@webiny/pulumi-aws 5.43.3 → 6.0.0-alpha.1

package/apps/syncSystem/createSyncSystemPulumiApp.js

@@ -1,55 +1,128 @@
 "use strict";
 
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.createSyncSystemPulumiApp = createSyncSystemPulumiApp;
-var _pulumi = require("@webiny/pulumi");
-var _SyncSystemDynamo = require("./SyncSystemDynamo");
-var _constants = require("../../constants");
-var _SyncSystemSQS = require("./SyncSystemSQS");
-var _SyncSystemLambda = require("./SyncSystemLambda");
-var _addTableItems = require("./addTableItems");
-function createSyncSystemPulumiApp(projectAppParams = {}) {
-  return (0, _pulumi.createPulumiApp)({
-    name: "syncSystem",
-    path: "apps/syncSystem",
+var pulumi = _interopRequireWildcard(require("@pulumi/pulumi"));
+var _pulumi2 = require("@webiny/pulumi");
+var _constants = require("../../constants.js");
+var _SyncSystemSQS = require("./SyncSystemSQS.js");
+var _SyncSystemResolverLambda = require("./SyncSystemResolverLambda.js");
+var _constants2 = require("./constants.js");
+var _SyncSystemEventBus = require("./SyncSystemEventBus.js");
+var _customApp = require("./customApp.js");
+var _SyncSystemDynamoDb = require("./SyncSystemDynamoDb.js");
+var _SyncSystemWorkerLambda = require("./SyncSystemWorkerLambda.js");
+function createSyncSystemPulumiApp(projectAppParams) {
+  return (0, _pulumi2.createPulumiApp)({
+    name: "sync",
+    path: _constants2.APPS_SYNC_SYSTEM_PATH,
     config: projectAppParams,
     program: async app => {
+      const pulumiResourceNamePrefix = app.getParam(projectAppParams.pulumiResourceNamePrefix);
+      if (pulumiResourceNamePrefix) {
+        app.onResource(resource => {
+          if (!resource.name.startsWith(pulumiResourceNamePrefix)) {
+            resource.name = `${pulumiResourceNamePrefix}${resource.name}`;
+          }
+        });
+      }
       const productionEnvironments = app.params.create.productionEnvironments || _constants.DEFAULT_PROD_ENV_NAMES;
       const isProduction = productionEnvironments.includes(app.params.run.env);
       const protect = app.getParam(projectAppParams.protect) ?? isProduction;
-      const dynamoDbTable = app.addModule(_SyncSystemDynamo.SyncSystemDynamo, {
-        protect
-      });
-      const sqs = app.addModule(_SyncSystemSQS.SyncSystemSQS, {
+      const regionApp = (0, _customApp.customApp)({
+        app,
         protect
       });
-      app.addModule(_SyncSystemLambda.SyncSystemLambda, {
-        protect,
-        config: {
-          // TODO
-        }
-      });
       /**
-       * Add
+       * Sync System services.
        */
-      (0, _addTableItems.addTableItems)({
-        app,
-        table: dynamoDbTable,
-        items: {}
-      });
+      const {
+        sqsQueue
+      } = regionApp.addModule(_SyncSystemSQS.SyncSystemSQS);
+      const dynamoDb = regionApp.addModule(_SyncSystemDynamoDb.SyncSystemDynamoDb);
+      const workerLambda = regionApp.addModule(_SyncSystemWorkerLambda.SyncSystemWorkerLambda);
+      const resolverLambda = regionApp.addModule(_SyncSystemResolverLambda.SyncSystemResolverLambda);
+      const {
+        eventBusRule,
+        eventBus,
+        eventBusTarget,
+        eventBusPolicy
+      } = regionApp.addModule(_SyncSystemEventBus.SyncSystemEventBus);
+      const output = {
+        /**
+         * Region provider.
+         */
+        region: pulumi.output(process.env.AWS_REGION),
+        /**
+         * SyncSystemSQS
+         */
+        sqsUrl: sqsQueue.output.url,
+        sqsArn: sqsQueue.output.arn,
+        sqsName: sqsQueue.output.name,
+        /**
+         * DynamoDB
+         */
+        dynamoDbArn: dynamoDb.output.arn,
+        dynamoDbName: dynamoDb.output.name,
+        dynamoDbHashKey: dynamoDb.output.hashKey,
+        dynamoDbRangeKey: dynamoDb.output.rangeKey,
+        /**
+         * SyncSystemResolverLambda
+         */
+        resolverLambdaArn: resolverLambda.lambda.output.arn,
+        resolverLambdaName: resolverLambda.lambda.output.name,
+        resolverLambdaRoleArn: resolverLambda.role.output.arn,
+        resolverLambdaRoleName: resolverLambda.role.output.name,
+        resolverLambdaRoleId: resolverLambda.role.output.id,
+        resolverLambdaPolicyArn: resolverLambda.policy.output.arn,
+        resolverLambdaPolicyName: resolverLambda.policy.output.name,
+        resolverLambdaPolicyId: resolverLambda.policy.output.id,
+        resolverLambdaEventSourceMappingArn: resolverLambda.eventSourceMapping.output.arn,
+        resolverLambdaEventSourceMappingId: resolverLambda.eventSourceMapping.output.id,
+        // # We can safely cast as we know that the property exists.
+        resolverLambdaEventSourceMappingEventSourceArn: resolverLambda.eventSourceMapping.output.eventSourceArn,
+        /**
+         * SyncSystemWorkerLambda
+         */
+        workerLambdaArn: workerLambda.lambda.output.arn,
+        workerLambdaName: workerLambda.lambda.output.name,
+        workerLambdaRoleArn: workerLambda.role.output.arn,
+        workerLambdaRoleName: workerLambda.role.output.name,
+        /**
+         * SyncSystemEventBus
+         */
+        eventBusArn: eventBus.output.arn,
+        eventBusName: eventBus.output.name,
+        eventBusRuleArn: eventBusRule.output.arn,
+        eventBusRuleName: eventBusRule.output.id,
+        eventBusTargetArn: eventBusTarget.output.arn,
+        eventBusPolicyId: eventBusPolicy.output.id,
+        eventBusPolicyUrn: eventBusPolicy.output.urn,
+        eventBusPolicyQueueUrl: eventBusPolicy.output.queueUrl
+      };
+      app.addOutputs(output);
       return {
+        sqs: sqsQueue.output,
+        dynamoDb: dynamoDb.output,
+        eventBus: eventBus.output,
+        eventBusRule: eventBusRule.output,
+        eventBusTarget: eventBusTarget.output,
+        eventBusPolicy: eventBusPolicy.output,
+        /**
+         * Worker Lambda - used to resolve actions triggered by the resolver Lambda.
+         */
+        workerLambda: workerLambda.lambda.output,
+        workerLambdaRole: workerLambda.role.output,
         /**
-         * Sync System resources.
+         * Resolver Lambda - gets hit by SQS and resolves the data.
          */
-        dynamodbTable: dynamoDbTable,
-        dynamodbTableArn: dynamoDbTable.output.arn,
-        dynamodbTableName: dynamoDbTable.output.name,
-        dynamodbTableHashKey: dynamoDbTable.output.hashKey,
-        dynamodbTableRangeKey: dynamoDbTable.output.rangeKey,
-        sqs,
-        sqsArn: sqs.output.arn,
+        resolverLambda: resolverLambda.lambda.output,
+        resolverLambdaRole: resolverLambda.role.output,
+        resolverLambdaPolicy: resolverLambda.policy.output,
+        resolverLambdaEventSourceMapping: resolverLambda.eventSourceMapping.output,
         /**
          * Systems we are connecting together.
          */

package/apps/syncSystem/createSyncSystemPulumiApp.js.map

@@ -1 +1 @@
-{"version":3,"names":["_pulumi","require","_SyncSystemDynamo","_constants","_SyncSystemSQS","_SyncSystemLambda","_addTableItems","createSyncSystemPulumiApp","projectAppParams","createPulumiApp","name","path","config","program","app","productionEnvironments","params","create","DEFAULT_PROD_ENV_NAMES","isProduction","includes","run","env","protect","getParam","dynamoDbTable","addModule","SyncSystemDynamo","sqs","SyncSystemSQS","SyncSystemLambda","addTableItems","table","items","dynamodbTable","dynamodbTableArn","output","arn","dynamodbTableName","dynamodbTableHashKey","hashKey","dynamodbTableRangeKey","rangeKey","sqsArn","primary","secondary"],"sources":["createSyncSystemPulumiApp.ts"],"sourcesContent":["import { createPulumiApp, PulumiAppParam } from \"@webiny/pulumi\";\nimport { SyncSystemDynamo } from \"./SyncSystemDynamo\";\nimport { DEFAULT_PROD_ENV_NAMES } from \"~/constants\";\nimport { SyncSystemSQS } from \"./SyncSystemSQS\";\nimport { SyncSystemLambda } from \"./SyncSystemLambda\";\nimport { addTableItems } from \"./addTableItems\";\n\nexport type SyncSystemPulumiApp = ReturnType<typeof createSyncSystemPulumiApp>;\n\nexport interface ElasticsearchConfig {\n    domainName: string;\n    indexPrefix: string;\n    sharedIndexes: boolean;\n}\n\nexport interface OpenSearchConfig {\n    domainName: string;\n    indexPrefix: string;\n    sharedIndexes: boolean;\n}\n\nexport interface CreateSyncSystemPulumiAppParams {\n    /**\n     * Secures against deleting database by accident.\n     * By default enabled in production environments.\n     */\n    protect?: PulumiAppParam<boolean>;\n\n    /**\n     * Enables ElasticSearch infrastructure.\n     * Note that it requires also changes in application code.\n     */\n    elasticSearch?: PulumiAppParam<boolean | Partial<ElasticsearchConfig>>;\n\n    /**\n     * Enables OpenSearch infrastructure.\n     * Note that it requires also changes in application code.\n     */\n    openSearch?: PulumiAppParam<boolean | Partial<OpenSearchConfig>>;\n\n    /**\n     * Enables VPC for the application.\n     * By default enabled in production environments.\n     */\n    vpc?: PulumiAppParam<boolean>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: SyncSystemPulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport function createSyncSystemPulumiApp(projectAppParams: CreateSyncSystemPulumiAppParams = {}) {\n    return createPulumiApp({\n        name: \"syncSystem\",\n        path: \"apps/syncSystem\",\n        config: projectAppParams,\n        program: async app => {\n            const productionEnvironments =\n                app.params.create.productionEnvironments || DEFAULT_PROD_ENV_NAMES;\n            const isProduction = productionEnvironments.includes(app.params.run.env);\n            const protect = app.getParam(projectAppParams.protect) ?? isProduction;\n\n            const dynamoDbTable = app.addModule(SyncSystemDynamo, {\n                protect\n            });\n\n            const sqs = app.addModule(SyncSystemSQS, {\n                protect\n            });\n\n            app.addModule(SyncSystemLambda, {\n                protect,\n                config: {\n                    // TODO\n                }\n            });\n            /**\n             * Add\n             */\n            addTableItems({\n                app,\n                table: dynamoDbTable,\n                items: {}\n            });\n\n            return {\n                /**\n                 * Sync System resources.\n                 */\n                dynamodbTable: dynamoDbTable,\n                dynamodbTableArn: dynamoDbTable.output.arn,\n                dynamodbTableName: dynamoDbTable.output.name,\n                dynamodbTableHashKey: dynamoDbTable.output.hashKey,\n                dynamodbTableRangeKey: dynamoDbTable.output.rangeKey,\n                sqs,\n                sqsArn: sqs.output.arn,\n                /**\n                 * Systems we are connecting together.\n                 */\n                primary: {},\n                secondary: {}\n            };\n        }\n    });\n}\n"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AACA,IAAAK,cAAA,GAAAL,OAAA;AA4DO,SAASM,yBAAyBA,CAACC,gBAAiD,GAAG,CAAC,CAAC,EAAE;EAC9F,OAAO,IAAAC,uBAAe,EAAC;IACnBC,IAAI,EAAE,YAAY;IAClBC,IAAI,EAAE,iBAAiB;IACvBC,MAAM,EAAEJ,gBAAgB;IACxBK,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,sBAAsB,GACxBD,GAAG,CAACE,MAAM,CAACC,MAAM,CAACF,sBAAsB,IAAIG,iCAAsB;MACtE,MAAMC,YAAY,GAAGJ,sBAAsB,CAACK,QAAQ,CAACN,GAAG,CAACE,MAAM,CAACK,GAAG,CAACC,GAAG,CAAC;MACxE,MAAMC,OAAO,GAAGT,GAAG,CAACU,QAAQ,CAAChB,gBAAgB,CAACe,OAAO,CAAC,IAAIJ,YAAY;MAEtE,MAAMM,aAAa,GAAGX,GAAG,CAACY,SAAS,CAACC,kCAAgB,EAAE;QAClDJ;MACJ,CAAC,CAAC;MAEF,MAAMK,GAAG,GAAGd,GAAG,CAACY,SAAS,CAACG,4BAAa,EAAE;QACrCN;MACJ,CAAC,CAAC;MAEFT,GAAG,CAACY,SAAS,CAACI,kCAAgB,EAAE;QAC5BP,OAAO;QACPX,MAAM,EAAE;UACJ;QAAA;MAER,CAAC,CAAC;MACF;AACZ;AACA;MACY,IAAAmB,4BAAa,EAAC;QACVjB,GAAG;QACHkB,KAAK,EAAEP,aAAa;QACpBQ,KAAK,EAAE,CAAC;MACZ,CAAC,CAAC;MAEF,OAAO;QACH;AAChB;AACA;QACgBC,aAAa,EAAET,aAAa;QAC5BU,gBAAgB,EAAEV,aAAa,CAACW,MAAM,CAACC,GAAG;QAC1CC,iBAAiB,EAAEb,aAAa,CAACW,MAAM,CAAC1B,IAAI;QAC5C6B,oBAAoB,EAAEd,aAAa,CAACW,MAAM,CAACI,OAAO;QAClDC,qBAAqB,EAAEhB,aAAa,CAACW,MAAM,CAACM,QAAQ;QACpDd,GAAG;QACHe,MAAM,EAAEf,GAAG,CAACQ,MAAM,CAACC,GAAG;QACtB;AAChB;AACA;QACgBO,OAAO,EAAE,CAAC,CAAC;QACXC,SAAS,EAAE,CAAC;MAChB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"names":["pulumi","_interopRequireWildcard","require","_pulumi2","_constants","_SyncSystemSQS","_SyncSystemResolverLambda","_constants2","_SyncSystemEventBus","_customApp","_SyncSystemDynamoDb","_SyncSystemWorkerLambda","createSyncSystemPulumiApp","projectAppParams","createPulumiApp","name","path","APPS_SYNC_SYSTEM_PATH","config","program","app","pulumiResourceNamePrefix","getParam","onResource","resource","startsWith","productionEnvironments","params","create","DEFAULT_PROD_ENV_NAMES","isProduction","includes","run","env","protect","regionApp","customApp","sqsQueue","addModule","SyncSystemSQS","dynamoDb","SyncSystemDynamoDb","workerLambda","SyncSystemWorkerLambda","resolverLambda","SyncSystemResolverLambda","eventBusRule","eventBus","eventBusTarget","eventBusPolicy","SyncSystemEventBus","output","region","process","AWS_REGION","sqsUrl","url","sqsArn","arn","sqsName","dynamoDbArn","dynamoDbName","dynamoDbHashKey","hashKey","dynamoDbRangeKey","rangeKey","resolverLambdaArn","lambda","resolverLambdaName","resolverLambdaRoleArn","role","resolverLambdaRoleName","resolverLambdaRoleId","id","resolverLambdaPolicyArn","policy","resolverLambdaPolicyName","resolverLambdaPolicyId","resolverLambdaEventSourceMappingArn","eventSourceMapping","resolverLambdaEventSourceMappingId","resolverLambdaEventSourceMappingEventSourceArn","eventSourceArn","workerLambdaArn","workerLambdaName","workerLambdaRoleArn","workerLambdaRoleName","eventBusArn","eventBusName","eventBusRuleArn","eventBusRuleName","eventBusTargetArn","eventBusPolicyId","eventBusPolicyUrn","urn","eventBusPolicyQueueUrl","queueUrl","addOutputs","sqs","workerLambdaRole","resolverLambdaRole","resolverLambdaPolicy","resolverLambdaEventSourceMapping","primary","secondary"],"sources":["createSyncSystemPulumiApp.ts"],"sourcesContent":["import * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiAppParam } from \"@webiny/pulumi\";\nimport { createPulumiApp } from \"@webiny/pulumi\";\nimport { DEFAULT_PROD_ENV_NAMES } from \"~/constants.js\";\nimport { SyncSystemSQS } from \"./SyncSystemSQS.js\";\nimport { SyncSystemResolverLambda } from \"./SyncSystemResolverLambda.js\";\nimport type { IGetSyncSystemOutputResult, PulumiOutput } from \"./types.js\";\nimport { APPS_SYNC_SYSTEM_PATH } from \"./constants.js\";\nimport { SyncSystemEventBus } from \"./SyncSystemEventBus.js\";\nimport { customApp } from \"./customApp.js\";\nimport { SyncSystemDynamoDb } from \"~/apps/syncSystem/SyncSystemDynamoDb.js\";\nimport { SyncSystemWorkerLambda } from \"~/apps/syncSystem/SyncSystemWorkerLambda.js\";\n\nexport type SyncSystemPulumiApp = ReturnType<typeof createSyncSystemPulumiApp>;\n\nexport interface ElasticsearchConfig {\n    domainName: string;\n    indexPrefix: string;\n    sharedIndexes: boolean;\n}\n\nexport interface OpenSearchConfig {\n    domainName: string;\n    indexPrefix: string;\n    sharedIndexes: boolean;\n}\n\nexport interface CreateSyncSystemPulumiAppParams {\n    /**\n     * Secures against deleting database by accident.\n     * By default enabled in production environments.\n     */\n    protect?: PulumiAppParam<boolean>;\n\n    /**\n     * Enables ElasticSearch infrastructure.\n     * Note that it requires also changes in application code.\n     */\n    elasticSearch?: PulumiAppParam<boolean | Partial<ElasticsearchConfig>>;\n\n    /**\n     * Enables OpenSearch infrastructure.\n     * Note that it requires also changes in application code.\n     */\n    openSearch?: PulumiAppParam<boolean | Partial<OpenSearchConfig>>;\n\n    /**\n     * Enables VPC for the application.\n     * By default enabled in production environments.\n     */\n    vpc?: PulumiAppParam<boolean>;\n\n    /**\n     * Provides a way to adjust existing Pulumi code (cloud infrastructure resources)\n     * or add additional ones into the mix.\n     */\n    pulumi?: (app: SyncSystemPulumiApp) => void | Promise<void>;\n\n    /**\n     * Prefixes names of all Pulumi cloud infrastructure resource with given prefix.\n     */\n    pulumiResourceNamePrefix?: PulumiAppParam<string>;\n\n    /**\n     * Treats provided environments as production environments, which\n     * are deployed in production deployment mode.\n     * https://www.webiny.com/docs/architecture/deployment-modes/production\n     */\n    productionEnvironments?: PulumiAppParam<string[]>;\n}\n\nexport function createSyncSystemPulumiApp(projectAppParams: CreateSyncSystemPulumiAppParams) {\n    return createPulumiApp({\n        name: \"sync\",\n        path: APPS_SYNC_SYSTEM_PATH,\n        config: projectAppParams,\n        program: async app => {\n            const pulumiResourceNamePrefix = app.getParam(\n                projectAppParams.pulumiResourceNamePrefix\n            );\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n            const productionEnvironments =\n                app.params.create.productionEnvironments || DEFAULT_PROD_ENV_NAMES;\n            const isProduction = productionEnvironments.includes(app.params.run.env);\n            const protect = app.getParam(projectAppParams.protect) ?? isProduction;\n            const regionApp = customApp({\n                app,\n                protect\n            });\n            /**\n             * Sync System services.\n             */\n            const { sqsQueue } = regionApp.addModule(SyncSystemSQS);\n            const dynamoDb = regionApp.addModule(SyncSystemDynamoDb);\n\n            const workerLambda = regionApp.addModule(SyncSystemWorkerLambda);\n\n            const resolverLambda = regionApp.addModule(SyncSystemResolverLambda);\n            const { eventBusRule, eventBus, eventBusTarget, eventBusPolicy } =\n                regionApp.addModule(SyncSystemEventBus);\n\n            const output: PulumiOutput<IGetSyncSystemOutputResult> = {\n                /**\n                 * Region provider.\n                 */\n                region: pulumi.output(process.env.AWS_REGION as string),\n                /**\n                 * SyncSystemSQS\n                 */\n                sqsUrl: sqsQueue.output.url,\n                sqsArn: sqsQueue.output.arn,\n                sqsName: sqsQueue.output.name,\n                /**\n                 * DynamoDB\n                 */\n                dynamoDbArn: dynamoDb.output.arn,\n                dynamoDbName: dynamoDb.output.name,\n                dynamoDbHashKey: dynamoDb.output.hashKey,\n                dynamoDbRangeKey: dynamoDb.output.rangeKey as pulumi.Output<string>,\n                /**\n                 * SyncSystemResolverLambda\n                 */\n                resolverLambdaArn: resolverLambda.lambda.output.arn,\n                resolverLambdaName: resolverLambda.lambda.output.name,\n                resolverLambdaRoleArn: resolverLambda.role.output.arn,\n                resolverLambdaRoleName: resolverLambda.role.output.name,\n                resolverLambdaRoleId: resolverLambda.role.output.id,\n                resolverLambdaPolicyArn: resolverLambda.policy.output.arn,\n                resolverLambdaPolicyName: resolverLambda.policy.output.name,\n                resolverLambdaPolicyId: resolverLambda.policy.output.id,\n                resolverLambdaEventSourceMappingArn: resolverLambda.eventSourceMapping.output.arn,\n                resolverLambdaEventSourceMappingId: resolverLambda.eventSourceMapping.output.id,\n                // # We can safely cast as we know that the property exists.\n                resolverLambdaEventSourceMappingEventSourceArn: resolverLambda.eventSourceMapping\n                    .output.eventSourceArn as pulumi.Output<string>,\n                /**\n                 * SyncSystemWorkerLambda\n                 */\n                workerLambdaArn: workerLambda.lambda.output.arn,\n                workerLambdaName: workerLambda.lambda.output.name,\n                workerLambdaRoleArn: workerLambda.role.output.arn,\n                workerLambdaRoleName: workerLambda.role.output.name,\n                /**\n                 * SyncSystemEventBus\n                 */\n                eventBusArn: eventBus.output.arn,\n                eventBusName: eventBus.output.name,\n                eventBusRuleArn: eventBusRule.output.arn,\n                eventBusRuleName: eventBusRule.output.id,\n                eventBusTargetArn: eventBusTarget.output.arn,\n                eventBusPolicyId: eventBusPolicy.output.id,\n                eventBusPolicyUrn: eventBusPolicy.output.urn,\n                eventBusPolicyQueueUrl: eventBusPolicy.output.queueUrl\n            };\n            app.addOutputs(output);\n\n            return {\n                sqs: sqsQueue.output,\n                dynamoDb: dynamoDb.output,\n                eventBus: eventBus.output,\n                eventBusRule: eventBusRule.output,\n                eventBusTarget: eventBusTarget.output,\n                eventBusPolicy: eventBusPolicy.output,\n                /**\n                 * Worker Lambda - used to resolve actions triggered by the resolver Lambda.\n                 */\n                workerLambda: workerLambda.lambda.output,\n                workerLambdaRole: workerLambda.role.output,\n                /**\n                 * Resolver Lambda - gets hit by SQS and resolves the data.\n                 */\n                resolverLambda: resolverLambda.lambda.output,\n                resolverLambdaRole: resolverLambda.role.output,\n                resolverLambdaPolicy: resolverLambda.policy.output,\n                resolverLambdaEventSourceMapping: resolverLambda.eventSourceMapping.output,\n                /**\n                 * Systems we are connecting together.\n                 */\n                primary: {},\n                secondary: {}\n            };\n        }\n    });\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,yBAAA,GAAAJ,OAAA;AAEA,IAAAK,WAAA,GAAAL,OAAA;AACA,IAAAM,mBAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AACA,IAAAQ,mBAAA,GAAAR,OAAA;AACA,IAAAS,uBAAA,GAAAT,OAAA;AA4DO,SAASU,yBAAyBA,CAACC,gBAAiD,EAAE;EACzF,OAAO,IAAAC,wBAAe,EAAC;IACnBC,IAAI,EAAE,MAAM;IACZC,IAAI,EAAEC,iCAAqB;IAC3BC,MAAM,EAAEL,gBAAgB;IACxBM,OAAO,EAAE,MAAMC,GAAG,IAAI;MAClB,MAAMC,wBAAwB,GAAGD,GAAG,CAACE,QAAQ,CACzCT,gBAAgB,CAACQ,wBACrB,CAAC;MACD,IAAIA,wBAAwB,EAAE;QAC1BD,GAAG,CAACG,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACT,IAAI,CAACU,UAAU,CAACJ,wBAAwB,CAAC,EAAE;YACrDG,QAAQ,CAACT,IAAI,GAAG,GAAGM,wBAAwB,GAAGG,QAAQ,CAACT,IAAI,EAAE;UACjE;QACJ,CAAC,CAAC;MACN;MACA,MAAMW,sBAAsB,GACxBN,GAAG,CAACO,MAAM,CAACC,MAAM,CAACF,sBAAsB,IAAIG,iCAAsB;MACtE,MAAMC,YAAY,GAAGJ,sBAAsB,CAACK,QAAQ,CAACX,GAAG,CAACO,MAAM,CAACK,GAAG,CAACC,GAAG,CAAC;MACxE,MAAMC,OAAO,GAAGd,GAAG,CAACE,QAAQ,CAACT,gBAAgB,CAACqB,OAAO,CAAC,IAAIJ,YAAY;MACtE,MAAMK,SAAS,GAAG,IAAAC,oBAAS,EAAC;QACxBhB,GAAG;QACHc;MACJ,CAAC,CAAC;MACF;AACZ;AACA;MACY,MAAM;QAAEG;MAAS,CAAC,GAAGF,SAAS,CAACG,SAAS,CAACC,4BAAa,CAAC;MACvD,MAAMC,QAAQ,GAAGL,SAAS,CAACG,SAAS,CAACG,sCAAkB,CAAC;MAExD,MAAMC,YAAY,GAAGP,SAAS,CAACG,SAAS,CAACK,8CAAsB,CAAC;MAEhE,MAAMC,cAAc,GAAGT,SAAS,CAACG,SAAS,CAACO,kDAAwB,CAAC;MACpE,MAAM;QAAEC,YAAY;QAAEC,QAAQ;QAAEC,cAAc;QAAEC;MAAe,CAAC,GAC5Dd,SAAS,CAACG,SAAS,CAACY,sCAAkB,CAAC;MAE3C,MAAMC,MAAgD,GAAG;QACrD;AAChB;AACA;QACgBC,MAAM,EAAEpD,MAAM,CAACmD,MAAM,CAACE,OAAO,CAACpB,GAAG,CAACqB,UAAoB,CAAC;QACvD;AAChB;AACA;QACgBC,MAAM,EAAElB,QAAQ,CAACc,MAAM,CAACK,GAAG;QAC3BC,MAAM,EAAEpB,QAAQ,CAACc,MAAM,CAACO,GAAG;QAC3BC,OAAO,EAAEtB,QAAQ,CAACc,MAAM,CAACpC,IAAI;QAC7B;AAChB;AACA;QACgB6C,WAAW,EAAEpB,QAAQ,CAACW,MAAM,CAACO,GAAG;QAChCG,YAAY,EAAErB,QAAQ,CAACW,MAAM,CAACpC,IAAI;QAClC+C,eAAe,EAAEtB,QAAQ,CAACW,MAAM,CAACY,OAAO;QACxCC,gBAAgB,EAAExB,QAAQ,CAACW,MAAM,CAACc,QAAiC;QACnE;AAChB;AACA;QACgBC,iBAAiB,EAAEtB,cAAc,CAACuB,MAAM,CAAChB,MAAM,CAACO,GAAG;QACnDU,kBAAkB,EAAExB,cAAc,CAACuB,MAAM,CAAChB,MAAM,CAACpC,IAAI;QACrDsD,qBAAqB,EAAEzB,cAAc,CAAC0B,IAAI,CAACnB,MAAM,CAACO,GAAG;QACrDa,sBAAsB,EAAE3B,cAAc,CAAC0B,IAAI,CAACnB,MAAM,CAACpC,IAAI;QACvDyD,oBAAoB,EAAE5B,cAAc,CAAC0B,IAAI,CAACnB,MAAM,CAACsB,EAAE;QACnDC,uBAAuB,EAAE9B,cAAc,CAAC+B,MAAM,CAACxB,MAAM,CAACO,GAAG;QACzDkB,wBAAwB,EAAEhC,cAAc,CAAC+B,MAAM,CAACxB,MAAM,CAACpC,IAAI;QAC3D8D,sBAAsB,EAAEjC,cAAc,CAAC+B,MAAM,CAACxB,MAAM,CAACsB,EAAE;QACvDK,mCAAmC,EAAElC,cAAc,CAACmC,kBAAkB,CAAC5B,MAAM,CAACO,GAAG;QACjFsB,kCAAkC,EAAEpC,cAAc,CAACmC,kBAAkB,CAAC5B,MAAM,CAACsB,EAAE;QAC/E;QACAQ,8CAA8C,EAAErC,cAAc,CAACmC,kBAAkB,CAC5E5B,MAAM,CAAC+B,cAAuC;QACnD;AAChB;AACA;QACgBC,eAAe,EAAEzC,YAAY,CAACyB,MAAM,CAAChB,MAAM,CAACO,GAAG;QAC/C0B,gBAAgB,EAAE1C,YAAY,CAACyB,MAAM,CAAChB,MAAM,CAACpC,IAAI;QACjDsE,mBAAmB,EAAE3C,YAAY,CAAC4B,IAAI,CAACnB,MAAM,CAACO,GAAG;QACjD4B,oBAAoB,EAAE5C,YAAY,CAAC4B,IAAI,CAACnB,MAAM,CAACpC,IAAI;QACnD;AAChB;AACA;QACgBwE,WAAW,EAAExC,QAAQ,CAACI,MAAM,CAACO,GAAG;QAChC8B,YAAY,EAAEzC,QAAQ,CAACI,MAAM,CAACpC,IAAI;QAClC0E,eAAe,EAAE3C,YAAY,CAACK,MAAM,CAACO,GAAG;QACxCgC,gBAAgB,EAAE5C,YAAY,CAACK,MAAM,CAACsB,EAAE;QACxCkB,iBAAiB,EAAE3C,cAAc,CAACG,MAAM,CAACO,GAAG;QAC5CkC,gBAAgB,EAAE3C,cAAc,CAACE,MAAM,CAACsB,EAAE;QAC1CoB,iBAAiB,EAAE5C,cAAc,CAACE,MAAM,CAAC2C,GAAG;QAC5CC,sBAAsB,EAAE9C,cAAc,CAACE,MAAM,CAAC6C;MAClD,CAAC;MACD5E,GAAG,CAAC6E,UAAU,CAAC9C,MAAM,CAAC;MAEtB,OAAO;QACH+C,GAAG,EAAE7D,QAAQ,CAACc,MAAM;QACpBX,QAAQ,EAAEA,QAAQ,CAACW,MAAM;QACzBJ,QAAQ,EAAEA,QAAQ,CAACI,MAAM;QACzBL,YAAY,EAAEA,YAAY,CAACK,MAAM;QACjCH,cAAc,EAAEA,cAAc,CAACG,MAAM;QACrCF,cAAc,EAAEA,cAAc,CAACE,MAAM;QACrC;AAChB;AACA;QACgBT,YAAY,EAAEA,YAAY,CAACyB,MAAM,CAAChB,MAAM;QACxCgD,gBAAgB,EAAEzD,YAAY,CAAC4B,IAAI,CAACnB,MAAM;QAC1C;AAChB;AACA;QACgBP,cAAc,EAAEA,cAAc,CAACuB,MAAM,CAAChB,MAAM;QAC5CiD,kBAAkB,EAAExD,cAAc,CAAC0B,IAAI,CAACnB,MAAM;QAC9CkD,oBAAoB,EAAEzD,cAAc,CAAC+B,MAAM,CAACxB,MAAM;QAClDmD,gCAAgC,EAAE1D,cAAc,CAACmC,kBAAkB,CAAC5B,MAAM;QAC1E;AAChB;AACA;QACgBoD,OAAO,EAAE,CAAC,CAAC;QACXC,SAAS,EAAE,CAAC;MAChB,CAAC;IACL;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/apps/syncSystem/customApp.d.ts

@@ -0,0 +1,6 @@
+import type { PulumiApp } from "@webiny/pulumi";
+export interface IAppWithRegionParams {
+    app: PulumiApp;
+    protect?: boolean;
+}
+export declare const customApp: (params: IAppWithRegionParams) => PulumiApp<Record<string, unknown>>;

package/apps/syncSystem/customApp.js

@@ -0,0 +1,26 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.customApp = void 0;
+const customApp = params => {
+  const {
+    app,
+    protect
+  } = params;
+  const initialAddResource = app.addResource;
+  app.addResource = (resource, params) => {
+    return initialAddResource(resource, {
+      ...params,
+      opts: {
+        protect,
+        ...params.opts
+      }
+    });
+  };
+  return app;
+};
+exports.customApp = customApp;
+
+//# sourceMappingURL=customApp.js.map

package/apps/syncSystem/customApp.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["customApp","params","app","protect","initialAddResource","addResource","resource","opts","exports"],"sources":["customApp.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\n\nexport interface IAppWithRegionParams {\n    app: PulumiApp;\n    protect?: boolean;\n}\n\nexport const customApp = (params: IAppWithRegionParams) => {\n    const { app, protect } = params;\n\n    const initialAddResource = app.addResource;\n\n    app.addResource = (resource, params) => {\n        return initialAddResource(resource, {\n            ...params,\n            opts: {\n                protect,\n                ...params.opts\n            }\n        });\n    };\n\n    return app;\n};\n"],"mappings":";;;;;;AAOO,MAAMA,SAAS,GAAIC,MAA4B,IAAK;EACvD,MAAM;IAAEC,GAAG;IAAEC;EAAQ,CAAC,GAAGF,MAAM;EAE/B,MAAMG,kBAAkB,GAAGF,GAAG,CAACG,WAAW;EAE1CH,GAAG,CAACG,WAAW,GAAG,CAACC,QAAQ,EAAEL,MAAM,KAAK;IACpC,OAAOG,kBAAkB,CAACE,QAAQ,EAAE;MAChC,GAAGL,MAAM;MACTM,IAAI,EAAE;QACFJ,OAAO;QACP,GAAGF,MAAM,CAACM;MACd;IACJ,CAAC,CAAC;EACN,CAAC;EAED,OAAOL,GAAG;AACd,CAAC;AAACM,OAAA,CAAAR,SAAA,GAAAA,SAAA","ignoreList":[]}

package/apps/syncSystem/getSyncSystemOutput.d.ts

@@ -0,0 +1,6 @@
+import type { IGetSyncSystemOutputResult } from "./types.js";
+export interface IGetSyncSystemOutputParams {
+    env: string;
+}
+export declare const getSyncSystemOutput: (params: IGetSyncSystemOutputParams) => IGetSyncSystemOutputResult;
+export declare const asyncGetSyncSystemOutput: (params: IGetSyncSystemOutputParams) => Promise<IGetSyncSystemOutputResult>;

package/apps/syncSystem/getSyncSystemOutput.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getSyncSystemOutput = exports.asyncGetSyncSystemOutput = void 0;
+var _index = require("@webiny/cli-plugin-deploy-pulumi/utils/index.js");
+var _constants = require("./constants.js");
+const getSyncSystemOutput = params => {
+  return (0, _index.getStackOutput)({
+    env: params.env,
+    /**
+     * Sync System cannot have a variant, only env.
+     */
+    variant: undefined,
+    folder: _constants.APPS_SYNC_SYSTEM_PATH
+  });
+};
+exports.getSyncSystemOutput = getSyncSystemOutput;
+const asyncGetSyncSystemOutput = async params => {
+  return new Promise(resolve => {
+    const value = getSyncSystemOutput(params);
+    return resolve(value);
+  });
+};
+exports.asyncGetSyncSystemOutput = asyncGetSyncSystemOutput;
+
+//# sourceMappingURL=getSyncSystemOutput.js.map

package/apps/syncSystem/getSyncSystemOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_index","require","_constants","getSyncSystemOutput","params","getStackOutput","env","variant","undefined","folder","APPS_SYNC_SYSTEM_PATH","exports","asyncGetSyncSystemOutput","Promise","resolve","value"],"sources":["getSyncSystemOutput.ts"],"sourcesContent":["import { getStackOutput } from \"@webiny/cli-plugin-deploy-pulumi/utils/index.js\";\nimport { APPS_SYNC_SYSTEM_PATH } from \"./constants.js\";\nimport type { IGetSyncSystemOutputResult } from \"~/apps/syncSystem/types.js\";\n\nexport interface IGetSyncSystemOutputParams {\n    env: string;\n}\n\nexport const getSyncSystemOutput = (params: IGetSyncSystemOutputParams) => {\n    return getStackOutput<IGetSyncSystemOutputResult>({\n        env: params.env,\n        /**\n         * Sync System cannot have a variant, only env.\n         */\n        variant: undefined,\n        folder: APPS_SYNC_SYSTEM_PATH\n    });\n};\n\nexport const asyncGetSyncSystemOutput = async (\n    params: IGetSyncSystemOutputParams\n): Promise<IGetSyncSystemOutputResult> => {\n    return new Promise(resolve => {\n        const value = getSyncSystemOutput(params);\n\n        return resolve(value);\n    });\n};\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAOO,MAAME,mBAAmB,GAAIC,MAAkC,IAAK;EACvE,OAAO,IAAAC,qBAAc,EAA6B;IAC9CC,GAAG,EAAEF,MAAM,CAACE,GAAG;IACf;AACR;AACA;IACQC,OAAO,EAAEC,SAAS;IAClBC,MAAM,EAAEC;EACZ,CAAC,CAAC;AACN,CAAC;AAACC,OAAA,CAAAR,mBAAA,GAAAA,mBAAA;AAEK,MAAMS,wBAAwB,GAAG,MACpCR,MAAkC,IACI;EACtC,OAAO,IAAIS,OAAO,CAACC,OAAO,IAAI;IAC1B,MAAMC,KAAK,GAAGZ,mBAAmB,CAACC,MAAM,CAAC;IAEzC,OAAOU,OAAO,CAACC,KAAK,CAAC;EACzB,CAAC,CAAC;AACN,CAAC;AAACJ,OAAA,CAAAC,wBAAA,GAAAA,wBAAA","ignoreList":[]}

package/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.d.ts

@@ -0,0 +1,7 @@
+import type { PulumiApp } from "@webiny/pulumi";
+interface ICreateSyncSystemResolverLambdaPolicyParams {
+    name: string;
+    app: PulumiApp;
+}
+export declare function createSyncSystemResolverLambdaPolicy(params: ICreateSyncSystemResolverLambdaPolicyParams): import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+export {};

package/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.js

@@ -0,0 +1,55 @@
+"use strict";
+
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createSyncSystemResolverLambdaPolicy = createSyncSystemResolverLambdaPolicy;
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+var _SyncSystemSQS = require("../SyncSystemSQS.js");
+var _SyncSystemDynamoDb = require("../SyncSystemDynamoDb.js");
+var _SyncSystemWorkerLambda = require("../SyncSystemWorkerLambda.js");
+function createSyncSystemResolverLambdaPolicy(params) {
+  const {
+    app
+  } = params;
+  const {
+    sqsQueue
+  } = app.getModule(_SyncSystemSQS.SyncSystemSQS);
+  const {
+    lambda: workerLambda
+  } = app.getModule(_SyncSystemWorkerLambda.SyncSystemWorkerLambda);
+  const dynamoDb = app.getModule(_SyncSystemDynamoDb.SyncSystemDynamoDb);
+  const policy = {
+    Version: "2012-10-17",
+    Statement: [{
+      Sid: "PermissionForSQS",
+      Effect: "Allow",
+      Action: ["sqs:SendMessage", "sqs:SendMessageBatch", "sqs:ReceiveMessage", "sqs:DeleteMessage", "sqs:DeleteMessageBatch", "sqs:ChangeMessageVisibility", "sqs:ChangeMessageVisibilityBatch", "sqs:GetQueueAttributes"],
+      Resource: sqsQueue.output.arn.apply(arn => {
+        return [`${arn}`, `${arn}/*`];
+      })
+    }, {
+      Sid: "PermissionForDynamoDb",
+      Effect: "Allow",
+      Action: ["dynamodb:BatchGetItem", "dynamodb:BatchWriteItem", "dynamodb:ConditionCheckItem", "dynamodb:CreateBackup", "dynamodb:CreateTable", "dynamodb:CreateTableReplica", "dynamodb:DeleteBackup", "dynamodb:DeleteItem", "dynamodb:DeleteTable", "dynamodb:DeleteTableReplica", "dynamodb:DescribeBackup", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeContributorInsights", "dynamodb:DescribeExport", "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeLimits", "dynamodb:DescribeReservedCapacity", "dynamodb:DescribeReservedCapacityOfferings", "dynamodb:DescribeStream", "dynamodb:DescribeTable", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "dynamodb:DisableKinesisStreamingDestination", "dynamodb:EnableKinesisStreamingDestination", "dynamodb:ExportTableToPointInTime", "dynamodb:GetItem", "dynamodb:GetRecords", "dynamodb:GetShardIterator", "dynamodb:ListBackups", "dynamodb:ListContributorInsights", "dynamodb:ListExports", "dynamodb:ListStreams", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "dynamodb:PartiQLDelete", "dynamodb:PartiQLInsert", "dynamodb:PartiQLSelect", "dynamodb:PartiQLUpdate", "dynamodb:PurchaseReservedCapacityOfferings", "dynamodb:PutItem", "dynamodb:Query", "dynamodb:RestoreTableFromBackup", "dynamodb:RestoreTableToPointInTime", "dynamodb:Scan", "dynamodb:UpdateContinuousBackups", "dynamodb:UpdateContributorInsights", "dynamodb:UpdateItem", "dynamodb:UpdateTable", "dynamodb:UpdateTableReplicaAutoScaling", "dynamodb:UpdateTimeToLive"],
+      Resource: [dynamoDb.output.arn.apply(arn => `${arn}`), dynamoDb.output.arn.apply(arn => `${arn}/*`)]
+    }, {
+      Sid: "PermissionForWorkerLambda",
+      Effect: "Allow",
+      Action: ["lambda:InvokeFunction"],
+      Resource: workerLambda.output.arn.apply(arn => {
+        return [`${arn}`, `${arn}/*`];
+      })
+    }]
+  };
+  return app.addResource(aws.iam.Policy, {
+    name: params.name,
+    config: {
+      description: "This policy enables access to DynamoDb and SQS.",
+      policy
+    }
+  });
+}
+
+//# sourceMappingURL=createSyncSystemResolverLambdaPolicy.js.map

package/apps/syncSystem/lambda/createSyncSystemResolverLambdaPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","_interopRequireWildcard","require","_SyncSystemSQS","_SyncSystemDynamoDb","_SyncSystemWorkerLambda","createSyncSystemResolverLambdaPolicy","params","app","sqsQueue","getModule","SyncSystemSQS","lambda","workerLambda","SyncSystemWorkerLambda","dynamoDb","SyncSystemDynamoDb","policy","Version","Statement","Sid","Effect","Action","Resource","output","arn","apply","addResource","iam","Policy","name","config","description"],"sources":["createSyncSystemResolverLambdaPolicy.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { SyncSystemSQS } from \"../SyncSystemSQS.js\";\nimport { SyncSystemDynamoDb } from \"../SyncSystemDynamoDb.js\";\nimport { SyncSystemWorkerLambda } from \"~/apps/syncSystem/SyncSystemWorkerLambda.js\";\n\ninterface ICreateSyncSystemResolverLambdaPolicyParams {\n    name: string;\n    app: PulumiApp;\n}\n\nexport function createSyncSystemResolverLambdaPolicy(\n    params: ICreateSyncSystemResolverLambdaPolicyParams\n) {\n    const { app } = params;\n    const { sqsQueue } = app.getModule(SyncSystemSQS);\n    const { lambda: workerLambda } = app.getModule(SyncSystemWorkerLambda);\n    const dynamoDb = app.getModule(SyncSystemDynamoDb);\n\n    const policy: aws.iam.PolicyDocument = {\n        Version: \"2012-10-17\",\n        Statement: [\n            {\n                Sid: \"PermissionForSQS\",\n                Effect: \"Allow\",\n                Action: [\n                    \"sqs:SendMessage\",\n                    \"sqs:SendMessageBatch\",\n                    \"sqs:ReceiveMessage\",\n                    \"sqs:DeleteMessage\",\n                    \"sqs:DeleteMessageBatch\",\n                    \"sqs:ChangeMessageVisibility\",\n                    \"sqs:ChangeMessageVisibilityBatch\",\n                    \"sqs:GetQueueAttributes\"\n                ],\n                Resource: sqsQueue.output.arn.apply(arn => {\n                    return [`${arn}`, `${arn}/*`];\n                })\n            },\n            {\n                Sid: \"PermissionForDynamoDb\",\n                Effect: \"Allow\",\n                Action: [\n                    \"dynamodb:BatchGetItem\",\n                    \"dynamodb:BatchWriteItem\",\n                    \"dynamodb:ConditionCheckItem\",\n                    \"dynamodb:CreateBackup\",\n                    \"dynamodb:CreateTable\",\n                    \"dynamodb:CreateTableReplica\",\n                    \"dynamodb:DeleteBackup\",\n                    \"dynamodb:DeleteItem\",\n                    \"dynamodb:DeleteTable\",\n                    \"dynamodb:DeleteTableReplica\",\n                    \"dynamodb:DescribeBackup\",\n                    \"dynamodb:DescribeContinuousBackups\",\n                    \"dynamodb:DescribeContributorInsights\",\n                    \"dynamodb:DescribeExport\",\n                    \"dynamodb:DescribeKinesisStreamingDestination\",\n                    \"dynamodb:DescribeLimits\",\n                    \"dynamodb:DescribeReservedCapacity\",\n                    \"dynamodb:DescribeReservedCapacityOfferings\",\n                    \"dynamodb:DescribeStream\",\n                    \"dynamodb:DescribeTable\",\n                    \"dynamodb:DescribeTableReplicaAutoScaling\",\n                    \"dynamodb:DescribeTimeToLive\",\n                    \"dynamodb:DisableKinesisStreamingDestination\",\n                    \"dynamodb:EnableKinesisStreamingDestination\",\n                    \"dynamodb:ExportTableToPointInTime\",\n                    \"dynamodb:GetItem\",\n                    \"dynamodb:GetRecords\",\n                    \"dynamodb:GetShardIterator\",\n                    \"dynamodb:ListBackups\",\n                    \"dynamodb:ListContributorInsights\",\n                    \"dynamodb:ListExports\",\n                    \"dynamodb:ListStreams\",\n                    \"dynamodb:ListTables\",\n                    \"dynamodb:ListTagsOfResource\",\n                    \"dynamodb:PartiQLDelete\",\n                    \"dynamodb:PartiQLInsert\",\n                    \"dynamodb:PartiQLSelect\",\n                    \"dynamodb:PartiQLUpdate\",\n                    \"dynamodb:PurchaseReservedCapacityOfferings\",\n                    \"dynamodb:PutItem\",\n                    \"dynamodb:Query\",\n                    \"dynamodb:RestoreTableFromBackup\",\n                    \"dynamodb:RestoreTableToPointInTime\",\n                    \"dynamodb:Scan\",\n                    \"dynamodb:UpdateContinuousBackups\",\n                    \"dynamodb:UpdateContributorInsights\",\n                    \"dynamodb:UpdateItem\",\n                    \"dynamodb:UpdateTable\",\n                    \"dynamodb:UpdateTableReplicaAutoScaling\",\n                    \"dynamodb:UpdateTimeToLive\"\n                ],\n                Resource: [\n                    dynamoDb.output.arn.apply(arn => `${arn}`),\n                    dynamoDb.output.arn.apply(arn => `${arn}/*`)\n                ]\n            },\n            {\n                Sid: \"PermissionForWorkerLambda\",\n                Effect: \"Allow\",\n                Action: [\"lambda:InvokeFunction\"],\n                Resource: workerLambda.output.arn.apply(arn => {\n                    return [`${arn}`, `${arn}/*`];\n                })\n            }\n        ]\n    };\n\n    return app.addResource(aws.iam.Policy, {\n        name: params.name,\n        config: {\n            description: \"This policy enables access to DynamoDb and SQS.\",\n            policy\n        }\n    });\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,cAAA,GAAAD,OAAA;AACA,IAAAE,mBAAA,GAAAF,OAAA;AACA,IAAAG,uBAAA,GAAAH,OAAA;AAOO,SAASI,oCAAoCA,CAChDC,MAAmD,EACrD;EACE,MAAM;IAAEC;EAAI,CAAC,GAAGD,MAAM;EACtB,MAAM;IAAEE;EAAS,CAAC,GAAGD,GAAG,CAACE,SAAS,CAACC,4BAAa,CAAC;EACjD,MAAM;IAAEC,MAAM,EAAEC;EAAa,CAAC,GAAGL,GAAG,CAACE,SAAS,CAACI,8CAAsB,CAAC;EACtE,MAAMC,QAAQ,GAAGP,GAAG,CAACE,SAAS,CAACM,sCAAkB,CAAC;EAElD,MAAMC,MAA8B,GAAG;IACnCC,OAAO,EAAE,YAAY;IACrBC,SAAS,EAAE,CACP;MACIC,GAAG,EAAE,kBAAkB;MACvBC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,CAC3B;MACDC,QAAQ,EAAEd,QAAQ,CAACe,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI;QACvC,OAAO,CAAC,GAAGA,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI,CAAC;MACjC,CAAC;IACL,CAAC,EACD;MACIL,GAAG,EAAE,uBAAuB;MAC5BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;MACDC,QAAQ,EAAE,CACNR,QAAQ,CAACS,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI,GAAGA,GAAG,EAAE,CAAC,EAC1CV,QAAQ,CAACS,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI,GAAGA,GAAG,IAAI,CAAC;IAEpD,CAAC,EACD;MACIL,GAAG,EAAE,2BAA2B;MAChCC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;MACjCC,QAAQ,EAAEV,YAAY,CAACW,MAAM,CAACC,GAAG,CAACC,KAAK,CAACD,GAAG,IAAI;QAC3C,OAAO,CAAC,GAAGA,GAAG,EAAE,EAAE,GAAGA,GAAG,IAAI,CAAC;MACjC,CAAC;IACL,CAAC;EAET,CAAC;EAED,OAAOjB,GAAG,CAACmB,WAAW,CAAC3B,GAAG,CAAC4B,GAAG,CAACC,MAAM,EAAE;IACnCC,IAAI,EAAEvB,MAAM,CAACuB,IAAI;IACjBC,MAAM,EAAE;MACJC,WAAW,EAAE,iDAAiD;MAC9Df;IACJ;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/apps/syncSystem/types.d.ts

@@ -0,0 +1,55 @@
+import type * as pulumi from "@pulumi/pulumi";
+import type { IStackOutput } from "@webiny/cli-plugin-deploy-pulumi/utils/index.js";
+export type PulumiOutput<T> = {
+    [K in keyof T]: pulumi.Output<T[K]>;
+};
+export interface IGetSyncSystemOutputResult extends IStackOutput {
+    /**
+     * createRegionProvider
+     */
+    region: string;
+    /**
+     * SyncSystemSQS
+     */
+    sqsUrl: string;
+    sqsArn: string;
+    sqsName: string;
+    /**
+     * DynamoDb
+     */
+    dynamoDbArn: string;
+    dynamoDbName: string;
+    dynamoDbHashKey: string;
+    dynamoDbRangeKey: string;
+    /**
+     * SyncSystemResolverLambda
+     */
+    resolverLambdaArn: string;
+    resolverLambdaName: string;
+    resolverLambdaRoleArn: string;
+    resolverLambdaRoleName: string;
+    resolverLambdaRoleId: string;
+    resolverLambdaPolicyArn: string;
+    resolverLambdaPolicyName: string;
+    resolverLambdaPolicyId: string;
+    resolverLambdaEventSourceMappingId: string;
+    resolverLambdaEventSourceMappingArn: string;
+    resolverLambdaEventSourceMappingEventSourceArn: string;
+    /**
+     * SyncSystemWorkerLambda
+     */
+    workerLambdaArn: string;
+    workerLambdaName: string;
+    workerLambdaRoleArn: string;
+    workerLambdaRoleName: string;
+    /**
+     * SyncSystemEventBus
+     */
+    eventBusArn: string;
+    eventBusName: string;
+    eventBusRuleArn: string;
+    eventBusRuleName: string;
+    eventBusTargetArn: string;
+    eventBusPolicyUrn: string;
+    eventBusPolicyQueueUrl: string;
+}

package/apps/syncSystem/types.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=types.js.map

package/apps/syncSystem/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type * as pulumi from \"@pulumi/pulumi\";\nimport type { IStackOutput } from \"@webiny/cli-plugin-deploy-pulumi/utils/index.js\";\n\nexport type PulumiOutput<T> = {\n    [K in keyof T]: pulumi.Output<T[K]>;\n};\n\nexport interface IGetSyncSystemOutputResult extends IStackOutput {\n    /**\n     * createRegionProvider\n     */\n    region: string;\n    /**\n     * SyncSystemSQS\n     */\n    sqsUrl: string;\n    sqsArn: string;\n    sqsName: string;\n    /**\n     * DynamoDb\n     */\n    dynamoDbArn: string;\n    dynamoDbName: string;\n    dynamoDbHashKey: string;\n    dynamoDbRangeKey: string;\n    /**\n     * SyncSystemResolverLambda\n     */\n    resolverLambdaArn: string;\n    resolverLambdaName: string;\n    resolverLambdaRoleArn: string;\n    resolverLambdaRoleName: string;\n    resolverLambdaRoleId: string;\n    resolverLambdaPolicyArn: string;\n    resolverLambdaPolicyName: string;\n    resolverLambdaPolicyId: string;\n    resolverLambdaEventSourceMappingId: string;\n    resolverLambdaEventSourceMappingArn: string;\n    resolverLambdaEventSourceMappingEventSourceArn: string;\n    /**\n     * SyncSystemWorkerLambda\n     */\n    workerLambdaArn: string;\n    workerLambdaName: string;\n    workerLambdaRoleArn: string;\n    workerLambdaRoleName: string;\n    /**\n     * SyncSystemEventBus\n     */\n    eventBusArn: string;\n    eventBusName: string;\n    eventBusRuleArn: string;\n    eventBusRuleName: string;\n    eventBusTargetArn: string;\n    eventBusPolicyUrn: string;\n    eventBusPolicyQueueUrl: string;\n}\n"],"mappings":"","ignoreList":[]}

package/apps/tenantRouter.d.ts

@@ -1,5 +1,5 @@
 import * as aws from "@pulumi/aws";
-import { PulumiApp, PulumiAppResource } from "@webiny/pulumi";
+import type { PulumiApp, PulumiAppResource } from "@webiny/pulumi";
 export declare function applyTenantRouter(app: PulumiApp, cloudfront: PulumiAppResource<typeof aws.cloudfront.Distribution>): {
     originLambda: PulumiAppResource<typeof import("@pulumi/aws/lambda/function").Function>;
 };

package/apps/tenantRouter.js.map

@@ -1 +1 @@
-{"version":3,"names":["_fs","require","pulumi","_interopRequireWildcard","aws","_common","_constants","_awsRegion","createFunctionArchive","dynamoDbTable","region","handler","readFileSync","__dirname","source","replace","asset","AssetArchive","StringAsset","PREFIX","applyTenantRouter","app","cloudfront","getEnvVariableAwsRegion","core","getModule","CoreOutput","primaryDynamodbTableName","inlinePolicies","all","getCallerIdentity","apply","identity","name","policy","JSON","stringify","Version","Statement","Sid","Effect","Action","Resource","accountId","role","addResource","iam","Role","config","managedPolicyArns","ManagedPolicies","AWSLambdaBasicExecutionRole","assumeRolePolicy","Principal","Principals","LambdaPrincipal","EdgeLambdaPrincipal","awsUsEast1","Provider","originLambda","lambda","Function","publish","runtime","LAMBDA_RUNTIME","output","arn","timeout","memorySize","code","opts","provider","retainOnDelete","meta","canUseVpc","defaultCacheBehavior","value","forwardedValues","queryString","cookies","forward","headers","lambdaFunctionAssociations","eventType","includeBody","lambdaArn","qualifiedArn"],"sources":["tenantRouter.ts"],"sourcesContent":["import { readFileSync } from \"fs\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport { PulumiApp, PulumiAppResource } from \"@webiny/pulumi\";\nimport { CoreOutput } from \"./common\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\nimport { getEnvVariableAwsRegion } from \"~/env/awsRegion\";\n\ninterface Params {\n    region: string;\n    dynamoDbTable: string;\n}\n\nfunction createFunctionArchive({ dynamoDbTable, region }: Params) {\n    const handler = readFileSync(\n        __dirname + \"/../components/tenantRouter/functions/origin/request.js\",\n        \"utf-8\"\n    );\n\n    const source = handler\n        .replace(\"{DB_TABLE_NAME}\", dynamoDbTable)\n        .replace(\"{DB_TABLE_REGION}\", region);\n\n    return new pulumi.asset.AssetArchive({\n        \"index.js\": new pulumi.asset.StringAsset(source)\n    });\n}\n\nconst PREFIX = \"website-router\";\n\nexport function applyTenantRouter(\n    app: PulumiApp,\n    cloudfront: PulumiAppResource<typeof aws.cloudfront.Distribution>\n) {\n    const region = getEnvVariableAwsRegion();\n\n    // Get Core app output\n    const core = app.getModule(CoreOutput);\n\n    // `primaryDynamodbTableName` is a string, hence the type cast here.\n    const dynamoDbTable = core.primaryDynamodbTableName;\n\n    // Because of JSON.stringify, we need to resolve promises upfront.\n    const inlinePolicies = pulumi\n        .all([aws.getCallerIdentity({}), dynamoDbTable])\n        .apply(([identity, dynamoDbTable]) => [\n            {\n                name: \"tenant-router-policy\",\n                policy: JSON.stringify({\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\"dynamodb:GetItem\", \"dynamodb:Query\"],\n                            Resource: [\n                                `arn:aws:dynamodb:${region}:${identity.accountId}:table/${dynamoDbTable}`,\n                                `arn:aws:dynamodb:${region}:${identity.accountId}:table/${dynamoDbTable}/*`\n                            ]\n                        }\n                    ]\n                })\n            }\n        ]);\n\n    const role = app.addResource(aws.iam.Role, {\n        name: `${PREFIX}-role`,\n        config: {\n            inlinePolicies,\n            managedPolicyArns: [aws.iam.ManagedPolicies.AWSLambdaBasicExecutionRole],\n            assumeRolePolicy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Action: \"sts:AssumeRole\",\n                        Principal: aws.iam.Principals.LambdaPrincipal,\n                        Effect: \"Allow\"\n                    },\n                    {\n                        Action: \"sts:AssumeRole\",\n                        Principal: aws.iam.Principals.EdgeLambdaPrincipal,\n                        Effect: \"Allow\"\n                    }\n                ]\n            }\n        }\n    });\n\n    const awsUsEast1 = new aws.Provider(\"us-east-1\", { region: \"us-east-1\" });\n\n    const originLambda = app.addResource(aws.lambda.Function, {\n        name: `${PREFIX}-origin-request`,\n        config: {\n            publish: true,\n            runtime: LAMBDA_RUNTIME,\n            handler: \"index.handler\",\n            role: role.output.arn,\n            timeout: 5,\n            memorySize: 128,\n            code: dynamoDbTable.apply(dynamoDbTable => {\n                return createFunctionArchive({\n                    region,\n                    dynamoDbTable\n                });\n            })\n        },\n        // With the `retainOnDelete` option set to `true`, the Lambda function will not be deleted when\n        // the environment is destroyed. Users need to delete the function manually. We decided to use\n        // this option here because it enables us to avoid annoying AWS Lambda function replication\n        // errors upon destroying the stack (see https://github.com/pulumi/pulumi-aws/issues/2178).\n        opts: { provider: awsUsEast1, retainOnDelete: true },\n        meta: {\n            canUseVpc: false\n        }\n    });\n\n    cloudfront.config.defaultCacheBehavior(value => {\n        return {\n            ...value,\n            // We need to forward the `Host` header so the Lambda@Edge knows what custom domain was requested.\n            forwardedValues: {\n                ...value.forwardedValues,\n                queryString: value.forwardedValues?.queryString || false,\n                cookies: value.forwardedValues?.cookies || { forward: \"none\" },\n                headers: [...(value.forwardedValues?.headers || []), \"Host\"]\n            },\n            lambdaFunctionAssociations: [\n                ...(value.lambdaFunctionAssociations || []),\n                {\n                    eventType: \"origin-request\",\n                    includeBody: false,\n                    lambdaArn: originLambda.output.qualifiedArn\n                }\n            ]\n        };\n    });\n\n    return { originLambda };\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AACA,IAAAM,UAAA,GAAAN,OAAA;AAOA,SAASO,qBAAqBA,CAAC;EAAEC,aAAa;EAAEC;AAAe,CAAC,EAAE;EAC9D,MAAMC,OAAO,GAAG,IAAAC,gBAAY,EACxBC,SAAS,GAAG,yDAAyD,EACrE,OACJ,CAAC;EAED,MAAMC,MAAM,GAAGH,OAAO,CACjBI,OAAO,CAAC,iBAAiB,EAAEN,aAAa,CAAC,CACzCM,OAAO,CAAC,mBAAmB,EAAEL,MAAM,CAAC;EAEzC,OAAO,IAAIR,MAAM,CAACc,KAAK,CAACC,YAAY,CAAC;IACjC,UAAU,EAAE,IAAIf,MAAM,CAACc,KAAK,CAACE,WAAW,CAACJ,MAAM;EACnD,CAAC,CAAC;AACN;AAEA,MAAMK,MAAM,GAAG,gBAAgB;AAExB,SAASC,iBAAiBA,CAC7BC,GAAc,EACdC,UAAiE,EACnE;EACE,MAAMZ,MAAM,GAAG,IAAAa,kCAAuB,EAAC,CAAC;;EAExC;EACA,MAAMC,IAAI,GAAGH,GAAG,CAACI,SAAS,CAACC,kBAAU,CAAC;;EAEtC;EACA,MAAMjB,aAAa,GAAGe,IAAI,CAACG,wBAAwB;;EAEnD;EACA,MAAMC,cAAc,GAAG1B,MAAM,CACxB2B,GAAG,CAAC,CAACzB,GAAG,CAAC0B,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAErB,aAAa,CAAC,CAAC,CAC/CsB,KAAK,CAAC,CAAC,CAACC,QAAQ,EAAEvB,aAAa,CAAC,KAAK,CAClC;IACIwB,IAAI,EAAE,sBAAsB;IAC5BC,MAAM,EAAEC,IAAI,CAACC,SAAS,CAAC;MACnBC,OAAO,EAAE,YAAY;MACrBC,SAAS,EAAE,CACP;QACIC,GAAG,EAAE,uBAAuB;QAC5BC,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;QAC9CC,QAAQ,EAAE,CACN,oBAAoBhC,MAAM,IAAIsB,QAAQ,CAACW,SAAS,UAAUlC,aAAa,EAAE,EACzE,oBAAoBC,MAAM,IAAIsB,QAAQ,CAACW,SAAS,UAAUlC,aAAa,IAAI;MAEnF,CAAC;IAET,CAAC;EACL,CAAC,CACJ,CAAC;EAEN,MAAMmC,IAAI,GAAGvB,GAAG,CAACwB,WAAW,CAACzC,GAAG,CAAC0C,GAAG,CAACC,IAAI,EAAE;IACvCd,IAAI,EAAE,GAAGd,MAAM,OAAO;IACtB6B,MAAM,EAAE;MACJpB,cAAc;MACdqB,iBAAiB,EAAE,CAAC7C,GAAG,CAAC0C,GAAG,CAACI,eAAe,CAACC,2BAA2B,CAAC;MACxEC,gBAAgB,EAAE;QACdf,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIG,MAAM,EAAE,gBAAgB;UACxBY,SAAS,EAAEjD,GAAG,CAAC0C,GAAG,CAACQ,UAAU,CAACC,eAAe;UAC7Cf,MAAM,EAAE;QACZ,CAAC,EACD;UACIC,MAAM,EAAE,gBAAgB;UACxBY,SAAS,EAAEjD,GAAG,CAAC0C,GAAG,CAACQ,UAAU,CAACE,mBAAmB;UACjDhB,MAAM,EAAE;QACZ,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMiB,UAAU,GAAG,IAAIrD,GAAG,CAACsD,QAAQ,CAAC,WAAW,EAAE;IAAEhD,MAAM,EAAE;EAAY,CAAC,CAAC;EAEzE,MAAMiD,YAAY,GAAGtC,GAAG,CAACwB,WAAW,CAACzC,GAAG,CAACwD,MAAM,CAACC,QAAQ,EAAE;IACtD5B,IAAI,EAAE,GAAGd,MAAM,iBAAiB;IAChC6B,MAAM,EAAE;MACJc,OAAO,EAAE,IAAI;MACbC,OAAO,EAAEC,yBAAc;MACvBrD,OAAO,EAAE,eAAe;MACxBiC,IAAI,EAAEA,IAAI,CAACqB,MAAM,CAACC,GAAG;MACrBC,OAAO,EAAE,CAAC;MACVC,UAAU,EAAE,GAAG;MACfC,IAAI,EAAE5D,aAAa,CAACsB,KAAK,CAACtB,aAAa,IAAI;QACvC,OAAOD,qBAAqB,CAAC;UACzBE,MAAM;UACND;QACJ,CAAC,CAAC;MACN,CAAC;IACL,CAAC;IACD;IACA;IACA;IACA;IACA6D,IAAI,EAAE;MAAEC,QAAQ,EAAEd,UAAU;MAAEe,cAAc,EAAE;IAAK,CAAC;IACpDC,IAAI,EAAE;MACFC,SAAS,EAAE;IACf;EACJ,CAAC,CAAC;EAEFpD,UAAU,CAAC0B,MAAM,CAAC2B,oBAAoB,CAACC,KAAK,IAAI;IAC5C,OAAO;MACH,GAAGA,KAAK;MACR;MACAC,eAAe,EAAE;QACb,GAAGD,KAAK,CAACC,eAAe;QACxBC,WAAW,EAAEF,KAAK,CAACC,eAAe,EAAEC,WAAW,IAAI,KAAK;QACxDC,OAAO,EAAEH,KAAK,CAACC,eAAe,EAAEE,OAAO,IAAI;UAAEC,OAAO,EAAE;QAAO,CAAC;QAC9DC,OAAO,EAAE,CAAC,IAAIL,KAAK,CAACC,eAAe,EAAEI,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM;MAC/D,CAAC;MACDC,0BAA0B,EAAE,CACxB,IAAIN,KAAK,CAACM,0BAA0B,IAAI,EAAE,CAAC,EAC3C;QACIC,SAAS,EAAE,gBAAgB;QAC3BC,WAAW,EAAE,KAAK;QAClBC,SAAS,EAAE1B,YAAY,CAACM,MAAM,CAACqB;MACnC,CAAC;IAET,CAAC;EACL,CAAC,CAAC;EAEF,OAAO;IAAE3B;EAAa,CAAC;AAC3B","ignoreList":[]}
+{"version":3,"names":["_fs","require","pulumi","_interopRequireWildcard","aws","_common","_constants","_awsRegion","createFunctionArchive","dynamoDbTable","region","handler","readFileSync","__dirname","source","replace","asset","AssetArchive","StringAsset","PREFIX","applyTenantRouter","app","cloudfront","getEnvVariableAwsRegion","core","getModule","CoreOutput","primaryDynamodbTableName","inlinePolicies","all","getCallerIdentity","apply","identity","name","policy","JSON","stringify","Version","Statement","Sid","Effect","Action","Resource","accountId","role","addResource","iam","Role","config","managedPolicyArns","ManagedPolicies","AWSLambdaBasicExecutionRole","assumeRolePolicy","Principal","Principals","LambdaPrincipal","EdgeLambdaPrincipal","awsUsEast1","Provider","originLambda","lambda","Function","publish","runtime","LAMBDA_RUNTIME","output","arn","timeout","memorySize","code","opts","provider","retainOnDelete","meta","canUseVpc","defaultCacheBehavior","value","forwardedValues","queryString","cookies","forward","headers","lambdaFunctionAssociations","eventType","includeBody","lambdaArn","qualifiedArn"],"sources":["tenantRouter.ts"],"sourcesContent":["import { readFileSync } from \"fs\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppResource } from \"@webiny/pulumi\";\nimport { CoreOutput } from \"./common\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\nimport { getEnvVariableAwsRegion } from \"~/env/awsRegion\";\n\ninterface Params {\n    region: string;\n    dynamoDbTable: string;\n}\n\nfunction createFunctionArchive({ dynamoDbTable, region }: Params) {\n    const handler = readFileSync(\n        __dirname + \"/../components/tenantRouter/functions/origin/request.js\",\n        \"utf-8\"\n    );\n\n    const source = handler\n        .replace(\"{DB_TABLE_NAME}\", dynamoDbTable)\n        .replace(\"{DB_TABLE_REGION}\", region);\n\n    return new pulumi.asset.AssetArchive({\n        \"index.js\": new pulumi.asset.StringAsset(source)\n    });\n}\n\nconst PREFIX = \"website-router\";\n\nexport function applyTenantRouter(\n    app: PulumiApp,\n    cloudfront: PulumiAppResource<typeof aws.cloudfront.Distribution>\n) {\n    const region = getEnvVariableAwsRegion();\n\n    // Get Core app output\n    const core = app.getModule(CoreOutput);\n\n    // `primaryDynamodbTableName` is a string, hence the type cast here.\n    const dynamoDbTable = core.primaryDynamodbTableName;\n\n    // Because of JSON.stringify, we need to resolve promises upfront.\n    const inlinePolicies = pulumi\n        .all([aws.getCallerIdentity({}), dynamoDbTable])\n        .apply(([identity, dynamoDbTable]) => [\n            {\n                name: \"tenant-router-policy\",\n                policy: JSON.stringify({\n                    Version: \"2012-10-17\",\n                    Statement: [\n                        {\n                            Sid: \"PermissionForDynamodb\",\n                            Effect: \"Allow\",\n                            Action: [\"dynamodb:GetItem\", \"dynamodb:Query\"],\n                            Resource: [\n                                `arn:aws:dynamodb:${region}:${identity.accountId}:table/${dynamoDbTable}`,\n                                `arn:aws:dynamodb:${region}:${identity.accountId}:table/${dynamoDbTable}/*`\n                            ]\n                        }\n                    ]\n                })\n            }\n        ]);\n\n    const role = app.addResource(aws.iam.Role, {\n        name: `${PREFIX}-role`,\n        config: {\n            inlinePolicies,\n            managedPolicyArns: [aws.iam.ManagedPolicies.AWSLambdaBasicExecutionRole],\n            assumeRolePolicy: {\n                Version: \"2012-10-17\",\n                Statement: [\n                    {\n                        Action: \"sts:AssumeRole\",\n                        Principal: aws.iam.Principals.LambdaPrincipal,\n                        Effect: \"Allow\"\n                    },\n                    {\n                        Action: \"sts:AssumeRole\",\n                        Principal: aws.iam.Principals.EdgeLambdaPrincipal,\n                        Effect: \"Allow\"\n                    }\n                ]\n            }\n        }\n    });\n\n    const awsUsEast1 = new aws.Provider(\"us-east-1\", { region: \"us-east-1\" });\n\n    const originLambda = app.addResource(aws.lambda.Function, {\n        name: `${PREFIX}-origin-request`,\n        config: {\n            publish: true,\n            runtime: LAMBDA_RUNTIME,\n            handler: \"index.handler\",\n            role: role.output.arn,\n            timeout: 5,\n            memorySize: 128,\n            code: dynamoDbTable.apply(dynamoDbTable => {\n                return createFunctionArchive({\n                    region,\n                    dynamoDbTable\n                });\n            })\n        },\n        // With the `retainOnDelete` option set to `true`, the Lambda function will not be deleted when\n        // the environment is destroyed. Users need to delete the function manually. We decided to use\n        // this option here because it enables us to avoid annoying AWS Lambda function replication\n        // errors upon destroying the stack (see https://github.com/pulumi/pulumi-aws/issues/2178).\n        opts: { provider: awsUsEast1, retainOnDelete: true },\n        meta: {\n            canUseVpc: false\n        }\n    });\n\n    cloudfront.config.defaultCacheBehavior(value => {\n        return {\n            ...value,\n            // We need to forward the `Host` header so the Lambda@Edge knows what custom domain was requested.\n            forwardedValues: {\n                ...value.forwardedValues,\n                queryString: value.forwardedValues?.queryString || false,\n                cookies: value.forwardedValues?.cookies || { forward: \"none\" },\n                headers: [...(value.forwardedValues?.headers || []), \"Host\"]\n            },\n            lambdaFunctionAssociations: [\n                ...(value.lambdaFunctionAssociations || []),\n                {\n                    eventType: \"origin-request\",\n                    includeBody: false,\n                    lambdaArn: originLambda.output.qualifiedArn\n                }\n            ]\n        };\n    });\n\n    return { originLambda };\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AAEA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AACA,IAAAM,UAAA,GAAAN,OAAA;AAOA,SAASO,qBAAqBA,CAAC;EAAEC,aAAa;EAAEC;AAAe,CAAC,EAAE;EAC9D,MAAMC,OAAO,GAAG,IAAAC,gBAAY,EACxBC,SAAS,GAAG,yDAAyD,EACrE,OACJ,CAAC;EAED,MAAMC,MAAM,GAAGH,OAAO,CACjBI,OAAO,CAAC,iBAAiB,EAAEN,aAAa,CAAC,CACzCM,OAAO,CAAC,mBAAmB,EAAEL,MAAM,CAAC;EAEzC,OAAO,IAAIR,MAAM,CAACc,KAAK,CAACC,YAAY,CAAC;IACjC,UAAU,EAAE,IAAIf,MAAM,CAACc,KAAK,CAACE,WAAW,CAACJ,MAAM;EACnD,CAAC,CAAC;AACN;AAEA,MAAMK,MAAM,GAAG,gBAAgB;AAExB,SAASC,iBAAiBA,CAC7BC,GAAc,EACdC,UAAiE,EACnE;EACE,MAAMZ,MAAM,GAAG,IAAAa,kCAAuB,EAAC,CAAC;;EAExC;EACA,MAAMC,IAAI,GAAGH,GAAG,CAACI,SAAS,CAACC,kBAAU,CAAC;;EAEtC;EACA,MAAMjB,aAAa,GAAGe,IAAI,CAACG,wBAAwB;;EAEnD;EACA,MAAMC,cAAc,GAAG1B,MAAM,CACxB2B,GAAG,CAAC,CAACzB,GAAG,CAAC0B,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAErB,aAAa,CAAC,CAAC,CAC/CsB,KAAK,CAAC,CAAC,CAACC,QAAQ,EAAEvB,aAAa,CAAC,KAAK,CAClC;IACIwB,IAAI,EAAE,sBAAsB;IAC5BC,MAAM,EAAEC,IAAI,CAACC,SAAS,CAAC;MACnBC,OAAO,EAAE,YAAY;MACrBC,SAAS,EAAE,CACP;QACIC,GAAG,EAAE,uBAAuB;QAC5BC,MAAM,EAAE,OAAO;QACfC,MAAM,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;QAC9CC,QAAQ,EAAE,CACN,oBAAoBhC,MAAM,IAAIsB,QAAQ,CAACW,SAAS,UAAUlC,aAAa,EAAE,EACzE,oBAAoBC,MAAM,IAAIsB,QAAQ,CAACW,SAAS,UAAUlC,aAAa,IAAI;MAEnF,CAAC;IAET,CAAC;EACL,CAAC,CACJ,CAAC;EAEN,MAAMmC,IAAI,GAAGvB,GAAG,CAACwB,WAAW,CAACzC,GAAG,CAAC0C,GAAG,CAACC,IAAI,EAAE;IACvCd,IAAI,EAAE,GAAGd,MAAM,OAAO;IACtB6B,MAAM,EAAE;MACJpB,cAAc;MACdqB,iBAAiB,EAAE,CAAC7C,GAAG,CAAC0C,GAAG,CAACI,eAAe,CAACC,2BAA2B,CAAC;MACxEC,gBAAgB,EAAE;QACdf,OAAO,EAAE,YAAY;QACrBC,SAAS,EAAE,CACP;UACIG,MAAM,EAAE,gBAAgB;UACxBY,SAAS,EAAEjD,GAAG,CAAC0C,GAAG,CAACQ,UAAU,CAACC,eAAe;UAC7Cf,MAAM,EAAE;QACZ,CAAC,EACD;UACIC,MAAM,EAAE,gBAAgB;UACxBY,SAAS,EAAEjD,GAAG,CAAC0C,GAAG,CAACQ,UAAU,CAACE,mBAAmB;UACjDhB,MAAM,EAAE;QACZ,CAAC;MAET;IACJ;EACJ,CAAC,CAAC;EAEF,MAAMiB,UAAU,GAAG,IAAIrD,GAAG,CAACsD,QAAQ,CAAC,WAAW,EAAE;IAAEhD,MAAM,EAAE;EAAY,CAAC,CAAC;EAEzE,MAAMiD,YAAY,GAAGtC,GAAG,CAACwB,WAAW,CAACzC,GAAG,CAACwD,MAAM,CAACC,QAAQ,EAAE;IACtD5B,IAAI,EAAE,GAAGd,MAAM,iBAAiB;IAChC6B,MAAM,EAAE;MACJc,OAAO,EAAE,IAAI;MACbC,OAAO,EAAEC,yBAAc;MACvBrD,OAAO,EAAE,eAAe;MACxBiC,IAAI,EAAEA,IAAI,CAACqB,MAAM,CAACC,GAAG;MACrBC,OAAO,EAAE,CAAC;MACVC,UAAU,EAAE,GAAG;MACfC,IAAI,EAAE5D,aAAa,CAACsB,KAAK,CAACtB,aAAa,IAAI;QACvC,OAAOD,qBAAqB,CAAC;UACzBE,MAAM;UACND;QACJ,CAAC,CAAC;MACN,CAAC;IACL,CAAC;IACD;IACA;IACA;IACA;IACA6D,IAAI,EAAE;MAAEC,QAAQ,EAAEd,UAAU;MAAEe,cAAc,EAAE;IAAK,CAAC;IACpDC,IAAI,EAAE;MACFC,SAAS,EAAE;IACf;EACJ,CAAC,CAAC;EAEFpD,UAAU,CAAC0B,MAAM,CAAC2B,oBAAoB,CAACC,KAAK,IAAI;IAC5C,OAAO;MACH,GAAGA,KAAK;MACR;MACAC,eAAe,EAAE;QACb,GAAGD,KAAK,CAACC,eAAe;QACxBC,WAAW,EAAEF,KAAK,CAACC,eAAe,EAAEC,WAAW,IAAI,KAAK;QACxDC,OAAO,EAAEH,KAAK,CAACC,eAAe,EAAEE,OAAO,IAAI;UAAEC,OAAO,EAAE;QAAO,CAAC;QAC9DC,OAAO,EAAE,CAAC,IAAIL,KAAK,CAACC,eAAe,EAAEI,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM;MAC/D,CAAC;MACDC,0BAA0B,EAAE,CACxB,IAAIN,KAAK,CAACM,0BAA0B,IAAI,EAAE,CAAC,EAC3C;QACIC,SAAS,EAAE,gBAAgB;QAC3BC,WAAW,EAAE,KAAK;QAClBC,SAAS,EAAE1B,YAAY,CAACM,MAAM,CAACqB;MACnC,CAAC;IAET,CAAC;EACL,CAAC,CAAC;EAEF,OAAO;IAAE3B;EAAa,CAAC;AAC3B","ignoreList":[]}

package/apps/website/WebsitePrerendering.d.ts

@@ -1,5 +1,5 @@
 import * as pulumi from "@pulumi/pulumi";
-import { PulumiApp } from "@webiny/pulumi";
+import type { PulumiApp } from "@webiny/pulumi";
 interface PreRenderingServiceParams {
     dbTableName: pulumi.Output<string>;
     dbTableHashKey: pulumi.Output<string>;