@webiny/project-aws 6.3.0 → 6.4.0-beta.1

package/pulumi/apps/api/ApiBackgroundTask.js

@@ -1,5 +1,3 @@
-import * as pulumi from "@pulumi/pulumi";
-import * as aws from "@pulumi/aws";
 import { createAppModule } from "@webiny/pulumi";
 import { ApiGraphql, CoreOutput } from "../index.js";
 import { createBackgroundTaskDefinition } from "./backgroundTask/definition.js";
@@ -7,142 +5,160 @@ import { createBackgroundTaskStepFunctionPolicy } from "./backgroundTask/policy.
 import { createBackgroundTaskStepFunctionRole } from "./backgroundTask/role.js";
 import { getLayerArn } from "@webiny/aws-layers";
 import { getAwsAccountId, getAwsRegion } from "../awsUtils.js";
-export const ApiBackgroundTaskLambdaName = "background-task";
-export const ApiBackgroundTask = createAppModule({
-  name: "ApiBackgroundTask",
-  config(app) {
-    const awsAccountId = getAwsAccountId(app);
-    const awsRegion = getAwsRegion(app);
-    const core = app.getModule(CoreOutput);
-    const graphql = app.getModule(ApiGraphql);
-    const baseConfig = graphql.functions.graphql.config.clone();
-    const backgroundTask = app.addResource(aws.lambda.Function, {
-      name: ApiBackgroundTaskLambdaName,
-      config: {
-        ...baseConfig,
-        layers: graphql.functions.graphql.output.layers.apply(arns => {
-          return Array.from(new Set([...(arns || []), getLayerArn("sharp")]));
-        }),
-        timeout: 900,
-        memorySize: 1024,
-        description: "Performs background tasks.",
-        loggingConfig: {
-          logFormat: "JSON"
-        }
-      }
-    });
-    const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {
-      name: "background-task-sfn-policy",
-      lambdaFunctionArn: backgroundTask.output.arn
-    });
-    const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {
-      name: "background-task-sfn-role",
-      policy: stepFunctionPolicy.output
-    });
-    const stepFunction = app.addResource(aws.sfn.StateMachine, {
-      name: "background-task-sfn",
-      config: {
-        roleArn: stepFunctionRole.output.arn,
-        definition: pulumi.jsonStringify(createBackgroundTaskDefinition({
-          lambdaName: ApiBackgroundTaskLambdaName,
-          lambdaArn: backgroundTask.output.arn
-        }))
-      }
-    });
-    const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {
-      name: "background-task-step-function-policy",
-      config: {
-        policy: {
-          Version: "2012-10-17",
-          Statement: [{
-            Action: ["states:StartExecution", "states:StopExecution"],
-            Effect: "Allow",
-            Resource: [stepFunction.output.arn.apply(arn => `${arn}`), stepFunction.output.arn.apply(arn => `${arn}*`)]
-          }, {
-            Action: ["states:DescribeExecution", "states:ListExecutions"],
-            Effect: "Allow",
-            Resource: [stepFunction.output.name.apply(name => {
-              return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;
-            })]
-          }]
-        }
-      }
-    });
-    app.addResource(aws.iam.RolePolicyAttachment, {
-      name: "background-task-step-function-policy-attachment-graphql",
-      config: {
-        policyArn: policyToAccessStepFunction.output.arn,
-        role: graphql.role.output.name
-      }
-    });
-    const eventRole = app.addResource(aws.iam.Role, {
-      name: "background-task-event-role",
-      config: {
-        assumeRolePolicy: {
-          Version: "2012-10-17",
-          Statement: [{
-            Action: "sts:AssumeRole",
-            Effect: "Allow",
-            Principal: {
-              Service: "events.amazonaws.com"
+import * as __rspack_external__pulumi_pulumi_d0276039 from "@pulumi/pulumi";
+import * as __rspack_external__pulumi_aws_e7af83c1 from "@pulumi/aws";
+const ApiBackgroundTaskLambdaName = "background-task";
+const ApiBackgroundTask = createAppModule({
+    name: "ApiBackgroundTask",
+    config (app) {
+        const awsAccountId = getAwsAccountId(app);
+        const awsRegion = getAwsRegion(app);
+        const core = app.getModule(CoreOutput);
+        const graphql = app.getModule(ApiGraphql);
+        const baseConfig = graphql.functions.graphql.config.clone();
+        const backgroundTask = app.addResource(__rspack_external__pulumi_aws_e7af83c1.lambda.Function, {
+            name: ApiBackgroundTaskLambdaName,
+            config: {
+                ...baseConfig,
+                layers: graphql.functions.graphql.output.layers.apply((arns)=>Array.from(new Set([
+                        ...arns || [],
+                        getLayerArn("sharp")
+                    ]))),
+                timeout: 900,
+                memorySize: 1024,
+                description: "Performs background tasks.",
+                loggingConfig: {
+                    logFormat: "JSON"
+                }
             }
-          }]
-        }
-      }
-    });
-    const eventPolicy = app.addResource(aws.iam.Policy, {
-      name: "background-task-event-policy",
-      config: {
-        policy: {
-          Version: "2012-10-17",
-          Statement: [{
-            Action: "states:StartExecution",
-            Effect: "Allow",
-            Resource: stepFunction.output.arn
-          }]
-        }
-      }
-    });
-    const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {
-      name: "background-task-event-role-policy-attachment",
-      config: {
-        role: eventRole.output.name,
-        policyArn: eventPolicy.output.arn
-      }
-    });
-    const eventRule = app.addResource(aws.cloudwatch.EventRule, {
-      name: "background-task-event-rule",
-      config: {
-        eventBusName: core.eventBusName,
-        roleArn: eventRole.output.arn,
-        eventPattern: JSON.stringify({
-          "detail-type": ["WebinyBackgroundTask"]
-        })
-      }
-    });
-    const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {
-      name: "background-task-event-target",
-      config: {
-        // This is going to get called.
-        arn: stepFunction.output.arn,
-        // This is the rule which determines if this target gets called.
-        rule: eventRule.output.name,
-        // This is the role which gets assumed when calling the target.
-        roleArn: eventRole.output.arn,
-        // This is the event bus name.
-        eventBusName: core.eventBusName
-      }
-    });
-    return {
-      backgroundTask,
-      stepFunction,
-      stepFunctionRole,
-      stepFunctionPolicy,
-      eventPolicy,
-      eventRolePolicyAttachment,
-      eventTarget
-    };
-  }
+        });
+        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {
+            name: "background-task-sfn-policy",
+            lambdaFunctionArn: backgroundTask.output.arn
+        });
+        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {
+            name: "background-task-sfn-role",
+            policy: stepFunctionPolicy.output
+        });
+        const stepFunction = app.addResource(__rspack_external__pulumi_aws_e7af83c1.sfn.StateMachine, {
+            name: "background-task-sfn",
+            config: {
+                roleArn: stepFunctionRole.output.arn,
+                definition: __rspack_external__pulumi_pulumi_d0276039.jsonStringify(createBackgroundTaskDefinition({
+                    lambdaName: ApiBackgroundTaskLambdaName,
+                    lambdaArn: backgroundTask.output.arn
+                }))
+            }
+        });
+        const policyToAccessStepFunction = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+            name: "background-task-step-function-policy",
+            config: {
+                policy: {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Action: [
+                                "states:StartExecution",
+                                "states:StopExecution"
+                            ],
+                            Effect: "Allow",
+                            Resource: [
+                                stepFunction.output.arn.apply((arn)=>`${arn}`),
+                                stepFunction.output.arn.apply((arn)=>`${arn}*`)
+                            ]
+                        },
+                        {
+                            Action: [
+                                "states:DescribeExecution",
+                                "states:ListExecutions"
+                            ],
+                            Effect: "Allow",
+                            Resource: [
+                                stepFunction.output.name.apply((name)=>__rspack_external__pulumi_pulumi_d0276039.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`)
+                            ]
+                        }
+                    ]
+                }
+            }
+        });
+        app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+            name: "background-task-step-function-policy-attachment-graphql",
+            config: {
+                policyArn: policyToAccessStepFunction.output.arn,
+                role: graphql.role.output.name
+            }
+        });
+        const eventRole = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Role, {
+            name: "background-task-event-role",
+            config: {
+                assumeRolePolicy: {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Action: "sts:AssumeRole",
+                            Effect: "Allow",
+                            Principal: {
+                                Service: "events.amazonaws.com"
+                            }
+                        }
+                    ]
+                }
+            }
+        });
+        const eventPolicy = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.Policy, {
+            name: "background-task-event-policy",
+            config: {
+                policy: {
+                    Version: "2012-10-17",
+                    Statement: [
+                        {
+                            Action: "states:StartExecution",
+                            Effect: "Allow",
+                            Resource: stepFunction.output.arn
+                        }
+                    ]
+                }
+            }
+        });
+        const eventRolePolicyAttachment = app.addResource(__rspack_external__pulumi_aws_e7af83c1.iam.RolePolicyAttachment, {
+            name: "background-task-event-role-policy-attachment",
+            config: {
+                role: eventRole.output.name,
+                policyArn: eventPolicy.output.arn
+            }
+        });
+        const eventRule = app.addResource(__rspack_external__pulumi_aws_e7af83c1.cloudwatch.EventRule, {
+            name: "background-task-event-rule",
+            config: {
+                eventBusName: core.eventBusName,
+                roleArn: eventRole.output.arn,
+                eventPattern: JSON.stringify({
+                    "detail-type": [
+                        "WebinyBackgroundTask"
+                    ]
+                })
+            }
+        });
+        const eventTarget = app.addResource(__rspack_external__pulumi_aws_e7af83c1.cloudwatch.EventTarget, {
+            name: "background-task-event-target",
+            config: {
+                arn: stepFunction.output.arn,
+                rule: eventRule.output.name,
+                roleArn: eventRole.output.arn,
+                eventBusName: core.eventBusName
+            }
+        });
+        return {
+            backgroundTask,
+            stepFunction,
+            stepFunctionRole,
+            stepFunctionPolicy,
+            eventPolicy,
+            eventRolePolicyAttachment,
+            eventTarget
+        };
+    }
 });
+export { ApiBackgroundTask, ApiBackgroundTaskLambdaName };
 
 //# sourceMappingURL=ApiBackgroundTask.js.map

package/pulumi/apps/api/ApiBackgroundTask.js.map

@@ -1 +1 @@
-{"version":3,"names":["pulumi","aws","createAppModule","ApiGraphql","CoreOutput","createBackgroundTaskDefinition","createBackgroundTaskStepFunctionPolicy","createBackgroundTaskStepFunctionRole","getLayerArn","getAwsAccountId","getAwsRegion","ApiBackgroundTaskLambdaName","ApiBackgroundTask","name","config","app","awsAccountId","awsRegion","core","getModule","graphql","baseConfig","functions","clone","backgroundTask","addResource","lambda","Function","layers","output","apply","arns","Array","from","Set","timeout","memorySize","description","loggingConfig","logFormat","stepFunctionPolicy","lambdaFunctionArn","arn","stepFunctionRole","policy","stepFunction","sfn","StateMachine","roleArn","definition","jsonStringify","lambdaName","lambdaArn","policyToAccessStepFunction","iam","Policy","Version","Statement","Action","Effect","Resource","interpolate","RolePolicyAttachment","policyArn","role","eventRole","Role","assumeRolePolicy","Principal","Service","eventPolicy","eventRolePolicyAttachment","eventRule","cloudwatch","EventRule","eventBusName","eventPattern","JSON","stringify","eventTarget","EventTarget","rule"],"sources":["ApiBackgroundTask.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql, CoreOutput } from \"~/pulumi/apps/index.js\";\nimport { createBackgroundTaskDefinition } from \"./backgroundTask/definition.js\";\nimport { createBackgroundTaskStepFunctionPolicy } from \"~/pulumi/apps/api/backgroundTask/policy.js\";\nimport { createBackgroundTaskStepFunctionRole } from \"./backgroundTask/role.js\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\n\nexport type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;\n\nexport const ApiBackgroundTaskLambdaName = \"background-task\";\n\nexport const ApiBackgroundTask = createAppModule({\n    name: \"ApiBackgroundTask\",\n    config(app: PulumiApp) {\n        const awsAccountId = getAwsAccountId(app);\n        const awsRegion = getAwsRegion(app);\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const backgroundTask = app.addResource(aws.lambda.Function, {\n            name: ApiBackgroundTaskLambdaName,\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                timeout: 900,\n                memorySize: 1024,\n                description: \"Performs background tasks.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {\n            name: \"background-task-sfn-policy\",\n            lambdaFunctionArn: backgroundTask.output.arn\n        });\n\n        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {\n            name: \"background-task-sfn-role\",\n            policy: stepFunctionPolicy.output\n        });\n\n        const stepFunction = app.addResource(aws.sfn.StateMachine, {\n            name: \"background-task-sfn\",\n            config: {\n                roleArn: stepFunctionRole.output.arn,\n                definition: pulumi.jsonStringify(\n                    createBackgroundTaskDefinition({\n                        lambdaName: ApiBackgroundTaskLambdaName,\n                        lambdaArn: backgroundTask.output.arn\n                    })\n                )\n            }\n        });\n\n        const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {\n            name: \"background-task-step-function-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"states:StartExecution\", \"states:StopExecution\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.arn.apply(arn => `${arn}`),\n                                stepFunction.output.arn.apply(arn => `${arn}*`)\n                            ]\n                        },\n                        {\n                            Action: [\"states:DescribeExecution\", \"states:ListExecutions\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.name.apply(name => {\n                                    return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;\n                                })\n                            ]\n                        }\n                    ]\n                }\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-step-function-policy-attachment-graphql\",\n            config: {\n                policyArn: policyToAccessStepFunction.output.arn,\n                role: graphql.role.output.name\n            }\n        });\n\n        const eventRole = app.addResource(aws.iam.Role, {\n            name: \"background-task-event-role\",\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"events.amazonaws.com\"\n                            }\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventPolicy = app.addResource(aws.iam.Policy, {\n            name: \"background-task-event-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"states:StartExecution\",\n                            Effect: \"Allow\",\n                            Resource: stepFunction.output.arn\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-event-role-policy-attachment\",\n            config: {\n                role: eventRole.output.name,\n                policyArn: eventPolicy.output.arn\n            }\n        });\n\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: \"background-task-event-rule\",\n            config: {\n                eventBusName: core.eventBusName,\n                roleArn: eventRole.output.arn,\n                eventPattern: JSON.stringify({\n                    \"detail-type\": [\"WebinyBackgroundTask\"]\n                })\n            }\n        });\n\n        const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: \"background-task-event-target\",\n            config: {\n                // This is going to get called.\n                arn: stepFunction.output.arn,\n                // This is the rule which determines if this target gets called.\n                rule: eventRule.output.name,\n                // This is the role which gets assumed when calling the target.\n                roleArn: eventRole.output.arn,\n                // This is the event bus name.\n                eventBusName: core.eventBusName\n            }\n        });\n\n        return {\n            backgroundTask,\n            stepFunction,\n            stepFunctionRole,\n            stepFunctionPolicy,\n            eventPolicy,\n            eventRolePolicyAttachment,\n            eventTarget\n        };\n    }\n});\n"],"mappings":"AAAA,OAAO,KAAKA,MAAM,MAAM,gBAAgB;AACxC,OAAO,KAAKC,GAAG,MAAM,aAAa;AAElC,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,UAAU,EAAEC,UAAU;AAC/B,SAASC,8BAA8B;AACvC,SAASC,sCAAsC;AAC/C,SAASC,oCAAoC;AAC7C,SAASC,WAAW,QAAQ,oBAAoB;AAChD,SAASC,eAAe,EAAEC,YAAY;AAItC,OAAO,MAAMC,2BAA2B,GAAG,iBAAiB;AAE5D,OAAO,MAAMC,iBAAiB,GAAGV,eAAe,CAAC;EAC7CW,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,YAAY,GAAGP,eAAe,CAACM,GAAG,CAAC;IACzC,MAAME,SAAS,GAAGP,YAAY,CAACK,GAAG,CAAC;IACnC,MAAMG,IAAI,GAAGH,GAAG,CAACI,SAAS,CAACf,UAAU,CAAC;IACtC,MAAMgB,OAAO,GAAGL,GAAG,CAACI,SAAS,CAAChB,UAAU,CAAC;IACzC,MAAMkB,UAAU,GAAGD,OAAO,CAACE,SAAS,CAACF,OAAO,CAACN,MAAM,CAACS,KAAK,CAAC,CAAC;IAE3D,MAAMC,cAAc,GAAGT,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACyB,MAAM,CAACC,QAAQ,EAAE;MACxDd,IAAI,EAAEF,2BAA2B;MACjCG,MAAM,EAAE;QACJ,GAAGO,UAAU;QACbO,MAAM,EAAER,OAAO,CAACE,SAAS,CAACF,OAAO,CAACS,MAAM,CAACD,MAAM,CAACE,KAAK,CAACC,IAAI,IAAI;UAC1D,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,IAAIH,IAAI,IAAI,EAAE,CAAC,EAAEvB,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF2B,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE,4BAA4B;QACzCC,aAAa,EAAE;UACXC,SAAS,EAAE;QACf;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,kBAAkB,GAAGlC,sCAAsC,CAACS,GAAG,EAAE;MACnEF,IAAI,EAAE,4BAA4B;MAClC4B,iBAAiB,EAAEjB,cAAc,CAACK,MAAM,CAACa;IAC7C,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAGpC,oCAAoC,CAACQ,GAAG,EAAE;MAC/DF,IAAI,EAAE,0BAA0B;MAChC+B,MAAM,EAAEJ,kBAAkB,CAACX;IAC/B,CAAC,CAAC;IAEF,MAAMgB,YAAY,GAAG9B,GAAG,CAACU,WAAW,CAACxB,GAAG,CAAC6C,GAAG,CAACC,YAAY,EAAE;MACvDlC,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJkC,OAAO,EAAEL,gBAAgB,CAACd,MAAM,CAACa,GAAG;QACpCO,UAAU,EAAEjD,MAAM,CAACkD,aAAa,CAC5B7C,8BAA8B,CAAC;UAC3B8C,UAAU,EAAExC,2BAA2B;UACvCyC,SAAS,EAAE5B,cAAc,CAACK,MAAM,CAACa;QACrC,CAAC,CACL;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMW,0BAA0B,GAAGtC,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACC,MAAM,EAAE;MAC/D1C,IAAI,EAAE,sCAAsC;MAC5CC,MAAM,EAAE;QACJ8B,MAAM,EAAE;UACJY,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;YACzDC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNf,YAAY,CAAChB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAI,GAAGA,GAAG,EAAE,CAAC,EAC9CG,YAAY,CAAChB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAI,GAAGA,GAAG,GAAG,CAAC;UAEvD,CAAC,EACD;YACIgB,MAAM,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;YAC7DC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNf,YAAY,CAAChB,MAAM,CAAChB,IAAI,CAACiB,KAAK,CAACjB,IAAI,IAAI;cACnC,OAAOb,MAAM,CAAC6D,WAAW,kBAAkB5C,SAAS,IAAID,YAAY,cAAcH,IAAI,IAAI;YAC9F,CAAC,CAAC;UAEV,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEFE,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACQ,oBAAoB,EAAE;MAC1CjD,IAAI,EAAE,yDAAyD;MAC/DC,MAAM,EAAE;QACJiD,SAAS,EAAEV,0BAA0B,CAACxB,MAAM,CAACa,GAAG;QAChDsB,IAAI,EAAE5C,OAAO,CAAC4C,IAAI,CAACnC,MAAM,CAAChB;MAC9B;IACJ,CAAC,CAAC;IAEF,MAAMoD,SAAS,GAAGlD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACY,IAAI,EAAE;MAC5CrD,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJqD,gBAAgB,EAAE;UACdX,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,gBAAgB;YACxBC,MAAM,EAAE,OAAO;YACfS,SAAS,EAAE;cACPC,OAAO,EAAE;YACb;UACJ,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGvD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACC,MAAM,EAAE;MAChD1C,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ8B,MAAM,EAAE;UACJY,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,uBAAuB;YAC/BC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAEf,YAAY,CAAChB,MAAM,CAACa;UAClC,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM6B,yBAAyB,GAAGxD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACqD,GAAG,CAACQ,oBAAoB,EAAE;MAC5EjD,IAAI,EAAE,8CAA8C;MACpDC,MAAM,EAAE;QACJkD,IAAI,EAAEC,SAAS,CAACpC,MAAM,CAAChB,IAAI;QAC3BkD,SAAS,EAAEO,WAAW,CAACzC,MAAM,CAACa;MAClC;IACJ,CAAC,CAAC;IAEF,MAAM8B,SAAS,GAAGzD,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACwE,UAAU,CAACC,SAAS,EAAE;MACxD7D,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJ6D,YAAY,EAAEzD,IAAI,CAACyD,YAAY;QAC/B3B,OAAO,EAAEiB,SAAS,CAACpC,MAAM,CAACa,GAAG;QAC7BkC,YAAY,EAAEC,IAAI,CAACC,SAAS,CAAC;UACzB,aAAa,EAAE,CAAC,sBAAsB;QAC1C,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGhE,GAAG,CAACU,WAAW,CAACxB,GAAG,CAACwE,UAAU,CAACO,WAAW,EAAE;MAC5DnE,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ;QACA4B,GAAG,EAAEG,YAAY,CAAChB,MAAM,CAACa,GAAG;QAC5B;QACAuC,IAAI,EAAET,SAAS,CAAC3C,MAAM,CAAChB,IAAI;QAC3B;QACAmC,OAAO,EAAEiB,SAAS,CAACpC,MAAM,CAACa,GAAG;QAC7B;QACAiC,YAAY,EAAEzD,IAAI,CAACyD;MACvB;IACJ,CAAC,CAAC;IAEF,OAAO;MACHnD,cAAc;MACdqB,YAAY;MACZF,gBAAgB;MAChBH,kBAAkB;MAClB8B,WAAW;MACXC,yBAAyB;MACzBQ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"pulumi/apps/api/ApiBackgroundTask.js","sources":["../../../../src/pulumi/apps/api/ApiBackgroundTask.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql, CoreOutput } from \"~/pulumi/apps/index.js\";\nimport { createBackgroundTaskDefinition } from \"./backgroundTask/definition.js\";\nimport { createBackgroundTaskStepFunctionPolicy } from \"~/pulumi/apps/api/backgroundTask/policy.js\";\nimport { createBackgroundTaskStepFunctionRole } from \"./backgroundTask/role.js\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport { getAwsAccountId, getAwsRegion } from \"~/pulumi/apps/awsUtils.js\";\n\nexport type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;\n\nexport const ApiBackgroundTaskLambdaName = \"background-task\";\n\nexport const ApiBackgroundTask = createAppModule({\n    name: \"ApiBackgroundTask\",\n    config(app: PulumiApp) {\n        const awsAccountId = getAwsAccountId(app);\n        const awsRegion = getAwsRegion(app);\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const backgroundTask = app.addResource(aws.lambda.Function, {\n            name: ApiBackgroundTaskLambdaName,\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                timeout: 900,\n                memorySize: 1024,\n                description: \"Performs background tasks.\",\n                loggingConfig: {\n                    logFormat: \"JSON\"\n                }\n            }\n        });\n\n        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {\n            name: \"background-task-sfn-policy\",\n            lambdaFunctionArn: backgroundTask.output.arn\n        });\n\n        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {\n            name: \"background-task-sfn-role\",\n            policy: stepFunctionPolicy.output\n        });\n\n        const stepFunction = app.addResource(aws.sfn.StateMachine, {\n            name: \"background-task-sfn\",\n            config: {\n                roleArn: stepFunctionRole.output.arn,\n                definition: pulumi.jsonStringify(\n                    createBackgroundTaskDefinition({\n                        lambdaName: ApiBackgroundTaskLambdaName,\n                        lambdaArn: backgroundTask.output.arn\n                    })\n                )\n            }\n        });\n\n        const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {\n            name: \"background-task-step-function-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"states:StartExecution\", \"states:StopExecution\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.arn.apply(arn => `${arn}`),\n                                stepFunction.output.arn.apply(arn => `${arn}*`)\n                            ]\n                        },\n                        {\n                            Action: [\"states:DescribeExecution\", \"states:ListExecutions\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.name.apply(name => {\n                                    return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;\n                                })\n                            ]\n                        }\n                    ]\n                }\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-step-function-policy-attachment-graphql\",\n            config: {\n                policyArn: policyToAccessStepFunction.output.arn,\n                role: graphql.role.output.name\n            }\n        });\n\n        const eventRole = app.addResource(aws.iam.Role, {\n            name: \"background-task-event-role\",\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"events.amazonaws.com\"\n                            }\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventPolicy = app.addResource(aws.iam.Policy, {\n            name: \"background-task-event-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"states:StartExecution\",\n                            Effect: \"Allow\",\n                            Resource: stepFunction.output.arn\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-event-role-policy-attachment\",\n            config: {\n                role: eventRole.output.name,\n                policyArn: eventPolicy.output.arn\n            }\n        });\n\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: \"background-task-event-rule\",\n            config: {\n                eventBusName: core.eventBusName,\n                roleArn: eventRole.output.arn,\n                eventPattern: JSON.stringify({\n                    \"detail-type\": [\"WebinyBackgroundTask\"]\n                })\n            }\n        });\n\n        const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: \"background-task-event-target\",\n            config: {\n                // This is going to get called.\n                arn: stepFunction.output.arn,\n                // This is the rule which determines if this target gets called.\n                rule: eventRule.output.name,\n                // This is the role which gets assumed when calling the target.\n                roleArn: eventRole.output.arn,\n                // This is the event bus name.\n                eventBusName: core.eventBusName\n            }\n        });\n\n        return {\n            backgroundTask,\n            stepFunction,\n            stepFunctionRole,\n            stepFunctionPolicy,\n            eventPolicy,\n            eventRolePolicyAttachment,\n            eventTarget\n        };\n    }\n});\n"],"names":["ApiBackgroundTaskLambdaName","ApiBackgroundTask","createAppModule","app","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","core","CoreOutput","graphql","ApiGraphql","baseConfig","backgroundTask","aws","arns","Array","Set","getLayerArn","stepFunctionPolicy","createBackgroundTaskStepFunctionPolicy","stepFunctionRole","createBackgroundTaskStepFunctionRole","stepFunction","pulumi","createBackgroundTaskDefinition","policyToAccessStepFunction","arn","name","eventRole","eventPolicy","eventRolePolicyAttachment","eventRule","JSON","eventTarget"],"mappings":";;;;;;;;;AAaO,MAAMA,8BAA8B;AAEpC,MAAMC,oBAAoBC,gBAAgB;IAC7C,MAAM;IACN,QAAOC,GAAc;QACjB,MAAMC,eAAeC,gBAAgBF;QACrC,MAAMG,YAAYC,aAAaJ;QAC/B,MAAMK,OAAOL,IAAI,SAAS,CAACM;QAC3B,MAAMC,UAAUP,IAAI,SAAS,CAACQ;QAC9B,MAAMC,aAAaF,QAAQ,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAEzD,MAAMG,iBAAiBV,IAAI,WAAW,CAACW,uCAAAA,MAAAA,CAAAA,QAAmB,EAAE;YACxD,MAAMd;YACN,QAAQ;gBACJ,GAAGY,UAAU;gBACb,QAAQF,QAAQ,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAACK,CAAAA,OAC3CC,MAAM,IAAI,CAAC,IAAIC,IAAI;2BAAKF,QAAQ,EAAE;wBAAGG,YAAY;qBAAS;gBAErE,SAAS;gBACT,YAAY;gBACZ,aAAa;gBACb,eAAe;oBACX,WAAW;gBACf;YACJ;QACJ;QAEA,MAAMC,qBAAqBC,uCAAuCjB,KAAK;YACnE,MAAM;YACN,mBAAmBU,eAAe,MAAM,CAAC,GAAG;QAChD;QAEA,MAAMQ,mBAAmBC,qCAAqCnB,KAAK;YAC/D,MAAM;YACN,QAAQgB,mBAAmB,MAAM;QACrC;QAEA,MAAMI,eAAepB,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,YAAoB,EAAE;YACvD,MAAM;YACN,QAAQ;gBACJ,SAASO,iBAAiB,MAAM,CAAC,GAAG;gBACpC,YAAYG,0CAAAA,aAAoB,CAC5BC,+BAA+B;oBAC3B,YAAYzB;oBACZ,WAAWa,eAAe,MAAM,CAAC,GAAG;gBACxC;YAER;QACJ;QAEA,MAAMa,6BAA6BvB,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;YAC/D,MAAM;YACN,QAAQ;gBACJ,QAAQ;oBACJ,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;gCAAC;gCAAyB;6BAAuB;4BACzD,QAAQ;4BACR,UAAU;gCACNS,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,CAACI,CAAAA,MAAO,GAAGA,KAAK;gCAC7CJ,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,CAACI,CAAAA,MAAO,GAAGA,IAAI,CAAC,CAAC;6BACjD;wBACL;wBACA;4BACI,QAAQ;gCAAC;gCAA4B;6BAAwB;4BAC7D,QAAQ;4BACR,UAAU;gCACNJ,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,CAACK,CAAAA,OACpBJ,0CAAAA,WAAkB,CAAC,eAAe,EAAElB,UAAU,CAAC,EAAEF,aAAa,WAAW,EAAEwB,KAAK,EAAE,CAAC;6BAEjG;wBACL;qBACH;gBACL;YACJ;QACJ;QAEAzB,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;YAC1C,MAAM;YACN,QAAQ;gBACJ,WAAWY,2BAA2B,MAAM,CAAC,GAAG;gBAChD,MAAMhB,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;YAClC;QACJ;QAEA,MAAMmB,YAAY1B,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,IAAY,EAAE;YAC5C,MAAM;YACN,QAAQ;gBACJ,kBAAkB;oBACd,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;4BACR,QAAQ;4BACR,WAAW;gCACP,SAAS;4BACb;wBACJ;qBACH;gBACL;YACJ;QACJ;QAEA,MAAMgB,cAAc3B,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,MAAc,EAAE;YAChD,MAAM;YACN,QAAQ;gBACJ,QAAQ;oBACJ,SAAS;oBACT,WAAW;wBACP;4BACI,QAAQ;4BACR,QAAQ;4BACR,UAAUS,aAAa,MAAM,CAAC,GAAG;wBACrC;qBACH;gBACL;YACJ;QACJ;QAEA,MAAMQ,4BAA4B5B,IAAI,WAAW,CAACW,uCAAAA,GAAAA,CAAAA,oBAA4B,EAAE;YAC5E,MAAM;YACN,QAAQ;gBACJ,MAAMe,UAAU,MAAM,CAAC,IAAI;gBAC3B,WAAWC,YAAY,MAAM,CAAC,GAAG;YACrC;QACJ;QAEA,MAAME,YAAY7B,IAAI,WAAW,CAACW,uCAAAA,UAAAA,CAAAA,SAAwB,EAAE;YACxD,MAAM;YACN,QAAQ;gBACJ,cAAcN,KAAK,YAAY;gBAC/B,SAASqB,UAAU,MAAM,CAAC,GAAG;gBAC7B,cAAcI,KAAK,SAAS,CAAC;oBACzB,eAAe;wBAAC;qBAAuB;gBAC3C;YACJ;QACJ;QAEA,MAAMC,cAAc/B,IAAI,WAAW,CAACW,uCAAAA,UAAAA,CAAAA,WAA0B,EAAE;YAC5D,MAAM;YACN,QAAQ;gBAEJ,KAAKS,aAAa,MAAM,CAAC,GAAG;gBAE5B,MAAMS,UAAU,MAAM,CAAC,IAAI;gBAE3B,SAASH,UAAU,MAAM,CAAC,GAAG;gBAE7B,cAAcrB,KAAK,YAAY;YACnC;QACJ;QAEA,OAAO;YACHK;YACAU;YACAF;YACAF;YACAW;YACAC;YACAG;QACJ;IACJ;AACJ"}