@webiny/project-aws 0.0.0-unstable.3c5210ad37

package/pulumi/apps/api/ApiFileManager.js

@@ -0,0 +1,39 @@
+import * as aws from "@pulumi/aws";
+import { getLayerArn } from "@webiny/aws-layers";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGraphql } from "../index.js";
+export const ApiFileManager = createAppModule({
+  name: "ApiFileManager",
+  config(app, config) {
+    const graphql = app.getModule(ApiGraphql);
+    const baseConfig = graphql.functions.graphql.config.clone();
+    const download = app.addResource(aws.lambda.Function, {
+      name: "fm-download",
+      config: {
+        ...baseConfig,
+        memorySize: 1600,
+        description: "Serves previously uploaded files.",
+        layers: [getLayerArn("sharp")],
+        environment: {
+          variables: graphql.functions.graphql.output.environment.apply(env => {
+            return {
+              WEBINY_FUNCTION_TYPE: "asset-delivery",
+              ...env?.variables,
+              ...config.env
+            };
+          })
+        },
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+    return {
+      functions: {
+        download
+      }
+    };
+  }
+});
+
+//# sourceMappingURL=ApiFileManager.js.map

package/pulumi/apps/api/ApiFileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","getLayerArn","createAppModule","ApiGraphql","ApiFileManager","name","config","app","graphql","getModule","baseConfig","functions","clone","download","addResource","lambda","Function","memorySize","description","layers","environment","variables","output","apply","env","WEBINY_FUNCTION_TYPE","loggingConfig","logFormat"],"sources":["ApiFileManager.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\n\nexport type ApiFileManager = PulumiAppModule<typeof ApiFileManager>;\n\ninterface ApiFileManagerConfig {\n    env: Record<string, any>;\n}\n\nexport const ApiFileManager = createAppModule({\n    name: \"ApiFileManager\",\n    config(app: PulumiApp, config: ApiFileManagerConfig) {\n        const graphql = app.getModule(ApiGraphql);\n\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const download = app.addResource(aws.lambda.Function, {\n            name: \"fm-download\",\n            config: {\n                ...baseConfig,\n                memorySize: 1600,\n                description: \"Serves previously uploaded files.\",\n                layers: [getLayerArn(\"sharp\")],\n                environment: {\n                    variables: graphql.functions.graphql.output.environment.apply(env => {\n                        return {\n                            WEBINY_FUNCTION_TYPE: \"asset-delivery\",\n                            ...env?.variables,\n                            ...config.env\n                        };\n                    })\n                },\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        return {\n            functions: {\n                download\n            }\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,WAAW,QAAQ,oBAAoB;AAEhD,SAASC,eAAe,QAAQ,gBAAgB;AAEhD,SAASC,UAAU;AAQnB,OAAO,MAAMC,cAAc,GAAGF,eAAe,CAAC;EAC1CG,IAAI,EAAE,gBAAgB;EACtBC,MAAMA,CAACC,GAAc,EAAED,MAA4B,EAAE;IACjD,MAAME,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACN,UAAU,CAAC;IAEzC,MAAMO,UAAU,GAAGF,OAAO,CAACG,SAAS,CAACH,OAAO,CAACF,MAAM,CAACM,KAAK,CAAC,CAAC;IAE3D,MAAMC,QAAQ,GAAGN,GAAG,CAACO,WAAW,CAACd,GAAG,CAACe,MAAM,CAACC,QAAQ,EAAE;MAClDX,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJ,GAAGI,UAAU;QACbO,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE,mCAAmC;QAChDC,MAAM,EAAE,CAAClB,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9BmB,WAAW,EAAE;UACTC,SAAS,EAAEb,OAAO,CAACG,SAAS,CAACH,OAAO,CAACc,MAAM,CAACF,WAAW,CAACG,KAAK,CAACC,GAAG,IAAI;YACjE,OAAO;cACHC,oBAAoB,EAAE,gBAAgB;cACtC,GAAGD,GAAG,EAAEH,SAAS;cACjB,GAAGf,MAAM,CAACkB;YACd,CAAC;UACL,CAAC;QACL,CAAC;QACDE,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACHhB,SAAS,EAAE;QACPE;MACJ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiGateway.d.ts

@@ -0,0 +1,18 @@
+import type * as pulumi from "@pulumi/pulumi";
+import type { PulumiAppModule } from "@webiny/pulumi";
+export interface ApiRouteParams {
+    path: pulumi.Input<string>;
+    method: pulumi.Input<string>;
+    function: pulumi.Input<string>;
+}
+export type ApiGateway = PulumiAppModule<typeof ApiGateway>;
+export declare const ApiGateway: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    api: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/api").Api>;
+    stage: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/stage").Stage>;
+    routes: Record<string, {
+        integration: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/integration").Integration>;
+        route: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/route").Route>;
+        permission: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/permission").Permission>;
+    }>;
+    addRoute: (name: string, params: ApiRouteParams) => void;
+}, Record<string, ApiRouteParams>>;

package/pulumi/apps/api/ApiGateway.js

@@ -0,0 +1,80 @@
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+export const ApiGateway = createAppModule({
+  name: "ApiGateway",
+  config(app, routesConfig) {
+    const api = app.addResource(aws.apigatewayv2.Api, {
+      name: "api-gateway",
+      config: {
+        protocolType: "HTTP",
+        description: "Main API gateway"
+      }
+    });
+    const stage = app.addResource(aws.apigatewayv2.Stage, {
+      name: "default",
+      config: {
+        apiId: api.output.id,
+        autoDeploy: true,
+        defaultRouteSettings: {
+          // Only enable when debugging. Note that by default, API Gateway does not
+          // have the required permissions to write logs to CloudWatch logs. More:
+          // https://coady.tech/aws-cloudwatch-logs-arn/
+          // loggingLevel: "INFO",
+          throttlingBurstLimit: 5000,
+          throttlingRateLimit: 10000
+        }
+      }
+    });
+    const routes = {};
+    for (const name of Object.keys(routesConfig)) {
+      addRoute(name, routesConfig[name]);
+    }
+    return {
+      api,
+      stage,
+      routes,
+      addRoute
+    };
+    function addRoute(name, params) {
+      const route = createRoute(app, api.output, name, params);
+      routes[name] = route;
+    }
+  }
+});
+function createRoute(app, api, name, params) {
+  const integration = app.addResource(aws.apigatewayv2.Integration, {
+    name: name,
+    config: {
+      description: "GraphQL API Integration",
+      apiId: api.id,
+      integrationType: "AWS_PROXY",
+      integrationMethod: params.method,
+      integrationUri: params.function,
+      passthroughBehavior: "WHEN_NO_MATCH"
+    }
+  });
+  const route = app.addResource(aws.apigatewayv2.Route, {
+    name: name,
+    config: {
+      apiId: api.id,
+      routeKey: `${params.method} ${params.path}`,
+      target: integration.output.id.apply(value => `integrations/${value}`)
+    }
+  });
+  const permission = app.addResource(aws.lambda.Permission, {
+    name: `allow-${name}`,
+    config: {
+      action: "lambda:InvokeFunction",
+      function: params.function,
+      principal: "apigateway.amazonaws.com",
+      sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)
+    }
+  });
+  return {
+    integration,
+    route,
+    permission
+  };
+}
+
+//# sourceMappingURL=ApiGateway.js.map

package/pulumi/apps/api/ApiGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createAppModule","ApiGateway","name","config","app","routesConfig","api","addResource","apigatewayv2","Api","protocolType","description","stage","Stage","apiId","output","id","autoDeploy","defaultRouteSettings","throttlingBurstLimit","throttlingRateLimit","routes","Object","keys","addRoute","params","route","createRoute","integration","Integration","integrationType","integrationMethod","method","integrationUri","function","passthroughBehavior","Route","routeKey","path","target","apply","value","permission","lambda","Permission","action","principal","sourceArn","executionArn","arn"],"sources":["ApiGateway.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport interface ApiRouteParams {\n    path: pulumi.Input<string>;\n    method: pulumi.Input<string>;\n    function: pulumi.Input<string>;\n}\n\nexport type ApiGateway = PulumiAppModule<typeof ApiGateway>;\n\nexport const ApiGateway = createAppModule({\n    name: \"ApiGateway\",\n    config(app: PulumiApp, routesConfig: Record<string, ApiRouteParams>) {\n        const api = app.addResource(aws.apigatewayv2.Api, {\n            name: \"api-gateway\",\n            config: {\n                protocolType: \"HTTP\",\n                description: \"Main API gateway\"\n            }\n        });\n\n        const stage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"default\",\n            config: {\n                apiId: api.output.id,\n                autoDeploy: true,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        const routes: Record<string, ReturnType<typeof createRoute>> = {};\n\n        for (const name of Object.keys(routesConfig)) {\n            addRoute(name, routesConfig[name]);\n        }\n\n        return {\n            api,\n            stage,\n            routes,\n            addRoute\n        };\n\n        function addRoute(name: string, params: ApiRouteParams) {\n            const route = createRoute(app, api.output, name, params);\n            routes[name] = route;\n        }\n    }\n});\n\nfunction createRoute(\n    app: PulumiApp,\n    api: pulumi.Output<aws.apigatewayv2.Api>,\n    name: string,\n    params: ApiRouteParams\n) {\n    const integration = app.addResource(aws.apigatewayv2.Integration, {\n        name: name,\n        config: {\n            description: \"GraphQL API Integration\",\n            apiId: api.id,\n            integrationType: \"AWS_PROXY\",\n            integrationMethod: params.method,\n            integrationUri: params.function,\n            passthroughBehavior: \"WHEN_NO_MATCH\"\n        }\n    });\n\n    const route = app.addResource(aws.apigatewayv2.Route, {\n        name: name,\n        config: {\n            apiId: api.id,\n            routeKey: `${params.method} ${params.path}`,\n            target: integration.output.id.apply(value => `integrations/${value}`)\n        }\n    });\n\n    const permission = app.addResource(aws.lambda.Permission, {\n        name: `allow-${name}`,\n        config: {\n            action: \"lambda:InvokeFunction\",\n            function: params.function,\n            principal: \"apigateway.amazonaws.com\",\n            sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)\n        }\n    });\n\n    return {\n        integration,\n        route,\n        permission\n    };\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,eAAe,QAAQ,gBAAgB;AAUhD,OAAO,MAAMC,UAAU,GAAGD,eAAe,CAAC;EACtCE,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,YAA4C,EAAE;IACjE,MAAMC,GAAG,GAAGF,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACC,GAAG,EAAE;MAC9CP,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJO,YAAY,EAAE,MAAM;QACpBC,WAAW,EAAE;MACjB;IACJ,CAAC,CAAC;IAEF,MAAMC,KAAK,GAAGR,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACK,KAAK,EAAE;MAClDX,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJW,KAAK,EAAER,GAAG,CAACS,MAAM,CAACC,EAAE;QACpBC,UAAU,EAAE,IAAI;QAChBC,oBAAoB,EAAE;UAClB;UACA;UACA;UACA;UACAC,oBAAoB,EAAE,IAAI;UAC1BC,mBAAmB,EAAE;QACzB;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,MAAsD,GAAG,CAAC,CAAC;IAEjE,KAAK,MAAMnB,IAAI,IAAIoB,MAAM,CAACC,IAAI,CAAClB,YAAY,CAAC,EAAE;MAC1CmB,QAAQ,CAACtB,IAAI,EAAEG,YAAY,CAACH,IAAI,CAAC,CAAC;IACtC;IAEA,OAAO;MACHI,GAAG;MACHM,KAAK;MACLS,MAAM;MACNG;IACJ,CAAC;IAED,SAASA,QAAQA,CAACtB,IAAY,EAAEuB,MAAsB,EAAE;MACpD,MAAMC,KAAK,GAAGC,WAAW,CAACvB,GAAG,EAAEE,GAAG,CAACS,MAAM,EAAEb,IAAI,EAAEuB,MAAM,CAAC;MACxDJ,MAAM,CAACnB,IAAI,CAAC,GAAGwB,KAAK;IACxB;EACJ;AACJ,CAAC,CAAC;AAEF,SAASC,WAAWA,CAChBvB,GAAc,EACdE,GAAwC,EACxCJ,IAAY,EACZuB,MAAsB,EACxB;EACE,MAAMG,WAAW,GAAGxB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACqB,WAAW,EAAE;IAC9D3B,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJQ,WAAW,EAAE,yBAAyB;MACtCG,KAAK,EAAER,GAAG,CAACU,EAAE;MACbc,eAAe,EAAE,WAAW;MAC5BC,iBAAiB,EAAEN,MAAM,CAACO,MAAM;MAChCC,cAAc,EAAER,MAAM,CAACS,QAAQ;MAC/BC,mBAAmB,EAAE;IACzB;EACJ,CAAC,CAAC;EAEF,MAAMT,KAAK,GAAGtB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAAC4B,KAAK,EAAE;IAClDlC,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJW,KAAK,EAAER,GAAG,CAACU,EAAE;MACbqB,QAAQ,EAAE,GAAGZ,MAAM,CAACO,MAAM,IAAIP,MAAM,CAACa,IAAI,EAAE;MAC3CC,MAAM,EAAEX,WAAW,CAACb,MAAM,CAACC,EAAE,CAACwB,KAAK,CAACC,KAAK,IAAI,gBAAgBA,KAAK,EAAE;IACxE;EACJ,CAAC,CAAC;EAEF,MAAMC,UAAU,GAAGtC,GAAG,CAACG,WAAW,CAACR,GAAG,CAAC4C,MAAM,CAACC,UAAU,EAAE;IACtD1C,IAAI,EAAE,SAASA,IAAI,EAAE;IACrBC,MAAM,EAAE;MACJ0C,MAAM,EAAE,uBAAuB;MAC/BX,QAAQ,EAAET,MAAM,CAACS,QAAQ;MACzBY,SAAS,EAAE,0BAA0B;MACrCC,SAAS,EAAEzC,GAAG,CAAC0C,YAAY,CAACR,KAAK,CAACS,GAAG,IAAI,GAAGA,GAAG,OAAOxB,MAAM,CAACa,IAAI,EAAE;IACvE;EACJ,CAAC,CAAC;EAEF,OAAO;IACHV,WAAW;IACXF,KAAK;IACLgB;EACJ,CAAC;AACL","ignoreList":[]}

package/pulumi/apps/api/ApiGraphql.d.ts

@@ -0,0 +1,22 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+interface GraphqlParams {
+    env: Record<string, any>;
+}
+export interface AddRouteParams {
+    /**
+     * Must be in kebab case (a-z and -)
+     */
+    name: string;
+    path: `/${string}`;
+    method: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | "OPTIONS" | "ANY";
+}
+export type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;
+export declare const ApiGraphql: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+    policy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+    functions: {
+        graphql: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+    };
+    addRoute: (routeParams: AddRouteParams) => any;
+}, GraphqlParams>;
+export {};

package/pulumi/apps/api/ApiGraphql.js

@@ -0,0 +1,164 @@
+import path from "path";
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import toKebabCase from "lodash/kebabCase.js";
+import { createAppModule } from "@webiny/pulumi";
+import { createLambdaRole, getCommonLambdaEnvVariables } from "../lambdaUtils.js";
+import { CoreOutput, VpcConfig } from "../index.js";
+import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
+import { LAMBDA_RUNTIME } from "../../constants.js";
+const EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;
+const EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;
+const EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;
+export const ApiGraphql = createAppModule({
+  name: "ApiGraphql",
+  config(app, params) {
+    const policy = createGraphqlLambdaPolicy(app);
+    const role = createLambdaRole(app, {
+      name: "api-lambda-role",
+      policy: policy.output
+    });
+    const graphql = app.addResource(aws.lambda.Function, {
+      name: "graphql",
+      config: {
+        description: "Webiny's GraphQL APIs",
+        runtime: LAMBDA_RUNTIME,
+        handler: "handler.handler",
+        role: role.output.arn,
+        timeout: 30,
+        memorySize: 1024,
+        code: new pulumi.asset.AssetArchive({
+          ".": new pulumi.asset.FileArchive(path.join(app.paths.workspace, "graphql/build"))
+        }),
+        environment: {
+          variables: getCommonLambdaEnvVariables().apply(value => ({
+            ...value,
+            ...params.env,
+            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
+          }))
+        },
+        vpcConfig: app.getModule(VpcConfig).functionVpcConfig,
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+
+    // Create event rule.
+    const eventRule = app.addResource(aws.cloudwatch.EventRule, {
+      name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,
+      config: {
+        description: "Enable us to empty the trash-bin ever day",
+        scheduleExpression: "cron(0 3 * * ? *)"
+      }
+    });
+
+    // Add required permission to the target lambda.
+    app.addResource(aws.lambda.Permission, {
+      name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,
+      config: {
+        action: "lambda:InvokeFunction",
+        function: graphql.output.arn,
+        principal: "events.amazonaws.com",
+        statementId: "allow-rule-invoke-" + EMPTY_TRASH_BIN_EVENT_RULE_NAME
+      }
+    });
+
+    // Target the main graphql lambda.
+    app.addResource(aws.cloudwatch.EventTarget, {
+      name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,
+      config: {
+        rule: eventRule.output.name,
+        arn: graphql.output.arn,
+        input: JSON.stringify({
+          source: "webiny.events",
+          "detail-type": "WebinyEmptyTrashBin"
+        })
+      }
+    });
+    return {
+      role,
+      policy,
+      functions: {
+        graphql
+      },
+      addRoute: routeParams => {
+        const apiGateway = app.resources.apiGateway;
+        if (!apiGateway) {
+          console.log("Could not add route because there is no apiGateway in the resources.");
+          return;
+        }
+        const kebabName = toKebabCase(routeParams.name);
+        if (kebabName !== routeParams.name) {
+          console.log(`Route name is not allowed: "${routeParams.name}".`);
+          return;
+        }
+        return apiGateway.addRoute(routeParams.name, {
+          path: routeParams.path,
+          method: routeParams.method,
+          function: graphql.output.arn
+        });
+      }
+    };
+  }
+});
+function createGraphqlLambdaPolicy(app) {
+  const coreOutput = app.getModule(CoreOutput);
+  const awsAccountId = getAwsAccountId(app);
+  const awsRegion = getAwsRegion(app);
+  return app.addResource(aws.iam.Policy, {
+    name: "ApiGraphqlLambdaPolicy",
+    config: {
+      description: "This policy enables access to Dynamodb, S3, Lambda and Cognito IDP",
+      // Core is pulumi.Output, so we need to run apply() to resolve policy based on it
+      policy: pulumi.all([coreOutput]).apply(([core]) => {
+        const policy = {
+          Version: "2012-10-17",
+          Statement: [{
+            Sid: "PermissionForDynamodb",
+            Effect: "Allow",
+            Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:ConditionCheckItem", "dynamodb:CreateBackup", "dynamodb:CreateTable", "dynamodb:CreateTableReplica", "dynamodb:DeleteBackup", "dynamodb:DeleteItem", "dynamodb:DeleteTable", "dynamodb:DeleteTableReplica", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeExport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:DisableKinesisStreamingDestination", "dynamodb:EnableKinesisStreamingDestination", "dynamodb:ExportTableToPointInTime", "dynamodb:GetItem", "dynamodb:GetRecords", "dynamodb:GetShardIterator", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "dynamodb:PartiQLDelete", "dynamodb:PartiQLInsert", "dynamodb:PartiQLSelect", "dynamodb:PartiQLUpdate", "dynamodb:PurchaseReservedCapacityOfferings", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:RestoreTableFromBackup", "dynamodb:RestoreTableToPointInTime", "dynamodb:Scan", "dynamodb:UpdateContinuousBackups", "dynamodb:UpdateContributorInsights", "dynamodb:UpdateItem", "dynamodb:UpdateTable", "dynamodb:UpdateTableReplicaAutoScaling", "dynamodb:UpdateTimeToLive"],
+            Resource: [`${core.primaryDynamodbTableArn}`, `${core.primaryDynamodbTableArn}/*`, `${core.logDynamodbTableArn}`, `${core.logDynamodbTableArn}/*`, `${core.auditLogsDynamodbTableArn}`, `${core.auditLogsDynamodbTableArn}/*`,
+            // Attach permissions for elastic search dynamo as well (if ES is enabled).
+            ...(core.opensearchDynamodbTableArn ? [`${core.opensearchDynamodbTableArn}`, `${core.opensearchDynamodbTableArn}/*`] : [])]
+          }, {
+            Sid: "PermissionForS3",
+            Effect: "Allow",
+            Action: ["s3:ListBucket", "s3:GetObjectAcl", "s3:DeleteObject", "s3:PutObjectAcl", "s3:PutObject", "s3:GetObject"],
+            Resource: [pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`, pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`]
+          }, {
+            Sid: "PermissionForLambda",
+            Effect: "Allow",
+            Action: ["lambda:InvokeFunction"],
+            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`
+          }, {
+            Sid: "PermissionForCognitoIdp",
+            Effect: "Allow",
+            Action: "cognito-idp:*",
+            Resource: `${core.cognitoUserPoolArn}`
+          }, {
+            Sid: "PermissionForEventBus",
+            Effect: "Allow",
+            Action: "events:PutEvents",
+            Resource: core.eventBusArn
+          }, {
+            Sid: "PermissionForCloudfront",
+            Effect: "Allow",
+            Action: "cloudfront:CreateInvalidation",
+            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`
+          },
+          // Attach permissions for elastic search domain as well (if ES is enabled).
+          ...(core.opensearchDomainArn ? [{
+            Sid: "PermissionForOS",
+            Effect: "Allow",
+            Action: "es:*",
+            Resource: [`${core.opensearchDomainArn}`, `${core.opensearchDomainArn}/*`]
+          }] : [])]
+        };
+        return policy;
+      })
+    }
+  });
+}
+
+//# sourceMappingURL=ApiGraphql.js.map

package/pulumi/apps/api/ApiGraphql.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["path","pulumi","aws","toKebabCase","createAppModule","createLambdaRole","getCommonLambdaEnvVariables","CoreOutput","VpcConfig","getAwsAccountId","getAwsRegion","LAMBDA_RUNTIME","EMPTY_TRASH_BIN_EVENT_RULE_NAME","EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME","EMPTY_TRASH_BIN_EVENT_RULE_TARGET","ApiGraphql","name","config","app","params","policy","createGraphqlLambdaPolicy","role","output","graphql","addResource","lambda","Function","description","runtime","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","join","paths","workspace","environment","variables","apply","value","env","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","getModule","functionVpcConfig","loggingConfig","logFormat","eventRule","cloudwatch","EventRule","scheduleExpression","Permission","action","function","principal","statementId","EventTarget","rule","input","JSON","stringify","source","functions","addRoute","routeParams","apiGateway","resources","console","log","kebabName","method","coreOutput","awsAccountId","awsRegion","iam","Policy","all","core","Version","Statement","Sid","Effect","Action","Resource","primaryDynamodbTableArn","logDynamodbTableArn","auditLogsDynamodbTableArn","opensearchDynamodbTableArn","interpolate","fileManagerBucketId","cognitoUserPoolArn","eventBusArn","opensearchDomainArn"],"sources":["ApiGraphql.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport toKebabCase from \"lodash/kebabCase.js\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils.js\";\nimport { CoreOutput, VpcConfig } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils.js\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\n\ninterface GraphqlParams {\n    env: Record<string, any>;\n}\n\nexport interface AddRouteParams {\n    /**\n     * Must be in kebab case (a-z and -)\n     */\n    name: string;\n    path: `/${string}`;\n    method: \"DELETE\" | \"GET\" | \"HEAD\" | \"PATCH\" | \"POST\" | \"PUT\" | \"OPTIONS\" | \"ANY\";\n}\n\nconst EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;\nconst EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;\nconst EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;\n\nexport type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;\n\nexport const ApiGraphql = createAppModule({\n    name: \"ApiGraphql\",\n    config(app: PulumiApp, params: GraphqlParams) {\n        const policy = createGraphqlLambdaPolicy(app);\n        const role = createLambdaRole(app, {\n            name: \"api-lambda-role\",\n            policy: policy.output\n        });\n\n        const graphql = app.addResource(aws.lambda.Function, {\n            name: \"graphql\",\n            config: {\n                description: \"Webiny's GraphQL APIs\",\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 30,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"graphql/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        ...params.env,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig,\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        // Create event rule.\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,\n            config: {\n                description: \"Enable us to empty the trash-bin ever day\",\n                scheduleExpression: \"cron(0 3 * * ? *)\"\n            }\n        });\n\n        // Add required permission to the target lambda.\n        app.addResource(aws.lambda.Permission, {\n            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.output.arn,\n                principal: \"events.amazonaws.com\",\n                statementId: \"allow-rule-invoke-\" + EMPTY_TRASH_BIN_EVENT_RULE_NAME\n            }\n        });\n\n        // Target the main graphql lambda.\n        app.addResource(aws.cloudwatch.EventTarget, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,\n            config: {\n                rule: eventRule.output.name,\n                arn: graphql.output.arn,\n                input: JSON.stringify({\n                    source: \"webiny.events\",\n                    \"detail-type\": \"WebinyEmptyTrashBin\"\n                })\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                graphql\n            },\n            addRoute: (routeParams: AddRouteParams) => {\n                const apiGateway: any = app.resources.apiGateway;\n                if (!apiGateway) {\n                    console.log(\n                        \"Could not add route because there is no apiGateway in the resources.\"\n                    );\n                    return;\n                }\n                const kebabName = toKebabCase(routeParams.name);\n                if (kebabName !== routeParams.name) {\n                    console.log(`Route name is not allowed: \"${routeParams.name}\".`);\n                    return;\n                }\n                return apiGateway.addRoute(routeParams.name, {\n                    path: routeParams.path,\n                    method: routeParams.method,\n                    function: graphql.output.arn\n                });\n            }\n        };\n    }\n});\n\nfunction createGraphqlLambdaPolicy(app: PulumiApp) {\n    const coreOutput = app.getModule(CoreOutput);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"ApiGraphqlLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3, Lambda and Cognito IDP\",\n            // Core is pulumi.Output, so we need to run apply() to resolve policy based on it\n            policy: pulumi.all([coreOutput]).apply(([core]) => {\n                const policy: aws.iam.PolicyDocument = {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"dynamodb:BatchGetItem\",\n                                \"dynamodb:BatchWriteItem\",\n                                \"dynamodb:ConditionCheckItem\",\n                                \"dynamodb:CreateBackup\",\n                                \"dynamodb:CreateTable\",\n                                \"dynamodb:CreateTableReplica\",\n                                \"dynamodb:DeleteBackup\",\n                                \"dynamodb:DeleteItem\",\n                                \"dynamodb:DeleteTable\",\n                                \"dynamodb:DeleteTableReplica\",\n                                \"dynamodb:DescribeBackup\",\n                                \"dynamodb:DescribeContinuousBackups\",\n                                \"dynamodb:DescribeContributorInsights\",\n                                \"dynamodb:DescribeExport\",\n                                \"dynamodb:DescribeKinesisStreamingDestination\",\n                                \"dynamodb:DescribeLimits\",\n                                \"dynamodb:DescribeReservedCapacity\",\n                                \"dynamodb:DescribeReservedCapacityOfferings\",\n                                \"dynamodb:DescribeStream\",\n                                \"dynamodb:DescribeTable\",\n                                \"dynamodb:DescribeTableReplicaAutoScaling\",\n                                \"dynamodb:DescribeTimeToLive\",\n                                \"dynamodb:DisableKinesisStreamingDestination\",\n                                \"dynamodb:EnableKinesisStreamingDestination\",\n                                \"dynamodb:ExportTableToPointInTime\",\n                                \"dynamodb:GetItem\",\n                                \"dynamodb:GetRecords\",\n                                \"dynamodb:GetShardIterator\",\n                                \"dynamodb:ListBackups\",\n                                \"dynamodb:ListContributorInsights\",\n                                \"dynamodb:ListExports\",\n                                \"dynamodb:ListStreams\",\n                                \"dynamodb:ListTables\",\n                                \"dynamodb:ListTagsOfResource\",\n                                \"dynamodb:PartiQLDelete\",\n                                \"dynamodb:PartiQLInsert\",\n                                \"dynamodb:PartiQLSelect\",\n                                \"dynamodb:PartiQLUpdate\",\n                                \"dynamodb:PurchaseReservedCapacityOfferings\",\n                                \"dynamodb:PutItem\",\n                                \"dynamodb:Query\",\n                                \"dynamodb:RestoreTableFromBackup\",\n                                \"dynamodb:RestoreTableToPointInTime\",\n                                \"dynamodb:Scan\",\n                                \"dynamodb:UpdateContinuousBackups\",\n                                \"dynamodb:UpdateContributorInsights\",\n                                \"dynamodb:UpdateItem\",\n                                \"dynamodb:UpdateTable\",\n                                \"dynamodb:UpdateTableReplicaAutoScaling\",\n                                \"dynamodb:UpdateTimeToLive\"\n                            ],\n                            Resource: [\n                                `${core.primaryDynamodbTableArn}`,\n                                `${core.primaryDynamodbTableArn}/*`,\n                                `${core.logDynamodbTableArn}`,\n                                `${core.logDynamodbTableArn}/*`,\n                                `${core.auditLogsDynamodbTableArn}`,\n                                `${core.auditLogsDynamodbTableArn}/*`,\n                                // Attach permissions for elastic search dynamo as well (if ES is enabled).\n                                ...(core.opensearchDynamodbTableArn\n                                    ? [\n                                          `${core.opensearchDynamodbTableArn}`,\n                                          `${core.opensearchDynamodbTableArn}/*`\n                                      ]\n                                    : [])\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForS3\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"s3:ListBucket\",\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\"\n                            ],\n                            Resource: [\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForLambda\",\n                            Effect: \"Allow\",\n                            Action: [\"lambda:InvokeFunction\"],\n                            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n                        },\n                        {\n                            Sid: \"PermissionForCognitoIdp\",\n                            Effect: \"Allow\",\n                            Action: \"cognito-idp:*\",\n                            Resource: `${core.cognitoUserPoolArn}`\n                        },\n                        {\n                            Sid: \"PermissionForEventBus\",\n                            Effect: \"Allow\",\n                            Action: \"events:PutEvents\",\n                            Resource: core.eventBusArn\n                        },\n                        {\n                            Sid: \"PermissionForCloudfront\",\n                            Effect: \"Allow\",\n                            Action: \"cloudfront:CreateInvalidation\",\n                            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`\n                        },\n                        // Attach permissions for elastic search domain as well (if ES is enabled).\n                        ...(core.opensearchDomainArn\n                            ? [\n                                  {\n                                      Sid: \"PermissionForOS\",\n                                      Effect: \"Allow\" as const,\n                                      Action: \"es:*\",\n                                      Resource: [\n                                          `${core.opensearchDomainArn}`,\n                                          `${core.opensearchDomainArn}/*`\n                                      ]\n                                  }\n                              ]\n                            : [])\n                    ]\n                };\n\n                return policy;\n            })\n        }\n    });\n}\n"],"mappings":"AAAA,OAAOA,IAAI,MAAM,MAAM;AACvB,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAClC,OAAOC,WAAW,MAAM,qBAAqB;AAE7C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,gBAAgB,EAAEC,2BAA2B;AACtD,SAASC,UAAU,EAAEC,SAAS;AAC9B,SAASC,eAAe,EAAEC,YAAY;AACtC,SAASC,cAAc;AAevB,MAAMC,+BAA+B,GAAG,4BAA4B;AACpE,MAAMC,qCAAqC,GAAG,yCAAyC;AACvF,MAAMC,iCAAiC,GAAG,mCAAmC;AAI7E,OAAO,MAAMC,UAAU,GAAGX,eAAe,CAAC;EACtCY,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,MAAqB,EAAE;IAC1C,MAAMC,MAAM,GAAGC,yBAAyB,CAACH,GAAG,CAAC;IAC7C,MAAMI,IAAI,GAAGjB,gBAAgB,CAACa,GAAG,EAAE;MAC/BF,IAAI,EAAE,iBAAiB;MACvBI,MAAM,EAAEA,MAAM,CAACG;IACnB,CAAC,CAAC;IAEF,MAAMC,OAAO,GAAGN,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACwB,MAAM,CAACC,QAAQ,EAAE;MACjDX,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJW,WAAW,EAAE,uBAAuB;QACpCC,OAAO,EAAElB,cAAc;QACvBmB,OAAO,EAAE,iBAAiB;QAC1BR,IAAI,EAAEA,IAAI,CAACC,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,EAAE;QACXC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAIjC,MAAM,CAACkC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAInC,MAAM,CAACkC,KAAK,CAACE,WAAW,CAC7BrC,IAAI,CAACsC,IAAI,CAACpB,GAAG,CAACqB,KAAK,CAACC,SAAS,EAAE,eAAe,CAClD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAEpC,2BAA2B,CAAC,CAAC,CAACqC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACR,GAAGzB,MAAM,CAAC0B,GAAG;YACbC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAE7B,GAAG,CAAC8B,SAAS,CAACxC,SAAS,CAAC,CAACyC,iBAAiB;QACrDC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,SAAS,GAAGlC,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACmD,UAAU,CAACC,SAAS,EAAE;MACxDtC,IAAI,EAAEJ,+BAA+B;MACrCK,MAAM,EAAE;QACJW,WAAW,EAAE,2CAA2C;QACxD2B,kBAAkB,EAAE;MACxB;IACJ,CAAC,CAAC;;IAEF;IACArC,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACwB,MAAM,CAAC8B,UAAU,EAAE;MACnCxC,IAAI,EAAEH,qCAAqC;MAC3CI,MAAM,EAAE;QACJwC,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAElC,OAAO,CAACD,MAAM,CAACQ,GAAG;QAC5B4B,SAAS,EAAE,sBAAsB;QACjCC,WAAW,EAAE,oBAAoB,GAAGhD;MACxC;IACJ,CAAC,CAAC;;IAEF;IACAM,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACmD,UAAU,CAACQ,WAAW,EAAE;MACxC7C,IAAI,EAAEF,iCAAiC;MACvCG,MAAM,EAAE;QACJ6C,IAAI,EAAEV,SAAS,CAAC7B,MAAM,CAACP,IAAI;QAC3Be,GAAG,EAAEP,OAAO,CAACD,MAAM,CAACQ,GAAG;QACvBgC,KAAK,EAAEC,IAAI,CAACC,SAAS,CAAC;UAClBC,MAAM,EAAE,eAAe;UACvB,aAAa,EAAE;QACnB,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,OAAO;MACH5C,IAAI;MACJF,MAAM;MACN+C,SAAS,EAAE;QACP3C;MACJ,CAAC;MACD4C,QAAQ,EAAGC,WAA2B,IAAK;QACvC,MAAMC,UAAe,GAAGpD,GAAG,CAACqD,SAAS,CAACD,UAAU;QAChD,IAAI,CAACA,UAAU,EAAE;UACbE,OAAO,CAACC,GAAG,CACP,sEACJ,CAAC;UACD;QACJ;QACA,MAAMC,SAAS,GAAGvE,WAAW,CAACkE,WAAW,CAACrD,IAAI,CAAC;QAC/C,IAAI0D,SAAS,KAAKL,WAAW,CAACrD,IAAI,EAAE;UAChCwD,OAAO,CAACC,GAAG,CAAC,+BAA+BJ,WAAW,CAACrD,IAAI,IAAI,CAAC;UAChE;QACJ;QACA,OAAOsD,UAAU,CAACF,QAAQ,CAACC,WAAW,CAACrD,IAAI,EAAE;UACzChB,IAAI,EAAEqE,WAAW,CAACrE,IAAI;UACtB2E,MAAM,EAAEN,WAAW,CAACM,MAAM;UAC1BjB,QAAQ,EAAElC,OAAO,CAACD,MAAM,CAACQ;QAC7B,CAAC,CAAC;MACN;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAEF,SAASV,yBAAyBA,CAACH,GAAc,EAAE;EAC/C,MAAM0D,UAAU,GAAG1D,GAAG,CAAC8B,SAAS,CAACzC,UAAU,CAAC;EAC5C,MAAMsE,YAAY,GAAGpE,eAAe,CAACS,GAAG,CAAC;EACzC,MAAM4D,SAAS,GAAGpE,YAAY,CAACQ,GAAG,CAAC;EAEnC,OAAOA,GAAG,CAACO,WAAW,CAACvB,GAAG,CAAC6E,GAAG,CAACC,MAAM,EAAE;IACnChE,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJW,WAAW,EAAE,oEAAoE;MACjF;MACAR,MAAM,EAAEnB,MAAM,CAACgF,GAAG,CAAC,CAACL,UAAU,CAAC,CAAC,CAACjC,KAAK,CAAC,CAAC,CAACuC,IAAI,CAAC,KAAK;QAC/C,MAAM9D,MAA8B,GAAG;UACnC+D,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;YACDC,QAAQ,EAAE,CACN,GAAGN,IAAI,CAACO,uBAAuB,EAAE,EACjC,GAAGP,IAAI,CAACO,uBAAuB,IAAI,EACnC,GAAGP,IAAI,CAACQ,mBAAmB,EAAE,EAC7B,GAAGR,IAAI,CAACQ,mBAAmB,IAAI,EAC/B,GAAGR,IAAI,CAACS,yBAAyB,EAAE,EACnC,GAAGT,IAAI,CAACS,yBAAyB,IAAI;YACrC;YACA,IAAIT,IAAI,CAACU,0BAA0B,GAC7B,CACI,GAAGV,IAAI,CAACU,0BAA0B,EAAE,EACpC,GAAGV,IAAI,CAACU,0BAA0B,IAAI,CACzC,GACD,EAAE,CAAC;UAEjB,CAAC,EACD;YACIP,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;YACDC,QAAQ,EAAE,CACNvF,MAAM,CAAC4F,WAAW,gBAAgBX,IAAI,CAACY,mBAAmB,EAAE,EAC5D7F,MAAM,CAAC4F,WAAW,gBAAgBX,IAAI,CAACY,mBAAmB,IAAI;UAEtE,CAAC,EACD;YACIT,GAAG,EAAE,qBAAqB;YAC1BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;YACjCC,QAAQ,EAAEvF,MAAM,CAAC4F,WAAW,kBAAkBf,SAAS,IAAID,YAAY;UAC3E,CAAC,EACD;YACIQ,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,eAAe;YACvBC,QAAQ,EAAE,GAAGN,IAAI,CAACa,kBAAkB;UACxC,CAAC,EACD;YACIV,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,kBAAkB;YAC1BC,QAAQ,EAAEN,IAAI,CAACc;UACnB,CAAC,EACD;YACIX,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAEvF,MAAM,CAAC4F,WAAW,uBAAuBhB,YAAY;UACnE,CAAC;UACD;UACA,IAAIK,IAAI,CAACe,mBAAmB,GACtB,CACI;YACIZ,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAgB;YACxBC,MAAM,EAAE,MAAM;YACdC,QAAQ,EAAE,CACN,GAAGN,IAAI,CAACe,mBAAmB,EAAE,EAC7B,GAAGf,IAAI,CAACe,mBAAmB,IAAI;UAEvC,CAAC,CACJ,GACD,EAAE,CAAC;QAEjB,CAAC;QAED,OAAO7E,MAAM;MACjB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/pulumi/apps/api/ApiMigration.d.ts

@@ -0,0 +1,5 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiMigration = PulumiAppModule<typeof ApiMigration>;
+export declare const ApiMigration: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    function: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+}, void>;

package/pulumi/apps/api/ApiMigration.js

@@ -0,0 +1,83 @@
+import path from "path";
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+import { createLambdaRole, getCommonLambdaEnvVariables } from "../lambdaUtils.js";
+import { CoreOutput, VpcConfig } from "../common/index.js";
+import { ApiBackgroundTask, ApiGraphql } from "../index.js";
+import { LAMBDA_RUNTIME } from "../../constants.js";
+import { getEnvVariableAwsRegion } from "../../env/awsRegion.js";
+export const ApiMigration = createAppModule({
+  name: "ApiMigration",
+  config(app) {
+    const core = app.getModule(CoreOutput);
+    const graphql = app.getModule(ApiGraphql);
+    const backgroundTask = app.getModule(ApiBackgroundTask);
+    const role = createLambdaRole(app, {
+      name: "migration-lambda-role",
+      policy: graphql.policy.output
+    });
+    const migration = app.addResource(aws.lambda.Function, {
+      name: "data-migration",
+      config: {
+        handler: "handler.handler",
+        timeout: 900,
+        runtime: LAMBDA_RUNTIME,
+        memorySize: 3008,
+        role: role.output.arn,
+        description: "Performs data migrations.",
+        code: new pulumi.asset.AssetArchive({
+          ".": new pulumi.asset.FileArchive(path.join(app.paths.workspace, "migration/build"))
+        }),
+        environment: {
+          variables: getCommonLambdaEnvVariables().apply(value => ({
+            ...value,
+            COGNITO_REGION: getEnvVariableAwsRegion(),
+            COGNITO_USER_POOL_ID: core.cognitoUserPoolId,
+            DB_TABLE: core.primaryDynamodbTableName,
+            DB_TABLE_LOG: core.logDynamodbTableName,
+            DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName,
+            DB_TABLE_OPENSEARCH: core.opensearchDynamodbTableName,
+            OPENSEARCH_ENDPOINT: core.opensearchDomainEndpoint,
+            OPENSEARCH_INDEX_PREFIX: process.env.OPENSEARCH_INDEX_PREFIX,
+            OPENSEARCH_SHARED_INDEXES: process.env.OPENSEARCH_SHARED_INDEXES,
+            S3_BUCKET: core.fileManagerBucketId
+          }))
+        },
+        vpcConfig: app.getModule(VpcConfig).functionVpcConfig,
+        loggingConfig: {
+          logFormat: "JSON"
+        }
+      }
+    });
+
+    // Add IAM policy to allow states:StartExecution for the background task Step Function
+    const stepFunctionPolicy = app.addResource(aws.iam.Policy, {
+      name: "migration-lambda-step-function-policy",
+      config: {
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Effect: "Allow",
+            Action: ["states:StartExecution"],
+            Resource: [pulumi.interpolate`${backgroundTask.stepFunction.output.arn}`, pulumi.interpolate`${backgroundTask.stepFunction.output.arn}/*`]
+          }]
+        }
+      }
+    });
+
+    // Attach policy to the Lambda role
+    app.addResource(aws.iam.RolePolicyAttachment, {
+      name: "migration-lambda-attach-step-function-policy",
+      config: {
+        role: role.output.name,
+        policyArn: stepFunctionPolicy.output.arn
+      }
+    });
+    return {
+      function: migration
+    };
+  }
+});
+
+//# sourceMappingURL=ApiMigration.js.map

package/pulumi/apps/api/ApiMigration.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["path","pulumi","aws","createAppModule","createLambdaRole","getCommonLambdaEnvVariables","CoreOutput","VpcConfig","ApiBackgroundTask","ApiGraphql","LAMBDA_RUNTIME","getEnvVariableAwsRegion","ApiMigration","name","config","app","core","getModule","graphql","backgroundTask","role","policy","output","migration","addResource","lambda","Function","handler","timeout","runtime","memorySize","arn","description","code","asset","AssetArchive","FileArchive","join","paths","workspace","environment","variables","apply","value","COGNITO_REGION","COGNITO_USER_POOL_ID","cognitoUserPoolId","DB_TABLE","primaryDynamodbTableName","DB_TABLE_LOG","logDynamodbTableName","DB_TABLE_AUDIT_LOGS","auditLogsDynamodbTableName","DB_TABLE_OPENSEARCH","opensearchDynamodbTableName","OPENSEARCH_ENDPOINT","opensearchDomainEndpoint","OPENSEARCH_INDEX_PREFIX","process","env","OPENSEARCH_SHARED_INDEXES","S3_BUCKET","fileManagerBucketId","vpcConfig","functionVpcConfig","loggingConfig","logFormat","stepFunctionPolicy","iam","Policy","Version","Statement","Effect","Action","Resource","interpolate","stepFunction","RolePolicyAttachment","policyArn","function"],"sources":["ApiMigration.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils.js\";\nimport { CoreOutput, VpcConfig } from \"../common/index.js\";\nimport { ApiBackgroundTask, ApiGraphql } from \"~/pulumi/apps/index.js\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n\nexport type ApiMigration = PulumiAppModule<typeof ApiMigration>;\n\nexport const ApiMigration = createAppModule({\n    name: \"ApiMigration\",\n    config(app: PulumiApp) {\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const backgroundTask = app.getModule(ApiBackgroundTask);\n\n        const role = createLambdaRole(app, {\n            name: \"migration-lambda-role\",\n            policy: graphql.policy.output\n        });\n\n        const migration = app.addResource(aws.lambda.Function, {\n            name: \"data-migration\",\n            config: {\n                handler: \"handler.handler\",\n                timeout: 900,\n                runtime: LAMBDA_RUNTIME,\n                memorySize: 3008,\n                role: role.output.arn,\n                description: \"Performs data migrations.\",\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"migration/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        COGNITO_REGION: getEnvVariableAwsRegion(),\n                        COGNITO_USER_POOL_ID: core.cognitoUserPoolId,\n                        DB_TABLE: core.primaryDynamodbTableName,\n                        DB_TABLE_LOG: core.logDynamodbTableName,\n                        DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName,\n                        DB_TABLE_OPENSEARCH: core.opensearchDynamodbTableName,\n                        OPENSEARCH_ENDPOINT: core.opensearchDomainEndpoint,\n                        OPENSEARCH_INDEX_PREFIX: process.env.OPENSEARCH_INDEX_PREFIX,\n                        OPENSEARCH_SHARED_INDEXES: process.env.OPENSEARCH_SHARED_INDEXES,\n                        S3_BUCKET: core.fileManagerBucketId\n                    })) as Record<string, any>\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig,\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        // Add IAM policy to allow states:StartExecution for the background task Step Function\n        const stepFunctionPolicy = app.addResource(aws.iam.Policy, {\n            name: \"migration-lambda-step-function-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Action: [\"states:StartExecution\"],\n                            Resource: [\n                                pulumi.interpolate`${backgroundTask.stepFunction.output.arn}`,\n                                pulumi.interpolate`${backgroundTask.stepFunction.output.arn}/*`\n                            ]\n                        }\n                    ]\n                }\n            }\n        });\n\n        // Attach policy to the Lambda role\n        app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"migration-lambda-attach-step-function-policy\",\n            config: {\n                role: role.output.name,\n                policyArn: stepFunctionPolicy.output.arn\n            }\n        });\n\n        return {\n            function: migration\n        };\n    }\n});\n"],"mappings":"AAAA,OAAOA,IAAI,MAAM,MAAM;AACvB,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,gBAAgB,EAAEC,2BAA2B;AACtD,SAASC,UAAU,EAAEC,SAAS;AAC9B,SAASC,iBAAiB,EAAEC,UAAU;AACtC,SAASC,cAAc;AACvB,SAASC,uBAAuB;AAIhC,OAAO,MAAMC,YAAY,GAAGT,eAAe,CAAC;EACxCU,IAAI,EAAE,cAAc;EACpBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,IAAI,GAAGD,GAAG,CAACE,SAAS,CAACX,UAAU,CAAC;IACtC,MAAMY,OAAO,GAAGH,GAAG,CAACE,SAAS,CAACR,UAAU,CAAC;IACzC,MAAMU,cAAc,GAAGJ,GAAG,CAACE,SAAS,CAACT,iBAAiB,CAAC;IAEvD,MAAMY,IAAI,GAAGhB,gBAAgB,CAACW,GAAG,EAAE;MAC/BF,IAAI,EAAE,uBAAuB;MAC7BQ,MAAM,EAAEH,OAAO,CAACG,MAAM,CAACC;IAC3B,CAAC,CAAC;IAEF,MAAMC,SAAS,GAAGR,GAAG,CAACS,WAAW,CAACtB,GAAG,CAACuB,MAAM,CAACC,QAAQ,EAAE;MACnDb,IAAI,EAAE,gBAAgB;MACtBC,MAAM,EAAE;QACJa,OAAO,EAAE,iBAAiB;QAC1BC,OAAO,EAAE,GAAG;QACZC,OAAO,EAAEnB,cAAc;QACvBoB,UAAU,EAAE,IAAI;QAChBV,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACS,GAAG;QACrBC,WAAW,EAAE,2BAA2B;QACxCC,IAAI,EAAE,IAAIhC,MAAM,CAACiC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAIlC,MAAM,CAACiC,KAAK,CAACE,WAAW,CAC7BpC,IAAI,CAACqC,IAAI,CAACtB,GAAG,CAACuB,KAAK,CAACC,SAAS,EAAE,iBAAiB,CACpD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAEpC,2BAA2B,CAAC,CAAC,CAACqC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACRC,cAAc,EAAEjC,uBAAuB,CAAC,CAAC;YACzCkC,oBAAoB,EAAE7B,IAAI,CAAC8B,iBAAiB;YAC5CC,QAAQ,EAAE/B,IAAI,CAACgC,wBAAwB;YACvCC,YAAY,EAAEjC,IAAI,CAACkC,oBAAoB;YACvCC,mBAAmB,EAAEnC,IAAI,CAACoC,0BAA0B;YACpDC,mBAAmB,EAAErC,IAAI,CAACsC,2BAA2B;YACrDC,mBAAmB,EAAEvC,IAAI,CAACwC,wBAAwB;YAClDC,uBAAuB,EAAEC,OAAO,CAACC,GAAG,CAACF,uBAAuB;YAC5DG,yBAAyB,EAAEF,OAAO,CAACC,GAAG,CAACC,yBAAyB;YAChEC,SAAS,EAAE7C,IAAI,CAAC8C;UACpB,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAEhD,GAAG,CAACE,SAAS,CAACV,SAAS,CAAC,CAACyD,iBAAiB;QACrDC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,kBAAkB,GAAGpD,GAAG,CAACS,WAAW,CAACtB,GAAG,CAACkE,GAAG,CAACC,MAAM,EAAE;MACvDxD,IAAI,EAAE,uCAAuC;MAC7CC,MAAM,EAAE;QACJO,MAAM,EAAE;UACJiD,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;YACjCC,QAAQ,EAAE,CACNzE,MAAM,CAAC0E,WAAW,GAAGxD,cAAc,CAACyD,YAAY,CAACtD,MAAM,CAACS,GAAG,EAAE,EAC7D9B,MAAM,CAAC0E,WAAW,GAAGxD,cAAc,CAACyD,YAAY,CAACtD,MAAM,CAACS,GAAG,IAAI;UAEvE,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;;IAEF;IACAhB,GAAG,CAACS,WAAW,CAACtB,GAAG,CAACkE,GAAG,CAACS,oBAAoB,EAAE;MAC1ChE,IAAI,EAAE,8CAA8C;MACpDC,MAAM,EAAE;QACJM,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACT,IAAI;QACtBiE,SAAS,EAAEX,kBAAkB,CAAC7C,MAAM,CAACS;MACzC;IACJ,CAAC,CAAC;IAEF,OAAO;MACHgD,QAAQ,EAAExD;IACd,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiOutput.d.ts

@@ -0,0 +1,23 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiOutput = PulumiAppModule<typeof ApiOutput>;
+export declare const ApiOutput: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<{
+    apiDomain: string;
+    apiUrl: string;
+    graphqlLambdaRole: string;
+    graphqlLambdaRoleName: string;
+    cognitoAppClientId: string;
+    cognitoUserPoolId: string;
+    cognitoUserPoolPasswordPolicy: string;
+    dynamoDbTable: string;
+    region: string;
+    websocketApiId: string | number | boolean | string[] | number[] | undefined;
+    websocketApiUrl: string;
+    migrationLambdaArn: string;
+    graphqlLambdaName: string | number | boolean | string[] | number[] | undefined;
+    backgroundTaskLambdaArn: string | number | boolean | string[] | number[] | undefined;
+    backgroundTaskStepFunctionArn: string | number | boolean | string[] | number[] | undefined;
+    fileManagerManageLambdaArn: string;
+    fileManagerManageLambdaRole: string;
+    fileManagerManageLambdaRoleName: string;
+    fileManagerDownloadLambdaArn: string | number | boolean | string[] | number[] | undefined;
+}>>, void>;

package/pulumi/apps/api/ApiOutput.js

@@ -0,0 +1,36 @@
+import { createAppModule } from "@webiny/pulumi";
+import { getStackOutput } from "@webiny/project";
+export const ApiOutput = createAppModule({
+  name: "ApiOutput",
+  config(app) {
+    return app.addHandler(async () => {
+      const output = await getStackOutput("api");
+      if (!output) {
+        throw new Error("API application is not deployed.");
+      }
+      return {
+        apiDomain: output["apiDomain"],
+        apiUrl: output["apiUrl"],
+        graphqlLambdaRole: output["graphqlLambdaRole"],
+        graphqlLambdaRoleName: output["graphqlLambdaRoleName"],
+        cognitoAppClientId: output["cognitoAppClientId"],
+        cognitoUserPoolId: output["cognitoUserPoolId"],
+        cognitoUserPoolPasswordPolicy: output["cognitoUserPoolPasswordPolicy"],
+        dynamoDbTable: output["dynamoDbTable"],
+        region: output["region"],
+        websocketApiId: output["websocketApiId"],
+        websocketApiUrl: output["websocketApiUrl"],
+        migrationLambdaArn: output["migrationLambdaArn"],
+        graphqlLambdaName: output["graphqlLambdaName"],
+        backgroundTaskLambdaArn: output["backgroundTaskLambdaArn"],
+        backgroundTaskStepFunctionArn: output["backgroundTaskStepFunctionArn"],
+        fileManagerManageLambdaArn: output["fileManagerManageLambdaArn"],
+        fileManagerManageLambdaRole: output["fileManagerManageLambdaRole"],
+        fileManagerManageLambdaRoleName: output["fileManagerManageLambdaRoleName"],
+        fileManagerDownloadLambdaArn: output["fileManagerDownloadLambdaArn"]
+      };
+    });
+  }
+});
+
+//# sourceMappingURL=ApiOutput.js.map

package/pulumi/apps/api/ApiOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAppModule","getStackOutput","ApiOutput","name","config","app","addHandler","output","Error","apiDomain","apiUrl","graphqlLambdaRole","graphqlLambdaRoleName","cognitoAppClientId","cognitoUserPoolId","cognitoUserPoolPasswordPolicy","dynamoDbTable","region","websocketApiId","websocketApiUrl","migrationLambdaArn","graphqlLambdaName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","fileManagerManageLambdaArn","fileManagerManageLambdaRole","fileManagerManageLambdaRoleName","fileManagerDownloadLambdaArn"],"sources":["ApiOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getStackOutput } from \"@webiny/project\";\nimport { type IDefaultStackOutput } from \"~/pulumi/types.js\";\n\nexport type ApiOutput = PulumiAppModule<typeof ApiOutput>;\n\nexport const ApiOutput = createAppModule({\n    name: \"ApiOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = await getStackOutput<IDefaultStackOutput>(\"api\");\n\n            if (!output) {\n                throw new Error(\"API application is not deployed.\");\n            }\n\n            return {\n                apiDomain: output[\"apiDomain\"],\n                apiUrl: output[\"apiUrl\"],\n                graphqlLambdaRole: output[\"graphqlLambdaRole\"],\n                graphqlLambdaRoleName: output[\"graphqlLambdaRoleName\"],\n                cognitoAppClientId: output[\"cognitoAppClientId\"],\n                cognitoUserPoolId: output[\"cognitoUserPoolId\"],\n                cognitoUserPoolPasswordPolicy: output[\"cognitoUserPoolPasswordPolicy\"],\n                dynamoDbTable: output[\"dynamoDbTable\"],\n                region: output[\"region\"],\n                websocketApiId: output[\"websocketApiId\"],\n                websocketApiUrl: output[\"websocketApiUrl\"],\n                migrationLambdaArn: output[\"migrationLambdaArn\"],\n                graphqlLambdaName: output[\"graphqlLambdaName\"],\n                backgroundTaskLambdaArn: output[\"backgroundTaskLambdaArn\"],\n                backgroundTaskStepFunctionArn: output[\"backgroundTaskStepFunctionArn\"],\n                fileManagerManageLambdaArn: output[\"fileManagerManageLambdaArn\"],\n                fileManagerManageLambdaRole: output[\"fileManagerManageLambdaRole\"],\n                fileManagerManageLambdaRoleName: output[\"fileManagerManageLambdaRoleName\"],\n                fileManagerDownloadLambdaArn: output[\"fileManagerDownloadLambdaArn\"]\n            };\n        });\n    }\n});\n"],"mappings":"AACA,SAASA,eAAe,QAAQ,gBAAgB;AAChD,SAASC,cAAc,QAAQ,iBAAiB;AAKhD,OAAO,MAAMC,SAAS,GAAGF,eAAe,CAAC;EACrCG,IAAI,EAAE,WAAW;EACjBC,MAAMA,CAACC,GAAG,EAAE;IACR,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY;MAC9B,MAAMC,MAAM,GAAG,MAAMN,cAAc,CAAsB,KAAK,CAAC;MAE/D,IAAI,CAACM,MAAM,EAAE;QACT,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAAC;MACvD;MAEA,OAAO;QACHC,SAAS,EAAEF,MAAM,CAAC,WAAW,CAAC;QAC9BG,MAAM,EAAEH,MAAM,CAAC,QAAQ,CAAC;QACxBI,iBAAiB,EAAEJ,MAAM,CAAC,mBAAmB,CAAC;QAC9CK,qBAAqB,EAAEL,MAAM,CAAC,uBAAuB,CAAC;QACtDM,kBAAkB,EAAEN,MAAM,CAAC,oBAAoB,CAAC;QAChDO,iBAAiB,EAAEP,MAAM,CAAC,mBAAmB,CAAC;QAC9CQ,6BAA6B,EAAER,MAAM,CAAC,+BAA+B,CAAC;QACtES,aAAa,EAAET,MAAM,CAAC,eAAe,CAAC;QACtCU,MAAM,EAAEV,MAAM,CAAC,QAAQ,CAAC;QACxBW,cAAc,EAAEX,MAAM,CAAC,gBAAgB,CAAC;QACxCY,eAAe,EAAEZ,MAAM,CAAC,iBAAiB,CAAC;QAC1Ca,kBAAkB,EAAEb,MAAM,CAAC,oBAAoB,CAAC;QAChDc,iBAAiB,EAAEd,MAAM,CAAC,mBAAmB,CAAC;QAC9Ce,uBAAuB,EAAEf,MAAM,CAAC,yBAAyB,CAAC;QAC1DgB,6BAA6B,EAAEhB,MAAM,CAAC,+BAA+B,CAAC;QACtEiB,0BAA0B,EAAEjB,MAAM,CAAC,4BAA4B,CAAC;QAChEkB,2BAA2B,EAAElB,MAAM,CAAC,6BAA6B,CAAC;QAClEmB,+BAA+B,EAAEnB,MAAM,CAAC,iCAAiC,CAAC;QAC1EoB,4BAA4B,EAAEpB,MAAM,CAAC,8BAA8B;MACvE,CAAC;IACL,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiScheduler.d.ts

@@ -0,0 +1,8 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiScheduler = PulumiAppModule<typeof ApiScheduler>;
+export declare const ApiSchedulerBaseName = "scheduler-resolver";
+export declare const ApiScheduler: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    invokeRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+    invokePolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicy").RolePolicy>;
+    policyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
+}, void>;