@webiny/project-aws 6.3.0 → 6.4.0-beta.1

package/pulumi/apps/core/webinyWatchCommand/handler.js

@@ -1,37 +1,50 @@
-exports.handler = async event => {
-  const urlParams = new URLSearchParams(event.protocolData.http.queryString);
-  const WEBINY_WATCH_COMMAND_TOPIC = process.env.WEBINY_WATCH_COMMAND_TOPIC;
-  if (urlParams.get("x-webiny-watch-command-topic") !== WEBINY_WATCH_COMMAND_TOPIC) {
+exports.handler = async (event)=>{
+    const urlParams = new URLSearchParams(event.protocolData.http.queryString);
+    const WEBINY_WATCH_COMMAND_TOPIC = process.env.WEBINY_WATCH_COMMAND_TOPIC;
+    if (urlParams.get("x-webiny-watch-command-topic") !== WEBINY_WATCH_COMMAND_TOPIC) return {
+        isAuthenticated: false
+    };
     return {
-      isAuthenticated: false
+        isAuthenticated: true,
+        principalId: "Unauthenticated",
+        policyDocuments: [
+            {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Effect: "Allow",
+                        Action: "iot:Connect",
+                        Resource: "arn:aws:iot:*:*:client/*"
+                    },
+                    {
+                        Effect: "Allow",
+                        Action: "iot:Subscribe",
+                        Resource: [
+                            `arn:aws:iot:*:*:topicfilter/${WEBINY_WATCH_COMMAND_TOPIC}`
+                        ]
+                    },
+                    {
+                        Effect: "Allow",
+                        Action: "iot:Publish",
+                        Resource: [
+                            `arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`
+                        ]
+                    },
+                    {
+                        Effect: "Allow",
+                        Action: [
+                            "iot:Receive"
+                        ],
+                        Resource: [
+                            `arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`
+                        ]
+                    }
+                ]
+            }
+        ],
+        disconnectAfterInSeconds: 3600,
+        refreshAfterInSeconds: 300
     };
-  }
-  return {
-    isAuthenticated: true,
-    principalId: "Unauthenticated",
-    policyDocuments: [{
-      Version: "2012-10-17",
-      Statement: [{
-        Effect: "Allow",
-        Action: "iot:Connect",
-        Resource: "arn:aws:iot:*:*:client/*"
-      }, {
-        Effect: "Allow",
-        Action: "iot:Subscribe",
-        Resource: [`arn:aws:iot:*:*:topicfilter/${WEBINY_WATCH_COMMAND_TOPIC}`]
-      }, {
-        Effect: "Allow",
-        Action: "iot:Publish",
-        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]
-      }, {
-        Effect: "Allow",
-        Action: ["iot:Receive"],
-        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]
-      }]
-    }],
-    disconnectAfterInSeconds: 3600,
-    refreshAfterInSeconds: 300
-  };
 };
 
 //# sourceMappingURL=handler.js.map

package/pulumi/apps/core/webinyWatchCommand/handler.js.map

@@ -1 +1 @@
-{"version":3,"names":["exports","handler","event","urlParams","URLSearchParams","protocolData","http","queryString","WEBINY_WATCH_COMMAND_TOPIC","process","env","get","isAuthenticated","principalId","policyDocuments","Version","Statement","Effect","Action","Resource","disconnectAfterInSeconds","refreshAfterInSeconds"],"sources":["handler.js"],"sourcesContent":["exports.handler = async event => {\n    const urlParams = new URLSearchParams(event.protocolData.http.queryString);\n\n    const WEBINY_WATCH_COMMAND_TOPIC = process.env.WEBINY_WATCH_COMMAND_TOPIC;\n    if (urlParams.get(\"x-webiny-watch-command-topic\") !== WEBINY_WATCH_COMMAND_TOPIC) {\n        return {\n            isAuthenticated: false\n        };\n    }\n\n    return {\n        isAuthenticated: true,\n        principalId: \"Unauthenticated\",\n        policyDocuments: [\n            {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Connect\",\n                        Resource: \"arn:aws:iot:*:*:client/*\"\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Subscribe\",\n                        Resource: [`arn:aws:iot:*:*:topicfilter/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Publish\",\n                        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: [\"iot:Receive\"],\n                        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    }\n                ]\n            }\n        ],\n        disconnectAfterInSeconds: 3600,\n        refreshAfterInSeconds: 300\n    };\n};\n"],"mappings":"AAAAA,OAAO,CAACC,OAAO,GAAG,MAAMC,KAAK,IAAI;EAC7B,MAAMC,SAAS,GAAG,IAAIC,eAAe,CAACF,KAAK,CAACG,YAAY,CAACC,IAAI,CAACC,WAAW,CAAC;EAE1E,MAAMC,0BAA0B,GAAGC,OAAO,CAACC,GAAG,CAACF,0BAA0B;EACzE,IAAIL,SAAS,CAACQ,GAAG,CAAC,8BAA8B,CAAC,KAAKH,0BAA0B,EAAE;IAC9E,OAAO;MACHI,eAAe,EAAE;IACrB,CAAC;EACL;EAEA,OAAO;IACHA,eAAe,EAAE,IAAI;IACrBC,WAAW,EAAE,iBAAiB;IAC9BC,eAAe,EAAE,CACb;MACIC,OAAO,EAAE,YAAY;MACrBC,SAAS,EAAE,CACP;QACIC,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,aAAa;QACrBC,QAAQ,EAAE;MACd,CAAC,EACD;QACIF,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,eAAe;QACvBC,QAAQ,EAAE,CAAC,+BAA+BX,0BAA0B,EAAE;MAC1E,CAAC,EACD;QACIS,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,aAAa;QACrBC,QAAQ,EAAE,CAAC,yBAAyBX,0BAA0B,EAAE;MACpE,CAAC,EACD;QACIS,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvBC,QAAQ,EAAE,CAAC,yBAAyBX,0BAA0B,EAAE;MACpE,CAAC;IAET,CAAC,CACJ;IACDY,wBAAwB,EAAE,IAAI;IAC9BC,qBAAqB,EAAE;EAC3B,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/core/webinyWatchCommand/handler.js","sources":["../../../../../src/pulumi/apps/core/webinyWatchCommand/handler.js"],"sourcesContent":["exports.handler = async event => {\n    const urlParams = new URLSearchParams(event.protocolData.http.queryString);\n\n    const WEBINY_WATCH_COMMAND_TOPIC = process.env.WEBINY_WATCH_COMMAND_TOPIC;\n    if (urlParams.get(\"x-webiny-watch-command-topic\") !== WEBINY_WATCH_COMMAND_TOPIC) {\n        return {\n            isAuthenticated: false\n        };\n    }\n\n    return {\n        isAuthenticated: true,\n        principalId: \"Unauthenticated\",\n        policyDocuments: [\n            {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Connect\",\n                        Resource: \"arn:aws:iot:*:*:client/*\"\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Subscribe\",\n                        Resource: [`arn:aws:iot:*:*:topicfilter/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: \"iot:Publish\",\n                        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    },\n                    {\n                        Effect: \"Allow\",\n                        Action: [\"iot:Receive\"],\n                        Resource: [`arn:aws:iot:*:*:topic/${WEBINY_WATCH_COMMAND_TOPIC}`]\n                    }\n                ]\n            }\n        ],\n        disconnectAfterInSeconds: 3600,\n        refreshAfterInSeconds: 300\n    };\n};\n"],"names":["exports","event","urlParams","URLSearchParams","WEBINY_WATCH_COMMAND_TOPIC","process"],"mappings":"AAAAA,QAAQ,OAAO,GAAG,OAAMC;IACpB,MAAMC,YAAY,IAAIC,gBAAgBF,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW;IAEzE,MAAMG,6BAA6BC,QAAQ,GAAG,CAAC,0BAA0B;IACzE,IAAIH,UAAU,GAAG,CAAC,oCAAoCE,4BAClD,OAAO;QACH,iBAAiB;IACrB;IAGJ,OAAO;QACH,iBAAiB;QACjB,aAAa;QACb,iBAAiB;YACb;gBACI,SAAS;gBACT,WAAW;oBACP;wBACI,QAAQ;wBACR,QAAQ;wBACR,UAAU;oBACd;oBACA;wBACI,QAAQ;wBACR,QAAQ;wBACR,UAAU;4BAAC,CAAC,4BAA4B,EAAEA,4BAA4B;yBAAC;oBAC3E;oBACA;wBACI,QAAQ;wBACR,QAAQ;wBACR,UAAU;4BAAC,CAAC,sBAAsB,EAAEA,4BAA4B;yBAAC;oBACrE;oBACA;wBACI,QAAQ;wBACR,QAAQ;4BAAC;yBAAc;wBACvB,UAAU;4BAAC,CAAC,sBAAsB,EAAEA,4BAA4B;yBAAC;oBACrE;iBACH;YACL;SACH;QACD,0BAA0B;QAC1B,uBAAuB;IAC3B;AACJ"}

package/pulumi/apps/createAppBucket.js

@@ -1,152 +1,163 @@
-import * as aws from "@pulumi/aws";
 import { ApiOutput } from "./api/index.js";
 import { getEnvVariableAwsRegion } from "../env/awsRegion.js";
-export function createPublicAppBucket(app, name) {
-  const bucket = app.addResource(aws.s3.Bucket, {
-    name: name,
-    config: {
-      forceDestroy: true,
-      website: {
-        indexDocument: "index.html",
-        errorDocument: "_NOT_FOUND_PAGE_/index.html"
-      }
-    }
-  });
-  const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {
-    name: `${name}-ownership-controls`,
-    config: {
-      bucket: bucket.output.id,
-      rule: {
-        objectOwnership: "BucketOwnerPreferred"
-      }
-    }
-  });
-  const bucketAcl = app.addResource(aws.s3.BucketAcl, {
-    name: `${name}-acl`,
-    config: {
-      bucket: bucket.output.id,
-      acl: aws.s3.CannedAcl.PublicRead
-    },
-    opts: {
-      dependsOn: [bucketOwnershipControls.output]
-    }
-  });
-  const origin = {
-    originId: bucket.output.arn,
-    domainName: bucket.output.websiteEndpoint,
-    customOriginConfig: {
-      originProtocolPolicy: "http-only",
-      httpPort: 80,
-      httpsPort: 443,
-      originSslProtocols: ["TLSv1.2"]
-    }
-  };
-  return {
-    bucket,
-    bucketAcl,
-    bucketOwnershipControls,
-    origin
-  };
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+function createPublicAppBucket(app, name) {
+    const bucket = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.Bucket, {
+        name: name,
+        config: {
+            forceDestroy: true,
+            website: {
+                indexDocument: "index.html",
+                errorDocument: "_NOT_FOUND_PAGE_/index.html"
+            }
+        }
+    });
+    const bucketOwnershipControls = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketOwnershipControls, {
+        name: `${name}-ownership-controls`,
+        config: {
+            bucket: bucket.output.id,
+            rule: {
+                objectOwnership: "BucketOwnerPreferred"
+            }
+        }
+    });
+    const bucketAcl = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketAcl, {
+        name: `${name}-acl`,
+        config: {
+            bucket: bucket.output.id,
+            acl: __rspack_external__pulumi_aws_e7af83c1.s3.CannedAcl.PublicRead
+        },
+        opts: {
+            dependsOn: [
+                bucketOwnershipControls.output
+            ]
+        }
+    });
+    const origin = {
+        originId: bucket.output.arn,
+        domainName: bucket.output.websiteEndpoint,
+        customOriginConfig: {
+            originProtocolPolicy: "http-only",
+            httpPort: 80,
+            httpsPort: 443,
+            originSslProtocols: [
+                "TLSv1.2"
+            ]
+        }
+    };
+    return {
+        bucket,
+        bucketAcl,
+        bucketOwnershipControls,
+        origin
+    };
 }
-
-// Forces S3 buckets to be available only through a cloudfront distribution.
-// Requires `ApiOutput` module to be loaded.
-export function createPrivateAppBucket(app, name) {
-  const api = app.getModule(ApiOutput);
-  const bucket = app.addResource(aws.s3.Bucket, {
-    name: name,
-    config: {
-      forceDestroy: true
-    }
-  });
-  const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {
-    name: `${name}-ownership-controls`,
-    config: {
-      bucket: bucket.output.id,
-      rule: {
-        objectOwnership: "BucketOwnerPreferred"
-      }
-    }
-  });
-  const bucketAcl = app.addResource(aws.s3.BucketAcl, {
-    name: `${name}-acl`,
-    config: {
-      bucket: bucket.output.id,
-      acl: aws.s3.CannedAcl.Private
-    },
-    opts: {
-      dependsOn: [bucketOwnershipControls.output]
-    }
-  });
-
-  // Origin Identity is a kind of AWS user that represents Cloudfront distribution
-  // We can add IAM policies to it later, to allow accessing private S3 bucket
-  const originIdentity = app.addResource(aws.cloudfront.OriginAccessIdentity, {
-    name: `${name}-origin-identity`,
-    config: {}
-  });
-  const origin = {
-    originId: bucket.output.arn,
-    domainName: bucket.output.bucket.apply(
-    // We need to create a regional domain name. Otherwise, we'll run into the following issue:
-    // https://aws.amazon.com/premiumsupport/knowledge-center/s3-http-307-response/
-    name => `${name}.s3.${getEnvVariableAwsRegion()}.amazonaws.com`),
-    s3OriginConfig: {
-      originAccessIdentity: originIdentity.output.cloudfrontAccessIdentityPath
-    }
-  };
-
-  // block any public access
-  const bucketPublicAccessBlock = app.addResource(aws.s3.BucketPublicAccessBlock, {
-    name: `${name}-bucket-block-access`,
-    config: {
-      bucket: bucket.output.id,
-      blockPublicAcls: true,
-      blockPublicPolicy: true,
-      ignorePublicAcls: true,
-      restrictPublicBuckets: true
-    }
-  });
-
-  // Create an IAM policy to allow access to S3 bucket from cloudfront
-  const bucketPolicy = app.addResource(aws.s3.BucketPolicy, {
-    name: `${name}-bucket-policy`,
-    config: {
-      bucket: bucket.output.bucket,
-      policy: {
-        Version: "2012-10-17",
-        Statement: bucket.output.arn.apply(arn => {
-          const statements = [{
-            Effect: "Allow",
-            Principal: {
-              AWS: originIdentity.output.iamArn
-            },
-            // we need GetObject to retrieve objects from S3
-            // and ListBucket allows to properly handle non-existing files (404)
-            Action: ["s3:ListBucket", "s3:GetObject"],
-            Resource: [`${arn}`, `${arn}/*`]
-          }, {
-            Effect: "Allow",
-            Principal: {
-              AWS: api.graphqlLambdaRole
-            },
-            Action: ["s3:GetObjectAcl", "s3:DeleteObject", "s3:PutObjectAcl", "s3:PutObject", "s3:GetObject", "s3:ListBucket"],
-            Resource: [`${arn}`, `${arn}/*`]
-          }];
-          return statements;
-        })
-      }
-    }
-  });
-  return {
-    bucket,
-    bucketOwnershipControls,
-    bucketAcl,
-    originIdentity,
-    origin,
-    bucketPublicAccessBlock,
-    bucketPolicy
-  };
+function createPrivateAppBucket(app, name) {
+    const api = app.getModule(ApiOutput);
+    const bucket = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.Bucket, {
+        name: name,
+        config: {
+            forceDestroy: true
+        }
+    });
+    const bucketOwnershipControls = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketOwnershipControls, {
+        name: `${name}-ownership-controls`,
+        config: {
+            bucket: bucket.output.id,
+            rule: {
+                objectOwnership: "BucketOwnerPreferred"
+            }
+        }
+    });
+    const bucketAcl = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketAcl, {
+        name: `${name}-acl`,
+        config: {
+            bucket: bucket.output.id,
+            acl: __rspack_external__pulumi_aws_e7af83c1.s3.CannedAcl.Private
+        },
+        opts: {
+            dependsOn: [
+                bucketOwnershipControls.output
+            ]
+        }
+    });
+    const originIdentity = app.addResource(__rspack_external__pulumi_aws_e7af83c1.cloudfront.OriginAccessIdentity, {
+        name: `${name}-origin-identity`,
+        config: {}
+    });
+    const origin = {
+        originId: bucket.output.arn,
+        domainName: bucket.output.bucket.apply((name)=>`${name}.s3.${getEnvVariableAwsRegion()}.amazonaws.com`),
+        s3OriginConfig: {
+            originAccessIdentity: originIdentity.output.cloudfrontAccessIdentityPath
+        }
+    };
+    const bucketPublicAccessBlock = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketPublicAccessBlock, {
+        name: `${name}-bucket-block-access`,
+        config: {
+            bucket: bucket.output.id,
+            blockPublicAcls: true,
+            blockPublicPolicy: true,
+            ignorePublicAcls: true,
+            restrictPublicBuckets: true
+        }
+    });
+    const bucketPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.s3.BucketPolicy, {
+        name: `${name}-bucket-policy`,
+        config: {
+            bucket: bucket.output.bucket,
+            policy: {
+                Version: "2012-10-17",
+                Statement: bucket.output.arn.apply((arn)=>{
+                    const statements = [
+                        {
+                            Effect: "Allow",
+                            Principal: {
+                                AWS: originIdentity.output.iamArn
+                            },
+                            Action: [
+                                "s3:ListBucket",
+                                "s3:GetObject"
+                            ],
+                            Resource: [
+                                `${arn}`,
+                                `${arn}/*`
+                            ]
+                        },
+                        {
+                            Effect: "Allow",
+                            Principal: {
+                                AWS: api.graphqlLambdaRole
+                            },
+                            Action: [
+                                "s3:GetObjectAcl",
+                                "s3:DeleteObject",
+                                "s3:PutObjectAcl",
+                                "s3:PutObject",
+                                "s3:GetObject",
+                                "s3:ListBucket"
+                            ],
+                            Resource: [
+                                `${arn}`,
+                                `${arn}/*`
+                            ]
+                        }
+                    ];
+                    return statements;
+                })
+            }
+        }
+    });
+    return {
+        bucket,
+        bucketOwnershipControls,
+        bucketAcl,
+        originIdentity,
+        origin,
+        bucketPublicAccessBlock,
+        bucketPolicy
+    };
 }
+export { createPrivateAppBucket, createPublicAppBucket };
 
 //# sourceMappingURL=createAppBucket.js.map

package/pulumi/apps/createAppBucket.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","ApiOutput","getEnvVariableAwsRegion","createPublicAppBucket","app","name","bucket","addResource","s3","Bucket","config","forceDestroy","website","indexDocument","errorDocument","bucketOwnershipControls","BucketOwnershipControls","output","id","rule","objectOwnership","bucketAcl","BucketAcl","acl","CannedAcl","PublicRead","opts","dependsOn","origin","originId","arn","domainName","websiteEndpoint","customOriginConfig","originProtocolPolicy","httpPort","httpsPort","originSslProtocols","createPrivateAppBucket","api","getModule","Private","originIdentity","cloudfront","OriginAccessIdentity","apply","s3OriginConfig","originAccessIdentity","cloudfrontAccessIdentityPath","bucketPublicAccessBlock","BucketPublicAccessBlock","blockPublicAcls","blockPublicPolicy","ignorePublicAcls","restrictPublicBuckets","bucketPolicy","BucketPolicy","policy","Version","Statement","statements","Effect","Principal","AWS","iamArn","Action","Resource","graphqlLambdaRole"],"sources":["createAppBucket.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { type PulumiApp } from \"@webiny/pulumi\";\nimport { ApiOutput } from \"~/pulumi/apps/api/index.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n\nexport function createPublicAppBucket(app: PulumiApp, name: string) {\n    const bucket = app.addResource(aws.s3.Bucket, {\n        name: name,\n        config: {\n            forceDestroy: true,\n            website: {\n                indexDocument: \"index.html\",\n                errorDocument: \"_NOT_FOUND_PAGE_/index.html\"\n            }\n        }\n    });\n\n    const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {\n        name: `${name}-ownership-controls`,\n        config: {\n            bucket: bucket.output.id,\n            rule: {\n                objectOwnership: \"BucketOwnerPreferred\"\n            }\n        }\n    });\n\n    const bucketAcl = app.addResource(aws.s3.BucketAcl, {\n        name: `${name}-acl`,\n        config: {\n            bucket: bucket.output.id,\n            acl: aws.s3.CannedAcl.PublicRead\n        },\n        opts: {\n            dependsOn: [bucketOwnershipControls.output]\n        }\n    });\n\n    const origin: aws.types.input.cloudfront.DistributionOrigin = {\n        originId: bucket.output.arn,\n        domainName: bucket.output.websiteEndpoint,\n        customOriginConfig: {\n            originProtocolPolicy: \"http-only\",\n            httpPort: 80,\n            httpsPort: 443,\n            originSslProtocols: [\"TLSv1.2\"]\n        }\n    };\n\n    return {\n        bucket,\n        bucketAcl,\n        bucketOwnershipControls,\n        origin\n    };\n}\n\n// Forces S3 buckets to be available only through a cloudfront distribution.\n// Requires `ApiOutput` module to be loaded.\nexport function createPrivateAppBucket(app: PulumiApp, name: string) {\n    const api = app.getModule(ApiOutput);\n\n    const bucket = app.addResource(aws.s3.Bucket, {\n        name: name,\n        config: {\n            forceDestroy: true\n        }\n    });\n\n    const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {\n        name: `${name}-ownership-controls`,\n        config: {\n            bucket: bucket.output.id,\n            rule: {\n                objectOwnership: \"BucketOwnerPreferred\"\n            }\n        }\n    });\n\n    const bucketAcl = app.addResource(aws.s3.BucketAcl, {\n        name: `${name}-acl`,\n        config: {\n            bucket: bucket.output.id,\n            acl: aws.s3.CannedAcl.Private\n        },\n        opts: {\n            dependsOn: [bucketOwnershipControls.output]\n        }\n    });\n\n    // Origin Identity is a kind of AWS user that represents Cloudfront distribution\n    // We can add IAM policies to it later, to allow accessing private S3 bucket\n    const originIdentity = app.addResource(aws.cloudfront.OriginAccessIdentity, {\n        name: `${name}-origin-identity`,\n        config: {}\n    });\n\n    const origin: aws.types.input.cloudfront.DistributionOrigin = {\n        originId: bucket.output.arn,\n        domainName: bucket.output.bucket.apply(\n            // We need to create a regional domain name. Otherwise, we'll run into the following issue:\n            // https://aws.amazon.com/premiumsupport/knowledge-center/s3-http-307-response/\n            name => `${name}.s3.${getEnvVariableAwsRegion()}.amazonaws.com`\n        ),\n        s3OriginConfig: {\n            originAccessIdentity: originIdentity.output.cloudfrontAccessIdentityPath\n        }\n    };\n\n    // block any public access\n    const bucketPublicAccessBlock = app.addResource(aws.s3.BucketPublicAccessBlock, {\n        name: `${name}-bucket-block-access`,\n        config: {\n            bucket: bucket.output.id,\n            blockPublicAcls: true,\n            blockPublicPolicy: true,\n            ignorePublicAcls: true,\n            restrictPublicBuckets: true\n        }\n    });\n\n    // Create an IAM policy to allow access to S3 bucket from cloudfront\n    const bucketPolicy = app.addResource(aws.s3.BucketPolicy, {\n        name: `${name}-bucket-policy`,\n        config: {\n            bucket: bucket.output.bucket,\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: bucket.output.arn.apply(arn => {\n                    const statements: aws.iam.PolicyStatement[] = [\n                        {\n                            Effect: \"Allow\",\n                            Principal: { AWS: originIdentity.output.iamArn },\n                            // we need GetObject to retrieve objects from S3\n                            // and ListBucket allows to properly handle non-existing files (404)\n                            Action: [\"s3:ListBucket\", \"s3:GetObject\"],\n                            Resource: [`${arn}`, `${arn}/*`]\n                        },\n                        {\n                            Effect: \"Allow\",\n                            Principal: {\n                                AWS: api.graphqlLambdaRole\n                            },\n                            Action: [\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\",\n                                \"s3:ListBucket\"\n                            ],\n                            Resource: [`${arn}`, `${arn}/*`]\n                        }\n                    ];\n\n                    return statements;\n                })\n            }\n        }\n    });\n\n    return {\n        bucket,\n        bucketOwnershipControls,\n        bucketAcl,\n        originIdentity,\n        origin,\n        bucketPublicAccessBlock,\n        bucketPolicy\n    };\n}\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAElC,SAASC,SAAS;AAClB,SAASC,uBAAuB;AAEhC,OAAO,SAASC,qBAAqBA,CAACC,GAAc,EAAEC,IAAY,EAAE;EAChE,MAAMC,MAAM,GAAGF,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACC,MAAM,EAAE;IAC1CJ,IAAI,EAAEA,IAAI;IACVK,MAAM,EAAE;MACJC,YAAY,EAAE,IAAI;MAClBC,OAAO,EAAE;QACLC,aAAa,EAAE,YAAY;QAC3BC,aAAa,EAAE;MACnB;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,uBAAuB,GAAGX,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACQ,uBAAuB,EAAE;IAC5EX,IAAI,EAAE,GAAGA,IAAI,qBAAqB;IAClCK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACC,EAAE;MACxBC,IAAI,EAAE;QACFC,eAAe,EAAE;MACrB;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,SAAS,GAAGjB,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACc,SAAS,EAAE;IAChDjB,IAAI,EAAE,GAAGA,IAAI,MAAM;IACnBK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACC,EAAE;MACxBK,GAAG,EAAEvB,GAAG,CAACQ,EAAE,CAACgB,SAAS,CAACC;IAC1B,CAAC;IACDC,IAAI,EAAE;MACFC,SAAS,EAAE,CAACZ,uBAAuB,CAACE,MAAM;IAC9C;EACJ,CAAC,CAAC;EAEF,MAAMW,MAAqD,GAAG;IAC1DC,QAAQ,EAAEvB,MAAM,CAACW,MAAM,CAACa,GAAG;IAC3BC,UAAU,EAAEzB,MAAM,CAACW,MAAM,CAACe,eAAe;IACzCC,kBAAkB,EAAE;MAChBC,oBAAoB,EAAE,WAAW;MACjCC,QAAQ,EAAE,EAAE;MACZC,SAAS,EAAE,GAAG;MACdC,kBAAkB,EAAE,CAAC,SAAS;IAClC;EACJ,CAAC;EAED,OAAO;IACH/B,MAAM;IACNe,SAAS;IACTN,uBAAuB;IACvBa;EACJ,CAAC;AACL;;AAEA;AACA;AACA,OAAO,SAASU,sBAAsBA,CAAClC,GAAc,EAAEC,IAAY,EAAE;EACjE,MAAMkC,GAAG,GAAGnC,GAAG,CAACoC,SAAS,CAACvC,SAAS,CAAC;EAEpC,MAAMK,MAAM,GAAGF,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACC,MAAM,EAAE;IAC1CJ,IAAI,EAAEA,IAAI;IACVK,MAAM,EAAE;MACJC,YAAY,EAAE;IAClB;EACJ,CAAC,CAAC;EAEF,MAAMI,uBAAuB,GAAGX,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACQ,uBAAuB,EAAE;IAC5EX,IAAI,EAAE,GAAGA,IAAI,qBAAqB;IAClCK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACC,EAAE;MACxBC,IAAI,EAAE;QACFC,eAAe,EAAE;MACrB;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,SAAS,GAAGjB,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACc,SAAS,EAAE;IAChDjB,IAAI,EAAE,GAAGA,IAAI,MAAM;IACnBK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACC,EAAE;MACxBK,GAAG,EAAEvB,GAAG,CAACQ,EAAE,CAACgB,SAAS,CAACiB;IAC1B,CAAC;IACDf,IAAI,EAAE;MACFC,SAAS,EAAE,CAACZ,uBAAuB,CAACE,MAAM;IAC9C;EACJ,CAAC,CAAC;;EAEF;EACA;EACA,MAAMyB,cAAc,GAAGtC,GAAG,CAACG,WAAW,CAACP,GAAG,CAAC2C,UAAU,CAACC,oBAAoB,EAAE;IACxEvC,IAAI,EAAE,GAAGA,IAAI,kBAAkB;IAC/BK,MAAM,EAAE,CAAC;EACb,CAAC,CAAC;EAEF,MAAMkB,MAAqD,GAAG;IAC1DC,QAAQ,EAAEvB,MAAM,CAACW,MAAM,CAACa,GAAG;IAC3BC,UAAU,EAAEzB,MAAM,CAACW,MAAM,CAACX,MAAM,CAACuC,KAAK;IAClC;IACA;IACAxC,IAAI,IAAI,GAAGA,IAAI,OAAOH,uBAAuB,CAAC,CAAC,gBACnD,CAAC;IACD4C,cAAc,EAAE;MACZC,oBAAoB,EAAEL,cAAc,CAACzB,MAAM,CAAC+B;IAChD;EACJ,CAAC;;EAED;EACA,MAAMC,uBAAuB,GAAG7C,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAAC0C,uBAAuB,EAAE;IAC5E7C,IAAI,EAAE,GAAGA,IAAI,sBAAsB;IACnCK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACC,EAAE;MACxBiC,eAAe,EAAE,IAAI;MACrBC,iBAAiB,EAAE,IAAI;MACvBC,gBAAgB,EAAE,IAAI;MACtBC,qBAAqB,EAAE;IAC3B;EACJ,CAAC,CAAC;;EAEF;EACA,MAAMC,YAAY,GAAGnD,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,EAAE,CAACgD,YAAY,EAAE;IACtDnD,IAAI,EAAE,GAAGA,IAAI,gBAAgB;IAC7BK,MAAM,EAAE;MACJJ,MAAM,EAAEA,MAAM,CAACW,MAAM,CAACX,MAAM;MAC5BmD,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAErD,MAAM,CAACW,MAAM,CAACa,GAAG,CAACe,KAAK,CAACf,GAAG,IAAI;UACtC,MAAM8B,UAAqC,GAAG,CAC1C;YACIC,MAAM,EAAE,OAAO;YACfC,SAAS,EAAE;cAAEC,GAAG,EAAErB,cAAc,CAACzB,MAAM,CAAC+C;YAAO,CAAC;YAChD;YACA;YACAC,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;YACzCC,QAAQ,EAAE,CAAC,GAAGpC,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI;UACnC,CAAC,EACD;YACI+B,MAAM,EAAE,OAAO;YACfC,SAAS,EAAE;cACPC,GAAG,EAAExB,GAAG,CAAC4B;YACb,CAAC;YACDF,MAAM,EAAE,CACJ,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,CAClB;YACDC,QAAQ,EAAE,CAAC,GAAGpC,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI;UACnC,CAAC,CACJ;UAED,OAAO8B,UAAU;QACrB,CAAC;MACL;IACJ;EACJ,CAAC,CAAC;EAEF,OAAO;IACHtD,MAAM;IACNS,uBAAuB;IACvBM,SAAS;IACTqB,cAAc;IACdd,MAAM;IACNqB,uBAAuB;IACvBM;EACJ,CAAC;AACL","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/createAppBucket.js","sources":["../../../src/pulumi/apps/createAppBucket.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { type PulumiApp } from \"@webiny/pulumi\";\nimport { ApiOutput } from \"~/pulumi/apps/api/index.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n\nexport function createPublicAppBucket(app: PulumiApp, name: string) {\n    const bucket = app.addResource(aws.s3.Bucket, {\n        name: name,\n        config: {\n            forceDestroy: true,\n            website: {\n                indexDocument: \"index.html\",\n                errorDocument: \"_NOT_FOUND_PAGE_/index.html\"\n            }\n        }\n    });\n\n    const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {\n        name: `${name}-ownership-controls`,\n        config: {\n            bucket: bucket.output.id,\n            rule: {\n                objectOwnership: \"BucketOwnerPreferred\"\n            }\n        }\n    });\n\n    const bucketAcl = app.addResource(aws.s3.BucketAcl, {\n        name: `${name}-acl`,\n        config: {\n            bucket: bucket.output.id,\n            acl: aws.s3.CannedAcl.PublicRead\n        },\n        opts: {\n            dependsOn: [bucketOwnershipControls.output]\n        }\n    });\n\n    const origin: aws.types.input.cloudfront.DistributionOrigin = {\n        originId: bucket.output.arn,\n        domainName: bucket.output.websiteEndpoint,\n        customOriginConfig: {\n            originProtocolPolicy: \"http-only\",\n            httpPort: 80,\n            httpsPort: 443,\n            originSslProtocols: [\"TLSv1.2\"]\n        }\n    };\n\n    return {\n        bucket,\n        bucketAcl,\n        bucketOwnershipControls,\n        origin\n    };\n}\n\n// Forces S3 buckets to be available only through a cloudfront distribution.\n// Requires `ApiOutput` module to be loaded.\nexport function createPrivateAppBucket(app: PulumiApp, name: string) {\n    const api = app.getModule(ApiOutput);\n\n    const bucket = app.addResource(aws.s3.Bucket, {\n        name: name,\n        config: {\n            forceDestroy: true\n        }\n    });\n\n    const bucketOwnershipControls = app.addResource(aws.s3.BucketOwnershipControls, {\n        name: `${name}-ownership-controls`,\n        config: {\n            bucket: bucket.output.id,\n            rule: {\n                objectOwnership: \"BucketOwnerPreferred\"\n            }\n        }\n    });\n\n    const bucketAcl = app.addResource(aws.s3.BucketAcl, {\n        name: `${name}-acl`,\n        config: {\n            bucket: bucket.output.id,\n            acl: aws.s3.CannedAcl.Private\n        },\n        opts: {\n            dependsOn: [bucketOwnershipControls.output]\n        }\n    });\n\n    // Origin Identity is a kind of AWS user that represents Cloudfront distribution\n    // We can add IAM policies to it later, to allow accessing private S3 bucket\n    const originIdentity = app.addResource(aws.cloudfront.OriginAccessIdentity, {\n        name: `${name}-origin-identity`,\n        config: {}\n    });\n\n    const origin: aws.types.input.cloudfront.DistributionOrigin = {\n        originId: bucket.output.arn,\n        domainName: bucket.output.bucket.apply(\n            // We need to create a regional domain name. Otherwise, we'll run into the following issue:\n            // https://aws.amazon.com/premiumsupport/knowledge-center/s3-http-307-response/\n            name => `${name}.s3.${getEnvVariableAwsRegion()}.amazonaws.com`\n        ),\n        s3OriginConfig: {\n            originAccessIdentity: originIdentity.output.cloudfrontAccessIdentityPath\n        }\n    };\n\n    // block any public access\n    const bucketPublicAccessBlock = app.addResource(aws.s3.BucketPublicAccessBlock, {\n        name: `${name}-bucket-block-access`,\n        config: {\n            bucket: bucket.output.id,\n            blockPublicAcls: true,\n            blockPublicPolicy: true,\n            ignorePublicAcls: true,\n            restrictPublicBuckets: true\n        }\n    });\n\n    // Create an IAM policy to allow access to S3 bucket from cloudfront\n    const bucketPolicy = app.addResource(aws.s3.BucketPolicy, {\n        name: `${name}-bucket-policy`,\n        config: {\n            bucket: bucket.output.bucket,\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: bucket.output.arn.apply(arn => {\n                    const statements: aws.iam.PolicyStatement[] = [\n                        {\n                            Effect: \"Allow\",\n                            Principal: { AWS: originIdentity.output.iamArn },\n                            // we need GetObject to retrieve objects from S3\n                            // and ListBucket allows to properly handle non-existing files (404)\n                            Action: [\"s3:ListBucket\", \"s3:GetObject\"],\n                            Resource: [`${arn}`, `${arn}/*`]\n                        },\n                        {\n                            Effect: \"Allow\",\n                            Principal: {\n                                AWS: api.graphqlLambdaRole\n                            },\n                            Action: [\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\",\n                                \"s3:ListBucket\"\n                            ],\n                            Resource: [`${arn}`, `${arn}/*`]\n                        }\n                    ];\n\n                    return statements;\n                })\n            }\n        }\n    });\n\n    return {\n        bucket,\n        bucketOwnershipControls,\n        bucketAcl,\n        originIdentity,\n        origin,\n        bucketPublicAccessBlock,\n        bucketPolicy\n    };\n}\n"],"names":["createPublicAppBucket","app","name","bucket","aws","bucketOwnershipControls","bucketAcl","origin","createPrivateAppBucket","api","ApiOutput","originIdentity","getEnvVariableAwsRegion","bucketPublicAccessBlock","bucketPolicy","arn","statements"],"mappings":";;;AAKO,SAASA,sBAAsBC,GAAc,EAAEC,IAAY;IAC9D,MAAMC,SAASF,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,MAAa,EAAE;QAC1C,MAAMF;QACN,QAAQ;YACJ,cAAc;YACd,SAAS;gBACL,eAAe;gBACf,eAAe;YACnB;QACJ;IACJ;IAEA,MAAMG,0BAA0BJ,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,uBAA8B,EAAE;QAC5E,MAAM,GAAGF,KAAK,mBAAmB,CAAC;QAClC,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,EAAE;YACxB,MAAM;gBACF,iBAAiB;YACrB;QACJ;IACJ;IAEA,MAAMG,YAAYL,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,SAAgB,EAAE;QAChD,MAAM,GAAGF,KAAK,IAAI,CAAC;QACnB,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,EAAE;YACxB,KAAKC,uCAAAA,EAAAA,CAAAA,SAAAA,CAAAA,UAA2B;QACpC;QACA,MAAM;YACF,WAAW;gBAACC,wBAAwB,MAAM;aAAC;QAC/C;IACJ;IAEA,MAAME,SAAwD;QAC1D,UAAUJ,OAAO,MAAM,CAAC,GAAG;QAC3B,YAAYA,OAAO,MAAM,CAAC,eAAe;QACzC,oBAAoB;YAChB,sBAAsB;YACtB,UAAU;YACV,WAAW;YACX,oBAAoB;gBAAC;aAAU;QACnC;IACJ;IAEA,OAAO;QACHA;QACAG;QACAD;QACAE;IACJ;AACJ;AAIO,SAASC,uBAAuBP,GAAc,EAAEC,IAAY;IAC/D,MAAMO,MAAMR,IAAI,SAAS,CAACS;IAE1B,MAAMP,SAASF,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,MAAa,EAAE;QAC1C,MAAMF;QACN,QAAQ;YACJ,cAAc;QAClB;IACJ;IAEA,MAAMG,0BAA0BJ,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,uBAA8B,EAAE;QAC5E,MAAM,GAAGF,KAAK,mBAAmB,CAAC;QAClC,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,EAAE;YACxB,MAAM;gBACF,iBAAiB;YACrB;QACJ;IACJ;IAEA,MAAMG,YAAYL,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,SAAgB,EAAE;QAChD,MAAM,GAAGF,KAAK,IAAI,CAAC;QACnB,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,EAAE;YACxB,KAAKC,uCAAAA,EAAAA,CAAAA,SAAAA,CAAAA,OAAwB;QACjC;QACA,MAAM;YACF,WAAW;gBAACC,wBAAwB,MAAM;aAAC;QAC/C;IACJ;IAIA,MAAMM,iBAAiBV,IAAI,WAAW,CAACG,uCAAAA,UAAAA,CAAAA,oBAAmC,EAAE;QACxE,MAAM,GAAGF,KAAK,gBAAgB,CAAC;QAC/B,QAAQ,CAAC;IACb;IAEA,MAAMK,SAAwD;QAC1D,UAAUJ,OAAO,MAAM,CAAC,GAAG;QAC3B,YAAYA,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAGlCD,CAAAA,OAAQ,GAAGA,KAAK,IAAI,EAAEU,0BAA0B,cAAc,CAAC;QAEnE,gBAAgB;YACZ,sBAAsBD,eAAe,MAAM,CAAC,4BAA4B;QAC5E;IACJ;IAGA,MAAME,0BAA0BZ,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,uBAA8B,EAAE;QAC5E,MAAM,GAAGF,KAAK,oBAAoB,CAAC;QACnC,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,EAAE;YACxB,iBAAiB;YACjB,mBAAmB;YACnB,kBAAkB;YAClB,uBAAuB;QAC3B;IACJ;IAGA,MAAMW,eAAeb,IAAI,WAAW,CAACG,uCAAAA,EAAAA,CAAAA,YAAmB,EAAE;QACtD,MAAM,GAAGF,KAAK,cAAc,CAAC;QAC7B,QAAQ;YACJ,QAAQC,OAAO,MAAM,CAAC,MAAM;YAC5B,QAAQ;gBACJ,SAAS;gBACT,WAAWA,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAACY,CAAAA;oBAC/B,MAAMC,aAAwC;wBAC1C;4BACI,QAAQ;4BACR,WAAW;gCAAE,KAAKL,eAAe,MAAM,CAAC,MAAM;4BAAC;4BAG/C,QAAQ;gCAAC;gCAAiB;6BAAe;4BACzC,UAAU;gCAAC,GAAGI,KAAK;gCAAE,GAAGA,IAAI,EAAE,CAAC;6BAAC;wBACpC;wBACA;4BACI,QAAQ;4BACR,WAAW;gCACP,KAAKN,IAAI,iBAAiB;4BAC9B;4BACA,QAAQ;gCACJ;gCACA;gCACA;gCACA;gCACA;gCACA;6BACH;4BACD,UAAU;gCAAC,GAAGM,KAAK;gCAAE,GAAGA,IAAI,EAAE,CAAC;6BAAC;wBACpC;qBACH;oBAED,OAAOC;gBACX;YACJ;QACJ;IACJ;IAEA,OAAO;QACHb;QACAE;QACAC;QACAK;QACAJ;QACAM;QACAC;IACJ;AACJ"}

package/pulumi/apps/customDomain.js

@@ -1,9 +1,10 @@
-export function applyCustomDomain(cloudfront, params) {
-  cloudfront.config.aliases(params.domains);
-  cloudfront.config.viewerCertificate({
-    acmCertificateArn: params.acmCertificateArn,
-    sslSupportMethod: params.sslSupportMethod ?? "sni-only"
-  });
+function applyCustomDomain(cloudfront, params) {
+    cloudfront.config.aliases(params.domains);
+    cloudfront.config.viewerCertificate({
+        acmCertificateArn: params.acmCertificateArn,
+        sslSupportMethod: params.sslSupportMethod ?? "sni-only"
+    });
 }
+export { applyCustomDomain };
 
 //# sourceMappingURL=customDomain.js.map

package/pulumi/apps/customDomain.js.map

@@ -1 +1 @@
-{"version":3,"names":["applyCustomDomain","cloudfront","params","config","aliases","domains","viewerCertificate","acmCertificateArn","sslSupportMethod"],"sources":["customDomain.ts"],"sourcesContent":["import { type Input } from \"@pulumi/pulumi\";\nimport type * as aws from \"@pulumi/aws\";\nimport { type PulumiAppResource } from \"@webiny/pulumi\";\n\nexport interface CustomDomainParams {\n    domains: Input<string[]>;\n    acmCertificateArn: Input<string>;\n    sslSupportMethod?: Input<string>;\n}\n\nexport function applyCustomDomain(\n    cloudfront: PulumiAppResource<typeof aws.cloudfront.Distribution>,\n    params: CustomDomainParams\n) {\n    cloudfront.config.aliases(params.domains);\n\n    cloudfront.config.viewerCertificate({\n        acmCertificateArn: params.acmCertificateArn,\n        sslSupportMethod: params.sslSupportMethod ?? \"sni-only\"\n    });\n}\n"],"mappings":"AAUA,OAAO,SAASA,iBAAiBA,CAC7BC,UAAiE,EACjEC,MAA0B,EAC5B;EACED,UAAU,CAACE,MAAM,CAACC,OAAO,CAACF,MAAM,CAACG,OAAO,CAAC;EAEzCJ,UAAU,CAACE,MAAM,CAACG,iBAAiB,CAAC;IAChCC,iBAAiB,EAAEL,MAAM,CAACK,iBAAiB;IAC3CC,gBAAgB,EAAEN,MAAM,CAACM,gBAAgB,IAAI;EACjD,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/customDomain.js","sources":["../../../src/pulumi/apps/customDomain.ts"],"sourcesContent":["import { type Input } from \"@pulumi/pulumi\";\nimport type * as aws from \"@pulumi/aws\";\nimport { type PulumiAppResource } from \"@webiny/pulumi\";\n\nexport interface CustomDomainParams {\n    domains: Input<string[]>;\n    acmCertificateArn: Input<string>;\n    sslSupportMethod?: Input<string>;\n}\n\nexport function applyCustomDomain(\n    cloudfront: PulumiAppResource<typeof aws.cloudfront.Distribution>,\n    params: CustomDomainParams\n) {\n    cloudfront.config.aliases(params.domains);\n\n    cloudfront.config.viewerCertificate({\n        acmCertificateArn: params.acmCertificateArn,\n        sslSupportMethod: params.sslSupportMethod ?? \"sni-only\"\n    });\n}\n"],"names":["applyCustomDomain","cloudfront","params"],"mappings":"AAUO,SAASA,kBACZC,UAAiE,EACjEC,MAA0B;IAE1BD,WAAW,MAAM,CAAC,OAAO,CAACC,OAAO,OAAO;IAExCD,WAAW,MAAM,CAAC,iBAAiB,CAAC;QAChC,mBAAmBC,OAAO,iBAAiB;QAC3C,kBAAkBA,OAAO,gBAAgB,IAAI;IACjD;AACJ"}

package/pulumi/apps/extensions/getAwsTagsFromExtension.js

@@ -1,10 +1,11 @@
-import { AwsTags as awsTagsExt } from "../../extensions/AwsTags.js";
-export const getAwsTagsFromExtension = projectConfig => {
-  const awsTags = {};
-  projectConfig.extensionsByType(awsTagsExt).forEach(ext => {
-    Object.assign(awsTags, ext.params.tags);
-  });
-  return awsTags;
+import { AwsTags } from "../../extensions/AwsTags.js";
+const getAwsTagsFromExtension = (projectConfig)=>{
+    const awsTags = {};
+    projectConfig.extensionsByType(AwsTags).forEach((ext)=>{
+        Object.assign(awsTags, ext.params.tags);
+    });
+    return awsTags;
 };
+export { getAwsTagsFromExtension };
 
 //# sourceMappingURL=getAwsTagsFromExtension.js.map

package/pulumi/apps/extensions/getAwsTagsFromExtension.js.map

@@ -1 +1 @@
-{"version":3,"names":["AwsTags","awsTagsExt","getAwsTagsFromExtension","projectConfig","awsTags","extensionsByType","forEach","ext","Object","assign","params","tags"],"sources":["getAwsTagsFromExtension.ts"],"sourcesContent":["import { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\nimport { AwsTags as awsTagsExt } from \"~/pulumi/extensions/AwsTags.js\";\n\nexport const getAwsTagsFromExtension = (projectConfig: IProjectConfigModel) => {\n    const awsTags: Record<string, string> = {};\n    projectConfig.extensionsByType(awsTagsExt).forEach(ext => {\n        Object.assign(awsTags, ext.params.tags);\n    });\n\n    return awsTags;\n};\n"],"mappings":"AACA,SAASA,OAAO,IAAIC,UAAU;AAE9B,OAAO,MAAMC,uBAAuB,GAAIC,aAAkC,IAAK;EAC3E,MAAMC,OAA+B,GAAG,CAAC,CAAC;EAC1CD,aAAa,CAACE,gBAAgB,CAACJ,UAAU,CAAC,CAACK,OAAO,CAACC,GAAG,IAAI;IACtDC,MAAM,CAACC,MAAM,CAACL,OAAO,EAAEG,GAAG,CAACG,MAAM,CAACC,IAAI,CAAC;EAC3C,CAAC,CAAC;EAEF,OAAOP,OAAO;AAClB,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/extensions/getAwsTagsFromExtension.js","sources":["../../../../src/pulumi/apps/extensions/getAwsTagsFromExtension.ts"],"sourcesContent":["import { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\nimport { AwsTags as awsTagsExt } from \"~/pulumi/extensions/AwsTags.js\";\n\nexport const getAwsTagsFromExtension = (projectConfig: IProjectConfigModel) => {\n    const awsTags: Record<string, string> = {};\n    projectConfig.extensionsByType(awsTagsExt).forEach(ext => {\n        Object.assign(awsTags, ext.params.tags);\n    });\n\n    return awsTags;\n};\n"],"names":["getAwsTagsFromExtension","projectConfig","awsTags","awsTagsExt","ext","Object"],"mappings":";AAGO,MAAMA,0BAA0B,CAACC;IACpC,MAAMC,UAAkC,CAAC;IACzCD,cAAc,gBAAgB,CAACE,SAAY,OAAO,CAACC,CAAAA;QAC/CC,OAAO,MAAM,CAACH,SAASE,IAAI,MAAM,CAAC,IAAI;IAC1C;IAEA,OAAOF;AACX"}

package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.js

@@ -1,10 +1,9 @@
-import { BlueGreenDeployments as bgDeploymentsExt } from "../../extensions/BlueGreenDeployments.js";
-export const getBgDeploymentsConfigFromExtension = projectConfig => {
-  const [bgDeploymentsExtension] = projectConfig.extensionsByType(bgDeploymentsExt);
-  if (!bgDeploymentsExtension) {
-    return false;
-  }
-  return bgDeploymentsExtension.params;
+import { BlueGreenDeployments } from "../../extensions/BlueGreenDeployments.js";
+const getBgDeploymentsConfigFromExtension = (projectConfig)=>{
+    const [bgDeploymentsExtension] = projectConfig.extensionsByType(BlueGreenDeployments);
+    if (!bgDeploymentsExtension) return false;
+    return bgDeploymentsExtension.params;
 };
+export { getBgDeploymentsConfigFromExtension };
 
 //# sourceMappingURL=getBgDeploymentsConfigFromExtension.js.map

package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.js.map

@@ -1 +1 @@
-{"version":3,"names":["BlueGreenDeployments","bgDeploymentsExt","getBgDeploymentsConfigFromExtension","projectConfig","bgDeploymentsExtension","extensionsByType","params"],"sources":["getBgDeploymentsConfigFromExtension.ts"],"sourcesContent":["import { BlueGreenDeployments as bgDeploymentsExt } from \"~/pulumi/extensions/BlueGreenDeployments.js\";\nimport { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\n\nexport const getBgDeploymentsConfigFromExtension = (projectConfig: IProjectConfigModel) => {\n    const [bgDeploymentsExtension] = projectConfig.extensionsByType(bgDeploymentsExt);\n    if (!bgDeploymentsExtension) {\n        return false;\n    }\n\n    return bgDeploymentsExtension.params;\n};\n"],"mappings":"AAAA,SAASA,oBAAoB,IAAIC,gBAAgB;AAGjD,OAAO,MAAMC,mCAAmC,GAAIC,aAAkC,IAAK;EACvF,MAAM,CAACC,sBAAsB,CAAC,GAAGD,aAAa,CAACE,gBAAgB,CAACJ,gBAAgB,CAAC;EACjF,IAAI,CAACG,sBAAsB,EAAE;IACzB,OAAO,KAAK;EAChB;EAEA,OAAOA,sBAAsB,CAACE,MAAM;AACxC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.js","sources":["../../../../src/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.ts"],"sourcesContent":["import { BlueGreenDeployments as bgDeploymentsExt } from \"~/pulumi/extensions/BlueGreenDeployments.js\";\nimport { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\n\nexport const getBgDeploymentsConfigFromExtension = (projectConfig: IProjectConfigModel) => {\n    const [bgDeploymentsExtension] = projectConfig.extensionsByType(bgDeploymentsExt);\n    if (!bgDeploymentsExtension) {\n        return false;\n    }\n\n    return bgDeploymentsExtension.params;\n};\n"],"names":["getBgDeploymentsConfigFromExtension","projectConfig","bgDeploymentsExtension","bgDeploymentsExt"],"mappings":";AAGO,MAAMA,sCAAsC,CAACC;IAChD,MAAM,CAACC,uBAAuB,GAAGD,cAAc,gBAAgB,CAACE;IAChE,IAAI,CAACD,wBACD,OAAO;IAGX,OAAOA,uBAAuB,MAAM;AACxC"}

package/pulumi/apps/extensions/getOsConfigFromExtension.js

@@ -1,45 +1,21 @@
-import { OpenSearch as openSearchExt } from "../../extensions/OpenSearch.js";
-export const getOsConfigFromExtension = projectConfig => {
-  const [openSearchExtension] = projectConfig.extensionsByType(openSearchExt);
-  if (!openSearchExtension) {
-    // OpenSearch not used.
-    return undefined;
-  }
-  const {
-    enabled,
-    endpoint,
-    domainName,
-    indexPrefix,
-    sharedIndexes,
-    username,
-    password
-  } = openSearchExtension.params;
-  if (enabled === false) {
-    return false;
-  }
-  if (endpoint || domainName || indexPrefix || sharedIndexes || username || password) {
-    const openSearch = {};
-    if (endpoint) {
-      openSearch.endpoint = endpoint;
+import { OpenSearch } from "../../extensions/OpenSearch.js";
+const getOsConfigFromExtension = (projectConfig)=>{
+    const [openSearchExtension] = projectConfig.extensionsByType(OpenSearch);
+    if (!openSearchExtension) return;
+    const { enabled, endpoint, domainName, indexPrefix, sharedIndexes, username, password } = openSearchExtension.params;
+    if (false === enabled) return false;
+    if (endpoint || domainName || indexPrefix || sharedIndexes || username || password) {
+        const openSearch = {};
+        if (endpoint) openSearch.endpoint = endpoint;
+        if (domainName) openSearch.domainName = domainName;
+        if (indexPrefix) openSearch.indexPrefix = indexPrefix;
+        if (sharedIndexes) openSearch.sharedIndexes = sharedIndexes;
+        if (username) openSearch.username = username;
+        if (password) openSearch.password = password;
+        return openSearch;
     }
-    if (domainName) {
-      openSearch.domainName = domainName;
-    }
-    if (indexPrefix) {
-      openSearch.indexPrefix = indexPrefix;
-    }
-    if (sharedIndexes) {
-      openSearch.sharedIndexes = sharedIndexes;
-    }
-    if (username) {
-      openSearch.username = username;
-    }
-    if (password) {
-      openSearch.password = password;
-    }
-    return openSearch;
-  }
-  return true;
+    return true;
 };
+export { getOsConfigFromExtension };
 
 //# sourceMappingURL=getOsConfigFromExtension.js.map

package/pulumi/apps/extensions/getOsConfigFromExtension.js.map

@@ -1 +1 @@
-{"version":3,"names":["OpenSearch","openSearchExt","getOsConfigFromExtension","projectConfig","openSearchExtension","extensionsByType","undefined","enabled","endpoint","domainName","indexPrefix","sharedIndexes","username","password","params","openSearch"],"sources":["getOsConfigFromExtension.ts"],"sourcesContent":["import { OpenSearch as openSearchExt } from \"~/pulumi/extensions/OpenSearch.js\";\nimport { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\n\nexport const getOsConfigFromExtension = (projectConfig: IProjectConfigModel) => {\n    const [openSearchExtension] = projectConfig.extensionsByType(openSearchExt);\n    if (!openSearchExtension) {\n        // OpenSearch not used.\n        return undefined;\n    }\n\n    const { enabled, endpoint, domainName, indexPrefix, sharedIndexes, username, password } =\n        openSearchExtension.params;\n    if (enabled === false) {\n        return false;\n    }\n\n    if (endpoint || domainName || indexPrefix || sharedIndexes || username || password) {\n        const openSearch: Omit<typeof openSearchExtension.params, \"enabled\"> = {};\n        if (endpoint) {\n            openSearch.endpoint = endpoint;\n        }\n\n        if (domainName) {\n            openSearch.domainName = domainName;\n        }\n\n        if (indexPrefix) {\n            openSearch.indexPrefix = indexPrefix;\n        }\n\n        if (sharedIndexes) {\n            openSearch.sharedIndexes = sharedIndexes;\n        }\n\n        if (username) {\n            openSearch.username = username;\n        }\n\n        if (password) {\n            openSearch.password = password;\n        }\n\n        return openSearch;\n    }\n\n    return true;\n};\n"],"mappings":"AAAA,SAASA,UAAU,IAAIC,aAAa;AAGpC,OAAO,MAAMC,wBAAwB,GAAIC,aAAkC,IAAK;EAC5E,MAAM,CAACC,mBAAmB,CAAC,GAAGD,aAAa,CAACE,gBAAgB,CAACJ,aAAa,CAAC;EAC3E,IAAI,CAACG,mBAAmB,EAAE;IACtB;IACA,OAAOE,SAAS;EACpB;EAEA,MAAM;IAAEC,OAAO;IAAEC,QAAQ;IAAEC,UAAU;IAAEC,WAAW;IAAEC,aAAa;IAAEC,QAAQ;IAAEC;EAAS,CAAC,GACnFT,mBAAmB,CAACU,MAAM;EAC9B,IAAIP,OAAO,KAAK,KAAK,EAAE;IACnB,OAAO,KAAK;EAChB;EAEA,IAAIC,QAAQ,IAAIC,UAAU,IAAIC,WAAW,IAAIC,aAAa,IAAIC,QAAQ,IAAIC,QAAQ,EAAE;IAChF,MAAME,UAA8D,GAAG,CAAC,CAAC;IACzE,IAAIP,QAAQ,EAAE;MACVO,UAAU,CAACP,QAAQ,GAAGA,QAAQ;IAClC;IAEA,IAAIC,UAAU,EAAE;MACZM,UAAU,CAACN,UAAU,GAAGA,UAAU;IACtC;IAEA,IAAIC,WAAW,EAAE;MACbK,UAAU,CAACL,WAAW,GAAGA,WAAW;IACxC;IAEA,IAAIC,aAAa,EAAE;MACfI,UAAU,CAACJ,aAAa,GAAGA,aAAa;IAC5C;IAEA,IAAIC,QAAQ,EAAE;MACVG,UAAU,CAACH,QAAQ,GAAGA,QAAQ;IAClC;IAEA,IAAIC,QAAQ,EAAE;MACVE,UAAU,CAACF,QAAQ,GAAGA,QAAQ;IAClC;IAEA,OAAOE,UAAU;EACrB;EAEA,OAAO,IAAI;AACf,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/extensions/getOsConfigFromExtension.js","sources":["../../../../src/pulumi/apps/extensions/getOsConfigFromExtension.ts"],"sourcesContent":["import { OpenSearch as openSearchExt } from \"~/pulumi/extensions/OpenSearch.js\";\nimport { type IProjectConfigModel } from \"@webiny/project/abstractions/models/index.js\";\n\nexport const getOsConfigFromExtension = (projectConfig: IProjectConfigModel) => {\n    const [openSearchExtension] = projectConfig.extensionsByType(openSearchExt);\n    if (!openSearchExtension) {\n        // OpenSearch not used.\n        return undefined;\n    }\n\n    const { enabled, endpoint, domainName, indexPrefix, sharedIndexes, username, password } =\n        openSearchExtension.params;\n    if (enabled === false) {\n        return false;\n    }\n\n    if (endpoint || domainName || indexPrefix || sharedIndexes || username || password) {\n        const openSearch: Omit<typeof openSearchExtension.params, \"enabled\"> = {};\n        if (endpoint) {\n            openSearch.endpoint = endpoint;\n        }\n\n        if (domainName) {\n            openSearch.domainName = domainName;\n        }\n\n        if (indexPrefix) {\n            openSearch.indexPrefix = indexPrefix;\n        }\n\n        if (sharedIndexes) {\n            openSearch.sharedIndexes = sharedIndexes;\n        }\n\n        if (username) {\n            openSearch.username = username;\n        }\n\n        if (password) {\n            openSearch.password = password;\n        }\n\n        return openSearch;\n    }\n\n    return true;\n};\n"],"names":["getOsConfigFromExtension","projectConfig","openSearchExtension","openSearchExt","enabled","endpoint","domainName","indexPrefix","sharedIndexes","username","password","openSearch"],"mappings":";AAGO,MAAMA,2BAA2B,CAACC;IACrC,MAAM,CAACC,oBAAoB,GAAGD,cAAc,gBAAgB,CAACE;IAC7D,IAAI,CAACD,qBAED;IAGJ,MAAM,EAAEE,OAAO,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,WAAW,EAAEC,aAAa,EAAEC,QAAQ,EAAEC,QAAQ,EAAE,GACnFR,oBAAoB,MAAM;IAC9B,IAAIE,AAAY,UAAZA,SACA,OAAO;IAGX,IAAIC,YAAYC,cAAcC,eAAeC,iBAAiBC,YAAYC,UAAU;QAChF,MAAMC,aAAiE,CAAC;QACxE,IAAIN,UACAM,WAAW,QAAQ,GAAGN;QAG1B,IAAIC,YACAK,WAAW,UAAU,GAAGL;QAG5B,IAAIC,aACAI,WAAW,WAAW,GAAGJ;QAG7B,IAAIC,eACAG,WAAW,aAAa,GAAGH;QAG/B,IAAIC,UACAE,WAAW,QAAQ,GAAGF;QAG1B,IAAIC,UACAC,WAAW,QAAQ,GAAGD;QAG1B,OAAOC;IACX;IAEA,OAAO;AACX"}