@webiny/project-aws 6.3.0 → 6.4.0-beta.0

package/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createSyncResourceName","attachDynamoDbPermissions","params","app","syncSystem","core","resolverLambdaRoleName","lambdaToDynamoDbResourceName","dynamoDbPolicy","addResource","iam","Policy","name","config","description","policy","Version","Statement","Sid","Effect","Action","Resource","primaryDynamodbTableArn","apply","arn","lambdaRolePolicyAttachment","RolePolicyAttachment","role","policyArn","output"],"sources":["attachDynamoDbPermissions.ts"],"sourcesContent":["/**\n * We need to attach Sync System Lambda policy to access DynamoDB in the Webiny system.\n */\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachDynamoDbPermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachDynamoDbPermissions = (params: IAttachDynamoDbPermissionsParams) => {\n    const { app, syncSystem, core } = params;\n\n    const { resolverLambdaRoleName } = syncSystem;\n\n    const lambdaToDynamoDbResourceName = createSyncResourceName(`resolver-lambda-to-dynamodb`);\n\n    const dynamoDbPolicy = app.addResource(aws.iam.Policy, {\n        name: `${lambdaToDynamoDbResourceName}-policy`,\n        config: {\n            description: \"This policy enables access from Sync System Lambda to Webiny DynamoDB.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToDynamoDb\",\n                        Effect: \"Allow\",\n                        Action: [\n                            \"dynamodb:BatchGetItem\",\n                            \"dynamodb:BatchWriteItem\",\n                            \"dynamodb:ConditionCheckItem\",\n                            \"dynamodb:CreateBackup\",\n                            \"dynamodb:CreateTable\",\n                            \"dynamodb:CreateTableReplica\",\n                            \"dynamodb:DeleteBackup\",\n                            \"dynamodb:DeleteItem\",\n                            \"dynamodb:DeleteTable\",\n                            \"dynamodb:DeleteTableReplica\",\n                            \"dynamodb:DescribeBackup\",\n                            \"dynamodb:DescribeContinuousBackups\",\n                            \"dynamodb:DescribeContributorInsights\",\n                            \"dynamodb:DescribeExport\",\n                            \"dynamodb:DescribeKinesisStreamingDestination\",\n                            \"dynamodb:DescribeLimits\",\n                            \"dynamodb:DescribeReservedCapacity\",\n                            \"dynamodb:DescribeReservedCapacityOfferings\",\n                            \"dynamodb:DescribeStream\",\n                            \"dynamodb:DescribeTable\",\n                            \"dynamodb:DescribeTableReplicaAutoScaling\",\n                            \"dynamodb:DescribeTimeToLive\",\n                            \"dynamodb:DisableKinesisStreamingDestination\",\n                            \"dynamodb:EnableKinesisStreamingDestination\",\n                            \"dynamodb:ExportTableToPointInTime\",\n                            \"dynamodb:GetItem\",\n                            \"dynamodb:GetRecords\",\n                            \"dynamodb:GetShardIterator\",\n                            \"dynamodb:ListBackups\",\n                            \"dynamodb:ListContributorInsights\",\n                            \"dynamodb:ListExports\",\n                            \"dynamodb:ListStreams\",\n                            \"dynamodb:ListTables\",\n                            \"dynamodb:ListTagsOfResource\",\n                            \"dynamodb:PartiQLDelete\",\n                            \"dynamodb:PartiQLInsert\",\n                            \"dynamodb:PartiQLSelect\",\n                            \"dynamodb:PartiQLUpdate\",\n                            \"dynamodb:PurchaseReservedCapacityOfferings\",\n                            \"dynamodb:PutItem\",\n                            \"dynamodb:Query\",\n                            \"dynamodb:RestoreTableFromBackup\",\n                            \"dynamodb:RestoreTableToPointInTime\",\n                            \"dynamodb:Scan\",\n                            \"dynamodb:UpdateContinuousBackups\",\n                            \"dynamodb:UpdateContributorInsights\",\n                            \"dynamodb:UpdateItem\",\n                            \"dynamodb:UpdateTable\",\n                            \"dynamodb:UpdateTableReplicaAutoScaling\",\n                            \"dynamodb:UpdateTimeToLive\"\n                        ],\n                        Resource: [\n                            core.primaryDynamodbTableArn.apply(arn => arn),\n                            core.primaryDynamodbTableArn.apply(arn => `${arn}/*`)\n                        ]\n                    }\n                ]\n            }\n        }\n    });\n\n    const lambdaRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${lambdaToDynamoDbResourceName}-role-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: dynamoDbPolicy.output.arn\n        }\n    });\n\n    return {\n        dynamoDbPolicy,\n        lambdaRolePolicyAttachment\n    };\n};\n"],"mappings":"AAAA;AACA;AACA;AACA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,sBAAsB;AAU/B,OAAO,MAAMC,yBAAyB,GAAIC,MAAwC,IAAK;EACnF,MAAM;IAAEC,GAAG;IAAEC,UAAU;IAAEC;EAAK,CAAC,GAAGH,MAAM;EAExC,MAAM;IAAEI;EAAuB,CAAC,GAAGF,UAAU;EAE7C,MAAMG,4BAA4B,GAAGP,sBAAsB,CAAC,6BAA6B,CAAC;EAE1F,MAAMQ,cAAc,GAAGL,GAAG,CAACM,WAAW,CAACV,GAAG,CAACW,GAAG,CAACC,MAAM,EAAE;IACnDC,IAAI,EAAE,GAAGL,4BAA4B,SAAS;IAC9CM,MAAM,EAAE;MACJC,WAAW,EAAE,wEAAwE;MACrFC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,GAAG,EAAE,mCAAmC;UACxCC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;UACDC,QAAQ,EAAE,CACNhB,IAAI,CAACiB,uBAAuB,CAACC,KAAK,CAACC,GAAG,IAAIA,GAAG,CAAC,EAC9CnB,IAAI,CAACiB,uBAAuB,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC;QAE7D,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,0BAA0B,GAAGtB,GAAG,CAACM,WAAW,CAACV,GAAG,CAACW,GAAG,CAACgB,oBAAoB,EAAE;IAC7Ed,IAAI,EAAE,GAAGL,4BAA4B,yBAAyB;IAC9DM,MAAM,EAAE;MACJc,IAAI,EAAErB,sBAAsB;MAC5BsB,SAAS,EAAEpB,cAAc,CAACqB,MAAM,CAACL;IACrC;EACJ,CAAC,CAAC;EAEF,OAAO;IACHhB,cAAc;IACdiB;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.ts"],"sourcesContent":["/**\n * We need to attach Sync System Lambda policy to access DynamoDB in the Webiny system.\n */\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachDynamoDbPermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachDynamoDbPermissions = (params: IAttachDynamoDbPermissionsParams) => {\n    const { app, syncSystem, core } = params;\n\n    const { resolverLambdaRoleName } = syncSystem;\n\n    const lambdaToDynamoDbResourceName = createSyncResourceName(`resolver-lambda-to-dynamodb`);\n\n    const dynamoDbPolicy = app.addResource(aws.iam.Policy, {\n        name: `${lambdaToDynamoDbResourceName}-policy`,\n        config: {\n            description: \"This policy enables access from Sync System Lambda to Webiny DynamoDB.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToDynamoDb\",\n                        Effect: \"Allow\",\n                        Action: [\n                            \"dynamodb:BatchGetItem\",\n                            \"dynamodb:BatchWriteItem\",\n                            \"dynamodb:ConditionCheckItem\",\n                            \"dynamodb:CreateBackup\",\n                            \"dynamodb:CreateTable\",\n                            \"dynamodb:CreateTableReplica\",\n                            \"dynamodb:DeleteBackup\",\n                            \"dynamodb:DeleteItem\",\n                            \"dynamodb:DeleteTable\",\n                            \"dynamodb:DeleteTableReplica\",\n                            \"dynamodb:DescribeBackup\",\n                            \"dynamodb:DescribeContinuousBackups\",\n                            \"dynamodb:DescribeContributorInsights\",\n                            \"dynamodb:DescribeExport\",\n                            \"dynamodb:DescribeKinesisStreamingDestination\",\n                            \"dynamodb:DescribeLimits\",\n                            \"dynamodb:DescribeReservedCapacity\",\n                            \"dynamodb:DescribeReservedCapacityOfferings\",\n                            \"dynamodb:DescribeStream\",\n                            \"dynamodb:DescribeTable\",\n                            \"dynamodb:DescribeTableReplicaAutoScaling\",\n                            \"dynamodb:DescribeTimeToLive\",\n                            \"dynamodb:DisableKinesisStreamingDestination\",\n                            \"dynamodb:EnableKinesisStreamingDestination\",\n                            \"dynamodb:ExportTableToPointInTime\",\n                            \"dynamodb:GetItem\",\n                            \"dynamodb:GetRecords\",\n                            \"dynamodb:GetShardIterator\",\n                            \"dynamodb:ListBackups\",\n                            \"dynamodb:ListContributorInsights\",\n                            \"dynamodb:ListExports\",\n                            \"dynamodb:ListStreams\",\n                            \"dynamodb:ListTables\",\n                            \"dynamodb:ListTagsOfResource\",\n                            \"dynamodb:PartiQLDelete\",\n                            \"dynamodb:PartiQLInsert\",\n                            \"dynamodb:PartiQLSelect\",\n                            \"dynamodb:PartiQLUpdate\",\n                            \"dynamodb:PurchaseReservedCapacityOfferings\",\n                            \"dynamodb:PutItem\",\n                            \"dynamodb:Query\",\n                            \"dynamodb:RestoreTableFromBackup\",\n                            \"dynamodb:RestoreTableToPointInTime\",\n                            \"dynamodb:Scan\",\n                            \"dynamodb:UpdateContinuousBackups\",\n                            \"dynamodb:UpdateContributorInsights\",\n                            \"dynamodb:UpdateItem\",\n                            \"dynamodb:UpdateTable\",\n                            \"dynamodb:UpdateTableReplicaAutoScaling\",\n                            \"dynamodb:UpdateTimeToLive\"\n                        ],\n                        Resource: [\n                            core.primaryDynamodbTableArn.apply(arn => arn),\n                            core.primaryDynamodbTableArn.apply(arn => `${arn}/*`)\n                        ]\n                    }\n                ]\n            }\n        }\n    });\n\n    const lambdaRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${lambdaToDynamoDbResourceName}-role-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: dynamoDbPolicy.output.arn\n        }\n    });\n\n    return {\n        dynamoDbPolicy,\n        lambdaRolePolicyAttachment\n    };\n};\n"],"names":["attachDynamoDbPermissions","params","app","syncSystem","core","resolverLambdaRoleName","lambdaToDynamoDbResourceName","createSyncResourceName","dynamoDbPolicy","aws","arn","lambdaRolePolicyAttachment"],"mappings":";;AAgBO,MAAMA,4BAA4B,CAACC;IACtC,MAAM,EAAEC,GAAG,EAAEC,UAAU,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAM,EAAEI,sBAAsB,EAAE,GAAGF;IAEnC,MAAMG,+BAA+BC,uBAAuB;IAE5D,MAAMC,iBAAiBN,IAAI,WAAW,CAACO,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;QACnD,MAAM,GAAGH,6BAA6B,OAAO,CAAC;QAC9C,QAAQ;YACJ,aAAa;YACb,QAAQ;gBACJ,SAAS;gBACT,WAAW;oBACP;wBACI,KAAK;wBACL,QAAQ;wBACR,QAAQ;4BACJ;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;4BACA;yBACH;wBACD,UAAU;4BACNF,KAAK,uBAAuB,CAAC,KAAK,CAACM,CAAAA,MAAOA;4BAC1CN,KAAK,uBAAuB,CAAC,KAAK,CAACM,CAAAA,MAAO,GAAGA,IAAI,EAAE,CAAC;yBACvD;oBACL;iBACH;YACL;QACJ;IACJ;IAEA,MAAMC,6BAA6BT,IAAI,WAAW,CAACO,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QAC7E,MAAM,GAAGH,6BAA6B,uBAAuB,CAAC;QAC9D,QAAQ;YACJ,MAAMD;YACN,WAAWG,eAAe,MAAM,CAAC,GAAG;QACxC;IACJ;IAEA,OAAO;QACHA;QACAG;IACJ;AACJ"}

package/pulumi/apps/syncSystem/api/attachEventBusPermissions.js

@@ -1,48 +1,42 @@
-import * as aws from "@pulumi/aws";
 import { createSyncResourceName } from "../createSyncResourceName.js";
 import { ApiGraphql } from "../../api/ApiGraphql.js";
-/**
- * We need to attach the policy to:
- * * GraphQL Lambda Role
- * * File Manager Manage Lambda Role
- * TODO determine if any other are required
- */
-export const attachEventBusPermissions = params => {
-  const {
-    app,
-    syncSystem
-  } = params;
-  const {
-    eventBusArn
-  } = syncSystem;
-  const graphql = app.getModule(ApiGraphql);
-  const lambdaToEventBridgeResourceName = createSyncResourceName(`lambda-to-event-bridge`);
-  const eventBridgePolicy = app.addResource(aws.iam.Policy, {
-    name: `${lambdaToEventBridgeResourceName}-policy`,
-    config: {
-      description: "This policy enables access from Webiny Lambdas to Sync System EventBridge.",
-      policy: {
-        Version: "2012-10-17",
-        Statement: [{
-          Sid: "PermissionForSyncLambdaToEventBridge",
-          Effect: "Allow",
-          Action: "events:PutEvents",
-          Resource: [eventBusArn]
-        }]
-      }
-    }
-  });
-  const graphQlPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${lambdaToEventBridgeResourceName}-graphql-role-policy-attachment`,
-    config: {
-      role: graphql.role.output.name,
-      policyArn: eventBridgePolicy.output.arn
-    }
-  });
-  return {
-    eventBridgePolicy,
-    graphQlPolicyAttachment
-  };
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const attachEventBusPermissions = (params)=>{
+    const { app, syncSystem } = params;
+    const { eventBusArn } = syncSystem;
+    const graphql = app.getModule(ApiGraphql);
+    const lambdaToEventBridgeResourceName = createSyncResourceName("lambda-to-event-bridge");
+    const eventBridgePolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+        name: `${lambdaToEventBridgeResourceName}-policy`,
+        config: {
+            description: "This policy enables access from Webiny Lambdas to Sync System EventBridge.",
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Sid: "PermissionForSyncLambdaToEventBridge",
+                        Effect: "Allow",
+                        Action: "events:PutEvents",
+                        Resource: [
+                            eventBusArn
+                        ]
+                    }
+                ]
+            }
+        }
+    });
+    const graphQlPolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${lambdaToEventBridgeResourceName}-graphql-role-policy-attachment`,
+        config: {
+            role: graphql.role.output.name,
+            policyArn: eventBridgePolicy.output.arn
+        }
+    });
+    return {
+        eventBridgePolicy,
+        graphQlPolicyAttachment
+    };
 };
+export { attachEventBusPermissions };
 
 //# sourceMappingURL=attachEventBusPermissions.js.map

package/pulumi/apps/syncSystem/api/attachEventBusPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createSyncResourceName","ApiGraphql","attachEventBusPermissions","params","app","syncSystem","eventBusArn","graphql","getModule","lambdaToEventBridgeResourceName","eventBridgePolicy","addResource","iam","Policy","name","config","description","policy","Version","Statement","Sid","Effect","Action","Resource","graphQlPolicyAttachment","RolePolicyAttachment","role","output","policyArn","arn"],"sources":["attachEventBusPermissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi/types.js\";\nimport type { IGetSyncSystemOutputResult } from \"../types.js\";\nimport { createSyncResourceName } from \"../createSyncResourceName.js\";\nimport { ApiGraphql } from \"~/pulumi/apps/api/ApiGraphql.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachEventBusPermissionsParam {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n}\n\n/**\n * We need to attach the policy to:\n * * GraphQL Lambda Role\n * * File Manager Manage Lambda Role\n * TODO determine if any other are required\n */\nexport const attachEventBusPermissions = (params: IAttachEventBusPermissionsParam) => {\n    const { app, syncSystem } = params;\n\n    const { eventBusArn } = syncSystem;\n\n    const graphql = app.getModule(ApiGraphql);\n\n    const lambdaToEventBridgeResourceName = createSyncResourceName(`lambda-to-event-bridge`);\n    const eventBridgePolicy = app.addResource(aws.iam.Policy, {\n        name: `${lambdaToEventBridgeResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Webiny Lambdas to Sync System EventBridge.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToEventBridge\",\n                        Effect: \"Allow\",\n                        Action: \"events:PutEvents\",\n                        Resource: [eventBusArn]\n                    }\n                ]\n            }\n        }\n    });\n\n    const graphQlPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${lambdaToEventBridgeResourceName}-graphql-role-policy-attachment`,\n        config: {\n            role: graphql.role.output.name,\n            policyArn: eventBridgePolicy.output.arn\n        }\n    });\n\n    return {\n        eventBridgePolicy,\n        graphQlPolicyAttachment\n    };\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,sBAAsB;AAC/B,SAASC,UAAU;AAQnB;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,yBAAyB,GAAIC,MAAuC,IAAK;EAClF,MAAM;IAAEC,GAAG;IAAEC;EAAW,CAAC,GAAGF,MAAM;EAElC,MAAM;IAAEG;EAAY,CAAC,GAAGD,UAAU;EAElC,MAAME,OAAO,GAAGH,GAAG,CAACI,SAAS,CAACP,UAAU,CAAC;EAEzC,MAAMQ,+BAA+B,GAAGT,sBAAsB,CAAC,wBAAwB,CAAC;EACxF,MAAMU,iBAAiB,GAAGN,GAAG,CAACO,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACC,MAAM,EAAE;IACtDC,IAAI,EAAE,GAAGL,+BAA+B,SAAS;IACjDM,MAAM,EAAE;MACJC,WAAW,EACP,4EAA4E;MAChFC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,GAAG,EAAE,sCAAsC;UAC3CC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,kBAAkB;UAC1BC,QAAQ,EAAE,CAACjB,WAAW;QAC1B,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMkB,uBAAuB,GAAGpB,GAAG,CAACO,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACa,oBAAoB,EAAE;IAC1EX,IAAI,EAAE,GAAGL,+BAA+B,iCAAiC;IACzEM,MAAM,EAAE;MACJW,IAAI,EAAEnB,OAAO,CAACmB,IAAI,CAACC,MAAM,CAACb,IAAI;MAC9Bc,SAAS,EAAElB,iBAAiB,CAACiB,MAAM,CAACE;IACxC;EACJ,CAAC,CAAC;EAEF,OAAO;IACHnB,iBAAiB;IACjBc;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/attachEventBusPermissions.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/attachEventBusPermissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi/types.js\";\nimport type { IGetSyncSystemOutputResult } from \"../types.js\";\nimport { createSyncResourceName } from \"../createSyncResourceName.js\";\nimport { ApiGraphql } from \"~/pulumi/apps/api/ApiGraphql.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachEventBusPermissionsParam {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n}\n\n/**\n * We need to attach the policy to:\n * * GraphQL Lambda Role\n * * File Manager Manage Lambda Role\n * TODO determine if any other are required\n */\nexport const attachEventBusPermissions = (params: IAttachEventBusPermissionsParam) => {\n    const { app, syncSystem } = params;\n\n    const { eventBusArn } = syncSystem;\n\n    const graphql = app.getModule(ApiGraphql);\n\n    const lambdaToEventBridgeResourceName = createSyncResourceName(`lambda-to-event-bridge`);\n    const eventBridgePolicy = app.addResource(aws.iam.Policy, {\n        name: `${lambdaToEventBridgeResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Webiny Lambdas to Sync System EventBridge.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToEventBridge\",\n                        Effect: \"Allow\",\n                        Action: \"events:PutEvents\",\n                        Resource: [eventBusArn]\n                    }\n                ]\n            }\n        }\n    });\n\n    const graphQlPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${lambdaToEventBridgeResourceName}-graphql-role-policy-attachment`,\n        config: {\n            role: graphql.role.output.name,\n            policyArn: eventBridgePolicy.output.arn\n        }\n    });\n\n    return {\n        eventBridgePolicy,\n        graphQlPolicyAttachment\n    };\n};\n"],"names":["attachEventBusPermissions","params","app","syncSystem","eventBusArn","graphql","ApiGraphql","lambdaToEventBridgeResourceName","createSyncResourceName","eventBridgePolicy","aws","graphQlPolicyAttachment"],"mappings":";;;AAkBO,MAAMA,4BAA4B,CAACC;IACtC,MAAM,EAAEC,GAAG,EAAEC,UAAU,EAAE,GAAGF;IAE5B,MAAM,EAAEG,WAAW,EAAE,GAAGD;IAExB,MAAME,UAAUH,IAAI,SAAS,CAACI;IAE9B,MAAMC,kCAAkCC,uBAAuB;IAC/D,MAAMC,oBAAoBP,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;QACtD,MAAM,GAAGH,gCAAgC,OAAO,CAAC;QACjD,QAAQ;YACJ,aACI;YACJ,QAAQ;gBACJ,SAAS;gBACT,WAAW;oBACP;wBACI,KAAK;wBACL,QAAQ;wBACR,QAAQ;wBACR,UAAU;4BAACH;yBAAY;oBAC3B;iBACH;YACL;QACJ;IACJ;IAEA,MAAMO,0BAA0BT,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QAC1E,MAAM,GAAGH,gCAAgC,+BAA+B,CAAC;QACzE,QAAQ;YACJ,MAAMF,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;YAC9B,WAAWI,kBAAkB,MAAM,CAAC,GAAG;QAC3C;IACJ;IAEA,OAAO;QACHA;QACAE;IACJ;AACJ"}

package/pulumi/apps/syncSystem/api/attachS3Permissions.js

@@ -1,51 +1,55 @@
-import * as aws from "@pulumi/aws";
 import { createSyncResourceName } from "../createSyncResourceName.js";
-export const attachS3Permissions = params => {
-  const {
-    app,
-    syncSystem,
-    core
-  } = params;
-  const {
-    resolverLambdaRoleName,
-    workerLambdaRoleName
-  } = syncSystem;
-  const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-s3-fm`);
-  const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-s3-fm`);
-  const s3Policy = app.addResource(aws.iam.Policy, {
-    name: `${resolverLambdaToS3ResourceName}-policy`,
-    config: {
-      description: "This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.",
-      policy: {
-        Version: "2012-10-17",
-        Statement: [{
-          Sid: "PermissionForSyncLambdaToS3",
-          Effect: "Allow",
-          Action: ["s3:DeleteObject", "s3:PutObject", "s3:GetObject", "s3:ListBucket"],
-          Resource: [core.fileManagerBucketArn.apply(arn => arn), core.fileManagerBucketArn.apply(arn => `${arn}/*`)]
-        }]
-      }
-    }
-  });
-  const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${resolverLambdaToS3ResourceName}-policy-attachment`,
-    config: {
-      role: resolverLambdaRoleName,
-      policyArn: s3Policy.output.arn
-    }
-  });
-  const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${workerLambdaToS3ResourceName}-policy-attachment`,
-    config: {
-      role: workerLambdaRoleName,
-      policyArn: s3Policy.output.arn
-    }
-  });
-  return {
-    s3Policy,
-    workerLambdaS3PolicyAttachment,
-    resolverLambdaS3PolicyAttachment
-  };
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const attachS3Permissions = (params)=>{
+    const { app, syncSystem, core } = params;
+    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;
+    const resolverLambdaToS3ResourceName = createSyncResourceName("resolver-lambda-to-s3-fm");
+    const workerLambdaToS3ResourceName = createSyncResourceName("worker-lambda-to-s3-fm");
+    const s3Policy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+        name: `${resolverLambdaToS3ResourceName}-policy`,
+        config: {
+            description: "This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.",
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Sid: "PermissionForSyncLambdaToS3",
+                        Effect: "Allow",
+                        Action: [
+                            "s3:DeleteObject",
+                            "s3:PutObject",
+                            "s3:GetObject",
+                            "s3:ListBucket"
+                        ],
+                        Resource: [
+                            core.fileManagerBucketArn.apply((arn)=>arn),
+                            core.fileManagerBucketArn.apply((arn)=>`${arn}/*`)
+                        ]
+                    }
+                ]
+            }
+        }
+    });
+    const resolverLambdaS3PolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,
+        config: {
+            role: resolverLambdaRoleName,
+            policyArn: s3Policy.output.arn
+        }
+    });
+    const workerLambdaS3PolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${workerLambdaToS3ResourceName}-policy-attachment`,
+        config: {
+            role: workerLambdaRoleName,
+            policyArn: s3Policy.output.arn
+        }
+    });
+    return {
+        s3Policy,
+        workerLambdaS3PolicyAttachment,
+        resolverLambdaS3PolicyAttachment
+    };
 };
+export { attachS3Permissions };
 
 //# sourceMappingURL=attachS3Permissions.js.map

package/pulumi/apps/syncSystem/api/attachS3Permissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createSyncResourceName","attachS3Permissions","params","app","syncSystem","core","resolverLambdaRoleName","workerLambdaRoleName","resolverLambdaToS3ResourceName","workerLambdaToS3ResourceName","s3Policy","addResource","iam","Policy","name","config","description","policy","Version","Statement","Sid","Effect","Action","Resource","fileManagerBucketArn","apply","arn","resolverLambdaS3PolicyAttachment","RolePolicyAttachment","role","policyArn","output","workerLambdaS3PolicyAttachment"],"sources":["attachS3Permissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachS3PermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachS3Permissions = (params: IAttachS3PermissionsParams) => {\n    const { app, syncSystem, core } = params;\n\n    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;\n\n    const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-s3-fm`);\n    const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-s3-fm`);\n\n    const s3Policy = app.addResource(aws.iam.Policy, {\n        name: `${resolverLambdaToS3ResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToS3\",\n                        Effect: \"Allow\",\n                        Action: [\n                            \"s3:DeleteObject\",\n                            \"s3:PutObject\",\n                            \"s3:GetObject\",\n                            \"s3:ListBucket\"\n                        ],\n                        Resource: [\n                            core.fileManagerBucketArn.apply(arn => arn),\n                            core.fileManagerBucketArn.apply(arn => `${arn}/*`)\n                        ]\n                    }\n                ]\n            }\n        }\n    });\n\n    const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: s3Policy.output.arn\n        }\n    });\n\n    const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${workerLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: workerLambdaRoleName,\n            policyArn: s3Policy.output.arn\n        }\n    });\n\n    return {\n        s3Policy,\n        workerLambdaS3PolicyAttachment,\n        resolverLambdaS3PolicyAttachment\n    };\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAIlC,SAASC,sBAAsB;AAS/B,OAAO,MAAMC,mBAAmB,GAAIC,MAAkC,IAAK;EACvE,MAAM;IAAEC,GAAG;IAAEC,UAAU;IAAEC;EAAK,CAAC,GAAGH,MAAM;EAExC,MAAM;IAAEI,sBAAsB;IAAEC;EAAqB,CAAC,GAAGH,UAAU;EAEnE,MAAMI,8BAA8B,GAAGR,sBAAsB,CAAC,0BAA0B,CAAC;EACzF,MAAMS,4BAA4B,GAAGT,sBAAsB,CAAC,wBAAwB,CAAC;EAErF,MAAMU,QAAQ,GAAGP,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACC,MAAM,EAAE;IAC7CC,IAAI,EAAE,GAAGN,8BAA8B,SAAS;IAChDO,MAAM,EAAE;MACJC,WAAW,EACP,sFAAsF;MAC1FC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,GAAG,EAAE,6BAA6B;UAClCC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CACJ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,CAClB;UACDC,QAAQ,EAAE,CACNlB,IAAI,CAACmB,oBAAoB,CAACC,KAAK,CAACC,GAAG,IAAIA,GAAG,CAAC,EAC3CrB,IAAI,CAACmB,oBAAoB,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC;QAE1D,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,gCAAgC,GAAGxB,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACgB,oBAAoB,EAAE;IACnFd,IAAI,EAAE,GAAGN,8BAA8B,oBAAoB;IAC3DO,MAAM,EAAE;MACJc,IAAI,EAAEvB,sBAAsB;MAC5BwB,SAAS,EAAEpB,QAAQ,CAACqB,MAAM,CAACL;IAC/B;EACJ,CAAC,CAAC;EAEF,MAAMM,8BAA8B,GAAG7B,GAAG,CAACQ,WAAW,CAACZ,GAAG,CAACa,GAAG,CAACgB,oBAAoB,EAAE;IACjFd,IAAI,EAAE,GAAGL,4BAA4B,oBAAoB;IACzDM,MAAM,EAAE;MACJc,IAAI,EAAEtB,oBAAoB;MAC1BuB,SAAS,EAAEpB,QAAQ,CAACqB,MAAM,CAACL;IAC/B;EACJ,CAAC,CAAC;EAEF,OAAO;IACHhB,QAAQ;IACRsB,8BAA8B;IAC9BL;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/attachS3Permissions.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/attachS3Permissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAttachS3PermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachS3Permissions = (params: IAttachS3PermissionsParams) => {\n    const { app, syncSystem, core } = params;\n\n    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;\n\n    const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-s3-fm`);\n    const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-s3-fm`);\n\n    const s3Policy = app.addResource(aws.iam.Policy, {\n        name: `${resolverLambdaToS3ResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Sync System Resolver and Worker Lambda to Webiny S3.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToS3\",\n                        Effect: \"Allow\",\n                        Action: [\n                            \"s3:DeleteObject\",\n                            \"s3:PutObject\",\n                            \"s3:GetObject\",\n                            \"s3:ListBucket\"\n                        ],\n                        Resource: [\n                            core.fileManagerBucketArn.apply(arn => arn),\n                            core.fileManagerBucketArn.apply(arn => `${arn}/*`)\n                        ]\n                    }\n                ]\n            }\n        }\n    });\n\n    const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: s3Policy.output.arn\n        }\n    });\n\n    const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${workerLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: workerLambdaRoleName,\n            policyArn: s3Policy.output.arn\n        }\n    });\n\n    return {\n        s3Policy,\n        workerLambdaS3PolicyAttachment,\n        resolverLambdaS3PolicyAttachment\n    };\n};\n"],"names":["attachS3Permissions","params","app","syncSystem","core","resolverLambdaRoleName","workerLambdaRoleName","resolverLambdaToS3ResourceName","createSyncResourceName","workerLambdaToS3ResourceName","s3Policy","aws","arn","resolverLambdaS3PolicyAttachment","workerLambdaS3PolicyAttachment"],"mappings":";;AAaO,MAAMA,sBAAsB,CAACC;IAChC,MAAM,EAAEC,GAAG,EAAEC,UAAU,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAM,EAAEI,sBAAsB,EAAEC,oBAAoB,EAAE,GAAGH;IAEzD,MAAMI,iCAAiCC,uBAAuB;IAC9D,MAAMC,+BAA+BD,uBAAuB;IAE5D,MAAME,WAAWR,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;QAC7C,MAAM,GAAGJ,+BAA+B,OAAO,CAAC;QAChD,QAAQ;YACJ,aACI;YACJ,QAAQ;gBACJ,SAAS;gBACT,WAAW;oBACP;wBACI,KAAK;wBACL,QAAQ;wBACR,QAAQ;4BACJ;4BACA;4BACA;4BACA;yBACH;wBACD,UAAU;4BACNH,KAAK,oBAAoB,CAAC,KAAK,CAACQ,CAAAA,MAAOA;4BACvCR,KAAK,oBAAoB,CAAC,KAAK,CAACQ,CAAAA,MAAO,GAAGA,IAAI,EAAE,CAAC;yBACpD;oBACL;iBACH;YACL;QACJ;IACJ;IAEA,MAAMC,mCAAmCX,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QACnF,MAAM,GAAGJ,+BAA+B,kBAAkB,CAAC;QAC3D,QAAQ;YACJ,MAAMF;YACN,WAAWK,SAAS,MAAM,CAAC,GAAG;QAClC;IACJ;IAEA,MAAMI,iCAAiCZ,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QACjF,MAAM,GAAGF,6BAA6B,kBAAkB,CAAC;QACzD,QAAQ;YACJ,MAAMH;YACN,WAAWI,SAAS,MAAM,CAAC,GAAG;QAClC;IACJ;IAEA,OAAO;QACHA;QACAI;QACAD;IACJ;AACJ"}

package/pulumi/apps/syncSystem/api/index.js

@@ -4,52 +4,34 @@ import { attachDynamoDbPermissions } from "./attachDynamoDbPermissions.js";
 import { attachS3Permissions } from "./attachS3Permissions.js";
 import { addServiceManifest } from "./addServiceManifest.js";
 import { attachCognitoPermissions } from "./attachCognitoPermissions.js";
-export const attachSyncSystem = async params => {
-  const {
-    app,
-    core
-  } = params;
-  const syncSystem = await getSyncSystemOutput();
-  /**
-   * Possibly no sync system deployed - no need to do anything at that point.
-   * At this point, if sync system was deployed, and it is not anymore, all resources after this check will disappear.
-   */
-  if (!syncSystem) {
-    console.log(`No Sync System deployed. Skipping...`);
-    return;
-  }
-  /**
-   * Permissions for Webiny system to access Sync System resources.
-   */
-  attachEventBusPermissions({
-    app,
-    syncSystem
-  });
-  /**
-   * Permissions for Sync System to access Webiny system resources.
-   */
-  attachCognitoPermissions({
-    app,
-    syncSystem,
-    core
-  });
-  attachDynamoDbPermissions({
-    app,
-    syncSystem,
-    core
-  });
-  attachS3Permissions({
-    app,
-    syncSystem,
-    core
-  });
-  /**
-   * Add the Service Manifest item to the Webiny system.
-   */
-  addServiceManifest({
-    app,
-    syncSystem
-  });
+const attachSyncSystem = async (params)=>{
+    const { app, core } = params;
+    const syncSystem = await getSyncSystemOutput();
+    if (!syncSystem) return void console.log("No Sync System deployed. Skipping...");
+    attachEventBusPermissions({
+        app,
+        syncSystem
+    });
+    attachCognitoPermissions({
+        app,
+        syncSystem,
+        core
+    });
+    attachDynamoDbPermissions({
+        app,
+        syncSystem,
+        core
+    });
+    attachS3Permissions({
+        app,
+        syncSystem,
+        core
+    });
+    addServiceManifest({
+        app,
+        syncSystem
+    });
 };
+export { attachSyncSystem };
 
 //# sourceMappingURL=index.js.map

package/pulumi/apps/syncSystem/api/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["getSyncSystemOutput","attachEventBusPermissions","attachDynamoDbPermissions","attachS3Permissions","addServiceManifest","attachCognitoPermissions","attachSyncSystem","params","app","core","syncSystem","console","log"],"sources":["index.ts"],"sourcesContent":["import { getSyncSystemOutput } from \"~/pulumi/apps/syncSystem/getSyncSystemOutput.js\";\nimport { attachEventBusPermissions } from \"./attachEventBusPermissions.js\";\nimport { attachDynamoDbPermissions } from \"~/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js\";\nimport { attachS3Permissions } from \"~/pulumi/apps/syncSystem/api/attachS3Permissions.js\";\nimport { addServiceManifest } from \"~/pulumi/apps/syncSystem/api/addServiceManifest.js\";\nimport type { PulumiApp } from \"@webiny/pulumi/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport { attachCognitoPermissions } from \"~/pulumi/apps/syncSystem/api/attachCognitoPermissions.js\";\n\nexport interface IAttachSyncSystemParams {\n    app: PulumiApp & WithServiceManifest;\n    core: CoreOutput;\n}\n\nexport const attachSyncSystem = async (params: IAttachSyncSystemParams) => {\n    const { app, core } = params;\n\n    const syncSystem = await getSyncSystemOutput();\n    /**\n     * Possibly no sync system deployed - no need to do anything at that point.\n     * At this point, if sync system was deployed, and it is not anymore, all resources after this check will disappear.\n     */\n    if (!syncSystem) {\n        console.log(`No Sync System deployed. Skipping...`);\n        return;\n    }\n    /**\n     * Permissions for Webiny system to access Sync System resources.\n     */\n    attachEventBusPermissions({\n        app,\n        syncSystem\n    });\n    /**\n     * Permissions for Sync System to access Webiny system resources.\n     */\n    attachCognitoPermissions({\n        app,\n        syncSystem,\n        core\n    });\n    attachDynamoDbPermissions({\n        app,\n        syncSystem,\n        core\n    });\n    attachS3Permissions({\n        app,\n        syncSystem,\n        core\n    });\n    /**\n     * Add the Service Manifest item to the Webiny system.\n     */\n    addServiceManifest({\n        app,\n        syncSystem\n    });\n};\n"],"mappings":"AAAA,SAASA,mBAAmB;AAC5B,SAASC,yBAAyB;AAClC,SAASC,yBAAyB;AAClC,SAASC,mBAAmB;AAC5B,SAASC,kBAAkB;AAI3B,SAASC,wBAAwB;AAOjC,OAAO,MAAMC,gBAAgB,GAAG,MAAOC,MAA+B,IAAK;EACvE,MAAM;IAAEC,GAAG;IAAEC;EAAK,CAAC,GAAGF,MAAM;EAE5B,MAAMG,UAAU,GAAG,MAAMV,mBAAmB,CAAC,CAAC;EAC9C;AACJ;AACA;AACA;EACI,IAAI,CAACU,UAAU,EAAE;IACbC,OAAO,CAACC,GAAG,CAAC,sCAAsC,CAAC;IACnD;EACJ;EACA;AACJ;AACA;EACIX,yBAAyB,CAAC;IACtBO,GAAG;IACHE;EACJ,CAAC,CAAC;EACF;AACJ;AACA;EACIL,wBAAwB,CAAC;IACrBG,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACFP,yBAAyB,CAAC;IACtBM,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACFN,mBAAmB,CAAC;IAChBK,GAAG;IACHE,UAAU;IACVD;EACJ,CAAC,CAAC;EACF;AACJ;AACA;EACIL,kBAAkB,CAAC;IACfI,GAAG;IACHE;EACJ,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/index.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/index.ts"],"sourcesContent":["import { getSyncSystemOutput } from \"~/pulumi/apps/syncSystem/getSyncSystemOutput.js\";\nimport { attachEventBusPermissions } from \"./attachEventBusPermissions.js\";\nimport { attachDynamoDbPermissions } from \"~/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js\";\nimport { attachS3Permissions } from \"~/pulumi/apps/syncSystem/api/attachS3Permissions.js\";\nimport { addServiceManifest } from \"~/pulumi/apps/syncSystem/api/addServiceManifest.js\";\nimport type { PulumiApp } from \"@webiny/pulumi/types.js\";\nimport type { CoreOutput } from \"~/pulumi/apps/common/CoreOutput.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport { attachCognitoPermissions } from \"~/pulumi/apps/syncSystem/api/attachCognitoPermissions.js\";\n\nexport interface IAttachSyncSystemParams {\n    app: PulumiApp & WithServiceManifest;\n    core: CoreOutput;\n}\n\nexport const attachSyncSystem = async (params: IAttachSyncSystemParams) => {\n    const { app, core } = params;\n\n    const syncSystem = await getSyncSystemOutput();\n    /**\n     * Possibly no sync system deployed - no need to do anything at that point.\n     * At this point, if sync system was deployed, and it is not anymore, all resources after this check will disappear.\n     */\n    if (!syncSystem) {\n        console.log(`No Sync System deployed. Skipping...`);\n        return;\n    }\n    /**\n     * Permissions for Webiny system to access Sync System resources.\n     */\n    attachEventBusPermissions({\n        app,\n        syncSystem\n    });\n    /**\n     * Permissions for Sync System to access Webiny system resources.\n     */\n    attachCognitoPermissions({\n        app,\n        syncSystem,\n        core\n    });\n    attachDynamoDbPermissions({\n        app,\n        syncSystem,\n        core\n    });\n    attachS3Permissions({\n        app,\n        syncSystem,\n        core\n    });\n    /**\n     * Add the Service Manifest item to the Webiny system.\n     */\n    addServiceManifest({\n        app,\n        syncSystem\n    });\n};\n"],"names":["attachSyncSystem","params","app","core","syncSystem","getSyncSystemOutput","console","attachEventBusPermissions","attachCognitoPermissions","attachDynamoDbPermissions","attachS3Permissions","addServiceManifest"],"mappings":";;;;;;AAeO,MAAMA,mBAAmB,OAAOC;IACnC,MAAM,EAAEC,GAAG,EAAEC,IAAI,EAAE,GAAGF;IAEtB,MAAMG,aAAa,MAAMC;IAKzB,IAAI,CAACD,YAAY,YACbE,QAAQ,GAAG,CAAC;IAMhBC,0BAA0B;QACtBL;QACAE;IACJ;IAIAI,yBAAyB;QACrBN;QACAE;QACAD;IACJ;IACAM,0BAA0B;QACtBP;QACAE;QACAD;IACJ;IACAO,oBAAoB;QAChBR;QACAE;QACAD;IACJ;IAIAQ,mBAAmB;QACfT;QACAE;IACJ;AACJ"}

package/pulumi/apps/syncSystem/constants.js

@@ -1,3 +1,4 @@
-export const APPS_SYNC_SYSTEM_PATH = "apps/sync";
+const APPS_SYNC_SYSTEM_PATH = "apps/sync";
+export { APPS_SYNC_SYSTEM_PATH };
 
 //# sourceMappingURL=constants.js.map

package/pulumi/apps/syncSystem/constants.js.map

@@ -1 +1 @@
-{"version":3,"names":["APPS_SYNC_SYSTEM_PATH"],"sources":["constants.ts"],"sourcesContent":["export const APPS_SYNC_SYSTEM_PATH = \"apps/sync\";\n"],"mappings":"AAAA,OAAO,MAAMA,qBAAqB,GAAG,WAAW","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/constants.js","sources":["../../../../src/pulumi/apps/syncSystem/constants.ts"],"sourcesContent":["export const APPS_SYNC_SYSTEM_PATH = \"apps/sync\";\n"],"names":["APPS_SYNC_SYSTEM_PATH"],"mappings":"AAAO,MAAMA,wBAAwB"}

package/pulumi/apps/syncSystem/createSyncResourceName.js

@@ -1,10 +1,5 @@
 import kebabCase from "lodash/kebabCase.js";
-
-/**
- * Need to have standardized resource names.
- */
-export const createSyncResourceName = name => {
-  return `sync-system-${kebabCase(name)}`;
-};
+const createSyncResourceName = (name)=>`sync-system-${kebabCase(name)}`;
+export { createSyncResourceName };
 
 //# sourceMappingURL=createSyncResourceName.js.map

package/pulumi/apps/syncSystem/createSyncResourceName.js.map

@@ -1 +1 @@
-{"version":3,"names":["kebabCase","createSyncResourceName","name"],"sources":["createSyncResourceName.ts"],"sourcesContent":["import kebabCase from \"lodash/kebabCase.js\";\n\n/**\n * Need to have standardized resource names.\n */\nexport const createSyncResourceName = (name: string) => {\n    return `sync-system-${kebabCase(name)}`;\n};\n"],"mappings":"AAAA,OAAOA,SAAS,MAAM,qBAAqB;;AAE3C;AACA;AACA;AACA,OAAO,MAAMC,sBAAsB,GAAIC,IAAY,IAAK;EACpD,OAAO,eAAeF,SAAS,CAACE,IAAI,CAAC,EAAE;AAC3C,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/createSyncResourceName.js","sources":["../../../../src/pulumi/apps/syncSystem/createSyncResourceName.ts"],"sourcesContent":["import kebabCase from \"lodash/kebabCase.js\";\n\n/**\n * Need to have standardized resource names.\n */\nexport const createSyncResourceName = (name: string) => {\n    return `sync-system-${kebabCase(name)}`;\n};\n"],"names":["createSyncResourceName","name","kebabCase"],"mappings":";AAKO,MAAMA,yBAAyB,CAACC,OAC5B,CAAC,YAAY,EAAEC,UAAUD,OAAO"}