@webiny/project-aws 6.3.0-beta.4 → 6.4.0-beta.0

package/pulumi/apps/api/ApiGateway.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createAppModule","ApiGateway","name","config","app","routesConfig","api","addResource","apigatewayv2","Api","protocolType","description","stage","Stage","apiId","output","id","autoDeploy","defaultRouteSettings","throttlingBurstLimit","throttlingRateLimit","routes","Object","keys","addRoute","params","route","createRoute","integration","Integration","integrationType","integrationMethod","method","integrationUri","function","passthroughBehavior","Route","routeKey","path","target","apply","value","permission","lambda","Permission","action","principal","sourceArn","executionArn","arn"],"sources":["ApiGateway.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport interface ApiRouteParams {\n    path: pulumi.Input<string>;\n    method: pulumi.Input<string>;\n    function: pulumi.Input<string>;\n}\n\nexport type ApiGateway = PulumiAppModule<typeof ApiGateway>;\n\nexport const ApiGateway = createAppModule({\n    name: \"ApiGateway\",\n    config(app: PulumiApp, routesConfig: Record<string, ApiRouteParams>) {\n        const api = app.addResource(aws.apigatewayv2.Api, {\n            name: \"api-gateway\",\n            config: {\n                protocolType: \"HTTP\",\n                description: \"Main API gateway\"\n            }\n        });\n\n        const stage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"default\",\n            config: {\n                apiId: api.output.id,\n                autoDeploy: true,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        const routes: Record<string, ReturnType<typeof createRoute>> = {};\n\n        for (const name of Object.keys(routesConfig)) {\n            addRoute(name, routesConfig[name]);\n        }\n\n        return {\n            api,\n            stage,\n            routes,\n            addRoute\n        };\n\n        function addRoute(name: string, params: ApiRouteParams) {\n            if (routes[name]) {\n                return;\n            }\n            const route = createRoute(app, api.output, name, params);\n            routes[name] = route;\n        }\n    }\n});\n\nfunction createRoute(\n    app: PulumiApp,\n    api: pulumi.Output<aws.apigatewayv2.Api>,\n    name: string,\n    params: ApiRouteParams\n) {\n    const integration = app.addResource(aws.apigatewayv2.Integration, {\n        name: name,\n        config: {\n            description: \"GraphQL API Integration\",\n            apiId: api.id,\n            integrationType: \"AWS_PROXY\",\n            integrationMethod: params.method,\n            integrationUri: params.function,\n            passthroughBehavior: \"WHEN_NO_MATCH\"\n        }\n    });\n\n    const route = app.addResource(aws.apigatewayv2.Route, {\n        name: name,\n        config: {\n            apiId: api.id,\n            routeKey: `${params.method} ${params.path}`,\n            target: integration.output.id.apply(value => `integrations/${value}`)\n        }\n    });\n\n    const permission = app.addResource(aws.lambda.Permission, {\n        name: `allow-${name}`,\n        config: {\n            action: \"lambda:InvokeFunction\",\n            function: params.function,\n            principal: \"apigateway.amazonaws.com\",\n            sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)\n        }\n    });\n\n    return {\n        integration,\n        route,\n        permission\n    };\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,eAAe,QAAQ,gBAAgB;AAUhD,OAAO,MAAMC,UAAU,GAAGD,eAAe,CAAC;EACtCE,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,YAA4C,EAAE;IACjE,MAAMC,GAAG,GAAGF,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACC,GAAG,EAAE;MAC9CP,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJO,YAAY,EAAE,MAAM;QACpBC,WAAW,EAAE;MACjB;IACJ,CAAC,CAAC;IAEF,MAAMC,KAAK,GAAGR,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACK,KAAK,EAAE;MAClDX,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJW,KAAK,EAAER,GAAG,CAACS,MAAM,CAACC,EAAE;QACpBC,UAAU,EAAE,IAAI;QAChBC,oBAAoB,EAAE;UAClB;UACA;UACA;UACA;UACAC,oBAAoB,EAAE,IAAI;UAC1BC,mBAAmB,EAAE;QACzB;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,MAAsD,GAAG,CAAC,CAAC;IAEjE,KAAK,MAAMnB,IAAI,IAAIoB,MAAM,CAACC,IAAI,CAAClB,YAAY,CAAC,EAAE;MAC1CmB,QAAQ,CAACtB,IAAI,EAAEG,YAAY,CAACH,IAAI,CAAC,CAAC;IACtC;IAEA,OAAO;MACHI,GAAG;MACHM,KAAK;MACLS,MAAM;MACNG;IACJ,CAAC;IAED,SAASA,QAAQA,CAACtB,IAAY,EAAEuB,MAAsB,EAAE;MACpD,IAAIJ,MAAM,CAACnB,IAAI,CAAC,EAAE;QACd;MACJ;MACA,MAAMwB,KAAK,GAAGC,WAAW,CAACvB,GAAG,EAAEE,GAAG,CAACS,MAAM,EAAEb,IAAI,EAAEuB,MAAM,CAAC;MACxDJ,MAAM,CAACnB,IAAI,CAAC,GAAGwB,KAAK;IACxB;EACJ;AACJ,CAAC,CAAC;AAEF,SAASC,WAAWA,CAChBvB,GAAc,EACdE,GAAwC,EACxCJ,IAAY,EACZuB,MAAsB,EACxB;EACE,MAAMG,WAAW,GAAGxB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAACqB,WAAW,EAAE;IAC9D3B,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJQ,WAAW,EAAE,yBAAyB;MACtCG,KAAK,EAAER,GAAG,CAACU,EAAE;MACbc,eAAe,EAAE,WAAW;MAC5BC,iBAAiB,EAAEN,MAAM,CAACO,MAAM;MAChCC,cAAc,EAAER,MAAM,CAACS,QAAQ;MAC/BC,mBAAmB,EAAE;IACzB;EACJ,CAAC,CAAC;EAEF,MAAMT,KAAK,GAAGtB,GAAG,CAACG,WAAW,CAACR,GAAG,CAACS,YAAY,CAAC4B,KAAK,EAAE;IAClDlC,IAAI,EAAEA,IAAI;IACVC,MAAM,EAAE;MACJW,KAAK,EAAER,GAAG,CAACU,EAAE;MACbqB,QAAQ,EAAE,GAAGZ,MAAM,CAACO,MAAM,IAAIP,MAAM,CAACa,IAAI,EAAE;MAC3CC,MAAM,EAAEX,WAAW,CAACb,MAAM,CAACC,EAAE,CAACwB,KAAK,CAACC,KAAK,IAAI,gBAAgBA,KAAK,EAAE;IACxE;EACJ,CAAC,CAAC;EAEF,MAAMC,UAAU,GAAGtC,GAAG,CAACG,WAAW,CAACR,GAAG,CAAC4C,MAAM,CAACC,UAAU,EAAE;IACtD1C,IAAI,EAAE,SAASA,IAAI,EAAE;IACrBC,MAAM,EAAE;MACJ0C,MAAM,EAAE,uBAAuB;MAC/BX,QAAQ,EAAET,MAAM,CAACS,QAAQ;MACzBY,SAAS,EAAE,0BAA0B;MACrCC,SAAS,EAAEzC,GAAG,CAAC0C,YAAY,CAACR,KAAK,CAACS,GAAG,IAAI,GAAGA,GAAG,OAAOxB,MAAM,CAACa,IAAI,EAAE;IACvE;EACJ,CAAC,CAAC;EAEF,OAAO;IACHV,WAAW;IACXF,KAAK;IACLgB;EACJ,CAAC;AACL","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiGateway.js","sources":["../../../../src/pulumi/apps/api/ApiGateway.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport interface ApiRouteParams {\n    path: pulumi.Input<string>;\n    method: pulumi.Input<string>;\n    function: pulumi.Input<string>;\n}\n\nexport type ApiGateway = PulumiAppModule<typeof ApiGateway>;\n\nexport const ApiGateway = createAppModule({\n    name: \"ApiGateway\",\n    config(app: PulumiApp, routesConfig: Record<string, ApiRouteParams>) {\n        const api = app.addResource(aws.apigatewayv2.Api, {\n            name: \"api-gateway\",\n            config: {\n                protocolType: \"HTTP\",\n                description: \"Main API gateway\"\n            }\n        });\n\n        const stage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"default\",\n            config: {\n                apiId: api.output.id,\n                autoDeploy: true,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        const routes: Record<string, ReturnType<typeof createRoute>> = {};\n\n        for (const name of Object.keys(routesConfig)) {\n            addRoute(name, routesConfig[name]);\n        }\n\n        return {\n            api,\n            stage,\n            routes,\n            addRoute\n        };\n\n        function addRoute(name: string, params: ApiRouteParams) {\n            if (routes[name]) {\n                return;\n            }\n            const route = createRoute(app, api.output, name, params);\n            routes[name] = route;\n        }\n    }\n});\n\nfunction createRoute(\n    app: PulumiApp,\n    api: pulumi.Output<aws.apigatewayv2.Api>,\n    name: string,\n    params: ApiRouteParams\n) {\n    const integration = app.addResource(aws.apigatewayv2.Integration, {\n        name: name,\n        config: {\n            description: \"GraphQL API Integration\",\n            apiId: api.id,\n            integrationType: \"AWS_PROXY\",\n            integrationMethod: params.method,\n            integrationUri: params.function,\n            passthroughBehavior: \"WHEN_NO_MATCH\"\n        }\n    });\n\n    const route = app.addResource(aws.apigatewayv2.Route, {\n        name: name,\n        config: {\n            apiId: api.id,\n            routeKey: `${params.method} ${params.path}`,\n            target: integration.output.id.apply(value => `integrations/${value}`)\n        }\n    });\n\n    const permission = app.addResource(aws.lambda.Permission, {\n        name: `allow-${name}`,\n        config: {\n            action: \"lambda:InvokeFunction\",\n            function: params.function,\n            principal: \"apigateway.amazonaws.com\",\n            sourceArn: api.executionArn.apply(arn => `${arn}/*/*${params.path}`)\n        }\n    });\n\n    return {\n        integration,\n        route,\n        permission\n    };\n}\n"],"names":["ApiGateway","createAppModule","app","routesConfig","api","aws","stage","routes","name","Object","addRoute","params","route","createRoute","integration","value","permission","arn"],"mappings":";;AAaO,MAAMA,aAAaC,gBAAgB;IACtC,MAAM;IACN,QAAOC,GAAc,EAAEC,YAA4C;QAC/D,MAAMC,MAAMF,IAAI,WAAW,CAACG,uCAAAA,YAAAA,CAAAA,GAAoB,EAAE;YAC9C,MAAM;YACN,QAAQ;gBACJ,cAAc;gBACd,aAAa;YACjB;QACJ;QAEA,MAAMC,QAAQJ,IAAI,WAAW,CAACG,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;YAClD,MAAM;YACN,QAAQ;gBACJ,OAAOD,IAAI,MAAM,CAAC,EAAE;gBACpB,YAAY;gBACZ,sBAAsB;oBAKlB,sBAAsB;oBACtB,qBAAqB;gBACzB;YACJ;QACJ;QAEA,MAAMG,SAAyD,CAAC;QAEhE,KAAK,MAAMC,QAAQC,OAAO,IAAI,CAACN,cAC3BO,SAASF,MAAML,YAAY,CAACK,KAAK;QAGrC,OAAO;YACHJ;YACAE;YACAC;YACAG;QACJ;QAEA,SAASA,SAASF,IAAY,EAAEG,MAAsB;YAClD,IAAIJ,MAAM,CAACC,KAAK,EACZ;YAEJ,MAAMI,QAAQC,YAAYX,KAAKE,IAAI,MAAM,EAAEI,MAAMG;YACjDJ,MAAM,CAACC,KAAK,GAAGI;QACnB;IACJ;AACJ;AAEA,SAASC,YACLX,GAAc,EACdE,GAAwC,EACxCI,IAAY,EACZG,MAAsB;IAEtB,MAAMG,cAAcZ,IAAI,WAAW,CAACG,uCAAAA,YAAAA,CAAAA,WAA4B,EAAE;QAC9D,MAAMG;QACN,QAAQ;YACJ,aAAa;YACb,OAAOJ,IAAI,EAAE;YACb,iBAAiB;YACjB,mBAAmBO,OAAO,MAAM;YAChC,gBAAgBA,OAAO,QAAQ;YAC/B,qBAAqB;QACzB;IACJ;IAEA,MAAMC,QAAQV,IAAI,WAAW,CAACG,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;QAClD,MAAMG;QACN,QAAQ;YACJ,OAAOJ,IAAI,EAAE;YACb,UAAU,GAAGO,OAAO,MAAM,CAAC,CAAC,EAAEA,OAAO,IAAI,EAAE;YAC3C,QAAQG,YAAY,MAAM,CAAC,EAAE,CAAC,KAAK,CAACC,CAAAA,QAAS,CAAC,aAAa,EAAEA,OAAO;QACxE;IACJ;IAEA,MAAMC,aAAad,IAAI,WAAW,CAACG,uCAAAA,MAAAA,CAAAA,UAAqB,EAAE;QACtD,MAAM,CAAC,MAAM,EAAEG,MAAM;QACrB,QAAQ;YACJ,QAAQ;YACR,UAAUG,OAAO,QAAQ;YACzB,WAAW;YACX,WAAWP,IAAI,YAAY,CAAC,KAAK,CAACa,CAAAA,MAAO,GAAGA,IAAI,IAAI,EAAEN,OAAO,IAAI,EAAE;QACvE;IACJ;IAEA,OAAO;QACHG;QACAF;QACAI;IACJ;AACJ"}

package/pulumi/apps/api/ApiGraphql.js

@@ -1,164 +1,235 @@
 import path from "path";
-import * as pulumi from "@pulumi/pulumi";
-import * as aws from "@pulumi/aws";
-import toKebabCase from "lodash/kebabCase.js";
+import kebabCase from "lodash/kebabCase.js";
 import { createAppModule } from "@webiny/pulumi";
 import { createLambdaRole, getCommonLambdaEnvVariables } from "../lambdaUtils.js";
 import { CoreOutput, VpcConfig } from "../index.js";
 import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
 import { LAMBDA_RUNTIME } from "../../constants.js";
-const EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;
-const EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;
-const EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;
-export const ApiGraphql = createAppModule({
-  name: "ApiGraphql",
-  config(app, params) {
-    const policy = createGraphqlLambdaPolicy(app);
-    const role = createLambdaRole(app, {
-      name: "api-lambda-role",
-      policy: policy.output
-    });
-    const graphql = app.addResource(aws.lambda.Function, {
-      name: "graphql",
-      config: {
-        description: "Webiny's GraphQL APIs",
-        runtime: LAMBDA_RUNTIME,
-        handler: "handler.handler",
-        role: role.output.arn,
-        timeout: 30,
-        memorySize: 1024,
-        code: new pulumi.asset.AssetArchive({
-          ".": new pulumi.asset.FileArchive(path.join(app.paths.workspace, "graphql/build"))
-        }),
-        environment: {
-          variables: getCommonLambdaEnvVariables().apply(value => ({
-            ...value,
-            ...params.env,
-            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
-          }))
-        },
-        vpcConfig: app.getModule(VpcConfig).functionVpcConfig,
-        loggingConfig: {
-          logFormat: "JSON"
-        }
-      }
-    });
-
-    // Create event rule.
-    const eventRule = app.addResource(aws.cloudwatch.EventRule, {
-      name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,
-      config: {
-        description: "Enable us to empty the trash-bin ever day",
-        scheduleExpression: "cron(0 3 * * ? *)"
-      }
-    });
-
-    // Add required permission to the target lambda.
-    app.addResource(aws.lambda.Permission, {
-      name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,
-      config: {
-        action: "lambda:InvokeFunction",
-        function: graphql.output.arn,
-        principal: "events.amazonaws.com",
-        statementId: "allow-rule-invoke-" + EMPTY_TRASH_BIN_EVENT_RULE_NAME
-      }
-    });
-
-    // Target the main graphql lambda.
-    app.addResource(aws.cloudwatch.EventTarget, {
-      name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,
-      config: {
-        rule: eventRule.output.name,
-        arn: graphql.output.arn,
-        input: JSON.stringify({
-          source: "webiny.events",
-          "detail-type": "WebinyEmptyTrashBin"
-        })
-      }
-    });
-    return {
-      role,
-      policy,
-      functions: {
-        graphql
-      },
-      addRoute: routeParams => {
-        const apiGateway = app.resources.apiGateway;
-        if (!apiGateway) {
-          console.log("Could not add route because there is no apiGateway in the resources.");
-          return;
-        }
-        const kebabName = toKebabCase(routeParams.name);
-        if (kebabName !== routeParams.name) {
-          console.log(`Route name is not allowed: "${routeParams.name}".`);
-          return;
-        }
-        return apiGateway.addRoute(routeParams.name, {
-          path: routeParams.path,
-          method: routeParams.method,
-          function: graphql.output.arn
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const EMPTY_TRASH_BIN_EVENT_RULE_NAME = "empty-trash-bin-event-rule";
+const EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = "empty-trash-bin-event-target-permission";
+const EMPTY_TRASH_BIN_EVENT_RULE_TARGET = "empty-trash-bin-event-rule-target";
+const ApiGraphql = createAppModule({
+    name: "ApiGraphql",
+    config (app, params) {
+        const policy = createGraphqlLambdaPolicy(app);
+        const role = createLambdaRole(app, {
+            name: "api-lambda-role",
+            policy: policy.output
         });
-      }
-    };
-  }
-});
-function createGraphqlLambdaPolicy(app) {
-  const coreOutput = app.getModule(CoreOutput);
-  const awsAccountId = getAwsAccountId(app);
-  const awsRegion = getAwsRegion(app);
-  return app.addResource(aws.iam.Policy, {
-    name: "ApiGraphqlLambdaPolicy",
-    config: {
-      description: "This policy enables access to Dynamodb, S3, Lambda and Cognito IDP",
-      // Core is pulumi.Output, so we need to run apply() to resolve policy based on it
-      policy: pulumi.all([coreOutput]).apply(([core]) => {
-        const policy = {
-          Version: "2012-10-17",
-          Statement: [{
-            Sid: "PermissionForDynamodb",
-            Effect: "Allow",
-            Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:ConditionCheckItem", "dynamodb:CreateBackup", "dynamodb:CreateTable", "dynamodb:CreateTableReplica", "dynamodb:DeleteBackup", "dynamodb:DeleteItem", "dynamodb:DeleteTable", "dynamodb:DeleteTableReplica", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeExport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:DisableKinesisStreamingDestination", "dynamodb:EnableKinesisStreamingDestination", "dynamodb:ExportTableToPointInTime", "dynamodb:GetItem", "dynamodb:GetRecords", "dynamodb:GetShardIterator", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "dynamodb:PartiQLDelete", "dynamodb:PartiQLInsert", "dynamodb:PartiQLSelect", "dynamodb:PartiQLUpdate", "dynamodb:PurchaseReservedCapacityOfferings", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:RestoreTableFromBackup", "dynamodb:RestoreTableToPointInTime", "dynamodb:Scan", "dynamodb:UpdateContinuousBackups", "dynamodb:UpdateContributorInsights", "dynamodb:UpdateItem", "dynamodb:UpdateTable", "dynamodb:UpdateTableReplicaAutoScaling", "dynamodb:UpdateTimeToLive"],
-            Resource: [`${core.primaryDynamodbTableArn}`, `${core.primaryDynamodbTableArn}/*`, `${core.auditLogsDynamodbTableArn}`, `${core.auditLogsDynamodbTableArn}/*`,
-            // Attach permissions for elastic search dynamo as well (if ES is enabled).
-            ...(core.opensearchDynamodbTableArn ? [`${core.opensearchDynamodbTableArn}`, `${core.opensearchDynamodbTableArn}/*`] : [])]
-          }, {
-            Sid: "PermissionForS3",
-            Effect: "Allow",
-            Action: ["s3:ListBucket", "s3:GetObjectAcl", "s3:DeleteObject", "s3:PutObjectAcl", "s3:PutObject", "s3:GetObject"],
-            Resource: [pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`, pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`]
-          }, {
-            Sid: "PermissionForLambda",
-            Effect: "Allow",
-            Action: ["lambda:InvokeFunction"],
-            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`
-          }, {
-            Sid: "PermissionForCognitoIdp",
-            Effect: "Allow",
-            Action: "cognito-idp:*",
-            Resource: `${core.cognitoUserPoolArn}`
-          }, {
-            Sid: "PermissionForEventBus",
-            Effect: "Allow",
-            Action: "events:PutEvents",
-            Resource: core.eventBusArn
-          }, {
-            Sid: "PermissionForCloudfront",
-            Effect: "Allow",
-            Action: "cloudfront:CreateInvalidation",
-            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`
-          },
-          // Attach permissions for elastic search domain as well (if ES is enabled).
-          ...(core.opensearchDomainArn ? [{
-            Sid: "PermissionForOS",
-            Effect: "Allow",
-            Action: "es:*",
-            Resource: [`${core.opensearchDomainArn}`, `${core.opensearchDomainArn}/*`]
-          }] : [])]
+        const graphql = app.addResource(__rspack_external__pulumi_aws_e7af83c1.lambda.Function, {
+            name: "graphql",
+            config: {
+                description: "Webiny's GraphQL APIs",
+                runtime: LAMBDA_RUNTIME,
+                handler: "handler.handler",
+                role: role.output.arn,
+                timeout: 30,
+                memorySize: 1024,
+                code: new __rspack_external__pulumi_pulumi_d0276039.asset.AssetArchive({
+                    ".": new __rspack_external__pulumi_pulumi_d0276039.asset.FileArchive(path.join(app.paths.workspace, "graphql/build"))
+                }),
+                environment: {
+                    variables: getCommonLambdaEnvVariables().apply((value)=>({
+                            ...value,
+                            ...params.env,
+                            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
+                        }))
+                },
+                vpcConfig: app.getModule(VpcConfig).functionVpcConfig,
+                loggingConfig: {
+                    logFormat: "JSON"
+                }
+            }
+        });
+        const eventRule = app.addResource(__rspack_external__pulumi_aws_e7af83c1.cloudwatch.EventRule, {
+            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,
+            config: {
+                description: "Enable us to empty the trash-bin ever day",
+                scheduleExpression: "cron(0 3 * * ? *)"
+            }
+        });
+        app.addResource(__rspack_external__pulumi_aws_e7af83c1.lambda.Permission, {
+            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,
+            config: {
+                action: "lambda:InvokeFunction",
+                function: graphql.output.arn,
+                principal: "events.amazonaws.com",
+                statementId: "allow-rule-invoke-" + EMPTY_TRASH_BIN_EVENT_RULE_NAME
+            }
+        });
+        app.addResource(__rspack_external__pulumi_aws_e7af83c1.cloudwatch.EventTarget, {
+            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,
+            config: {
+                rule: eventRule.output.name,
+                arn: graphql.output.arn,
+                input: JSON.stringify({
+                    source: "webiny.events",
+                    "detail-type": "WebinyEmptyTrashBin"
+                })
+            }
+        });
+        return {
+            role,
+            policy,
+            functions: {
+                graphql
+            },
+            addRoute: (routeParams)=>{
+                const apiGateway = app.resources.apiGateway;
+                if (!apiGateway) return void console.log("Could not add route because there is no apiGateway in the resources.");
+                const kebabName = kebabCase(routeParams.name);
+                if (kebabName !== routeParams.name) return void console.log(`Route name is not allowed: "${routeParams.name}".`);
+                return apiGateway.addRoute(routeParams.name, {
+                    path: routeParams.path,
+                    method: routeParams.method,
+                    function: graphql.output.arn
+                });
+            }
         };
-        return policy;
-      })
     }
-  });
+});
+function createGraphqlLambdaPolicy(app) {
+    const coreOutput = app.getModule(CoreOutput);
+    const awsAccountId = getAwsAccountId(app);
+    const awsRegion = getAwsRegion(app);
+    return app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+        name: "ApiGraphqlLambdaPolicy",
+        config: {
+            description: "This policy enables access to Dynamodb, S3, Lambda and Cognito IDP",
+            policy: __rspack_external__pulumi_pulumi_d0276039.all([
+                coreOutput
+            ]).apply(([core])=>{
+                const policy = {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Sid: "PermissionForDynamodb",
+                            Effect: "Allow",
+                            Action: [
+                                "dynamodb:BatchGetItem",
+                                "dynamodb:BatchWriteItem",
+                                "dynamodb:ConditionCheckItem",
+                                "dynamodb:CreateBackup",
+                                "dynamodb:CreateTable",
+                                "dynamodb:CreateTableReplica",
+                                "dynamodb:DeleteBackup",
+                                "dynamodb:DeleteItem",
+                                "dynamodb:DeleteTable",
+                                "dynamodb:DeleteTableReplica",
+                                "dynamodb:DescribeBackup",
+                                "dynamodb:DescribeContinuousBackups",
+                                "dynamodb:DescribeContributorInsights",
+                                "dynamodb:DescribeExport",
+                                "dynamodb:DescribeKinesisStreamingDestination",
+                                "dynamodb:DescribeLimits",
+                                "dynamodb:DescribeReservedCapacity",
+                                "dynamodb:DescribeReservedCapacityOfferings",
+                                "dynamodb:DescribeStream",
+                                "dynamodb:DescribeTable",
+                                "dynamodb:DescribeTableReplicaAutoScaling",
+                                "dynamodb:DescribeTimeToLive",
+                                "dynamodb:DisableKinesisStreamingDestination",
+                                "dynamodb:EnableKinesisStreamingDestination",
+                                "dynamodb:ExportTableToPointInTime",
+                                "dynamodb:GetItem",
+                                "dynamodb:GetRecords",
+                                "dynamodb:GetShardIterator",
+                                "dynamodb:ListBackups",
+                                "dynamodb:ListContributorInsights",
+                                "dynamodb:ListExports",
+                                "dynamodb:ListStreams",
+                                "dynamodb:ListTables",
+                                "dynamodb:ListTagsOfResource",
+                                "dynamodb:PartiQLDelete",
+                                "dynamodb:PartiQLInsert",
+                                "dynamodb:PartiQLSelect",
+                                "dynamodb:PartiQLUpdate",
+                                "dynamodb:PurchaseReservedCapacityOfferings",
+                                "dynamodb:PutItem",
+                                "dynamodb:Query",
+                                "dynamodb:RestoreTableFromBackup",
+                                "dynamodb:RestoreTableToPointInTime",
+                                "dynamodb:Scan",
+                                "dynamodb:UpdateContinuousBackups",
+                                "dynamodb:UpdateContributorInsights",
+                                "dynamodb:UpdateItem",
+                                "dynamodb:UpdateTable",
+                                "dynamodb:UpdateTableReplicaAutoScaling",
+                                "dynamodb:UpdateTimeToLive"
+                            ],
+                            Resource: [
+                                `${core.primaryDynamodbTableArn}`,
+                                `${core.primaryDynamodbTableArn}/*`,
+                                `${core.auditLogsDynamodbTableArn}`,
+                                `${core.auditLogsDynamodbTableArn}/*`,
+                                ...core.opensearchDynamodbTableArn ? [
+                                    `${core.opensearchDynamodbTableArn}`,
+                                    `${core.opensearchDynamodbTableArn}/*`
+                                ] : []
+                            ]
+                        },
+                        {
+                            Sid: "PermissionForS3",
+                            Effect: "Allow",
+                            Action: [
+                                "s3:ListBucket",
+                                "s3:GetObjectAcl",
+                                "s3:DeleteObject",
+                                "s3:PutObjectAcl",
+                                "s3:PutObject",
+                                "s3:GetObject"
+                            ],
+                            Resource: [
+                                __rspack_external__pulumi_pulumi_d0276039.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,
+                                __rspack_external__pulumi_pulumi_d0276039.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`
+                            ]
+                        },
+                        {
+                            Sid: "PermissionForLambda",
+                            Effect: "Allow",
+                            Action: [
+                                "lambda:InvokeFunction"
+                            ],
+                            Resource: __rspack_external__pulumi_pulumi_d0276039.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`
+                        },
+                        {
+                            Sid: "PermissionForCognitoIdp",
+                            Effect: "Allow",
+                            Action: "cognito-idp:*",
+                            Resource: `${core.cognitoUserPoolArn}`
+                        },
+                        {
+                            Sid: "PermissionForEventBus",
+                            Effect: "Allow",
+                            Action: "events:PutEvents",
+                            Resource: core.eventBusArn
+                        },
+                        {
+                            Sid: "PermissionForCloudfront",
+                            Effect: "Allow",
+                            Action: "cloudfront:CreateInvalidation",
+                            Resource: __rspack_external__pulumi_pulumi_d0276039.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`
+                        },
+                        ...core.opensearchDomainArn ? [
+                            {
+                                Sid: "PermissionForOS",
+                                Effect: "Allow",
+                                Action: "es:*",
+                                Resource: [
+                                    `${core.opensearchDomainArn}`,
+                                    `${core.opensearchDomainArn}/*`
+                                ]
+                            }
+                        ] : []
+                    ]
+                };
+                return policy;
+            })
+        }
+    });
 }
+export { ApiGraphql };
 
 //# sourceMappingURL=ApiGraphql.js.map

package/pulumi/apps/api/ApiGraphql.js.map

@@ -1 +1 @@
-{"version":3,"names":["path","pulumi","aws","toKebabCase","createAppModule","createLambdaRole","getCommonLambdaEnvVariables","CoreOutput","VpcConfig","getAwsAccountId","getAwsRegion","LAMBDA_RUNTIME","EMPTY_TRASH_BIN_EVENT_RULE_NAME","EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME","EMPTY_TRASH_BIN_EVENT_RULE_TARGET","ApiGraphql","name","config","app","params","policy","createGraphqlLambdaPolicy","role","output","graphql","addResource","lambda","Function","description","runtime","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","join","paths","workspace","environment","variables","apply","value","env","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","getModule","functionVpcConfig","loggingConfig","logFormat","eventRule","cloudwatch","EventRule","scheduleExpression","Permission","action","function","principal","statementId","EventTarget","rule","input","JSON","stringify","source","functions","addRoute","routeParams","apiGateway","resources","console","log","kebabName","method","coreOutput","awsAccountId","awsRegion","iam","Policy","all","core","Version","Statement","Sid","Effect","Action","Resource","primaryDynamodbTableArn","auditLogsDynamodbTableArn","opensearchDynamodbTableArn","interpolate","fileManagerBucketId","cognitoUserPoolArn","eventBusArn","opensearchDomainArn"],"sources":["ApiGraphql.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport toKebabCase from \"lodash/kebabCase.js\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils.js\";\nimport { CoreOutput, VpcConfig } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils.js\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\n\ninterface GraphqlParams {\n    env: Record<string, any>;\n}\n\nexport interface AddRouteParams {\n    /**\n     * Must be in kebab case (a-z and -)\n     */\n    name: string;\n    path: `/${string}`;\n    method: \"DELETE\" | \"GET\" | \"HEAD\" | \"PATCH\" | \"POST\" | \"PUT\" | \"OPTIONS\" | \"ANY\";\n}\n\nconst EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;\nconst EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;\nconst EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;\n\nexport type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;\n\nexport const ApiGraphql = createAppModule({\n    name: \"ApiGraphql\",\n    config(app: PulumiApp, params: GraphqlParams) {\n        const policy = createGraphqlLambdaPolicy(app);\n        const role = createLambdaRole(app, {\n            name: \"api-lambda-role\",\n            policy: policy.output\n        });\n\n        const graphql = app.addResource(aws.lambda.Function, {\n            name: \"graphql\",\n            config: {\n                description: \"Webiny's GraphQL APIs\",\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 30,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"graphql/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        ...params.env,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig,\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        // Create event rule.\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,\n            config: {\n                description: \"Enable us to empty the trash-bin ever day\",\n                scheduleExpression: \"cron(0 3 * * ? *)\"\n            }\n        });\n\n        // Add required permission to the target lambda.\n        app.addResource(aws.lambda.Permission, {\n            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.output.arn,\n                principal: \"events.amazonaws.com\",\n                statementId: \"allow-rule-invoke-\" + EMPTY_TRASH_BIN_EVENT_RULE_NAME\n            }\n        });\n\n        // Target the main graphql lambda.\n        app.addResource(aws.cloudwatch.EventTarget, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,\n            config: {\n                rule: eventRule.output.name,\n                arn: graphql.output.arn,\n                input: JSON.stringify({\n                    source: \"webiny.events\",\n                    \"detail-type\": \"WebinyEmptyTrashBin\"\n                })\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                graphql\n            },\n            addRoute: (routeParams: AddRouteParams) => {\n                const apiGateway: any = app.resources.apiGateway;\n                if (!apiGateway) {\n                    console.log(\n                        \"Could not add route because there is no apiGateway in the resources.\"\n                    );\n                    return;\n                }\n                const kebabName = toKebabCase(routeParams.name);\n                if (kebabName !== routeParams.name) {\n                    console.log(`Route name is not allowed: \"${routeParams.name}\".`);\n                    return;\n                }\n                return apiGateway.addRoute(routeParams.name, {\n                    path: routeParams.path,\n                    method: routeParams.method,\n                    function: graphql.output.arn\n                });\n            }\n        };\n    }\n});\n\nfunction createGraphqlLambdaPolicy(app: PulumiApp) {\n    const coreOutput = app.getModule(CoreOutput);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"ApiGraphqlLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3, Lambda and Cognito IDP\",\n            // Core is pulumi.Output, so we need to run apply() to resolve policy based on it\n            policy: pulumi.all([coreOutput]).apply(([core]) => {\n                const policy: aws.iam.PolicyDocument = {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"dynamodb:BatchGetItem\",\n                                \"dynamodb:BatchWriteItem\",\n                                \"dynamodb:ConditionCheckItem\",\n                                \"dynamodb:CreateBackup\",\n                                \"dynamodb:CreateTable\",\n                                \"dynamodb:CreateTableReplica\",\n                                \"dynamodb:DeleteBackup\",\n                                \"dynamodb:DeleteItem\",\n                                \"dynamodb:DeleteTable\",\n                                \"dynamodb:DeleteTableReplica\",\n                                \"dynamodb:DescribeBackup\",\n                                \"dynamodb:DescribeContinuousBackups\",\n                                \"dynamodb:DescribeContributorInsights\",\n                                \"dynamodb:DescribeExport\",\n                                \"dynamodb:DescribeKinesisStreamingDestination\",\n                                \"dynamodb:DescribeLimits\",\n                                \"dynamodb:DescribeReservedCapacity\",\n                                \"dynamodb:DescribeReservedCapacityOfferings\",\n                                \"dynamodb:DescribeStream\",\n                                \"dynamodb:DescribeTable\",\n                                \"dynamodb:DescribeTableReplicaAutoScaling\",\n                                \"dynamodb:DescribeTimeToLive\",\n                                \"dynamodb:DisableKinesisStreamingDestination\",\n                                \"dynamodb:EnableKinesisStreamingDestination\",\n                                \"dynamodb:ExportTableToPointInTime\",\n                                \"dynamodb:GetItem\",\n                                \"dynamodb:GetRecords\",\n                                \"dynamodb:GetShardIterator\",\n                                \"dynamodb:ListBackups\",\n                                \"dynamodb:ListContributorInsights\",\n                                \"dynamodb:ListExports\",\n                                \"dynamodb:ListStreams\",\n                                \"dynamodb:ListTables\",\n                                \"dynamodb:ListTagsOfResource\",\n                                \"dynamodb:PartiQLDelete\",\n                                \"dynamodb:PartiQLInsert\",\n                                \"dynamodb:PartiQLSelect\",\n                                \"dynamodb:PartiQLUpdate\",\n                                \"dynamodb:PurchaseReservedCapacityOfferings\",\n                                \"dynamodb:PutItem\",\n                                \"dynamodb:Query\",\n                                \"dynamodb:RestoreTableFromBackup\",\n                                \"dynamodb:RestoreTableToPointInTime\",\n                                \"dynamodb:Scan\",\n                                \"dynamodb:UpdateContinuousBackups\",\n                                \"dynamodb:UpdateContributorInsights\",\n                                \"dynamodb:UpdateItem\",\n                                \"dynamodb:UpdateTable\",\n                                \"dynamodb:UpdateTableReplicaAutoScaling\",\n                                \"dynamodb:UpdateTimeToLive\"\n                            ],\n                            Resource: [\n                                `${core.primaryDynamodbTableArn}`,\n                                `${core.primaryDynamodbTableArn}/*`,\n                                `${core.auditLogsDynamodbTableArn}`,\n                                `${core.auditLogsDynamodbTableArn}/*`,\n                                // Attach permissions for elastic search dynamo as well (if ES is enabled).\n                                ...(core.opensearchDynamodbTableArn\n                                    ? [\n                                          `${core.opensearchDynamodbTableArn}`,\n                                          `${core.opensearchDynamodbTableArn}/*`\n                                      ]\n                                    : [])\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForS3\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"s3:ListBucket\",\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\"\n                            ],\n                            Resource: [\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForLambda\",\n                            Effect: \"Allow\",\n                            Action: [\"lambda:InvokeFunction\"],\n                            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n                        },\n                        {\n                            Sid: \"PermissionForCognitoIdp\",\n                            Effect: \"Allow\",\n                            Action: \"cognito-idp:*\",\n                            Resource: `${core.cognitoUserPoolArn}`\n                        },\n                        {\n                            Sid: \"PermissionForEventBus\",\n                            Effect: \"Allow\",\n                            Action: \"events:PutEvents\",\n                            Resource: core.eventBusArn\n                        },\n                        {\n                            Sid: \"PermissionForCloudfront\",\n                            Effect: \"Allow\",\n                            Action: \"cloudfront:CreateInvalidation\",\n                            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`\n                        },\n                        // Attach permissions for elastic search domain as well (if ES is enabled).\n                        ...(core.opensearchDomainArn\n                            ? [\n                                  {\n                                      Sid: \"PermissionForOS\",\n                                      Effect: \"Allow\" as const,\n                                      Action: \"es:*\",\n                                      Resource: [\n                                          `${core.opensearchDomainArn}`,\n                                          `${core.opensearchDomainArn}/*`\n                                      ]\n                                  }\n                              ]\n                            : [])\n                    ]\n                };\n\n                return policy;\n            })\n        }\n    });\n}\n"],"mappings":"AAAA,OAAOA,IAAI,MAAM,MAAM;AACvB,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAClC,OAAOC,WAAW,MAAM,qBAAqB;AAE7C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,gBAAgB,EAAEC,2BAA2B;AACtD,SAASC,UAAU,EAAEC,SAAS;AAC9B,SAASC,eAAe,EAAEC,YAAY;AACtC,SAASC,cAAc;AAevB,MAAMC,+BAA+B,GAAG,4BAA4B;AACpE,MAAMC,qCAAqC,GAAG,yCAAyC;AACvF,MAAMC,iCAAiC,GAAG,mCAAmC;AAI7E,OAAO,MAAMC,UAAU,GAAGX,eAAe,CAAC;EACtCY,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,MAAqB,EAAE;IAC1C,MAAMC,MAAM,GAAGC,yBAAyB,CAACH,GAAG,CAAC;IAC7C,MAAMI,IAAI,GAAGjB,gBAAgB,CAACa,GAAG,EAAE;MAC/BF,IAAI,EAAE,iBAAiB;MACvBI,MAAM,EAAEA,MAAM,CAACG;IACnB,CAAC,CAAC;IAEF,MAAMC,OAAO,GAAGN,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACwB,MAAM,CAACC,QAAQ,EAAE;MACjDX,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJW,WAAW,EAAE,uBAAuB;QACpCC,OAAO,EAAElB,cAAc;QACvBmB,OAAO,EAAE,iBAAiB;QAC1BR,IAAI,EAAEA,IAAI,CAACC,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,EAAE;QACXC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAIjC,MAAM,CAACkC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAInC,MAAM,CAACkC,KAAK,CAACE,WAAW,CAC7BrC,IAAI,CAACsC,IAAI,CAACpB,GAAG,CAACqB,KAAK,CAACC,SAAS,EAAE,eAAe,CAClD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAEpC,2BAA2B,CAAC,CAAC,CAACqC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACR,GAAGzB,MAAM,CAAC0B,GAAG;YACbC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAE7B,GAAG,CAAC8B,SAAS,CAACxC,SAAS,CAAC,CAACyC,iBAAiB;QACrDC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,SAAS,GAAGlC,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACmD,UAAU,CAACC,SAAS,EAAE;MACxDtC,IAAI,EAAEJ,+BAA+B;MACrCK,MAAM,EAAE;QACJW,WAAW,EAAE,2CAA2C;QACxD2B,kBAAkB,EAAE;MACxB;IACJ,CAAC,CAAC;;IAEF;IACArC,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACwB,MAAM,CAAC8B,UAAU,EAAE;MACnCxC,IAAI,EAAEH,qCAAqC;MAC3CI,MAAM,EAAE;QACJwC,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAElC,OAAO,CAACD,MAAM,CAACQ,GAAG;QAC5B4B,SAAS,EAAE,sBAAsB;QACjCC,WAAW,EAAE,oBAAoB,GAAGhD;MACxC;IACJ,CAAC,CAAC;;IAEF;IACAM,GAAG,CAACO,WAAW,CAACvB,GAAG,CAACmD,UAAU,CAACQ,WAAW,EAAE;MACxC7C,IAAI,EAAEF,iCAAiC;MACvCG,MAAM,EAAE;QACJ6C,IAAI,EAAEV,SAAS,CAAC7B,MAAM,CAACP,IAAI;QAC3Be,GAAG,EAAEP,OAAO,CAACD,MAAM,CAACQ,GAAG;QACvBgC,KAAK,EAAEC,IAAI,CAACC,SAAS,CAAC;UAClBC,MAAM,EAAE,eAAe;UACvB,aAAa,EAAE;QACnB,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,OAAO;MACH5C,IAAI;MACJF,MAAM;MACN+C,SAAS,EAAE;QACP3C;MACJ,CAAC;MACD4C,QAAQ,EAAGC,WAA2B,IAAK;QACvC,MAAMC,UAAe,GAAGpD,GAAG,CAACqD,SAAS,CAACD,UAAU;QAChD,IAAI,CAACA,UAAU,EAAE;UACbE,OAAO,CAACC,GAAG,CACP,sEACJ,CAAC;UACD;QACJ;QACA,MAAMC,SAAS,GAAGvE,WAAW,CAACkE,WAAW,CAACrD,IAAI,CAAC;QAC/C,IAAI0D,SAAS,KAAKL,WAAW,CAACrD,IAAI,EAAE;UAChCwD,OAAO,CAACC,GAAG,CAAC,+BAA+BJ,WAAW,CAACrD,IAAI,IAAI,CAAC;UAChE;QACJ;QACA,OAAOsD,UAAU,CAACF,QAAQ,CAACC,WAAW,CAACrD,IAAI,EAAE;UACzChB,IAAI,EAAEqE,WAAW,CAACrE,IAAI;UACtB2E,MAAM,EAAEN,WAAW,CAACM,MAAM;UAC1BjB,QAAQ,EAAElC,OAAO,CAACD,MAAM,CAACQ;QAC7B,CAAC,CAAC;MACN;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAEF,SAASV,yBAAyBA,CAACH,GAAc,EAAE;EAC/C,MAAM0D,UAAU,GAAG1D,GAAG,CAAC8B,SAAS,CAACzC,UAAU,CAAC;EAC5C,MAAMsE,YAAY,GAAGpE,eAAe,CAACS,GAAG,CAAC;EACzC,MAAM4D,SAAS,GAAGpE,YAAY,CAACQ,GAAG,CAAC;EAEnC,OAAOA,GAAG,CAACO,WAAW,CAACvB,GAAG,CAAC6E,GAAG,CAACC,MAAM,EAAE;IACnChE,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJW,WAAW,EAAE,oEAAoE;MACjF;MACAR,MAAM,EAAEnB,MAAM,CAACgF,GAAG,CAAC,CAACL,UAAU,CAAC,CAAC,CAACjC,KAAK,CAAC,CAAC,CAACuC,IAAI,CAAC,KAAK;QAC/C,MAAM9D,MAA8B,GAAG;UACnC+D,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;YACDC,QAAQ,EAAE,CACN,GAAGN,IAAI,CAACO,uBAAuB,EAAE,EACjC,GAAGP,IAAI,CAACO,uBAAuB,IAAI,EACnC,GAAGP,IAAI,CAACQ,yBAAyB,EAAE,EACnC,GAAGR,IAAI,CAACQ,yBAAyB,IAAI;YACrC;YACA,IAAIR,IAAI,CAACS,0BAA0B,GAC7B,CACI,GAAGT,IAAI,CAACS,0BAA0B,EAAE,EACpC,GAAGT,IAAI,CAACS,0BAA0B,IAAI,CACzC,GACD,EAAE,CAAC;UAEjB,CAAC,EACD;YACIN,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;YACDC,QAAQ,EAAE,CACNvF,MAAM,CAAC2F,WAAW,gBAAgBV,IAAI,CAACW,mBAAmB,EAAE,EAC5D5F,MAAM,CAAC2F,WAAW,gBAAgBV,IAAI,CAACW,mBAAmB,IAAI;UAEtE,CAAC,EACD;YACIR,GAAG,EAAE,qBAAqB;YAC1BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;YACjCC,QAAQ,EAAEvF,MAAM,CAAC2F,WAAW,kBAAkBd,SAAS,IAAID,YAAY;UAC3E,CAAC,EACD;YACIQ,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,eAAe;YACvBC,QAAQ,EAAE,GAAGN,IAAI,CAACY,kBAAkB;UACxC,CAAC,EACD;YACIT,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,kBAAkB;YAC1BC,QAAQ,EAAEN,IAAI,CAACa;UACnB,CAAC,EACD;YACIV,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAEvF,MAAM,CAAC2F,WAAW,uBAAuBf,YAAY;UACnE,CAAC;UACD;UACA,IAAIK,IAAI,CAACc,mBAAmB,GACtB,CACI;YACIX,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAgB;YACxBC,MAAM,EAAE,MAAM;YACdC,QAAQ,EAAE,CACN,GAAGN,IAAI,CAACc,mBAAmB,EAAE,EAC7B,GAAGd,IAAI,CAACc,mBAAmB,IAAI;UAEvC,CAAC,CACJ,GACD,EAAE,CAAC;QAEjB,CAAC;QAED,OAAO5E,MAAM;MACjB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiGraphql.js","sources":["../../../../src/pulumi/apps/api/ApiGraphql.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport toKebabCase from \"lodash/kebabCase.js\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils.js\";\nimport { CoreOutput, VpcConfig } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils.js\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\n\ninterface GraphqlParams {\n    env: Record<string, any>;\n}\n\nexport interface AddRouteParams {\n    /**\n     * Must be in kebab case (a-z and -)\n     */\n    name: string;\n    path: `/${string}`;\n    method: \"DELETE\" | \"GET\" | \"HEAD\" | \"PATCH\" | \"POST\" | \"PUT\" | \"OPTIONS\" | \"ANY\";\n}\n\nconst EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;\nconst EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;\nconst EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;\n\nexport type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;\n\nexport const ApiGraphql = createAppModule({\n    name: \"ApiGraphql\",\n    config(app: PulumiApp, params: GraphqlParams) {\n        const policy = createGraphqlLambdaPolicy(app);\n        const role = createLambdaRole(app, {\n            name: \"api-lambda-role\",\n            policy: policy.output\n        });\n\n        const graphql = app.addResource(aws.lambda.Function, {\n            name: \"graphql\",\n            config: {\n                description: \"Webiny's GraphQL APIs\",\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 30,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"graphql/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        ...params.env,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig,\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        // Create event rule.\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,\n            config: {\n                description: \"Enable us to empty the trash-bin ever day\",\n                scheduleExpression: \"cron(0 3 * * ? *)\"\n            }\n        });\n\n        // Add required permission to the target lambda.\n        app.addResource(aws.lambda.Permission, {\n            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.output.arn,\n                principal: \"events.amazonaws.com\",\n                statementId: \"allow-rule-invoke-\" + EMPTY_TRASH_BIN_EVENT_RULE_NAME\n            }\n        });\n\n        // Target the main graphql lambda.\n        app.addResource(aws.cloudwatch.EventTarget, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,\n            config: {\n                rule: eventRule.output.name,\n                arn: graphql.output.arn,\n                input: JSON.stringify({\n                    source: \"webiny.events\",\n                    \"detail-type\": \"WebinyEmptyTrashBin\"\n                })\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                graphql\n            },\n            addRoute: (routeParams: AddRouteParams) => {\n                const apiGateway: any = app.resources.apiGateway;\n                if (!apiGateway) {\n                    console.log(\n                        \"Could not add route because there is no apiGateway in the resources.\"\n                    );\n                    return;\n                }\n                const kebabName = toKebabCase(routeParams.name);\n                if (kebabName !== routeParams.name) {\n                    console.log(`Route name is not allowed: \"${routeParams.name}\".`);\n                    return;\n                }\n                return apiGateway.addRoute(routeParams.name, {\n                    path: routeParams.path,\n                    method: routeParams.method,\n                    function: graphql.output.arn\n                });\n            }\n        };\n    }\n});\n\nfunction createGraphqlLambdaPolicy(app: PulumiApp) {\n    const coreOutput = app.getModule(CoreOutput);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"ApiGraphqlLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3, Lambda and Cognito IDP\",\n            // Core is pulumi.Output, so we need to run apply() to resolve policy based on it\n            policy: pulumi.all([coreOutput]).apply(([core]) => {\n                const policy: aws.iam.PolicyDocument = {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"dynamodb:BatchGetItem\",\n                                \"dynamodb:BatchWriteItem\",\n                                \"dynamodb:ConditionCheckItem\",\n                                \"dynamodb:CreateBackup\",\n                                \"dynamodb:CreateTable\",\n                                \"dynamodb:CreateTableReplica\",\n                                \"dynamodb:DeleteBackup\",\n                                \"dynamodb:DeleteItem\",\n                                \"dynamodb:DeleteTable\",\n                                \"dynamodb:DeleteTableReplica\",\n                                \"dynamodb:DescribeBackup\",\n                                \"dynamodb:DescribeContinuousBackups\",\n                                \"dynamodb:DescribeContributorInsights\",\n                                \"dynamodb:DescribeExport\",\n                                \"dynamodb:DescribeKinesisStreamingDestination\",\n                                \"dynamodb:DescribeLimits\",\n                                \"dynamodb:DescribeReservedCapacity\",\n                                \"dynamodb:DescribeReservedCapacityOfferings\",\n                                \"dynamodb:DescribeStream\",\n                                \"dynamodb:DescribeTable\",\n                                \"dynamodb:DescribeTableReplicaAutoScaling\",\n                                \"dynamodb:DescribeTimeToLive\",\n                                \"dynamodb:DisableKinesisStreamingDestination\",\n                                \"dynamodb:EnableKinesisStreamingDestination\",\n                                \"dynamodb:ExportTableToPointInTime\",\n                                \"dynamodb:GetItem\",\n                                \"dynamodb:GetRecords\",\n                                \"dynamodb:GetShardIterator\",\n                                \"dynamodb:ListBackups\",\n                                \"dynamodb:ListContributorInsights\",\n                                \"dynamodb:ListExports\",\n                                \"dynamodb:ListStreams\",\n                                \"dynamodb:ListTables\",\n                                \"dynamodb:ListTagsOfResource\",\n                                \"dynamodb:PartiQLDelete\",\n                                \"dynamodb:PartiQLInsert\",\n                                \"dynamodb:PartiQLSelect\",\n                                \"dynamodb:PartiQLUpdate\",\n                                \"dynamodb:PurchaseReservedCapacityOfferings\",\n                                \"dynamodb:PutItem\",\n                                \"dynamodb:Query\",\n                                \"dynamodb:RestoreTableFromBackup\",\n                                \"dynamodb:RestoreTableToPointInTime\",\n                                \"dynamodb:Scan\",\n                                \"dynamodb:UpdateContinuousBackups\",\n                                \"dynamodb:UpdateContributorInsights\",\n                                \"dynamodb:UpdateItem\",\n                                \"dynamodb:UpdateTable\",\n                                \"dynamodb:UpdateTableReplicaAutoScaling\",\n                                \"dynamodb:UpdateTimeToLive\"\n                            ],\n                            Resource: [\n                                `${core.primaryDynamodbTableArn}`,\n                                `${core.primaryDynamodbTableArn}/*`,\n                                `${core.auditLogsDynamodbTableArn}`,\n                                `${core.auditLogsDynamodbTableArn}/*`,\n                                // Attach permissions for elastic search dynamo as well (if ES is enabled).\n                                ...(core.opensearchDynamodbTableArn\n                                    ? [\n                                          `${core.opensearchDynamodbTableArn}`,\n                                          `${core.opensearchDynamodbTableArn}/*`\n                                      ]\n                                    : [])\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForS3\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"s3:ListBucket\",\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\"\n                            ],\n                            Resource: [\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForLambda\",\n                            Effect: \"Allow\",\n                            Action: [\"lambda:InvokeFunction\"],\n                            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n                        },\n                        {\n                            Sid: \"PermissionForCognitoIdp\",\n                            Effect: \"Allow\",\n                            Action: \"cognito-idp:*\",\n                            Resource: `${core.cognitoUserPoolArn}`\n                        },\n                        {\n                            Sid: \"PermissionForEventBus\",\n                            Effect: \"Allow\",\n                            Action: \"events:PutEvents\",\n                            Resource: core.eventBusArn\n                        },\n                        {\n                            Sid: \"PermissionForCloudfront\",\n                            Effect: \"Allow\",\n                            Action: \"cloudfront:CreateInvalidation\",\n                            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`\n                        },\n                        // Attach permissions for elastic search domain as well (if ES is enabled).\n                        ...(core.opensearchDomainArn\n                            ? [\n                                  {\n                                      Sid: \"PermissionForOS\",\n                                      Effect: \"Allow\" as const,\n                                      Action: \"es:*\",\n                                      Resource: [\n                                          `${core.opensearchDomainArn}`,\n                                          `${core.opensearchDomainArn}/*`\n                                      ]\n                                  }\n                              ]\n                            : [])\n                    ]\n                };\n\n                return policy;\n            })\n        }\n    });\n}\n"],"names":["EMPTY_TRASH_BIN_EVENT_RULE_NAME","EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME","EMPTY_TRASH_BIN_EVENT_RULE_TARGET","ApiGraphql","createAppModule","app","params","policy","createGraphqlLambdaPolicy","role","createLambdaRole","graphql","aws","LAMBDA_RUNTIME","pulumi","path","getCommonLambdaEnvVariables","value","VpcConfig","eventRule","JSON","routeParams","apiGateway","console","kebabName","toKebabCase","coreOutput","CoreOutput","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","core"],"mappings":";;;;;;;;;AAwBA,MAAMA,kCAAkC;AACxC,MAAMC,wCAAwC;AAC9C,MAAMC,oCAAoC;AAInC,MAAMC,aAAaC,gBAAgB;IACtC,MAAM;IACN,QAAOC,GAAc,EAAEC,MAAqB;QACxC,MAAMC,SAASC,0BAA0BH;QACzC,MAAMI,OAAOC,iBAAiBL,KAAK;YAC/B,MAAM;YACN,QAAQE,OAAO,MAAM;QACzB;QAEA,MAAMI,UAAUN,IAAI,WAAW,CAACO,uCAAAA,MAAAA,CAAAA,QAAmB,EAAE;YACjD,MAAM;YACN,QAAQ;gBACJ,aAAa;gBACb,SAASC;gBACT,SAAS;gBACT,MAAMJ,KAAK,MAAM,CAAC,GAAG;gBACrB,SAAS;gBACT,YAAY;gBACZ,MAAM,IAAIK,0CAAAA,KAAAA,CAAAA,YAAyB,CAAC;oBAChC,KAAK,IAAIA,0CAAAA,KAAAA,CAAAA,WAAwB,CAC7BC,KAAK,IAAI,CAACV,IAAI,KAAK,CAAC,SAAS,EAAE;gBAEvC;gBACA,aAAa;oBACT,WAAWW,8BAA8B,KAAK,CAACC,CAAAA,QAAU;4BACrD,GAAGA,KAAK;4BACR,GAAGX,OAAO,GAAG;4BACb,qCAAqC;wBACzC;gBACJ;gBACA,WAAWD,IAAI,SAAS,CAACa,WAAW,iBAAiB;gBACrD,eAAe;oBACX,WAAW;gBACf;YACJ;QACJ;QAGA,MAAMC,YAAYd,IAAI,WAAW,CAACO,uCAAAA,UAAAA,CAAAA,SAAwB,EAAE;YACxD,MAAMZ;YACN,QAAQ;gBACJ,aAAa;gBACb,oBAAoB;YACxB;QACJ;QAGAK,IAAI,WAAW,CAACO,uCAAAA,MAAAA,CAAAA,UAAqB,EAAE;YACnC,MAAMX;YACN,QAAQ;gBACJ,QAAQ;gBACR,UAAUU,QAAQ,MAAM,CAAC,GAAG;gBAC5B,WAAW;gBACX,aAAa,uBAAuBX;YACxC;QACJ;QAGAK,IAAI,WAAW,CAACO,uCAAAA,UAAAA,CAAAA,WAA0B,EAAE;YACxC,MAAMV;YACN,QAAQ;gBACJ,MAAMiB,UAAU,MAAM,CAAC,IAAI;gBAC3B,KAAKR,QAAQ,MAAM,CAAC,GAAG;gBACvB,OAAOS,KAAK,SAAS,CAAC;oBAClB,QAAQ;oBACR,eAAe;gBACnB;YACJ;QACJ;QAEA,OAAO;YACHX;YACAF;YACA,WAAW;gBACPI;YACJ;YACA,UAAU,CAACU;gBACP,MAAMC,aAAkBjB,IAAI,SAAS,CAAC,UAAU;gBAChD,IAAI,CAACiB,YAAY,YACbC,QAAQ,GAAG,CACP;gBAIR,MAAMC,YAAYC,UAAYJ,YAAY,IAAI;gBAC9C,IAAIG,cAAcH,YAAY,IAAI,EAAE,YAChCE,QAAQ,GAAG,CAAC,CAAC,4BAA4B,EAAEF,YAAY,IAAI,CAAC,EAAE,CAAC;gBAGnE,OAAOC,WAAW,QAAQ,CAACD,YAAY,IAAI,EAAE;oBACzC,MAAMA,YAAY,IAAI;oBACtB,QAAQA,YAAY,MAAM;oBAC1B,UAAUV,QAAQ,MAAM,CAAC,GAAG;gBAChC;YACJ;QACJ;IACJ;AACJ;AAEA,SAASH,0BAA0BH,GAAc;IAC7C,MAAMqB,aAAarB,IAAI,SAAS,CAACsB;IACjC,MAAMC,eAAeC,gBAAgBxB;IACrC,MAAMyB,YAAYC,aAAa1B;IAE/B,OAAOA,IAAI,WAAW,CAACO,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;QACnC,MAAM;QACN,QAAQ;YACJ,aAAa;YAEb,QAAQE,0CAAAA,GAAU,CAAC;gBAACY;aAAW,EAAE,KAAK,CAAC,CAAC,CAACM,KAAK;gBAC1C,MAAMzB,SAAiC;oBACnC,SAAS;oBACT,WAAW;wBACP;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;gCACJ;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;gCACA;6BACH;4BACD,UAAU;gCACN,GAAGyB,KAAK,uBAAuB,EAAE;gCACjC,GAAGA,KAAK,uBAAuB,CAAC,EAAE,CAAC;gCACnC,GAAGA,KAAK,yBAAyB,EAAE;gCACnC,GAAGA,KAAK,yBAAyB,CAAC,EAAE,CAAC;mCAEjCA,KAAK,0BAA0B,GAC7B;oCACI,GAAGA,KAAK,0BAA0B,EAAE;oCACpC,GAAGA,KAAK,0BAA0B,CAAC,EAAE,CAAC;iCACzC,GACD,EAAE;6BACX;wBACL;wBACA;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;gCACJ;gCACA;gCACA;gCACA;gCACA;gCACA;6BACH;4BACD,UAAU;gCACNlB,0CAAAA,WAAkB,CAAC,aAAa,EAAEkB,KAAK,mBAAmB,CAAC,CAAC;gCAC5DlB,0CAAAA,WAAkB,CAAC,aAAa,EAAEkB,KAAK,mBAAmB,CAAC,EAAE,CAAC;6BACjE;wBACL;wBACA;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;gCAAC;6BAAwB;4BACjC,UAAUlB,0CAAAA,WAAkB,CAAC,eAAe,EAAEgB,UAAU,CAAC,EAAEF,aAAa,WAAW,CAAC;wBACxF;wBACA;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;4BACR,UAAU,GAAGI,KAAK,kBAAkB,EAAE;wBAC1C;wBACA;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;4BACR,UAAUA,KAAK,WAAW;wBAC9B;wBACA;4BACI,KAAK;4BACL,QAAQ;4BACR,QAAQ;4BACR,UAAUlB,0CAAAA,WAAkB,CAAC,oBAAoB,EAAEc,aAAa,eAAe,CAAC;wBACpF;2BAEII,KAAK,mBAAmB,GACtB;4BACI;gCACI,KAAK;gCACL,QAAQ;gCACR,QAAQ;gCACR,UAAU;oCACN,GAAGA,KAAK,mBAAmB,EAAE;oCAC7B,GAAGA,KAAK,mBAAmB,CAAC,EAAE,CAAC;iCAClC;4BACL;yBACH,GACD,EAAE;qBACX;gBACL;gBAEA,OAAOzB;YACX;QACJ;IACJ;AACJ"}

package/pulumi/apps/api/ApiOutput.js

@@ -1,35 +1,34 @@
 import { createAppModule } from "@webiny/pulumi";
 import { getStackOutput } from "@webiny/project";
-export const ApiOutput = createAppModule({
-  name: "ApiOutput",
-  config(app) {
-    return app.addHandler(async () => {
-      const output = await getStackOutput("api");
-      if (!output) {
-        throw new Error("API application is not deployed.");
-      }
-      return {
-        apiDomain: output["apiDomain"],
-        apiUrl: output["apiUrl"],
-        graphqlLambdaRole: output["graphqlLambdaRole"],
-        graphqlLambdaRoleName: output["graphqlLambdaRoleName"],
-        cognitoAppClientId: output["cognitoAppClientId"],
-        cognitoUserPoolId: output["cognitoUserPoolId"],
-        cognitoUserPoolPasswordPolicy: output["cognitoUserPoolPasswordPolicy"],
-        dynamoDbTable: output["dynamoDbTable"],
-        region: output["region"],
-        websocketApiId: output["websocketApiId"],
-        websocketApiUrl: output["websocketApiUrl"],
-        graphqlLambdaName: output["graphqlLambdaName"],
-        backgroundTaskLambdaArn: output["backgroundTaskLambdaArn"],
-        backgroundTaskStepFunctionArn: output["backgroundTaskStepFunctionArn"],
-        fileManagerManageLambdaArn: output["fileManagerManageLambdaArn"],
-        fileManagerManageLambdaRole: output["fileManagerManageLambdaRole"],
-        fileManagerManageLambdaRoleName: output["fileManagerManageLambdaRoleName"],
-        fileManagerDownloadLambdaArn: output["fileManagerDownloadLambdaArn"]
-      };
-    });
-  }
+const ApiOutput = createAppModule({
+    name: "ApiOutput",
+    config (app) {
+        return app.addHandler(async ()=>{
+            const output = await getStackOutput("api");
+            if (!output) throw new Error("API application is not deployed.");
+            return {
+                apiDomain: output["apiDomain"],
+                apiUrl: output["apiUrl"],
+                graphqlLambdaRole: output["graphqlLambdaRole"],
+                graphqlLambdaRoleName: output["graphqlLambdaRoleName"],
+                cognitoAppClientId: output["cognitoAppClientId"],
+                cognitoUserPoolId: output["cognitoUserPoolId"],
+                cognitoUserPoolPasswordPolicy: output["cognitoUserPoolPasswordPolicy"],
+                dynamoDbTable: output["dynamoDbTable"],
+                region: output["region"],
+                websocketApiId: output["websocketApiId"],
+                websocketApiUrl: output["websocketApiUrl"],
+                graphqlLambdaName: output["graphqlLambdaName"],
+                backgroundTaskLambdaArn: output["backgroundTaskLambdaArn"],
+                backgroundTaskStepFunctionArn: output["backgroundTaskStepFunctionArn"],
+                fileManagerManageLambdaArn: output["fileManagerManageLambdaArn"],
+                fileManagerManageLambdaRole: output["fileManagerManageLambdaRole"],
+                fileManagerManageLambdaRoleName: output["fileManagerManageLambdaRoleName"],
+                fileManagerDownloadLambdaArn: output["fileManagerDownloadLambdaArn"]
+            };
+        });
+    }
 });
+export { ApiOutput };
 
 //# sourceMappingURL=ApiOutput.js.map

package/pulumi/apps/api/ApiOutput.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAppModule","getStackOutput","ApiOutput","name","config","app","addHandler","output","Error","apiDomain","apiUrl","graphqlLambdaRole","graphqlLambdaRoleName","cognitoAppClientId","cognitoUserPoolId","cognitoUserPoolPasswordPolicy","dynamoDbTable","region","websocketApiId","websocketApiUrl","graphqlLambdaName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","fileManagerManageLambdaArn","fileManagerManageLambdaRole","fileManagerManageLambdaRoleName","fileManagerDownloadLambdaArn"],"sources":["ApiOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getStackOutput } from \"@webiny/project\";\nimport { type IDefaultStackOutput } from \"~/pulumi/types.js\";\n\nexport type ApiOutput = PulumiAppModule<typeof ApiOutput>;\n\nexport const ApiOutput = createAppModule({\n    name: \"ApiOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = await getStackOutput<IDefaultStackOutput>(\"api\");\n\n            if (!output) {\n                throw new Error(\"API application is not deployed.\");\n            }\n\n            return {\n                apiDomain: output[\"apiDomain\"],\n                apiUrl: output[\"apiUrl\"],\n                graphqlLambdaRole: output[\"graphqlLambdaRole\"],\n                graphqlLambdaRoleName: output[\"graphqlLambdaRoleName\"],\n                cognitoAppClientId: output[\"cognitoAppClientId\"],\n                cognitoUserPoolId: output[\"cognitoUserPoolId\"],\n                cognitoUserPoolPasswordPolicy: output[\"cognitoUserPoolPasswordPolicy\"],\n                dynamoDbTable: output[\"dynamoDbTable\"],\n                region: output[\"region\"],\n                websocketApiId: output[\"websocketApiId\"],\n                websocketApiUrl: output[\"websocketApiUrl\"],\n                graphqlLambdaName: output[\"graphqlLambdaName\"],\n                backgroundTaskLambdaArn: output[\"backgroundTaskLambdaArn\"],\n                backgroundTaskStepFunctionArn: output[\"backgroundTaskStepFunctionArn\"],\n                fileManagerManageLambdaArn: output[\"fileManagerManageLambdaArn\"],\n                fileManagerManageLambdaRole: output[\"fileManagerManageLambdaRole\"],\n                fileManagerManageLambdaRoleName: output[\"fileManagerManageLambdaRoleName\"],\n                fileManagerDownloadLambdaArn: output[\"fileManagerDownloadLambdaArn\"]\n            };\n        });\n    }\n});\n"],"mappings":"AACA,SAASA,eAAe,QAAQ,gBAAgB;AAChD,SAASC,cAAc,QAAQ,iBAAiB;AAKhD,OAAO,MAAMC,SAAS,GAAGF,eAAe,CAAC;EACrCG,IAAI,EAAE,WAAW;EACjBC,MAAMA,CAACC,GAAG,EAAE;IACR,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY;MAC9B,MAAMC,MAAM,GAAG,MAAMN,cAAc,CAAsB,KAAK,CAAC;MAE/D,IAAI,CAACM,MAAM,EAAE;QACT,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAAC;MACvD;MAEA,OAAO;QACHC,SAAS,EAAEF,MAAM,CAAC,WAAW,CAAC;QAC9BG,MAAM,EAAEH,MAAM,CAAC,QAAQ,CAAC;QACxBI,iBAAiB,EAAEJ,MAAM,CAAC,mBAAmB,CAAC;QAC9CK,qBAAqB,EAAEL,MAAM,CAAC,uBAAuB,CAAC;QACtDM,kBAAkB,EAAEN,MAAM,CAAC,oBAAoB,CAAC;QAChDO,iBAAiB,EAAEP,MAAM,CAAC,mBAAmB,CAAC;QAC9CQ,6BAA6B,EAAER,MAAM,CAAC,+BAA+B,CAAC;QACtES,aAAa,EAAET,MAAM,CAAC,eAAe,CAAC;QACtCU,MAAM,EAAEV,MAAM,CAAC,QAAQ,CAAC;QACxBW,cAAc,EAAEX,MAAM,CAAC,gBAAgB,CAAC;QACxCY,eAAe,EAAEZ,MAAM,CAAC,iBAAiB,CAAC;QAC1Ca,iBAAiB,EAAEb,MAAM,CAAC,mBAAmB,CAAC;QAC9Cc,uBAAuB,EAAEd,MAAM,CAAC,yBAAyB,CAAC;QAC1De,6BAA6B,EAAEf,MAAM,CAAC,+BAA+B,CAAC;QACtEgB,0BAA0B,EAAEhB,MAAM,CAAC,4BAA4B,CAAC;QAChEiB,2BAA2B,EAAEjB,MAAM,CAAC,6BAA6B,CAAC;QAClEkB,+BAA+B,EAAElB,MAAM,CAAC,iCAAiC,CAAC;QAC1EmB,4BAA4B,EAAEnB,MAAM,CAAC,8BAA8B;MACvE,CAAC;IACL,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiOutput.js","sources":["../../../../src/pulumi/apps/api/ApiOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getStackOutput } from \"@webiny/project\";\nimport { type IDefaultStackOutput } from \"~/pulumi/types.js\";\n\nexport type ApiOutput = PulumiAppModule<typeof ApiOutput>;\n\nexport const ApiOutput = createAppModule({\n    name: \"ApiOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = await getStackOutput<IDefaultStackOutput>(\"api\");\n\n            if (!output) {\n                throw new Error(\"API application is not deployed.\");\n            }\n\n            return {\n                apiDomain: output[\"apiDomain\"],\n                apiUrl: output[\"apiUrl\"],\n                graphqlLambdaRole: output[\"graphqlLambdaRole\"],\n                graphqlLambdaRoleName: output[\"graphqlLambdaRoleName\"],\n                cognitoAppClientId: output[\"cognitoAppClientId\"],\n                cognitoUserPoolId: output[\"cognitoUserPoolId\"],\n                cognitoUserPoolPasswordPolicy: output[\"cognitoUserPoolPasswordPolicy\"],\n                dynamoDbTable: output[\"dynamoDbTable\"],\n                region: output[\"region\"],\n                websocketApiId: output[\"websocketApiId\"],\n                websocketApiUrl: output[\"websocketApiUrl\"],\n                graphqlLambdaName: output[\"graphqlLambdaName\"],\n                backgroundTaskLambdaArn: output[\"backgroundTaskLambdaArn\"],\n                backgroundTaskStepFunctionArn: output[\"backgroundTaskStepFunctionArn\"],\n                fileManagerManageLambdaArn: output[\"fileManagerManageLambdaArn\"],\n                fileManagerManageLambdaRole: output[\"fileManagerManageLambdaRole\"],\n                fileManagerManageLambdaRoleName: output[\"fileManagerManageLambdaRoleName\"],\n                fileManagerDownloadLambdaArn: output[\"fileManagerDownloadLambdaArn\"]\n            };\n        });\n    }\n});\n"],"names":["ApiOutput","createAppModule","app","output","getStackOutput","Error"],"mappings":";;AAOO,MAAMA,YAAYC,gBAAgB;IACrC,MAAM;IACN,QAAOC,GAAG;QACN,OAAOA,IAAI,UAAU,CAAC;YAClB,MAAMC,SAAS,MAAMC,eAAoC;YAEzD,IAAI,CAACD,QACD,MAAM,IAAIE,MAAM;YAGpB,OAAO;gBACH,WAAWF,MAAM,CAAC,YAAY;gBAC9B,QAAQA,MAAM,CAAC,SAAS;gBACxB,mBAAmBA,MAAM,CAAC,oBAAoB;gBAC9C,uBAAuBA,MAAM,CAAC,wBAAwB;gBACtD,oBAAoBA,MAAM,CAAC,qBAAqB;gBAChD,mBAAmBA,MAAM,CAAC,oBAAoB;gBAC9C,+BAA+BA,MAAM,CAAC,gCAAgC;gBACtE,eAAeA,MAAM,CAAC,gBAAgB;gBACtC,QAAQA,MAAM,CAAC,SAAS;gBACxB,gBAAgBA,MAAM,CAAC,iBAAiB;gBACxC,iBAAiBA,MAAM,CAAC,kBAAkB;gBAC1C,mBAAmBA,MAAM,CAAC,oBAAoB;gBAC9C,yBAAyBA,MAAM,CAAC,0BAA0B;gBAC1D,+BAA+BA,MAAM,CAAC,gCAAgC;gBACtE,4BAA4BA,MAAM,CAAC,6BAA6B;gBAChE,6BAA6BA,MAAM,CAAC,8BAA8B;gBAClE,iCAAiCA,MAAM,CAAC,kCAAkC;gBAC1E,8BAA8BA,MAAM,CAAC,+BAA+B;YACxE;QACJ;IACJ;AACJ"}