@webiny/project-aws 6.3.0 → 6.4.0-beta.1

package/pulumi/apps/core/createCorePulumiApp.js

@@ -1,4 +1,3 @@
-import * as aws from "@pulumi/aws";
 import { createPulumiApp, isResourceOfType } from "@webiny/pulumi";
 import { CoreCognito } from "./CoreCognito.js";
 import { CoreDynamo } from "./CoreDynamo.js";
@@ -9,7 +8,6 @@ import { CoreVpc } from "./CoreVpc.js";
 import { WatchCommand } from "./WatchCommand.js";
 import { withServiceManifest } from "../../utils/withServiceManifest.js";
 import { addServiceManifestTableItem } from "../../utils/addServiceManifestTableItem.js";
-import * as random from "@pulumi/random";
 import { getProjectSdk } from "@webiny/project";
 import { CorePulumi } from "../../../abstractions/features/pulumi/index.js";
 import { corePulumi } from "../../features/CorePulumi/index.js";
@@ -17,293 +15,227 @@ import { getOsConfigFromExtension } from "../extensions/getOsConfigFromExtension
 import { getVpcConfigFromExtension } from "../extensions/getVpcConfigFromExtension.js";
 import { applyAwsResourceTags, getAwsRegion } from "../awsUtils.js";
 import { configureS3BucketMalwareProtection } from "./configureS3BucketMalwareProtection.js";
-import * as pulumi from "@pulumi/pulumi";
 import { CoreAuditLogsDynamo } from "../../index.js";
-export function createCorePulumiApp() {
-  const baseApp = createPulumiApp({
-    name: "core",
-    path: "apps/core",
-    program: async app => {
-      const sdk = await getProjectSdk();
-      const projectConfig = await sdk.getProjectConfig();
-      const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();
-      const coreStackOutput = await sdk.getAppStackOutput("core");
-      const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);
-      const opensearchExtensionConfig = getOsConfigFromExtension(projectConfig);
-      const deploymentId = new random.RandomId("deploymentId", {
-        byteLength: 8
-      });
-      let searchEngineType = null;
-      let searchEngineParams = null;
-      if (opensearchExtensionConfig) {
-        searchEngineParams = opensearchExtensionConfig;
-        searchEngineType = "opensearch";
-      }
-      if (searchEngineParams) {
-        const params = searchEngineParams;
-        if (typeof params === "object") {
-          if (params.endpoint) {
-            process.env.OPENSEARCH_ENDPOINT = params.endpoint;
-          }
-          if (params.domainName) {
-            process.env.AWS_OS_DOMAIN_NAME = params.domainName;
-          }
-          if (params.indexPrefix) {
-            process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;
-          }
-          if (params.sharedIndexes) {
-            process.env.OPENSEARCH_SHARED_INDEXES = "true";
-          }
-          if (params.username) {
-            process.env.OPENSEARCH_USERNAME = params.username;
-          }
-          if (params.password) {
-            process.env.OPENSEARCH_PASSWORD = params.password;
-          }
-        }
-      }
-      if (pulumiResourceNamePrefix) {
-        app.onResource(resource => {
-          if (!resource.name.startsWith(pulumiResourceNamePrefix)) {
-            resource.name = `${pulumiResourceNamePrefix}${resource.name}`;
-          }
-        });
-      }
-
-      // <-------------------- Enterprise start -------------------->
-      app.addHandler(async () => {
-        const usingAdvancedVpcParams = vpcExtensionsConfig && typeof vpcExtensionsConfig !== "boolean";
-        const featureFlags = await sdk.getFeatureFlags();
-        if (featureFlags.isFileManagerThreatDetectionEnabled()) {
-          configureS3BucketMalwareProtection(app);
-        }
-
-        // Not using advanced VPC params? Then immediately exit.
-        if (!usingAdvancedVpcParams) {
-          return;
-        }
-        const {
-          resources,
-          addResource,
-          onResource
-        } = app;
-        const {
-          useExistingVpc,
-          useVpcEndpoints
-        } = vpcExtensionsConfig;
-
-        // 1. We first deal with "existing VPC" setup.
-        if (useExistingVpc) {
-          if ("useVpcEndpoints" in vpcExtensionsConfig) {
-            throw new Error("Cannot specify `useVpcEndpoints` parameter when using an existing VPC. The VPC endpoints configurations should be already defined within the existing VPC.");
-          }
-          if (opensearchExtensionConfig) {
-            if (!useExistingVpc.openSearchDomainVpcConfig) {
-              throw new Error("Cannot specify `useExistingVpc` parameter because the `openSearchDomainVpcConfig` parameter wasn't provided.");
-            }
-            onResource(resource => {
-              if (isResourceOfType(resource, aws.opensearch.Domain)) {
-                resource.config.vpcOptions(useExistingVpc.openSearchDomainVpcConfig);
-              }
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+import * as __rspack_external__pulumi_random_ec318632 from "@pulumi/random";
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+function createCorePulumiApp() {
+    const baseApp = createPulumiApp({
+        name: "core",
+        path: "apps/core",
+        program: async (app)=>{
+            const sdk = await getProjectSdk();
+            const projectConfig = await sdk.getProjectConfig();
+            const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();
+            const coreStackOutput = await sdk.getAppStackOutput("core");
+            const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);
+            const opensearchExtensionConfig = getOsConfigFromExtension(projectConfig);
+            const deploymentId = new __rspack_external__pulumi_random_ec318632.RandomId("deploymentId", {
+                byteLength: 8
             });
-          }
-          if (!useExistingVpc.lambdaFunctionsVpcConfig) {
-            throw new Error("Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.");
-          }
-          onResource(resource => {
-            if (isResourceOfType(resource, aws.lambda.Function)) {
-              const canUseVpc = resource.meta.canUseVpc !== false;
-              if (canUseVpc) {
-                resource.config.vpcConfig(useExistingVpc.lambdaFunctionsVpcConfig);
-              }
+            let searchEngineType = null;
+            let searchEngineParams = null;
+            if (opensearchExtensionConfig) {
+                searchEngineParams = opensearchExtensionConfig;
+                searchEngineType = "opensearch";
+            }
+            if (searchEngineParams) {
+                const params = searchEngineParams;
+                if ("object" == typeof params) {
+                    if (params.endpoint) process.env.OPENSEARCH_ENDPOINT = params.endpoint;
+                    if (params.domainName) process.env.AWS_OS_DOMAIN_NAME = params.domainName;
+                    if (params.indexPrefix) process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;
+                    if (params.sharedIndexes) process.env.OPENSEARCH_SHARED_INDEXES = "true";
+                    if (params.username) process.env.OPENSEARCH_USERNAME = params.username;
+                    if (params.password) process.env.OPENSEARCH_PASSWORD = params.password;
+                }
             }
-            if (isResourceOfType(resource, aws.iam.Role)) {
-              if (resource.meta.isLambdaFunctionRole) {
-                addResource(aws.iam.RolePolicyAttachment, {
-                  name: `${resource.name}-vpc-access-execution-role`,
-                  config: {
-                    role: resource.output.name,
-                    policyArn: aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole
-                  }
+            if (pulumiResourceNamePrefix) app.onResource((resource)=>{
+                if (!resource.name.startsWith(pulumiResourceNamePrefix)) resource.name = `${pulumiResourceNamePrefix}${resource.name}`;
+            });
+            app.addHandler(async ()=>{
+                const usingAdvancedVpcParams = vpcExtensionsConfig && "boolean" != typeof vpcExtensionsConfig;
+                const featureFlags = await sdk.getFeatureFlags();
+                if (featureFlags.isFileManagerThreatDetectionEnabled()) configureS3BucketMalwareProtection(app);
+                if (!usingAdvancedVpcParams) return;
+                const { resources, addResource, onResource } = app;
+                const { useExistingVpc, useVpcEndpoints } = vpcExtensionsConfig;
+                if (useExistingVpc) {
+                    if ("useVpcEndpoints" in vpcExtensionsConfig) throw new Error("Cannot specify `useVpcEndpoints` parameter when using an existing VPC. The VPC endpoints configurations should be already defined within the existing VPC.");
+                    if (opensearchExtensionConfig) {
+                        if (!useExistingVpc.openSearchDomainVpcConfig) throw new Error("Cannot specify `useExistingVpc` parameter because the `openSearchDomainVpcConfig` parameter wasn't provided.");
+                        onResource((resource)=>{
+                            if (isResourceOfType(resource, __rspack_external__pulumi_aws_e7af83c1.opensearch.Domain)) resource.config.vpcOptions(useExistingVpc.openSearchDomainVpcConfig);
+                        });
+                    }
+                    if (!useExistingVpc.lambdaFunctionsVpcConfig) throw new Error("Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.");
+                    onResource((resource)=>{
+                        if (isResourceOfType(resource, __rspack_external__pulumi_aws_e7af83c1.lambda.Function)) {
+                            const canUseVpc = false !== resource.meta.canUseVpc;
+                            if (canUseVpc) resource.config.vpcConfig(useExistingVpc.lambdaFunctionsVpcConfig);
+                        }
+                        if (isResourceOfType(resource, __rspack_external__pulumi_aws_e7af83c1.iam.Role)) {
+                            if (resource.meta.isLambdaFunctionRole) addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+                                name: `${resource.name}-vpc-access-execution-role`,
+                                config: {
+                                    role: resource.output.name,
+                                    policyArn: __rspack_external__pulumi_aws_e7af83c1.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole
+                                }
+                            });
+                        }
+                    });
+                    return;
+                }
+                if (useVpcEndpoints) {
+                    const region = getAwsRegion(app);
+                    onResource((resource)=>{
+                        if (isResourceOfType(resource, __rspack_external__pulumi_aws_e7af83c1.ec2.Vpc)) {
+                            resource.config.enableDnsSupport(true);
+                            resource.config.enableDnsHostnames(true);
+                        }
+                    });
+                    const { vpc, subnets, routeTables } = resources.vpc;
+                    addResource(__rspack_external__pulumi_aws_e7af83c1.ec2.VpcEndpoint, {
+                        name: "vpc-s3-vpc-endpoint",
+                        config: {
+                            vpcId: vpc.output.id,
+                            serviceName: __rspack_external__pulumi_pulumi_d0276039.interpolate`com.amazonaws.${region}.s3`,
+                            routeTableIds: [
+                                routeTables.privateSubnets.output.id
+                            ]
+                        }
+                    });
+                    addResource(__rspack_external__pulumi_aws_e7af83c1.ec2.VpcEndpoint, {
+                        name: "vpc-dynamodb-vpc-endpoint",
+                        config: {
+                            vpcId: vpc.output.id,
+                            serviceName: __rspack_external__pulumi_pulumi_d0276039.interpolate`com.amazonaws.${region}.dynamodb`,
+                            routeTableIds: [
+                                routeTables.privateSubnets.output.id
+                            ]
+                        }
+                    });
+                    addResource(__rspack_external__pulumi_aws_e7af83c1.ec2.VpcEndpoint, {
+                        name: "vpc-sqs-vpc-endpoint",
+                        config: {
+                            vpcId: vpc.output.id,
+                            serviceName: __rspack_external__pulumi_pulumi_d0276039.interpolate`com.amazonaws.${region}.sqs`,
+                            vpcEndpointType: "Interface",
+                            privateDnsEnabled: true,
+                            securityGroupIds: [
+                                vpc.output.defaultSecurityGroupId
+                            ],
+                            subnetIds: subnets.private.map((subNet)=>subNet.output.id)
+                        }
+                    });
+                    addResource(__rspack_external__pulumi_aws_e7af83c1.ec2.VpcEndpoint, {
+                        name: "vpc-events-vpc-endpoint",
+                        config: {
+                            vpcId: vpc.output.id,
+                            serviceName: __rspack_external__pulumi_pulumi_d0276039.interpolate`com.amazonaws.${region}.events`,
+                            vpcEndpointType: "Interface",
+                            privateDnsEnabled: true,
+                            securityGroupIds: [
+                                vpc.output.defaultSecurityGroupId
+                            ],
+                            subnetIds: subnets.private.map((subNet)=>subNet.output.id)
+                        }
+                    });
+                }
+            });
+            sdk.getContainer().registerComposite(corePulumi);
+            const pulumiHandlers = sdk.getContainer().resolve(CorePulumi);
+            app.addHandler(()=>pulumiHandlers.execute(app));
+            const isProduction = app.env.isProduction;
+            const protect = isProduction;
+            const dynamoDbTable = app.addModule(CoreDynamo, {
+                protect
+            });
+            const auditLogsDynamoDbTable = app.addModule(CoreAuditLogsDynamo, {
+                protect
+            });
+            const vpcEnabled = true === vpcExtensionsConfig || "object" == typeof vpcExtensionsConfig || isProduction;
+            const vpc = vpcEnabled ? app.addModule(CoreVpc) : null;
+            const cognito = app.addModule(CoreCognito, {
+                protect,
+                useEmailAsUsername: false
+            });
+            const eventBus = app.addModule(CoreEventBus);
+            const { bucket: fileManagerBucket } = app.addModule(CoreFileManger, {
+                protect
+            });
+            let opensearch;
+            if ("opensearch" === searchEngineType) {
+                const prevDomainName = coreStackOutput?.opensearchDomainName;
+                const isUpgradeFromOldCode = !!coreStackOutput?.primaryDynamodbTableName && !prevDomainName;
+                const namePrefixForOs = isUpgradeFromOldCode ? "" : pulumiResourceNamePrefix || "";
+                opensearch = app.addModule(OpenSearch, {
+                    protect,
+                    namePrefix: namePrefixForOs,
+                    prevDomainName
                 });
-              }
             }
-          });
-          return;
+            app.addModule(WatchCommand, {
+                deploymentId: deploymentId.hex
+            });
+            app.addOutputs({
+                deploymentId: deploymentId.hex,
+                region: __rspack_external__pulumi_aws_e7af83c1.config.region,
+                fileManagerBucketId: fileManagerBucket.output.id,
+                primaryDynamodbTableArn: dynamoDbTable.output.arn,
+                primaryDynamodbTableName: dynamoDbTable.output.name,
+                primaryDynamodbTableHashKey: dynamoDbTable.output.hashKey,
+                primaryDynamodbTableRangeKey: dynamoDbTable.output.rangeKey,
+                auditLogsDynamodbTableArn: auditLogsDynamoDbTable.output.arn,
+                auditLogsDynamodbTableName: auditLogsDynamoDbTable.output.name,
+                auditLogsDynamodbTableHashKey: auditLogsDynamoDbTable.output.hashKey,
+                auditLogsDynamodbTableRangeKey: auditLogsDynamoDbTable.output.rangeKey,
+                cognitoUserPoolId: cognito.userPool.output.id,
+                cognitoUserPoolArn: cognito.userPool.output.arn,
+                cognitoUserPoolPasswordPolicy: cognito.userPool.output.passwordPolicy,
+                cognitoAppClientId: cognito.userPoolClient.output.id,
+                eventBusName: eventBus.output.name,
+                eventBusArn: eventBus.output.arn
+            });
+            await applyAwsResourceTags("core");
+            return {
+                dynamoDbTable,
+                vpc,
+                ...cognito,
+                fileManagerBucket,
+                eventBus,
+                opensearch
+            };
         }
-
-        // 2. Now we deal with "non-existing VPC" setup.
-        if (useVpcEndpoints) {
-          const region = getAwsRegion(app);
-          onResource(resource => {
-            if (isResourceOfType(resource, aws.ec2.Vpc)) {
-              resource.config.enableDnsSupport(true);
-              resource.config.enableDnsHostnames(true);
-            }
-          });
-          const {
-            vpc,
-            subnets,
-            routeTables
-          } = resources.vpc;
-          addResource(aws.ec2.VpcEndpoint, {
-            name: "vpc-s3-vpc-endpoint",
-            config: {
-              vpcId: vpc.output.id,
-              serviceName: pulumi.interpolate`com.amazonaws.${region}.s3`,
-              routeTableIds: [routeTables.privateSubnets.output.id]
-            }
-          });
-          addResource(aws.ec2.VpcEndpoint, {
-            name: "vpc-dynamodb-vpc-endpoint",
-            config: {
-              vpcId: vpc.output.id,
-              serviceName: pulumi.interpolate`com.amazonaws.${region}.dynamodb`,
-              routeTableIds: [routeTables.privateSubnets.output.id]
-            }
-          });
-          addResource(aws.ec2.VpcEndpoint, {
-            name: "vpc-sqs-vpc-endpoint",
-            config: {
-              vpcId: vpc.output.id,
-              serviceName: pulumi.interpolate`com.amazonaws.${region}.sqs`,
-              vpcEndpointType: "Interface",
-              privateDnsEnabled: true,
-              securityGroupIds: [vpc.output.defaultSecurityGroupId],
-              subnetIds: subnets.private.map(subNet => subNet.output.id)
-            }
-          });
-          addResource(aws.ec2.VpcEndpoint, {
-            name: "vpc-events-vpc-endpoint",
-            config: {
-              vpcId: vpc.output.id,
-              serviceName: pulumi.interpolate`com.amazonaws.${region}.events`,
-              vpcEndpointType: "Interface",
-              privateDnsEnabled: true,
-              securityGroupIds: [vpc.output.defaultSecurityGroupId],
-              subnetIds: subnets.private.map(subNet => subNet.output.id)
+    });
+    const app = withServiceManifest(baseApp, (manifests)=>{
+        const dynamoTable = baseApp.resources.dynamoDbTable;
+        const table = {
+            tableName: dynamoTable.output.name,
+            hashKey: dynamoTable.output.hashKey,
+            rangeKey: dynamoTable.output.rangeKey
+        };
+        manifests.forEach((manifest)=>addServiceManifestTableItem(baseApp, table, manifest));
+    });
+    app.addHandler(()=>{
+        app.addServiceManifest({
+            name: "core",
+            manifest: {
+                eventBus: {
+                    arn: baseApp.resources.eventBus.output.arn,
+                    name: baseApp.resources.eventBus.output.name
+                },
+                dynamodbTable: {
+                    arn: baseApp.resources.dynamoDbTable.output.arn,
+                    name: baseApp.resources.dynamoDbTable.output.name,
+                    hashKey: baseApp.resources.dynamoDbTable.output.hashKey,
+                    rangeKey: baseApp.resources.dynamoDbTable.output.rangeKey
+                }
             }
-          });
-        }
-      });
-      // <-------------------- Enterprise end -------------------->
-
-      // Overrides must be applied via a handler, registered at the very start of the program.
-      // By doing this, we're ensuring user's adjustments are not applied to late.
-      sdk.getContainer().registerComposite(corePulumi);
-      const pulumiHandlers = sdk.getContainer().resolve(CorePulumi);
-      app.addHandler(() => {
-        return pulumiHandlers.execute(app);
-      });
-      const isProduction = app.env.isProduction;
-      const protect = isProduction;
-
-      // Setup DynamoDB table
-      const dynamoDbTable = app.addModule(CoreDynamo, {
-        protect
-      });
-      const auditLogsDynamoDbTable = app.addModule(CoreAuditLogsDynamo, {
-        protect
-      });
-
-      // Setup VPC
-      const vpcEnabled = vpcExtensionsConfig === true || typeof vpcExtensionsConfig === "object" || isProduction;
-      const vpc = vpcEnabled ? app.addModule(CoreVpc) : null;
-
-      // Setup Cognito
-      const cognito = app.addModule(CoreCognito, {
-        protect,
-        useEmailAsUsername: false
-      });
-
-      // Setup event bus
-      const eventBus = app.addModule(CoreEventBus);
-
-      // Setup file core bucket
-      const {
-        bucket: fileManagerBucket
-      } = app.addModule(CoreFileManger, {
-        protect
-      });
-      let opensearch;
-      if (searchEngineType === "opensearch") {
-        const prevDomainName = coreStackOutput?.opensearchDomainName;
-
-        // When upgrading from old code that never stored opensearchDomainName, the old
-        // code always generated domain names without any prefix (app.params.create
-        // .pulumiResourceNamePrefix was never a real Pulumi param, so it returned "").
-        // Using the SDK default "wby-" prefix here would generate a different name and
-        // cause Pulumi to destroy and recreate the cluster.
-        const isUpgradeFromOldCode = !!coreStackOutput?.primaryDynamodbTableName && !prevDomainName;
-        const namePrefixForOs = isUpgradeFromOldCode ? "" : pulumiResourceNamePrefix || "";
-        opensearch = app.addModule(OpenSearch, {
-          protect,
-          namePrefix: namePrefixForOs,
-          prevDomainName
         });
-      }
-      app.addModule(WatchCommand, {
-        deploymentId: deploymentId.hex
-      });
-      app.addOutputs({
-        deploymentId: deploymentId.hex,
-        region: aws.config.region,
-        fileManagerBucketId: fileManagerBucket.output.id,
-        primaryDynamodbTableArn: dynamoDbTable.output.arn,
-        primaryDynamodbTableName: dynamoDbTable.output.name,
-        primaryDynamodbTableHashKey: dynamoDbTable.output.hashKey,
-        primaryDynamodbTableRangeKey: dynamoDbTable.output.rangeKey,
-        auditLogsDynamodbTableArn: auditLogsDynamoDbTable.output.arn,
-        auditLogsDynamodbTableName: auditLogsDynamoDbTable.output.name,
-        auditLogsDynamodbTableHashKey: auditLogsDynamoDbTable.output.hashKey,
-        auditLogsDynamodbTableRangeKey: auditLogsDynamoDbTable.output.rangeKey,
-        cognitoUserPoolId: cognito.userPool.output.id,
-        cognitoUserPoolArn: cognito.userPool.output.arn,
-        cognitoUserPoolPasswordPolicy: cognito.userPool.output.passwordPolicy,
-        cognitoAppClientId: cognito.userPoolClient.output.id,
-        eventBusName: eventBus.output.name,
-        eventBusArn: eventBus.output.arn
-      });
-
-      // Applies internal and user-defined AWS tags.
-      await applyAwsResourceTags("core");
-      return {
-        dynamoDbTable,
-        vpc,
-        ...cognito,
-        fileManagerBucket,
-        eventBus,
-        opensearch
-      };
-    }
-  });
-  const app = withServiceManifest(baseApp, manifests => {
-    const dynamoTable = baseApp.resources.dynamoDbTable;
-    const table = {
-      tableName: dynamoTable.output.name,
-      hashKey: dynamoTable.output.hashKey,
-      rangeKey: dynamoTable.output.rangeKey
-    };
-    manifests.forEach(manifest => addServiceManifestTableItem(baseApp, table, manifest));
-  });
-  app.addHandler(() => {
-    app.addServiceManifest({
-      name: "core",
-      manifest: {
-        eventBus: {
-          arn: baseApp.resources.eventBus.output.arn,
-          name: baseApp.resources.eventBus.output.name
-        },
-        dynamodbTable: {
-          arn: baseApp.resources.dynamoDbTable.output.arn,
-          name: baseApp.resources.dynamoDbTable.output.name,
-          hashKey: baseApp.resources.dynamoDbTable.output.hashKey,
-          rangeKey: baseApp.resources.dynamoDbTable.output.rangeKey
-        }
-      }
     });
-  });
-  return app;
+    return app;
 }
+export { createCorePulumiApp };
 
 //# sourceMappingURL=createCorePulumiApp.js.map

package/pulumi/apps/core/createCorePulumiApp.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createPulumiApp","isResourceOfType","CoreCognito","CoreDynamo","OpenSearch","CoreEventBus","CoreFileManger","CoreVpc","WatchCommand","withServiceManifest","addServiceManifestTableItem","random","getProjectSdk","CorePulumi","corePulumi","getOsConfigFromExtension","getVpcConfigFromExtension","applyAwsResourceTags","getAwsRegion","configureS3BucketMalwareProtection","pulumi","CoreAuditLogsDynamo","createCorePulumiApp","baseApp","name","path","program","app","sdk","projectConfig","getProjectConfig","pulumiResourceNamePrefix","getPulumiResourceNamePrefix","coreStackOutput","getAppStackOutput","vpcExtensionsConfig","opensearchExtensionConfig","deploymentId","RandomId","byteLength","searchEngineType","searchEngineParams","params","endpoint","process","env","OPENSEARCH_ENDPOINT","domainName","AWS_OS_DOMAIN_NAME","indexPrefix","OPENSEARCH_INDEX_PREFIX","sharedIndexes","OPENSEARCH_SHARED_INDEXES","username","OPENSEARCH_USERNAME","password","OPENSEARCH_PASSWORD","onResource","resource","startsWith","addHandler","usingAdvancedVpcParams","featureFlags","getFeatureFlags","isFileManagerThreatDetectionEnabled","resources","addResource","useExistingVpc","useVpcEndpoints","Error","openSearchDomainVpcConfig","opensearch","Domain","config","vpcOptions","lambdaFunctionsVpcConfig","lambda","Function","canUseVpc","meta","vpcConfig","iam","Role","isLambdaFunctionRole","RolePolicyAttachment","role","output","policyArn","ManagedPolicy","AWSLambdaVPCAccessExecutionRole","region","ec2","Vpc","enableDnsSupport","enableDnsHostnames","vpc","subnets","routeTables","VpcEndpoint","vpcId","id","serviceName","interpolate","routeTableIds","privateSubnets","vpcEndpointType","privateDnsEnabled","securityGroupIds","defaultSecurityGroupId","subnetIds","private","map","subNet","getContainer","registerComposite","pulumiHandlers","resolve","execute","isProduction","protect","dynamoDbTable","addModule","auditLogsDynamoDbTable","vpcEnabled","cognito","useEmailAsUsername","eventBus","bucket","fileManagerBucket","prevDomainName","opensearchDomainName","isUpgradeFromOldCode","primaryDynamodbTableName","namePrefixForOs","namePrefix","hex","addOutputs","fileManagerBucketId","primaryDynamodbTableArn","arn","primaryDynamodbTableHashKey","hashKey","primaryDynamodbTableRangeKey","rangeKey","auditLogsDynamodbTableArn","auditLogsDynamodbTableName","auditLogsDynamodbTableHashKey","auditLogsDynamodbTableRangeKey","cognitoUserPoolId","userPool","cognitoUserPoolArn","cognitoUserPoolPasswordPolicy","passwordPolicy","cognitoAppClientId","userPoolClient","eventBusName","eventBusArn","manifests","dynamoTable","table","tableName","forEach","manifest","addServiceManifest","dynamodbTable"],"sources":["createCorePulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createPulumiApp, isResourceOfType } from \"@webiny/pulumi\";\nimport { CoreCognito } from \"./CoreCognito.js\";\nimport { CoreDynamo } from \"./CoreDynamo.js\";\nimport { OpenSearch } from \"./CoreOpenSearch.js\";\nimport { CoreEventBus } from \"./CoreEventBus.js\";\nimport { CoreFileManger } from \"./CoreFileManager.js\";\nimport { CoreVpc } from \"./CoreVpc.js\";\nimport { WatchCommand } from \"./WatchCommand.js\";\nimport { withServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport {\n    addServiceManifestTableItem,\n    type TableDefinition\n} from \"~/pulumi/utils/addServiceManifestTableItem.js\";\nimport * as random from \"@pulumi/random\";\n\nimport { getProjectSdk } from \"@webiny/project\";\nimport { CorePulumi } from \"~/abstractions/features/pulumi/index.js\";\nimport { corePulumi } from \"~/pulumi/features/CorePulumi/index.js\";\nimport { getOsConfigFromExtension } from \"~/pulumi/apps/extensions/getOsConfigFromExtension.js\";\nimport { getVpcConfigFromExtension } from \"~/pulumi/apps/extensions/getVpcConfigFromExtension.js\";\nimport { applyAwsResourceTags, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\nimport { configureS3BucketMalwareProtection } from \"./configureS3BucketMalwareProtection.js\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport { CoreAuditLogsDynamo } from \"~/pulumi/index.js\";\n\nexport type CorePulumiApp = ReturnType<typeof createCorePulumiApp>;\n\nexport function createCorePulumiApp() {\n    const baseApp = createPulumiApp({\n        name: \"core\",\n        path: \"apps/core\",\n        program: async app => {\n            const sdk = await getProjectSdk();\n            const projectConfig = await sdk.getProjectConfig();\n\n            const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();\n            const coreStackOutput = await sdk.getAppStackOutput<{\n                opensearchDomainName?: string;\n                primaryDynamodbTableName?: string;\n            }>(\"core\");\n            const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);\n            const opensearchExtensionConfig = getOsConfigFromExtension(projectConfig);\n\n            const deploymentId = new random.RandomId(\"deploymentId\", { byteLength: 8 });\n\n            let searchEngineType: \"opensearch\" | null = null;\n            let searchEngineParams: typeof opensearchExtensionConfig | null = null;\n\n            if (opensearchExtensionConfig) {\n                searchEngineParams = opensearchExtensionConfig;\n                searchEngineType = \"opensearch\";\n            }\n\n            if (searchEngineParams) {\n                const params = searchEngineParams;\n                if (typeof params === \"object\") {\n                    if (params.endpoint) {\n                        process.env.OPENSEARCH_ENDPOINT = params.endpoint;\n                    }\n\n                    if (params.domainName) {\n                        process.env.AWS_OS_DOMAIN_NAME = params.domainName;\n                    }\n\n                    if (params.indexPrefix) {\n                        process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;\n                    }\n\n                    if (params.sharedIndexes) {\n                        process.env.OPENSEARCH_SHARED_INDEXES = \"true\";\n                    }\n\n                    if (params.username) {\n                        process.env.OPENSEARCH_USERNAME = params.username;\n                    }\n\n                    if (params.password) {\n                        process.env.OPENSEARCH_PASSWORD = params.password;\n                    }\n                }\n            }\n\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // <-------------------- Enterprise start -------------------->\n            app.addHandler(async () => {\n                const usingAdvancedVpcParams =\n                    vpcExtensionsConfig && typeof vpcExtensionsConfig !== \"boolean\";\n\n                const featureFlags = await sdk.getFeatureFlags();\n                if (featureFlags.isFileManagerThreatDetectionEnabled()) {\n                    configureS3BucketMalwareProtection(app as CorePulumiApp);\n                }\n\n                // Not using advanced VPC params? Then immediately exit.\n                if (!usingAdvancedVpcParams) {\n                    return;\n                }\n\n                const { resources, addResource, onResource } = app as CorePulumiApp;\n                const { useExistingVpc, useVpcEndpoints } = vpcExtensionsConfig;\n\n                // 1. We first deal with \"existing VPC\" setup.\n                if (useExistingVpc) {\n                    if (\"useVpcEndpoints\" in vpcExtensionsConfig) {\n                        throw new Error(\n                            \"Cannot specify `useVpcEndpoints` parameter when using an existing VPC. The VPC endpoints configurations should be already defined within the existing VPC.\"\n                        );\n                    }\n\n                    if (opensearchExtensionConfig) {\n                        if (!useExistingVpc.openSearchDomainVpcConfig) {\n                            throw new Error(\n                                \"Cannot specify `useExistingVpc` parameter because the `openSearchDomainVpcConfig` parameter wasn't provided.\"\n                            );\n                        }\n\n                        onResource(resource => {\n                            if (isResourceOfType(resource, aws.opensearch.Domain)) {\n                                resource.config.vpcOptions(\n                                    useExistingVpc!.openSearchDomainVpcConfig\n                                );\n                            }\n                        });\n                    }\n\n                    if (!useExistingVpc.lambdaFunctionsVpcConfig) {\n                        throw new Error(\n                            \"Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.\"\n                        );\n                    }\n\n                    onResource(resource => {\n                        if (isResourceOfType(resource, aws.lambda.Function)) {\n                            const canUseVpc = resource.meta.canUseVpc !== false;\n                            if (canUseVpc) {\n                                resource.config.vpcConfig(useExistingVpc!.lambdaFunctionsVpcConfig);\n                            }\n                        }\n\n                        if (isResourceOfType(resource, aws.iam.Role)) {\n                            if (resource.meta.isLambdaFunctionRole) {\n                                addResource(aws.iam.RolePolicyAttachment, {\n                                    name: `${resource.name}-vpc-access-execution-role`,\n                                    config: {\n                                        role: resource.output.name,\n                                        policyArn:\n                                            aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole\n                                    }\n                                });\n                            }\n                        }\n                    });\n\n                    return;\n                }\n\n                // 2. Now we deal with \"non-existing VPC\" setup.\n                if (useVpcEndpoints) {\n                    const region = getAwsRegion(app);\n\n                    onResource(resource => {\n                        if (isResourceOfType(resource, aws.ec2.Vpc)) {\n                            resource.config.enableDnsSupport(true);\n                            resource.config.enableDnsHostnames(true);\n                        }\n                    });\n\n                    const { vpc, subnets, routeTables } = resources.vpc!;\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-s3-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.s3`,\n                            routeTableIds: [routeTables.privateSubnets.output.id]\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-dynamodb-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.dynamodb`,\n                            routeTableIds: [routeTables.privateSubnets.output.id]\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-sqs-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.sqs`,\n                            vpcEndpointType: \"Interface\",\n                            privateDnsEnabled: true,\n                            securityGroupIds: [vpc.output.defaultSecurityGroupId],\n                            subnetIds: subnets.private.map(subNet => subNet.output.id)\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-events-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.events`,\n                            vpcEndpointType: \"Interface\",\n                            privateDnsEnabled: true,\n                            securityGroupIds: [vpc.output.defaultSecurityGroupId],\n                            subnetIds: subnets.private.map(subNet => subNet.output.id)\n                        }\n                    });\n                }\n            });\n            // <-------------------- Enterprise end -------------------->\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            sdk.getContainer().registerComposite(corePulumi);\n            const pulumiHandlers = sdk.getContainer().resolve(CorePulumi);\n\n            app.addHandler(() => {\n                return pulumiHandlers.execute(app as CorePulumiApp);\n            });\n\n            const isProduction = app.env.isProduction;\n            const protect = isProduction;\n\n            // Setup DynamoDB table\n            const dynamoDbTable = app.addModule(CoreDynamo, { protect });\n            const auditLogsDynamoDbTable = app.addModule(CoreAuditLogsDynamo, { protect });\n\n            // Setup VPC\n            const vpcEnabled =\n                vpcExtensionsConfig === true ||\n                typeof vpcExtensionsConfig === \"object\" ||\n                isProduction;\n\n            const vpc = vpcEnabled ? app.addModule(CoreVpc) : null;\n\n            // Setup Cognito\n            const cognito = app.addModule(CoreCognito, {\n                protect,\n                useEmailAsUsername: false\n            });\n\n            // Setup event bus\n            const eventBus = app.addModule(CoreEventBus);\n\n            // Setup file core bucket\n            const { bucket: fileManagerBucket } = app.addModule(CoreFileManger, { protect });\n\n            let opensearch;\n            if (searchEngineType === \"opensearch\") {\n                const prevDomainName = coreStackOutput?.opensearchDomainName;\n\n                // When upgrading from old code that never stored opensearchDomainName, the old\n                // code always generated domain names without any prefix (app.params.create\n                // .pulumiResourceNamePrefix was never a real Pulumi param, so it returned \"\").\n                // Using the SDK default \"wby-\" prefix here would generate a different name and\n                // cause Pulumi to destroy and recreate the cluster.\n                const isUpgradeFromOldCode =\n                    !!coreStackOutput?.primaryDynamodbTableName && !prevDomainName;\n                const namePrefixForOs = isUpgradeFromOldCode ? \"\" : pulumiResourceNamePrefix || \"\";\n\n                opensearch = app.addModule(OpenSearch, {\n                    protect,\n                    namePrefix: namePrefixForOs,\n                    prevDomainName\n                });\n            }\n\n            app.addModule(WatchCommand, { deploymentId: deploymentId.hex });\n\n            app.addOutputs({\n                deploymentId: deploymentId.hex,\n                region: aws.config.region,\n                fileManagerBucketId: fileManagerBucket.output.id,\n                primaryDynamodbTableArn: dynamoDbTable.output.arn,\n                primaryDynamodbTableName: dynamoDbTable.output.name,\n                primaryDynamodbTableHashKey: dynamoDbTable.output.hashKey,\n                primaryDynamodbTableRangeKey: dynamoDbTable.output.rangeKey,\n                auditLogsDynamodbTableArn: auditLogsDynamoDbTable.output.arn,\n                auditLogsDynamodbTableName: auditLogsDynamoDbTable.output.name,\n                auditLogsDynamodbTableHashKey: auditLogsDynamoDbTable.output.hashKey,\n                auditLogsDynamodbTableRangeKey: auditLogsDynamoDbTable.output.rangeKey,\n                cognitoUserPoolId: cognito.userPool.output.id,\n                cognitoUserPoolArn: cognito.userPool.output.arn,\n                cognitoUserPoolPasswordPolicy: cognito.userPool.output.passwordPolicy,\n                cognitoAppClientId: cognito.userPoolClient.output.id,\n                eventBusName: eventBus.output.name,\n                eventBusArn: eventBus.output.arn\n            });\n\n            // Applies internal and user-defined AWS tags.\n            await applyAwsResourceTags(\"core\");\n\n            return {\n                dynamoDbTable,\n                vpc,\n                ...cognito,\n                fileManagerBucket,\n                eventBus,\n                opensearch\n            };\n        }\n    });\n\n    const app = withServiceManifest(baseApp, manifests => {\n        const dynamoTable = baseApp.resources.dynamoDbTable;\n\n        const table: TableDefinition = {\n            tableName: dynamoTable.output.name,\n            hashKey: dynamoTable.output.hashKey,\n            rangeKey: dynamoTable.output.rangeKey\n        };\n\n        manifests.forEach(manifest => addServiceManifestTableItem(baseApp, table, manifest));\n    });\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"core\",\n            manifest: {\n                eventBus: {\n                    arn: baseApp.resources.eventBus.output.arn,\n                    name: baseApp.resources.eventBus.output.name\n                },\n                dynamodbTable: {\n                    arn: baseApp.resources.dynamoDbTable.output.arn,\n                    name: baseApp.resources.dynamoDbTable.output.name,\n                    hashKey: baseApp.resources.dynamoDbTable.output.hashKey,\n                    rangeKey: baseApp.resources.dynamoDbTable.output.rangeKey\n                }\n            }\n        });\n    });\n\n    return app;\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,gBAAgB;AAClE,SAASC,WAAW;AACpB,SAASC,UAAU;AACnB,SAASC,UAAU;AACnB,SAASC,YAAY;AACrB,SAASC,cAAc;AACvB,SAASC,OAAO;AAChB,SAASC,YAAY;AACrB,SAASC,mBAAmB;AAC5B,SACIC,2BAA2B;AAG/B,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AAExC,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,UAAU;AACnB,SAASC,UAAU;AACnB,SAASC,wBAAwB;AACjC,SAASC,yBAAyB;AAClC,SAASC,oBAAoB,EAAEC,YAAY;AAC3C,SAASC,kCAAkC;AAC3C,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AACxC,SAASC,mBAAmB;AAI5B,OAAO,SAASC,mBAAmBA,CAAA,EAAG;EAClC,MAAMC,OAAO,GAAGvB,eAAe,CAAC;IAC5BwB,IAAI,EAAE,MAAM;IACZC,IAAI,EAAE,WAAW;IACjBC,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,GAAG,GAAG,MAAMhB,aAAa,CAAC,CAAC;MACjC,MAAMiB,aAAa,GAAG,MAAMD,GAAG,CAACE,gBAAgB,CAAC,CAAC;MAElD,MAAMC,wBAAwB,GAAG,MAAMH,GAAG,CAACI,2BAA2B,CAAC,CAAC;MACxE,MAAMC,eAAe,GAAG,MAAML,GAAG,CAACM,iBAAiB,CAGhD,MAAM,CAAC;MACV,MAAMC,mBAAmB,GAAGnB,yBAAyB,CAACa,aAAa,CAAC;MACpE,MAAMO,yBAAyB,GAAGrB,wBAAwB,CAACc,aAAa,CAAC;MAEzE,MAAMQ,YAAY,GAAG,IAAI1B,MAAM,CAAC2B,QAAQ,CAAC,cAAc,EAAE;QAAEC,UAAU,EAAE;MAAE,CAAC,CAAC;MAE3E,IAAIC,gBAAqC,GAAG,IAAI;MAChD,IAAIC,kBAA2D,GAAG,IAAI;MAEtE,IAAIL,yBAAyB,EAAE;QAC3BK,kBAAkB,GAAGL,yBAAyB;QAC9CI,gBAAgB,GAAG,YAAY;MACnC;MAEA,IAAIC,kBAAkB,EAAE;QACpB,MAAMC,MAAM,GAAGD,kBAAkB;QACjC,IAAI,OAAOC,MAAM,KAAK,QAAQ,EAAE;UAC5B,IAAIA,MAAM,CAACC,QAAQ,EAAE;YACjBC,OAAO,CAACC,GAAG,CAACC,mBAAmB,GAAGJ,MAAM,CAACC,QAAQ;UACrD;UAEA,IAAID,MAAM,CAACK,UAAU,EAAE;YACnBH,OAAO,CAACC,GAAG,CAACG,kBAAkB,GAAGN,MAAM,CAACK,UAAU;UACtD;UAEA,IAAIL,MAAM,CAACO,WAAW,EAAE;YACpBL,OAAO,CAACC,GAAG,CAACK,uBAAuB,GAAGR,MAAM,CAACO,WAAW;UAC5D;UAEA,IAAIP,MAAM,CAACS,aAAa,EAAE;YACtBP,OAAO,CAACC,GAAG,CAACO,yBAAyB,GAAG,MAAM;UAClD;UAEA,IAAIV,MAAM,CAACW,QAAQ,EAAE;YACjBT,OAAO,CAACC,GAAG,CAACS,mBAAmB,GAAGZ,MAAM,CAACW,QAAQ;UACrD;UAEA,IAAIX,MAAM,CAACa,QAAQ,EAAE;YACjBX,OAAO,CAACC,GAAG,CAACW,mBAAmB,GAAGd,MAAM,CAACa,QAAQ;UACrD;QACJ;MACJ;MAEA,IAAIxB,wBAAwB,EAAE;QAC1BJ,GAAG,CAAC8B,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAAClC,IAAI,CAACmC,UAAU,CAAC5B,wBAAwB,CAAC,EAAE;YACrD2B,QAAQ,CAAClC,IAAI,GAAG,GAAGO,wBAAwB,GAAG2B,QAAQ,CAAClC,IAAI,EAAE;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACAG,GAAG,CAACiC,UAAU,CAAC,YAAY;QACvB,MAAMC,sBAAsB,GACxB1B,mBAAmB,IAAI,OAAOA,mBAAmB,KAAK,SAAS;QAEnE,MAAM2B,YAAY,GAAG,MAAMlC,GAAG,CAACmC,eAAe,CAAC,CAAC;QAChD,IAAID,YAAY,CAACE,mCAAmC,CAAC,CAAC,EAAE;UACpD7C,kCAAkC,CAACQ,GAAoB,CAAC;QAC5D;;QAEA;QACA,IAAI,CAACkC,sBAAsB,EAAE;UACzB;QACJ;QAEA,MAAM;UAAEI,SAAS;UAAEC,WAAW;UAAET;QAAW,CAAC,GAAG9B,GAAoB;QACnE,MAAM;UAAEwC,cAAc;UAAEC;QAAgB,CAAC,GAAGjC,mBAAmB;;QAE/D;QACA,IAAIgC,cAAc,EAAE;UAChB,IAAI,iBAAiB,IAAIhC,mBAAmB,EAAE;YAC1C,MAAM,IAAIkC,KAAK,CACX,4JACJ,CAAC;UACL;UAEA,IAAIjC,yBAAyB,EAAE;YAC3B,IAAI,CAAC+B,cAAc,CAACG,yBAAyB,EAAE;cAC3C,MAAM,IAAID,KAAK,CACX,8GACJ,CAAC;YACL;YAEAZ,UAAU,CAACC,QAAQ,IAAI;cACnB,IAAIzD,gBAAgB,CAACyD,QAAQ,EAAE3D,GAAG,CAACwE,UAAU,CAACC,MAAM,CAAC,EAAE;gBACnDd,QAAQ,CAACe,MAAM,CAACC,UAAU,CACtBP,cAAc,CAAEG,yBACpB,CAAC;cACL;YACJ,CAAC,CAAC;UACN;UAEA,IAAI,CAACH,cAAc,CAACQ,wBAAwB,EAAE;YAC1C,MAAM,IAAIN,KAAK,CACX,6GACJ,CAAC;UACL;UAEAZ,UAAU,CAACC,QAAQ,IAAI;YACnB,IAAIzD,gBAAgB,CAACyD,QAAQ,EAAE3D,GAAG,CAAC6E,MAAM,CAACC,QAAQ,CAAC,EAAE;cACjD,MAAMC,SAAS,GAAGpB,QAAQ,CAACqB,IAAI,CAACD,SAAS,KAAK,KAAK;cACnD,IAAIA,SAAS,EAAE;gBACXpB,QAAQ,CAACe,MAAM,CAACO,SAAS,CAACb,cAAc,CAAEQ,wBAAwB,CAAC;cACvE;YACJ;YAEA,IAAI1E,gBAAgB,CAACyD,QAAQ,EAAE3D,GAAG,CAACkF,GAAG,CAACC,IAAI,CAAC,EAAE;cAC1C,IAAIxB,QAAQ,CAACqB,IAAI,CAACI,oBAAoB,EAAE;gBACpCjB,WAAW,CAACnE,GAAG,CAACkF,GAAG,CAACG,oBAAoB,EAAE;kBACtC5D,IAAI,EAAE,GAAGkC,QAAQ,CAAClC,IAAI,4BAA4B;kBAClDiD,MAAM,EAAE;oBACJY,IAAI,EAAE3B,QAAQ,CAAC4B,MAAM,CAAC9D,IAAI;oBAC1B+D,SAAS,EACLxF,GAAG,CAACkF,GAAG,CAACO,aAAa,CAACC;kBAC9B;gBACJ,CAAC,CAAC;cACN;YACJ;UACJ,CAAC,CAAC;UAEF;QACJ;;QAEA;QACA,IAAIrB,eAAe,EAAE;UACjB,MAAMsB,MAAM,GAAGxE,YAAY,CAACS,GAAG,CAAC;UAEhC8B,UAAU,CAACC,QAAQ,IAAI;YACnB,IAAIzD,gBAAgB,CAACyD,QAAQ,EAAE3D,GAAG,CAAC4F,GAAG,CAACC,GAAG,CAAC,EAAE;cACzClC,QAAQ,CAACe,MAAM,CAACoB,gBAAgB,CAAC,IAAI,CAAC;cACtCnC,QAAQ,CAACe,MAAM,CAACqB,kBAAkB,CAAC,IAAI,CAAC;YAC5C;UACJ,CAAC,CAAC;UAEF,MAAM;YAAEC,GAAG;YAAEC,OAAO;YAAEC;UAAY,CAAC,GAAGhC,SAAS,CAAC8B,GAAI;UACpD7B,WAAW,CAACnE,GAAG,CAAC4F,GAAG,CAACO,WAAW,EAAE;YAC7B1E,IAAI,EAAE,qBAAqB;YAC3BiD,MAAM,EAAE;cACJ0B,KAAK,EAAEJ,GAAG,CAACT,MAAM,CAACc,EAAE;cACpBC,WAAW,EAAEjF,MAAM,CAACkF,WAAW,iBAAiBZ,MAAM,KAAK;cAC3Da,aAAa,EAAE,CAACN,WAAW,CAACO,cAAc,CAAClB,MAAM,CAACc,EAAE;YACxD;UACJ,CAAC,CAAC;UAEFlC,WAAW,CAACnE,GAAG,CAAC4F,GAAG,CAACO,WAAW,EAAE;YAC7B1E,IAAI,EAAE,2BAA2B;YACjCiD,MAAM,EAAE;cACJ0B,KAAK,EAAEJ,GAAG,CAACT,MAAM,CAACc,EAAE;cACpBC,WAAW,EAAEjF,MAAM,CAACkF,WAAW,iBAAiBZ,MAAM,WAAW;cACjEa,aAAa,EAAE,CAACN,WAAW,CAACO,cAAc,CAAClB,MAAM,CAACc,EAAE;YACxD;UACJ,CAAC,CAAC;UAEFlC,WAAW,CAACnE,GAAG,CAAC4F,GAAG,CAACO,WAAW,EAAE;YAC7B1E,IAAI,EAAE,sBAAsB;YAC5BiD,MAAM,EAAE;cACJ0B,KAAK,EAAEJ,GAAG,CAACT,MAAM,CAACc,EAAE;cACpBC,WAAW,EAAEjF,MAAM,CAACkF,WAAW,iBAAiBZ,MAAM,MAAM;cAC5De,eAAe,EAAE,WAAW;cAC5BC,iBAAiB,EAAE,IAAI;cACvBC,gBAAgB,EAAE,CAACZ,GAAG,CAACT,MAAM,CAACsB,sBAAsB,CAAC;cACrDC,SAAS,EAAEb,OAAO,CAACc,OAAO,CAACC,GAAG,CAACC,MAAM,IAAIA,MAAM,CAAC1B,MAAM,CAACc,EAAE;YAC7D;UACJ,CAAC,CAAC;UAEFlC,WAAW,CAACnE,GAAG,CAAC4F,GAAG,CAACO,WAAW,EAAE;YAC7B1E,IAAI,EAAE,yBAAyB;YAC/BiD,MAAM,EAAE;cACJ0B,KAAK,EAAEJ,GAAG,CAACT,MAAM,CAACc,EAAE;cACpBC,WAAW,EAAEjF,MAAM,CAACkF,WAAW,iBAAiBZ,MAAM,SAAS;cAC/De,eAAe,EAAE,WAAW;cAC5BC,iBAAiB,EAAE,IAAI;cACvBC,gBAAgB,EAAE,CAACZ,GAAG,CAACT,MAAM,CAACsB,sBAAsB,CAAC;cACrDC,SAAS,EAAEb,OAAO,CAACc,OAAO,CAACC,GAAG,CAACC,MAAM,IAAIA,MAAM,CAAC1B,MAAM,CAACc,EAAE;YAC7D;UACJ,CAAC,CAAC;QACN;MACJ,CAAC,CAAC;MACF;;MAEA;MACA;MACAxE,GAAG,CAACqF,YAAY,CAAC,CAAC,CAACC,iBAAiB,CAACpG,UAAU,CAAC;MAChD,MAAMqG,cAAc,GAAGvF,GAAG,CAACqF,YAAY,CAAC,CAAC,CAACG,OAAO,CAACvG,UAAU,CAAC;MAE7Dc,GAAG,CAACiC,UAAU,CAAC,MAAM;QACjB,OAAOuD,cAAc,CAACE,OAAO,CAAC1F,GAAoB,CAAC;MACvD,CAAC,CAAC;MAEF,MAAM2F,YAAY,GAAG3F,GAAG,CAACkB,GAAG,CAACyE,YAAY;MACzC,MAAMC,OAAO,GAAGD,YAAY;;MAE5B;MACA,MAAME,aAAa,GAAG7F,GAAG,CAAC8F,SAAS,CAACtH,UAAU,EAAE;QAAEoH;MAAQ,CAAC,CAAC;MAC5D,MAAMG,sBAAsB,GAAG/F,GAAG,CAAC8F,SAAS,CAACpG,mBAAmB,EAAE;QAAEkG;MAAQ,CAAC,CAAC;;MAE9E;MACA,MAAMI,UAAU,GACZxF,mBAAmB,KAAK,IAAI,IAC5B,OAAOA,mBAAmB,KAAK,QAAQ,IACvCmF,YAAY;MAEhB,MAAMvB,GAAG,GAAG4B,UAAU,GAAGhG,GAAG,CAAC8F,SAAS,CAAClH,OAAO,CAAC,GAAG,IAAI;;MAEtD;MACA,MAAMqH,OAAO,GAAGjG,GAAG,CAAC8F,SAAS,CAACvH,WAAW,EAAE;QACvCqH,OAAO;QACPM,kBAAkB,EAAE;MACxB,CAAC,CAAC;;MAEF;MACA,MAAMC,QAAQ,GAAGnG,GAAG,CAAC8F,SAAS,CAACpH,YAAY,CAAC;;MAE5C;MACA,MAAM;QAAE0H,MAAM,EAAEC;MAAkB,CAAC,GAAGrG,GAAG,CAAC8F,SAAS,CAACnH,cAAc,EAAE;QAAEiH;MAAQ,CAAC,CAAC;MAEhF,IAAIhD,UAAU;MACd,IAAI/B,gBAAgB,KAAK,YAAY,EAAE;QACnC,MAAMyF,cAAc,GAAGhG,eAAe,EAAEiG,oBAAoB;;QAE5D;QACA;QACA;QACA;QACA;QACA,MAAMC,oBAAoB,GACtB,CAAC,CAAClG,eAAe,EAAEmG,wBAAwB,IAAI,CAACH,cAAc;QAClE,MAAMI,eAAe,GAAGF,oBAAoB,GAAG,EAAE,GAAGpG,wBAAwB,IAAI,EAAE;QAElFwC,UAAU,GAAG5C,GAAG,CAAC8F,SAAS,CAACrH,UAAU,EAAE;UACnCmH,OAAO;UACPe,UAAU,EAAED,eAAe;UAC3BJ;QACJ,CAAC,CAAC;MACN;MAEAtG,GAAG,CAAC8F,SAAS,CAACjH,YAAY,EAAE;QAAE6B,YAAY,EAAEA,YAAY,CAACkG;MAAI,CAAC,CAAC;MAE/D5G,GAAG,CAAC6G,UAAU,CAAC;QACXnG,YAAY,EAAEA,YAAY,CAACkG,GAAG;QAC9B7C,MAAM,EAAE3F,GAAG,CAAC0E,MAAM,CAACiB,MAAM;QACzB+C,mBAAmB,EAAET,iBAAiB,CAAC1C,MAAM,CAACc,EAAE;QAChDsC,uBAAuB,EAAElB,aAAa,CAAClC,MAAM,CAACqD,GAAG;QACjDP,wBAAwB,EAAEZ,aAAa,CAAClC,MAAM,CAAC9D,IAAI;QACnDoH,2BAA2B,EAAEpB,aAAa,CAAClC,MAAM,CAACuD,OAAO;QACzDC,4BAA4B,EAAEtB,aAAa,CAAClC,MAAM,CAACyD,QAAQ;QAC3DC,yBAAyB,EAAEtB,sBAAsB,CAACpC,MAAM,CAACqD,GAAG;QAC5DM,0BAA0B,EAAEvB,sBAAsB,CAACpC,MAAM,CAAC9D,IAAI;QAC9D0H,6BAA6B,EAAExB,sBAAsB,CAACpC,MAAM,CAACuD,OAAO;QACpEM,8BAA8B,EAAEzB,sBAAsB,CAACpC,MAAM,CAACyD,QAAQ;QACtEK,iBAAiB,EAAExB,OAAO,CAACyB,QAAQ,CAAC/D,MAAM,CAACc,EAAE;QAC7CkD,kBAAkB,EAAE1B,OAAO,CAACyB,QAAQ,CAAC/D,MAAM,CAACqD,GAAG;QAC/CY,6BAA6B,EAAE3B,OAAO,CAACyB,QAAQ,CAAC/D,MAAM,CAACkE,cAAc;QACrEC,kBAAkB,EAAE7B,OAAO,CAAC8B,cAAc,CAACpE,MAAM,CAACc,EAAE;QACpDuD,YAAY,EAAE7B,QAAQ,CAACxC,MAAM,CAAC9D,IAAI;QAClCoI,WAAW,EAAE9B,QAAQ,CAACxC,MAAM,CAACqD;MACjC,CAAC,CAAC;;MAEF;MACA,MAAM1H,oBAAoB,CAAC,MAAM,CAAC;MAElC,OAAO;QACHuG,aAAa;QACbzB,GAAG;QACH,GAAG6B,OAAO;QACVI,iBAAiB;QACjBF,QAAQ;QACRvD;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,MAAM5C,GAAG,GAAGlB,mBAAmB,CAACc,OAAO,EAAEsI,SAAS,IAAI;IAClD,MAAMC,WAAW,GAAGvI,OAAO,CAAC0C,SAAS,CAACuD,aAAa;IAEnD,MAAMuC,KAAsB,GAAG;MAC3BC,SAAS,EAAEF,WAAW,CAACxE,MAAM,CAAC9D,IAAI;MAClCqH,OAAO,EAAEiB,WAAW,CAACxE,MAAM,CAACuD,OAAO;MACnCE,QAAQ,EAAEe,WAAW,CAACxE,MAAM,CAACyD;IACjC,CAAC;IAEDc,SAAS,CAACI,OAAO,CAACC,QAAQ,IAAIxJ,2BAA2B,CAACa,OAAO,EAAEwI,KAAK,EAAEG,QAAQ,CAAC,CAAC;EACxF,CAAC,CAAC;EAEFvI,GAAG,CAACiC,UAAU,CAAC,MAAM;IACjBjC,GAAG,CAACwI,kBAAkB,CAAC;MACnB3I,IAAI,EAAE,MAAM;MACZ0I,QAAQ,EAAE;QACNpC,QAAQ,EAAE;UACNa,GAAG,EAAEpH,OAAO,CAAC0C,SAAS,CAAC6D,QAAQ,CAACxC,MAAM,CAACqD,GAAG;UAC1CnH,IAAI,EAAED,OAAO,CAAC0C,SAAS,CAAC6D,QAAQ,CAACxC,MAAM,CAAC9D;QAC5C,CAAC;QACD4I,aAAa,EAAE;UACXzB,GAAG,EAAEpH,OAAO,CAAC0C,SAAS,CAACuD,aAAa,CAAClC,MAAM,CAACqD,GAAG;UAC/CnH,IAAI,EAAED,OAAO,CAAC0C,SAAS,CAACuD,aAAa,CAAClC,MAAM,CAAC9D,IAAI;UACjDqH,OAAO,EAAEtH,OAAO,CAAC0C,SAAS,CAACuD,aAAa,CAAClC,MAAM,CAACuD,OAAO;UACvDE,QAAQ,EAAExH,OAAO,CAAC0C,SAAS,CAACuD,aAAa,CAAClC,MAAM,CAACyD;QACrD;MACJ;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;EAEF,OAAOpH,GAAG;AACd","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/core/createCorePulumiApp.js","sources":["../../../../src/pulumi/apps/core/createCorePulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createPulumiApp, isResourceOfType } from \"@webiny/pulumi\";\nimport { CoreCognito } from \"./CoreCognito.js\";\nimport { CoreDynamo } from \"./CoreDynamo.js\";\nimport { OpenSearch } from \"./CoreOpenSearch.js\";\nimport { CoreEventBus } from \"./CoreEventBus.js\";\nimport { CoreFileManger } from \"./CoreFileManager.js\";\nimport { CoreVpc } from \"./CoreVpc.js\";\nimport { WatchCommand } from \"./WatchCommand.js\";\nimport { withServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport {\n    addServiceManifestTableItem,\n    type TableDefinition\n} from \"~/pulumi/utils/addServiceManifestTableItem.js\";\nimport * as random from \"@pulumi/random\";\n\nimport { getProjectSdk } from \"@webiny/project\";\nimport { CorePulumi } from \"~/abstractions/features/pulumi/index.js\";\nimport { corePulumi } from \"~/pulumi/features/CorePulumi/index.js\";\nimport { getOsConfigFromExtension } from \"~/pulumi/apps/extensions/getOsConfigFromExtension.js\";\nimport { getVpcConfigFromExtension } from \"~/pulumi/apps/extensions/getVpcConfigFromExtension.js\";\nimport { applyAwsResourceTags, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\nimport { configureS3BucketMalwareProtection } from \"./configureS3BucketMalwareProtection.js\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport { CoreAuditLogsDynamo } from \"~/pulumi/index.js\";\n\nexport type CorePulumiApp = ReturnType<typeof createCorePulumiApp>;\n\nexport function createCorePulumiApp() {\n    const baseApp = createPulumiApp({\n        name: \"core\",\n        path: \"apps/core\",\n        program: async app => {\n            const sdk = await getProjectSdk();\n            const projectConfig = await sdk.getProjectConfig();\n\n            const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();\n            const coreStackOutput = await sdk.getAppStackOutput<{\n                opensearchDomainName?: string;\n                primaryDynamodbTableName?: string;\n            }>(\"core\");\n            const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);\n            const opensearchExtensionConfig = getOsConfigFromExtension(projectConfig);\n\n            const deploymentId = new random.RandomId(\"deploymentId\", { byteLength: 8 });\n\n            let searchEngineType: \"opensearch\" | null = null;\n            let searchEngineParams: typeof opensearchExtensionConfig | null = null;\n\n            if (opensearchExtensionConfig) {\n                searchEngineParams = opensearchExtensionConfig;\n                searchEngineType = \"opensearch\";\n            }\n\n            if (searchEngineParams) {\n                const params = searchEngineParams;\n                if (typeof params === \"object\") {\n                    if (params.endpoint) {\n                        process.env.OPENSEARCH_ENDPOINT = params.endpoint;\n                    }\n\n                    if (params.domainName) {\n                        process.env.AWS_OS_DOMAIN_NAME = params.domainName;\n                    }\n\n                    if (params.indexPrefix) {\n                        process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;\n                    }\n\n                    if (params.sharedIndexes) {\n                        process.env.OPENSEARCH_SHARED_INDEXES = \"true\";\n                    }\n\n                    if (params.username) {\n                        process.env.OPENSEARCH_USERNAME = params.username;\n                    }\n\n                    if (params.password) {\n                        process.env.OPENSEARCH_PASSWORD = params.password;\n                    }\n                }\n            }\n\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // <-------------------- Enterprise start -------------------->\n            app.addHandler(async () => {\n                const usingAdvancedVpcParams =\n                    vpcExtensionsConfig && typeof vpcExtensionsConfig !== \"boolean\";\n\n                const featureFlags = await sdk.getFeatureFlags();\n                if (featureFlags.isFileManagerThreatDetectionEnabled()) {\n                    configureS3BucketMalwareProtection(app as CorePulumiApp);\n                }\n\n                // Not using advanced VPC params? Then immediately exit.\n                if (!usingAdvancedVpcParams) {\n                    return;\n                }\n\n                const { resources, addResource, onResource } = app as CorePulumiApp;\n                const { useExistingVpc, useVpcEndpoints } = vpcExtensionsConfig;\n\n                // 1. We first deal with \"existing VPC\" setup.\n                if (useExistingVpc) {\n                    if (\"useVpcEndpoints\" in vpcExtensionsConfig) {\n                        throw new Error(\n                            \"Cannot specify `useVpcEndpoints` parameter when using an existing VPC. The VPC endpoints configurations should be already defined within the existing VPC.\"\n                        );\n                    }\n\n                    if (opensearchExtensionConfig) {\n                        if (!useExistingVpc.openSearchDomainVpcConfig) {\n                            throw new Error(\n                                \"Cannot specify `useExistingVpc` parameter because the `openSearchDomainVpcConfig` parameter wasn't provided.\"\n                            );\n                        }\n\n                        onResource(resource => {\n                            if (isResourceOfType(resource, aws.opensearch.Domain)) {\n                                resource.config.vpcOptions(\n                                    useExistingVpc!.openSearchDomainVpcConfig\n                                );\n                            }\n                        });\n                    }\n\n                    if (!useExistingVpc.lambdaFunctionsVpcConfig) {\n                        throw new Error(\n                            \"Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.\"\n                        );\n                    }\n\n                    onResource(resource => {\n                        if (isResourceOfType(resource, aws.lambda.Function)) {\n                            const canUseVpc = resource.meta.canUseVpc !== false;\n                            if (canUseVpc) {\n                                resource.config.vpcConfig(useExistingVpc!.lambdaFunctionsVpcConfig);\n                            }\n                        }\n\n                        if (isResourceOfType(resource, aws.iam.Role)) {\n                            if (resource.meta.isLambdaFunctionRole) {\n                                addResource(aws.iam.RolePolicyAttachment, {\n                                    name: `${resource.name}-vpc-access-execution-role`,\n                                    config: {\n                                        role: resource.output.name,\n                                        policyArn:\n                                            aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole\n                                    }\n                                });\n                            }\n                        }\n                    });\n\n                    return;\n                }\n\n                // 2. Now we deal with \"non-existing VPC\" setup.\n                if (useVpcEndpoints) {\n                    const region = getAwsRegion(app);\n\n                    onResource(resource => {\n                        if (isResourceOfType(resource, aws.ec2.Vpc)) {\n                            resource.config.enableDnsSupport(true);\n                            resource.config.enableDnsHostnames(true);\n                        }\n                    });\n\n                    const { vpc, subnets, routeTables } = resources.vpc!;\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-s3-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.s3`,\n                            routeTableIds: [routeTables.privateSubnets.output.id]\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-dynamodb-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.dynamodb`,\n                            routeTableIds: [routeTables.privateSubnets.output.id]\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-sqs-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.sqs`,\n                            vpcEndpointType: \"Interface\",\n                            privateDnsEnabled: true,\n                            securityGroupIds: [vpc.output.defaultSecurityGroupId],\n                            subnetIds: subnets.private.map(subNet => subNet.output.id)\n                        }\n                    });\n\n                    addResource(aws.ec2.VpcEndpoint, {\n                        name: \"vpc-events-vpc-endpoint\",\n                        config: {\n                            vpcId: vpc.output.id,\n                            serviceName: pulumi.interpolate`com.amazonaws.${region}.events`,\n                            vpcEndpointType: \"Interface\",\n                            privateDnsEnabled: true,\n                            securityGroupIds: [vpc.output.defaultSecurityGroupId],\n                            subnetIds: subnets.private.map(subNet => subNet.output.id)\n                        }\n                    });\n                }\n            });\n            // <-------------------- Enterprise end -------------------->\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            sdk.getContainer().registerComposite(corePulumi);\n            const pulumiHandlers = sdk.getContainer().resolve(CorePulumi);\n\n            app.addHandler(() => {\n                return pulumiHandlers.execute(app as CorePulumiApp);\n            });\n\n            const isProduction = app.env.isProduction;\n            const protect = isProduction;\n\n            // Setup DynamoDB table\n            const dynamoDbTable = app.addModule(CoreDynamo, { protect });\n            const auditLogsDynamoDbTable = app.addModule(CoreAuditLogsDynamo, { protect });\n\n            // Setup VPC\n            const vpcEnabled =\n                vpcExtensionsConfig === true ||\n                typeof vpcExtensionsConfig === \"object\" ||\n                isProduction;\n\n            const vpc = vpcEnabled ? app.addModule(CoreVpc) : null;\n\n            // Setup Cognito\n            const cognito = app.addModule(CoreCognito, {\n                protect,\n                useEmailAsUsername: false\n            });\n\n            // Setup event bus\n            const eventBus = app.addModule(CoreEventBus);\n\n            // Setup file core bucket\n            const { bucket: fileManagerBucket } = app.addModule(CoreFileManger, { protect });\n\n            let opensearch;\n            if (searchEngineType === \"opensearch\") {\n                const prevDomainName = coreStackOutput?.opensearchDomainName;\n\n                // When upgrading from old code that never stored opensearchDomainName, the old\n                // code always generated domain names without any prefix (app.params.create\n                // .pulumiResourceNamePrefix was never a real Pulumi param, so it returned \"\").\n                // Using the SDK default \"wby-\" prefix here would generate a different name and\n                // cause Pulumi to destroy and recreate the cluster.\n                const isUpgradeFromOldCode =\n                    !!coreStackOutput?.primaryDynamodbTableName && !prevDomainName;\n                const namePrefixForOs = isUpgradeFromOldCode ? \"\" : pulumiResourceNamePrefix || \"\";\n\n                opensearch = app.addModule(OpenSearch, {\n                    protect,\n                    namePrefix: namePrefixForOs,\n                    prevDomainName\n                });\n            }\n\n            app.addModule(WatchCommand, { deploymentId: deploymentId.hex });\n\n            app.addOutputs({\n                deploymentId: deploymentId.hex,\n                region: aws.config.region,\n                fileManagerBucketId: fileManagerBucket.output.id,\n                primaryDynamodbTableArn: dynamoDbTable.output.arn,\n                primaryDynamodbTableName: dynamoDbTable.output.name,\n                primaryDynamodbTableHashKey: dynamoDbTable.output.hashKey,\n                primaryDynamodbTableRangeKey: dynamoDbTable.output.rangeKey,\n                auditLogsDynamodbTableArn: auditLogsDynamoDbTable.output.arn,\n                auditLogsDynamodbTableName: auditLogsDynamoDbTable.output.name,\n                auditLogsDynamodbTableHashKey: auditLogsDynamoDbTable.output.hashKey,\n                auditLogsDynamodbTableRangeKey: auditLogsDynamoDbTable.output.rangeKey,\n                cognitoUserPoolId: cognito.userPool.output.id,\n                cognitoUserPoolArn: cognito.userPool.output.arn,\n                cognitoUserPoolPasswordPolicy: cognito.userPool.output.passwordPolicy,\n                cognitoAppClientId: cognito.userPoolClient.output.id,\n                eventBusName: eventBus.output.name,\n                eventBusArn: eventBus.output.arn\n            });\n\n            // Applies internal and user-defined AWS tags.\n            await applyAwsResourceTags(\"core\");\n\n            return {\n                dynamoDbTable,\n                vpc,\n                ...cognito,\n                fileManagerBucket,\n                eventBus,\n                opensearch\n            };\n        }\n    });\n\n    const app = withServiceManifest(baseApp, manifests => {\n        const dynamoTable = baseApp.resources.dynamoDbTable;\n\n        const table: TableDefinition = {\n            tableName: dynamoTable.output.name,\n            hashKey: dynamoTable.output.hashKey,\n            rangeKey: dynamoTable.output.rangeKey\n        };\n\n        manifests.forEach(manifest => addServiceManifestTableItem(baseApp, table, manifest));\n    });\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"core\",\n            manifest: {\n                eventBus: {\n                    arn: baseApp.resources.eventBus.output.arn,\n                    name: baseApp.resources.eventBus.output.name\n                },\n                dynamodbTable: {\n                    arn: baseApp.resources.dynamoDbTable.output.arn,\n                    name: baseApp.resources.dynamoDbTable.output.name,\n                    hashKey: baseApp.resources.dynamoDbTable.output.hashKey,\n                    rangeKey: baseApp.resources.dynamoDbTable.output.rangeKey\n                }\n            }\n        });\n    });\n\n    return app;\n}\n"],"names":["createCorePulumiApp","baseApp","createPulumiApp","app","sdk","getProjectSdk","projectConfig","pulumiResourceNamePrefix","coreStackOutput","vpcExtensionsConfig","getVpcConfigFromExtension","opensearchExtensionConfig","getOsConfigFromExtension","deploymentId","random","searchEngineType","searchEngineParams","params","process","resource","usingAdvancedVpcParams","featureFlags","configureS3BucketMalwareProtection","resources","addResource","onResource","useExistingVpc","useVpcEndpoints","Error","isResourceOfType","aws","canUseVpc","region","getAwsRegion","vpc","subnets","routeTables","pulumi","subNet","corePulumi","pulumiHandlers","CorePulumi","isProduction","protect","dynamoDbTable","CoreDynamo","auditLogsDynamoDbTable","CoreAuditLogsDynamo","vpcEnabled","CoreVpc","cognito","CoreCognito","eventBus","CoreEventBus","fileManagerBucket","CoreFileManger","opensearch","prevDomainName","isUpgradeFromOldCode","namePrefixForOs","OpenSearch","WatchCommand","applyAwsResourceTags","withServiceManifest","manifests","dynamoTable","table","manifest","addServiceManifestTableItem"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA4BO,SAASA;IACZ,MAAMC,UAAUC,gBAAgB;QAC5B,MAAM;QACN,MAAM;QACN,SAAS,OAAMC;YACX,MAAMC,MAAM,MAAMC;YAClB,MAAMC,gBAAgB,MAAMF,IAAI,gBAAgB;YAEhD,MAAMG,2BAA2B,MAAMH,IAAI,2BAA2B;YACtE,MAAMI,kBAAkB,MAAMJ,IAAI,iBAAiB,CAGhD;YACH,MAAMK,sBAAsBC,0BAA0BJ;YACtD,MAAMK,4BAA4BC,yBAAyBN;YAE3D,MAAMO,eAAe,IAAIC,0CAAAA,QAAe,CAAC,gBAAgB;gBAAE,YAAY;YAAE;YAEzE,IAAIC,mBAAwC;YAC5C,IAAIC,qBAA8D;YAElE,IAAIL,2BAA2B;gBAC3BK,qBAAqBL;gBACrBI,mBAAmB;YACvB;YAEA,IAAIC,oBAAoB;gBACpB,MAAMC,SAASD;gBACf,IAAI,AAAkB,YAAlB,OAAOC,QAAqB;oBAC5B,IAAIA,OAAO,QAAQ,EACfC,QAAQ,GAAG,CAAC,mBAAmB,GAAGD,OAAO,QAAQ;oBAGrD,IAAIA,OAAO,UAAU,EACjBC,QAAQ,GAAG,CAAC,kBAAkB,GAAGD,OAAO,UAAU;oBAGtD,IAAIA,OAAO,WAAW,EAClBC,QAAQ,GAAG,CAAC,uBAAuB,GAAGD,OAAO,WAAW;oBAG5D,IAAIA,OAAO,aAAa,EACpBC,QAAQ,GAAG,CAAC,yBAAyB,GAAG;oBAG5C,IAAID,OAAO,QAAQ,EACfC,QAAQ,GAAG,CAAC,mBAAmB,GAAGD,OAAO,QAAQ;oBAGrD,IAAIA,OAAO,QAAQ,EACfC,QAAQ,GAAG,CAAC,mBAAmB,GAAGD,OAAO,QAAQ;gBAEzD;YACJ;YAEA,IAAIV,0BACAJ,IAAI,UAAU,CAACgB,CAAAA;gBACX,IAAI,CAACA,SAAS,IAAI,CAAC,UAAU,CAACZ,2BAC1BY,SAAS,IAAI,GAAG,GAAGZ,2BAA2BY,SAAS,IAAI,EAAE;YAErE;YAIJhB,IAAI,UAAU,CAAC;gBACX,MAAMiB,yBACFX,uBAAuB,AAA+B,aAA/B,OAAOA;gBAElC,MAAMY,eAAe,MAAMjB,IAAI,eAAe;gBAC9C,IAAIiB,aAAa,mCAAmC,IAChDC,mCAAmCnB;gBAIvC,IAAI,CAACiB,wBACD;gBAGJ,MAAM,EAAEG,SAAS,EAAEC,WAAW,EAAEC,UAAU,EAAE,GAAGtB;gBAC/C,MAAM,EAAEuB,cAAc,EAAEC,eAAe,EAAE,GAAGlB;gBAG5C,IAAIiB,gBAAgB;oBAChB,IAAI,qBAAqBjB,qBACrB,MAAM,IAAImB,MACN;oBAIR,IAAIjB,2BAA2B;wBAC3B,IAAI,CAACe,eAAe,yBAAyB,EACzC,MAAM,IAAIE,MACN;wBAIRH,WAAWN,CAAAA;4BACP,IAAIU,iBAAiBV,UAAUW,uCAAAA,UAAAA,CAAAA,MAAqB,GAChDX,SAAS,MAAM,CAAC,UAAU,CACtBO,eAAgB,yBAAyB;wBAGrD;oBACJ;oBAEA,IAAI,CAACA,eAAe,wBAAwB,EACxC,MAAM,IAAIE,MACN;oBAIRH,WAAWN,CAAAA;wBACP,IAAIU,iBAAiBV,UAAUW,uCAAAA,MAAAA,CAAAA,QAAmB,GAAG;4BACjD,MAAMC,YAAYZ,AAA4B,UAA5BA,SAAS,IAAI,CAAC,SAAS;4BACzC,IAAIY,WACAZ,SAAS,MAAM,CAAC,SAAS,CAACO,eAAgB,wBAAwB;wBAE1E;wBAEA,IAAIG,iBAAiBV,UAAUW,uCAAAA,GAAAA,CAAAA,IAAY,GACvC;4BAAA,IAAIX,SAAS,IAAI,CAAC,oBAAoB,EAClCK,YAAYM,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;gCACtC,MAAM,GAAGX,SAAS,IAAI,CAAC,0BAA0B,CAAC;gCAClD,QAAQ;oCACJ,MAAMA,SAAS,MAAM,CAAC,IAAI;oCAC1B,WACIW,uCAAAA,GAAAA,CAAAA,aAAAA,CAAAA,+BAAqD;gCAC7D;4BACJ;wBACJ;oBAER;oBAEA;gBACJ;gBAGA,IAAIH,iBAAiB;oBACjB,MAAMK,SAASC,aAAa9B;oBAE5BsB,WAAWN,CAAAA;wBACP,IAAIU,iBAAiBV,UAAUW,uCAAAA,GAAAA,CAAAA,GAAW,GAAG;4BACzCX,SAAS,MAAM,CAAC,gBAAgB,CAAC;4BACjCA,SAAS,MAAM,CAAC,kBAAkB,CAAC;wBACvC;oBACJ;oBAEA,MAAM,EAAEe,GAAG,EAAEC,OAAO,EAAEC,WAAW,EAAE,GAAGb,UAAU,GAAG;oBACnDC,YAAYM,uCAAAA,GAAAA,CAAAA,WAAmB,EAAE;wBAC7B,MAAM;wBACN,QAAQ;4BACJ,OAAOI,IAAI,MAAM,CAAC,EAAE;4BACpB,aAAaG,0CAAAA,WAAkB,CAAC,cAAc,EAAEL,OAAO,GAAG,CAAC;4BAC3D,eAAe;gCAACI,YAAY,cAAc,CAAC,MAAM,CAAC,EAAE;6BAAC;wBACzD;oBACJ;oBAEAZ,YAAYM,uCAAAA,GAAAA,CAAAA,WAAmB,EAAE;wBAC7B,MAAM;wBACN,QAAQ;4BACJ,OAAOI,IAAI,MAAM,CAAC,EAAE;4BACpB,aAAaG,0CAAAA,WAAkB,CAAC,cAAc,EAAEL,OAAO,SAAS,CAAC;4BACjE,eAAe;gCAACI,YAAY,cAAc,CAAC,MAAM,CAAC,EAAE;6BAAC;wBACzD;oBACJ;oBAEAZ,YAAYM,uCAAAA,GAAAA,CAAAA,WAAmB,EAAE;wBAC7B,MAAM;wBACN,QAAQ;4BACJ,OAAOI,IAAI,MAAM,CAAC,EAAE;4BACpB,aAAaG,0CAAAA,WAAkB,CAAC,cAAc,EAAEL,OAAO,IAAI,CAAC;4BAC5D,iBAAiB;4BACjB,mBAAmB;4BACnB,kBAAkB;gCAACE,IAAI,MAAM,CAAC,sBAAsB;6BAAC;4BACrD,WAAWC,QAAQ,OAAO,CAAC,GAAG,CAACG,CAAAA,SAAUA,OAAO,MAAM,CAAC,EAAE;wBAC7D;oBACJ;oBAEAd,YAAYM,uCAAAA,GAAAA,CAAAA,WAAmB,EAAE;wBAC7B,MAAM;wBACN,QAAQ;4BACJ,OAAOI,IAAI,MAAM,CAAC,EAAE;4BACpB,aAAaG,0CAAAA,WAAkB,CAAC,cAAc,EAAEL,OAAO,OAAO,CAAC;4BAC/D,iBAAiB;4BACjB,mBAAmB;4BACnB,kBAAkB;gCAACE,IAAI,MAAM,CAAC,sBAAsB;6BAAC;4BACrD,WAAWC,QAAQ,OAAO,CAAC,GAAG,CAACG,CAAAA,SAAUA,OAAO,MAAM,CAAC,EAAE;wBAC7D;oBACJ;gBACJ;YACJ;YAKAlC,IAAI,YAAY,GAAG,iBAAiB,CAACmC;YACrC,MAAMC,iBAAiBpC,IAAI,YAAY,GAAG,OAAO,CAACqC;YAElDtC,IAAI,UAAU,CAAC,IACJqC,eAAe,OAAO,CAACrC;YAGlC,MAAMuC,eAAevC,IAAI,GAAG,CAAC,YAAY;YACzC,MAAMwC,UAAUD;YAGhB,MAAME,gBAAgBzC,IAAI,SAAS,CAAC0C,YAAY;gBAAEF;YAAQ;YAC1D,MAAMG,yBAAyB3C,IAAI,SAAS,CAAC4C,qBAAqB;gBAAEJ;YAAQ;YAG5E,MAAMK,aACFvC,AAAwB,SAAxBA,uBACA,AAA+B,YAA/B,OAAOA,uBACPiC;YAEJ,MAAMR,MAAMc,aAAa7C,IAAI,SAAS,CAAC8C,WAAW;YAGlD,MAAMC,UAAU/C,IAAI,SAAS,CAACgD,aAAa;gBACvCR;gBACA,oBAAoB;YACxB;YAGA,MAAMS,WAAWjD,IAAI,SAAS,CAACkD;YAG/B,MAAM,EAAE,QAAQC,iBAAiB,EAAE,GAAGnD,IAAI,SAAS,CAACoD,gBAAgB;gBAAEZ;YAAQ;YAE9E,IAAIa;YACJ,IAAIzC,AAAqB,iBAArBA,kBAAmC;gBACnC,MAAM0C,iBAAiBjD,iBAAiB;gBAOxC,MAAMkD,uBACF,CAAC,CAAClD,iBAAiB,4BAA4B,CAACiD;gBACpD,MAAME,kBAAkBD,uBAAuB,KAAKnD,4BAA4B;gBAEhFiD,aAAarD,IAAI,SAAS,CAACyD,YAAY;oBACnCjB;oBACA,YAAYgB;oBACZF;gBACJ;YACJ;YAEAtD,IAAI,SAAS,CAAC0D,cAAc;gBAAE,cAAchD,aAAa,GAAG;YAAC;YAE7DV,IAAI,UAAU,CAAC;gBACX,cAAcU,aAAa,GAAG;gBAC9B,QAAQiB,uCAAAA,MAAAA,CAAAA,MAAiB;gBACzB,qBAAqBwB,kBAAkB,MAAM,CAAC,EAAE;gBAChD,yBAAyBV,cAAc,MAAM,CAAC,GAAG;gBACjD,0BAA0BA,cAAc,MAAM,CAAC,IAAI;gBACnD,6BAA6BA,cAAc,MAAM,CAAC,OAAO;gBACzD,8BAA8BA,cAAc,MAAM,CAAC,QAAQ;gBAC3D,2BAA2BE,uBAAuB,MAAM,CAAC,GAAG;gBAC5D,4BAA4BA,uBAAuB,MAAM,CAAC,IAAI;gBAC9D,+BAA+BA,uBAAuB,MAAM,CAAC,OAAO;gBACpE,gCAAgCA,uBAAuB,MAAM,CAAC,QAAQ;gBACtE,mBAAmBI,QAAQ,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAC7C,oBAAoBA,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG;gBAC/C,+BAA+BA,QAAQ,QAAQ,CAAC,MAAM,CAAC,cAAc;gBACrE,oBAAoBA,QAAQ,cAAc,CAAC,MAAM,CAAC,EAAE;gBACpD,cAAcE,SAAS,MAAM,CAAC,IAAI;gBAClC,aAAaA,SAAS,MAAM,CAAC,GAAG;YACpC;YAGA,MAAMU,qBAAqB;YAE3B,OAAO;gBACHlB;gBACAV;gBACA,GAAGgB,OAAO;gBACVI;gBACAF;gBACAI;YACJ;QACJ;IACJ;IAEA,MAAMrD,MAAM4D,oBAAoB9D,SAAS+D,CAAAA;QACrC,MAAMC,cAAchE,QAAQ,SAAS,CAAC,aAAa;QAEnD,MAAMiE,QAAyB;YAC3B,WAAWD,YAAY,MAAM,CAAC,IAAI;YAClC,SAASA,YAAY,MAAM,CAAC,OAAO;YACnC,UAAUA,YAAY,MAAM,CAAC,QAAQ;QACzC;QAEAD,UAAU,OAAO,CAACG,CAAAA,WAAYC,4BAA4BnE,SAASiE,OAAOC;IAC9E;IAEAhE,IAAI,UAAU,CAAC;QACXA,IAAI,kBAAkB,CAAC;YACnB,MAAM;YACN,UAAU;gBACN,UAAU;oBACN,KAAKF,QAAQ,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;oBAC1C,MAAMA,QAAQ,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI;gBAChD;gBACA,eAAe;oBACX,KAAKA,QAAQ,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG;oBAC/C,MAAMA,QAAQ,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;oBACjD,SAASA,QAAQ,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO;oBACvD,UAAUA,QAAQ,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ;gBAC7D;YACJ;QACJ;IACJ;IAEA,OAAOE;AACX"}

package/pulumi/apps/core/index.js

@@ -6,5 +6,3 @@ export * from "./CoreVpc.js";
 export * from "./cognitoIdentityProviders/index.js";
 export * from "./createCorePulumiApp.js";
 export * from "./CoreAuditLogsDynamo.js";
-
-//# sourceMappingURL=index.js.map