@webiny/project-aws 0.0.0-unstable.3c5210ad37

package/pulumi/apps/api/ApiScheduler.js

@@ -0,0 +1,100 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGraphql } from "../index.js";
+import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
+import kebabCase from "lodash/kebabCase.js";
+export const ApiSchedulerBaseName = "scheduler-resolver";
+const createResourceName = name => {
+  return `${ApiSchedulerBaseName}-${kebabCase(name)}`;
+};
+export const ApiScheduler = createAppModule({
+  name: "ApiScheduler",
+  config(app) {
+    const awsRegion = getAwsRegion(app);
+    const awsAccountId = getAwsAccountId(app);
+    const graphql = app.getModule(ApiGraphql);
+    // const baseConfig = graphql.functions.graphql.config.clone();
+    /*
+    const schedulerResolverLambda = app.addResource(aws.lambda.Function, {
+        name: createResourceName("lambda"),
+        config: {
+            ...baseConfig,
+            layers: graphql.functions.graphql.output.layers.apply(arns => {
+                return Array.from(new Set([...(arns || []), getLayerArn("sharp")]));
+            }),
+            description: "Performs scheduled operations on Headless CMS entries.",
+            loggingConfig: {
+                logFormat: "JSON"
+            }
+        }
+    });
+    */
+
+    const schedulerResolverInvokeRole = app.addResource(aws.iam.Role, {
+      name: createResourceName("invokeRole"),
+      config: {
+        assumeRolePolicy: JSON.stringify({
+          Version: "2012-10-17",
+          Statement: [{
+            Effect: "Allow",
+            Principal: {
+              Service: "scheduler.amazonaws.com"
+            },
+            Action: "sts:AssumeRole"
+          }]
+        })
+      }
+    });
+    const schedulerResolverInvokeLambdaPolicy = app.addResource(aws.iam.RolePolicy, {
+      name: createResourceName("invokeLambdaPolicy"),
+      config: {
+        role: schedulerResolverInvokeRole.output.id,
+        policy: graphql.functions.graphql.output.arn.apply(resolverArn => {
+          return JSON.stringify({
+            Version: "2012-10-17",
+            Statement: [{
+              Effect: "Allow",
+              Action: ["lambda:InvokeFunction"],
+              Resource: resolverArn
+            }]
+          });
+        })
+      }
+    });
+    const schedulerControlPolicy = app.addResource(aws.iam.Policy, {
+      name: createResourceName("controlPolicy"),
+      config: {
+        description: "Allow GraphQL Lambda to manage EventBridge Scheduler",
+        policy: pulumi.all([schedulerResolverInvokeRole.output.arn, awsRegion, awsAccountId]).apply(([invokeRoleArn, region, accountId]) => {
+          return JSON.stringify({
+            Version: "2012-10-17",
+            Statement: [{
+              Effect: "Allow",
+              Action: ["scheduler:CreateSchedule", "scheduler:UpdateSchedule", "scheduler:DeleteSchedule", "scheduler:GetSchedule", "scheduler:ListSchedules"],
+              Resource: [`arn:aws:scheduler:${region}:${accountId}:schedule/default/*`]
+            }, {
+              Effect: "Allow",
+              Action: "iam:PassRole",
+              Resource: [invokeRoleArn, `${invokeRoleArn}/*`]
+            }]
+          });
+        })
+      }
+    });
+    const schedulerResolverPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
+      name: createResourceName("graphqlSchedulerPolicyAttachment"),
+      config: {
+        role: graphql.role.output.name,
+        policyArn: schedulerControlPolicy.output.arn
+      }
+    });
+    return {
+      invokeRole: schedulerResolverInvokeRole,
+      invokePolicy: schedulerResolverInvokeLambdaPolicy,
+      policyAttachment: schedulerResolverPolicyAttachment
+    };
+  }
+});
+
+//# sourceMappingURL=ApiScheduler.js.map

package/pulumi/apps/api/ApiScheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","pulumi","createAppModule","ApiGraphql","getAwsAccountId","getAwsRegion","kebabCase","ApiSchedulerBaseName","createResourceName","name","ApiScheduler","config","app","awsRegion","awsAccountId","graphql","getModule","schedulerResolverInvokeRole","addResource","iam","Role","assumeRolePolicy","JSON","stringify","Version","Statement","Effect","Principal","Service","Action","schedulerResolverInvokeLambdaPolicy","RolePolicy","role","output","id","policy","functions","arn","apply","resolverArn","Resource","schedulerControlPolicy","Policy","description","all","invokeRoleArn","region","accountId","schedulerResolverPolicyAttachment","RolePolicyAttachment","policyArn","invokeRole","invokePolicy","policyAttachment"],"sources":["ApiScheduler.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\nimport kebabCase from \"lodash/kebabCase.js\";\n\nexport type ApiScheduler = PulumiAppModule<typeof ApiScheduler>;\n\nexport const ApiSchedulerBaseName = \"scheduler-resolver\";\n\nconst createResourceName = (name: string): string => {\n    return `${ApiSchedulerBaseName}-${kebabCase(name)}`;\n};\n\nexport const ApiScheduler = createAppModule({\n    name: \"ApiScheduler\",\n    config(app: PulumiApp) {\n        const awsRegion = getAwsRegion(app);\n        const awsAccountId = getAwsAccountId(app);\n        const graphql = app.getModule(ApiGraphql);\n        // const baseConfig = graphql.functions.graphql.config.clone();\n        /*\n        const schedulerResolverLambda = app.addResource(aws.lambda.Function, {\n            name: createResourceName(\"lambda\"),\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                description: \"Performs scheduled operations on Headless CMS entries.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n        */\n\n        const schedulerResolverInvokeRole = app.addResource(aws.iam.Role, {\n            name: createResourceName(\"invokeRole\"),\n            config: {\n                assumeRolePolicy: JSON.stringify({\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"scheduler.amazonaws.com\"\n                            },\n                            Action: \"sts:AssumeRole\"\n                        }\n                    ]\n                })\n            }\n        });\n\n        const schedulerResolverInvokeLambdaPolicy = app.addResource(aws.iam.RolePolicy, {\n            name: createResourceName(\"invokeLambdaPolicy\"),\n            config: {\n                role: schedulerResolverInvokeRole.output.id,\n                policy: graphql.functions.graphql.output.arn.apply(resolverArn => {\n                    return JSON.stringify({\n                        Version: \"2012-10-17\",\n                        Statement: [\n                            {\n                                Effect: \"Allow\",\n                                Action: [\"lambda:InvokeFunction\"],\n                                Resource: resolverArn\n                            }\n                        ]\n                    });\n                })\n            }\n        });\n\n        const schedulerControlPolicy = app.addResource(aws.iam.Policy, {\n            name: createResourceName(\"controlPolicy\"),\n            config: {\n                description: \"Allow GraphQL Lambda to manage EventBridge Scheduler\",\n                policy: pulumi\n                    .all([schedulerResolverInvokeRole.output.arn, awsRegion, awsAccountId])\n                    .apply(([invokeRoleArn, region, accountId]) => {\n                        return JSON.stringify({\n                            Version: \"2012-10-17\",\n                            Statement: [\n                                {\n                                    Effect: \"Allow\",\n                                    Action: [\n                                        \"scheduler:CreateSchedule\",\n                                        \"scheduler:UpdateSchedule\",\n                                        \"scheduler:DeleteSchedule\",\n                                        \"scheduler:GetSchedule\",\n                                        \"scheduler:ListSchedules\"\n                                    ],\n                                    Resource: [\n                                        `arn:aws:scheduler:${region}:${accountId}:schedule/default/*`\n                                    ]\n                                },\n                                {\n                                    Effect: \"Allow\",\n                                    Action: \"iam:PassRole\",\n                                    Resource: [invokeRoleArn, `${invokeRoleArn}/*`]\n                                }\n                            ]\n                        });\n                    })\n            }\n        });\n\n        const schedulerResolverPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: createResourceName(\"graphqlSchedulerPolicyAttachment\"),\n            config: {\n                role: graphql.role.output.name,\n                policyArn: schedulerControlPolicy.output.arn\n            }\n        });\n\n        return {\n            invokeRole: schedulerResolverInvokeRole,\n            invokePolicy: schedulerResolverInvokeLambdaPolicy,\n            policyAttachment: schedulerResolverPolicyAttachment\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AAExC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU;AACnB,SAASC,eAAe,EAAEC,YAAY;AACtC,OAAOC,SAAS,MAAM,qBAAqB;AAI3C,OAAO,MAAMC,oBAAoB,GAAG,oBAAoB;AAExD,MAAMC,kBAAkB,GAAIC,IAAY,IAAa;EACjD,OAAO,GAAGF,oBAAoB,IAAID,SAAS,CAACG,IAAI,CAAC,EAAE;AACvD,CAAC;AAED,OAAO,MAAMC,YAAY,GAAGR,eAAe,CAAC;EACxCO,IAAI,EAAE,cAAc;EACpBE,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,SAAS,GAAGR,YAAY,CAACO,GAAG,CAAC;IACnC,MAAME,YAAY,GAAGV,eAAe,CAACQ,GAAG,CAAC;IACzC,MAAMG,OAAO,GAAGH,GAAG,CAACI,SAAS,CAACb,UAAU,CAAC;IACzC;IACA;AACR;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;IAEQ,MAAMc,2BAA2B,GAAGL,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACC,IAAI,EAAE;MAC9DX,IAAI,EAAED,kBAAkB,CAAC,YAAY,CAAC;MACtCG,MAAM,EAAE;QACJU,gBAAgB,EAAEC,IAAI,CAACC,SAAS,CAAC;UAC7BC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,OAAO;YACfC,SAAS,EAAE;cACPC,OAAO,EAAE;YACb,CAAC;YACDC,MAAM,EAAE;UACZ,CAAC;QAET,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,mCAAmC,GAAGlB,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACY,UAAU,EAAE;MAC5EtB,IAAI,EAAED,kBAAkB,CAAC,oBAAoB,CAAC;MAC9CG,MAAM,EAAE;QACJqB,IAAI,EAAEf,2BAA2B,CAACgB,MAAM,CAACC,EAAE;QAC3CC,MAAM,EAAEpB,OAAO,CAACqB,SAAS,CAACrB,OAAO,CAACkB,MAAM,CAACI,GAAG,CAACC,KAAK,CAACC,WAAW,IAAI;UAC9D,OAAOjB,IAAI,CAACC,SAAS,CAAC;YAClBC,OAAO,EAAE,YAAY;YACrBC,SAAS,EAAE,CACP;cACIC,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,CAAC,uBAAuB,CAAC;cACjCW,QAAQ,EAAED;YACd,CAAC;UAET,CAAC,CAAC;QACN,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAME,sBAAsB,GAAG7B,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACuB,MAAM,EAAE;MAC3DjC,IAAI,EAAED,kBAAkB,CAAC,eAAe,CAAC;MACzCG,MAAM,EAAE;QACJgC,WAAW,EAAE,sDAAsD;QACnER,MAAM,EAAElC,MAAM,CACT2C,GAAG,CAAC,CAAC3B,2BAA2B,CAACgB,MAAM,CAACI,GAAG,EAAExB,SAAS,EAAEC,YAAY,CAAC,CAAC,CACtEwB,KAAK,CAAC,CAAC,CAACO,aAAa,EAAEC,MAAM,EAAEC,SAAS,CAAC,KAAK;UAC3C,OAAOzB,IAAI,CAACC,SAAS,CAAC;YAClBC,OAAO,EAAE,YAAY;YACrBC,SAAS,EAAE,CACP;cACIC,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,CACJ,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,CAC5B;cACDW,QAAQ,EAAE,CACN,qBAAqBM,MAAM,IAAIC,SAAS,qBAAqB;YAErE,CAAC,EACD;cACIrB,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,cAAc;cACtBW,QAAQ,EAAE,CAACK,aAAa,EAAE,GAAGA,aAAa,IAAI;YAClD,CAAC;UAET,CAAC,CAAC;QACN,CAAC;MACT;IACJ,CAAC,CAAC;IAEF,MAAMG,iCAAiC,GAAGpC,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAAC8B,oBAAoB,EAAE;MACpFxC,IAAI,EAAED,kBAAkB,CAAC,kCAAkC,CAAC;MAC5DG,MAAM,EAAE;QACJqB,IAAI,EAAEjB,OAAO,CAACiB,IAAI,CAACC,MAAM,CAACxB,IAAI;QAC9ByC,SAAS,EAAET,sBAAsB,CAACR,MAAM,CAACI;MAC7C;IACJ,CAAC,CAAC;IAEF,OAAO;MACHc,UAAU,EAAElC,2BAA2B;MACvCmC,YAAY,EAAEtB,mCAAmC;MACjDuB,gBAAgB,EAAEL;IACtB,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/ApiWebsocket.d.ts

@@ -0,0 +1,14 @@
+import * as pulumi from "@pulumi/pulumi";
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;
+export declare const ApiWebsocket: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    websocketApi: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/api").Api>;
+    websocketApiStage: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/stage").Stage>;
+    websocketApiConnectRoute: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/route").Route>;
+    websocketApiDisconnectRoute: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/route").Route>;
+    websocketApiDefaultRoute: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/route").Route>;
+    websocketLambdaPermission: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/permission").Permission>;
+    lambdaWebsocketPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
+    lambdaWebsocketRolePolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
+    websocketApiUrl: pulumi.Output<string>;
+}, void>;

package/pulumi/apps/api/ApiWebsocket.js

@@ -0,0 +1,138 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as aws from "@pulumi/aws";
+import { createAppModule } from "@webiny/pulumi";
+import { ApiGraphql } from "../index.js";
+export const ApiWebsocket = createAppModule({
+  name: "ApiWebsocket",
+  config(app) {
+    const graphql = app.getModule(ApiGraphql);
+    const websocketApi = app.addResource(aws.apigatewayv2.Api, {
+      name: "websocket-api",
+      config: {
+        protocolType: "WEBSOCKET",
+        routeSelectionExpression: "$request.body.action"
+      }
+    });
+    const websocketLambdaPermission = app.addResource(aws.lambda.Permission, {
+      name: `websocket-api-ws-to-lambda-permission`,
+      config: {
+        action: "lambda:InvokeFunction",
+        function: graphql.functions.graphql.output.name,
+        principal: "apigateway.amazonaws.com",
+        sourceArn: websocketApi.output.executionArn.apply(arn => `${arn}/*`)
+      }
+    });
+    const lambdaWebsocketPolicy = app.addResource(aws.iam.Policy, {
+      name: "websocket-api-lambda-policy",
+      config: {
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Effect: "Allow",
+            Action: "execute-api:ManageConnections",
+            Resource: [websocketApi.output.arn, websocketApi.output.executionArn, websocketApi.output.arn.apply(arn => `${arn}/*`), websocketApi.output.executionArn.apply(arn => `${arn}/*`)],
+            Sid: "PermissionForWebsocket"
+          }]
+        }
+      }
+    });
+    const lambdaWebsocketRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
+      name: "websocket-api-lambda-role-policy-attachment",
+      config: {
+        policyArn: lambdaWebsocketPolicy.output.arn,
+        role: graphql.role.output
+      }
+    });
+    const websocketApiIntegration = app.addResource(aws.apigatewayv2.Integration, {
+      name: "websocket-api-integration",
+      config: {
+        apiId: websocketApi.output.id,
+        integrationType: "AWS_PROXY",
+        integrationUri: graphql.functions.graphql.output.invokeArn
+      }
+    });
+    const websocketApiDefaultRoute = app.addResource(aws.apigatewayv2.Route, {
+      name: "websocket-api-route-default",
+      config: {
+        apiId: websocketApi.output.id,
+        routeKey: "$default",
+        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
+      }
+    });
+    const websocketApiConnectRoute = app.addResource(aws.apigatewayv2.Route, {
+      name: "websocket-api-route-connect",
+      config: {
+        apiId: websocketApi.output.id,
+        routeKey: "$connect",
+        authorizationType: "NONE",
+        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
+      },
+      opts: {
+        dependsOn: websocketApiDefaultRoute.output
+      }
+    });
+    const websocketApiDisconnectRoute = app.addResource(aws.apigatewayv2.Route, {
+      name: "websocket-api-route-disconnect",
+      config: {
+        apiId: websocketApi.output.id,
+        routeKey: "$disconnect",
+        authorizationType: "NONE",
+        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
+      },
+      opts: {
+        dependsOn: websocketApiConnectRoute.output
+      }
+    });
+    const apiGatewayLoggingRole = app.addResource(aws.iam.Role, {
+      name: "apiGatewayLoggingRole",
+      config: {
+        assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({
+          Service: "apigateway.amazonaws.com"
+        })
+      }
+    });
+    app.addResource(aws.iam.RolePolicy, {
+      name: "apiGatewayLoggingPolicy",
+      config: {
+        role: apiGatewayLoggingRole.output.id,
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: ["logs:*"],
+            Effect: "Allow",
+            Resource: "*"
+          }]
+        }
+      }
+    });
+    const websocketApiStage = app.addResource(aws.apigatewayv2.Stage, {
+      name: "websocket-api-stage",
+      config: {
+        apiId: websocketApi.output.id,
+        autoDeploy: true,
+        name: app.params.run.env,
+        defaultRouteSettings: {
+          // Only enable when debugging. Note that by default, API Gateway does not
+          // have the required permissions to write logs to CloudWatch logs. More:
+          // https://coady.tech/aws-cloudwatch-logs-arn/
+          // loggingLevel: "INFO",
+          throttlingBurstLimit: 5000,
+          throttlingRateLimit: 10000
+        }
+      }
+    });
+    return {
+      websocketApi,
+      websocketApiStage,
+      websocketApiConnectRoute,
+      websocketApiDisconnectRoute,
+      websocketApiDefaultRoute,
+      websocketLambdaPermission,
+      lambdaWebsocketPolicy,
+      lambdaWebsocketRolePolicyAttachment,
+      websocketApiUrl: pulumi.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`
+    };
+  }
+});
+
+//# sourceMappingURL=ApiWebsocket.js.map

package/pulumi/apps/api/ApiWebsocket.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["pulumi","aws","createAppModule","ApiGraphql","ApiWebsocket","name","config","app","graphql","getModule","websocketApi","addResource","apigatewayv2","Api","protocolType","routeSelectionExpression","websocketLambdaPermission","lambda","Permission","action","function","functions","output","principal","sourceArn","executionArn","apply","arn","lambdaWebsocketPolicy","iam","Policy","policy","Version","Statement","Effect","Action","Resource","Sid","lambdaWebsocketRolePolicyAttachment","RolePolicyAttachment","policyArn","role","websocketApiIntegration","Integration","apiId","id","integrationType","integrationUri","invokeArn","websocketApiDefaultRoute","Route","routeKey","target","value","websocketApiConnectRoute","authorizationType","opts","dependsOn","websocketApiDisconnectRoute","apiGatewayLoggingRole","Role","assumeRolePolicy","assumeRolePolicyForPrincipal","Service","RolePolicy","websocketApiStage","Stage","autoDeploy","params","run","env","defaultRouteSettings","throttlingBurstLimit","throttlingRateLimit","websocketApiUrl","interpolate","apiEndpoint"],"sources":["ApiWebsocket.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\n\nexport type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;\n\nexport const ApiWebsocket = createAppModule({\n    name: \"ApiWebsocket\",\n    config(app: PulumiApp) {\n        const graphql = app.getModule(ApiGraphql);\n\n        const websocketApi = app.addResource(aws.apigatewayv2.Api, {\n            name: \"websocket-api\",\n            config: {\n                protocolType: \"WEBSOCKET\",\n                routeSelectionExpression: \"$request.body.action\"\n            }\n        });\n\n        const websocketLambdaPermission = app.addResource(aws.lambda.Permission, {\n            name: `websocket-api-ws-to-lambda-permission`,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.functions.graphql.output.name,\n                principal: \"apigateway.amazonaws.com\",\n                sourceArn: websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n            }\n        });\n\n        const lambdaWebsocketPolicy = app.addResource(aws.iam.Policy, {\n            name: \"websocket-api-lambda-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Action: \"execute-api:ManageConnections\",\n                            Resource: [\n                                websocketApi.output.arn,\n                                websocketApi.output.executionArn,\n                                websocketApi.output.arn.apply(arn => `${arn}/*`),\n                                websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n                            ],\n                            Sid: \"PermissionForWebsocket\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const lambdaWebsocketRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"websocket-api-lambda-role-policy-attachment\",\n            config: {\n                policyArn: lambdaWebsocketPolicy.output.arn,\n                role: graphql.role.output\n            }\n        });\n\n        const websocketApiIntegration = app.addResource(aws.apigatewayv2.Integration, {\n            name: \"websocket-api-integration\",\n            config: {\n                apiId: websocketApi.output.id,\n                integrationType: \"AWS_PROXY\",\n                integrationUri: graphql.functions.graphql.output.invokeArn\n            }\n        });\n\n        const websocketApiDefaultRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-default\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$default\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            }\n        });\n\n        const websocketApiConnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-connect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$connect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiDefaultRoute.output }\n        });\n\n        const websocketApiDisconnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-disconnect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$disconnect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiConnectRoute.output }\n        });\n\n        const apiGatewayLoggingRole = app.addResource(aws.iam.Role, {\n            name: \"apiGatewayLoggingRole\",\n            config: {\n                assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({\n                    Service: \"apigateway.amazonaws.com\"\n                })\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicy, {\n            name: \"apiGatewayLoggingPolicy\",\n            config: {\n                role: apiGatewayLoggingRole.output.id,\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"logs:*\"],\n                            Effect: \"Allow\",\n                            Resource: \"*\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const websocketApiStage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"websocket-api-stage\",\n            config: {\n                apiId: websocketApi.output.id,\n                autoDeploy: true,\n                name: app.params.run.env,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        return {\n            websocketApi,\n            websocketApiStage,\n            websocketApiConnectRoute,\n            websocketApiDisconnectRoute,\n            websocketApiDefaultRoute,\n            websocketLambdaPermission,\n            lambdaWebsocketPolicy,\n            lambdaWebsocketRolePolicyAttachment,\n            websocketApiUrl: pulumi.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU;AAInB,OAAO,MAAMC,YAAY,GAAGF,eAAe,CAAC;EACxCG,IAAI,EAAE,cAAc;EACpBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACN,UAAU,CAAC;IAEzC,MAAMO,YAAY,GAAGH,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACC,GAAG,EAAE;MACvDR,IAAI,EAAE,eAAe;MACrBC,MAAM,EAAE;QACJQ,YAAY,EAAE,WAAW;QACzBC,wBAAwB,EAAE;MAC9B;IACJ,CAAC,CAAC;IAEF,MAAMC,yBAAyB,GAAGT,GAAG,CAACI,WAAW,CAACV,GAAG,CAACgB,MAAM,CAACC,UAAU,EAAE;MACrEb,IAAI,EAAE,uCAAuC;MAC7CC,MAAM,EAAE;QACJa,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAEZ,OAAO,CAACa,SAAS,CAACb,OAAO,CAACc,MAAM,CAACjB,IAAI;QAC/CkB,SAAS,EAAE,0BAA0B;QACrCC,SAAS,EAAEd,YAAY,CAACY,MAAM,CAACG,YAAY,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI;MACvE;IACJ,CAAC,CAAC;IAEF,MAAMC,qBAAqB,GAAGrB,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACC,MAAM,EAAE;MAC1DzB,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJyB,MAAM,EAAE;UACJC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAE,CACN1B,YAAY,CAACY,MAAM,CAACK,GAAG,EACvBjB,YAAY,CAACY,MAAM,CAACG,YAAY,EAChCf,YAAY,CAACY,MAAM,CAACK,GAAG,CAACD,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC,EAChDjB,YAAY,CAACY,MAAM,CAACG,YAAY,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC,CAC5D;YACDU,GAAG,EAAE;UACT,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,mCAAmC,GAAG/B,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACU,oBAAoB,EAAE;MACtFlC,IAAI,EAAE,6CAA6C;MACnDC,MAAM,EAAE;QACJkC,SAAS,EAAEZ,qBAAqB,CAACN,MAAM,CAACK,GAAG;QAC3Cc,IAAI,EAAEjC,OAAO,CAACiC,IAAI,CAACnB;MACvB;IACJ,CAAC,CAAC;IAEF,MAAMoB,uBAAuB,GAAGnC,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAAC+B,WAAW,EAAE;MAC1EtC,IAAI,EAAE,2BAA2B;MACjCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BC,eAAe,EAAE,WAAW;QAC5BC,cAAc,EAAEvC,OAAO,CAACa,SAAS,CAACb,OAAO,CAACc,MAAM,CAAC0B;MACrD;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG1C,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACrE7C,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,UAAU;QACpBC,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG/C,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACrE7C,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,UAAU;QACpBI,iBAAiB,EAAE,MAAM;QACzBH,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF,CAAC;MACDG,IAAI,EAAE;QAAEC,SAAS,EAAER,wBAAwB,CAAC3B;MAAO;IACvD,CAAC,CAAC;IAEF,MAAMoC,2BAA2B,GAAGnD,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACxE7C,IAAI,EAAE,gCAAgC;MACtCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,aAAa;QACvBI,iBAAiB,EAAE,MAAM;QACzBH,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF,CAAC;MACDG,IAAI,EAAE;QAAEC,SAAS,EAAEH,wBAAwB,CAAChC;MAAO;IACvD,CAAC,CAAC;IAEF,MAAMqC,qBAAqB,GAAGpD,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAAC+B,IAAI,EAAE;MACxDvD,IAAI,EAAE,uBAAuB;MAC7BC,MAAM,EAAE;QACJuD,gBAAgB,EAAE5D,GAAG,CAAC4B,GAAG,CAACiC,4BAA4B,CAAC;UACnDC,OAAO,EAAE;QACb,CAAC;MACL;IACJ,CAAC,CAAC;IAEFxD,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACmC,UAAU,EAAE;MAChC3D,IAAI,EAAE,yBAAyB;MAC/BC,MAAM,EAAE;QACJmC,IAAI,EAAEkB,qBAAqB,CAACrC,MAAM,CAACuB,EAAE;QACrCd,MAAM,EAAE;UACJC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIE,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClBD,MAAM,EAAE,OAAO;YACfE,QAAQ,EAAE;UACd,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM6B,iBAAiB,GAAG1D,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsD,KAAK,EAAE;MAC9D7D,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BsB,UAAU,EAAE,IAAI;QAChB9D,IAAI,EAAEE,GAAG,CAAC6D,MAAM,CAACC,GAAG,CAACC,GAAG;QACxBC,oBAAoB,EAAE;UAClB;UACA;UACA;UACA;UACAC,oBAAoB,EAAE,IAAI;UAC1BC,mBAAmB,EAAE;QACzB;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACH/D,YAAY;MACZuD,iBAAiB;MACjBX,wBAAwB;MACxBI,2BAA2B;MAC3BT,wBAAwB;MACxBjC,yBAAyB;MACzBY,qBAAqB;MACrBU,mCAAmC;MACnCoC,eAAe,EAAE1E,MAAM,CAAC2E,WAAW,GAAGjE,YAAY,CAACY,MAAM,CAACsD,WAAW,IAAIX,iBAAiB,CAAC3C,MAAM,CAACjB,IAAI;IAC1G,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/backgroundTask/definition.d.ts

@@ -0,0 +1,7 @@
+import type * as pulumi from "@pulumi/pulumi";
+import type { StepFunctionDefinition } from "./types.js";
+export interface BackgroundTaskParams {
+    lambdaName: string;
+    lambdaArn: pulumi.Input<string>;
+}
+export declare const createBackgroundTaskDefinition: (params: BackgroundTaskParams) => StepFunctionDefinition;

package/pulumi/apps/api/backgroundTask/definition.js

@@ -0,0 +1,149 @@
+import { StepFunctionDefinitionStatesType } from "./types.js";
+export const createBackgroundTaskDefinition = params => {
+  const {
+    lambdaName,
+    lambdaArn
+  } = params;
+  return {
+    Comment: "Background tasks",
+    StartAt: "TransformEvent",
+    States: {
+      /**
+       * Transform the EventBridge event to a format that will be used in the Lambda.
+       */
+      TransformEvent: {
+        Type: StepFunctionDefinitionStatesType.Pass,
+        Next: "Run",
+        Parameters: {
+          "webinyTaskId.$": "$.detail.webinyTaskId",
+          "webinyTaskDefinitionId.$": "$.detail.webinyTaskDefinitionId",
+          "tenant.$": "$.detail.tenant",
+          "delay.$": "$.detail.delay"
+        }
+      },
+      /**
+       * Run the task and wait for the response from lambda.
+       * On some fatal error go to Error step.
+       * In other cases, check the status of the task.
+       */
+      Run: {
+        Type: StepFunctionDefinitionStatesType.Task,
+        Resource: lambdaArn,
+        Next: "CheckStatus",
+        ResultPath: "$",
+        InputPath: "$",
+        /**
+         * Parameters will be received as an event in the Lambda.
+         * Task Handler determines that it can run a task based on the Payload.webinyTaskId parameter - it must be set!
+         */
+        Parameters: {
+          name: lambdaName,
+          payload: {
+            "webinyTaskId.$": "$.webinyTaskId",
+            "webinyTaskDefinitionId.$": "$.webinyTaskDefinitionId",
+            "tenant.$": "$.tenant",
+            "delay.$": "$.delay",
+            endpoint: "manage",
+            "executionName.$": "$$.Execution.Name",
+            "stateMachineId.$": "$$.StateMachine.Id"
+          }
+        },
+        Catch: [{
+          ErrorEquals: ["States.ALL"],
+          Next: "UnknownError"
+        }]
+      },
+      /**
+       * On CONTINUE, go back to Run.
+       * On ERROR, go to Error step.
+       * On DONE, go to Done step.
+       */
+      CheckStatus: {
+        Type: StepFunctionDefinitionStatesType.Choice,
+        InputPath: "$",
+        Choices: [
+        /**
+         * There is a possibility that the task will return a CONTINUE status and a waitUntil value.
+         * This means that task will wait for the specified time and then continue.
+         * It can be used to handle waiting for child tasks or some resource to be created.
+         */
+        {
+          Variable: "$",
+          IsNull: true,
+          Next: "UnknownError"
+        }, {
+          And: [{
+            Variable: "$.status",
+            StringEquals: "continue"
+          }, {
+            Variable: "$.wait",
+            IsPresent: true
+          }, {
+            Variable: "$.wait",
+            IsNumeric: true
+          }, {
+            Variable: "$.wait",
+            NumericGreaterThan: 0
+          }],
+          Next: "Waiter"
+        },
+        /**
+         * When no wait value is present, go to Run.
+         */
+        {
+          Variable: "$.status",
+          StringEquals: "continue",
+          Next: "Run"
+        }, {
+          Variable: "$.status",
+          StringEquals: "error",
+          Next: "Error"
+        }, {
+          Variable: "$.status",
+          StringEquals: "done",
+          Next: "Done"
+        }, {
+          Variable: "$.status",
+          StringEquals: "aborted",
+          Next: "Aborted"
+        }],
+        Default: "UnknownStatus"
+      },
+      Waiter: {
+        Type: StepFunctionDefinitionStatesType.Wait,
+        SecondsPath: "$.wait",
+        Next: "Run"
+      },
+      UnknownError: {
+        Type: StepFunctionDefinitionStatesType.Fail,
+        Cause: "Fatal error - unknown task error."
+      },
+      /**
+       * Unknown task status on Choice step.
+       */
+      UnknownStatus: {
+        Type: StepFunctionDefinitionStatesType.Fail,
+        Cause: "Fatal error - unknown status."
+      },
+      /**
+       * Fail the task and output the error.
+       */
+      Error: {
+        Type: StepFunctionDefinitionStatesType.Fail,
+        CausePath: "States.JsonToString($.error)",
+        ErrorPath: "$.error.message"
+      },
+      /**
+       * Complete the task.
+       */
+      Done: {
+        Type: StepFunctionDefinitionStatesType.Succeed
+      },
+      Aborted: {
+        Type: StepFunctionDefinitionStatesType.Succeed
+      }
+    }
+  };
+};
+
+//# sourceMappingURL=definition.js.map

package/pulumi/apps/api/backgroundTask/definition.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["StepFunctionDefinitionStatesType","createBackgroundTaskDefinition","params","lambdaName","lambdaArn","Comment","StartAt","States","TransformEvent","Type","Pass","Next","Parameters","Run","Task","Resource","ResultPath","InputPath","name","payload","endpoint","Catch","ErrorEquals","CheckStatus","Choice","Choices","Variable","IsNull","And","StringEquals","IsPresent","IsNumeric","NumericGreaterThan","Default","Waiter","Wait","SecondsPath","UnknownError","Fail","Cause","UnknownStatus","Error","CausePath","ErrorPath","Done","Succeed","Aborted"],"sources":["definition.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport type { StepFunctionDefinition } from \"./types.js\";\nimport { StepFunctionDefinitionStatesType } from \"./types.js\";\n\nexport interface BackgroundTaskParams {\n    lambdaName: string;\n    lambdaArn: pulumi.Input<string>;\n}\n\nexport const createBackgroundTaskDefinition = (\n    params: BackgroundTaskParams\n): StepFunctionDefinition => {\n    const { lambdaName, lambdaArn } = params;\n    return {\n        Comment: \"Background tasks\",\n        StartAt: \"TransformEvent\",\n        States: {\n            /**\n             * Transform the EventBridge event to a format that will be used in the Lambda.\n             */\n            TransformEvent: {\n                Type: StepFunctionDefinitionStatesType.Pass,\n                Next: \"Run\",\n                Parameters: {\n                    \"webinyTaskId.$\": \"$.detail.webinyTaskId\",\n                    \"webinyTaskDefinitionId.$\": \"$.detail.webinyTaskDefinitionId\",\n                    \"tenant.$\": \"$.detail.tenant\",\n                    \"delay.$\": \"$.detail.delay\"\n                }\n            },\n            /**\n             * Run the task and wait for the response from lambda.\n             * On some fatal error go to Error step.\n             * In other cases, check the status of the task.\n             */\n            Run: {\n                Type: StepFunctionDefinitionStatesType.Task,\n                Resource: lambdaArn,\n                Next: \"CheckStatus\",\n                ResultPath: \"$\",\n                InputPath: \"$\",\n                /**\n                 * Parameters will be received as an event in the Lambda.\n                 * Task Handler determines that it can run a task based on the Payload.webinyTaskId parameter - it must be set!\n                 */\n                Parameters: {\n                    name: lambdaName,\n                    payload: {\n                        \"webinyTaskId.$\": \"$.webinyTaskId\",\n                        \"webinyTaskDefinitionId.$\": \"$.webinyTaskDefinitionId\",\n                        \"tenant.$\": \"$.tenant\",\n                        \"delay.$\": \"$.delay\",\n                        endpoint: \"manage\",\n                        \"executionName.$\": \"$$.Execution.Name\",\n                        \"stateMachineId.$\": \"$$.StateMachine.Id\"\n                    }\n                },\n                Catch: [\n                    {\n                        ErrorEquals: [\"States.ALL\"],\n                        Next: \"UnknownError\"\n                    }\n                ]\n            },\n            /**\n             * On CONTINUE, go back to Run.\n             * On ERROR, go to Error step.\n             * On DONE, go to Done step.\n             */\n            CheckStatus: {\n                Type: StepFunctionDefinitionStatesType.Choice,\n                InputPath: \"$\",\n                Choices: [\n                    /**\n                     * There is a possibility that the task will return a CONTINUE status and a waitUntil value.\n                     * This means that task will wait for the specified time and then continue.\n                     * It can be used to handle waiting for child tasks or some resource to be created.\n                     */\n                    {\n                        Variable: \"$\",\n                        IsNull: true,\n                        Next: \"UnknownError\"\n                    },\n                    {\n                        And: [\n                            {\n                                Variable: \"$.status\",\n                                StringEquals: \"continue\"\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsPresent: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsNumeric: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                NumericGreaterThan: 0\n                            }\n                        ],\n                        Next: \"Waiter\"\n                    },\n                    /**\n                     * When no wait value is present, go to Run.\n                     */\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"continue\",\n                        Next: \"Run\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"error\",\n                        Next: \"Error\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"done\",\n                        Next: \"Done\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"aborted\",\n                        Next: \"Aborted\"\n                    }\n                ],\n                Default: \"UnknownStatus\"\n            },\n            Waiter: {\n                Type: StepFunctionDefinitionStatesType.Wait,\n                SecondsPath: \"$.wait\",\n                Next: \"Run\"\n            },\n            UnknownError: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown task error.\"\n            },\n            /**\n             * Unknown task status on Choice step.\n             */\n            UnknownStatus: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown status.\"\n            },\n            /**\n             * Fail the task and output the error.\n             */\n            Error: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                CausePath: \"States.JsonToString($.error)\",\n                ErrorPath: \"$.error.message\"\n            },\n            /**\n             * Complete the task.\n             */\n            Done: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            },\n            Aborted: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            }\n        }\n    };\n};\n"],"mappings":"AAEA,SAASA,gCAAgC;AAOzC,OAAO,MAAMC,8BAA8B,GACvCC,MAA4B,IACH;EACzB,MAAM;IAAEC,UAAU;IAAEC;EAAU,CAAC,GAAGF,MAAM;EACxC,OAAO;IACHG,OAAO,EAAE,kBAAkB;IAC3BC,OAAO,EAAE,gBAAgB;IACzBC,MAAM,EAAE;MACJ;AACZ;AACA;MACYC,cAAc,EAAE;QACZC,IAAI,EAAET,gCAAgC,CAACU,IAAI;QAC3CC,IAAI,EAAE,KAAK;QACXC,UAAU,EAAE;UACR,gBAAgB,EAAE,uBAAuB;UACzC,0BAA0B,EAAE,iCAAiC;UAC7D,UAAU,EAAE,iBAAiB;UAC7B,SAAS,EAAE;QACf;MACJ,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYC,GAAG,EAAE;QACDJ,IAAI,EAAET,gCAAgC,CAACc,IAAI;QAC3CC,QAAQ,EAAEX,SAAS;QACnBO,IAAI,EAAE,aAAa;QACnBK,UAAU,EAAE,GAAG;QACfC,SAAS,EAAE,GAAG;QACd;AAChB;AACA;AACA;QACgBL,UAAU,EAAE;UACRM,IAAI,EAAEf,UAAU;UAChBgB,OAAO,EAAE;YACL,gBAAgB,EAAE,gBAAgB;YAClC,0BAA0B,EAAE,0BAA0B;YACtD,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,SAAS;YACpBC,QAAQ,EAAE,QAAQ;YAClB,iBAAiB,EAAE,mBAAmB;YACtC,kBAAkB,EAAE;UACxB;QACJ,CAAC;QACDC,KAAK,EAAE,CACH;UACIC,WAAW,EAAE,CAAC,YAAY,CAAC;UAC3BX,IAAI,EAAE;QACV,CAAC;MAET,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYY,WAAW,EAAE;QACTd,IAAI,EAAET,gCAAgC,CAACwB,MAAM;QAC7CP,SAAS,EAAE,GAAG;QACdQ,OAAO,EAAE;QACL;AACpB;AACA;AACA;AACA;QACoB;UACIC,QAAQ,EAAE,GAAG;UACbC,MAAM,EAAE,IAAI;UACZhB,IAAI,EAAE;QACV,CAAC,EACD;UACIiB,GAAG,EAAE,CACD;YACIF,QAAQ,EAAE,UAAU;YACpBG,YAAY,EAAE;UAClB,CAAC,EACD;YACIH,QAAQ,EAAE,QAAQ;YAClBI,SAAS,EAAE;UACf,CAAC,EACD;YACIJ,QAAQ,EAAE,QAAQ;YAClBK,SAAS,EAAE;UACf,CAAC,EACD;YACIL,QAAQ,EAAE,QAAQ;YAClBM,kBAAkB,EAAE;UACxB,CAAC,CACJ;UACDrB,IAAI,EAAE;QACV,CAAC;QACD;AACpB;AACA;QACoB;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,UAAU;UACxBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,OAAO;UACrBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,MAAM;UACpBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,SAAS;UACvBlB,IAAI,EAAE;QACV,CAAC,CACJ;QACDsB,OAAO,EAAE;MACb,CAAC;MACDC,MAAM,EAAE;QACJzB,IAAI,EAAET,gCAAgC,CAACmC,IAAI;QAC3CC,WAAW,EAAE,QAAQ;QACrBzB,IAAI,EAAE;MACV,CAAC;MACD0B,YAAY,EAAE;QACV5B,IAAI,EAAET,gCAAgC,CAACsC,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYC,aAAa,EAAE;QACX/B,IAAI,EAAET,gCAAgC,CAACsC,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYE,KAAK,EAAE;QACHhC,IAAI,EAAET,gCAAgC,CAACsC,IAAI;QAC3CI,SAAS,EAAE,8BAA8B;QACzCC,SAAS,EAAE;MACf,CAAC;MACD;AACZ;AACA;MACYC,IAAI,EAAE;QACFnC,IAAI,EAAET,gCAAgC,CAAC6C;MAC3C,CAAC;MACDC,OAAO,EAAE;QACLrC,IAAI,EAAET,gCAAgC,CAAC6C;MAC3C;IACJ;EACJ,CAAC;AACL,CAAC","ignoreList":[]}

package/pulumi/apps/api/backgroundTask/policy.d.ts

@@ -0,0 +1,8 @@
+import type { PulumiApp } from "@webiny/pulumi";
+import type * as pulumi from "@pulumi/pulumi";
+interface Params {
+    name: string;
+    lambdaFunctionArn: pulumi.Input<string>;
+}
+export declare const createBackgroundTaskStepFunctionPolicy: (app: PulumiApp, params: Params) => import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
+export {};

package/pulumi/apps/api/backgroundTask/policy.js

@@ -0,0 +1,26 @@
+import * as aws from "@pulumi/aws";
+export const createBackgroundTaskStepFunctionPolicy = (app, params) => {
+  const {
+    name,
+    lambdaFunctionArn
+  } = params;
+  return app.addResource(aws.iam.Policy, {
+    name,
+    config: {
+      policy: {
+        Version: "2012-10-17",
+        Statement: [{
+          Effect: "Allow",
+          Action: ["lambda:InvokeFunction"],
+          Resource: lambdaFunctionArn
+        }, {
+          Effect: "Allow",
+          Action: ["logs:CreateLogDelivery", "logs:CreateLogStream", "logs:GetLogDelivery", "logs:UpdateLogDelivery", "logs:DeleteLogDelivery", "logs:ListLogDeliveries", "logs:PutLogEvents", "logs:PutResourcePolicy", "logs:DescribeResourcePolicies", "logs:DescribeLogGroups"],
+          Resource: "*"
+        }]
+      }
+    }
+  });
+};
+
+//# sourceMappingURL=policy.js.map

package/pulumi/apps/api/backgroundTask/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createBackgroundTaskStepFunctionPolicy","app","params","name","lambdaFunctionArn","addResource","iam","Policy","config","policy","Version","Statement","Effect","Action","Resource"],"sources":["policy.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\n\ninterface Params {\n    name: string;\n    lambdaFunctionArn: pulumi.Input<string>;\n}\n\nexport const createBackgroundTaskStepFunctionPolicy = (app: PulumiApp, params: Params) => {\n    const { name, lambdaFunctionArn } = params;\n    return app.addResource(aws.iam.Policy, {\n        name,\n        config: {\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Effect: \"Allow\",\n                        Action: [\"lambda:InvokeFunction\"],\n                        Resource: lambdaFunctionArn\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: [\n                            \"logs:CreateLogDelivery\",\n                            \"logs:CreateLogStream\",\n                            \"logs:GetLogDelivery\",\n                            \"logs:UpdateLogDelivery\",\n                            \"logs:DeleteLogDelivery\",\n                            \"logs:ListLogDeliveries\",\n                            \"logs:PutLogEvents\",\n                            \"logs:PutResourcePolicy\",\n                            \"logs:DescribeResourcePolicies\",\n                            \"logs:DescribeLogGroups\"\n                        ],\n                        Resource: \"*\"\n                    }\n                ]\n            }\n        }\n    });\n};\n"],"mappings":"AACA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAQlC,OAAO,MAAMC,sCAAsC,GAAGA,CAACC,GAAc,EAAEC,MAAc,KAAK;EACtF,MAAM;IAAEC,IAAI;IAAEC;EAAkB,CAAC,GAAGF,MAAM;EAC1C,OAAOD,GAAG,CAACI,WAAW,CAACN,GAAG,CAACO,GAAG,CAACC,MAAM,EAAE;IACnCJ,IAAI;IACJK,MAAM,EAAE;MACJC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;UACjCC,QAAQ,EAAEV;QACd,CAAC,EACD;UACIQ,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CACJ,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,+BAA+B,EAC/B,wBAAwB,CAC3B;UACDC,QAAQ,EAAE;QACd,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;AACN,CAAC","ignoreList":[]}

package/pulumi/apps/api/backgroundTask/role.d.ts

@@ -0,0 +1,9 @@
+import type { PulumiApp } from "@webiny/pulumi";
+import * as aws from "@pulumi/aws";
+import type * as pulumi from "@pulumi/pulumi";
+interface Params {
+    name: string;
+    policy: pulumi.Output<aws.iam.Policy>;
+}
+export declare const createBackgroundTaskStepFunctionRole: (app: PulumiApp, params: Params) => import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+export {};

package/pulumi/apps/api/backgroundTask/role.js

@@ -0,0 +1,32 @@
+import * as aws from "@pulumi/aws";
+export const createBackgroundTaskStepFunctionRole = (app, params) => {
+  const {
+    name,
+    policy
+  } = params;
+  const role = app.addResource(aws.iam.Role, {
+    name,
+    config: {
+      assumeRolePolicy: {
+        Version: "2012-10-17",
+        Statement: [{
+          Action: "sts:AssumeRole",
+          Principal: {
+            Service: "states.amazonaws.com"
+          },
+          Effect: "Allow"
+        }]
+      }
+    }
+  });
+  app.addResource(aws.iam.RolePolicyAttachment, {
+    name: `${name}Policy`,
+    config: {
+      role: role.output,
+      policyArn: policy.arn
+    }
+  });
+  return role;
+};
+
+//# sourceMappingURL=role.js.map

package/pulumi/apps/api/backgroundTask/role.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","createBackgroundTaskStepFunctionRole","app","params","name","policy","role","addResource","iam","Role","config","assumeRolePolicy","Version","Statement","Action","Principal","Service","Effect","RolePolicyAttachment","output","policyArn","arn"],"sources":["role.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\n\ninterface Params {\n    name: string;\n    policy: pulumi.Output<aws.iam.Policy>;\n}\n\nexport const createBackgroundTaskStepFunctionRole = (app: PulumiApp, params: Params) => {\n    const { name, policy } = params;\n    const role = app.addResource(aws.iam.Role, {\n        name,\n        config: {\n            assumeRolePolicy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Action: \"sts:AssumeRole\",\n                        Principal: {\n                            Service: \"states.amazonaws.com\"\n                        },\n                        Effect: \"Allow\"\n                    }\n                ]\n            }\n        }\n    });\n    app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${name}Policy`,\n        config: {\n            role: role.output,\n            policyArn: policy.arn\n        }\n    });\n\n    return role;\n};\n"],"mappings":"AACA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAQlC,OAAO,MAAMC,oCAAoC,GAAGA,CAACC,GAAc,EAAEC,MAAc,KAAK;EACpF,MAAM;IAAEC,IAAI;IAAEC;EAAO,CAAC,GAAGF,MAAM;EAC/B,MAAMG,IAAI,GAAGJ,GAAG,CAACK,WAAW,CAACP,GAAG,CAACQ,GAAG,CAACC,IAAI,EAAE;IACvCL,IAAI;IACJM,MAAM,EAAE;MACJC,gBAAgB,EAAE;QACdC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,MAAM,EAAE,gBAAgB;UACxBC,SAAS,EAAE;YACPC,OAAO,EAAE;UACb,CAAC;UACDC,MAAM,EAAE;QACZ,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EACFf,GAAG,CAACK,WAAW,CAACP,GAAG,CAACQ,GAAG,CAACU,oBAAoB,EAAE;IAC1Cd,IAAI,EAAE,GAAGA,IAAI,QAAQ;IACrBM,MAAM,EAAE;MACJJ,IAAI,EAAEA,IAAI,CAACa,MAAM;MACjBC,SAAS,EAAEf,MAAM,CAACgB;IACtB;EACJ,CAAC,CAAC;EAEF,OAAOf,IAAI;AACf,CAAC","ignoreList":[]}