@webiny/project-aws 6.3.0 → 6.4.0-beta.1

package/pulumi/apps/syncSystem/SyncSystemSQS.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createAppModule","createSyncResourceName","SyncSystemSQS","name","config","app","delaySeconds","visibilityTimeoutSeconds","fifoQueue","receiveWaitTimeSeconds","deduplicationScope","maxMessageSize","messageRetentionSeconds","sqsManagedSseEnabled","contentBasedDeduplication","sqsQueue","addResource","sqs","Queue"],"sources":["SyncSystemSQS.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { QueueArgs } from \"@pulumi/aws/sqs/index.js\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\n\nexport const SyncSystemSQS = createAppModule({\n    name: \"SyncSystemSQS\",\n    config: (app: PulumiApp) => {\n        const config: QueueArgs = {\n            /**\n             * We must name the SQS queue with a \".fifo\" suffix to enable FIFO functionality.\n             * If we add .fifo to a resource name, it will fail because pulumi adds some random generated id + .fifo to the end of the name.\n             * ... and there cannot be two .fifo in the name.\n             */\n            name: `${createSyncResourceName(\"sqs\")}.fifo`,\n            delaySeconds: 0,\n            /**\n             * 5 minutes should be enough for the message to be processed.\n             */\n            visibilityTimeoutSeconds: 900,\n            fifoQueue: true,\n            receiveWaitTimeSeconds: 0,\n            deduplicationScope: \"queue\",\n            /**\n             * The maximum message size is 256 KB.\n             * Chunks are billed in 64KB increments, so let's keep the message size below that.\n             */\n            maxMessageSize: 60 * 1024, // KB\n            /**\n             * How log do we keep the message in the queue?\n             */\n            messageRetentionSeconds: 4 /* days */ * 24 * 60 * 60,\n            /**\n             * No need to encrypt the message as nothing outside the system can actually read it.\n             */\n            sqsManagedSseEnabled: false,\n            /**\n             * We want to make sure that no message is sent more than once.\n             *\n             * TODO: determine if the criteria by which will we create a hash for the ID.\n             * TODO: must set \"MessageDeduplicationId\" property when creating the message.\n             */\n            contentBasedDeduplication: true\n        };\n\n        const sqsQueue = app.addResource(aws.sqs.Queue, {\n            name: `${createSyncResourceName(\"sqs\")}`,\n            config\n        });\n\n        return {\n            sqsQueue\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAGlC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,sBAAsB;AAE/B,OAAO,MAAMC,aAAa,GAAGF,eAAe,CAAC;EACzCG,IAAI,EAAE,eAAe;EACrBC,MAAM,EAAGC,GAAc,IAAK;IACxB,MAAMD,MAAiB,GAAG;MACtB;AACZ;AACA;AACA;AACA;MACYD,IAAI,EAAE,GAAGF,sBAAsB,CAAC,KAAK,CAAC,OAAO;MAC7CK,YAAY,EAAE,CAAC;MACf;AACZ;AACA;MACYC,wBAAwB,EAAE,GAAG;MAC7BC,SAAS,EAAE,IAAI;MACfC,sBAAsB,EAAE,CAAC;MACzBC,kBAAkB,EAAE,OAAO;MAC3B;AACZ;AACA;AACA;MACYC,cAAc,EAAE,EAAE,GAAG,IAAI;MAAE;MAC3B;AACZ;AACA;MACYC,uBAAuB,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE;MACpD;AACZ;AACA;MACYC,oBAAoB,EAAE,KAAK;MAC3B;AACZ;AACA;AACA;AACA;AACA;MACYC,yBAAyB,EAAE;IAC/B,CAAC;IAED,MAAMC,QAAQ,GAAGV,GAAG,CAACW,WAAW,CAACjB,GAAG,CAACkB,GAAG,CAACC,KAAK,EAAE;MAC5Cf,IAAI,EAAE,GAAGF,sBAAsB,CAAC,KAAK,CAAC,EAAE;MACxCG;IACJ,CAAC,CAAC;IAEF,OAAO;MACHW;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/SyncSystemSQS.js","sources":["../../../../src/pulumi/apps/syncSystem/SyncSystemSQS.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { QueueArgs } from \"@pulumi/aws/sqs/index.js\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\n\nexport const SyncSystemSQS = createAppModule({\n    name: \"SyncSystemSQS\",\n    config: (app: PulumiApp) => {\n        const config: QueueArgs = {\n            /**\n             * We must name the SQS queue with a \".fifo\" suffix to enable FIFO functionality.\n             * If we add .fifo to a resource name, it will fail because pulumi adds some random generated id + .fifo to the end of the name.\n             * ... and there cannot be two .fifo in the name.\n             */\n            name: `${createSyncResourceName(\"sqs\")}.fifo`,\n            delaySeconds: 0,\n            /**\n             * 5 minutes should be enough for the message to be processed.\n             */\n            visibilityTimeoutSeconds: 900,\n            fifoQueue: true,\n            receiveWaitTimeSeconds: 0,\n            deduplicationScope: \"queue\",\n            /**\n             * The maximum message size is 256 KB.\n             * Chunks are billed in 64KB increments, so let's keep the message size below that.\n             */\n            maxMessageSize: 60 * 1024, // KB\n            /**\n             * How log do we keep the message in the queue?\n             */\n            messageRetentionSeconds: 4 /* days */ * 24 * 60 * 60,\n            /**\n             * No need to encrypt the message as nothing outside the system can actually read it.\n             */\n            sqsManagedSseEnabled: false,\n            /**\n             * We want to make sure that no message is sent more than once.\n             *\n             * TODO: determine if the criteria by which will we create a hash for the ID.\n             * TODO: must set \"MessageDeduplicationId\" property when creating the message.\n             */\n            contentBasedDeduplication: true\n        };\n\n        const sqsQueue = app.addResource(aws.sqs.Queue, {\n            name: `${createSyncResourceName(\"sqs\")}`,\n            config\n        });\n\n        return {\n            sqsQueue\n        };\n    }\n});\n"],"names":["SyncSystemSQS","createAppModule","app","config","createSyncResourceName","sqsQueue","aws"],"mappings":";;;AAMO,MAAMA,gBAAgBC,gBAAgB;IACzC,MAAM;IACN,QAAQ,CAACC;QACL,MAAMC,SAAoB;YAMtB,MAAM,GAAGC,uBAAuB,OAAO,KAAK,CAAC;YAC7C,cAAc;YAId,0BAA0B;YAC1B,WAAW;YACX,wBAAwB;YACxB,oBAAoB;YAKpB,gBAAgB;YAIhB,yBAAyB;YAIzB,sBAAsB;YAOtB,2BAA2B;QAC/B;QAEA,MAAMC,WAAWH,IAAI,WAAW,CAACI,uCAAAA,GAAAA,CAAAA,KAAa,EAAE;YAC5C,MAAM,GAAGF,uBAAuB,QAAQ;YACxCD;QACJ;QAEA,OAAO;YACHE;QACJ;IACJ;AACJ"}

package/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js

@@ -1,52 +1,53 @@
 import path from "path";
-import * as aws from "@pulumi/aws";
 import { createAppModule } from "@webiny/pulumi";
 import { LAMBDA_RUNTIME } from "../../constants.js";
 import { createSyncResourceName } from "./createSyncResourceName.js";
 import { createAssetArchive } from "../../utils/createAssetArchive.js";
 import { createLambdaRoleWithoutVpc } from "../lambdaUtils.js";
-export const SyncSystemWorkerLambda = createAppModule({
-  name: "SyncSystemWorkerLambda",
-  config(app) {
-    const lambdaName = createSyncResourceName("worker-lambda");
-    const roleName = `${lambdaName}-role`;
-    const role = createLambdaRoleWithoutVpc(app, {
-      name: roleName
-    });
-    const policy = app.addResource(aws.iam.RolePolicyAttachment, {
-      name: `${roleName}-policy-attachment`,
-      config: {
-        role: role.output.name,
-        policyArn: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole
-      }
-    });
-    const lambda = app.addResource(aws.lambda.Function, {
-      name: lambdaName,
-      config: {
-        runtime: LAMBDA_RUNTIME,
-        handler: "handler.handler",
-        role: role.output.arn,
-        timeout: 900,
-        memorySize: 512,
-        code: createAssetArchive(path.join(app.paths.workspace, "worker/build")),
-        environment: {
-          variables: {
-            DEBUG: String(process.env.DEBUG),
-            PULUMI_APPS: "true",
-            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
-          }
-        },
-        loggingConfig: {
-          logFormat: "JSON"
-        }
-      }
-    });
-    return {
-      role,
-      policy,
-      lambda
-    };
-  }
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const SyncSystemWorkerLambda = createAppModule({
+    name: "SyncSystemWorkerLambda",
+    config (app) {
+        const lambdaName = createSyncResourceName("worker-lambda");
+        const roleName = `${lambdaName}-role`;
+        const role = createLambdaRoleWithoutVpc(app, {
+            name: roleName
+        });
+        const policy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+            name: `${roleName}-policy-attachment`,
+            config: {
+                role: role.output.name,
+                policyArn: __rspack_external__pulumi_aws_e7af83c1.iam.ManagedPolicy.AWSLambdaBasicExecutionRole
+            }
+        });
+        const lambda = app.addResource(__rspack_external__pulumi_aws_e7af83c1.lambda.Function, {
+            name: lambdaName,
+            config: {
+                runtime: LAMBDA_RUNTIME,
+                handler: "handler.handler",
+                role: role.output.arn,
+                timeout: 900,
+                memorySize: 512,
+                code: createAssetArchive(path.join(app.paths.workspace, "worker/build")),
+                environment: {
+                    variables: {
+                        DEBUG: String(process.env.DEBUG),
+                        PULUMI_APPS: "true",
+                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
+                    }
+                },
+                loggingConfig: {
+                    logFormat: "JSON"
+                }
+            }
+        });
+        return {
+            role,
+            policy,
+            lambda
+        };
+    }
 });
+export { SyncSystemWorkerLambda };
 
 //# sourceMappingURL=SyncSystemWorkerLambda.js.map

package/pulumi/apps/syncSystem/SyncSystemWorkerLambda.js.map

@@ -1 +1 @@
-{"version":3,"names":["path","aws","createAppModule","LAMBDA_RUNTIME","createSyncResourceName","createAssetArchive","createLambdaRoleWithoutVpc","SyncSystemWorkerLambda","name","config","app","lambdaName","roleName","role","policy","addResource","iam","RolePolicyAttachment","output","policyArn","ManagedPolicy","AWSLambdaBasicExecutionRole","lambda","Function","runtime","handler","arn","timeout","memorySize","code","join","paths","workspace","environment","variables","DEBUG","String","process","env","PULUMI_APPS","AWS_NODEJS_CONNECTION_REUSE_ENABLED","loggingConfig","logFormat"],"sources":["SyncSystemWorkerLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\nimport { createAssetArchive } from \"~/pulumi/utils/createAssetArchive.js\";\nimport { createLambdaRoleWithoutVpc } from \"~/pulumi/apps/lambdaUtils.js\";\n\nexport type SyncSystemWorkerLambda = PulumiAppModule<typeof SyncSystemWorkerLambda>;\n\nexport const SyncSystemWorkerLambda = createAppModule({\n    name: \"SyncSystemWorkerLambda\",\n    config(app: PulumiApp) {\n        const lambdaName = createSyncResourceName(\"worker-lambda\");\n        const roleName = `${lambdaName}-role`;\n\n        const role = createLambdaRoleWithoutVpc(app, {\n            name: roleName\n        });\n\n        const policy = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: `${roleName}-policy-attachment`,\n            config: {\n                role: role.output.name,\n                policyArn: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole\n            }\n        });\n\n        const lambda = app.addResource(aws.lambda.Function, {\n            name: lambdaName,\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 512,\n                code: createAssetArchive(path.join(app.paths.workspace, \"worker/build\")),\n                environment: {\n                    variables: {\n                        DEBUG: String(process.env.DEBUG),\n                        PULUMI_APPS: \"true\",\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }\n                },\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        return {\n            role,\n            policy,\n            lambda\n        };\n    }\n});\n"],"mappings":"AAAA,OAAOA,IAAI,MAAM,MAAM;AACvB,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,cAAc;AACvB,SAASC,sBAAsB;AAC/B,SAASC,kBAAkB;AAC3B,SAASC,0BAA0B;AAInC,OAAO,MAAMC,sBAAsB,GAAGL,eAAe,CAAC;EAClDM,IAAI,EAAE,wBAAwB;EAC9BC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,UAAU,GAAGP,sBAAsB,CAAC,eAAe,CAAC;IAC1D,MAAMQ,QAAQ,GAAG,GAAGD,UAAU,OAAO;IAErC,MAAME,IAAI,GAAGP,0BAA0B,CAACI,GAAG,EAAE;MACzCF,IAAI,EAAEI;IACV,CAAC,CAAC;IAEF,MAAME,MAAM,GAAGJ,GAAG,CAACK,WAAW,CAACd,GAAG,CAACe,GAAG,CAACC,oBAAoB,EAAE;MACzDT,IAAI,EAAE,GAAGI,QAAQ,oBAAoB;MACrCH,MAAM,EAAE;QACJI,IAAI,EAAEA,IAAI,CAACK,MAAM,CAACV,IAAI;QACtBW,SAAS,EAAElB,GAAG,CAACe,GAAG,CAACI,aAAa,CAACC;MACrC;IACJ,CAAC,CAAC;IAEF,MAAMC,MAAM,GAAGZ,GAAG,CAACK,WAAW,CAACd,GAAG,CAACqB,MAAM,CAACC,QAAQ,EAAE;MAChDf,IAAI,EAAEG,UAAU;MAChBF,MAAM,EAAE;QACJe,OAAO,EAAErB,cAAc;QACvBsB,OAAO,EAAE,iBAAiB;QAC1BZ,IAAI,EAAEA,IAAI,CAACK,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,GAAG;QACfC,IAAI,EAAExB,kBAAkB,CAACL,IAAI,CAAC8B,IAAI,CAACpB,GAAG,CAACqB,KAAK,CAACC,SAAS,EAAE,cAAc,CAAC,CAAC;QACxEC,WAAW,EAAE;UACTC,SAAS,EAAE;YACPC,KAAK,EAAEC,MAAM,CAACC,OAAO,CAACC,GAAG,CAACH,KAAK,CAAC;YAChCI,WAAW,EAAE,MAAM;YACnBC,mCAAmC,EAAE;UACzC;QACJ,CAAC;QACDC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACH7B,IAAI;MACJC,MAAM;MACNQ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/SyncSystemWorkerLambda.js","sources":["../../../../src/pulumi/apps/syncSystem/SyncSystemWorkerLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { LAMBDA_RUNTIME } from \"~/pulumi/constants.js\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\nimport { createAssetArchive } from \"~/pulumi/utils/createAssetArchive.js\";\nimport { createLambdaRoleWithoutVpc } from \"~/pulumi/apps/lambdaUtils.js\";\n\nexport type SyncSystemWorkerLambda = PulumiAppModule<typeof SyncSystemWorkerLambda>;\n\nexport const SyncSystemWorkerLambda = createAppModule({\n    name: \"SyncSystemWorkerLambda\",\n    config(app: PulumiApp) {\n        const lambdaName = createSyncResourceName(\"worker-lambda\");\n        const roleName = `${lambdaName}-role`;\n\n        const role = createLambdaRoleWithoutVpc(app, {\n            name: roleName\n        });\n\n        const policy = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: `${roleName}-policy-attachment`,\n            config: {\n                role: role.output.name,\n                policyArn: aws.iam.ManagedPolicy.AWSLambdaBasicExecutionRole\n            }\n        });\n\n        const lambda = app.addResource(aws.lambda.Function, {\n            name: lambdaName,\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 512,\n                code: createAssetArchive(path.join(app.paths.workspace, \"worker/build\")),\n                environment: {\n                    variables: {\n                        DEBUG: String(process.env.DEBUG),\n                        PULUMI_APPS: \"true\",\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }\n                },\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        return {\n            role,\n            policy,\n            lambda\n        };\n    }\n});\n"],"names":["SyncSystemWorkerLambda","createAppModule","app","lambdaName","createSyncResourceName","roleName","role","createLambdaRoleWithoutVpc","policy","aws","lambda","LAMBDA_RUNTIME","createAssetArchive","path","String","process"],"mappings":";;;;;;;AAWO,MAAMA,yBAAyBC,gBAAgB;IAClD,MAAM;IACN,QAAOC,GAAc;QACjB,MAAMC,aAAaC,uBAAuB;QAC1C,MAAMC,WAAW,GAAGF,WAAW,KAAK,CAAC;QAErC,MAAMG,OAAOC,2BAA2BL,KAAK;YACzC,MAAMG;QACV;QAEA,MAAMG,SAASN,IAAI,WAAW,CAACO,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;YACzD,MAAM,GAAGJ,SAAS,kBAAkB,CAAC;YACrC,QAAQ;gBACJ,MAAMC,KAAK,MAAM,CAAC,IAAI;gBACtB,WAAWG,uCAAAA,GAAAA,CAAAA,aAAAA,CAAAA,2BAAiD;YAChE;QACJ;QAEA,MAAMC,SAASR,IAAI,WAAW,CAACO,uCAAAA,MAAAA,CAAAA,QAAmB,EAAE;YAChD,MAAMN;YACN,QAAQ;gBACJ,SAASQ;gBACT,SAAS;gBACT,MAAML,KAAK,MAAM,CAAC,GAAG;gBACrB,SAAS;gBACT,YAAY;gBACZ,MAAMM,mBAAmBC,KAAK,IAAI,CAACX,IAAI,KAAK,CAAC,SAAS,EAAE;gBACxD,aAAa;oBACT,WAAW;wBACP,OAAOY,OAAOC,QAAQ,GAAG,CAAC,KAAK;wBAC/B,aAAa;wBACb,qCAAqC;oBACzC;gBACJ;gBACA,eAAe;oBACX,WAAW;gBACf;YACJ;QACJ;QAEA,OAAO;YACHT;YACAE;YACAE;QACJ;IACJ;AACJ"}

package/pulumi/apps/syncSystem/addTableItems.js

@@ -1,51 +1,41 @@
-import * as aws from "@pulumi/aws";
-import * as pulumi from "@pulumi/pulumi";
-export const addTableItems = params => {
-  const {
-    app,
-    table,
-    items
-  } = params;
-  /**
-   * Store some settings in the table.
-   */
-  app.addResource(aws.dynamodb.TableItem, {
-    name: "syncSystemSettings",
-    config: {
-      tableName: table.output.arn,
-      hashKey: table.output.hashKey,
-      rangeKey: pulumi.output(table.output.rangeKey).apply(key => key || "SK"),
-      item: pulumi.interpolate`{
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+const addTableItems = (params)=>{
+    const { app, table, items } = params;
+    app.addResource(__rspack_external__pulumi_aws_e7af83c1.dynamodb.TableItem, {
+        name: "syncSystemSettings",
+        config: {
+            tableName: table.output.arn,
+            hashKey: table.output.hashKey,
+            rangeKey: __rspack_external__pulumi_pulumi_d0276039.output(table.output.rangeKey).apply((key)=>key || "SK"),
+            item: __rspack_external__pulumi_pulumi_d0276039.interpolate`{
               ${buildTableItems({
-        PK: "syncSystem#SETTINGS",
-        SK: "default",
-        ...items
-      })}
+                PK: "syncSystem#SETTINGS",
+                SK: "default",
+                ...items
+            })}
             }`
-    }
-  });
-};
-const getTableItemType = value => {
-  if (value === null || value === undefined) {
-    return "S";
-  }
-  switch (typeof value) {
-    case "string":
-      return "S";
-    case "number":
-      return "N";
-    case "object":
-      return "M";
-    default:
-      throw new Error(`Unsupported type: ${typeof value}`);
-  }
+        }
+    });
 };
-const buildTableItems = items => {
-  return Object.keys(items).reduce((output, key) => {
-    const value = items[key];
-    output.push(`"${key}": {"${getTableItemType(value)}": "${value}"}`);
-    return output;
-  }, []).join(",");
+const getTableItemType = (value)=>{
+    if (null == value) return "S";
+    switch(typeof value){
+        case "string":
+            return "S";
+        case "number":
+            return "N";
+        case "object":
+            return "M";
+        default:
+            throw new Error(`Unsupported type: ${typeof value}`);
+    }
 };
+const buildTableItems = (items)=>Object.keys(items).reduce((output, key)=>{
+        const value = items[key];
+        output.push(`"${key}": {"${getTableItemType(value)}": "${value}"}`);
+        return output;
+    }, []).join(",");
+export { addTableItems };
 
 //# sourceMappingURL=addTableItems.js.map

package/pulumi/apps/syncSystem/addTableItems.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","pulumi","addTableItems","params","app","table","items","addResource","dynamodb","TableItem","name","config","tableName","output","arn","hashKey","rangeKey","apply","key","item","interpolate","buildTableItems","PK","SK","getTableItemType","value","undefined","Error","Object","keys","reduce","push","join"],"sources":["addTableItems.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { SyncSystemDynamo } from \"./SyncSystemDynamo.js\";\n\nexport interface IAddTableItemsParams {\n    app: PulumiApp;\n    table: SyncSystemDynamo;\n    items: Record<string, string | number | Record<string, string>>;\n}\n\nexport const addTableItems = (params: IAddTableItemsParams): void => {\n    const { app, table, items } = params;\n    /**\n     * Store some settings in the table.\n     */\n    app.addResource(aws.dynamodb.TableItem, {\n        name: \"syncSystemSettings\",\n        config: {\n            tableName: table.output.arn,\n            hashKey: table.output.hashKey,\n            rangeKey: pulumi.output(table.output.rangeKey).apply(key => key || \"SK\"),\n            item: pulumi.interpolate`{\n              ${buildTableItems({\n                  PK: \"syncSystem#SETTINGS\",\n                  SK: \"default\",\n                  ...items\n              })}\n            }`\n        }\n    });\n};\n\nconst getTableItemType = (value: unknown) => {\n    if (value === null || value === undefined) {\n        return \"S\";\n    }\n    switch (typeof value) {\n        case \"string\":\n            return \"S\";\n        case \"number\":\n            return \"N\";\n        case \"object\":\n            return \"M\";\n        default:\n            throw new Error(`Unsupported type: ${typeof value}`);\n    }\n};\n\nconst buildTableItems = (\n    items: Record<string, string | number | Record<string, string>>\n): string => {\n    return Object.keys(items)\n        .reduce<string[]>((output, key) => {\n            const value = items[key];\n            output.push(`\"${key}\": {\"${getTableItemType(value)}\": \"${value}\"}`);\n            return output;\n        }, [])\n        .join(\",\");\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,OAAO,KAAKC,MAAM,MAAM,gBAAgB;AAUxC,OAAO,MAAMC,aAAa,GAAIC,MAA4B,IAAW;EACjE,MAAM;IAAEC,GAAG;IAAEC,KAAK;IAAEC;EAAM,CAAC,GAAGH,MAAM;EACpC;AACJ;AACA;EACIC,GAAG,CAACG,WAAW,CAACP,GAAG,CAACQ,QAAQ,CAACC,SAAS,EAAE;IACpCC,IAAI,EAAE,oBAAoB;IAC1BC,MAAM,EAAE;MACJC,SAAS,EAAEP,KAAK,CAACQ,MAAM,CAACC,GAAG;MAC3BC,OAAO,EAAEV,KAAK,CAACQ,MAAM,CAACE,OAAO;MAC7BC,QAAQ,EAAEf,MAAM,CAACY,MAAM,CAACR,KAAK,CAACQ,MAAM,CAACG,QAAQ,CAAC,CAACC,KAAK,CAACC,GAAG,IAAIA,GAAG,IAAI,IAAI,CAAC;MACxEC,IAAI,EAAElB,MAAM,CAACmB,WAAW;AACpC,gBAAgBC,eAAe,CAAC;QACdC,EAAE,EAAE,qBAAqB;QACzBC,EAAE,EAAE,SAAS;QACb,GAAGjB;MACP,CAAC,CAAC;AAChB;IACQ;EACJ,CAAC,CAAC;AACN,CAAC;AAED,MAAMkB,gBAAgB,GAAIC,KAAc,IAAK;EACzC,IAAIA,KAAK,KAAK,IAAI,IAAIA,KAAK,KAAKC,SAAS,EAAE;IACvC,OAAO,GAAG;EACd;EACA,QAAQ,OAAOD,KAAK;IAChB,KAAK,QAAQ;MACT,OAAO,GAAG;IACd,KAAK,QAAQ;MACT,OAAO,GAAG;IACd,KAAK,QAAQ;MACT,OAAO,GAAG;IACd;MACI,MAAM,IAAIE,KAAK,CAAC,qBAAqB,OAAOF,KAAK,EAAE,CAAC;EAC5D;AACJ,CAAC;AAED,MAAMJ,eAAe,GACjBf,KAA+D,IACtD;EACT,OAAOsB,MAAM,CAACC,IAAI,CAACvB,KAAK,CAAC,CACpBwB,MAAM,CAAW,CAACjB,MAAM,EAAEK,GAAG,KAAK;IAC/B,MAAMO,KAAK,GAAGnB,KAAK,CAACY,GAAG,CAAC;IACxBL,MAAM,CAACkB,IAAI,CAAC,IAAIb,GAAG,QAAQM,gBAAgB,CAACC,KAAK,CAAC,OAAOA,KAAK,IAAI,CAAC;IACnE,OAAOZ,MAAM;EACjB,CAAC,EAAE,EAAE,CAAC,CACLmB,IAAI,CAAC,GAAG,CAAC;AAClB,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/addTableItems.js","sources":["../../../../src/pulumi/apps/syncSystem/addTableItems.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { SyncSystemDynamo } from \"./SyncSystemDynamo.js\";\n\nexport interface IAddTableItemsParams {\n    app: PulumiApp;\n    table: SyncSystemDynamo;\n    items: Record<string, string | number | Record<string, string>>;\n}\n\nexport const addTableItems = (params: IAddTableItemsParams): void => {\n    const { app, table, items } = params;\n    /**\n     * Store some settings in the table.\n     */\n    app.addResource(aws.dynamodb.TableItem, {\n        name: \"syncSystemSettings\",\n        config: {\n            tableName: table.output.arn,\n            hashKey: table.output.hashKey,\n            rangeKey: pulumi.output(table.output.rangeKey).apply(key => key || \"SK\"),\n            item: pulumi.interpolate`{\n              ${buildTableItems({\n                  PK: \"syncSystem#SETTINGS\",\n                  SK: \"default\",\n                  ...items\n              })}\n            }`\n        }\n    });\n};\n\nconst getTableItemType = (value: unknown) => {\n    if (value === null || value === undefined) {\n        return \"S\";\n    }\n    switch (typeof value) {\n        case \"string\":\n            return \"S\";\n        case \"number\":\n            return \"N\";\n        case \"object\":\n            return \"M\";\n        default:\n            throw new Error(`Unsupported type: ${typeof value}`);\n    }\n};\n\nconst buildTableItems = (\n    items: Record<string, string | number | Record<string, string>>\n): string => {\n    return Object.keys(items)\n        .reduce<string[]>((output, key) => {\n            const value = items[key];\n            output.push(`\"${key}\": {\"${getTableItemType(value)}\": \"${value}\"}`);\n            return output;\n        }, [])\n        .join(\",\");\n};\n"],"names":["addTableItems","params","app","table","items","aws","pulumi","key","buildTableItems","getTableItemType","value","Error","Object","output"],"mappings":";;AAWO,MAAMA,gBAAgB,CAACC;IAC1B,MAAM,EAAEC,GAAG,EAAEC,KAAK,EAAEC,KAAK,EAAE,GAAGH;IAI9BC,IAAI,WAAW,CAACG,uCAAAA,QAAAA,CAAAA,SAAsB,EAAE;QACpC,MAAM;QACN,QAAQ;YACJ,WAAWF,MAAM,MAAM,CAAC,GAAG;YAC3B,SAASA,MAAM,MAAM,CAAC,OAAO;YAC7B,UAAUG,0CAAAA,MAAa,CAACH,MAAM,MAAM,CAAC,QAAQ,EAAE,KAAK,CAACI,CAAAA,MAAOA,OAAO;YACnE,MAAMD,0CAAAA,WAAkB,CAAC;cACvB,EAAEE,gBAAgB;gBACd,IAAI;gBACJ,IAAI;gBACJ,GAAGJ,KAAK;YACZ,GAAG;aACJ,CAAC;QACN;IACJ;AACJ;AAEA,MAAMK,mBAAmB,CAACC;IACtB,IAAIA,QAAAA,OACA,OAAO;IAEX,OAAQ,OAAOA;QACX,KAAK;YACD,OAAO;QACX,KAAK;YACD,OAAO;QACX,KAAK;YACD,OAAO;QACX;YACI,MAAM,IAAIC,MAAM,CAAC,kBAAkB,EAAE,OAAOD,OAAO;IAC3D;AACJ;AAEA,MAAMF,kBAAkB,CACpBJ,QAEOQ,OAAO,IAAI,CAACR,OACd,MAAM,CAAW,CAACS,QAAQN;QACvB,MAAMG,QAAQN,KAAK,CAACG,IAAI;QACxBM,OAAO,IAAI,CAAC,CAAC,CAAC,EAAEN,IAAI,KAAK,EAAEE,iBAAiBC,OAAO,IAAI,EAAEA,MAAM,EAAE,CAAC;QAClE,OAAOG;IACX,GAAG,EAAE,EACJ,IAAI,CAAC"}

package/pulumi/apps/syncSystem/api/addServiceManifest.js

@@ -1,18 +1,16 @@
-export const addServiceManifest = params => {
-  const {
-    app,
-    syncSystem
-  } = params;
-  app.addHandler(() => {
-    app.addServiceManifest({
-      name: "sync",
-      manifest: {
-        eventBusArn: syncSystem.eventBusArn,
-        eventBusName: syncSystem.eventBusName,
-        region: syncSystem.region
-      }
+const addServiceManifest = (params)=>{
+    const { app, syncSystem } = params;
+    app.addHandler(()=>{
+        app.addServiceManifest({
+            name: "sync",
+            manifest: {
+                eventBusArn: syncSystem.eventBusArn,
+                eventBusName: syncSystem.eventBusName,
+                region: syncSystem.region
+            }
+        });
     });
-  });
 };
+export { addServiceManifest };
 
 //# sourceMappingURL=addServiceManifest.js.map

package/pulumi/apps/syncSystem/api/addServiceManifest.js.map

@@ -1 +1 @@
-{"version":3,"names":["addServiceManifest","params","app","syncSystem","addHandler","name","manifest","eventBusArn","eventBusName","region"],"sources":["addServiceManifest.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAddServiceManifestParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n}\n\nexport const addServiceManifest = (params: IAddServiceManifestParams) => {\n    const { app, syncSystem } = params;\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"sync\",\n            manifest: {\n                eventBusArn: syncSystem.eventBusArn,\n                eventBusName: syncSystem.eventBusName,\n                region: syncSystem.region\n            }\n        });\n    });\n};\n"],"mappings":"AASA,OAAO,MAAMA,kBAAkB,GAAIC,MAAiC,IAAK;EACrE,MAAM;IAAEC,GAAG;IAAEC;EAAW,CAAC,GAAGF,MAAM;EAElCC,GAAG,CAACE,UAAU,CAAC,MAAM;IACjBF,GAAG,CAACF,kBAAkB,CAAC;MACnBK,IAAI,EAAE,MAAM;MACZC,QAAQ,EAAE;QACNC,WAAW,EAAEJ,UAAU,CAACI,WAAW;QACnCC,YAAY,EAAEL,UAAU,CAACK,YAAY;QACrCC,MAAM,EAAEN,UAAU,CAACM;MACvB;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/addServiceManifest.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/addServiceManifest.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\n\nexport interface IAddServiceManifestParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n}\n\nexport const addServiceManifest = (params: IAddServiceManifestParams) => {\n    const { app, syncSystem } = params;\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"sync\",\n            manifest: {\n                eventBusArn: syncSystem.eventBusArn,\n                eventBusName: syncSystem.eventBusName,\n                region: syncSystem.region\n            }\n        });\n    });\n};\n"],"names":["addServiceManifest","params","app","syncSystem"],"mappings":"AASO,MAAMA,qBAAqB,CAACC;IAC/B,MAAM,EAAEC,GAAG,EAAEC,UAAU,EAAE,GAAGF;IAE5BC,IAAI,UAAU,CAAC;QACXA,IAAI,kBAAkB,CAAC;YACnB,MAAM;YACN,UAAU;gBACN,aAAaC,WAAW,WAAW;gBACnC,cAAcA,WAAW,YAAY;gBACrC,QAAQA,WAAW,MAAM;YAC7B;QACJ;IACJ;AACJ"}

package/pulumi/apps/syncSystem/api/attachCognitoPermissions.js

@@ -1,59 +1,53 @@
-import * as aws from "@pulumi/aws";
 import { createSyncResourceName } from "../createSyncResourceName.js";
-export const attachCognitoPermissions = params => {
-  const {
-    app,
-    syncSystem,
-    core
-  } = params;
-  /**
-   * TODO there must be a way to skip this if Cognito is not used in the Webiny deployment.
-   */
-  if (!core.cognitoUserPoolArn) {
-    return null;
-  }
-  const {
-    resolverLambdaRoleName,
-    workerLambdaRoleName
-  } = syncSystem;
-  const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-cognito`);
-  const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-cognito`);
-  const cognitoPolicy = app.addResource(aws.iam.Policy, {
-    name: `${resolverLambdaToS3ResourceName}-policy`,
-    config: {
-      description: "This policy enables access from Sync System Resolver and Worker Lambda to Webiny Cognito.",
-      policy: {
-        Version: "2012-10-17",
-        Statement: [{
-          Sid: "PermissionForSyncLambdaToCognito",
-          Effect: "Allow",
-          Action: ["cognito-idp:*"],
-          Resource: core.cognitoUserPoolArn.apply(arn => {
-            return [arn, `${arn}/*`];
-          })
-        }]
-      }
-    }
-  });
-  const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${resolverLambdaToS3ResourceName}-policy-attachment`,
-    config: {
-      role: resolverLambdaRoleName,
-      policyArn: cognitoPolicy.output.arn
-    }
-  });
-  const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${workerLambdaToS3ResourceName}-policy-attachment`,
-    config: {
-      role: workerLambdaRoleName,
-      policyArn: cognitoPolicy.output.arn
-    }
-  });
-  return {
-    cognitoPolicy,
-    workerLambdaS3PolicyAttachment,
-    resolverLambdaS3PolicyAttachment
-  };
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const attachCognitoPermissions = (params)=>{
+    const { app, syncSystem, core } = params;
+    if (!core.cognitoUserPoolArn) return null;
+    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;
+    const resolverLambdaToS3ResourceName = createSyncResourceName("resolver-lambda-to-cognito");
+    const workerLambdaToS3ResourceName = createSyncResourceName("worker-lambda-to-cognito");
+    const cognitoPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+        name: `${resolverLambdaToS3ResourceName}-policy`,
+        config: {
+            description: "This policy enables access from Sync System Resolver and Worker Lambda to Webiny Cognito.",
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Sid: "PermissionForSyncLambdaToCognito",
+                        Effect: "Allow",
+                        Action: [
+                            "cognito-idp:*"
+                        ],
+                        Resource: core.cognitoUserPoolArn.apply((arn)=>[
+                                arn,
+                                `${arn}/*`
+                            ])
+                    }
+                ]
+            }
+        }
+    });
+    const resolverLambdaS3PolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,
+        config: {
+            role: resolverLambdaRoleName,
+            policyArn: cognitoPolicy.output.arn
+        }
+    });
+    const workerLambdaS3PolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${workerLambdaToS3ResourceName}-policy-attachment`,
+        config: {
+            role: workerLambdaRoleName,
+            policyArn: cognitoPolicy.output.arn
+        }
+    });
+    return {
+        cognitoPolicy,
+        workerLambdaS3PolicyAttachment,
+        resolverLambdaS3PolicyAttachment
+    };
 };
+export { attachCognitoPermissions };
 
 //# sourceMappingURL=attachCognitoPermissions.js.map

package/pulumi/apps/syncSystem/api/attachCognitoPermissions.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createSyncResourceName","attachCognitoPermissions","params","app","syncSystem","core","cognitoUserPoolArn","resolverLambdaRoleName","workerLambdaRoleName","resolverLambdaToS3ResourceName","workerLambdaToS3ResourceName","cognitoPolicy","addResource","iam","Policy","name","config","description","policy","Version","Statement","Sid","Effect","Action","Resource","apply","arn","resolverLambdaS3PolicyAttachment","RolePolicyAttachment","role","policyArn","output","workerLambdaS3PolicyAttachment"],"sources":["attachCognitoPermissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { CoreOutput } from \"~/apps/index.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\n\nexport interface IAttachCognitoPermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachCognitoPermissions = (params: IAttachCognitoPermissionsParams) => {\n    const { app, syncSystem, core } = params;\n    /**\n     * TODO there must be a way to skip this if Cognito is not used in the Webiny deployment.\n     */\n    if (!core.cognitoUserPoolArn) {\n        return null;\n    }\n\n    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;\n\n    const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-cognito`);\n    const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-cognito`);\n\n    const cognitoPolicy = app.addResource(aws.iam.Policy, {\n        name: `${resolverLambdaToS3ResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Sync System Resolver and Worker Lambda to Webiny Cognito.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToCognito\",\n                        Effect: \"Allow\",\n                        Action: [\"cognito-idp:*\"],\n                        Resource: core.cognitoUserPoolArn.apply(arn => {\n                            return [arn, `${arn}/*`];\n                        })\n                    }\n                ]\n            }\n        }\n    });\n\n    const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: cognitoPolicy.output.arn\n        }\n    });\n\n    const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${workerLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: workerLambdaRoleName,\n            policyArn: cognitoPolicy.output.arn\n        }\n    });\n\n    return {\n        cognitoPolicy,\n        workerLambdaS3PolicyAttachment,\n        resolverLambdaS3PolicyAttachment\n    };\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAKlC,SAASC,sBAAsB;AAQ/B,OAAO,MAAMC,wBAAwB,GAAIC,MAAuC,IAAK;EACjF,MAAM;IAAEC,GAAG;IAAEC,UAAU;IAAEC;EAAK,CAAC,GAAGH,MAAM;EACxC;AACJ;AACA;EACI,IAAI,CAACG,IAAI,CAACC,kBAAkB,EAAE;IAC1B,OAAO,IAAI;EACf;EAEA,MAAM;IAAEC,sBAAsB;IAAEC;EAAqB,CAAC,GAAGJ,UAAU;EAEnE,MAAMK,8BAA8B,GAAGT,sBAAsB,CAAC,4BAA4B,CAAC;EAC3F,MAAMU,4BAA4B,GAAGV,sBAAsB,CAAC,0BAA0B,CAAC;EAEvF,MAAMW,aAAa,GAAGR,GAAG,CAACS,WAAW,CAACb,GAAG,CAACc,GAAG,CAACC,MAAM,EAAE;IAClDC,IAAI,EAAE,GAAGN,8BAA8B,SAAS;IAChDO,MAAM,EAAE;MACJC,WAAW,EACP,2FAA2F;MAC/FC,MAAM,EAAE;QACJC,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIC,GAAG,EAAE,kCAAkC;UACvCC,MAAM,EAAE,OAAO;UACfC,MAAM,EAAE,CAAC,eAAe,CAAC;UACzBC,QAAQ,EAAEnB,IAAI,CAACC,kBAAkB,CAACmB,KAAK,CAACC,GAAG,IAAI;YAC3C,OAAO,CAACA,GAAG,EAAE,GAAGA,GAAG,IAAI,CAAC;UAC5B,CAAC;QACL,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMC,gCAAgC,GAAGxB,GAAG,CAACS,WAAW,CAACb,GAAG,CAACc,GAAG,CAACe,oBAAoB,EAAE;IACnFb,IAAI,EAAE,GAAGN,8BAA8B,oBAAoB;IAC3DO,MAAM,EAAE;MACJa,IAAI,EAAEtB,sBAAsB;MAC5BuB,SAAS,EAAEnB,aAAa,CAACoB,MAAM,CAACL;IACpC;EACJ,CAAC,CAAC;EAEF,MAAMM,8BAA8B,GAAG7B,GAAG,CAACS,WAAW,CAACb,GAAG,CAACc,GAAG,CAACe,oBAAoB,EAAE;IACjFb,IAAI,EAAE,GAAGL,4BAA4B,oBAAoB;IACzDM,MAAM,EAAE;MACJa,IAAI,EAAErB,oBAAoB;MAC1BsB,SAAS,EAAEnB,aAAa,CAACoB,MAAM,CAACL;IACpC;EACJ,CAAC,CAAC;EAEF,OAAO;IACHf,aAAa;IACbqB,8BAA8B;IAC9BL;EACJ,CAAC;AACL,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/syncSystem/api/attachCognitoPermissions.js","sources":["../../../../../src/pulumi/apps/syncSystem/api/attachCognitoPermissions.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport type { IGetSyncSystemOutputResult } from \"~/pulumi/apps/syncSystem/types.js\";\nimport type { CoreOutput } from \"~/apps/index.js\";\nimport { createSyncResourceName } from \"~/pulumi/apps/syncSystem/createSyncResourceName.js\";\n\nexport interface IAttachCognitoPermissionsParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n    core: CoreOutput;\n}\n\nexport const attachCognitoPermissions = (params: IAttachCognitoPermissionsParams) => {\n    const { app, syncSystem, core } = params;\n    /**\n     * TODO there must be a way to skip this if Cognito is not used in the Webiny deployment.\n     */\n    if (!core.cognitoUserPoolArn) {\n        return null;\n    }\n\n    const { resolverLambdaRoleName, workerLambdaRoleName } = syncSystem;\n\n    const resolverLambdaToS3ResourceName = createSyncResourceName(`resolver-lambda-to-cognito`);\n    const workerLambdaToS3ResourceName = createSyncResourceName(`worker-lambda-to-cognito`);\n\n    const cognitoPolicy = app.addResource(aws.iam.Policy, {\n        name: `${resolverLambdaToS3ResourceName}-policy`,\n        config: {\n            description:\n                \"This policy enables access from Sync System Resolver and Worker Lambda to Webiny Cognito.\",\n            policy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Sid: \"PermissionForSyncLambdaToCognito\",\n                        Effect: \"Allow\",\n                        Action: [\"cognito-idp:*\"],\n                        Resource: core.cognitoUserPoolArn.apply(arn => {\n                            return [arn, `${arn}/*`];\n                        })\n                    }\n                ]\n            }\n        }\n    });\n\n    const resolverLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${resolverLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: resolverLambdaRoleName,\n            policyArn: cognitoPolicy.output.arn\n        }\n    });\n\n    const workerLambdaS3PolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n        name: `${workerLambdaToS3ResourceName}-policy-attachment`,\n        config: {\n            role: workerLambdaRoleName,\n            policyArn: cognitoPolicy.output.arn\n        }\n    });\n\n    return {\n        cognitoPolicy,\n        workerLambdaS3PolicyAttachment,\n        resolverLambdaS3PolicyAttachment\n    };\n};\n"],"names":["attachCognitoPermissions","params","app","syncSystem","core","resolverLambdaRoleName","workerLambdaRoleName","resolverLambdaToS3ResourceName","createSyncResourceName","workerLambdaToS3ResourceName","cognitoPolicy","aws","arn","resolverLambdaS3PolicyAttachment","workerLambdaS3PolicyAttachment"],"mappings":";;AAaO,MAAMA,2BAA2B,CAACC;IACrC,MAAM,EAAEC,GAAG,EAAEC,UAAU,EAAEC,IAAI,EAAE,GAAGH;IAIlC,IAAI,CAACG,KAAK,kBAAkB,EACxB,OAAO;IAGX,MAAM,EAAEC,sBAAsB,EAAEC,oBAAoB,EAAE,GAAGH;IAEzD,MAAMI,iCAAiCC,uBAAuB;IAC9D,MAAMC,+BAA+BD,uBAAuB;IAE5D,MAAME,gBAAgBR,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;QAClD,MAAM,GAAGJ,+BAA+B,OAAO,CAAC;QAChD,QAAQ;YACJ,aACI;YACJ,QAAQ;gBACJ,SAAS;gBACT,WAAW;oBACP;wBACI,KAAK;wBACL,QAAQ;wBACR,QAAQ;4BAAC;yBAAgB;wBACzB,UAAUH,KAAK,kBAAkB,CAAC,KAAK,CAACQ,CAAAA,MAC7B;gCAACA;gCAAK,GAAGA,IAAI,EAAE,CAAC;6BAAC;oBAEhC;iBACH;YACL;QACJ;IACJ;IAEA,MAAMC,mCAAmCX,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QACnF,MAAM,GAAGJ,+BAA+B,kBAAkB,CAAC;QAC3D,QAAQ;YACJ,MAAMF;YACN,WAAWK,cAAc,MAAM,CAAC,GAAG;QACvC;IACJ;IAEA,MAAMI,iCAAiCZ,IAAI,WAAW,CAACS,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;QACjF,MAAM,GAAGF,6BAA6B,kBAAkB,CAAC;QACzD,QAAQ;YACJ,MAAMH;YACN,WAAWI,cAAc,MAAM,CAAC,GAAG;QACvC;IACJ;IAEA,OAAO;QACHA;QACAI;QACAD;IACJ;AACJ"}

package/pulumi/apps/syncSystem/api/attachDynamoDbPermissions.js

@@ -1,44 +1,92 @@
-/**
- * We need to attach Sync System Lambda policy to access DynamoDB in the Webiny system.
- */
-import * as aws from "@pulumi/aws";
 import { createSyncResourceName } from "../createSyncResourceName.js";
-export const attachDynamoDbPermissions = params => {
-  const {
-    app,
-    syncSystem,
-    core
-  } = params;
-  const {
-    resolverLambdaRoleName
-  } = syncSystem;
-  const lambdaToDynamoDbResourceName = createSyncResourceName(`resolver-lambda-to-dynamodb`);
-  const dynamoDbPolicy = app.addResource(aws.iam.Policy, {
-    name: `${lambdaToDynamoDbResourceName}-policy`,
-    config: {
-      description: "This policy enables access from Sync System Lambda to Webiny DynamoDB.",
-      policy: {
-        Version: "2012-10-17",
-        Statement: [{
-          Sid: "PermissionForSyncLambdaToDynamoDb",
-          Effect: "Allow",
-          Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:ConditionCheckItem", "dynamodb:CreateBackup", "dynamodb:CreateTable", "dynamodb:CreateTableReplica", "dynamodb:DeleteBackup", "dynamodb:DeleteItem", "dynamodb:DeleteTable", "dynamodb:DeleteTableReplica", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeExport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:DisableKinesisStreamingDestination", "dynamodb:EnableKinesisStreamingDestination", "dynamodb:ExportTableToPointInTime", "dynamodb:GetItem", "dynamodb:GetRecords", "dynamodb:GetShardIterator", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "dynamodb:PartiQLDelete", "dynamodb:PartiQLInsert", "dynamodb:PartiQLSelect", "dynamodb:PartiQLUpdate", "dynamodb:PurchaseReservedCapacityOfferings", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:RestoreTableFromBackup", "dynamodb:RestoreTableToPointInTime", "dynamodb:Scan", "dynamodb:UpdateContinuousBackups", "dynamodb:UpdateContributorInsights", "dynamodb:UpdateItem", "dynamodb:UpdateTable", "dynamodb:UpdateTableReplicaAutoScaling", "dynamodb:UpdateTimeToLive"],
-          Resource: [core.primaryDynamodbTableArn.apply(arn => arn), core.primaryDynamodbTableArn.apply(arn => `${arn}/*`)]
-        }]
-      }
-    }
-  });
-  const lambdaRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-    name: `${lambdaToDynamoDbResourceName}-role-policy-attachment`,
-    config: {
-      role: resolverLambdaRoleName,
-      policyArn: dynamoDbPolicy.output.arn
-    }
-  });
-  return {
-    dynamoDbPolicy,
-    lambdaRolePolicyAttachment
-  };
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const attachDynamoDbPermissions = (params)=>{
+    const { app, syncSystem, core } = params;
+    const { resolverLambdaRoleName } = syncSystem;
+    const lambdaToDynamoDbResourceName = createSyncResourceName("resolver-lambda-to-dynamodb");
+    const dynamoDbPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+        name: `${lambdaToDynamoDbResourceName}-policy`,
+        config: {
+            description: "This policy enables access from Sync System Lambda to Webiny DynamoDB.",
+            policy: {
+                Version: "2012-10-17",
+                Statement: [
+                    {
+                        Sid: "PermissionForSyncLambdaToDynamoDb",
+                        Effect: "Allow",
+                        Action: [
+                            "dynamodb:BatchGetItem",
+                            "dynamodb:BatchWriteItem",
+                            "dynamodb:ConditionCheckItem",
+                            "dynamodb:CreateBackup",
+                            "dynamodb:CreateTable",
+                            "dynamodb:CreateTableReplica",
+                            "dynamodb:DeleteBackup",
+                            "dynamodb:DeleteItem",
+                            "dynamodb:DeleteTable",
+                            "dynamodb:DeleteTableReplica",
+                            "dynamodb:DescribeBackup",
+                            "dynamodb:DescribeContinuousBackups",
+                            "dynamodb:DescribeContributorInsights",
+                            "dynamodb:DescribeExport",
+                            "dynamodb:DescribeKinesisStreamingDestination",
+                            "dynamodb:DescribeLimits",
+                            "dynamodb:DescribeReservedCapacity",
+                            "dynamodb:DescribeReservedCapacityOfferings",
+                            "dynamodb:DescribeStream",
+                            "dynamodb:DescribeTable",
+                            "dynamodb:DescribeTableReplicaAutoScaling",
+                            "dynamodb:DescribeTimeToLive",
+                            "dynamodb:DisableKinesisStreamingDestination",
+                            "dynamodb:EnableKinesisStreamingDestination",
+                            "dynamodb:ExportTableToPointInTime",
+                            "dynamodb:GetItem",
+                            "dynamodb:GetRecords",
+                            "dynamodb:GetShardIterator",
+                            "dynamodb:ListBackups",
+                            "dynamodb:ListContributorInsights",
+                            "dynamodb:ListExports",
+                            "dynamodb:ListStreams",
+                            "dynamodb:ListTables",
+                            "dynamodb:ListTagsOfResource",
+                            "dynamodb:PartiQLDelete",
+                            "dynamodb:PartiQLInsert",
+                            "dynamodb:PartiQLSelect",
+                            "dynamodb:PartiQLUpdate",
+                            "dynamodb:PurchaseReservedCapacityOfferings",
+                            "dynamodb:PutItem",
+                            "dynamodb:Query",
+                            "dynamodb:RestoreTableFromBackup",
+                            "dynamodb:RestoreTableToPointInTime",
+                            "dynamodb:Scan",
+                            "dynamodb:UpdateContinuousBackups",
+                            "dynamodb:UpdateContributorInsights",
+                            "dynamodb:UpdateItem",
+                            "dynamodb:UpdateTable",
+                            "dynamodb:UpdateTableReplicaAutoScaling",
+                            "dynamodb:UpdateTimeToLive"
+                        ],
+                        Resource: [
+                            core.primaryDynamodbTableArn.apply((arn)=>arn),
+                            core.primaryDynamodbTableArn.apply((arn)=>`${arn}/*`)
+                        ]
+                    }
+                ]
+            }
+        }
+    });
+    const lambdaRolePolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+        name: `${lambdaToDynamoDbResourceName}-role-policy-attachment`,
+        config: {
+            role: resolverLambdaRoleName,
+            policyArn: dynamoDbPolicy.output.arn
+        }
+    });
+    return {
+        dynamoDbPolicy,
+        lambdaRolePolicyAttachment
+    };
 };
+export { attachDynamoDbPermissions };
 
 //# sourceMappingURL=attachDynamoDbPermissions.js.map