@webiny/project-aws 6.3.0 → 6.4.0-beta.1

package/pulumi/apps/api/ApiScheduler.js

@@ -1,100 +1,102 @@
-import * as aws from "@pulumi/aws";
-import * as pulumi from "@pulumi/pulumi";
 import { createAppModule } from "@webiny/pulumi";
 import { ApiGraphql } from "../index.js";
 import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
 import kebabCase from "lodash/kebabCase.js";
-export const ApiSchedulerBaseName = "scheduler-resolver";
-const createResourceName = name => {
-  return `${ApiSchedulerBaseName}-${kebabCase(name)}`;
-};
-export const ApiScheduler = createAppModule({
-  name: "ApiScheduler",
-  config(app) {
-    const awsRegion = getAwsRegion(app);
-    const awsAccountId = getAwsAccountId(app);
-    const graphql = app.getModule(ApiGraphql);
-    // const baseConfig = graphql.functions.graphql.config.clone();
-    /*
-    const schedulerResolverLambda = app.addResource(aws.lambda.Function, {
-        name: createResourceName("lambda"),
-        config: {
-            ...baseConfig,
-            layers: graphql.functions.graphql.output.layers.apply(arns => {
-                return Array.from(new Set([...(arns || []), getLayerArn("sharp")]));
-            }),
-            description: "Performs scheduled operations on Headless CMS entries.",
-            loggingConfig: {
-                logFormat: "JSON"
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+const ApiSchedulerBaseName = "scheduler-resolver";
+const createResourceName = (name)=>`${ApiSchedulerBaseName}-${kebabCase(name)}`;
+const ApiScheduler = createAppModule({
+    name: "ApiScheduler",
+    config (app) {
+        const awsRegion = getAwsRegion(app);
+        const awsAccountId = getAwsAccountId(app);
+        const graphql = app.getModule(ApiGraphql);
+        const schedulerResolverInvokeRole = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Role, {
+            name: createResourceName("invokeRole"),
+            config: {
+                assumeRolePolicy: JSON.stringify({
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Effect: "Allow",
+                            Principal: {
+                                Service: "scheduler.amazonaws.com"
+                            },
+                            Action: "sts:AssumeRole"
+                        }
+                    ]
+                })
             }
-        }
-    });
-    */
-
-    const schedulerResolverInvokeRole = app.addResource(aws.iam.Role, {
-      name: createResourceName("invokeRole"),
-      config: {
-        assumeRolePolicy: JSON.stringify({
-          Version: "2012-10-17",
-          Statement: [{
-            Effect: "Allow",
-            Principal: {
-              Service: "scheduler.amazonaws.com"
-            },
-            Action: "sts:AssumeRole"
-          }]
-        })
-      }
-    });
-    const schedulerResolverInvokeLambdaPolicy = app.addResource(aws.iam.RolePolicy, {
-      name: createResourceName("invokeLambdaPolicy"),
-      config: {
-        role: schedulerResolverInvokeRole.output.id,
-        policy: graphql.functions.graphql.output.arn.apply(resolverArn => {
-          return JSON.stringify({
-            Version: "2012-10-17",
-            Statement: [{
-              Effect: "Allow",
-              Action: ["lambda:InvokeFunction"],
-              Resource: resolverArn
-            }]
-          });
-        })
-      }
-    });
-    const schedulerControlPolicy = app.addResource(aws.iam.Policy, {
-      name: createResourceName("controlPolicy"),
-      config: {
-        description: "Allow GraphQL Lambda to manage EventBridge Scheduler",
-        policy: pulumi.all([schedulerResolverInvokeRole.output.arn, awsRegion, awsAccountId]).apply(([invokeRoleArn, region, accountId]) => {
-          return JSON.stringify({
-            Version: "2012-10-17",
-            Statement: [{
-              Effect: "Allow",
-              Action: ["scheduler:CreateSchedule", "scheduler:UpdateSchedule", "scheduler:DeleteSchedule", "scheduler:GetSchedule", "scheduler:ListSchedules"],
-              Resource: [`arn:aws:scheduler:${region}:${accountId}:schedule/default/*`]
-            }, {
-              Effect: "Allow",
-              Action: "iam:PassRole",
-              Resource: [invokeRoleArn, `${invokeRoleArn}/*`]
-            }]
-          });
-        })
-      }
-    });
-    const schedulerResolverPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-      name: createResourceName("graphqlSchedulerPolicyAttachment"),
-      config: {
-        role: graphql.role.output.name,
-        policyArn: schedulerControlPolicy.output.arn
-      }
-    });
-    return {
-      invokeRole: schedulerResolverInvokeRole,
-      invokePolicy: schedulerResolverInvokeLambdaPolicy,
-      policyAttachment: schedulerResolverPolicyAttachment
-    };
-  }
+        });
+        const schedulerResolverInvokeLambdaPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicy, {
+            name: createResourceName("invokeLambdaPolicy"),
+            config: {
+                role: schedulerResolverInvokeRole.output.id,
+                policy: graphql.functions.graphql.output.arn.apply((resolverArn)=>JSON.stringify({
+                        Version: "2012-10-17",
+                        Statement: [
+                            {
+                                Effect: "Allow",
+                                Action: [
+                                    "lambda:InvokeFunction"
+                                ],
+                                Resource: resolverArn
+                            }
+                        ]
+                    }))
+            }
+        });
+        const schedulerControlPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+            name: createResourceName("controlPolicy"),
+            config: {
+                description: "Allow GraphQL Lambda to manage EventBridge Scheduler",
+                policy: __rspack_external__pulumi_pulumi_d0276039.all([
+                    schedulerResolverInvokeRole.output.arn,
+                    awsRegion,
+                    awsAccountId
+                ]).apply(([invokeRoleArn, region, accountId])=>JSON.stringify({
+                        Version: "2012-10-17",
+                        Statement: [
+                            {
+                                Effect: "Allow",
+                                Action: [
+                                    "scheduler:CreateSchedule",
+                                    "scheduler:UpdateSchedule",
+                                    "scheduler:DeleteSchedule",
+                                    "scheduler:GetSchedule",
+                                    "scheduler:ListSchedules"
+                                ],
+                                Resource: [
+                                    `arn:aws:scheduler:${region}:${accountId}:schedule/default/*`
+                                ]
+                            },
+                            {
+                                Effect: "Allow",
+                                Action: "iam:PassRole",
+                                Resource: [
+                                    invokeRoleArn,
+                                    `${invokeRoleArn}/*`
+                                ]
+                            }
+                        ]
+                    }))
+            }
+        });
+        const schedulerResolverPolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+            name: createResourceName("graphqlSchedulerPolicyAttachment"),
+            config: {
+                role: graphql.role.output.name,
+                policyArn: schedulerControlPolicy.output.arn
+            }
+        });
+        return {
+            invokeRole: schedulerResolverInvokeRole,
+            invokePolicy: schedulerResolverInvokeLambdaPolicy,
+            policyAttachment: schedulerResolverPolicyAttachment
+        };
+    }
 });
+export { ApiScheduler, ApiSchedulerBaseName };
 
 //# sourceMappingURL=ApiScheduler.js.map

package/pulumi/apps/api/ApiScheduler.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","pulumi","createAppModule","ApiGraphql","getAwsAccountId","getAwsRegion","kebabCase","ApiSchedulerBaseName","createResourceName","name","ApiScheduler","config","app","awsRegion","awsAccountId","graphql","getModule","schedulerResolverInvokeRole","addResource","iam","Role","assumeRolePolicy","JSON","stringify","Version","Statement","Effect","Principal","Service","Action","schedulerResolverInvokeLambdaPolicy","RolePolicy","role","output","id","policy","functions","arn","apply","resolverArn","Resource","schedulerControlPolicy","Policy","description","all","invokeRoleArn","region","accountId","schedulerResolverPolicyAttachment","RolePolicyAttachment","policyArn","invokeRole","invokePolicy","policyAttachment"],"sources":["ApiScheduler.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\nimport kebabCase from \"lodash/kebabCase.js\";\n\nexport type ApiScheduler = PulumiAppModule<typeof ApiScheduler>;\n\nexport const ApiSchedulerBaseName = \"scheduler-resolver\";\n\nconst createResourceName = (name: string): string => {\n    return `${ApiSchedulerBaseName}-${kebabCase(name)}`;\n};\n\nexport const ApiScheduler = createAppModule({\n    name: \"ApiScheduler\",\n    config(app: PulumiApp) {\n        const awsRegion = getAwsRegion(app);\n        const awsAccountId = getAwsAccountId(app);\n        const graphql = app.getModule(ApiGraphql);\n        // const baseConfig = graphql.functions.graphql.config.clone();\n        /*\n        const schedulerResolverLambda = app.addResource(aws.lambda.Function, {\n            name: createResourceName(\"lambda\"),\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                description: \"Performs scheduled operations on Headless CMS entries.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n        */\n\n        const schedulerResolverInvokeRole = app.addResource(aws.iam.Role, {\n            name: createResourceName(\"invokeRole\"),\n            config: {\n                assumeRolePolicy: JSON.stringify({\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"scheduler.amazonaws.com\"\n                            },\n                            Action: \"sts:AssumeRole\"\n                        }\n                    ]\n                })\n            }\n        });\n\n        const schedulerResolverInvokeLambdaPolicy = app.addResource(aws.iam.RolePolicy, {\n            name: createResourceName(\"invokeLambdaPolicy\"),\n            config: {\n                role: schedulerResolverInvokeRole.output.id,\n                policy: graphql.functions.graphql.output.arn.apply(resolverArn => {\n                    return JSON.stringify({\n                        Version: \"2012-10-17\",\n                        Statement: [\n                            {\n                                Effect: \"Allow\",\n                                Action: [\"lambda:InvokeFunction\"],\n                                Resource: resolverArn\n                            }\n                        ]\n                    });\n                })\n            }\n        });\n\n        const schedulerControlPolicy = app.addResource(aws.iam.Policy, {\n            name: createResourceName(\"controlPolicy\"),\n            config: {\n                description: \"Allow GraphQL Lambda to manage EventBridge Scheduler\",\n                policy: pulumi\n                    .all([schedulerResolverInvokeRole.output.arn, awsRegion, awsAccountId])\n                    .apply(([invokeRoleArn, region, accountId]) => {\n                        return JSON.stringify({\n                            Version: \"2012-10-17\",\n                            Statement: [\n                                {\n                                    Effect: \"Allow\",\n                                    Action: [\n                                        \"scheduler:CreateSchedule\",\n                                        \"scheduler:UpdateSchedule\",\n                                        \"scheduler:DeleteSchedule\",\n                                        \"scheduler:GetSchedule\",\n                                        \"scheduler:ListSchedules\"\n                                    ],\n                                    Resource: [\n                                        `arn:aws:scheduler:${region}:${accountId}:schedule/default/*`\n                                    ]\n                                },\n                                {\n                                    Effect: \"Allow\",\n                                    Action: \"iam:PassRole\",\n                                    Resource: [invokeRoleArn, `${invokeRoleArn}/*`]\n                                }\n                            ]\n                        });\n                    })\n            }\n        });\n\n        const schedulerResolverPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: createResourceName(\"graphqlSchedulerPolicyAttachment\"),\n            config: {\n                role: graphql.role.output.name,\n                policyArn: schedulerControlPolicy.output.arn\n            }\n        });\n\n        return {\n            invokeRole: schedulerResolverInvokeRole,\n            invokePolicy: schedulerResolverInvokeLambdaPolicy,\n            policyAttachment: schedulerResolverPolicyAttachment\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AAExC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU;AACnB,SAASC,eAAe,EAAEC,YAAY;AACtC,OAAOC,SAAS,MAAM,qBAAqB;AAI3C,OAAO,MAAMC,oBAAoB,GAAG,oBAAoB;AAExD,MAAMC,kBAAkB,GAAIC,IAAY,IAAa;EACjD,OAAO,GAAGF,oBAAoB,IAAID,SAAS,CAACG,IAAI,CAAC,EAAE;AACvD,CAAC;AAED,OAAO,MAAMC,YAAY,GAAGR,eAAe,CAAC;EACxCO,IAAI,EAAE,cAAc;EACpBE,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,SAAS,GAAGR,YAAY,CAACO,GAAG,CAAC;IACnC,MAAME,YAAY,GAAGV,eAAe,CAACQ,GAAG,CAAC;IACzC,MAAMG,OAAO,GAAGH,GAAG,CAACI,SAAS,CAACb,UAAU,CAAC;IACzC;IACA;AACR;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;IAEQ,MAAMc,2BAA2B,GAAGL,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACC,IAAI,EAAE;MAC9DX,IAAI,EAAED,kBAAkB,CAAC,YAAY,CAAC;MACtCG,MAAM,EAAE;QACJU,gBAAgB,EAAEC,IAAI,CAACC,SAAS,CAAC;UAC7BC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,OAAO;YACfC,SAAS,EAAE;cACPC,OAAO,EAAE;YACb,CAAC;YACDC,MAAM,EAAE;UACZ,CAAC;QAET,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,mCAAmC,GAAGlB,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACY,UAAU,EAAE;MAC5EtB,IAAI,EAAED,kBAAkB,CAAC,oBAAoB,CAAC;MAC9CG,MAAM,EAAE;QACJqB,IAAI,EAAEf,2BAA2B,CAACgB,MAAM,CAACC,EAAE;QAC3CC,MAAM,EAAEpB,OAAO,CAACqB,SAAS,CAACrB,OAAO,CAACkB,MAAM,CAACI,GAAG,CAACC,KAAK,CAACC,WAAW,IAAI;UAC9D,OAAOjB,IAAI,CAACC,SAAS,CAAC;YAClBC,OAAO,EAAE,YAAY;YACrBC,SAAS,EAAE,CACP;cACIC,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,CAAC,uBAAuB,CAAC;cACjCW,QAAQ,EAAED;YACd,CAAC;UAET,CAAC,CAAC;QACN,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAME,sBAAsB,GAAG7B,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAACuB,MAAM,EAAE;MAC3DjC,IAAI,EAAED,kBAAkB,CAAC,eAAe,CAAC;MACzCG,MAAM,EAAE;QACJgC,WAAW,EAAE,sDAAsD;QACnER,MAAM,EAAElC,MAAM,CACT2C,GAAG,CAAC,CAAC3B,2BAA2B,CAACgB,MAAM,CAACI,GAAG,EAAExB,SAAS,EAAEC,YAAY,CAAC,CAAC,CACtEwB,KAAK,CAAC,CAAC,CAACO,aAAa,EAAEC,MAAM,EAAEC,SAAS,CAAC,KAAK;UAC3C,OAAOzB,IAAI,CAACC,SAAS,CAAC;YAClBC,OAAO,EAAE,YAAY;YACrBC,SAAS,EAAE,CACP;cACIC,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,CACJ,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,CAC5B;cACDW,QAAQ,EAAE,CACN,qBAAqBM,MAAM,IAAIC,SAAS,qBAAqB;YAErE,CAAC,EACD;cACIrB,MAAM,EAAE,OAAO;cACfG,MAAM,EAAE,cAAc;cACtBW,QAAQ,EAAE,CAACK,aAAa,EAAE,GAAGA,aAAa,IAAI;YAClD,CAAC;UAET,CAAC,CAAC;QACN,CAAC;MACT;IACJ,CAAC,CAAC;IAEF,MAAMG,iCAAiC,GAAGpC,GAAG,CAACM,WAAW,CAAClB,GAAG,CAACmB,GAAG,CAAC8B,oBAAoB,EAAE;MACpFxC,IAAI,EAAED,kBAAkB,CAAC,kCAAkC,CAAC;MAC5DG,MAAM,EAAE;QACJqB,IAAI,EAAEjB,OAAO,CAACiB,IAAI,CAACC,MAAM,CAACxB,IAAI;QAC9ByC,SAAS,EAAET,sBAAsB,CAACR,MAAM,CAACI;MAC7C;IACJ,CAAC,CAAC;IAEF,OAAO;MACHc,UAAU,EAAElC,2BAA2B;MACvCmC,YAAY,EAAEtB,mCAAmC;MACjDuB,gBAAgB,EAAEL;IACtB,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiScheduler.js","sources":["../../../../src/pulumi/apps/api/ApiScheduler.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\nimport kebabCase from \"lodash/kebabCase.js\";\n\nexport type ApiScheduler = PulumiAppModule<typeof ApiScheduler>;\n\nexport const ApiSchedulerBaseName = \"scheduler-resolver\";\n\nconst createResourceName = (name: string): string => {\n    return `${ApiSchedulerBaseName}-${kebabCase(name)}`;\n};\n\nexport const ApiScheduler = createAppModule({\n    name: \"ApiScheduler\",\n    config(app: PulumiApp) {\n        const awsRegion = getAwsRegion(app);\n        const awsAccountId = getAwsAccountId(app);\n        const graphql = app.getModule(ApiGraphql);\n        // const baseConfig = graphql.functions.graphql.config.clone();\n        /*\n        const schedulerResolverLambda = app.addResource(aws.lambda.Function, {\n            name: createResourceName(\"lambda\"),\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                description: \"Performs scheduled operations on Headless CMS entries.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n        */\n\n        const schedulerResolverInvokeRole = app.addResource(aws.iam.Role, {\n            name: createResourceName(\"invokeRole\"),\n            config: {\n                assumeRolePolicy: JSON.stringify({\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"scheduler.amazonaws.com\"\n                            },\n                            Action: \"sts:AssumeRole\"\n                        }\n                    ]\n                })\n            }\n        });\n\n        const schedulerResolverInvokeLambdaPolicy = app.addResource(aws.iam.RolePolicy, {\n            name: createResourceName(\"invokeLambdaPolicy\"),\n            config: {\n                role: schedulerResolverInvokeRole.output.id,\n                policy: graphql.functions.graphql.output.arn.apply(resolverArn => {\n                    return JSON.stringify({\n                        Version: \"2012-10-17\",\n                        Statement: [\n                            {\n                                Effect: \"Allow\",\n                                Action: [\"lambda:InvokeFunction\"],\n                                Resource: resolverArn\n                            }\n                        ]\n                    });\n                })\n            }\n        });\n\n        const schedulerControlPolicy = app.addResource(aws.iam.Policy, {\n            name: createResourceName(\"controlPolicy\"),\n            config: {\n                description: \"Allow GraphQL Lambda to manage EventBridge Scheduler\",\n                policy: pulumi\n                    .all([schedulerResolverInvokeRole.output.arn, awsRegion, awsAccountId])\n                    .apply(([invokeRoleArn, region, accountId]) => {\n                        return JSON.stringify({\n                            Version: \"2012-10-17\",\n                            Statement: [\n                                {\n                                    Effect: \"Allow\",\n                                    Action: [\n                                        \"scheduler:CreateSchedule\",\n                                        \"scheduler:UpdateSchedule\",\n                                        \"scheduler:DeleteSchedule\",\n                                        \"scheduler:GetSchedule\",\n                                        \"scheduler:ListSchedules\"\n                                    ],\n                                    Resource: [\n                                        `arn:aws:scheduler:${region}:${accountId}:schedule/default/*`\n                                    ]\n                                },\n                                {\n                                    Effect: \"Allow\",\n                                    Action: \"iam:PassRole\",\n                                    Resource: [invokeRoleArn, `${invokeRoleArn}/*`]\n                                }\n                            ]\n                        });\n                    })\n            }\n        });\n\n        const schedulerResolverPolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: createResourceName(\"graphqlSchedulerPolicyAttachment\"),\n            config: {\n                role: graphql.role.output.name,\n                policyArn: schedulerControlPolicy.output.arn\n            }\n        });\n\n        return {\n            invokeRole: schedulerResolverInvokeRole,\n            invokePolicy: schedulerResolverInvokeLambdaPolicy,\n            policyAttachment: schedulerResolverPolicyAttachment\n        };\n    }\n});\n"],"names":["ApiSchedulerBaseName","createResourceName","name","kebabCase","ApiScheduler","createAppModule","app","awsRegion","getAwsRegion","awsAccountId","getAwsAccountId","graphql","ApiGraphql","schedulerResolverInvokeRole","aws","JSON","schedulerResolverInvokeLambdaPolicy","resolverArn","schedulerControlPolicy","pulumi","invokeRoleArn","region","accountId","schedulerResolverPolicyAttachment"],"mappings":";;;;;;AAUO,MAAMA,uBAAuB;AAEpC,MAAMC,qBAAqB,CAACC,OACjB,GAAGF,qBAAqB,CAAC,EAAEG,UAAUD,OAAO;AAGhD,MAAME,eAAeC,gBAAgB;IACxC,MAAM;IACN,QAAOC,GAAc;QACjB,MAAMC,YAAYC,aAAaF;QAC/B,MAAMG,eAAeC,gBAAgBJ;QACrC,MAAMK,UAAUL,IAAI,SAAS,CAACM;QAkB9B,MAAMC,8BAA8BP,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,IAAY,EAAE;YAC9D,MAAMb,mBAAmB;YACzB,QAAQ;gBACJ,kBAAkBc,KAAK,SAAS,CAAC;oBAC7B,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;4BACR,WAAW;gCACP,SAAS;4BACb;4BACA,QAAQ;wBACZ;qBACH;gBACL;YACJ;QACJ;QAEA,MAAMC,sCAAsCV,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,UAAkB,EAAE;YAC5E,MAAMb,mBAAmB;YACzB,QAAQ;gBACJ,MAAMY,4BAA4B,MAAM,CAAC,EAAE;gBAC3C,QAAQF,QAAQ,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAACM,CAAAA,cACxCF,KAAK,SAAS,CAAC;wBAClB,SAAS;wBACT,WAAW;4BACP;gCACI,QAAQ;gCACR,QAAQ;oCAAC;iCAAwB;gCACjC,UAAUE;4BACd;yBACH;oBACL;YAER;QACJ;QAEA,MAAMC,yBAAyBZ,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;YAC3D,MAAMb,mBAAmB;YACzB,QAAQ;gBACJ,aAAa;gBACb,QAAQkB,0CAAAA,GACA,CAAC;oBAACN,4BAA4B,MAAM,CAAC,GAAG;oBAAEN;oBAAWE;iBAAa,EACrE,KAAK,CAAC,CAAC,CAACW,eAAeC,QAAQC,UAAU,GAC/BP,KAAK,SAAS,CAAC;wBAClB,SAAS;wBACT,WAAW;4BACP;gCACI,QAAQ;gCACR,QAAQ;oCACJ;oCACA;oCACA;oCACA;oCACA;iCACH;gCACD,UAAU;oCACN,CAAC,kBAAkB,EAAEM,OAAO,CAAC,EAAEC,UAAU,mBAAmB,CAAC;iCAChE;4BACL;4BACA;gCACI,QAAQ;gCACR,QAAQ;gCACR,UAAU;oCAACF;oCAAe,GAAGA,cAAc,EAAE,CAAC;iCAAC;4BACnD;yBACH;oBACL;YAEZ;QACJ;QAEA,MAAMG,oCAAoCjB,IAAI,WAAW,CAACQ,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;YACpF,MAAMb,mBAAmB;YACzB,QAAQ;gBACJ,MAAMU,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;gBAC9B,WAAWO,uBAAuB,MAAM,CAAC,GAAG;YAChD;QACJ;QAEA,OAAO;YACH,YAAYL;YACZ,cAAcG;YACd,kBAAkBO;QACtB;IACJ;AACJ"}

package/pulumi/apps/api/ApiWebsocket.js

@@ -1,138 +1,146 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as aws from "@pulumi/aws";
 import { createAppModule } from "@webiny/pulumi";
 import { ApiGraphql } from "../index.js";
-export const ApiWebsocket = createAppModule({
-  name: "ApiWebsocket",
-  config(app) {
-    const graphql = app.getModule(ApiGraphql);
-    const websocketApi = app.addResource(aws.apigatewayv2.Api, {
-      name: "websocket-api",
-      config: {
-        protocolType: "WEBSOCKET",
-        routeSelectionExpression: "$request.body.action"
-      }
-    });
-    const websocketLambdaPermission = app.addResource(aws.lambda.Permission, {
-      name: `websocket-api-ws-to-lambda-permission`,
-      config: {
-        action: "lambda:InvokeFunction",
-        function: graphql.functions.graphql.output.name,
-        principal: "apigateway.amazonaws.com",
-        sourceArn: websocketApi.output.executionArn.apply(arn => `${arn}/*`)
-      }
-    });
-    const lambdaWebsocketPolicy = app.addResource(aws.iam.Policy, {
-      name: "websocket-api-lambda-policy",
-      config: {
-        policy: {
-          Version: "2012-10-17",
-          Statement: [{
-            Effect: "Allow",
-            Action: "execute-api:ManageConnections",
-            Resource: [websocketApi.output.arn, websocketApi.output.executionArn, websocketApi.output.arn.apply(arn => `${arn}/*`), websocketApi.output.executionArn.apply(arn => `${arn}/*`)],
-            Sid: "PermissionForWebsocket"
-          }]
-        }
-      }
-    });
-    const lambdaWebsocketRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-      name: "websocket-api-lambda-role-policy-attachment",
-      config: {
-        policyArn: lambdaWebsocketPolicy.output.arn,
-        role: graphql.role.output
-      }
-    });
-    const websocketApiIntegration = app.addResource(aws.apigatewayv2.Integration, {
-      name: "websocket-api-integration",
-      config: {
-        apiId: websocketApi.output.id,
-        integrationType: "AWS_PROXY",
-        integrationUri: graphql.functions.graphql.output.invokeArn
-      }
-    });
-    const websocketApiDefaultRoute = app.addResource(aws.apigatewayv2.Route, {
-      name: "websocket-api-route-default",
-      config: {
-        apiId: websocketApi.output.id,
-        routeKey: "$default",
-        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
-      }
-    });
-    const websocketApiConnectRoute = app.addResource(aws.apigatewayv2.Route, {
-      name: "websocket-api-route-connect",
-      config: {
-        apiId: websocketApi.output.id,
-        routeKey: "$connect",
-        authorizationType: "NONE",
-        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
-      },
-      opts: {
-        dependsOn: websocketApiDefaultRoute.output
-      }
-    });
-    const websocketApiDisconnectRoute = app.addResource(aws.apigatewayv2.Route, {
-      name: "websocket-api-route-disconnect",
-      config: {
-        apiId: websocketApi.output.id,
-        routeKey: "$disconnect",
-        authorizationType: "NONE",
-        target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)
-      },
-      opts: {
-        dependsOn: websocketApiConnectRoute.output
-      }
-    });
-    const apiGatewayLoggingRole = app.addResource(aws.iam.Role, {
-      name: "apiGatewayLoggingRole",
-      config: {
-        assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({
-          Service: "apigateway.amazonaws.com"
-        })
-      }
-    });
-    app.addResource(aws.iam.RolePolicy, {
-      name: "apiGatewayLoggingPolicy",
-      config: {
-        role: apiGatewayLoggingRole.output.id,
-        policy: {
-          Version: "2012-10-17",
-          Statement: [{
-            Action: ["logs:*"],
-            Effect: "Allow",
-            Resource: "*"
-          }]
-        }
-      }
-    });
-    const websocketApiStage = app.addResource(aws.apigatewayv2.Stage, {
-      name: "websocket-api-stage",
-      config: {
-        apiId: websocketApi.output.id,
-        autoDeploy: true,
-        name: app.params.run.env,
-        defaultRouteSettings: {
-          // Only enable when debugging. Note that by default, API Gateway does not
-          // have the required permissions to write logs to CloudWatch logs. More:
-          // https://coady.tech/aws-cloudwatch-logs-arn/
-          // loggingLevel: "INFO",
-          throttlingBurstLimit: 5000,
-          throttlingRateLimit: 10000
-        }
-      }
-    });
-    return {
-      websocketApi,
-      websocketApiStage,
-      websocketApiConnectRoute,
-      websocketApiDisconnectRoute,
-      websocketApiDefaultRoute,
-      websocketLambdaPermission,
-      lambdaWebsocketPolicy,
-      lambdaWebsocketRolePolicyAttachment,
-      websocketApiUrl: pulumi.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`
-    };
-  }
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const ApiWebsocket = createAppModule({
+    name: "ApiWebsocket",
+    config (app) {
+        const graphql = app.getModule(ApiGraphql);
+        const websocketApi = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Api, {
+            name: "websocket-api",
+            config: {
+                protocolType: "WEBSOCKET",
+                routeSelectionExpression: "$request.body.action"
+            }
+        });
+        const websocketLambdaPermission = app.addResource(__rspack_external__pulumi_aws_e7af83c1.lambda.Permission, {
+            name: "websocket-api-ws-to-lambda-permission",
+            config: {
+                action: "lambda:InvokeFunction",
+                function: graphql.functions.graphql.output.name,
+                principal: "apigateway.amazonaws.com",
+                sourceArn: websocketApi.output.executionArn.apply((arn)=>`${arn}/*`)
+            }
+        });
+        const lambdaWebsocketPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+            name: "websocket-api-lambda-policy",
+            config: {
+                policy: {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Effect: "Allow",
+                            Action: "execute-api:ManageConnections",
+                            Resource: [
+                                websocketApi.output.arn,
+                                websocketApi.output.executionArn,
+                                websocketApi.output.arn.apply((arn)=>`${arn}/*`),
+                                websocketApi.output.executionArn.apply((arn)=>`${arn}/*`)
+                            ],
+                            Sid: "PermissionForWebsocket"
+                        }
+                    ]
+                }
+            }
+        });
+        const lambdaWebsocketRolePolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+            name: "websocket-api-lambda-role-policy-attachment",
+            config: {
+                policyArn: lambdaWebsocketPolicy.output.arn,
+                role: graphql.role.output
+            }
+        });
+        const websocketApiIntegration = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Integration, {
+            name: "websocket-api-integration",
+            config: {
+                apiId: websocketApi.output.id,
+                integrationType: "AWS_PROXY",
+                integrationUri: graphql.functions.graphql.output.invokeArn
+            }
+        });
+        const websocketApiDefaultRoute = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Route, {
+            name: "websocket-api-route-default",
+            config: {
+                apiId: websocketApi.output.id,
+                routeKey: "$default",
+                target: websocketApiIntegration.output.id.apply((value)=>`integrations/${value}`)
+            }
+        });
+        const websocketApiConnectRoute = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Route, {
+            name: "websocket-api-route-connect",
+            config: {
+                apiId: websocketApi.output.id,
+                routeKey: "$connect",
+                authorizationType: "NONE",
+                target: websocketApiIntegration.output.id.apply((value)=>`integrations/${value}`)
+            },
+            opts: {
+                dependsOn: websocketApiDefaultRoute.output
+            }
+        });
+        const websocketApiDisconnectRoute = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Route, {
+            name: "websocket-api-route-disconnect",
+            config: {
+                apiId: websocketApi.output.id,
+                routeKey: "$disconnect",
+                authorizationType: "NONE",
+                target: websocketApiIntegration.output.id.apply((value)=>`integrations/${value}`)
+            },
+            opts: {
+                dependsOn: websocketApiConnectRoute.output
+            }
+        });
+        const apiGatewayLoggingRole = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Role, {
+            name: "apiGatewayLoggingRole",
+            config: {
+                assumeRolePolicy: __rspack_external__pulumi_aws_e7af83c1.iam.assumeRolePolicyForPrincipal({
+                    Service: "apigateway.amazonaws.com"
+                })
+            }
+        });
+        app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicy, {
+            name: "apiGatewayLoggingPolicy",
+            config: {
+                role: apiGatewayLoggingRole.output.id,
+                policy: {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Action: [
+                                "logs:*"
+                            ],
+                            Effect: "Allow",
+                            Resource: "*"
+                        }
+                    ]
+                }
+            }
+        });
+        const websocketApiStage = app.addResource(__rspack_external__pulumi_aws_e7af83c1.apigatewayv2.Stage, {
+            name: "websocket-api-stage",
+            config: {
+                apiId: websocketApi.output.id,
+                autoDeploy: true,
+                name: app.params.run.env,
+                defaultRouteSettings: {
+                    throttlingBurstLimit: 5000,
+                    throttlingRateLimit: 10000
+                }
+            }
+        });
+        return {
+            websocketApi,
+            websocketApiStage,
+            websocketApiConnectRoute,
+            websocketApiDisconnectRoute,
+            websocketApiDefaultRoute,
+            websocketLambdaPermission,
+            lambdaWebsocketPolicy,
+            lambdaWebsocketRolePolicyAttachment,
+            websocketApiUrl: __rspack_external__pulumi_pulumi_d0276039.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`
+        };
+    }
 });
+export { ApiWebsocket };
 
 //# sourceMappingURL=ApiWebsocket.js.map

package/pulumi/apps/api/ApiWebsocket.js.map

@@ -1 +1 @@
-{"version":3,"names":["pulumi","aws","createAppModule","ApiGraphql","ApiWebsocket","name","config","app","graphql","getModule","websocketApi","addResource","apigatewayv2","Api","protocolType","routeSelectionExpression","websocketLambdaPermission","lambda","Permission","action","function","functions","output","principal","sourceArn","executionArn","apply","arn","lambdaWebsocketPolicy","iam","Policy","policy","Version","Statement","Effect","Action","Resource","Sid","lambdaWebsocketRolePolicyAttachment","RolePolicyAttachment","policyArn","role","websocketApiIntegration","Integration","apiId","id","integrationType","integrationUri","invokeArn","websocketApiDefaultRoute","Route","routeKey","target","value","websocketApiConnectRoute","authorizationType","opts","dependsOn","websocketApiDisconnectRoute","apiGatewayLoggingRole","Role","assumeRolePolicy","assumeRolePolicyForPrincipal","Service","RolePolicy","websocketApiStage","Stage","autoDeploy","params","run","env","defaultRouteSettings","throttlingBurstLimit","throttlingRateLimit","websocketApiUrl","interpolate","apiEndpoint"],"sources":["ApiWebsocket.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\n\nexport type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;\n\nexport const ApiWebsocket = createAppModule({\n    name: \"ApiWebsocket\",\n    config(app: PulumiApp) {\n        const graphql = app.getModule(ApiGraphql);\n\n        const websocketApi = app.addResource(aws.apigatewayv2.Api, {\n            name: \"websocket-api\",\n            config: {\n                protocolType: \"WEBSOCKET\",\n                routeSelectionExpression: \"$request.body.action\"\n            }\n        });\n\n        const websocketLambdaPermission = app.addResource(aws.lambda.Permission, {\n            name: `websocket-api-ws-to-lambda-permission`,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.functions.graphql.output.name,\n                principal: \"apigateway.amazonaws.com\",\n                sourceArn: websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n            }\n        });\n\n        const lambdaWebsocketPolicy = app.addResource(aws.iam.Policy, {\n            name: \"websocket-api-lambda-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Action: \"execute-api:ManageConnections\",\n                            Resource: [\n                                websocketApi.output.arn,\n                                websocketApi.output.executionArn,\n                                websocketApi.output.arn.apply(arn => `${arn}/*`),\n                                websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n                            ],\n                            Sid: \"PermissionForWebsocket\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const lambdaWebsocketRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"websocket-api-lambda-role-policy-attachment\",\n            config: {\n                policyArn: lambdaWebsocketPolicy.output.arn,\n                role: graphql.role.output\n            }\n        });\n\n        const websocketApiIntegration = app.addResource(aws.apigatewayv2.Integration, {\n            name: \"websocket-api-integration\",\n            config: {\n                apiId: websocketApi.output.id,\n                integrationType: \"AWS_PROXY\",\n                integrationUri: graphql.functions.graphql.output.invokeArn\n            }\n        });\n\n        const websocketApiDefaultRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-default\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$default\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            }\n        });\n\n        const websocketApiConnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-connect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$connect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiDefaultRoute.output }\n        });\n\n        const websocketApiDisconnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-disconnect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$disconnect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiConnectRoute.output }\n        });\n\n        const apiGatewayLoggingRole = app.addResource(aws.iam.Role, {\n            name: \"apiGatewayLoggingRole\",\n            config: {\n                assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({\n                    Service: \"apigateway.amazonaws.com\"\n                })\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicy, {\n            name: \"apiGatewayLoggingPolicy\",\n            config: {\n                role: apiGatewayLoggingRole.output.id,\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"logs:*\"],\n                            Effect: \"Allow\",\n                            Resource: \"*\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const websocketApiStage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"websocket-api-stage\",\n            config: {\n                apiId: websocketApi.output.id,\n                autoDeploy: true,\n                name: app.params.run.env,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        return {\n            websocketApi,\n            websocketApiStage,\n            websocketApiConnectRoute,\n            websocketApiDisconnectRoute,\n            websocketApiDefaultRoute,\n            websocketLambdaPermission,\n            lambdaWebsocketPolicy,\n            lambdaWebsocketRolePolicyAttachment,\n            websocketApiUrl: pulumi.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU;AAInB,OAAO,MAAMC,YAAY,GAAGF,eAAe,CAAC;EACxCG,IAAI,EAAE,cAAc;EACpBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,OAAO,GAAGD,GAAG,CAACE,SAAS,CAACN,UAAU,CAAC;IAEzC,MAAMO,YAAY,GAAGH,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACC,GAAG,EAAE;MACvDR,IAAI,EAAE,eAAe;MACrBC,MAAM,EAAE;QACJQ,YAAY,EAAE,WAAW;QACzBC,wBAAwB,EAAE;MAC9B;IACJ,CAAC,CAAC;IAEF,MAAMC,yBAAyB,GAAGT,GAAG,CAACI,WAAW,CAACV,GAAG,CAACgB,MAAM,CAACC,UAAU,EAAE;MACrEb,IAAI,EAAE,uCAAuC;MAC7CC,MAAM,EAAE;QACJa,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAEZ,OAAO,CAACa,SAAS,CAACb,OAAO,CAACc,MAAM,CAACjB,IAAI;QAC/CkB,SAAS,EAAE,0BAA0B;QACrCC,SAAS,EAAEd,YAAY,CAACY,MAAM,CAACG,YAAY,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI;MACvE;IACJ,CAAC,CAAC;IAEF,MAAMC,qBAAqB,GAAGrB,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACC,MAAM,EAAE;MAC1DzB,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJyB,MAAM,EAAE;UACJC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAE,CACN1B,YAAY,CAACY,MAAM,CAACK,GAAG,EACvBjB,YAAY,CAACY,MAAM,CAACG,YAAY,EAChCf,YAAY,CAACY,MAAM,CAACK,GAAG,CAACD,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC,EAChDjB,YAAY,CAACY,MAAM,CAACG,YAAY,CAACC,KAAK,CAACC,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC,CAC5D;YACDU,GAAG,EAAE;UACT,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,mCAAmC,GAAG/B,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACU,oBAAoB,EAAE;MACtFlC,IAAI,EAAE,6CAA6C;MACnDC,MAAM,EAAE;QACJkC,SAAS,EAAEZ,qBAAqB,CAACN,MAAM,CAACK,GAAG;QAC3Cc,IAAI,EAAEjC,OAAO,CAACiC,IAAI,CAACnB;MACvB;IACJ,CAAC,CAAC;IAEF,MAAMoB,uBAAuB,GAAGnC,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAAC+B,WAAW,EAAE;MAC1EtC,IAAI,EAAE,2BAA2B;MACjCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BC,eAAe,EAAE,WAAW;QAC5BC,cAAc,EAAEvC,OAAO,CAACa,SAAS,CAACb,OAAO,CAACc,MAAM,CAAC0B;MACrD;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG1C,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACrE7C,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,UAAU;QACpBC,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF;IACJ,CAAC,CAAC;IAEF,MAAMC,wBAAwB,GAAG/C,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACrE7C,IAAI,EAAE,6BAA6B;MACnCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,UAAU;QACpBI,iBAAiB,EAAE,MAAM;QACzBH,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF,CAAC;MACDG,IAAI,EAAE;QAAEC,SAAS,EAAER,wBAAwB,CAAC3B;MAAO;IACvD,CAAC,CAAC;IAEF,MAAMoC,2BAA2B,GAAGnD,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsC,KAAK,EAAE;MACxE7C,IAAI,EAAE,gCAAgC;MACtCC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BM,QAAQ,EAAE,aAAa;QACvBI,iBAAiB,EAAE,MAAM;QACzBH,MAAM,EAAEV,uBAAuB,CAACpB,MAAM,CAACuB,EAAE,CAACnB,KAAK,CAAC2B,KAAK,IAAI,gBAAgBA,KAAK,EAAE;MACpF,CAAC;MACDG,IAAI,EAAE;QAAEC,SAAS,EAAEH,wBAAwB,CAAChC;MAAO;IACvD,CAAC,CAAC;IAEF,MAAMqC,qBAAqB,GAAGpD,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAAC+B,IAAI,EAAE;MACxDvD,IAAI,EAAE,uBAAuB;MAC7BC,MAAM,EAAE;QACJuD,gBAAgB,EAAE5D,GAAG,CAAC4B,GAAG,CAACiC,4BAA4B,CAAC;UACnDC,OAAO,EAAE;QACb,CAAC;MACL;IACJ,CAAC,CAAC;IAEFxD,GAAG,CAACI,WAAW,CAACV,GAAG,CAAC4B,GAAG,CAACmC,UAAU,EAAE;MAChC3D,IAAI,EAAE,yBAAyB;MAC/BC,MAAM,EAAE;QACJmC,IAAI,EAAEkB,qBAAqB,CAACrC,MAAM,CAACuB,EAAE;QACrCd,MAAM,EAAE;UACJC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIE,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClBD,MAAM,EAAE,OAAO;YACfE,QAAQ,EAAE;UACd,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM6B,iBAAiB,GAAG1D,GAAG,CAACI,WAAW,CAACV,GAAG,CAACW,YAAY,CAACsD,KAAK,EAAE;MAC9D7D,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJsC,KAAK,EAAElC,YAAY,CAACY,MAAM,CAACuB,EAAE;QAC7BsB,UAAU,EAAE,IAAI;QAChB9D,IAAI,EAAEE,GAAG,CAAC6D,MAAM,CAACC,GAAG,CAACC,GAAG;QACxBC,oBAAoB,EAAE;UAClB;UACA;UACA;UACA;UACAC,oBAAoB,EAAE,IAAI;UAC1BC,mBAAmB,EAAE;QACzB;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACH/D,YAAY;MACZuD,iBAAiB;MACjBX,wBAAwB;MACxBI,2BAA2B;MAC3BT,wBAAwB;MACxBjC,yBAAyB;MACzBY,qBAAqB;MACrBU,mCAAmC;MACnCoC,eAAe,EAAE1E,MAAM,CAAC2E,WAAW,GAAGjE,YAAY,CAACY,MAAM,CAACsD,WAAW,IAAIX,iBAAiB,CAAC3C,MAAM,CAACjB,IAAI;IAC1G,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiWebsocket.js","sources":["../../../../src/pulumi/apps/api/ApiWebsocket.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql } from \"~/pulumi/apps/index.js\";\n\nexport type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;\n\nexport const ApiWebsocket = createAppModule({\n    name: \"ApiWebsocket\",\n    config(app: PulumiApp) {\n        const graphql = app.getModule(ApiGraphql);\n\n        const websocketApi = app.addResource(aws.apigatewayv2.Api, {\n            name: \"websocket-api\",\n            config: {\n                protocolType: \"WEBSOCKET\",\n                routeSelectionExpression: \"$request.body.action\"\n            }\n        });\n\n        const websocketLambdaPermission = app.addResource(aws.lambda.Permission, {\n            name: `websocket-api-ws-to-lambda-permission`,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.functions.graphql.output.name,\n                principal: \"apigateway.amazonaws.com\",\n                sourceArn: websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n            }\n        });\n\n        const lambdaWebsocketPolicy = app.addResource(aws.iam.Policy, {\n            name: \"websocket-api-lambda-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Effect: \"Allow\",\n                            Action: \"execute-api:ManageConnections\",\n                            Resource: [\n                                websocketApi.output.arn,\n                                websocketApi.output.executionArn,\n                                websocketApi.output.arn.apply(arn => `${arn}/*`),\n                                websocketApi.output.executionArn.apply(arn => `${arn}/*`)\n                            ],\n                            Sid: \"PermissionForWebsocket\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const lambdaWebsocketRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"websocket-api-lambda-role-policy-attachment\",\n            config: {\n                policyArn: lambdaWebsocketPolicy.output.arn,\n                role: graphql.role.output\n            }\n        });\n\n        const websocketApiIntegration = app.addResource(aws.apigatewayv2.Integration, {\n            name: \"websocket-api-integration\",\n            config: {\n                apiId: websocketApi.output.id,\n                integrationType: \"AWS_PROXY\",\n                integrationUri: graphql.functions.graphql.output.invokeArn\n            }\n        });\n\n        const websocketApiDefaultRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-default\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$default\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            }\n        });\n\n        const websocketApiConnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-connect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$connect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiDefaultRoute.output }\n        });\n\n        const websocketApiDisconnectRoute = app.addResource(aws.apigatewayv2.Route, {\n            name: \"websocket-api-route-disconnect\",\n            config: {\n                apiId: websocketApi.output.id,\n                routeKey: \"$disconnect\",\n                authorizationType: \"NONE\",\n                target: websocketApiIntegration.output.id.apply(value => `integrations/${value}`)\n            },\n            opts: { dependsOn: websocketApiConnectRoute.output }\n        });\n\n        const apiGatewayLoggingRole = app.addResource(aws.iam.Role, {\n            name: \"apiGatewayLoggingRole\",\n            config: {\n                assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({\n                    Service: \"apigateway.amazonaws.com\"\n                })\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicy, {\n            name: \"apiGatewayLoggingPolicy\",\n            config: {\n                role: apiGatewayLoggingRole.output.id,\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"logs:*\"],\n                            Effect: \"Allow\",\n                            Resource: \"*\"\n                        }\n                    ]\n                }\n            }\n        });\n\n        const websocketApiStage = app.addResource(aws.apigatewayv2.Stage, {\n            name: \"websocket-api-stage\",\n            config: {\n                apiId: websocketApi.output.id,\n                autoDeploy: true,\n                name: app.params.run.env,\n                defaultRouteSettings: {\n                    // Only enable when debugging. Note that by default, API Gateway does not\n                    // have the required permissions to write logs to CloudWatch logs. More:\n                    // https://coady.tech/aws-cloudwatch-logs-arn/\n                    // loggingLevel: \"INFO\",\n                    throttlingBurstLimit: 5000,\n                    throttlingRateLimit: 10000\n                }\n            }\n        });\n\n        return {\n            websocketApi,\n            websocketApiStage,\n            websocketApiConnectRoute,\n            websocketApiDisconnectRoute,\n            websocketApiDefaultRoute,\n            websocketLambdaPermission,\n            lambdaWebsocketPolicy,\n            lambdaWebsocketRolePolicyAttachment,\n            websocketApiUrl: pulumi.interpolate`${websocketApi.output.apiEndpoint}/${websocketApiStage.output.name}`\n        };\n    }\n});\n"],"names":["ApiWebsocket","createAppModule","app","graphql","ApiGraphql","websocketApi","aws","websocketLambdaPermission","arn","lambdaWebsocketPolicy","lambdaWebsocketRolePolicyAttachment","websocketApiIntegration","websocketApiDefaultRoute","value","websocketApiConnectRoute","websocketApiDisconnectRoute","apiGatewayLoggingRole","websocketApiStage","pulumi"],"mappings":";;;;AAQO,MAAMA,eAAeC,gBAAgB;IACxC,MAAM;IACN,QAAOC,GAAc;QACjB,MAAMC,UAAUD,IAAI,SAAS,CAACE;QAE9B,MAAMC,eAAeH,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,GAAoB,EAAE;YACvD,MAAM;YACN,QAAQ;gBACJ,cAAc;gBACd,0BAA0B;YAC9B;QACJ;QAEA,MAAMC,4BAA4BL,IAAI,WAAW,CAACI,uCAAAA,MAAAA,CAAAA,UAAqB,EAAE;YACrE,MAAM;YACN,QAAQ;gBACJ,QAAQ;gBACR,UAAUH,QAAQ,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;gBAC/C,WAAW;gBACX,WAAWE,aAAa,MAAM,CAAC,YAAY,CAAC,KAAK,CAACG,CAAAA,MAAO,GAAGA,IAAI,EAAE,CAAC;YACvE;QACJ;QAEA,MAAMC,wBAAwBP,IAAI,WAAW,CAACI,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;YAC1D,MAAM;YACN,QAAQ;gBACJ,QAAQ;oBACJ,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;4BACR,QAAQ;4BACR,UAAU;gCACND,aAAa,MAAM,CAAC,GAAG;gCACvBA,aAAa,MAAM,CAAC,YAAY;gCAChCA,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,CAACG,CAAAA,MAAO,GAAGA,IAAI,EAAE,CAAC;gCAC/CH,aAAa,MAAM,CAAC,YAAY,CAAC,KAAK,CAACG,CAAAA,MAAO,GAAGA,IAAI,EAAE,CAAC;6BAC3D;4BACD,KAAK;wBACT;qBACH;gBACL;YACJ;QACJ;QAEA,MAAME,sCAAsCR,IAAI,WAAW,CAACI,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;YACtF,MAAM;YACN,QAAQ;gBACJ,WAAWG,sBAAsB,MAAM,CAAC,GAAG;gBAC3C,MAAMN,QAAQ,IAAI,CAAC,MAAM;YAC7B;QACJ;QAEA,MAAMQ,0BAA0BT,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,WAA4B,EAAE;YAC1E,MAAM;YACN,QAAQ;gBACJ,OAAOD,aAAa,MAAM,CAAC,EAAE;gBAC7B,iBAAiB;gBACjB,gBAAgBF,QAAQ,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;YAC9D;QACJ;QAEA,MAAMS,2BAA2BV,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;YACrE,MAAM;YACN,QAAQ;gBACJ,OAAOD,aAAa,MAAM,CAAC,EAAE;gBAC7B,UAAU;gBACV,QAAQM,wBAAwB,MAAM,CAAC,EAAE,CAAC,KAAK,CAACE,CAAAA,QAAS,CAAC,aAAa,EAAEA,OAAO;YACpF;QACJ;QAEA,MAAMC,2BAA2BZ,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;YACrE,MAAM;YACN,QAAQ;gBACJ,OAAOD,aAAa,MAAM,CAAC,EAAE;gBAC7B,UAAU;gBACV,mBAAmB;gBACnB,QAAQM,wBAAwB,MAAM,CAAC,EAAE,CAAC,KAAK,CAACE,CAAAA,QAAS,CAAC,aAAa,EAAEA,OAAO;YACpF;YACA,MAAM;gBAAE,WAAWD,yBAAyB,MAAM;YAAC;QACvD;QAEA,MAAMG,8BAA8Bb,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;YACxE,MAAM;YACN,QAAQ;gBACJ,OAAOD,aAAa,MAAM,CAAC,EAAE;gBAC7B,UAAU;gBACV,mBAAmB;gBACnB,QAAQM,wBAAwB,MAAM,CAAC,EAAE,CAAC,KAAK,CAACE,CAAAA,QAAS,CAAC,aAAa,EAAEA,OAAO;YACpF;YACA,MAAM;gBAAE,WAAWC,yBAAyB,MAAM;YAAC;QACvD;QAEA,MAAME,wBAAwBd,IAAI,WAAW,CAACI,uCAAAA,GAAAA,CAAAA,IAAY,EAAE;YACxD,MAAM;YACN,QAAQ;gBACJ,kBAAkBA,uCAAAA,GAAAA,CAAAA,4BAAoC,CAAC;oBACnD,SAAS;gBACb;YACJ;QACJ;QAEAJ,IAAI,WAAW,CAACI,uCAAAA,GAAAA,CAAAA,UAAkB,EAAE;YAChC,MAAM;YACN,QAAQ;gBACJ,MAAMU,sBAAsB,MAAM,CAAC,EAAE;gBACrC,QAAQ;oBACJ,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;gCAAC;6BAAS;4BAClB,QAAQ;4BACR,UAAU;wBACd;qBACH;gBACL;YACJ;QACJ;QAEA,MAAMC,oBAAoBf,IAAI,WAAW,CAACI,uCAAAA,YAAAA,CAAAA,KAAsB,EAAE;YAC9D,MAAM;YACN,QAAQ;gBACJ,OAAOD,aAAa,MAAM,CAAC,EAAE;gBAC7B,YAAY;gBACZ,MAAMH,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG;gBACxB,sBAAsB;oBAKlB,sBAAsB;oBACtB,qBAAqB;gBACzB;YACJ;QACJ;QAEA,OAAO;YACHG;YACAY;YACAH;YACAC;YACAH;YACAL;YACAE;YACAC;YACA,iBAAiBQ,0CAAAA,WAAkB,CAAC,EAAEb,aAAa,MAAM,CAAC,WAAW,CAAC,CAAC,EAAEY,kBAAkB,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5G;IACJ;AACJ"}