@webiny/pulumi-aws 5.40.6 → 5.41.0-beta.0

package/apps/admin/createAdminPulumiApp.d.ts

@@ -1,6 +1,6 @@
 import { PulumiAppParam, PulumiAppParamCallback } from "@webiny/pulumi";
 import { createReactPulumiApp, CustomDomainParams } from "..";
-export declare type AdminPulumiApp = ReturnType<typeof createReactPulumiApp>;
+export type AdminPulumiApp = ReturnType<typeof createReactPulumiApp>;
 export interface CreateAdminPulumiAppParams {
     /** Custom domain configuration */
     domains?: PulumiAppParamCallback<CustomDomainParams>;

package/apps/api/ApiApwScheduler.d.ts

@@ -2,7 +2,7 @@ import { PulumiAppModule } from "@webiny/pulumi";
 interface ScheduleActionParams {
     env: Record<string, any>;
 }
-export declare type ApiApwScheduler = PulumiAppModule<typeof ApiApwScheduler>;
+export type ApiApwScheduler = PulumiAppModule<typeof ApiApwScheduler>;
 export declare const ApiApwScheduler: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     executeAction: {
         role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;

package/apps/api/ApiBackgroundTask.d.ts

@@ -1,12 +1,12 @@
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;
+export type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;
 export declare const ApiBackgroundTaskLambdaName = "background-task";
 export declare const ApiBackgroundTask: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     backgroundTask: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
     stepFunction: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sfn/stateMachine").StateMachine>;
-    eventRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+    stepFunctionRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+    stepFunctionPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
     eventPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
     eventRolePolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
-    eventRule: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventRule").EventRule>;
     eventTarget: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventTarget").EventTarget>;
 }, void>;

package/apps/api/ApiBackgroundTask.js

@@ -13,10 +13,13 @@ var _definition = require("./backgroundTask/definition");
 var _policy = require("./backgroundTask/policy");
 var _role = require("./backgroundTask/role");
 var _awsLayers = require("@webiny/aws-layers");
+var _awsUtils = require("../awsUtils");
 const ApiBackgroundTaskLambdaName = exports.ApiBackgroundTaskLambdaName = "background-task";
 const ApiBackgroundTask = exports.ApiBackgroundTask = (0, _pulumi2.createAppModule)({
   name: "ApiBackgroundTask",
   config(app) {
+    const awsAccountId = (0, _awsUtils.getAwsAccountId)(app);
+    const awsRegion = (0, _awsUtils.getAwsRegion)(app);
     const core = app.getModule(_.CoreOutput);
     const graphql = app.getModule(_.ApiGraphql);
     const baseConfig = graphql.functions.graphql.config.clone();
@@ -43,14 +46,6 @@ const ApiBackgroundTask = exports.ApiBackgroundTask = (0, _pulumi2.createAppModu
     const stepFunction = app.addResource(aws.sfn.StateMachine, {
       name: "background-task-sfn",
       config: {
-        // TODO logging to cloudwatch
-        /*
-        loggingConfiguration: {
-            level: "ALL",
-            includeExecutionData: true,
-            // insert real ARN
-            logDestination: ARN
-        */
         roleArn: stepFunctionRole.output.arn,
         definition: pulumi.jsonStringify((0, _definition.createBackgroundTaskDefinition)({
           lambdaName: ApiBackgroundTaskLambdaName,
@@ -58,6 +53,32 @@ const ApiBackgroundTask = exports.ApiBackgroundTask = (0, _pulumi2.createAppModu
         }))
       }
     });
+    const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {
+      name: "background-task-step-function-policy",
+      config: {
+        policy: {
+          Version: "2012-10-17",
+          Statement: [{
+            Action: ["states:StartExecution", "states:StopExecution"],
+            Effect: "Allow",
+            Resource: [stepFunction.output.arn.apply(arn => `${arn}`), stepFunction.output.arn.apply(arn => `${arn}*`)]
+          }, {
+            Action: ["states:DescribeExecution", "states:ListExecutions"],
+            Effect: "Allow",
+            Resource: [stepFunction.output.name.apply(name => {
+              return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;
+            })]
+          }]
+        }
+      }
+    });
+    app.addResource(aws.iam.RolePolicyAttachment, {
+      name: "background-task-step-function-policy-attachment-graphql",
+      config: {
+        policyArn: policyToAccessStepFunction.output.arn,
+        role: graphql.role.output.name
+      }
+    });
     const eventRole = app.addResource(aws.iam.Role, {
       name: "background-task-event-role",
       config: {
@@ -119,10 +140,10 @@ const ApiBackgroundTask = exports.ApiBackgroundTask = (0, _pulumi2.createAppModu
     return {
       backgroundTask,
       stepFunction,
-      eventRole,
+      stepFunctionRole,
+      stepFunctionPolicy,
       eventPolicy,
       eventRolePolicyAttachment,
-      eventRule,
       eventTarget
     };
   }

package/apps/api/ApiBackgroundTask.js.map

@@ -1 +1 @@
-{"version":3,"names":["pulumi","_interopRequireWildcard","require","aws","_pulumi2","_","_definition","_policy","_role","_awsLayers","ApiBackgroundTaskLambdaName","exports","ApiBackgroundTask","createAppModule","name","config","app","core","getModule","CoreOutput","graphql","ApiGraphql","baseConfig","functions","clone","backgroundTask","addResource","lambda","Function","layers","output","apply","arns","Array","from","Set","getLayerArn","timeout","memorySize","description","stepFunctionPolicy","createBackgroundTaskStepFunctionPolicy","lambdaFunctionArn","arn","stepFunctionRole","createBackgroundTaskStepFunctionRole","policy","stepFunction","sfn","StateMachine","roleArn","definition","jsonStringify","createBackgroundTaskDefinition","lambdaName","lambdaArn","eventRole","iam","Role","assumeRolePolicy","Version","Statement","Action","Effect","Principal","Service","eventPolicy","Policy","Resource","eventRolePolicyAttachment","RolePolicyAttachment","role","policyArn","eventRule","cloudwatch","EventRule","eventBusName","eventPattern","JSON","stringify","eventTarget","EventTarget","rule"],"sources":["ApiBackgroundTask.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql, CoreOutput } from \"~/apps\";\nimport { createBackgroundTaskDefinition } from \"./backgroundTask/definition\";\nimport { createBackgroundTaskStepFunctionPolicy } from \"~/apps/api/backgroundTask/policy\";\nimport { createBackgroundTaskStepFunctionRole } from \"./backgroundTask/role\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\n\nexport type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;\n\nexport const ApiBackgroundTaskLambdaName = \"background-task\";\n\nexport const ApiBackgroundTask = createAppModule({\n    name: \"ApiBackgroundTask\",\n    config(app: PulumiApp) {\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const backgroundTask = app.addResource(aws.lambda.Function, {\n            name: ApiBackgroundTaskLambdaName,\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                timeout: 900,\n                memorySize: 1024,\n                description: \"Performs background tasks.\"\n            }\n        });\n\n        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {\n            name: \"background-task-sfn-policy\",\n            lambdaFunctionArn: backgroundTask.output.arn\n        });\n\n        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {\n            name: \"background-task-sfn-role\",\n            policy: stepFunctionPolicy.output\n        });\n\n        const stepFunction = app.addResource(aws.sfn.StateMachine, {\n            name: \"background-task-sfn\",\n            config: {\n                // TODO logging to cloudwatch\n                /*\n                loggingConfiguration: {\n                    level: \"ALL\",\n                    includeExecutionData: true,\n                    // insert real ARN\n                    logDestination: ARN\n                */\n                roleArn: stepFunctionRole.output.arn,\n                definition: pulumi.jsonStringify(\n                    createBackgroundTaskDefinition({\n                        lambdaName: ApiBackgroundTaskLambdaName,\n                        lambdaArn: backgroundTask.output.arn\n                    })\n                )\n            }\n        });\n\n        const eventRole = app.addResource(aws.iam.Role, {\n            name: \"background-task-event-role\",\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"events.amazonaws.com\"\n                            }\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventPolicy = app.addResource(aws.iam.Policy, {\n            name: \"background-task-event-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"states:StartExecution\",\n                            Effect: \"Allow\",\n                            Resource: stepFunction.output.arn\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-event-role-policy-attachment\",\n            config: {\n                role: eventRole.output.name,\n                policyArn: eventPolicy.output.arn\n            }\n        });\n\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: \"background-task-event-rule\",\n            config: {\n                eventBusName: core.eventBusName,\n                roleArn: eventRole.output.arn,\n                eventPattern: JSON.stringify({\n                    \"detail-type\": [\"WebinyBackgroundTask\"]\n                })\n            }\n        });\n\n        const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: \"background-task-event-target\",\n            config: {\n                // This is going to get called.\n                arn: stepFunction.output.arn,\n                // This is the rule which determines if this target gets called.\n                rule: eventRule.output.name,\n                // This is the role which gets assumed when calling the target.\n                roleArn: eventRole.output.arn,\n                // This is the event bus name.\n                eventBusName: core.eventBusName\n            }\n        });\n\n        return {\n            backgroundTask,\n            stepFunction,\n            eventRole,\n            eventPolicy,\n            eventRolePolicyAttachment,\n            eventRule,\n            eventTarget\n        };\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AAIO,MAAMQ,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,iBAAiB;AAErD,MAAME,iBAAiB,GAAAD,OAAA,CAAAC,iBAAA,GAAG,IAAAC,wBAAe,EAAC;EAC7CC,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,IAAI,GAAGD,GAAG,CAACE,SAAS,CAACC,YAAU,CAAC;IACtC,MAAMC,OAAO,GAAGJ,GAAG,CAACE,SAAS,CAACG,YAAU,CAAC;IACzC,MAAMC,UAAU,GAAGF,OAAO,CAACG,SAAS,CAACH,OAAO,CAACL,MAAM,CAACS,KAAK,CAAC,CAAC;IAE3D,MAAMC,cAAc,GAAGT,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACwB,MAAM,CAACC,QAAQ,EAAE;MACxDd,IAAI,EAAEJ,2BAA2B;MACjCK,MAAM,EAAE;QACJ,GAAGO,UAAU;QACbO,MAAM,EAAET,OAAO,CAACG,SAAS,CAACH,OAAO,CAACU,MAAM,CAACD,MAAM,CAACE,KAAK,CAACC,IAAI,IAAI;UAC1D,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,IAAIH,IAAI,IAAI,EAAE,CAAC,EAAE,IAAAI,sBAAW,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACFC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE;MACjB;IACJ,CAAC,CAAC;IAEF,MAAMC,kBAAkB,GAAG,IAAAC,8CAAsC,EAACzB,GAAG,EAAE;MACnEF,IAAI,EAAE,4BAA4B;MAClC4B,iBAAiB,EAAEjB,cAAc,CAACK,MAAM,CAACa;IAC7C,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAG,IAAAC,0CAAoC,EAAC7B,GAAG,EAAE;MAC/DF,IAAI,EAAE,0BAA0B;MAChCgC,MAAM,EAAEN,kBAAkB,CAACV;IAC/B,CAAC,CAAC;IAEF,MAAMiB,YAAY,GAAG/B,GAAG,CAACU,WAAW,CAACvB,GAAG,CAAC6C,GAAG,CAACC,YAAY,EAAE;MACvDnC,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJ;QACA;AAChB;AACA;AACA;AACA;AACA;AACA;QACgBmC,OAAO,EAAEN,gBAAgB,CAACd,MAAM,CAACa,GAAG;QACpCQ,UAAU,EAAEnD,MAAM,CAACoD,aAAa,CAC5B,IAAAC,0CAA8B,EAAC;UAC3BC,UAAU,EAAE5C,2BAA2B;UACvC6C,SAAS,EAAE9B,cAAc,CAACK,MAAM,CAACa;QACrC,CAAC,CACL;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMa,SAAS,GAAGxC,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACsD,GAAG,CAACC,IAAI,EAAE;MAC5C5C,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJ4C,gBAAgB,EAAE;UACdC,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,gBAAgB;YACxBC,MAAM,EAAE,OAAO;YACfC,SAAS,EAAE;cACPC,OAAO,EAAE;YACb;UACJ,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGlD,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACsD,GAAG,CAACU,MAAM,EAAE;MAChDrD,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ+B,MAAM,EAAE;UACJc,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,uBAAuB;YAC/BC,MAAM,EAAE,OAAO;YACfK,QAAQ,EAAErB,YAAY,CAACjB,MAAM,CAACa;UAClC,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM0B,yBAAyB,GAAGrD,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACsD,GAAG,CAACa,oBAAoB,EAAE;MAC5ExD,IAAI,EAAE,8CAA8C;MACpDC,MAAM,EAAE;QACJwD,IAAI,EAAEf,SAAS,CAAC1B,MAAM,CAAChB,IAAI;QAC3B0D,SAAS,EAAEN,WAAW,CAACpC,MAAM,CAACa;MAClC;IACJ,CAAC,CAAC;IAEF,MAAM8B,SAAS,GAAGzD,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACuE,UAAU,CAACC,SAAS,EAAE;MACxD7D,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJ6D,YAAY,EAAE3D,IAAI,CAAC2D,YAAY;QAC/B1B,OAAO,EAAEM,SAAS,CAAC1B,MAAM,CAACa,GAAG;QAC7BkC,YAAY,EAAEC,IAAI,CAACC,SAAS,CAAC;UACzB,aAAa,EAAE,CAAC,sBAAsB;QAC1C,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGhE,GAAG,CAACU,WAAW,CAACvB,GAAG,CAACuE,UAAU,CAACO,WAAW,EAAE;MAC5DnE,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ;QACA4B,GAAG,EAAEI,YAAY,CAACjB,MAAM,CAACa,GAAG;QAC5B;QACAuC,IAAI,EAAET,SAAS,CAAC3C,MAAM,CAAChB,IAAI;QAC3B;QACAoC,OAAO,EAAEM,SAAS,CAAC1B,MAAM,CAACa,GAAG;QAC7B;QACAiC,YAAY,EAAE3D,IAAI,CAAC2D;MACvB;IACJ,CAAC,CAAC;IAEF,OAAO;MACHnD,cAAc;MACdsB,YAAY;MACZS,SAAS;MACTU,WAAW;MACXG,yBAAyB;MACzBI,SAAS;MACTO;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["pulumi","_interopRequireWildcard","require","aws","_pulumi2","_","_definition","_policy","_role","_awsLayers","_awsUtils","ApiBackgroundTaskLambdaName","exports","ApiBackgroundTask","createAppModule","name","config","app","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","core","getModule","CoreOutput","graphql","ApiGraphql","baseConfig","functions","clone","backgroundTask","addResource","lambda","Function","layers","output","apply","arns","Array","from","Set","getLayerArn","timeout","memorySize","description","stepFunctionPolicy","createBackgroundTaskStepFunctionPolicy","lambdaFunctionArn","arn","stepFunctionRole","createBackgroundTaskStepFunctionRole","policy","stepFunction","sfn","StateMachine","roleArn","definition","jsonStringify","createBackgroundTaskDefinition","lambdaName","lambdaArn","policyToAccessStepFunction","iam","Policy","Version","Statement","Action","Effect","Resource","interpolate","RolePolicyAttachment","policyArn","role","eventRole","Role","assumeRolePolicy","Principal","Service","eventPolicy","eventRolePolicyAttachment","eventRule","cloudwatch","EventRule","eventBusName","eventPattern","JSON","stringify","eventTarget","EventTarget","rule"],"sources":["ApiBackgroundTask.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { ApiGraphql, CoreOutput } from \"~/apps\";\nimport { createBackgroundTaskDefinition } from \"./backgroundTask/definition\";\nimport { createBackgroundTaskStepFunctionPolicy } from \"~/apps/api/backgroundTask/policy\";\nimport { createBackgroundTaskStepFunctionRole } from \"./backgroundTask/role\";\nimport { getLayerArn } from \"@webiny/aws-layers\";\nimport { getAwsAccountId, getAwsRegion } from \"~/apps/awsUtils\";\n\nexport type ApiBackgroundTask = PulumiAppModule<typeof ApiBackgroundTask>;\n\nexport const ApiBackgroundTaskLambdaName = \"background-task\";\n\nexport const ApiBackgroundTask = createAppModule({\n    name: \"ApiBackgroundTask\",\n    config(app: PulumiApp) {\n        const awsAccountId = getAwsAccountId(app);\n        const awsRegion = getAwsRegion(app);\n        const core = app.getModule(CoreOutput);\n        const graphql = app.getModule(ApiGraphql);\n        const baseConfig = graphql.functions.graphql.config.clone();\n\n        const backgroundTask = app.addResource(aws.lambda.Function, {\n            name: ApiBackgroundTaskLambdaName,\n            config: {\n                ...baseConfig,\n                layers: graphql.functions.graphql.output.layers.apply(arns => {\n                    return Array.from(new Set([...(arns || []), getLayerArn(\"sharp\")]));\n                }),\n                timeout: 900,\n                memorySize: 1024,\n                description: \"Performs background tasks.\"\n            }\n        });\n\n        const stepFunctionPolicy = createBackgroundTaskStepFunctionPolicy(app, {\n            name: \"background-task-sfn-policy\",\n            lambdaFunctionArn: backgroundTask.output.arn\n        });\n\n        const stepFunctionRole = createBackgroundTaskStepFunctionRole(app, {\n            name: \"background-task-sfn-role\",\n            policy: stepFunctionPolicy.output\n        });\n\n        const stepFunction = app.addResource(aws.sfn.StateMachine, {\n            name: \"background-task-sfn\",\n            config: {\n                roleArn: stepFunctionRole.output.arn,\n                definition: pulumi.jsonStringify(\n                    createBackgroundTaskDefinition({\n                        lambdaName: ApiBackgroundTaskLambdaName,\n                        lambdaArn: backgroundTask.output.arn\n                    })\n                )\n            }\n        });\n\n        const policyToAccessStepFunction = app.addResource(aws.iam.Policy, {\n            name: \"background-task-step-function-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: [\"states:StartExecution\", \"states:StopExecution\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.arn.apply(arn => `${arn}`),\n                                stepFunction.output.arn.apply(arn => `${arn}*`)\n                            ]\n                        },\n                        {\n                            Action: [\"states:DescribeExecution\", \"states:ListExecutions\"],\n                            Effect: \"Allow\",\n                            Resource: [\n                                stepFunction.output.name.apply(name => {\n                                    return pulumi.interpolate`arn:aws:states:${awsRegion}:${awsAccountId}:execution:${name}:*`;\n                                })\n                            ]\n                        }\n                    ]\n                }\n            }\n        });\n\n        app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-step-function-policy-attachment-graphql\",\n            config: {\n                policyArn: policyToAccessStepFunction.output.arn,\n                role: graphql.role.output.name\n            }\n        });\n\n        const eventRole = app.addResource(aws.iam.Role, {\n            name: \"background-task-event-role\",\n            config: {\n                assumeRolePolicy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"sts:AssumeRole\",\n                            Effect: \"Allow\",\n                            Principal: {\n                                Service: \"events.amazonaws.com\"\n                            }\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventPolicy = app.addResource(aws.iam.Policy, {\n            name: \"background-task-event-policy\",\n            config: {\n                policy: {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Action: \"states:StartExecution\",\n                            Effect: \"Allow\",\n                            Resource: stepFunction.output.arn\n                        }\n                    ]\n                }\n            }\n        });\n\n        const eventRolePolicyAttachment = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: \"background-task-event-role-policy-attachment\",\n            config: {\n                role: eventRole.output.name,\n                policyArn: eventPolicy.output.arn\n            }\n        });\n\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: \"background-task-event-rule\",\n            config: {\n                eventBusName: core.eventBusName,\n                roleArn: eventRole.output.arn,\n                eventPattern: JSON.stringify({\n                    \"detail-type\": [\"WebinyBackgroundTask\"]\n                })\n            }\n        });\n\n        const eventTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: \"background-task-event-target\",\n            config: {\n                // This is going to get called.\n                arn: stepFunction.output.arn,\n                // This is the rule which determines if this target gets called.\n                rule: eventRule.output.name,\n                // This is the role which gets assumed when calling the target.\n                roleArn: eventRole.output.arn,\n                // This is the event bus name.\n                eventBusName: core.eventBusName\n            }\n        });\n\n        return {\n            backgroundTask,\n            stepFunction,\n            stepFunctionRole,\n            stepFunctionPolicy,\n            eventPolicy,\n            eventRolePolicyAttachment,\n            eventTarget\n        };\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAF,uBAAA,CAAAC,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AACA,IAAAI,WAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AACA,IAAAM,KAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AACA,IAAAQ,SAAA,GAAAR,OAAA;AAIO,MAAMS,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,iBAAiB;AAErD,MAAME,iBAAiB,GAAAD,OAAA,CAAAC,iBAAA,GAAG,IAAAC,wBAAe,EAAC;EAC7CC,IAAI,EAAE,mBAAmB;EACzBC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,YAAY,GAAG,IAAAC,yBAAe,EAACF,GAAG,CAAC;IACzC,MAAMG,SAAS,GAAG,IAAAC,sBAAY,EAACJ,GAAG,CAAC;IACnC,MAAMK,IAAI,GAAGL,GAAG,CAACM,SAAS,CAACC,YAAU,CAAC;IACtC,MAAMC,OAAO,GAAGR,GAAG,CAACM,SAAS,CAACG,YAAU,CAAC;IACzC,MAAMC,UAAU,GAAGF,OAAO,CAACG,SAAS,CAACH,OAAO,CAACT,MAAM,CAACa,KAAK,CAAC,CAAC;IAE3D,MAAMC,cAAc,GAAGb,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC6B,MAAM,CAACC,QAAQ,EAAE;MACxDlB,IAAI,EAAEJ,2BAA2B;MACjCK,MAAM,EAAE;QACJ,GAAGW,UAAU;QACbO,MAAM,EAAET,OAAO,CAACG,SAAS,CAACH,OAAO,CAACU,MAAM,CAACD,MAAM,CAACE,KAAK,CAACC,IAAI,IAAI;UAC1D,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,IAAIH,IAAI,IAAI,EAAE,CAAC,EAAE,IAAAI,sBAAW,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACFC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,WAAW,EAAE;MACjB;IACJ,CAAC,CAAC;IAEF,MAAMC,kBAAkB,GAAG,IAAAC,8CAAsC,EAAC7B,GAAG,EAAE;MACnEF,IAAI,EAAE,4BAA4B;MAClCgC,iBAAiB,EAAEjB,cAAc,CAACK,MAAM,CAACa;IAC7C,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAG,IAAAC,0CAAoC,EAACjC,GAAG,EAAE;MAC/DF,IAAI,EAAE,0BAA0B;MAChCoC,MAAM,EAAEN,kBAAkB,CAACV;IAC/B,CAAC,CAAC;IAEF,MAAMiB,YAAY,GAAGnC,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAACkD,GAAG,CAACC,YAAY,EAAE;MACvDvC,IAAI,EAAE,qBAAqB;MAC3BC,MAAM,EAAE;QACJuC,OAAO,EAAEN,gBAAgB,CAACd,MAAM,CAACa,GAAG;QACpCQ,UAAU,EAAExD,MAAM,CAACyD,aAAa,CAC5B,IAAAC,0CAA8B,EAAC;UAC3BC,UAAU,EAAEhD,2BAA2B;UACvCiD,SAAS,EAAE9B,cAAc,CAACK,MAAM,CAACa;QACrC,CAAC,CACL;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMa,0BAA0B,GAAG5C,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC2D,GAAG,CAACC,MAAM,EAAE;MAC/DhD,IAAI,EAAE,sCAAsC;MAC5CC,MAAM,EAAE;QACJmC,MAAM,EAAE;UACJa,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;YACzDC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNhB,YAAY,CAACjB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAK,GAAEA,GAAI,EAAC,CAAC,EAC9CI,YAAY,CAACjB,MAAM,CAACa,GAAG,CAACZ,KAAK,CAACY,GAAG,IAAK,GAAEA,GAAI,GAAE,CAAC;UAEvD,CAAC,EACD;YACIkB,MAAM,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;YAC7DC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAE,CACNhB,YAAY,CAACjB,MAAM,CAACpB,IAAI,CAACqB,KAAK,CAACrB,IAAI,IAAI;cACnC,OAAOf,MAAM,CAACqE,WAAY,kBAAiBjD,SAAU,IAAGF,YAAa,cAAaH,IAAK,IAAG;YAC9F,CAAC,CAAC;UAEV,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEFE,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC2D,GAAG,CAACQ,oBAAoB,EAAE;MAC1CvD,IAAI,EAAE,yDAAyD;MAC/DC,MAAM,EAAE;QACJuD,SAAS,EAAEV,0BAA0B,CAAC1B,MAAM,CAACa,GAAG;QAChDwB,IAAI,EAAE/C,OAAO,CAAC+C,IAAI,CAACrC,MAAM,CAACpB;MAC9B;IACJ,CAAC,CAAC;IAEF,MAAM0D,SAAS,GAAGxD,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC2D,GAAG,CAACY,IAAI,EAAE;MAC5C3D,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJ2D,gBAAgB,EAAE;UACdX,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,gBAAgB;YACxBC,MAAM,EAAE,OAAO;YACfS,SAAS,EAAE;cACPC,OAAO,EAAE;YACb;UACJ,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAG7D,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC2D,GAAG,CAACC,MAAM,EAAE;MAChDhD,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJmC,MAAM,EAAE;UACJa,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,MAAM,EAAE,uBAAuB;YAC/BC,MAAM,EAAE,OAAO;YACfC,QAAQ,EAAEhB,YAAY,CAACjB,MAAM,CAACa;UAClC,CAAC;QAET;MACJ;IACJ,CAAC,CAAC;IAEF,MAAM+B,yBAAyB,GAAG9D,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC2D,GAAG,CAACQ,oBAAoB,EAAE;MAC5EvD,IAAI,EAAE,8CAA8C;MACpDC,MAAM,EAAE;QACJwD,IAAI,EAAEC,SAAS,CAACtC,MAAM,CAACpB,IAAI;QAC3BwD,SAAS,EAAEO,WAAW,CAAC3C,MAAM,CAACa;MAClC;IACJ,CAAC,CAAC;IAEF,MAAMgC,SAAS,GAAG/D,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC8E,UAAU,CAACC,SAAS,EAAE;MACxDnE,IAAI,EAAE,4BAA4B;MAClCC,MAAM,EAAE;QACJmE,YAAY,EAAE7D,IAAI,CAAC6D,YAAY;QAC/B5B,OAAO,EAAEkB,SAAS,CAACtC,MAAM,CAACa,GAAG;QAC7BoC,YAAY,EAAEC,IAAI,CAACC,SAAS,CAAC;UACzB,aAAa,EAAE,CAAC,sBAAsB;QAC1C,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,MAAMC,WAAW,GAAGtE,GAAG,CAACc,WAAW,CAAC5B,GAAG,CAAC8E,UAAU,CAACO,WAAW,EAAE;MAC5DzE,IAAI,EAAE,8BAA8B;MACpCC,MAAM,EAAE;QACJ;QACAgC,GAAG,EAAEI,YAAY,CAACjB,MAAM,CAACa,GAAG;QAC5B;QACAyC,IAAI,EAAET,SAAS,CAAC7C,MAAM,CAACpB,IAAI;QAC3B;QACAwC,OAAO,EAAEkB,SAAS,CAACtC,MAAM,CAACa,GAAG;QAC7B;QACAmC,YAAY,EAAE7D,IAAI,CAAC6D;MACvB;IACJ,CAAC,CAAC;IAEF,OAAO;MACHrD,cAAc;MACdsB,YAAY;MACZH,gBAAgB;MAChBJ,kBAAkB;MAClBiC,WAAW;MACXC,yBAAyB;MACzBQ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/api/ApiCloudfront.d.ts

@@ -1,3 +1,3 @@
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;
+export type ApiCloudfront = PulumiAppModule<typeof ApiCloudfront>;
 export declare const ApiCloudfront: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudfront/distribution").Distribution>, void>;

package/apps/api/ApiFileManager.d.ts

@@ -1,5 +1,5 @@
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiFileManager = PulumiAppModule<typeof ApiFileManager>;
+export type ApiFileManager = PulumiAppModule<typeof ApiFileManager>;
 interface ApiFileManagerConfig {
     env: Record<string, any>;
 }

package/apps/api/ApiGateway.d.ts

@@ -5,7 +5,7 @@ export interface ApiRouteParams {
     method: pulumi.Input<string>;
     function: pulumi.Input<string>;
 }
-export declare type ApiGateway = PulumiAppModule<typeof ApiGateway>;
+export type ApiGateway = PulumiAppModule<typeof ApiGateway>;
 export declare const ApiGateway: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     api: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/api").Api>;
     stage: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/stage").Stage>;

package/apps/api/ApiGraphql.d.ts

@@ -14,7 +14,7 @@ export interface AddRouteParams {
     path: `/${string}`;
     method: "DELETE" | "GET" | "HEAD" | "PATCH" | "POST" | "PUT" | "OPTIONS" | "ANY";
 }
-export declare type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;
+export type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;
 export declare const ApiGraphql: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
     policy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;

package/apps/api/ApiGraphql.js

@@ -27,6 +27,7 @@ const ApiGraphql = exports.ApiGraphql = (0, _pulumi2.createAppModule)({
       name: "api-lambda-role",
       policy: policy.output
     });
+    policy.config.policy;
     const graphql = app.addResource(aws.lambda.Function, {
       name: "graphql",
       config: {

package/apps/api/ApiGraphql.js.map

@@ -1 +1 @@
-{"version":3,"names":["_path","_interopRequireDefault","require","pulumi","_interopRequireWildcard","aws","_kebabCase","_pulumi2","_lambdaUtils","_","_awsUtils","_constants","EMPTY_TRASH_BIN_EVENT_RULE_NAME","EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME","EMPTY_TRASH_BIN_EVENT_RULE_TARGET","ApiGraphql","exports","createAppModule","name","config","app","params","core","getModule","CoreOutput","policy","createGraphqlLambdaPolicy","role","createLambdaRole","output","graphql","addResource","lambda","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","path","join","paths","workspace","environment","variables","getCommonLambdaEnvVariables","apply","value","env","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","VpcConfig","functionVpcConfig","dynamodb","TableItem","tableName","primaryDynamodbTableName","hashKey","primaryDynamodbTableHashKey","rangeKey","primaryDynamodbTableRangeKey","key","item","interpolate","run","variant","apwSchedulerEventRule","apwSchedulerEventTarget","targetId","eventRule","cloudwatch","EventRule","description","scheduleExpression","Permission","action","function","principal","statementId","EventTarget","rule","input","JSON","stringify","source","functions","addRoute","routeParams","apiGateway","resources","console","log","kebabName","toKebabCase","method","coreOutput","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","iam","Policy","Version","Statement","Sid","Effect","Action","Resource","primaryDynamodbTableArn","elasticsearchDynamodbTableArn","fileManagerBucketId","cognitoUserPoolArn","eventBusArn","elasticsearchDomainArn"],"sources":["ApiGraphql.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport toKebabCase from \"lodash/kebabCase\";\n\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils\";\nimport { CoreOutput, VpcConfig } from \"~/apps\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\n\ninterface GraphqlParams {\n    env: Record<string, any>;\n    apwSchedulerEventRule: pulumi.Output<aws.cloudwatch.EventRule>;\n    apwSchedulerEventTarget: pulumi.Output<aws.cloudwatch.EventTarget>;\n}\n\nexport interface AddRouteParams {\n    /**\n     * Must be in kebab case (a-z and -)\n     */\n    name: string;\n    path: `/${string}`;\n    method: \"DELETE\" | \"GET\" | \"HEAD\" | \"PATCH\" | \"POST\" | \"PUT\" | \"OPTIONS\" | \"ANY\";\n}\n\nconst EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;\nconst EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;\nconst EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;\n\nexport type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;\n\nexport const ApiGraphql = createAppModule({\n    name: \"ApiGraphql\",\n    config(app: PulumiApp, params: GraphqlParams) {\n        const core = app.getModule(CoreOutput);\n\n        const policy = createGraphqlLambdaPolicy(app);\n        const role = createLambdaRole(app, {\n            name: \"api-lambda-role\",\n            policy: policy.output\n        });\n\n        const graphql = app.addResource(aws.lambda.Function, {\n            name: \"graphql\",\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 30,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"graphql/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        ...params.env,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig\n            }\n        });\n        /**\n         * Store meta information like \"mainGraphqlFunctionArn\" in APW settings at deploy time.\n         *\n         * Note: We can't pass \"mainGraphqlFunctionArn\" as env variable due to circular dependency between\n         * \"graphql\" lambda and \"api-apw-scheduler-execute-action\" lambda.\n         */\n        app.addResource(aws.dynamodb.TableItem, {\n            name: \"apwSettings\",\n            config: {\n                tableName: core.primaryDynamodbTableName,\n                hashKey: core.primaryDynamodbTableHashKey,\n                rangeKey: pulumi\n                    .output(core.primaryDynamodbTableRangeKey)\n                    .apply(key => key || \"SK\"),\n                item: pulumi.interpolate`{\n              \"PK\": {\"S\": \"APW#SETTINGS\"},\n              \"SK\": {\"S\": \"${app.params.run.variant || \"default\"}\"},\n              \"mainGraphqlFunctionArn\": {\"S\": \"${graphql.output.arn}\"},\n              \"eventRuleName\": {\"S\": \"${params.apwSchedulerEventRule.name}\"},\n              \"eventTargetId\": {\"S\": \"${params.apwSchedulerEventTarget.targetId}\"}\n            }`\n            }\n        });\n\n        // Create event rule.\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,\n            config: {\n                description: \"Enable us to empty the trash-bin ever day\",\n                scheduleExpression: \"cron(0 3 * * ? *)\"\n            }\n        });\n\n        // Add required permission to the target lambda.\n        app.addResource(aws.lambda.Permission, {\n            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.output.arn,\n                principal: \"events.amazonaws.com\",\n                statementId: \"allow-rule-invoke-\" + EMPTY_TRASH_BIN_EVENT_RULE_NAME\n            }\n        });\n\n        // Target the main graphql lambda.\n        app.addResource(aws.cloudwatch.EventTarget, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,\n            config: {\n                rule: eventRule.output.name,\n                arn: graphql.output.arn,\n                input: JSON.stringify({\n                    source: \"webiny.events\",\n                    \"detail-type\": \"WebinyEmptyTrashBin\"\n                })\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                graphql\n            },\n            addRoute: (routeParams: AddRouteParams) => {\n                const apiGateway: any = app.resources.apiGateway;\n                if (!apiGateway) {\n                    console.log(\n                        \"Could not add route because there is no apiGateway in the resources.\"\n                    );\n                    return;\n                }\n                const kebabName = toKebabCase(routeParams.name);\n                if (kebabName !== routeParams.name) {\n                    console.log(`Route name is not allowed: \"${routeParams.name}\".`);\n                    return;\n                }\n                return apiGateway.addRoute(routeParams.name, {\n                    path: routeParams.path,\n                    method: routeParams.method,\n                    function: graphql.output.arn\n                });\n            }\n        };\n    }\n});\n\nfunction createGraphqlLambdaPolicy(app: PulumiApp) {\n    const coreOutput = app.getModule(CoreOutput);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"ApiGraphqlLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3, Lambda and Cognito IDP\",\n            // Core is pulumi.Output, so we need to run apply() to resolve policy based on it\n            policy: coreOutput.apply(core => {\n                const policy: aws.iam.PolicyDocument = {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"dynamodb:BatchGetItem\",\n                                \"dynamodb:BatchWriteItem\",\n                                \"dynamodb:ConditionCheckItem\",\n                                \"dynamodb:CreateBackup\",\n                                \"dynamodb:CreateTable\",\n                                \"dynamodb:CreateTableReplica\",\n                                \"dynamodb:DeleteBackup\",\n                                \"dynamodb:DeleteItem\",\n                                \"dynamodb:DeleteTable\",\n                                \"dynamodb:DeleteTableReplica\",\n                                \"dynamodb:DescribeBackup\",\n                                \"dynamodb:DescribeContinuousBackups\",\n                                \"dynamodb:DescribeContributorInsights\",\n                                \"dynamodb:DescribeExport\",\n                                \"dynamodb:DescribeKinesisStreamingDestination\",\n                                \"dynamodb:DescribeLimits\",\n                                \"dynamodb:DescribeReservedCapacity\",\n                                \"dynamodb:DescribeReservedCapacityOfferings\",\n                                \"dynamodb:DescribeStream\",\n                                \"dynamodb:DescribeTable\",\n                                \"dynamodb:DescribeTableReplicaAutoScaling\",\n                                \"dynamodb:DescribeTimeToLive\",\n                                \"dynamodb:DisableKinesisStreamingDestination\",\n                                \"dynamodb:EnableKinesisStreamingDestination\",\n                                \"dynamodb:ExportTableToPointInTime\",\n                                \"dynamodb:GetItem\",\n                                \"dynamodb:GetRecords\",\n                                \"dynamodb:GetShardIterator\",\n                                \"dynamodb:ListBackups\",\n                                \"dynamodb:ListContributorInsights\",\n                                \"dynamodb:ListExports\",\n                                \"dynamodb:ListStreams\",\n                                \"dynamodb:ListTables\",\n                                \"dynamodb:ListTagsOfResource\",\n                                \"dynamodb:PartiQLDelete\",\n                                \"dynamodb:PartiQLInsert\",\n                                \"dynamodb:PartiQLSelect\",\n                                \"dynamodb:PartiQLUpdate\",\n                                \"dynamodb:PurchaseReservedCapacityOfferings\",\n                                \"dynamodb:PutItem\",\n                                \"dynamodb:Query\",\n                                \"dynamodb:RestoreTableFromBackup\",\n                                \"dynamodb:RestoreTableToPointInTime\",\n                                \"dynamodb:Scan\",\n                                \"dynamodb:UpdateContinuousBackups\",\n                                \"dynamodb:UpdateContributorInsights\",\n                                \"dynamodb:UpdateItem\",\n                                \"dynamodb:UpdateTable\",\n                                \"dynamodb:UpdateTableReplicaAutoScaling\",\n                                \"dynamodb:UpdateTimeToLive\"\n                            ],\n                            Resource: [\n                                `${core.primaryDynamodbTableArn}`,\n                                `${core.primaryDynamodbTableArn}/*`,\n                                // Attach permissions for elastic search dynamo as well (if ES is enabled).\n                                ...(core.elasticsearchDynamodbTableArn\n                                    ? [\n                                          `${core.elasticsearchDynamodbTableArn}`,\n                                          `${core.elasticsearchDynamodbTableArn}/*`\n                                      ]\n                                    : [])\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForS3\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"s3:ListBucket\",\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\"\n                            ],\n                            Resource: [\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForLambda\",\n                            Effect: \"Allow\",\n                            Action: [\"lambda:InvokeFunction\"],\n                            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n                        },\n                        {\n                            Sid: \"PermissionForCognitoIdp\",\n                            Effect: \"Allow\",\n                            Action: \"cognito-idp:*\",\n                            Resource: `${core.cognitoUserPoolArn}`\n                        },\n                        {\n                            Sid: \"PermissionForEventBus\",\n                            Effect: \"Allow\",\n                            Action: \"events:PutEvents\",\n                            Resource: core.eventBusArn\n                        },\n                        {\n                            Sid: \"PermissionForCloudfront\",\n                            Effect: \"Allow\",\n                            Action: \"cloudfront:CreateInvalidation\",\n                            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`\n                        },\n                        // Attach permissions for elastic search domain as well (if ES is enabled).\n                        ...(core.elasticsearchDomainArn\n                            ? [\n                                  {\n                                      Sid: \"PermissionForES\",\n                                      Effect: \"Allow\" as const,\n                                      Action: \"es:*\",\n                                      Resource: [\n                                          `${core.elasticsearchDomainArn}`,\n                                          `${core.elasticsearchDomainArn}/*`\n                                      ]\n                                  }\n                              ]\n                            : [])\n                    ]\n                };\n\n                return policy;\n            })\n        }\n    });\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AACA,IAAAI,UAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,YAAA,GAAAN,OAAA;AACA,IAAAO,CAAA,GAAAP,OAAA;AACA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,UAAA,GAAAT,OAAA;AAiBA,MAAMU,+BAA+B,GAAI,4BAA2B;AACpE,MAAMC,qCAAqC,GAAI,yCAAwC;AACvF,MAAMC,iCAAiC,GAAI,mCAAkC;AAItE,MAAMC,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG,IAAAE,wBAAe,EAAC;EACtCC,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,MAAqB,EAAE;IAC1C,MAAMC,IAAI,GAAGF,GAAG,CAACG,SAAS,CAACC,YAAU,CAAC;IAEtC,MAAMC,MAAM,GAAGC,yBAAyB,CAACN,GAAG,CAAC;IAC7C,MAAMO,IAAI,GAAG,IAAAC,6BAAgB,EAACR,GAAG,EAAE;MAC/BF,IAAI,EAAE,iBAAiB;MACvBO,MAAM,EAAEA,MAAM,CAACI;IACnB,CAAC,CAAC;IAEF,MAAMC,OAAO,GAAGV,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAAC2B,MAAM,CAACC,QAAQ,EAAE;MACjDf,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJe,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1BT,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,EAAE;QACXC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAIrC,MAAM,CAACsC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAIvC,MAAM,CAACsC,KAAK,CAACE,WAAW,CAC7BC,aAAI,CAACC,IAAI,CAACzB,GAAG,CAAC0B,KAAK,CAACC,SAAS,EAAE,eAAe,CAClD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAE,IAAAC,wCAA2B,EAAC,CAAC,CAACC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACR,GAAG/B,MAAM,CAACgC,GAAG;YACbC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAEnC,GAAG,CAACG,SAAS,CAACiC,WAAS,CAAC,CAACC;MACxC;IACJ,CAAC,CAAC;IACF;AACR;AACA;AACA;AACA;AACA;IACQrC,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACqD,QAAQ,CAACC,SAAS,EAAE;MACpCzC,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJyC,SAAS,EAAEtC,IAAI,CAACuC,wBAAwB;QACxCC,OAAO,EAAExC,IAAI,CAACyC,2BAA2B;QACzCC,QAAQ,EAAE7D,MAAM,CACX0B,MAAM,CAACP,IAAI,CAAC2C,4BAA4B,CAAC,CACzCd,KAAK,CAACe,GAAG,IAAIA,GAAG,IAAI,IAAI,CAAC;QAC9BC,IAAI,EAAEhE,MAAM,CAACiE,WAAY;AACzC;AACA,6BAA6BhD,GAAG,CAACC,MAAM,CAACgD,GAAG,CAACC,OAAO,IAAI,SAAU;AACjE,iDAAiDxC,OAAO,CAACD,MAAM,CAACQ,GAAI;AACpE,wCAAwChB,MAAM,CAACkD,qBAAqB,CAACrD,IAAK;AAC1E,wCAAwCG,MAAM,CAACmD,uBAAuB,CAACC,QAAS;AAChF;MACY;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,SAAS,GAAGtD,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACsE,UAAU,CAACC,SAAS,EAAE;MACxD1D,IAAI,EAAEN,+BAA+B;MACrCO,MAAM,EAAE;QACJ0D,WAAW,EAAE,2CAA2C;QACxDC,kBAAkB,EAAE;MACxB;IACJ,CAAC,CAAC;;IAEF;IACA1D,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAAC2B,MAAM,CAAC+C,UAAU,EAAE;MACnC7D,IAAI,EAAEL,qCAAqC;MAC3CM,MAAM,EAAE;QACJ6D,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAEnD,OAAO,CAACD,MAAM,CAACQ,GAAG;QAC5B6C,SAAS,EAAE,sBAAsB;QACjCC,WAAW,EAAE,oBAAoB,GAAGvE;MACxC;IACJ,CAAC,CAAC;;IAEF;IACAQ,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACsE,UAAU,CAACS,WAAW,EAAE;MACxClE,IAAI,EAAEJ,iCAAiC;MACvCK,MAAM,EAAE;QACJkE,IAAI,EAAEX,SAAS,CAAC7C,MAAM,CAACX,IAAI;QAC3BmB,GAAG,EAAEP,OAAO,CAACD,MAAM,CAACQ,GAAG;QACvBiD,KAAK,EAAEC,IAAI,CAACC,SAAS,CAAC;UAClBC,MAAM,EAAE,eAAe;UACvB,aAAa,EAAE;QACnB,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,OAAO;MACH9D,IAAI;MACJF,MAAM;MACNiE,SAAS,EAAE;QACP5D;MACJ,CAAC;MACD6D,QAAQ,EAAGC,WAA2B,IAAK;QACvC,MAAMC,UAAe,GAAGzE,GAAG,CAAC0E,SAAS,CAACD,UAAU;QAChD,IAAI,CAACA,UAAU,EAAE;UACbE,OAAO,CAACC,GAAG,CACP,sEACJ,CAAC;UACD;QACJ;QACA,MAAMC,SAAS,GAAG,IAAAC,kBAAW,EAACN,WAAW,CAAC1E,IAAI,CAAC;QAC/C,IAAI+E,SAAS,KAAKL,WAAW,CAAC1E,IAAI,EAAE;UAChC6E,OAAO,CAACC,GAAG,CAAE,+BAA8BJ,WAAW,CAAC1E,IAAK,IAAG,CAAC;UAChE;QACJ;QACA,OAAO2E,UAAU,CAACF,QAAQ,CAACC,WAAW,CAAC1E,IAAI,EAAE;UACzC0B,IAAI,EAAEgD,WAAW,CAAChD,IAAI;UACtBuD,MAAM,EAAEP,WAAW,CAACO,MAAM;UAC1BlB,QAAQ,EAAEnD,OAAO,CAACD,MAAM,CAACQ;QAC7B,CAAC,CAAC;MACN;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAEF,SAASX,yBAAyBA,CAACN,GAAc,EAAE;EAC/C,MAAMgF,UAAU,GAAGhF,GAAG,CAACG,SAAS,CAACC,YAAU,CAAC;EAC5C,MAAM6E,YAAY,GAAG,IAAAC,yBAAe,EAAClF,GAAG,CAAC;EACzC,MAAMmF,SAAS,GAAG,IAAAC,sBAAY,EAACpF,GAAG,CAAC;EAEnC,OAAOA,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACoG,GAAG,CAACC,MAAM,EAAE;IACnCxF,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJ0D,WAAW,EAAE,oEAAoE;MACjF;MACApD,MAAM,EAAE2E,UAAU,CAACjD,KAAK,CAAC7B,IAAI,IAAI;QAC7B,MAAMG,MAA8B,GAAG;UACnCkF,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;YACDC,QAAQ,EAAE,CACL,GAAE1F,IAAI,CAAC2F,uBAAwB,EAAC,EAChC,GAAE3F,IAAI,CAAC2F,uBAAwB,IAAG;YACnC;YACA,IAAI3F,IAAI,CAAC4F,6BAA6B,GAChC,CACK,GAAE5F,IAAI,CAAC4F,6BAA8B,EAAC,EACtC,GAAE5F,IAAI,CAAC4F,6BAA8B,IAAG,CAC5C,GACD,EAAE,CAAC;UAEjB,CAAC,EACD;YACIL,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;YACDC,QAAQ,EAAE,CACN7G,MAAM,CAACiE,WAAY,gBAAe9C,IAAI,CAAC6F,mBAAoB,EAAC,EAC5DhH,MAAM,CAACiE,WAAY,gBAAe9C,IAAI,CAAC6F,mBAAoB,IAAG;UAEtE,CAAC,EACD;YACIN,GAAG,EAAE,qBAAqB;YAC1BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;YACjCC,QAAQ,EAAE7G,MAAM,CAACiE,WAAY,kBAAiBmC,SAAU,IAAGF,YAAa;UAC5E,CAAC,EACD;YACIQ,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,eAAe;YACvBC,QAAQ,EAAG,GAAE1F,IAAI,CAAC8F,kBAAmB;UACzC,CAAC,EACD;YACIP,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,kBAAkB;YAC1BC,QAAQ,EAAE1F,IAAI,CAAC+F;UACnB,CAAC,EACD;YACIR,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAE7G,MAAM,CAACiE,WAAY,uBAAsBiC,YAAa;UACpE,CAAC;UACD;UACA,IAAI/E,IAAI,CAACgG,sBAAsB,GACzB,CACI;YACIT,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAgB;YACxBC,MAAM,EAAE,MAAM;YACdC,QAAQ,EAAE,CACL,GAAE1F,IAAI,CAACgG,sBAAuB,EAAC,EAC/B,GAAEhG,IAAI,CAACgG,sBAAuB,IAAG;UAE1C,CAAC,CACJ,GACD,EAAE,CAAC;QAEjB,CAAC;QAED,OAAO7F,MAAM;MACjB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"names":["_path","_interopRequireDefault","require","pulumi","_interopRequireWildcard","aws","_kebabCase","_pulumi2","_lambdaUtils","_","_awsUtils","_constants","EMPTY_TRASH_BIN_EVENT_RULE_NAME","EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME","EMPTY_TRASH_BIN_EVENT_RULE_TARGET","ApiGraphql","exports","createAppModule","name","config","app","params","core","getModule","CoreOutput","policy","createGraphqlLambdaPolicy","role","createLambdaRole","output","graphql","addResource","lambda","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","path","join","paths","workspace","environment","variables","getCommonLambdaEnvVariables","apply","value","env","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","VpcConfig","functionVpcConfig","dynamodb","TableItem","tableName","primaryDynamodbTableName","hashKey","primaryDynamodbTableHashKey","rangeKey","primaryDynamodbTableRangeKey","key","item","interpolate","run","variant","apwSchedulerEventRule","apwSchedulerEventTarget","targetId","eventRule","cloudwatch","EventRule","description","scheduleExpression","Permission","action","function","principal","statementId","EventTarget","rule","input","JSON","stringify","source","functions","addRoute","routeParams","apiGateway","resources","console","log","kebabName","toKebabCase","method","coreOutput","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","iam","Policy","Version","Statement","Sid","Effect","Action","Resource","primaryDynamodbTableArn","elasticsearchDynamodbTableArn","fileManagerBucketId","cognitoUserPoolArn","eventBusArn","elasticsearchDomainArn"],"sources":["ApiGraphql.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport toKebabCase from \"lodash/kebabCase\";\n\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils\";\nimport { CoreOutput, VpcConfig } from \"~/apps\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\n\ninterface GraphqlParams {\n    env: Record<string, any>;\n    apwSchedulerEventRule: pulumi.Output<aws.cloudwatch.EventRule>;\n    apwSchedulerEventTarget: pulumi.Output<aws.cloudwatch.EventTarget>;\n}\n\nexport interface AddRouteParams {\n    /**\n     * Must be in kebab case (a-z and -)\n     */\n    name: string;\n    path: `/${string}`;\n    method: \"DELETE\" | \"GET\" | \"HEAD\" | \"PATCH\" | \"POST\" | \"PUT\" | \"OPTIONS\" | \"ANY\";\n}\n\nconst EMPTY_TRASH_BIN_EVENT_RULE_NAME = `empty-trash-bin-event-rule`;\nconst EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME = `empty-trash-bin-event-target-permission`;\nconst EMPTY_TRASH_BIN_EVENT_RULE_TARGET = `empty-trash-bin-event-rule-target`;\n\nexport type ApiGraphql = PulumiAppModule<typeof ApiGraphql>;\n\nexport const ApiGraphql = createAppModule({\n    name: \"ApiGraphql\",\n    config(app: PulumiApp, params: GraphqlParams) {\n        const core = app.getModule(CoreOutput);\n\n        const policy = createGraphqlLambdaPolicy(app);\n        const role = createLambdaRole(app, {\n            name: \"api-lambda-role\",\n            policy: policy.output\n        });\n        policy.config.policy;\n\n        const graphql = app.addResource(aws.lambda.Function, {\n            name: \"graphql\",\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 30,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"graphql/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        ...params.env,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig\n            }\n        });\n        /**\n         * Store meta information like \"mainGraphqlFunctionArn\" in APW settings at deploy time.\n         *\n         * Note: We can't pass \"mainGraphqlFunctionArn\" as env variable due to circular dependency between\n         * \"graphql\" lambda and \"api-apw-scheduler-execute-action\" lambda.\n         */\n        app.addResource(aws.dynamodb.TableItem, {\n            name: \"apwSettings\",\n            config: {\n                tableName: core.primaryDynamodbTableName,\n                hashKey: core.primaryDynamodbTableHashKey,\n                rangeKey: pulumi\n                    .output(core.primaryDynamodbTableRangeKey)\n                    .apply(key => key || \"SK\"),\n                item: pulumi.interpolate`{\n              \"PK\": {\"S\": \"APW#SETTINGS\"},\n              \"SK\": {\"S\": \"${app.params.run.variant || \"default\"}\"},\n              \"mainGraphqlFunctionArn\": {\"S\": \"${graphql.output.arn}\"},\n              \"eventRuleName\": {\"S\": \"${params.apwSchedulerEventRule.name}\"},\n              \"eventTargetId\": {\"S\": \"${params.apwSchedulerEventTarget.targetId}\"}\n            }`\n            }\n        });\n\n        // Create event rule.\n        const eventRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_NAME,\n            config: {\n                description: \"Enable us to empty the trash-bin ever day\",\n                scheduleExpression: \"cron(0 3 * * ? *)\"\n            }\n        });\n\n        // Add required permission to the target lambda.\n        app.addResource(aws.lambda.Permission, {\n            name: EMPTY_TRASH_BIN_EVENT_PERMISSION_NAME,\n            config: {\n                action: \"lambda:InvokeFunction\",\n                function: graphql.output.arn,\n                principal: \"events.amazonaws.com\",\n                statementId: \"allow-rule-invoke-\" + EMPTY_TRASH_BIN_EVENT_RULE_NAME\n            }\n        });\n\n        // Target the main graphql lambda.\n        app.addResource(aws.cloudwatch.EventTarget, {\n            name: EMPTY_TRASH_BIN_EVENT_RULE_TARGET,\n            config: {\n                rule: eventRule.output.name,\n                arn: graphql.output.arn,\n                input: JSON.stringify({\n                    source: \"webiny.events\",\n                    \"detail-type\": \"WebinyEmptyTrashBin\"\n                })\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                graphql\n            },\n            addRoute: (routeParams: AddRouteParams) => {\n                const apiGateway: any = app.resources.apiGateway;\n                if (!apiGateway) {\n                    console.log(\n                        \"Could not add route because there is no apiGateway in the resources.\"\n                    );\n                    return;\n                }\n                const kebabName = toKebabCase(routeParams.name);\n                if (kebabName !== routeParams.name) {\n                    console.log(`Route name is not allowed: \"${routeParams.name}\".`);\n                    return;\n                }\n                return apiGateway.addRoute(routeParams.name, {\n                    path: routeParams.path,\n                    method: routeParams.method,\n                    function: graphql.output.arn\n                });\n            }\n        };\n    }\n});\n\nfunction createGraphqlLambdaPolicy(app: PulumiApp) {\n    const coreOutput = app.getModule(CoreOutput);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"ApiGraphqlLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3, Lambda and Cognito IDP\",\n            // Core is pulumi.Output, so we need to run apply() to resolve policy based on it\n            policy: coreOutput.apply(core => {\n                const policy: aws.iam.PolicyDocument = {\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"dynamodb:BatchGetItem\",\n                                \"dynamodb:BatchWriteItem\",\n                                \"dynamodb:ConditionCheckItem\",\n                                \"dynamodb:CreateBackup\",\n                                \"dynamodb:CreateTable\",\n                                \"dynamodb:CreateTableReplica\",\n                                \"dynamodb:DeleteBackup\",\n                                \"dynamodb:DeleteItem\",\n                                \"dynamodb:DeleteTable\",\n                                \"dynamodb:DeleteTableReplica\",\n                                \"dynamodb:DescribeBackup\",\n                                \"dynamodb:DescribeContinuousBackups\",\n                                \"dynamodb:DescribeContributorInsights\",\n                                \"dynamodb:DescribeExport\",\n                                \"dynamodb:DescribeKinesisStreamingDestination\",\n                                \"dynamodb:DescribeLimits\",\n                                \"dynamodb:DescribeReservedCapacity\",\n                                \"dynamodb:DescribeReservedCapacityOfferings\",\n                                \"dynamodb:DescribeStream\",\n                                \"dynamodb:DescribeTable\",\n                                \"dynamodb:DescribeTableReplicaAutoScaling\",\n                                \"dynamodb:DescribeTimeToLive\",\n                                \"dynamodb:DisableKinesisStreamingDestination\",\n                                \"dynamodb:EnableKinesisStreamingDestination\",\n                                \"dynamodb:ExportTableToPointInTime\",\n                                \"dynamodb:GetItem\",\n                                \"dynamodb:GetRecords\",\n                                \"dynamodb:GetShardIterator\",\n                                \"dynamodb:ListBackups\",\n                                \"dynamodb:ListContributorInsights\",\n                                \"dynamodb:ListExports\",\n                                \"dynamodb:ListStreams\",\n                                \"dynamodb:ListTables\",\n                                \"dynamodb:ListTagsOfResource\",\n                                \"dynamodb:PartiQLDelete\",\n                                \"dynamodb:PartiQLInsert\",\n                                \"dynamodb:PartiQLSelect\",\n                                \"dynamodb:PartiQLUpdate\",\n                                \"dynamodb:PurchaseReservedCapacityOfferings\",\n                                \"dynamodb:PutItem\",\n                                \"dynamodb:Query\",\n                                \"dynamodb:RestoreTableFromBackup\",\n                                \"dynamodb:RestoreTableToPointInTime\",\n                                \"dynamodb:Scan\",\n                                \"dynamodb:UpdateContinuousBackups\",\n                                \"dynamodb:UpdateContributorInsights\",\n                                \"dynamodb:UpdateItem\",\n                                \"dynamodb:UpdateTable\",\n                                \"dynamodb:UpdateTableReplicaAutoScaling\",\n                                \"dynamodb:UpdateTimeToLive\"\n                            ],\n                            Resource: [\n                                `${core.primaryDynamodbTableArn}`,\n                                `${core.primaryDynamodbTableArn}/*`,\n                                // Attach permissions for elastic search dynamo as well (if ES is enabled).\n                                ...(core.elasticsearchDynamodbTableArn\n                                    ? [\n                                          `${core.elasticsearchDynamodbTableArn}`,\n                                          `${core.elasticsearchDynamodbTableArn}/*`\n                                      ]\n                                    : [])\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForS3\",\n                            Effect: \"Allow\",\n                            Action: [\n                                \"s3:ListBucket\",\n                                \"s3:GetObjectAcl\",\n                                \"s3:DeleteObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:PutObject\",\n                                \"s3:GetObject\"\n                            ],\n                            Resource: [\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}`,\n                                pulumi.interpolate`arn:aws:s3:::${core.fileManagerBucketId}/*`\n                            ]\n                        },\n                        {\n                            Sid: \"PermissionForLambda\",\n                            Effect: \"Allow\",\n                            Action: [\"lambda:InvokeFunction\"],\n                            Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n                        },\n                        {\n                            Sid: \"PermissionForCognitoIdp\",\n                            Effect: \"Allow\",\n                            Action: \"cognito-idp:*\",\n                            Resource: `${core.cognitoUserPoolArn}`\n                        },\n                        {\n                            Sid: \"PermissionForEventBus\",\n                            Effect: \"Allow\",\n                            Action: \"events:PutEvents\",\n                            Resource: core.eventBusArn\n                        },\n                        {\n                            Sid: \"PermissionForCloudfront\",\n                            Effect: \"Allow\",\n                            Action: \"cloudfront:CreateInvalidation\",\n                            Resource: pulumi.interpolate`arn:aws:cloudfront::${awsAccountId}:distribution/*`\n                        },\n                        // Attach permissions for elastic search domain as well (if ES is enabled).\n                        ...(core.elasticsearchDomainArn\n                            ? [\n                                  {\n                                      Sid: \"PermissionForES\",\n                                      Effect: \"Allow\" as const,\n                                      Action: \"es:*\",\n                                      Resource: [\n                                          `${core.elasticsearchDomainArn}`,\n                                          `${core.elasticsearchDomainArn}/*`\n                                      ]\n                                  }\n                              ]\n                            : [])\n                    ]\n                };\n\n                return policy;\n            })\n        }\n    });\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AACA,IAAAI,UAAA,GAAAL,sBAAA,CAAAC,OAAA;AAEA,IAAAK,QAAA,GAAAL,OAAA;AACA,IAAAM,YAAA,GAAAN,OAAA;AACA,IAAAO,CAAA,GAAAP,OAAA;AACA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,UAAA,GAAAT,OAAA;AAiBA,MAAMU,+BAA+B,GAAI,4BAA2B;AACpE,MAAMC,qCAAqC,GAAI,yCAAwC;AACvF,MAAMC,iCAAiC,GAAI,mCAAkC;AAItE,MAAMC,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG,IAAAE,wBAAe,EAAC;EACtCC,IAAI,EAAE,YAAY;EAClBC,MAAMA,CAACC,GAAc,EAAEC,MAAqB,EAAE;IAC1C,MAAMC,IAAI,GAAGF,GAAG,CAACG,SAAS,CAACC,YAAU,CAAC;IAEtC,MAAMC,MAAM,GAAGC,yBAAyB,CAACN,GAAG,CAAC;IAC7C,MAAMO,IAAI,GAAG,IAAAC,6BAAgB,EAACR,GAAG,EAAE;MAC/BF,IAAI,EAAE,iBAAiB;MACvBO,MAAM,EAAEA,MAAM,CAACI;IACnB,CAAC,CAAC;IACFJ,MAAM,CAACN,MAAM,CAACM,MAAM;IAEpB,MAAMK,OAAO,GAAGV,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAAC2B,MAAM,CAACC,QAAQ,EAAE;MACjDf,IAAI,EAAE,SAAS;MACfC,MAAM,EAAE;QACJe,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1BT,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,EAAE;QACXC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAIrC,MAAM,CAACsC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAIvC,MAAM,CAACsC,KAAK,CAACE,WAAW,CAC7BC,aAAI,CAACC,IAAI,CAACzB,GAAG,CAAC0B,KAAK,CAACC,SAAS,EAAE,eAAe,CAClD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAE,IAAAC,wCAA2B,EAAC,CAAC,CAACC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACR,GAAG/B,MAAM,CAACgC,GAAG;YACbC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAEnC,GAAG,CAACG,SAAS,CAACiC,WAAS,CAAC,CAACC;MACxC;IACJ,CAAC,CAAC;IACF;AACR;AACA;AACA;AACA;AACA;IACQrC,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACqD,QAAQ,CAACC,SAAS,EAAE;MACpCzC,IAAI,EAAE,aAAa;MACnBC,MAAM,EAAE;QACJyC,SAAS,EAAEtC,IAAI,CAACuC,wBAAwB;QACxCC,OAAO,EAAExC,IAAI,CAACyC,2BAA2B;QACzCC,QAAQ,EAAE7D,MAAM,CACX0B,MAAM,CAACP,IAAI,CAAC2C,4BAA4B,CAAC,CACzCd,KAAK,CAACe,GAAG,IAAIA,GAAG,IAAI,IAAI,CAAC;QAC9BC,IAAI,EAAEhE,MAAM,CAACiE,WAAY;AACzC;AACA,6BAA6BhD,GAAG,CAACC,MAAM,CAACgD,GAAG,CAACC,OAAO,IAAI,SAAU;AACjE,iDAAiDxC,OAAO,CAACD,MAAM,CAACQ,GAAI;AACpE,wCAAwChB,MAAM,CAACkD,qBAAqB,CAACrD,IAAK;AAC1E,wCAAwCG,MAAM,CAACmD,uBAAuB,CAACC,QAAS;AAChF;MACY;IACJ,CAAC,CAAC;;IAEF;IACA,MAAMC,SAAS,GAAGtD,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACsE,UAAU,CAACC,SAAS,EAAE;MACxD1D,IAAI,EAAEN,+BAA+B;MACrCO,MAAM,EAAE;QACJ0D,WAAW,EAAE,2CAA2C;QACxDC,kBAAkB,EAAE;MACxB;IACJ,CAAC,CAAC;;IAEF;IACA1D,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAAC2B,MAAM,CAAC+C,UAAU,EAAE;MACnC7D,IAAI,EAAEL,qCAAqC;MAC3CM,MAAM,EAAE;QACJ6D,MAAM,EAAE,uBAAuB;QAC/BC,QAAQ,EAAEnD,OAAO,CAACD,MAAM,CAACQ,GAAG;QAC5B6C,SAAS,EAAE,sBAAsB;QACjCC,WAAW,EAAE,oBAAoB,GAAGvE;MACxC;IACJ,CAAC,CAAC;;IAEF;IACAQ,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACsE,UAAU,CAACS,WAAW,EAAE;MACxClE,IAAI,EAAEJ,iCAAiC;MACvCK,MAAM,EAAE;QACJkE,IAAI,EAAEX,SAAS,CAAC7C,MAAM,CAACX,IAAI;QAC3BmB,GAAG,EAAEP,OAAO,CAACD,MAAM,CAACQ,GAAG;QACvBiD,KAAK,EAAEC,IAAI,CAACC,SAAS,CAAC;UAClBC,MAAM,EAAE,eAAe;UACvB,aAAa,EAAE;QACnB,CAAC;MACL;IACJ,CAAC,CAAC;IAEF,OAAO;MACH9D,IAAI;MACJF,MAAM;MACNiE,SAAS,EAAE;QACP5D;MACJ,CAAC;MACD6D,QAAQ,EAAGC,WAA2B,IAAK;QACvC,MAAMC,UAAe,GAAGzE,GAAG,CAAC0E,SAAS,CAACD,UAAU;QAChD,IAAI,CAACA,UAAU,EAAE;UACbE,OAAO,CAACC,GAAG,CACP,sEACJ,CAAC;UACD;QACJ;QACA,MAAMC,SAAS,GAAG,IAAAC,kBAAW,EAACN,WAAW,CAAC1E,IAAI,CAAC;QAC/C,IAAI+E,SAAS,KAAKL,WAAW,CAAC1E,IAAI,EAAE;UAChC6E,OAAO,CAACC,GAAG,CAAE,+BAA8BJ,WAAW,CAAC1E,IAAK,IAAG,CAAC;UAChE;QACJ;QACA,OAAO2E,UAAU,CAACF,QAAQ,CAACC,WAAW,CAAC1E,IAAI,EAAE;UACzC0B,IAAI,EAAEgD,WAAW,CAAChD,IAAI;UACtBuD,MAAM,EAAEP,WAAW,CAACO,MAAM;UAC1BlB,QAAQ,EAAEnD,OAAO,CAACD,MAAM,CAACQ;QAC7B,CAAC,CAAC;MACN;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAEF,SAASX,yBAAyBA,CAACN,GAAc,EAAE;EAC/C,MAAMgF,UAAU,GAAGhF,GAAG,CAACG,SAAS,CAACC,YAAU,CAAC;EAC5C,MAAM6E,YAAY,GAAG,IAAAC,yBAAe,EAAClF,GAAG,CAAC;EACzC,MAAMmF,SAAS,GAAG,IAAAC,sBAAY,EAACpF,GAAG,CAAC;EAEnC,OAAOA,GAAG,CAACW,WAAW,CAAC1B,GAAG,CAACoG,GAAG,CAACC,MAAM,EAAE;IACnCxF,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJ0D,WAAW,EAAE,oEAAoE;MACjF;MACApD,MAAM,EAAE2E,UAAU,CAACjD,KAAK,CAAC7B,IAAI,IAAI;QAC7B,MAAMG,MAA8B,GAAG;UACnCkF,OAAO,EAAE,YAAY;UACrBC,SAAS,EAAE,CACP;YACIC,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;YACDC,QAAQ,EAAE,CACL,GAAE1F,IAAI,CAAC2F,uBAAwB,EAAC,EAChC,GAAE3F,IAAI,CAAC2F,uBAAwB,IAAG;YACnC;YACA,IAAI3F,IAAI,CAAC4F,6BAA6B,GAChC,CACK,GAAE5F,IAAI,CAAC4F,6BAA8B,EAAC,EACtC,GAAE5F,IAAI,CAAC4F,6BAA8B,IAAG,CAC5C,GACD,EAAE,CAAC;UAEjB,CAAC,EACD;YACIL,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;YACDC,QAAQ,EAAE,CACN7G,MAAM,CAACiE,WAAY,gBAAe9C,IAAI,CAAC6F,mBAAoB,EAAC,EAC5DhH,MAAM,CAACiE,WAAY,gBAAe9C,IAAI,CAAC6F,mBAAoB,IAAG;UAEtE,CAAC,EACD;YACIN,GAAG,EAAE,qBAAqB;YAC1BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;YACjCC,QAAQ,EAAE7G,MAAM,CAACiE,WAAY,kBAAiBmC,SAAU,IAAGF,YAAa;UAC5E,CAAC,EACD;YACIQ,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,eAAe;YACvBC,QAAQ,EAAG,GAAE1F,IAAI,CAAC8F,kBAAmB;UACzC,CAAC,EACD;YACIP,GAAG,EAAE,uBAAuB;YAC5BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,kBAAkB;YAC1BC,QAAQ,EAAE1F,IAAI,CAAC+F;UACnB,CAAC,EACD;YACIR,GAAG,EAAE,yBAAyB;YAC9BC,MAAM,EAAE,OAAO;YACfC,MAAM,EAAE,+BAA+B;YACvCC,QAAQ,EAAE7G,MAAM,CAACiE,WAAY,uBAAsBiC,YAAa;UACpE,CAAC;UACD;UACA,IAAI/E,IAAI,CAACgG,sBAAsB,GACzB,CACI;YACIT,GAAG,EAAE,iBAAiB;YACtBC,MAAM,EAAE,OAAgB;YACxBC,MAAM,EAAE,MAAM;YACdC,QAAQ,EAAE,CACL,GAAE1F,IAAI,CAACgG,sBAAuB,EAAC,EAC/B,GAAEhG,IAAI,CAACgG,sBAAuB,IAAG;UAE1C,CAAC,CACJ,GACD,EAAE,CAAC;QAEjB,CAAC;QAED,OAAO7F,MAAM;MACjB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/apps/api/ApiMigration.d.ts

@@ -1,5 +1,5 @@
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiMigration = PulumiAppModule<typeof ApiMigration>;
+export type ApiMigration = PulumiAppModule<typeof ApiMigration>;
 export declare const ApiMigration: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     function: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
 }, void>;

package/apps/api/ApiOutput.d.ts

@@ -1,5 +1,5 @@
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiOutput = PulumiAppModule<typeof ApiOutput>;
+export type ApiOutput = PulumiAppModule<typeof ApiOutput>;
 export declare const ApiOutput: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<{
     apiDomain: string;
     apiUrl: string;

package/apps/api/ApiPageBuilder.d.ts

@@ -2,7 +2,7 @@ import { PulumiAppModule } from "@webiny/pulumi";
 interface PageBuilderParams {
     env: Record<string, any>;
 }
-export declare type ApiPageBuilder = PulumiAppModule<typeof ApiPageBuilder>;
+export type ApiPageBuilder = PulumiAppModule<typeof ApiPageBuilder>;
 export declare const ApiPageBuilder: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     export: {
         role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;

package/apps/api/ApiWebsocket.d.ts

@@ -1,6 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 import { PulumiAppModule } from "@webiny/pulumi";
-export declare type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;
+export type ApiWebsocket = PulumiAppModule<typeof ApiWebsocket>;
 export declare const ApiWebsocket: import("@webiny/pulumi").PulumiAppModuleDefinition<{
     websocketApi: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/api").Api>;
     websocketApiStage: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/apigatewayv2/stage").Stage>;

package/apps/api/backgroundTask/definition.js

@@ -76,6 +76,10 @@ const createBackgroundTaskDefinition = params => {
          * It can be used to handle waiting for child tasks or some resource to be created.
          */
         {
+          Variable: "$",
+          IsNull: true,
+          Next: "UnknownError"
+        }, {
           And: [{
             Variable: "$.status",
             StringEquals: "continue"

package/apps/api/backgroundTask/definition.js.map

@@ -1 +1 @@
-{"version":3,"names":["_types","require","createBackgroundTaskDefinition","params","lambdaName","lambdaArn","Comment","StartAt","States","TransformEvent","Type","StepFunctionDefinitionStatesType","Pass","Next","Parameters","Run","Task","Resource","ResultPath","InputPath","name","payload","endpoint","Catch","ErrorEquals","CheckStatus","Choice","Choices","And","Variable","StringEquals","IsPresent","IsNumeric","NumericGreaterThan","Default","Waiter","Wait","SecondsPath","UnknownError","Fail","Cause","UnknownStatus","Error","CausePath","ErrorPath","Done","Succeed","Aborted","exports"],"sources":["definition.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { StepFunctionDefinition, StepFunctionDefinitionStatesType } from \"./types\";\n\nexport interface BackgroundTaskParams {\n    lambdaName: string;\n    lambdaArn: pulumi.Input<string>;\n}\n\nexport const createBackgroundTaskDefinition = (\n    params: BackgroundTaskParams\n): StepFunctionDefinition => {\n    const { lambdaName, lambdaArn } = params;\n    return {\n        Comment: \"Background tasks\",\n        StartAt: \"TransformEvent\",\n        States: {\n            /**\n             * Transform the EventBridge event to a format that will be used in the Lambda.\n             */\n            TransformEvent: {\n                Type: StepFunctionDefinitionStatesType.Pass,\n                Next: \"Run\",\n                Parameters: {\n                    \"webinyTaskId.$\": \"$.detail.webinyTaskId\",\n                    \"webinyTaskDefinitionId.$\": \"$.detail.webinyTaskDefinitionId\",\n                    \"tenant.$\": \"$.detail.tenant\",\n                    \"locale.$\": \"$.detail.locale\",\n                    \"delay.$\": \"$.detail.delay\"\n                }\n            },\n            /**\n             * Run the task and wait for the response from lambda.\n             * On some fatal error go to Error step.\n             * In other cases, check the status of the task.\n             */\n            Run: {\n                Type: StepFunctionDefinitionStatesType.Task,\n                Resource: lambdaArn,\n                Next: \"CheckStatus\",\n                ResultPath: \"$\",\n                InputPath: \"$\",\n                /**\n                 * Parameters will be received as an event in the Lambda.\n                 * Task Handler determines that it can run a task based on the Payload.webinyTaskId parameter - it must be set!\n                 */\n                Parameters: {\n                    name: lambdaName,\n                    payload: {\n                        \"webinyTaskId.$\": \"$.webinyTaskId\",\n                        \"webinyTaskDefinitionId.$\": \"$.webinyTaskDefinitionId\",\n                        \"locale.$\": \"$.locale\",\n                        \"tenant.$\": \"$.tenant\",\n                        \"delay.$\": \"$.delay\",\n                        endpoint: \"manage\",\n                        \"executionName.$\": \"$$.Execution.Name\",\n                        \"stateMachineId.$\": \"$$.StateMachine.Id\"\n                    }\n                },\n                Catch: [\n                    {\n                        ErrorEquals: [\"States.ALL\"],\n                        Next: \"UnknownError\"\n                    }\n                ]\n            },\n            /**\n             * On CONTINUE, go back to Run.\n             * On ERROR, go to Error step.\n             * On DONE, go to Done step.\n             */\n            CheckStatus: {\n                Type: StepFunctionDefinitionStatesType.Choice,\n                InputPath: \"$\",\n                Choices: [\n                    /**\n                     * There is a possibility that the task will return a CONTINUE status and a waitUntil value.\n                     * This means that task will wait for the specified time and then continue.\n                     * It can be used to handle waiting for child tasks or some resource to be created.\n                     */\n                    {\n                        And: [\n                            {\n                                Variable: \"$.status\",\n                                StringEquals: \"continue\"\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsPresent: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsNumeric: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                NumericGreaterThan: 0\n                            }\n                        ],\n                        Next: \"Waiter\"\n                    },\n                    /**\n                     * When no wait value is present, go to Run.\n                     */\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"continue\",\n                        Next: \"Run\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"error\",\n                        Next: \"Error\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"done\",\n                        Next: \"Done\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"aborted\",\n                        Next: \"Aborted\"\n                    }\n                ],\n                Default: \"UnknownStatus\"\n            },\n            Waiter: {\n                Type: StepFunctionDefinitionStatesType.Wait,\n                SecondsPath: \"$.wait\",\n                Next: \"Run\"\n            },\n            UnknownError: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown task error.\"\n            },\n            /**\n             * Unknown task status on Choice step.\n             */\n            UnknownStatus: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown status.\"\n            },\n            /**\n             * Fail the task and output the error.\n             */\n            Error: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                CausePath: \"States.JsonToString($.error)\",\n                ErrorPath: \"$.error.message\"\n            },\n            /**\n             * Complete the task.\n             */\n            Done: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            },\n            Aborted: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            }\n        }\n    };\n};\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AAOO,MAAMC,8BAA8B,GACvCC,MAA4B,IACH;EACzB,MAAM;IAAEC,UAAU;IAAEC;EAAU,CAAC,GAAGF,MAAM;EACxC,OAAO;IACHG,OAAO,EAAE,kBAAkB;IAC3BC,OAAO,EAAE,gBAAgB;IACzBC,MAAM,EAAE;MACJ;AACZ;AACA;MACYC,cAAc,EAAE;QACZC,IAAI,EAAEC,uCAAgC,CAACC,IAAI;QAC3CC,IAAI,EAAE,KAAK;QACXC,UAAU,EAAE;UACR,gBAAgB,EAAE,uBAAuB;UACzC,0BAA0B,EAAE,iCAAiC;UAC7D,UAAU,EAAE,iBAAiB;UAC7B,UAAU,EAAE,iBAAiB;UAC7B,SAAS,EAAE;QACf;MACJ,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYC,GAAG,EAAE;QACDL,IAAI,EAAEC,uCAAgC,CAACK,IAAI;QAC3CC,QAAQ,EAAEZ,SAAS;QACnBQ,IAAI,EAAE,aAAa;QACnBK,UAAU,EAAE,GAAG;QACfC,SAAS,EAAE,GAAG;QACd;AAChB;AACA;AACA;QACgBL,UAAU,EAAE;UACRM,IAAI,EAAEhB,UAAU;UAChBiB,OAAO,EAAE;YACL,gBAAgB,EAAE,gBAAgB;YAClC,0BAA0B,EAAE,0BAA0B;YACtD,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,SAAS;YACpBC,QAAQ,EAAE,QAAQ;YAClB,iBAAiB,EAAE,mBAAmB;YACtC,kBAAkB,EAAE;UACxB;QACJ,CAAC;QACDC,KAAK,EAAE,CACH;UACIC,WAAW,EAAE,CAAC,YAAY,CAAC;UAC3BX,IAAI,EAAE;QACV,CAAC;MAET,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYY,WAAW,EAAE;QACTf,IAAI,EAAEC,uCAAgC,CAACe,MAAM;QAC7CP,SAAS,EAAE,GAAG;QACdQ,OAAO,EAAE;QACL;AACpB;AACA;AACA;AACA;QACoB;UACIC,GAAG,EAAE,CACD;YACIC,QAAQ,EAAE,UAAU;YACpBC,YAAY,EAAE;UAClB,CAAC,EACD;YACID,QAAQ,EAAE,QAAQ;YAClBE,SAAS,EAAE;UACf,CAAC,EACD;YACIF,QAAQ,EAAE,QAAQ;YAClBG,SAAS,EAAE;UACf,CAAC,EACD;YACIH,QAAQ,EAAE,QAAQ;YAClBI,kBAAkB,EAAE;UACxB,CAAC,CACJ;UACDpB,IAAI,EAAE;QACV,CAAC;QACD;AACpB;AACA;QACoB;UACIgB,QAAQ,EAAE,UAAU;UACpBC,YAAY,EAAE,UAAU;UACxBjB,IAAI,EAAE;QACV,CAAC,EACD;UACIgB,QAAQ,EAAE,UAAU;UACpBC,YAAY,EAAE,OAAO;UACrBjB,IAAI,EAAE;QACV,CAAC,EACD;UACIgB,QAAQ,EAAE,UAAU;UACpBC,YAAY,EAAE,MAAM;UACpBjB,IAAI,EAAE;QACV,CAAC,EACD;UACIgB,QAAQ,EAAE,UAAU;UACpBC,YAAY,EAAE,SAAS;UACvBjB,IAAI,EAAE;QACV,CAAC,CACJ;QACDqB,OAAO,EAAE;MACb,CAAC;MACDC,MAAM,EAAE;QACJzB,IAAI,EAAEC,uCAAgC,CAACyB,IAAI;QAC3CC,WAAW,EAAE,QAAQ;QACrBxB,IAAI,EAAE;MACV,CAAC;MACDyB,YAAY,EAAE;QACV5B,IAAI,EAAEC,uCAAgC,CAAC4B,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYC,aAAa,EAAE;QACX/B,IAAI,EAAEC,uCAAgC,CAAC4B,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYE,KAAK,EAAE;QACHhC,IAAI,EAAEC,uCAAgC,CAAC4B,IAAI;QAC3CI,SAAS,EAAE,8BAA8B;QACzCC,SAAS,EAAE;MACf,CAAC;MACD;AACZ;AACA;MACYC,IAAI,EAAE;QACFnC,IAAI,EAAEC,uCAAgC,CAACmC;MAC3C,CAAC;MACDC,OAAO,EAAE;QACLrC,IAAI,EAAEC,uCAAgC,CAACmC;MAC3C;IACJ;EACJ,CAAC;AACL,CAAC;AAACE,OAAA,CAAA9C,8BAAA,GAAAA,8BAAA","ignoreList":[]}
+{"version":3,"names":["_types","require","createBackgroundTaskDefinition","params","lambdaName","lambdaArn","Comment","StartAt","States","TransformEvent","Type","StepFunctionDefinitionStatesType","Pass","Next","Parameters","Run","Task","Resource","ResultPath","InputPath","name","payload","endpoint","Catch","ErrorEquals","CheckStatus","Choice","Choices","Variable","IsNull","And","StringEquals","IsPresent","IsNumeric","NumericGreaterThan","Default","Waiter","Wait","SecondsPath","UnknownError","Fail","Cause","UnknownStatus","Error","CausePath","ErrorPath","Done","Succeed","Aborted","exports"],"sources":["definition.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport { StepFunctionDefinition, StepFunctionDefinitionStatesType } from \"./types\";\n\nexport interface BackgroundTaskParams {\n    lambdaName: string;\n    lambdaArn: pulumi.Input<string>;\n}\n\nexport const createBackgroundTaskDefinition = (\n    params: BackgroundTaskParams\n): StepFunctionDefinition => {\n    const { lambdaName, lambdaArn } = params;\n    return {\n        Comment: \"Background tasks\",\n        StartAt: \"TransformEvent\",\n        States: {\n            /**\n             * Transform the EventBridge event to a format that will be used in the Lambda.\n             */\n            TransformEvent: {\n                Type: StepFunctionDefinitionStatesType.Pass,\n                Next: \"Run\",\n                Parameters: {\n                    \"webinyTaskId.$\": \"$.detail.webinyTaskId\",\n                    \"webinyTaskDefinitionId.$\": \"$.detail.webinyTaskDefinitionId\",\n                    \"tenant.$\": \"$.detail.tenant\",\n                    \"locale.$\": \"$.detail.locale\",\n                    \"delay.$\": \"$.detail.delay\"\n                }\n            },\n            /**\n             * Run the task and wait for the response from lambda.\n             * On some fatal error go to Error step.\n             * In other cases, check the status of the task.\n             */\n            Run: {\n                Type: StepFunctionDefinitionStatesType.Task,\n                Resource: lambdaArn,\n                Next: \"CheckStatus\",\n                ResultPath: \"$\",\n                InputPath: \"$\",\n                /**\n                 * Parameters will be received as an event in the Lambda.\n                 * Task Handler determines that it can run a task based on the Payload.webinyTaskId parameter - it must be set!\n                 */\n                Parameters: {\n                    name: lambdaName,\n                    payload: {\n                        \"webinyTaskId.$\": \"$.webinyTaskId\",\n                        \"webinyTaskDefinitionId.$\": \"$.webinyTaskDefinitionId\",\n                        \"locale.$\": \"$.locale\",\n                        \"tenant.$\": \"$.tenant\",\n                        \"delay.$\": \"$.delay\",\n                        endpoint: \"manage\",\n                        \"executionName.$\": \"$$.Execution.Name\",\n                        \"stateMachineId.$\": \"$$.StateMachine.Id\"\n                    }\n                },\n                Catch: [\n                    {\n                        ErrorEquals: [\"States.ALL\"],\n                        Next: \"UnknownError\"\n                    }\n                ]\n            },\n            /**\n             * On CONTINUE, go back to Run.\n             * On ERROR, go to Error step.\n             * On DONE, go to Done step.\n             */\n            CheckStatus: {\n                Type: StepFunctionDefinitionStatesType.Choice,\n                InputPath: \"$\",\n                Choices: [\n                    /**\n                     * There is a possibility that the task will return a CONTINUE status and a waitUntil value.\n                     * This means that task will wait for the specified time and then continue.\n                     * It can be used to handle waiting for child tasks or some resource to be created.\n                     */\n                    {\n                        Variable: \"$\",\n                        IsNull: true,\n                        Next: \"UnknownError\"\n                    },\n                    {\n                        And: [\n                            {\n                                Variable: \"$.status\",\n                                StringEquals: \"continue\"\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsPresent: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                IsNumeric: true\n                            },\n                            {\n                                Variable: \"$.wait\",\n                                NumericGreaterThan: 0\n                            }\n                        ],\n                        Next: \"Waiter\"\n                    },\n                    /**\n                     * When no wait value is present, go to Run.\n                     */\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"continue\",\n                        Next: \"Run\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"error\",\n                        Next: \"Error\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"done\",\n                        Next: \"Done\"\n                    },\n                    {\n                        Variable: \"$.status\",\n                        StringEquals: \"aborted\",\n                        Next: \"Aborted\"\n                    }\n                ],\n                Default: \"UnknownStatus\"\n            },\n            Waiter: {\n                Type: StepFunctionDefinitionStatesType.Wait,\n                SecondsPath: \"$.wait\",\n                Next: \"Run\"\n            },\n            UnknownError: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown task error.\"\n            },\n            /**\n             * Unknown task status on Choice step.\n             */\n            UnknownStatus: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                Cause: \"Fatal error - unknown status.\"\n            },\n            /**\n             * Fail the task and output the error.\n             */\n            Error: {\n                Type: StepFunctionDefinitionStatesType.Fail,\n                CausePath: \"States.JsonToString($.error)\",\n                ErrorPath: \"$.error.message\"\n            },\n            /**\n             * Complete the task.\n             */\n            Done: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            },\n            Aborted: {\n                Type: StepFunctionDefinitionStatesType.Succeed\n            }\n        }\n    };\n};\n"],"mappings":";;;;;;AACA,IAAAA,MAAA,GAAAC,OAAA;AAOO,MAAMC,8BAA8B,GACvCC,MAA4B,IACH;EACzB,MAAM;IAAEC,UAAU;IAAEC;EAAU,CAAC,GAAGF,MAAM;EACxC,OAAO;IACHG,OAAO,EAAE,kBAAkB;IAC3BC,OAAO,EAAE,gBAAgB;IACzBC,MAAM,EAAE;MACJ;AACZ;AACA;MACYC,cAAc,EAAE;QACZC,IAAI,EAAEC,uCAAgC,CAACC,IAAI;QAC3CC,IAAI,EAAE,KAAK;QACXC,UAAU,EAAE;UACR,gBAAgB,EAAE,uBAAuB;UACzC,0BAA0B,EAAE,iCAAiC;UAC7D,UAAU,EAAE,iBAAiB;UAC7B,UAAU,EAAE,iBAAiB;UAC7B,SAAS,EAAE;QACf;MACJ,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYC,GAAG,EAAE;QACDL,IAAI,EAAEC,uCAAgC,CAACK,IAAI;QAC3CC,QAAQ,EAAEZ,SAAS;QACnBQ,IAAI,EAAE,aAAa;QACnBK,UAAU,EAAE,GAAG;QACfC,SAAS,EAAE,GAAG;QACd;AAChB;AACA;AACA;QACgBL,UAAU,EAAE;UACRM,IAAI,EAAEhB,UAAU;UAChBiB,OAAO,EAAE;YACL,gBAAgB,EAAE,gBAAgB;YAClC,0BAA0B,EAAE,0BAA0B;YACtD,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,SAAS;YACpBC,QAAQ,EAAE,QAAQ;YAClB,iBAAiB,EAAE,mBAAmB;YACtC,kBAAkB,EAAE;UACxB;QACJ,CAAC;QACDC,KAAK,EAAE,CACH;UACIC,WAAW,EAAE,CAAC,YAAY,CAAC;UAC3BX,IAAI,EAAE;QACV,CAAC;MAET,CAAC;MACD;AACZ;AACA;AACA;AACA;MACYY,WAAW,EAAE;QACTf,IAAI,EAAEC,uCAAgC,CAACe,MAAM;QAC7CP,SAAS,EAAE,GAAG;QACdQ,OAAO,EAAE;QACL;AACpB;AACA;AACA;AACA;QACoB;UACIC,QAAQ,EAAE,GAAG;UACbC,MAAM,EAAE,IAAI;UACZhB,IAAI,EAAE;QACV,CAAC,EACD;UACIiB,GAAG,EAAE,CACD;YACIF,QAAQ,EAAE,UAAU;YACpBG,YAAY,EAAE;UAClB,CAAC,EACD;YACIH,QAAQ,EAAE,QAAQ;YAClBI,SAAS,EAAE;UACf,CAAC,EACD;YACIJ,QAAQ,EAAE,QAAQ;YAClBK,SAAS,EAAE;UACf,CAAC,EACD;YACIL,QAAQ,EAAE,QAAQ;YAClBM,kBAAkB,EAAE;UACxB,CAAC,CACJ;UACDrB,IAAI,EAAE;QACV,CAAC;QACD;AACpB;AACA;QACoB;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,UAAU;UACxBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,OAAO;UACrBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,MAAM;UACpBlB,IAAI,EAAE;QACV,CAAC,EACD;UACIe,QAAQ,EAAE,UAAU;UACpBG,YAAY,EAAE,SAAS;UACvBlB,IAAI,EAAE;QACV,CAAC,CACJ;QACDsB,OAAO,EAAE;MACb,CAAC;MACDC,MAAM,EAAE;QACJ1B,IAAI,EAAEC,uCAAgC,CAAC0B,IAAI;QAC3CC,WAAW,EAAE,QAAQ;QACrBzB,IAAI,EAAE;MACV,CAAC;MACD0B,YAAY,EAAE;QACV7B,IAAI,EAAEC,uCAAgC,CAAC6B,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYC,aAAa,EAAE;QACXhC,IAAI,EAAEC,uCAAgC,CAAC6B,IAAI;QAC3CC,KAAK,EAAE;MACX,CAAC;MACD;AACZ;AACA;MACYE,KAAK,EAAE;QACHjC,IAAI,EAAEC,uCAAgC,CAAC6B,IAAI;QAC3CI,SAAS,EAAE,8BAA8B;QACzCC,SAAS,EAAE;MACf,CAAC;MACD;AACZ;AACA;MACYC,IAAI,EAAE;QACFpC,IAAI,EAAEC,uCAAgC,CAACoC;MAC3C,CAAC;MACDC,OAAO,EAAE;QACLtC,IAAI,EAAEC,uCAAgC,CAACoC;MAC3C;IACJ;EACJ,CAAC;AACL,CAAC;AAACE,OAAA,CAAA/C,8BAAA,GAAAA,8BAAA","ignoreList":[]}

package/apps/api/backgroundTask/types.d.ts

@@ -21,6 +21,7 @@ export interface StepFunctionDefinitionStatesChoiceBase {
     StringEquals?: string;
     StringMatches?: string;
     IsPresent?: boolean;
+    IsNull?: boolean;
 }
 export interface StepFunctionDefinitionStatesChoiceAndItem {
     Variable: string;
@@ -35,7 +36,7 @@ export interface StepFunctionDefinitionStatesChoiceAnd {
     And: StepFunctionDefinitionStatesChoiceAndItem[];
     Next: string;
 }
-export declare type StepFunctionDefinitionStatesChoice = StepFunctionDefinitionStatesChoiceBase | StepFunctionDefinitionStatesChoiceAnd;
+export type StepFunctionDefinitionStatesChoice = StepFunctionDefinitionStatesChoiceBase | StepFunctionDefinitionStatesChoiceAnd;
 export interface StepFunctionDefinitionStatesTypeBase {
     Type: StepFunctionDefinitionStatesType;
     Comment?: string;
@@ -80,7 +81,7 @@ export interface StepFunctionDefinitionStatesTypeWait extends StepFunctionDefini
     SecondsPath?: string;
     TimestampPath?: string;
 }
-export declare type StepFunctionDefinitionStatesTypes = StepFunctionDefinitionStatesTypeTask | StepFunctionDefinitionStatesTypePass | StepFunctionDefinitionStatesTypeChoice | StepFunctionDefinitionStatesTypeFail | StepFunctionDefinitionStatesTypeSucceed | StepFunctionDefinitionStatesTypeWait;
+export type StepFunctionDefinitionStatesTypes = StepFunctionDefinitionStatesTypeTask | StepFunctionDefinitionStatesTypePass | StepFunctionDefinitionStatesTypeChoice | StepFunctionDefinitionStatesTypeFail | StepFunctionDefinitionStatesTypeSucceed | StepFunctionDefinitionStatesTypeWait;
 export interface StepFunctionDefinition {
     Comment: string;
     StartAt: string;

package/apps/api/backgroundTask/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["StepFunctionDefinitionStatesType","exports"],"sources":["types.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\n\n/**\n * Update types if required. Try to avoid generic objects\n */\nexport enum StepFunctionDefinitionStatesType {\n    Task = \"Task\",\n    Pass = \"Pass\",\n    Choice = \"Choice\",\n    Wait = \"Wait\",\n    Fail = \"Fail\",\n    Succeed = \"Succeed\"\n}\n\nexport interface StepFunctionDefinitionStatesCatch {\n    ErrorEquals: string[];\n    Next: string;\n    ResultPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesChoiceBase {\n    Variable: string;\n    Next: string;\n    StringEquals?: string;\n    StringMatches?: string;\n    IsPresent?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesChoiceAndItem {\n    Variable: string;\n    StringEquals?: string;\n    StringMatches?: string;\n    IsPresent?: boolean;\n    IsTimestamp?: boolean;\n    IsNumeric?: boolean;\n    NumericGreaterThan?: number;\n}\nexport interface StepFunctionDefinitionStatesChoiceAnd {\n    And: StepFunctionDefinitionStatesChoiceAndItem[];\n    Next: string;\n}\n\nexport type StepFunctionDefinitionStatesChoice =\n    | StepFunctionDefinitionStatesChoiceBase\n    | StepFunctionDefinitionStatesChoiceAnd;\n\nexport interface StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType;\n    Comment?: string;\n    InputPath?: string;\n    OutputPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeTask extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Task;\n    Resource: pulumi.Input<string>;\n    Next: string;\n    ResultPath?: string;\n    Parameters: Record<string, any>;\n    Catch: StepFunctionDefinitionStatesCatch[];\n    End?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesTypePass extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Pass;\n    Next: string;\n    ResultPath?: string;\n    Parameters: Record<string, any>;\n    End?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesTypeChoice\n    extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Choice;\n    Choices: StepFunctionDefinitionStatesChoice[];\n    Default?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeFail extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Fail;\n    Error?: string;\n    Cause?: string;\n    CausePath?: string;\n    ErrorPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeSucceed\n    extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Succeed;\n}\n\nexport interface StepFunctionDefinitionStatesTypeWait extends StepFunctionDefinitionStatesTypeBase {\n    Next: string;\n    Seconds?: number;\n    Timestamp?: string;\n    SecondsPath?: string;\n    TimestampPath?: string;\n}\n\nexport type StepFunctionDefinitionStatesTypes =\n    | StepFunctionDefinitionStatesTypeTask\n    | StepFunctionDefinitionStatesTypePass\n    | StepFunctionDefinitionStatesTypeChoice\n    | StepFunctionDefinitionStatesTypeFail\n    | StepFunctionDefinitionStatesTypeSucceed\n    | StepFunctionDefinitionStatesTypeWait;\n\nexport interface StepFunctionDefinition {\n    Comment: string;\n    StartAt: string;\n    States: {\n        [key: string]: StepFunctionDefinitionStatesTypes;\n    };\n}\n"],"mappings":";;;;;;AAEA;AACA;AACA;AAFA,IAGYA,gCAAgC,GAAAC,OAAA,CAAAD,gCAAA,0BAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAA,OAAhCA,gCAAgC;AAAA","ignoreList":[]}
+{"version":3,"names":["StepFunctionDefinitionStatesType","exports"],"sources":["types.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\n\n/**\n * Update types if required. Try to avoid generic objects\n */\nexport enum StepFunctionDefinitionStatesType {\n    Task = \"Task\",\n    Pass = \"Pass\",\n    Choice = \"Choice\",\n    Wait = \"Wait\",\n    Fail = \"Fail\",\n    Succeed = \"Succeed\"\n}\n\nexport interface StepFunctionDefinitionStatesCatch {\n    ErrorEquals: string[];\n    Next: string;\n    ResultPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesChoiceBase {\n    Variable: string;\n    Next: string;\n    StringEquals?: string;\n    StringMatches?: string;\n    IsPresent?: boolean;\n    IsNull?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesChoiceAndItem {\n    Variable: string;\n    StringEquals?: string;\n    StringMatches?: string;\n    IsPresent?: boolean;\n    IsTimestamp?: boolean;\n    IsNumeric?: boolean;\n    NumericGreaterThan?: number;\n}\nexport interface StepFunctionDefinitionStatesChoiceAnd {\n    And: StepFunctionDefinitionStatesChoiceAndItem[];\n    Next: string;\n}\n\nexport type StepFunctionDefinitionStatesChoice =\n    | StepFunctionDefinitionStatesChoiceBase\n    | StepFunctionDefinitionStatesChoiceAnd;\n\nexport interface StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType;\n    Comment?: string;\n    InputPath?: string;\n    OutputPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeTask extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Task;\n    Resource: pulumi.Input<string>;\n    Next: string;\n    ResultPath?: string;\n    Parameters: Record<string, any>;\n    Catch: StepFunctionDefinitionStatesCatch[];\n    End?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesTypePass extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Pass;\n    Next: string;\n    ResultPath?: string;\n    Parameters: Record<string, any>;\n    End?: boolean;\n}\n\nexport interface StepFunctionDefinitionStatesTypeChoice\n    extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Choice;\n    Choices: StepFunctionDefinitionStatesChoice[];\n    Default?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeFail extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Fail;\n    Error?: string;\n    Cause?: string;\n    CausePath?: string;\n    ErrorPath?: string;\n}\n\nexport interface StepFunctionDefinitionStatesTypeSucceed\n    extends StepFunctionDefinitionStatesTypeBase {\n    Type: StepFunctionDefinitionStatesType.Succeed;\n}\n\nexport interface StepFunctionDefinitionStatesTypeWait extends StepFunctionDefinitionStatesTypeBase {\n    Next: string;\n    Seconds?: number;\n    Timestamp?: string;\n    SecondsPath?: string;\n    TimestampPath?: string;\n}\n\nexport type StepFunctionDefinitionStatesTypes =\n    | StepFunctionDefinitionStatesTypeTask\n    | StepFunctionDefinitionStatesTypePass\n    | StepFunctionDefinitionStatesTypeChoice\n    | StepFunctionDefinitionStatesTypeFail\n    | StepFunctionDefinitionStatesTypeSucceed\n    | StepFunctionDefinitionStatesTypeWait;\n\nexport interface StepFunctionDefinition {\n    Comment: string;\n    StartAt: string;\n    States: {\n        [key: string]: StepFunctionDefinitionStatesTypes;\n    };\n}\n"],"mappings":";;;;;;AAEA;AACA;AACA;AAFA,IAGYA,gCAAgC,GAAAC,OAAA,CAAAD,gCAAA,0BAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAhCA,gCAAgC;EAAA,OAAhCA,gCAAgC;AAAA","ignoreList":[]}

package/apps/api/createApiPulumiApp.d.ts

@@ -1,23 +1,27 @@
 import { PulumiAppParam, PulumiAppParamCallback } from "@webiny/pulumi";
 import { CustomDomainParams } from "../customDomain";
-export declare type ApiPulumiApp = ReturnType<typeof createApiPulumiApp>;
+export type ApiPulumiApp = ReturnType<typeof createApiPulumiApp>;
+export interface ApiElasticsearchConfig {
+    domainName: string;
+    indexPrefix: string;
+    sharedIndexes: boolean;
+}
+export interface ApiOpenSearchConfig {
+    domainName: string;
+    indexPrefix: string;
+    sharedIndexes: boolean;
+}
 export interface CreateApiPulumiAppParams {
     /**
      * Enables ElasticSearch infrastructure.
      * Note that it requires also changes in application code.
      */
-    elasticSearch?: PulumiAppParam<boolean | Partial<{
-        domainName: string;
-        indexPrefix: string;
-    }>>;
+    elasticSearch?: PulumiAppParam<boolean | Partial<ApiElasticsearchConfig>>;
     /**
      * Enables OpenSearch infrastructure.
      * Note that it requires also changes in application code.
      */
-    openSearch?: PulumiAppParam<boolean | Partial<{
-        domainName: string;
-        indexPrefix: string;
-    }>>;
+    openSearch?: PulumiAppParam<boolean | Partial<ApiOpenSearchConfig>>;
     /**
      * Enables or disables VPC for the API.
      * For VPC to work you also have to enable it in the Core application.
@@ -88,10 +92,10 @@ export declare const createApiPulumiApp: (projectAppParams?: CreateApiPulumiAppP
     backgroundTask: {
         backgroundTask: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
         stepFunction: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sfn/stateMachine").StateMachine>;
-        eventRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+        stepFunctionRole: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role").Role>;
+        stepFunctionPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
         eventPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
         eventRolePolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
-        eventRule: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventRule").EventRule>;
         eventTarget: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventTarget").EventTarget>;
     };
 }> & import("../lambdaUtils").WithCommonLambdaEnvVariables & import("../../utils/withServiceManifest").WithServiceManifest;

package/apps/api/createApiPulumiApp.js

@@ -32,6 +32,9 @@ const createApiPulumiApp = (projectAppParams = {}) => {
           if (params.indexPrefix) {
             process.env.ELASTIC_SEARCH_INDEX_PREFIX = params.indexPrefix;
           }
+          if (params.sharedIndexes) {
+            process.env.ELASTICSEARCH_SHARED_INDEXES = "true";
+          }
         }
       }
       const pulumiResourceNamePrefix = app.getParam(projectAppParams.pulumiResourceNamePrefix);
@@ -75,6 +78,7 @@ const createApiPulumiApp = (projectAppParams = {}) => {
           // Not required. Useful for testing purposes / ephemeral environments.
           // https://www.webiny.com/docs/key-topics/ci-cd/testing/slow-ephemeral-environments
           ELASTIC_SEARCH_INDEX_PREFIX: process.env.ELASTIC_SEARCH_INDEX_PREFIX,
+          ELASTICSEARCH_SHARED_INDEXES: process.env.ELASTICSEARCH_SHARED_INDEXES,
           S3_BUCKET: core.fileManagerBucketId,
           WEBINY_LOGS_FORWARD_URL
         }
@@ -99,6 +103,7 @@ const createApiPulumiApp = (projectAppParams = {}) => {
           // Not required. Useful for testing purposes / ephemeral environments.
           // https://www.webiny.com/docs/key-topics/ci-cd/testing/slow-ephemeral-environments
           ELASTIC_SEARCH_INDEX_PREFIX: process.env.ELASTIC_SEARCH_INDEX_PREFIX,
+          ELASTICSEARCH_SHARED_INDEXES: process.env.ELASTICSEARCH_SHARED_INDEXES,
           S3_BUCKET: core.fileManagerBucketId,
           EVENT_BUS: core.eventBusArn,
           IMPORT_CREATE_HANDLER: pageBuilder.import.functions.create.output.arn,
@@ -218,6 +223,7 @@ const createApiPulumiApp = (projectAppParams = {}) => {
     app.addServiceManifest({
       name: "api",
       manifest: {
+        bgTaskSfn: baseApp.resources.backgroundTask.stepFunction.output.arn,
         cloudfront: {
           distributionId: baseApp.resources.cloudfront.output.id
         }