +8 -0
- package/pulumi/apps/api/ApiScheduler.js +100 -0
- package/pulumi/apps/api/ApiScheduler.js.map +1 -0
- package/pulumi/apps/api/ApiWebsocket.d.ts +14 -0
- package/pulumi/apps/api/ApiWebsocket.js +138 -0
- package/pulumi/apps/api/ApiWebsocket.js.map +1 -0
- package/pulumi/apps/api/backgroundTask/definition.d.ts +7 -0
- package/pulumi/apps/api/backgroundTask/definition.js +149 -0
- package/pulumi/apps/api/backgroundTask/definition.js.map +1 -0
- package/pulumi/apps/api/backgroundTask/policy.d.ts +8 -0
- package/pulumi/apps/api/backgroundTask/policy.js +26 -0
- package/pulumi/apps/api/backgroundTask/policy.js.map +1 -0
- package/pulumi/apps/api/backgroundTask/role.d.ts +9 -0
- package/pulumi/apps/api/backgroundTask/role.js +32 -0
- package/pulumi/apps/api/backgroundTask/role.js.map +1 -0
- package/pulumi/apps/api/backgroundTask/types.d.ts +91 -0
- package/pulumi/apps/api/backgroundTask/types.js +14 -0
- package/pulumi/apps/api/backgroundTask/types.js.map +1 -0
- package/pulumi/apps/api/createApiPulumiApp.d.ts +57 -0
- package/pulumi/apps/api/createApiPulumiApp.js +281 -0
- package/pulumi/apps/api/createApiPulumiApp.js.map +1 -0
- package/pulumi/apps/api/handleGuardDutyEvents.d.ts +2 -0
- package/pulumi/apps/api/handleGuardDutyEvents.js +55 -0
- package/pulumi/apps/api/handleGuardDutyEvents.js.map +1 -0
- package/pulumi/apps/api/index.d.ts +9 -0
- package/pulumi/apps/api/index.js +11 -0
- package/pulumi/apps/api/index.js.map +1 -0
- package/pulumi/apps/awsUtils.d.ts +5 -0
- package/pulumi/apps/awsUtils.js +34 -0
- package/pulumi/apps/awsUtils.js.map +1 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterApiGateway.d.ts +11 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterApiGateway.js +44 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterApiGateway.js.map +1 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFront.d.ts +17 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFront.js +100 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFront.js.map +1 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFrontStore.d.ts +10 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFrontStore.js +20 -0
- package/pulumi/apps/blueGreen/BlueGreenRouterCloudFrontStore.js.map +1 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontDefaultCacheBehaviorPolicies.d.ts +7 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontDefaultCacheBehaviorPolicies.js +15 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontDefaultCacheBehaviorPolicies.js.map +1 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontFunctionDomainMap.d.ts +14 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontFunctionDomainMap.js +23 -0
- package/pulumi/apps/blueGreen/cloudfront/createCloudFrontFunctionDomainMap.js.map +1 -0
- package/pulumi/apps/blueGreen/cloudfront/createOriginId.d.ts +11 -0
- package/pulumi/apps/blueGreen/cloudfront/createOriginId.js +10 -0
- package/pulumi/apps/blueGreen/cloudfront/createOriginId.js.map +1 -0
- package/pulumi/apps/blueGreen/constants.d.ts +3 -0
- package/pulumi/apps/blueGreen/constants.js +5 -0
- package/pulumi/apps/blueGreen/constants.js.map +1 -0
- package/pulumi/apps/blueGreen/createBlueGreenPulumiApp.d.ts +15 -0
- package/pulumi/apps/blueGreen/createBlueGreenPulumiApp.js +122 -0
- package/pulumi/apps/blueGreen/createBlueGreenPulumiApp.js.map +1 -0
- package/pulumi/apps/blueGreen/domains/attachDomainsToOutput.d.ts +9 -0
- package/pulumi/apps/blueGreen/domains/attachDomainsToOutput.js +30 -0
- package/pulumi/apps/blueGreen/domains/attachDomainsToOutput.js.map +1 -0
- package/pulumi/apps/blueGreen/domains/convertApplicationDomains.d.ts +6 -0
- package/pulumi/apps/blueGreen/domains/convertApplicationDomains.js +23 -0
- package/pulumi/apps/blueGreen/domains/convertApplicationDomains.js.map +1 -0
- package/pulumi/apps/blueGreen/domains/getApplicationDomains.d.ts +18 -0
- package/pulumi/apps/blueGreen/domains/getApplicationDomains.js +73 -0
- package/pulumi/apps/blueGreen/domains/getApplicationDomains.js.map +1 -0
- package/pulumi/apps/blueGreen/domains/resolveDomains.d.ts +6 -0
- package/pulumi/apps/blueGreen/domains/resolveDomains.js +41 -0
- package/pulumi/apps/blueGreen/domains/resolveDomains.js.map +1 -0
- package/pulumi/apps/blueGreen/functions/buildHandlerFunction.d.ts +15 -0
- package/pulumi/apps/blueGreen/functions/buildHandlerFunction.js +18 -0
- package/pulumi/apps/blueGreen/functions/buildHandlerFunction.js.map +1 -0
- package/pulumi/apps/blueGreen/functions/handler.d.ts +1 -0
- package/pulumi/apps/blueGreen/functions/handler.js +60 -0
- package/pulumi/apps/blueGreen/functions/handler.js.map +1 -0
- package/pulumi/apps/blueGreen/types.d.ts +77 -0
- package/pulumi/apps/blueGreen/types.js +3 -0
- package/pulumi/apps/blueGreen/types.js.map +1 -0
- package/pulumi/apps/blueGreen/validation/validateDeployments.d.ts +2 -0
- package/pulumi/apps/blueGreen/validation/validateDeployments.js +33 -0
- package/pulumi/apps/blueGreen/validation/validateDeployments.js.map +1 -0
- package/pulumi/apps/common/CoreOutput.d.ts +38 -0
- package/pulumi/apps/common/CoreOutput.js +46 -0
- package/pulumi/apps/common/CoreOutput.js.map +1 -0
- package/pulumi/apps/common/VpcConfig.d.ts +8 -0
- package/pulumi/apps/common/VpcConfig.js +25 -0
- package/pulumi/apps/common/VpcConfig.js.map +1 -0
- package/pulumi/apps/common/index.d.ts +2 -0
- package/pulumi/apps/common/index.js +4 -0
- package/pulumi/apps/common/index.js.map +1 -0
- package/pulumi/apps/core/CoreAuditLogsDynamo.d.ts +5 -0
- package/pulumi/apps/core/CoreAuditLogsDynamo.js +186 -0
- package/pulumi/apps/core/CoreAuditLogsDynamo.js.map +1 -0
- package/pulumi/apps/core/CoreCognito.d.ts +10 -0
- package/pulumi/apps/core/CoreCognito.js +110 -0
- package/pulumi/apps/core/CoreCognito.js.map +1 -0
- package/pulumi/apps/core/CoreDynamo.d.ts +5 -0
- package/pulumi/apps/core/CoreDynamo.js +74 -0
- package/pulumi/apps/core/CoreDynamo.js.map +1 -0
- package/pulumi/apps/core/CoreEventBus.d.ts +1 -0
- package/pulumi/apps/core/CoreEventBus.js +13 -0
- package/pulumi/apps/core/CoreEventBus.js.map +1 -0
- package/pulumi/apps/core/CoreFileManager.d.ts +11 -0
- package/pulumi/apps/core/CoreFileManager.js +72 -0
- package/pulumi/apps/core/CoreFileManager.js.map +1 -0
- package/pulumi/apps/core/CoreOpenSearch.d.ts +16 -0
- package/pulumi/apps/core/CoreOpenSearch.js +299 -0
- package/pulumi/apps/core/CoreOpenSearch.js.map +1 -0
- package/pulumi/apps/core/CoreVpc.d.ts +13 -0
- package/pulumi/apps/core/CoreVpc.js +160 -0
- package/pulumi/apps/core/CoreVpc.js.map +1 -0
- package/pulumi/apps/core/LogDynamo.d.ts +5 -0
- package/pulumi/apps/core/LogDynamo.js +122 -0
- package/pulumi/apps/core/LogDynamo.js.map +1 -0
- package/pulumi/apps/core/WatchCommand.d.ts +7 -0
- package/pulumi/apps/core/WatchCommand.js +105 -0
- package/pulumi/apps/core/WatchCommand.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/amazon.d.ts +9 -0
- package/pulumi/apps/core/cognitoIdentityProviders/amazon.js +24 -0
- package/pulumi/apps/core/cognitoIdentityProviders/amazon.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/apple.d.ts +4 -0
- package/pulumi/apps/core/cognitoIdentityProviders/apple.js +19 -0
- package/pulumi/apps/core/cognitoIdentityProviders/apple.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/configure.d.ts +28 -0
- package/pulumi/apps/core/cognitoIdentityProviders/configure.js +57 -0
- package/pulumi/apps/core/cognitoIdentityProviders/configure.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/facebook.d.ts +4 -0
- package/pulumi/apps/core/cognitoIdentityProviders/facebook.js +19 -0
- package/pulumi/apps/core/cognitoIdentityProviders/facebook.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.d.ts +3 -0
- package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.js +17 -0
- package/pulumi/apps/core/cognitoIdentityProviders/getIdpConfig.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/google.d.ts +4 -0
- package/pulumi/apps/core/cognitoIdentityProviders/google.js +19 -0
- package/pulumi/apps/core/cognitoIdentityProviders/google.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/index.d.ts +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/index.js +3 -0
- package/pulumi/apps/core/cognitoIdentityProviders/index.js.map +1 -0
- package/pulumi/apps/core/cognitoIdentityProviders/oidc.d.ts +4 -0
- package/pulumi/apps/core/cognitoIdentityProviders/oidc.js +20 -0
- package/pulumi/apps/core/cognitoIdentityProviders/oidc.js.map +1 -0
- package/pulumi/apps/core/configureS3BucketMalwareProtection.d.ts +2 -0
- package/pulumi/apps/core/configureS3BucketMalwareProtection.js +195 -0
- package/pulumi/apps/core/configureS3BucketMalwareProtection.js.map +1 -0
- package/pulumi/apps/core/createCorePulumiApp.d.ts +32 -0
- package/pulumi/apps/core/createCorePulumiApp.js +295 -0
- package/pulumi/apps/core/createCorePulumiApp.js.map +1 -0
- package/pulumi/apps/core/index.d.ts +8 -0
- package/pulumi/apps/core/index.js +10 -0
- package/pulumi/apps/core/index.js.map +1 -0
- package/pulumi/apps/core/webinyWatchCommand/handler.d.ts +28 -0
- package/pulumi/apps/core/webinyWatchCommand/handler.js +37 -0
- package/pulumi/apps/core/webinyWatchCommand/handler.js.map +1 -0
- package/pulumi/apps/createAppBucket.d.ts +17 -0
- package/pulumi/apps/createAppBucket.js +152 -0
- package/pulumi/apps/createAppBucket.js.map +1 -0
- package/pulumi/apps/customDomain.d.ts +9 -0
- package/pulumi/apps/customDomain.js +9 -0
- package/pulumi/apps/customDomain.js.map +1 -0
- package/pulumi/apps/extensions/getAwsTagsFromExtension.d.ts +2 -0
- package/pulumi/apps/extensions/getAwsTagsFromExtension.js +10 -0
- package/pulumi/apps/extensions/getAwsTagsFromExtension.js.map +1 -0
- package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.d.ts +23 -0
- package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.js +10 -0
- package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.js.map +1 -0
- package/pulumi/apps/extensions/getOsConfigFromExtension.d.ts +7 -0
- package/pulumi/apps/extensions/getOsConfigFromExtension.js +33 -0
- package/pulumi/apps/extensions/getOsConfigFromExtension.js.map +1 -0
- package/pulumi/apps/extensions/getVpcConfigFromExtension.d.ts +15 -0
- package/pulumi/apps/extensions/getVpcConfigFromExtension.js +29 -0
- package/pulumi/apps/extensions/getVpcConfigFromExtension.js.map +1 -0
- package/pulumi/apps/index.d.ts +6 -0
- package/pulumi/apps/index.js +8 -0
- package/pulumi/apps/index.js.map +1 -0
- package/pulumi/apps/lambdaUtils.d.ts +11 -0
- package/pulumi/apps/lambdaUtils.js +70 -0
- package/pulumi/apps/lambdaUtils.js.map +1 -0
- package/pulumi/apps/react/createReactPulumiApp.d.ts +32 -0
- package/pulumi/apps/react/createReactPulumiApp.js +150 -0
- package/pulumi/apps/react/createReactPulumiApp.js.map +1 -0
- package/pulumi/apps/react/index.d.ts +1 -0
- package/pulumi/apps/react/index.js +3 -0
- package/pulumi/apps/react/index.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamo.d.ts +5 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamo.js +56 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamo.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamoDb.d.ts +3 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamoDb.js +52 -0
- package/pulumi/apps/syncSystem/SyncSystemDynamoDb.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemEventBus.d.ts +6 -0
- package/pulumi/apps/syncSystem/SyncSystemEventBus.js +77 -0
- package/pulumi/apps/syncSystem/SyncSystemEventBus.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemLambda.d.ts +11 -0
- package/pulumi/apps/syncSystem/SyncSystemLambda.js +99 -0
- package/pulumi/apps/syncSystem/SyncSystemLambda.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemOutput.d.ts +3 -0
- package/pulumi/apps/syncSystem/SyncSystemOutput.js +18 -0
- package/pulumi/apps/syncSystem/SyncSystemOutput.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemResolverLambda.d.ts +8 -0
- package/pulumi/apps/syncSystem/SyncSystemResolverLambda.js +73 -0
- package/pulumi/apps/syncSystem/SyncSystemResolverLambda.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemSQS.d.ts +3 -0
- package/pulumi/apps/syncSystem/SyncSystemSQS.js +54 -0
- package/pulumi/apps/syncSystem/SyncSystemSQS.js.map +1 -0
- package/pulumi/apps/syncSystem/SyncSystemWorkerLambda.d.ts +7 -0
- package/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js +52 -0
- package/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js.map +1 -0
- package/pulumi/apps/syncSystem/addTableItems.d.ts +8 -0
- package/pulumi/apps/syncSystem/addTableItems.js +51 -0
- package/pulumi/apps/syncSystem/addTableItems.js.map +1 -0
- package/pulumi/apps/syncSystem/api/addServiceManifest.d.ts +8 -0
- package/pulumi/apps/syncSystem/api/addServiceManifest.js +18 -0
- package/pulumi/apps/syncSystem/api/addServiceManifest.js.map +1 -0
- package/pulumi/apps/syncSystem/api/attachCognitoPermissions.d.ts +14 -0
- package/pulumi/apps/syncSystem/api/attachCognitoPermissions.js +59 -0
- package/pulumi/apps/syncSystem/api/attachCognitoPermissions.js.map +1 -0
- package/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.d.ts +13 -0
- package/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js +44 -0
- package/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js.map +1 -0
- package/pulumi/apps/syncSystem/api/attachEventBusPermissions.d.ts +17 -0
- package/pulumi/apps/syncSystem/api/attachEventBusPermissions.js +48 -0
- package/pulumi/apps/syncSystem/api/attachEventBusPermissions.js.map +1 -0
- package/pulumi/apps/syncSystem/api/attachS3Permissions.d.ts +14 -0
- package/pulumi/apps/syncSystem/api/attachS3Permissions.js +51 -0
- package/pulumi/apps/syncSystem/api/attachS3Permissions.js.map +1 -0
- package/pulumi/apps/syncSystem/api/index.d.ts +8 -0
- package/pulumi/apps/syncSystem/api/index.js +55 -0
- package/pulumi/apps/syncSystem/api/index.js.map +1 -0
- package/pulumi/apps/syncSystem/constants.d.ts +1 -0
- package/pulumi/apps/syncSystem/constants.js +3 -0
- package/pulumi/apps/syncSystem/constants.js.map +1 -0
- package/pulumi/apps/syncSystem/createSyncResourceName.d.ts +4 -0
- package/pulumi/apps/syncSystem/createSyncResourceName.js +10 -0
- package/pulumi/apps/syncSystem/createSyncResourceName.js.map +1 -0
- package/pulumi/apps/syncSystem/createSyncSystemPulumiApp.d.ts +26 -0
- package/pulumi/apps/syncSystem/createSyncSystemPulumiApp.js +181 -0
- package/pulumi/apps/syncSystem/createSyncSystemPulumiApp.js.map +1 -0
- package/pulumi/apps/syncSystem/customApp.d.ts +6 -0
- package/pulumi/apps/syncSystem/customApp.js +19 -0
- package/pulumi/apps/syncSystem/customApp.js.map +1 -0
- package/pulumi/apps/syncSystem/getSyncSystemOutput.d.ts +3 -0
- package/pulumi/apps/syncSystem/getSyncSystemOutput.js +10 -0
- package/pulumi/apps/syncSystem/getSyncSystemOutput.js.map +1 -0
- package/pulumi/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.d.ts +7 -0
- package/pulumi/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.js +48 -0
- package/pulumi/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.js.map +1 -0
- package/pulumi/apps/syncSystem/types.d.ts +56 -0
- package/pulumi/apps/syncSystem/types.js +3 -0
- package/pulumi/apps/syncSystem/types.js.map +1 -0
- package/pulumi/constants.d.ts +1 -0
- package/pulumi/constants.js +4 -0
- package/pulumi/constants.js.map +1 -0
- package/pulumi/env/awsRegion.d.ts +1 -0
- package/pulumi/env/awsRegion.js +6 -0
- package/pulumi/env/awsRegion.js.map +1 -0
- package/pulumi/env/base.d.ts +15 -0
- package/pulumi/env/base.js +29 -0
- package/pulumi/env/base.js.map +1 -0
- package/pulumi/env/env.d.ts +1 -0
- package/pulumi/env/env.js +6 -0
- package/pulumi/env/env.js.map +1 -0
- package/pulumi/env/projectName.d.ts +1 -0
- package/pulumi/env/projectName.js +6 -0
- package/pulumi/env/projectName.js.map +1 -0
- package/pulumi/env/variant.d.ts +1 -0
- package/pulumi/env/variant.js +7 -0
- package/pulumi/env/variant.js.map +1 -0
- package/pulumi/extensions/AdminCustomDomains.d.ts +14 -0
- package/pulumi/extensions/AdminCustomDomains.js +16 -0
- package/pulumi/extensions/AdminCustomDomains.js.map +1 -0
- package/pulumi/extensions/AwsTags.d.ts +8 -0
- package/pulumi/extensions/AwsTags.js +15 -0
- package/pulumi/extensions/AwsTags.js.map +1 -0
- package/pulumi/extensions/BlueGreenDeployments.d.ts +134 -0
- package/pulumi/extensions/BlueGreenDeployments.js +34 -0
- package/pulumi/extensions/BlueGreenDeployments.js.map +1 -0
- package/pulumi/extensions/OpenSearch.d.ts +17 -0
- package/pulumi/extensions/OpenSearch.js +17 -0
- package/pulumi/extensions/OpenSearch.js.map +1 -0
- package/pulumi/extensions/Vpc.d.ts +71 -0
- package/pulumi/extensions/Vpc.js +25 -0
- package/pulumi/extensions/Vpc.js.map +1 -0
- package/pulumi/extensions/index.d.ts +220 -0
- package/pulumi/extensions/index.js +13 -0
- package/pulumi/extensions/index.js.map +1 -0
- package/pulumi/index.d.ts +3 -0
- package/pulumi/index.js +5 -0
- package/pulumi/index.js.map +1 -0
- package/pulumi/types.d.ts +44 -0
- package/pulumi/types.js +3 -0
- package/pulumi/types.js.map +1 -0
- package/pulumi/utils/addDomainsUrlsOutputs.d.ts +18 -0
- package/pulumi/utils/addDomainsUrlsOutputs.js +40 -0
- package/pulumi/utils/addDomainsUrlsOutputs.js.map +1 -0
- package/pulumi/utils/addServiceManifestTableItem.d.ts +12 -0
- package/pulumi/utils/addServiceManifestTableItem.js +28 -0
- package/pulumi/utils/addServiceManifestTableItem.js.map +1 -0
- package/pulumi/utils/crawlDirectory.d.ts +1 -0
- package/pulumi/utils/crawlDirectory.js +19 -0
- package/pulumi/utils/crawlDirectory.js.map +1 -0
- package/pulumi/utils/createAssetArchive.d.ts +2 -0
- package/pulumi/utils/createAssetArchive.js +8 -0
- package/pulumi/utils/createAssetArchive.js.map +1 -0
- package/pulumi/utils/dynamodb.d.ts +14 -0
- package/pulumi/utils/dynamodb.js +29 -0
- package/pulumi/utils/dynamodb.js.map +1 -0
- package/pulumi/utils/getPresignedPost.d.ts +11 -0
- package/pulumi/utils/getPresignedPost.js +34 -0
- package/pulumi/utils/getPresignedPost.js.map +1 -0
- package/pulumi/utils/index.d.ts +5 -0
- package/pulumi/utils/index.js +7 -0
- package/pulumi/utils/index.js.map +1 -0
- package/pulumi/utils/lambdaEnvVariables.d.ts +20 -0
- package/pulumi/utils/lambdaEnvVariables.js +62 -0
- package/pulumi/utils/lambdaEnvVariables.js.map +1 -0
- package/pulumi/utils/tagResources.d.ts +5 -0
- package/pulumi/utils/tagResources.js +33 -0
- package/pulumi/utils/tagResources.js.map +1 -0
- package/pulumi/utils/uploadFolderToS3.d.ts +26 -0
- package/pulumi/utils/uploadFolderToS3.js +147 -0
- package/pulumi/utils/uploadFolderToS3.js.map +1 -0
- package/pulumi/utils/withServiceManifest.d.ts +14 -0
- package/pulumi/utils/withServiceManifest.js +45 -0
- package/pulumi/utils/withServiceManifest.js.map +1 -0
- package/services/AdminStackOutputService.d.ts +10 -0
- package/services/AdminStackOutputService.js +16 -0
- package/services/AdminStackOutputService.js.map +1 -0
- package/services/ApiStackOutputService.d.ts +10 -0
- package/services/ApiStackOutputService.js +16 -0
- package/services/ApiStackOutputService.js.map +1 -0
- package/services/CoreStackOutputService.d.ts +10 -0
- package/services/CoreStackOutputService.js +16 -0
- package/services/CoreStackOutputService.js.map +1 -0
- package/utils/getTemplatesFolderPath.d.ts +1 -0
- package/utils/getTemplatesFolderPath.js +16 -0
- package/utils/getTemplatesFolderPath.js.map +1 -0
- package/utils/index.d.ts +1 -0
- package/utils/index.js +3 -0
- package/utils/index.js.map +1 -0
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import * as aws from "@pulumi/aws";
|
|
2
|
+
import { createSyncResourceName } from "../createSyncResourceName.js";
|
|
3
|
+
export const attachS3Permissions = params => {
|
|
4
|
+
const {
|
|
5
|
+
app,
|
|
6
|
+
syncSystem,
|
|
7
|
+
core
|
|
8
|
+
} = params;
|
|
9
|
+
const {
|
|
10
|
+
resolverLambdaRoleName,
|
|
11
|
+
workerLambdaRoleName
|
|
12
|
+
} = syncSystem;
|
|
13
|
+
const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-s3-fm`);
|
|
14
|
+
const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-s3-fm`);
|
|
15
|
+
const s3Policy = app.addResource(aws.iam.Policy, {
|
|
16
|
+
name: `${resolverLambdaToS3ResourceName}-policy`,
|
|
17
|
+
config: {
|
|
18
|
+
description: "This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.",
|
|
19
|
+
policy: {
|
|
20
|
+
Version: "2012-10-17",
|
|
21
|
+
Statement: [{
|
|
22
|
+
Sid: "PermissionForSyncLambdaToS3",
|
|
23
|
+
Effect: "Allow",
|
|
24
|
+
Action: ["s3:DeleteObject", "s3:PutObject", "s3:GetObject", "s3:ListBucket"],
|
|
25
|
+
Resource: [core.fileManagerBucketArn.apply(arn => arn), core.fileManagerBucketArn.apply(arn => `${arn}/*`)]
|
|
26
|
+
}]
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
});
|
|
30
|
+
const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
|
|
31
|
+
name: `${resolverLambdaToS3ResourceName}-policy-attachment`,
|
|
32
|
+
config: {
|
|
33
|
+
role: resolverLambdaRoleName,
|
|
34
|
+
policyArn: s3Policy.output.arn
|
|
35
|
+
}
|
|
36
|
+
});
|
|
37
|
+
const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
|
|
38
|
+
name: `${workerLambdaToS3ResourceName}-policy-attachment`,
|
|
39
|
+
config: {
|
|
40
|
+
role: workerLambdaRoleName,
|
|
41
|
+
policyArn: s3Policy.output.arn
|
|
42
|
+
}
|
|
43
|
+
});
|
|
44
|
+
return {
|
|
45
|
+
s3Policy,
|
|
46
|
+
workerLambdaS3PolicyAttachment,
|
|
47
|
+
resolverLambdaS3PolicyAttachment
|
|
48
|
+
};
|
|
49
|
+
};
|
|
50
|
+
|
|
51
|
+
//# sourceMappingURL=attachS3Permissions.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["aws","createSyncResourceName","attachS3Permissions","params","app","syncSystem","core","resolverLambdaRoleName","workerLambdaRoleName","resolverLambdaToS3ResourceName","workerLambdaToS3ResourceName","s3Policy","addResource","iam","Policy","name","config","description","policy","Version","Statement","Sid","Effect","Action","Resource","fileManagerBucketArn","apply","arn","resolverLambdaS3PolicyAttachment","RolePolicyAttachment","role","policyArn","output","workerLambdaS3PolicyAttachment"],"sources":["attachS3Permissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachS3PermissionsParams {\n app: PulumiApp & WithServiceManifest;\n syncSystem: IGetSyncSystemOutputResult;\n core: CoreOutput;\n}\n\nexport const attachS3Permissions = (params: IAttachS3PermissionsParams) => {\n const { app, syncSystem, core } = params;\n\n const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;\n\n const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-s3-fm`);\n const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-s3-fm`);\n\n const s3Policy = app.addResource(aws.iam.Policy, {\n name: `${resolverLambdaToS3ResourceName}-policy`,\n config: {\n description:\n \"This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.\",\n policy: {\n Version: \"2012-10-17\",\n Statement: [\n {\n Sid: \"PermissionForSyncLambdaToS3\",\n Effect: \"Allow\",\n Action: [\n \"s3:DeleteObject\",\n \"s3:PutObject\",\n \"s3:GetObject\",\n \"s3:ListBucket\"\n ],\n Resource: [\n core.fileManagerBucketArn.apply(arn => arn),\n core.fileManagerBucketArn.apply(arn => `${arn}/*`)\n ]\n }\n ]\n }\n }\n });\n\n const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n name: `${resolverLambdaToS3ResourceName}-policy-attachment`,\n config: {\n role: resolverLambdaRoleName,\n policyArn: s3Policy.output.arn\n }\n });\n\n const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n name: `${workerLambdaToS3ResourceName}-policy-attachment`,\n config: {\n role: workerLambdaRoleName,\n policyArn: s3Policy.output.arn\n }\n });\n\n return {\n s3Policy,\n workerLambdaS3PolicyAttachment,\n resolverLambdaS3PolicyAttachment\n };\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAIlC,SAASC,sBAAsB;AAS/B,OAAO,MAAMC,mBAAmB,GAAIC,MAAkC,IAAK;EACvE,MAAM;IAAEC,GAAG;IAAEC,UAAU;IAAEC;EAAK,CAAC,GAAGH,MAAM;EAExC,MAAM;IAAEI,sBAAsB;IAAEC;EAAqB,CAAC,GAAGH,UAAU;EAEnE,MAAMI,8BAA8B,GAAGR,sBAAsB,CAAC,0BAA0B,CAAC;EACzF,MAAMS,4BAA4B,GAAGT,sBAAsB,CAAC,wBAAwB,CAAC;EAErF,MAAMU,QAAQ,GAAGP,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACC,MAAM,EAAE;IAC7CC,IAAI,EAAE,GAAGN,8BAA8B,SAAS;IAChDO,MAAM,EAAE;MACJC,WAAW,EACP,sFAAsF;MAC1FC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,GAAG,EAAE,6BAA6B;UAClCC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CACJ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,CAClB;UACDC,QAAQ,EAAE,CACNlB,IAAI,CAACmB,oBAAoB,CAACC,KAAK,CAACC,GAAG,IAAIA,GAAG,CAAC,EAC3CrB,IAAI,CAACmB,oBAAoB,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC;QAE1D,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,gCAAgC,GAAGxB,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACgB,oBAAoB,EAAE;IACnFd,IAAI,EAAE,GAAGN,8BAA8B,oBAAoB;IAC3DO,MAAM,EAAE;MACJc,IAAI,EAAEvB,sBAAsB;MAC5BwB,SAAS,EAAEpB,QAAQ,CAACqB,MAAM,CAACL;IAC/B;EACJ,CAAC,CAAC;EAEF,MAAMM,8BAA8B,GAAG7B,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACgB,oBAAoB,EAAE;IACjFd,IAAI,EAAE,GAAGL,4BAA4B,oBAAoB;IACzDM,MAAM,EAAE;MACJc,IAAI,EAAEtB,oBAAoB;MAC1BuB,SAAS,EAAEpB,QAAQ,CAACqB,MAAM,CAACL;IAC/B;EACJ,CAAC,CAAC;EAEF,OAAO;IACHhB,QAAQ;IACRsB,8BAA8B;IAC9BL;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { PulumiApp } from "@webiny/pulumi/types.js";
|
|
2
|
+
import type { CoreOutput } from "../../../../pulumi/apps/common/CoreOutput.js";
|
|
3
|
+
import type { WithServiceManifest } from "../../../../pulumi/utils/withServiceManifest.js";
|
|
4
|
+
export interface IAttachSyncSystemParams {
|
|
5
|
+
app: PulumiApp & WithServiceManifest;
|
|
6
|
+
core: CoreOutput;
|
|
7
|
+
}
|
|
8
|
+
export declare const attachSyncSystem: (params: IAttachSyncSystemParams) => Promise<void>;
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import { getSyncSystemOutput } from "../getSyncSystemOutput.js";
|
|
2
|
+
import { attachEventBusPermissions } from "./attachEventBusPermissions.js";
|
|
3
|
+
import { attachDynamoDbPermissions } from "./attachDynamoDbPermissions.js";
|
|
4
|
+
import { attachS3Permissions } from "./attachS3Permissions.js";
|
|
5
|
+
import { addServiceManifest } from "./addServiceManifest.js";
|
|
6
|
+
import { attachCognitoPermissions } from "./attachCognitoPermissions.js";
|
|
7
|
+
export const attachSyncSystem = async params => {
|
|
8
|
+
const {
|
|
9
|
+
app,
|
|
10
|
+
core
|
|
11
|
+
} = params;
|
|
12
|
+
const syncSystem = await getSyncSystemOutput();
|
|
13
|
+
/**
|
|
14
|
+
* Possibly no sync system deployed - no need to do anything at that point.
|
|
15
|
+
* At this point, if sync system was deployed, and it is not anymore, all resources after this check will disappear.
|
|
16
|
+
*/
|
|
17
|
+
if (!syncSystem) {
|
|
18
|
+
console.log(`No Sync System deployed. Skipping...`);
|
|
19
|
+
return;
|
|
20
|
+
}
|
|
21
|
+
/**
|
|
22
|
+
* Permissions for Webiny system to access Sync System resources.
|
|
23
|
+
*/
|
|
24
|
+
attachEventBusPermissions({
|
|
25
|
+
app,
|
|
26
|
+
syncSystem
|
|
27
|
+
});
|
|
28
|
+
/**
|
|
29
|
+
* Permissions for Sync System to access Webiny system resources.
|
|
30
|
+
*/
|
|
31
|
+
attachCognitoPermissions({
|
|
32
|
+
app,
|
|
33
|
+
syncSystem,
|
|
34
|
+
core
|
|
35
|
+
});
|
|
36
|
+
attachDynamoDbPermissions({
|
|
37
|
+
app,
|
|
38
|
+
syncSystem,
|
|
39
|
+
core
|
|
40
|
+
});
|
|
41
|
+
attachS3Permissions({
|
|
42
|
+
app,
|
|
43
|
+
syncSystem,
|
|
44
|
+
core
|
|
45
|
+
});
|
|
46
|
+
/**
|
|
47
|
+
* Add the Service Manifest item to the Webiny system.
|
|
48
|
+
*/
|
|
49
|
+
addServiceManifest({
|
|
50
|
+
app,
|
|
51
|
+
syncSystem
|
|
52
|
+
});
|
|
53
|
+
};
|
|
54
|
+
|
|
55
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["getSyncSystemOutput","attachEventBusPermissions","attachDynamoDbPermissions","attachS3Permissions","addServiceManifest","attachCognitoPermissions","attachSyncSystem","params","app","core","syncSystem","console","log"],"sources":["index.ts"],"sourcesContent":["import { getSyncSystemOutput } from \"~/pulumi/apps/syncSystem/getSyncSystemOutput.js\";\nimport { attachEventBusPermissions } from \"./attachEventBusPermissions.js\";\nimport { attachDynamoDbPermissions } from \"~/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js\";\nimport { attachS3Permissions } from \"~/pulumi/apps/syncSystem/api/attachS3Permissions.js\";\nimport { addServiceManifest } from \"~/pulumi/apps/syncSystem/api/addServiceManifest.js\";\nimport type { PulumiApp } from \"@webiny/pulumi/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport { attachCognitoPermissions } from \"~/pulumi/apps/syncSystem/api/attachCognitoPermissions.js\";\n\nexport interface IAttachSyncSystemParams {\n app: PulumiApp & WithServiceManifest;\n core: CoreOutput;\n}\n\nexport const attachSyncSystem = async (params: IAttachSyncSystemParams) => {\n const { app, core } = params;\n\n const syncSystem = await getSyncSystemOutput();\n /**\n * Possibly no sync system deployed - no need to do anything at that point.\n * At this point, if sync system was deployed, and it is not anymore, all resources after this check will disappear.\n */\n if (!syncSystem) {\n console.log(`No Sync System deployed. Skipping...`);\n return;\n }\n /**\n * Permissions for Webiny system to access Sync System resources.\n */\n attachEventBusPermissions({\n app,\n syncSystem\n });\n /**\n * Permissions for Sync System to access Webiny system resources.\n */\n attachCognitoPermissions({\n app,\n syncSystem,\n core\n });\n attachDynamoDbPermissions({\n app,\n syncSystem,\n core\n });\n attachS3Permissions({\n app,\n syncSystem,\n core\n });\n /**\n * Add the Service Manifest item to the Webiny system.\n */\n addServiceManifest({\n app,\n syncSystem\n });\n};\n"],"mappings":"AAAA,SAASA,mBAAmB;AAC5B,SAASC,yBAAyB;AAClC,SAASC,yBAAyB;AAClC,SAASC,mBAAmB;AAC5B,SAASC,kBAAkB;AAI3B,SAASC,wBAAwB;AAOjC,OAAO,MAAMC,gBAAgB,GAAG,MAAOC,MAA+B,IAAK;EACvE,MAAM;IAAEC,GAAG;IAAEC;EAAK,CAAC,GAAGF,MAAM;EAE5B,MAAMG,UAAU,GAAG,MAAMV,mBAAmB,CAAC,CAAC;EAC9C;AACJ;AACA;AACA;EACI,IAAI,CAACU,UAAU,EAAE;IACbC,OAAO,CAACC,GAAG,CAAC,sCAAsC,CAAC;IACnD;EACJ;EACA;AACJ;AACA;EACIX,yBAAyB,CAAC;IACtBO,GAAG;IACHE;EACJ,CAAC,CAAC;EACF;AACJ;AACA;EACIL,wBAAwB,CAAC;IACrBG,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACFP,yBAAyB,CAAC;IACtBM,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACFN,mBAAmB,CAAC;IAChBK,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACF;AACJ;AACA;EACIL,kBAAkB,CAAC;IACfI,GAAG;IACHE;EACJ,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const APPS_SYNC_SYSTEM_PATH = "apps/sync";
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["APPS_SYNC_SYSTEM_PATH"],"sources":["constants.ts"],"sourcesContent":["export const APPS_SYNC_SYSTEM_PATH = \"apps/sync\";\n"],"mappings":"AAAA,OAAO,MAAMA,qBAAqB,GAAG,WAAW","ignoreList":[]}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["kebabCase","createSyncResourceName","name"],"sources":["createSyncResourceName.ts"],"sourcesContent":["import kebabCase from \"lodash/kebabCase.js\";\n\n/**\n * Need to have standardized resource names.\n */\nexport const createSyncResourceName = (name: string) => {\n return `sync-system-${kebabCase(name)}`;\n};\n"],"mappings":"AAAA,OAAOA,SAAS,MAAM,qBAAqB;;AAE3C;AACA;AACA;AACA,OAAO,MAAMC,sBAAsB,GAAIC,IAAY,IAAK;EACpD,OAAO,eAAeF,SAAS,CAACE,IAAI,CAAC,EAAE;AAC3C,CAAC","ignoreList":[]}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
export declare function createSyncSystemPulumiApp(): import("@webiny/pulumi").PulumiApp<{
|
|
3
|
+
sqs: pulumi.Output<import("@pulumi/aws/sqs/queue.js").Queue>;
|
|
4
|
+
dynamoDb: pulumi.Output<import("@pulumi/aws/dynamodb/table.js").Table>;
|
|
5
|
+
eventBus: pulumi.Output<import("@pulumi/aws/cloudwatch/eventBus.js").EventBus>;
|
|
6
|
+
eventBusRule: pulumi.Output<import("@pulumi/aws/cloudwatch/eventRule.js").EventRule>;
|
|
7
|
+
eventBusTarget: pulumi.Output<import("@pulumi/aws/cloudwatch/eventTarget.js").EventTarget>;
|
|
8
|
+
eventBusPolicy: pulumi.Output<import("@pulumi/aws/sqs/queuePolicy.js").QueuePolicy>;
|
|
9
|
+
/**
|
|
10
|
+
* Worker Lambda - used to resolve actions triggered by the resolver Lambda.
|
|
11
|
+
*/
|
|
12
|
+
workerLambda: pulumi.Output<import("@pulumi/aws/lambda/function.js").Function>;
|
|
13
|
+
workerLambdaRole: pulumi.Output<import("@pulumi/aws/iam/role.js").Role>;
|
|
14
|
+
/**
|
|
15
|
+
* Resolver Lambda - gets hit by SQS and resolves the data.
|
|
16
|
+
*/
|
|
17
|
+
resolverLambda: pulumi.Output<import("@pulumi/aws/lambda/function.js").Function>;
|
|
18
|
+
resolverLambdaRole: pulumi.Output<import("@pulumi/aws/iam/role.js").Role>;
|
|
19
|
+
resolverLambdaPolicy: pulumi.Output<import("@pulumi/aws/iam/policy.js").Policy>;
|
|
20
|
+
resolverLambdaEventSourceMapping: pulumi.Output<import("@pulumi/aws/lambda/eventSourceMapping.js").EventSourceMapping>;
|
|
21
|
+
/**
|
|
22
|
+
* Systems we are connecting together.
|
|
23
|
+
*/
|
|
24
|
+
primary: {};
|
|
25
|
+
secondary: {};
|
|
26
|
+
}>;
|
|
@@ -0,0 +1,181 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import * as aws from "@pulumi/aws";
|
|
3
|
+
import { createPulumiApp, isResourceOfType } from "@webiny/pulumi";
|
|
4
|
+
import { SyncSystemSQS } from "./SyncSystemSQS.js";
|
|
5
|
+
import { SyncSystemResolverLambda } from "./SyncSystemResolverLambda.js";
|
|
6
|
+
import { APPS_SYNC_SYSTEM_PATH } from "./constants.js";
|
|
7
|
+
import { SyncSystemEventBus } from "./SyncSystemEventBus.js";
|
|
8
|
+
import { customApp } from "./customApp.js";
|
|
9
|
+
import { SyncSystemDynamoDb } from "./SyncSystemDynamoDb.js";
|
|
10
|
+
import { SyncSystemWorkerLambda } from "./SyncSystemWorkerLambda.js";
|
|
11
|
+
import { getProjectSdk } from "@webiny/project";
|
|
12
|
+
import { getVpcConfigFromExtension } from "../extensions/getVpcConfigFromExtension.js";
|
|
13
|
+
import { applyAwsResourceTags } from "../awsUtils.js";
|
|
14
|
+
export function createSyncSystemPulumiApp() {
|
|
15
|
+
return createPulumiApp({
|
|
16
|
+
name: "sync",
|
|
17
|
+
path: APPS_SYNC_SYSTEM_PATH,
|
|
18
|
+
program: async app => {
|
|
19
|
+
const sdk = await getProjectSdk();
|
|
20
|
+
const projectConfig = await sdk.getProjectConfig();
|
|
21
|
+
const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();
|
|
22
|
+
const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);
|
|
23
|
+
if (pulumiResourceNamePrefix) {
|
|
24
|
+
app.onResource(resource => {
|
|
25
|
+
if (!resource.name.startsWith(pulumiResourceNamePrefix)) {
|
|
26
|
+
resource.name = `${pulumiResourceNamePrefix}${resource.name}`;
|
|
27
|
+
}
|
|
28
|
+
});
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
// <-------------------- Enterprise start -------------------->
|
|
32
|
+
app.addHandler(async () => {
|
|
33
|
+
const usingAdvancedVpcParams = vpcExtensionsConfig && typeof vpcExtensionsConfig !== "boolean";
|
|
34
|
+
|
|
35
|
+
// Not using advanced VPC params? Then immediately exit.
|
|
36
|
+
if (!usingAdvancedVpcParams) {
|
|
37
|
+
return;
|
|
38
|
+
}
|
|
39
|
+
const {
|
|
40
|
+
onResource,
|
|
41
|
+
addResource
|
|
42
|
+
} = app;
|
|
43
|
+
const {
|
|
44
|
+
useExistingVpc
|
|
45
|
+
} = vpcExtensionsConfig;
|
|
46
|
+
|
|
47
|
+
// 1. We first deal with "existing VPC" setup.
|
|
48
|
+
if (useExistingVpc) {
|
|
49
|
+
if (!useExistingVpc.lambdaFunctionsVpcConfig) {
|
|
50
|
+
throw new Error("Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.");
|
|
51
|
+
}
|
|
52
|
+
onResource(resource => {
|
|
53
|
+
if (isResourceOfType(resource, aws.lambda.Function)) {
|
|
54
|
+
const canUseVpc = resource.meta.canUseVpc !== false;
|
|
55
|
+
if (canUseVpc) {
|
|
56
|
+
resource.config.vpcConfig(useExistingVpc.lambdaFunctionsVpcConfig);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
if (isResourceOfType(resource, aws.iam.Role)) {
|
|
60
|
+
if (resource.meta.isLambdaFunctionRole) {
|
|
61
|
+
addResource(aws.iam.RolePolicyAttachment, {
|
|
62
|
+
name: `${resource.name}-vpc-access-execution-role`,
|
|
63
|
+
config: {
|
|
64
|
+
role: resource.output.name,
|
|
65
|
+
policyArn: aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole
|
|
66
|
+
}
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
});
|
|
71
|
+
}
|
|
72
|
+
return;
|
|
73
|
+
});
|
|
74
|
+
// <-------------------- Enterprise end -------------------->
|
|
75
|
+
|
|
76
|
+
const protect = app.env.isProduction;
|
|
77
|
+
const regionApp = customApp({
|
|
78
|
+
app,
|
|
79
|
+
protect
|
|
80
|
+
});
|
|
81
|
+
/**
|
|
82
|
+
* Sync System services.
|
|
83
|
+
*/
|
|
84
|
+
const {
|
|
85
|
+
sqsQueue
|
|
86
|
+
} = regionApp.addModule(SyncSystemSQS);
|
|
87
|
+
const dynamoDb = regionApp.addModule(SyncSystemDynamoDb);
|
|
88
|
+
const workerLambda = regionApp.addModule(SyncSystemWorkerLambda);
|
|
89
|
+
const resolverLambda = regionApp.addModule(SyncSystemResolverLambda);
|
|
90
|
+
const {
|
|
91
|
+
eventBusRule,
|
|
92
|
+
eventBus,
|
|
93
|
+
eventBusTarget,
|
|
94
|
+
eventBusPolicy
|
|
95
|
+
} = regionApp.addModule(SyncSystemEventBus);
|
|
96
|
+
const output = {
|
|
97
|
+
/**
|
|
98
|
+
* Region provider.
|
|
99
|
+
*/
|
|
100
|
+
region: pulumi.output(process.env.AWS_REGION),
|
|
101
|
+
/**
|
|
102
|
+
* SyncSystemSQS
|
|
103
|
+
*/
|
|
104
|
+
sqsUrl: sqsQueue.output.url,
|
|
105
|
+
sqsArn: sqsQueue.output.arn,
|
|
106
|
+
sqsName: sqsQueue.output.name,
|
|
107
|
+
/**
|
|
108
|
+
* DynamoDB
|
|
109
|
+
*/
|
|
110
|
+
dynamoDbArn: dynamoDb.output.arn,
|
|
111
|
+
dynamoDbName: dynamoDb.output.name,
|
|
112
|
+
dynamoDbHashKey: dynamoDb.output.hashKey,
|
|
113
|
+
dynamoDbRangeKey: dynamoDb.output.rangeKey,
|
|
114
|
+
/**
|
|
115
|
+
* SyncSystemResolverLambda
|
|
116
|
+
*/
|
|
117
|
+
resolverLambdaArn: resolverLambda.lambda.output.arn,
|
|
118
|
+
resolverLambdaName: resolverLambda.lambda.output.name,
|
|
119
|
+
resolverLambdaRoleArn: resolverLambda.role.output.arn,
|
|
120
|
+
resolverLambdaRoleName: resolverLambda.role.output.name,
|
|
121
|
+
resolverLambdaRoleId: resolverLambda.role.output.id,
|
|
122
|
+
resolverLambdaPolicyArn: resolverLambda.policy.output.arn,
|
|
123
|
+
resolverLambdaPolicyName: resolverLambda.policy.output.name,
|
|
124
|
+
resolverLambdaPolicyId: resolverLambda.policy.output.id,
|
|
125
|
+
resolverLambdaEventSourceMappingArn: resolverLambda.eventSourceMapping.output.arn,
|
|
126
|
+
resolverLambdaEventSourceMappingId: resolverLambda.eventSourceMapping.output.id,
|
|
127
|
+
// # We can safely cast as we know that the property exists.
|
|
128
|
+
resolverLambdaEventSourceMappingEventSourceArn: resolverLambda.eventSourceMapping.output.eventSourceArn,
|
|
129
|
+
/**
|
|
130
|
+
* SyncSystemWorkerLambda
|
|
131
|
+
*/
|
|
132
|
+
workerLambdaArn: workerLambda.lambda.output.arn,
|
|
133
|
+
workerLambdaName: workerLambda.lambda.output.name,
|
|
134
|
+
workerLambdaRoleArn: workerLambda.role.output.arn,
|
|
135
|
+
workerLambdaRoleName: workerLambda.role.output.name,
|
|
136
|
+
/**
|
|
137
|
+
* SyncSystemEventBus
|
|
138
|
+
*/
|
|
139
|
+
eventBusArn: eventBus.output.arn,
|
|
140
|
+
eventBusName: eventBus.output.name,
|
|
141
|
+
eventBusRuleArn: eventBusRule.output.arn,
|
|
142
|
+
eventBusRuleName: eventBusRule.output.id,
|
|
143
|
+
eventBusTargetArn: eventBusTarget.output.arn,
|
|
144
|
+
eventBusPolicyId: eventBusPolicy.output.id,
|
|
145
|
+
eventBusPolicyUrn: eventBusPolicy.output.urn,
|
|
146
|
+
eventBusPolicyQueueUrl: eventBusPolicy.output.queueUrl
|
|
147
|
+
};
|
|
148
|
+
app.addOutputs(output);
|
|
149
|
+
|
|
150
|
+
// Applies internal and user-defined AWS tags.
|
|
151
|
+
await applyAwsResourceTags("sync");
|
|
152
|
+
return {
|
|
153
|
+
sqs: sqsQueue.output,
|
|
154
|
+
dynamoDb: dynamoDb.output,
|
|
155
|
+
eventBus: eventBus.output,
|
|
156
|
+
eventBusRule: eventBusRule.output,
|
|
157
|
+
eventBusTarget: eventBusTarget.output,
|
|
158
|
+
eventBusPolicy: eventBusPolicy.output,
|
|
159
|
+
/**
|
|
160
|
+
* Worker Lambda - used to resolve actions triggered by the resolver Lambda.
|
|
161
|
+
*/
|
|
162
|
+
workerLambda: workerLambda.lambda.output,
|
|
163
|
+
workerLambdaRole: workerLambda.role.output,
|
|
164
|
+
/**
|
|
165
|
+
* Resolver Lambda - gets hit by SQS and resolves the data.
|
|
166
|
+
*/
|
|
167
|
+
resolverLambda: resolverLambda.lambda.output,
|
|
168
|
+
resolverLambdaRole: resolverLambda.role.output,
|
|
169
|
+
resolverLambdaPolicy: resolverLambda.policy.output,
|
|
170
|
+
resolverLambdaEventSourceMapping: resolverLambda.eventSourceMapping.output,
|
|
171
|
+
/**
|
|
172
|
+
* Systems we are connecting together.
|
|
173
|
+
*/
|
|
174
|
+
primary: {},
|
|
175
|
+
secondary: {}
|
|
176
|
+
};
|
|
177
|
+
}
|
|
178
|
+
});
|
|
179
|
+
}
|
|
180
|
+
|
|
181
|
+
//# sourceMappingURL=createSyncSystemPulumiApp.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["pulumi","aws","createPulumiApp","isResourceOfType","SyncSystemSQS","SyncSystemResolverLambda","APPS_SYNC_SYSTEM_PATH","SyncSystemEventBus","customApp","SyncSystemDynamoDb","SyncSystemWorkerLambda","getProjectSdk","getVpcConfigFromExtension","applyAwsResourceTags","createSyncSystemPulumiApp","name","path","program","app","sdk","projectConfig","getProjectConfig","pulumiResourceNamePrefix","getPulumiResourceNamePrefix","vpcExtensionsConfig","onResource","resource","startsWith","addHandler","usingAdvancedVpcParams","addResource","useExistingVpc","lambdaFunctionsVpcConfig","Error","lambda","Function","canUseVpc","meta","config","vpcConfig","iam","Role","isLambdaFunctionRole","RolePolicyAttachment","role","output","policyArn","ManagedPolicy","AWSLambdaVPCAccessExecutionRole","protect","env","isProduction","regionApp","sqsQueue","addModule","dynamoDb","workerLambda","resolverLambda","eventBusRule","eventBus","eventBusTarget","eventBusPolicy","region","process","AWS_REGION","sqsUrl","url","sqsArn","arn","sqsName","dynamoDbArn","dynamoDbName","dynamoDbHashKey","hashKey","dynamoDbRangeKey","rangeKey","resolverLambdaArn","resolverLambdaName","resolverLambdaRoleArn","resolverLambdaRoleName","resolverLambdaRoleId","id","resolverLambdaPolicyArn","policy","resolverLambdaPolicyName","resolverLambdaPolicyId","resolverLambdaEventSourceMappingArn","eventSourceMapping","resolverLambdaEventSourceMappingId","resolverLambdaEventSourceMappingEventSourceArn","eventSourceArn","workerLambdaArn","workerLambdaName","workerLambdaRoleArn","workerLambdaRoleName","eventBusArn","eventBusName","eventBusRuleArn","eventBusRuleName","eventBusTargetArn","eventBusPolicyId","eventBusPolicyUrn","urn","eventBusPolicyQueueUrl","queueUrl","addOutputs","sqs","workerLambdaRole","resolverLambdaRole","resolverLambdaPolicy","resolverLambdaEventSourceMapping","primary","secondary"],"sources":["createSyncSystemPulumiApp.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport { createPulumiApp, isResourceOfType } from \"@webiny/pulumi\";\nimport { SyncSystemSQS } from \"./SyncSystemSQS.js\";\nimport { SyncSystemResolverLambda } from \"./SyncSystemResolverLambda.js\";\nimport type { IGetSyncSystemOutputResult, PulumiOutput } from \"./types.js\";\nimport { APPS_SYNC_SYSTEM_PATH } from \"./constants.js\";\nimport { SyncSystemEventBus } from \"./SyncSystemEventBus.js\";\nimport { customApp } from \"./customApp.js\";\nimport { SyncSystemDynamoDb } from \"~/pulumi/apps/syncSystem/SyncSystemDynamoDb.js\";\nimport { SyncSystemWorkerLambda } from \"~/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js\";\nimport { getProjectSdk } from \"@webiny/project\";\nimport { getVpcConfigFromExtension } from \"~/pulumi/apps/extensions/getVpcConfigFromExtension.js\";\nimport { applyAwsResourceTags } from \"~/pulumi/apps/awsUtils.js\";\n\nexport function createSyncSystemPulumiApp() {\n return createPulumiApp({\n name: \"sync\",\n path: APPS_SYNC_SYSTEM_PATH,\n program: async app => {\n const sdk = await getProjectSdk();\n const projectConfig = await sdk.getProjectConfig();\n\n const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();\n\n const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);\n\n if (pulumiResourceNamePrefix) {\n app.onResource(resource => {\n if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n }\n });\n }\n\n // <-------------------- Enterprise start -------------------->\n app.addHandler(async () => {\n const usingAdvancedVpcParams =\n vpcExtensionsConfig && typeof vpcExtensionsConfig !== \"boolean\";\n\n // Not using advanced VPC params? Then immediately exit.\n if (!usingAdvancedVpcParams) {\n return;\n }\n\n const { onResource, addResource } = app;\n const { useExistingVpc } = vpcExtensionsConfig;\n\n // 1. We first deal with \"existing VPC\" setup.\n if (useExistingVpc) {\n if (!useExistingVpc.lambdaFunctionsVpcConfig) {\n throw new Error(\n \"Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.\"\n );\n }\n\n onResource(resource => {\n if (isResourceOfType(resource, aws.lambda.Function)) {\n const canUseVpc = resource.meta.canUseVpc !== false;\n if (canUseVpc) {\n resource.config.vpcConfig(useExistingVpc!.lambdaFunctionsVpcConfig);\n }\n }\n\n if (isResourceOfType(resource, aws.iam.Role)) {\n if (resource.meta.isLambdaFunctionRole) {\n addResource(aws.iam.RolePolicyAttachment, {\n name: `${resource.name}-vpc-access-execution-role`,\n config: {\n role: resource.output.name,\n policyArn:\n aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole\n }\n });\n }\n }\n });\n }\n\n return;\n });\n // <-------------------- Enterprise end -------------------->\n\n const protect = app.env.isProduction;\n const regionApp = customApp({\n app,\n protect\n });\n /**\n * Sync System services.\n */\n const { sqsQueue } = regionApp.addModule(SyncSystemSQS);\n const dynamoDb = regionApp.addModule(SyncSystemDynamoDb);\n\n const workerLambda = regionApp.addModule(SyncSystemWorkerLambda);\n\n const resolverLambda = regionApp.addModule(SyncSystemResolverLambda);\n const { eventBusRule, eventBus, eventBusTarget, eventBusPolicy } =\n regionApp.addModule(SyncSystemEventBus);\n\n const output: PulumiOutput<IGetSyncSystemOutputResult> = {\n /**\n * Region provider.\n */\n region: pulumi.output(process.env.AWS_REGION as string),\n /**\n * SyncSystemSQS\n */\n sqsUrl: sqsQueue.output.url,\n sqsArn: sqsQueue.output.arn,\n sqsName: sqsQueue.output.name,\n /**\n * DynamoDB\n */\n dynamoDbArn: dynamoDb.output.arn,\n dynamoDbName: dynamoDb.output.name,\n dynamoDbHashKey: dynamoDb.output.hashKey,\n dynamoDbRangeKey: dynamoDb.output.rangeKey as pulumi.Output<string>,\n /**\n * SyncSystemResolverLambda\n */\n resolverLambdaArn: resolverLambda.lambda.output.arn,\n resolverLambdaName: resolverLambda.lambda.output.name,\n resolverLambdaRoleArn: resolverLambda.role.output.arn,\n resolverLambdaRoleName: resolverLambda.role.output.name,\n resolverLambdaRoleId: resolverLambda.role.output.id,\n resolverLambdaPolicyArn: resolverLambda.policy.output.arn,\n resolverLambdaPolicyName: resolverLambda.policy.output.name,\n resolverLambdaPolicyId: resolverLambda.policy.output.id,\n resolverLambdaEventSourceMappingArn: resolverLambda.eventSourceMapping.output.arn,\n resolverLambdaEventSourceMappingId: resolverLambda.eventSourceMapping.output.id,\n // # We can safely cast as we know that the property exists.\n resolverLambdaEventSourceMappingEventSourceArn: resolverLambda.eventSourceMapping\n .output.eventSourceArn as pulumi.Output<string>,\n /**\n * SyncSystemWorkerLambda\n */\n workerLambdaArn: workerLambda.lambda.output.arn,\n workerLambdaName: workerLambda.lambda.output.name,\n workerLambdaRoleArn: workerLambda.role.output.arn,\n workerLambdaRoleName: workerLambda.role.output.name,\n /**\n * SyncSystemEventBus\n */\n eventBusArn: eventBus.output.arn,\n eventBusName: eventBus.output.name,\n eventBusRuleArn: eventBusRule.output.arn,\n eventBusRuleName: eventBusRule.output.id,\n eventBusTargetArn: eventBusTarget.output.arn,\n eventBusPolicyId: eventBusPolicy.output.id,\n eventBusPolicyUrn: eventBusPolicy.output.urn,\n eventBusPolicyQueueUrl: eventBusPolicy.output.queueUrl\n };\n app.addOutputs(output);\n\n // Applies internal and user-defined AWS tags.\n await applyAwsResourceTags(\"sync\");\n\n return {\n sqs: sqsQueue.output,\n dynamoDb: dynamoDb.output,\n eventBus: eventBus.output,\n eventBusRule: eventBusRule.output,\n eventBusTarget: eventBusTarget.output,\n eventBusPolicy: eventBusPolicy.output,\n /**\n * Worker Lambda - used to resolve actions triggered by the resolver Lambda.\n */\n workerLambda: workerLambda.lambda.output,\n workerLambdaRole: workerLambda.role.output,\n /**\n * Resolver Lambda - gets hit by SQS and resolves the data.\n */\n resolverLambda: resolverLambda.lambda.output,\n resolverLambdaRole: resolverLambda.role.output,\n resolverLambdaPolicy: resolverLambda.policy.output,\n resolverLambdaEventSourceMapping: resolverLambda.eventSourceMapping.output,\n /**\n * Systems we are connecting together.\n */\n primary: {},\n secondary: {}\n };\n }\n });\n}\n"],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,gBAAgB;AAClE,SAASC,aAAa;AACtB,SAASC,wBAAwB;AAEjC,SAASC,qBAAqB;AAC9B,SAASC,kBAAkB;AAC3B,SAASC,SAAS;AAClB,SAASC,kBAAkB;AAC3B,SAASC,sBAAsB;AAC/B,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,yBAAyB;AAClC,SAASC,oBAAoB;AAE7B,OAAO,SAASC,yBAAyBA,CAAA,EAAG;EACxC,OAAOZ,eAAe,CAAC;IACnBa,IAAI,EAAE,MAAM;IACZC,IAAI,EAAEV,qBAAqB;IAC3BW,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,GAAG,GAAG,MAAMR,aAAa,CAAC,CAAC;MACjC,MAAMS,aAAa,GAAG,MAAMD,GAAG,CAACE,gBAAgB,CAAC,CAAC;MAElD,MAAMC,wBAAwB,GAAG,MAAMH,GAAG,CAACI,2BAA2B,CAAC,CAAC;MAExE,MAAMC,mBAAmB,GAAGZ,yBAAyB,CAACQ,aAAa,CAAC;MAEpE,IAAIE,wBAAwB,EAAE;QAC1BJ,GAAG,CAACO,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACX,IAAI,CAACY,UAAU,CAACL,wBAAwB,CAAC,EAAE;YACrDI,QAAQ,CAACX,IAAI,GAAG,GAAGO,wBAAwB,GAAGI,QAAQ,CAACX,IAAI,EAAE;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACAG,GAAG,CAACU,UAAU,CAAC,YAAY;QACvB,MAAMC,sBAAsB,GACxBL,mBAAmB,IAAI,OAAOA,mBAAmB,KAAK,SAAS;;QAEnE;QACA,IAAI,CAACK,sBAAsB,EAAE;UACzB;QACJ;QAEA,MAAM;UAAEJ,UAAU;UAAEK;QAAY,CAAC,GAAGZ,GAAG;QACvC,MAAM;UAAEa;QAAe,CAAC,GAAGP,mBAAmB;;QAE9C;QACA,IAAIO,cAAc,EAAE;UAChB,IAAI,CAACA,cAAc,CAACC,wBAAwB,EAAE;YAC1C,MAAM,IAAIC,KAAK,CACX,6GACJ,CAAC;UACL;UAEAR,UAAU,CAACC,QAAQ,IAAI;YACnB,IAAIvB,gBAAgB,CAACuB,QAAQ,EAAEzB,GAAG,CAACiC,MAAM,CAACC,QAAQ,CAAC,EAAE;cACjD,MAAMC,SAAS,GAAGV,QAAQ,CAACW,IAAI,CAACD,SAAS,KAAK,KAAK;cACnD,IAAIA,SAAS,EAAE;gBACXV,QAAQ,CAACY,MAAM,CAACC,SAAS,CAACR,cAAc,CAAEC,wBAAwB,CAAC;cACvE;YACJ;YAEA,IAAI7B,gBAAgB,CAACuB,QAAQ,EAAEzB,GAAG,CAACuC,GAAG,CAACC,IAAI,CAAC,EAAE;cAC1C,IAAIf,QAAQ,CAACW,IAAI,CAACK,oBAAoB,EAAE;gBACpCZ,WAAW,CAAC7B,GAAG,CAACuC,GAAG,CAACG,oBAAoB,EAAE;kBACtC5B,IAAI,EAAE,GAAGW,QAAQ,CAACX,IAAI,4BAA4B;kBAClDuB,MAAM,EAAE;oBACJM,IAAI,EAAElB,QAAQ,CAACmB,MAAM,CAAC9B,IAAI;oBAC1B+B,SAAS,EACL7C,GAAG,CAACuC,GAAG,CAACO,aAAa,CAACC;kBAC9B;gBACJ,CAAC,CAAC;cACN;YACJ;UACJ,CAAC,CAAC;QACN;QAEA;MACJ,CAAC,CAAC;MACF;;MAEA,MAAMC,OAAO,GAAG/B,GAAG,CAACgC,GAAG,CAACC,YAAY;MACpC,MAAMC,SAAS,GAAG5C,SAAS,CAAC;QACxBU,GAAG;QACH+B;MACJ,CAAC,CAAC;MACF;AACZ;AACA;MACY,MAAM;QAAEI;MAAS,CAAC,GAAGD,SAAS,CAACE,SAAS,CAAClD,aAAa,CAAC;MACvD,MAAMmD,QAAQ,GAAGH,SAAS,CAACE,SAAS,CAAC7C,kBAAkB,CAAC;MAExD,MAAM+C,YAAY,GAAGJ,SAAS,CAACE,SAAS,CAAC5C,sBAAsB,CAAC;MAEhE,MAAM+C,cAAc,GAAGL,SAAS,CAACE,SAAS,CAACjD,wBAAwB,CAAC;MACpE,MAAM;QAAEqD,YAAY;QAAEC,QAAQ;QAAEC,cAAc;QAAEC;MAAe,CAAC,GAC5DT,SAAS,CAACE,SAAS,CAAC/C,kBAAkB,CAAC;MAE3C,MAAMsC,MAAgD,GAAG;QACrD;AAChB;AACA;QACgBiB,MAAM,EAAE9D,MAAM,CAAC6C,MAAM,CAACkB,OAAO,CAACb,GAAG,CAACc,UAAoB,CAAC;QACvD;AAChB;AACA;QACgBC,MAAM,EAAEZ,QAAQ,CAACR,MAAM,CAACqB,GAAG;QAC3BC,MAAM,EAAEd,QAAQ,CAACR,MAAM,CAACuB,GAAG;QAC3BC,OAAO,EAAEhB,QAAQ,CAACR,MAAM,CAAC9B,IAAI;QAC7B;AAChB;AACA;QACgBuD,WAAW,EAAEf,QAAQ,CAACV,MAAM,CAACuB,GAAG;QAChCG,YAAY,EAAEhB,QAAQ,CAACV,MAAM,CAAC9B,IAAI;QAClCyD,eAAe,EAAEjB,QAAQ,CAACV,MAAM,CAAC4B,OAAO;QACxCC,gBAAgB,EAAEnB,QAAQ,CAACV,MAAM,CAAC8B,QAAiC;QACnE;AAChB;AACA;QACgBC,iBAAiB,EAAEnB,cAAc,CAACvB,MAAM,CAACW,MAAM,CAACuB,GAAG;QACnDS,kBAAkB,EAAEpB,cAAc,CAACvB,MAAM,CAACW,MAAM,CAAC9B,IAAI;QACrD+D,qBAAqB,EAAErB,cAAc,CAACb,IAAI,CAACC,MAAM,CAACuB,GAAG;QACrDW,sBAAsB,EAAEtB,cAAc,CAACb,IAAI,CAACC,MAAM,CAAC9B,IAAI;QACvDiE,oBAAoB,EAAEvB,cAAc,CAACb,IAAI,CAACC,MAAM,CAACoC,EAAE;QACnDC,uBAAuB,EAAEzB,cAAc,CAAC0B,MAAM,CAACtC,MAAM,CAACuB,GAAG;QACzDgB,wBAAwB,EAAE3B,cAAc,CAAC0B,MAAM,CAACtC,MAAM,CAAC9B,IAAI;QAC3DsE,sBAAsB,EAAE5B,cAAc,CAAC0B,MAAM,CAACtC,MAAM,CAACoC,EAAE;QACvDK,mCAAmC,EAAE7B,cAAc,CAAC8B,kBAAkB,CAAC1C,MAAM,CAACuB,GAAG;QACjFoB,kCAAkC,EAAE/B,cAAc,CAAC8B,kBAAkB,CAAC1C,MAAM,CAACoC,EAAE;QAC/E;QACAQ,8CAA8C,EAAEhC,cAAc,CAAC8B,kBAAkB,CAC5E1C,MAAM,CAAC6C,cAAuC;QACnD;AAChB;AACA;QACgBC,eAAe,EAAEnC,YAAY,CAACtB,MAAM,CAACW,MAAM,CAACuB,GAAG;QAC/CwB,gBAAgB,EAAEpC,YAAY,CAACtB,MAAM,CAACW,MAAM,CAAC9B,IAAI;QACjD8E,mBAAmB,EAAErC,YAAY,CAACZ,IAAI,CAACC,MAAM,CAACuB,GAAG;QACjD0B,oBAAoB,EAAEtC,YAAY,CAACZ,IAAI,CAACC,MAAM,CAAC9B,IAAI;QACnD;AAChB;AACA;QACgBgF,WAAW,EAAEpC,QAAQ,CAACd,MAAM,CAACuB,GAAG;QAChC4B,YAAY,EAAErC,QAAQ,CAACd,MAAM,CAAC9B,IAAI;QAClCkF,eAAe,EAAEvC,YAAY,CAACb,MAAM,CAACuB,GAAG;QACxC8B,gBAAgB,EAAExC,YAAY,CAACb,MAAM,CAACoC,EAAE;QACxCkB,iBAAiB,EAAEvC,cAAc,CAACf,MAAM,CAACuB,GAAG;QAC5CgC,gBAAgB,EAAEvC,cAAc,CAAChB,MAAM,CAACoC,EAAE;QAC1CoB,iBAAiB,EAAExC,cAAc,CAAChB,MAAM,CAACyD,GAAG;QAC5CC,sBAAsB,EAAE1C,cAAc,CAAChB,MAAM,CAAC2D;MAClD,CAAC;MACDtF,GAAG,CAACuF,UAAU,CAAC5D,MAAM,CAAC;;MAEtB;MACA,MAAMhC,oBAAoB,CAAC,MAAM,CAAC;MAElC,OAAO;QACH6F,GAAG,EAAErD,QAAQ,CAACR,MAAM;QACpBU,QAAQ,EAAEA,QAAQ,CAACV,MAAM;QACzBc,QAAQ,EAAEA,QAAQ,CAACd,MAAM;QACzBa,YAAY,EAAEA,YAAY,CAACb,MAAM;QACjCe,cAAc,EAAEA,cAAc,CAACf,MAAM;QACrCgB,cAAc,EAAEA,cAAc,CAAChB,MAAM;QACrC;AAChB;AACA;QACgBW,YAAY,EAAEA,YAAY,CAACtB,MAAM,CAACW,MAAM;QACxC8D,gBAAgB,EAAEnD,YAAY,CAACZ,IAAI,CAACC,MAAM;QAC1C;AAChB;AACA;QACgBY,cAAc,EAAEA,cAAc,CAACvB,MAAM,CAACW,MAAM;QAC5C+D,kBAAkB,EAAEnD,cAAc,CAACb,IAAI,CAACC,MAAM;QAC9CgE,oBAAoB,EAAEpD,cAAc,CAAC0B,MAAM,CAACtC,MAAM;QAClDiE,gCAAgC,EAAErD,cAAc,CAAC8B,kBAAkB,CAAC1C,MAAM;QAC1E;AAChB;AACA;QACgBkE,OAAO,EAAE,CAAC,CAAC;QACXC,SAAS,EAAE,CAAC;MAChB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
export const customApp = params => {
|
|
2
|
+
const {
|
|
3
|
+
app,
|
|
4
|
+
protect
|
|
5
|
+
} = params;
|
|
6
|
+
const initialAddResource = app.addResource;
|
|
7
|
+
app.addResource = (resource, params) => {
|
|
8
|
+
return initialAddResource(resource, {
|
|
9
|
+
...params,
|
|
10
|
+
opts: {
|
|
11
|
+
protect,
|
|
12
|
+
...params.opts
|
|
13
|
+
}
|
|
14
|
+
});
|
|
15
|
+
};
|
|
16
|
+
return app;
|
|
17
|
+
};
|
|
18
|
+
|
|
19
|
+
//# sourceMappingURL=customApp.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["customApp","params","app","protect","initialAddResource","addResource","resource","opts"],"sources":["customApp.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\n\nexport interface IAppWithRegionParams {\n app: PulumiApp;\n protect?: boolean;\n}\n\nexport const customApp = (params: IAppWithRegionParams) => {\n const { app, protect } = params;\n\n const initialAddResource = app.addResource;\n\n app.addResource = (resource, params) => {\n return initialAddResource(resource, {\n ...params,\n opts: {\n protect,\n ...params.opts\n }\n });\n };\n\n return app;\n};\n"],"mappings":"AAOA,OAAO,MAAMA,SAAS,GAAIC,MAA4B,IAAK;EACvD,MAAM;IAAEC,GAAG;IAAEC;EAAQ,CAAC,GAAGF,MAAM;EAE/B,MAAMG,kBAAkB,GAAGF,GAAG,CAACG,WAAW;EAE1CH,GAAG,CAACG,WAAW,GAAG,CAACC,QAAQ,EAAEL,MAAM,KAAK;IACpC,OAAOG,kBAAkB,CAACE,QAAQ,EAAE;MAChC,GAAGL,MAAM;MACTM,IAAI,EAAE;QACFJ,OAAO;QACP,GAAGF,MAAM,CAACM;MACd;IACJ,CAAC,CAAC;EACN,CAAC;EAED,OAAOL,GAAG;AACd,CAAC","ignoreList":[]}
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import type { IGetSyncSystemOutputResult } from "../../../pulumi/apps/syncSystem/types.js";
|
|
2
|
+
export declare const getSyncSystemOutput: () => Promise<import("@webiny/project/abstractions/features/GetAppStackOutput").IGetAppStackOutputResult<IGetSyncSystemOutputResult>>;
|
|
3
|
+
export declare const asyncGetSyncSystemOutput: () => Promise<IGetSyncSystemOutputResult>;
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { getStackOutput } from "@webiny/project";
|
|
2
|
+
export const getSyncSystemOutput = () => {
|
|
3
|
+
return getStackOutput("sync");
|
|
4
|
+
};
|
|
5
|
+
export const asyncGetSyncSystemOutput = async () => {
|
|
6
|
+
const value = await getSyncSystemOutput();
|
|
7
|
+
return value;
|
|
8
|
+
};
|
|
9
|
+
|
|
10
|
+
//# sourceMappingURL=getSyncSystemOutput.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["getStackOutput","getSyncSystemOutput","asyncGetSyncSystemOutput","value"],"sources":["getSyncSystemOutput.ts"],"sourcesContent":["import { getStackOutput } from \"@webiny/project\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\n\nexport const getSyncSystemOutput = () => {\n return getStackOutput<IGetSyncSystemOutputResult>(\"sync\");\n};\n\nexport const asyncGetSyncSystemOutput = async (): Promise<IGetSyncSystemOutputResult> => {\n const value = await getSyncSystemOutput();\n return value!;\n};\n"],"mappings":"AAAA,SAASA,cAAc,QAAQ,iBAAiB;AAGhD,OAAO,MAAMC,mBAAmB,GAAGA,CAAA,KAAM;EACrC,OAAOD,cAAc,CAA6B,MAAM,CAAC;AAC7D,CAAC;AAED,OAAO,MAAME,wBAAwB,GAAG,MAAAA,CAAA,KAAiD;EACrF,MAAMC,KAAK,GAAG,MAAMF,mBAAmB,CAAC,CAAC;EACzC,OAAOE,KAAK;AAChB,CAAC","ignoreList":[]}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
import type { PulumiApp } from "@webiny/pulumi";
|
|
2
|
+
interface ICreateSyncSystemResolverLambdaPolicyParams {
|
|
3
|
+
name: string;
|
|
4
|
+
app: PulumiApp;
|
|
5
|
+
}
|
|
6
|
+
export declare function createSyncSystemResolverLambdaPolicy(params: ICreateSyncSystemResolverLambdaPolicyParams): import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
|
|
7
|
+
export {};
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
import * as aws from "@pulumi/aws";
|
|
2
|
+
import { SyncSystemSQS } from "../SyncSystemSQS.js";
|
|
3
|
+
import { SyncSystemDynamoDb } from "../SyncSystemDynamoDb.js";
|
|
4
|
+
import { SyncSystemWorkerLambda } from "../SyncSystemWorkerLambda.js";
|
|
5
|
+
export function createSyncSystemResolverLambdaPolicy(params) {
|
|
6
|
+
const {
|
|
7
|
+
app
|
|
8
|
+
} = params;
|
|
9
|
+
const {
|
|
10
|
+
sqsQueue
|
|
11
|
+
} = app.getModule(SyncSystemSQS);
|
|
12
|
+
const {
|
|
13
|
+
lambda: workerLambda
|
|
14
|
+
} = app.getModule(SyncSystemWorkerLambda);
|
|
15
|
+
const dynamoDb = app.getModule(SyncSystemDynamoDb);
|
|
16
|
+
const policy = {
|
|
17
|
+
Version: "2012-10-17",
|
|
18
|
+
Statement: [{
|
|
19
|
+
Sid: "PermissionForSQS",
|
|
20
|
+
Effect: "Allow",
|
|
21
|
+
Action: ["sqs:SendMessage", "sqs:SendMessageBatch", "sqs:ReceiveMessage", "sqs:DeleteMessage", "sqs:DeleteMessageBatch", "sqs:ChangeMessageVisibility", "sqs:ChangeMessageVisibilityBatch", "sqs:GetQueueAttributes"],
|
|
22
|
+
Resource: sqsQueue.output.arn.apply(arn => {
|
|
23
|
+
return [`${arn}`, `${arn}/*`];
|
|
24
|
+
})
|
|
25
|
+
}, {
|
|
26
|
+
Sid: "PermissionForDynamoDb",
|
|
27
|
+
Effect: "Allow",
|
|
28
|
+
Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:ConditionCheckItem", "dynamodb:CreateBackup", "dynamodb:CreateTable", "dynamodb:CreateTableReplica", "dynamodb:DeleteBackup", "dynamodb:DeleteItem", "dynamodb:DeleteTable", "dynamodb:DeleteTableReplica", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeExport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:DisableKinesisStreamingDestination", "dynamodb:EnableKinesisStreamingDestination", "dynamodb:ExportTableToPointInTime", "dynamodb:GetItem", "dynamodb:GetRecords", "dynamodb:GetShardIterator", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "dynamodb:PartiQLDelete", "dynamodb:PartiQLInsert", "dynamodb:PartiQLSelect", "dynamodb:PartiQLUpdate", "dynamodb:PurchaseReservedCapacityOfferings", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:RestoreTableFromBackup", "dynamodb:RestoreTableToPointInTime", "dynamodb:Scan", "dynamodb:UpdateContinuousBackups", "dynamodb:UpdateContributorInsights", "dynamodb:UpdateItem", "dynamodb:UpdateTable", "dynamodb:UpdateTableReplicaAutoScaling", "dynamodb:UpdateTimeToLive"],
|
|
29
|
+
Resource: [dynamoDb.output.arn.apply(arn => `${arn}`), dynamoDb.output.arn.apply(arn => `${arn}/*`)]
|
|
30
|
+
}, {
|
|
31
|
+
Sid: "PermissionForWorkerLambda",
|
|
32
|
+
Effect: "Allow",
|
|
33
|
+
Action: ["lambda:InvokeFunction"],
|
|
34
|
+
Resource: workerLambda.output.arn.apply(arn => {
|
|
35
|
+
return [`${arn}`, `${arn}/*`];
|
|
36
|
+
})
|
|
37
|
+
}]
|
|
38
|
+
};
|
|
39
|
+
return app.addResource(aws.iam.Policy, {
|
|
40
|
+
name: params.name,
|
|
41
|
+
config: {
|
|
42
|
+
description: "This policy enables access to DynamoDb and SQS.",
|
|
43
|
+
policy
|
|
44
|
+
}
|
|
45
|
+
});
|
|
46
|
+
}
|
|
47
|
+
|
|
48
|
+
//# sourceMappingURL=createSyncSystemResolverLambdaPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["aws","SyncSystemSQS","SyncSystemDynamoDb","SyncSystemWorkerLambda","createSyncSystemResolverLambdaPolicy","params","app","sqsQueue","getModule","lambda","workerLambda","dynamoDb","policy","Version","Statement","Sid","Effect","Action","Resource","output","arn","apply","addResource","iam","Policy","name","config","description"],"sources":["createSyncSystemResolverLambdaPolicy.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { SyncSystemSQS } from \"../SyncSystemSQS.js\";\nimport { SyncSystemDynamoDb } from \"../SyncSystemDynamoDb.js\";\nimport { SyncSystemWorkerLambda } from \"~/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js\";\n\ninterface ICreateSyncSystemResolverLambdaPolicyParams {\n name: string;\n app: PulumiApp;\n}\n\nexport function createSyncSystemResolverLambdaPolicy(\n params: ICreateSyncSystemResolverLambdaPolicyParams\n) {\n const { app } = params;\n const { sqsQueue } = app.getModule(SyncSystemSQS);\n const { lambda: workerLambda } = app.getModule(SyncSystemWorkerLambda);\n const dynamoDb = app.getModule(SyncSystemDynamoDb);\n\n const policy: aws.iam.PolicyDocument = {\n Version: \"2012-10-17\",\n Statement: [\n {\n Sid: \"PermissionForSQS\",\n Effect: \"Allow\",\n Action: [\n \"sqs:SendMessage\",\n \"sqs:SendMessageBatch\",\n \"sqs:ReceiveMessage\",\n \"sqs:DeleteMessage\",\n \"sqs:DeleteMessageBatch\",\n \"sqs:ChangeMessageVisibility\",\n \"sqs:ChangeMessageVisibilityBatch\",\n \"sqs:GetQueueAttributes\"\n ],\n Resource: sqsQueue.output.arn.apply(arn => {\n return [`${arn}`, `${arn}/*`];\n })\n },\n {\n Sid: \"PermissionForDynamoDb\",\n Effect: \"Allow\",\n Action: [\n \"dynamodb:BatchGetItem\",\n \"dynamodb:BatchWriteItem\",\n \"dynamodb:ConditionCheckItem\",\n \"dynamodb:CreateBackup\",\n \"dynamodb:CreateTable\",\n \"dynamodb:CreateTableReplica\",\n \"dynamodb:DeleteBackup\",\n \"dynamodb:DeleteItem\",\n \"dynamodb:DeleteTable\",\n \"dynamodb:DeleteTableReplica\",\n \"dynamodb:DescribeBackup\",\n \"dynamodb:DescribeContinuousBackups\",\n \"dynamodb:DescribeContributorInsights\",\n \"dynamodb:DescribeExport\",\n \"dynamodb:DescribeKinesisStreamingDestination\",\n \"dynamodb:DescribeLimits\",\n \"dynamodb:DescribeReservedCapacity\",\n \"dynamodb:DescribeReservedCapacityOfferings\",\n \"dynamodb:DescribeStream\",\n \"dynamodb:DescribeTable\",\n \"dynamodb:DescribeTableReplicaAutoScaling\",\n \"dynamodb:DescribeTimeToLive\",\n \"dynamodb:DisableKinesisStreamingDestination\",\n \"dynamodb:EnableKinesisStreamingDestination\",\n \"dynamodb:ExportTableToPointInTime\",\n \"dynamodb:GetItem\",\n \"dynamodb:GetRecords\",\n \"dynamodb:GetShardIterator\",\n \"dynamodb:ListBackups\",\n \"dynamodb:ListContributorInsights\",\n \"dynamodb:ListExports\",\n \"dynamodb:ListStreams\",\n \"dynamodb:ListTables\",\n \"dynamodb:ListTagsOfResource\",\n \"dynamodb:PartiQLDelete\",\n \"dynamodb:PartiQLInsert\",\n \"dynamodb:PartiQLSelect\",\n \"dynamodb:PartiQLUpdate\",\n \"dynamodb:PurchaseReservedCapacityOfferings\",\n \"dynamodb:PutItem\",\n \"dynamodb:Query\",\n \"dynamodb:RestoreTableFromBackup\",\n \"dynamodb:RestoreTableToPointInTime\",\n \"dynamodb:Scan\",\n \"dynamodb:UpdateContinuousBackups\",\n \"dynamodb:UpdateContributorInsights\",\n \"dynamodb:UpdateItem\",\n \"dynamodb:UpdateTable\",\n \"dynamodb:UpdateTableReplicaAutoScaling\",\n \"dynamodb:UpdateTimeToLive\"\n ],\n Resource: [\n dynamoDb.output.arn.apply(arn => `${arn}`),\n dynamoDb.output.arn.apply(arn => `${arn}/*`)\n ]\n },\n {\n Sid: \"PermissionForWorkerLambda\",\n Effect: \"Allow\",\n Action: [\"lambda:InvokeFunction\"],\n Resource: workerLambda.output.arn.apply(arn => {\n return [`${arn}`, `${arn}/*`];\n })\n }\n ]\n };\n\n return app.addResource(aws.iam.Policy, {\n name: params.name,\n config: {\n description: \"This policy enables access to DynamoDb and SQS.\",\n policy\n }\n });\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAElC,SAASC,aAAa;AACtB,SAASC,kBAAkB;AAC3B,SAASC,sBAAsB;AAO/B,OAAO,SAASC,oCAAoCA,CAChDC,MAAmD,EACrD;EACE,MAAM;IAAEC;EAAI,CAAC,GAAGD,MAAM;EACtB,MAAM;IAAEE;EAAS,CAAC,GAAGD,GAAG,CAACE,SAAS,CAACP,aAAa,CAAC;EACjD,MAAM;IAAEQ,MAAM,EAAEC;EAAa,CAAC,GAAGJ,GAAG,CAACE,SAAS,CAACL,sBAAsB,CAAC;EACtE,MAAMQ,QAAQ,GAAGL,GAAG,CAACE,SAAS,CAACN,kBAAkB,CAAC;EAElD,MAAMU,MAA8B,GAAG;IACnCC,OAAO,EAAE,YAAY;IACrBC,SAAS,EAAE,CACP;MACIC,GAAG,EAAE,kBAAkB;MACvBC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,CAC3B;MACDC,QAAQ,EAAEX,QAAQ,CAACY,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI;QACvC,OAAO,CAAC,GAAGA,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI,CAAC;MACjC,CAAC;IACL,CAAC,EACD;MACIL,GAAG,EAAE,uBAAuB;MAC5BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;MACDC,QAAQ,EAAE,CACNP,QAAQ,CAACQ,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI,GAAGA,GAAG,EAAE,CAAC,EAC1CT,QAAQ,CAACQ,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC;IAEpD,CAAC,EACD;MACIL,GAAG,EAAE,2BAA2B;MAChCC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;MACjCC,QAAQ,EAAER,YAAY,CAACS,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI;QAC3C,OAAO,CAAC,GAAGA,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI,CAAC;MACjC,CAAC;IACL,CAAC;EAET,CAAC;EAED,OAAOd,GAAG,CAACgB,WAAW,CAACtB,GAAG,CAACuB,GAAG,CAACC,MAAM,EAAE;IACnCC,IAAI,EAAEpB,MAAM,CAACoB,IAAI;IACjBC,MAAM,EAAE;MACJC,WAAW,EAAE,iDAAiD;MAC9Df;IACJ;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
import type * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import type { IStackOutput } from "@webiny/project";
|
|
3
|
+
export type PulumiOutput<T> = {
|
|
4
|
+
[K in keyof T]: pulumi.Output<T[K]>;
|
|
5
|
+
};
|
|
6
|
+
export interface IGetSyncSystemOutputResult extends IStackOutput {
|
|
7
|
+
/**
|
|
8
|
+
* createRegionProvider
|
|
9
|
+
*/
|
|
10
|
+
region: string;
|
|
11
|
+
/**
|
|
12
|
+
* SyncSystemSQS
|
|
13
|
+
*/
|
|
14
|
+
sqsUrl: string;
|
|
15
|
+
sqsArn: string;
|
|
16
|
+
sqsName: string;
|
|
17
|
+
/**
|
|
18
|
+
* DynamoDb
|
|
19
|
+
*/
|
|
20
|
+
dynamoDbArn: string;
|
|
21
|
+
dynamoDbName: string;
|
|
22
|
+
dynamoDbHashKey: string;
|
|
23
|
+
dynamoDbRangeKey: string;
|
|
24
|
+
/**
|
|
25
|
+
* SyncSystemResolverLambda
|
|
26
|
+
*/
|
|
27
|
+
resolverLambdaArn: string;
|
|
28
|
+
resolverLambdaName: string;
|
|
29
|
+
resolverLambdaRoleArn: string;
|
|
30
|
+
resolverLambdaRoleName: string;
|
|
31
|
+
resolverLambdaRoleId: string;
|
|
32
|
+
resolverLambdaPolicyArn: string;
|
|
33
|
+
resolverLambdaPolicyName: string;
|
|
34
|
+
resolverLambdaPolicyId: string;
|
|
35
|
+
resolverLambdaEventSourceMappingId: string;
|
|
36
|
+
resolverLambdaEventSourceMappingArn: string;
|
|
37
|
+
resolverLambdaEventSourceMappingEventSourceArn: string;
|
|
38
|
+
/**
|
|
39
|
+
* SyncSystemWorkerLambda
|
|
40
|
+
*/
|
|
41
|
+
workerLambdaArn: string;
|
|
42
|
+
workerLambdaName: string;
|
|
43
|
+
workerLambdaRoleArn: string;
|
|
44
|
+
workerLambdaRoleName: string;
|
|
45
|
+
/**
|
|
46
|
+
* SyncSystemEventBus
|
|
47
|
+
*/
|
|
48
|
+
eventBusArn: string;
|
|
49
|
+
eventBusName: string;
|
|
50
|
+
eventBusRuleArn: string;
|
|
51
|
+
eventBusRuleName: string;
|
|
52
|
+
eventBusTargetArn: string;
|
|
53
|
+
eventBusPolicyId: string;
|
|
54
|
+
eventBusPolicyUrn: string;
|
|
55
|
+
eventBusPolicyQueueUrl: string;
|
|
56
|
+
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport type { IStackOutput } from \"@webiny/project\";\n\nexport type PulumiOutput<T> = {\n [K in keyof T]: pulumi.Output<T[K]>;\n};\n\nexport interface IGetSyncSystemOutputResult extends IStackOutput {\n /**\n * createRegionProvider\n */\n region: string;\n /**\n * SyncSystemSQS\n */\n sqsUrl: string;\n sqsArn: string;\n sqsName: string;\n /**\n * DynamoDb\n */\n dynamoDbArn: string;\n dynamoDbName: string;\n dynamoDbHashKey: string;\n dynamoDbRangeKey: string;\n /**\n * SyncSystemResolverLambda\n */\n resolverLambdaArn: string;\n resolverLambdaName: string;\n resolverLambdaRoleArn: string;\n resolverLambdaRoleName: string;\n resolverLambdaRoleId: string;\n resolverLambdaPolicyArn: string;\n resolverLambdaPolicyName: string;\n resolverLambdaPolicyId: string;\n resolverLambdaEventSourceMappingId: string;\n resolverLambdaEventSourceMappingArn: string;\n resolverLambdaEventSourceMappingEventSourceArn: string;\n /**\n * SyncSystemWorkerLambda\n */\n workerLambdaArn: string;\n workerLambdaName: string;\n workerLambdaRoleArn: string;\n workerLambdaRoleName: string;\n /**\n * SyncSystemEventBus\n */\n eventBusArn: string;\n eventBusName: string;\n eventBusRuleArn: string;\n eventBusRuleName: string;\n eventBusTargetArn: string;\n eventBusPolicyId: string;\n eventBusPolicyUrn: string;\n eventBusPolicyQueueUrl: string;\n}\n"],"mappings":"","ignoreList":[]}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const LAMBDA_RUNTIME: "nodejs24.x";
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"names":["lambda","LAMBDA_RUNTIME","Runtime","NodeJS24dX"],"sources":["constants.ts"],"sourcesContent":["import { lambda } from \"@pulumi/aws\";\n\nexport const LAMBDA_RUNTIME = lambda.Runtime.NodeJS24dX;\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,aAAa;AAEpC,OAAO,MAAMC,cAAc,GAAGD,MAAM,CAACE,OAAO,CAACC,UAAU","ignoreList":[]}
|