@webiny/pulumi-aws 6.0.0-alpha.0 → 6.0.0-alpha.1

package/apps/syncSystem/SyncSystemDynamoDb.js

@@ -0,0 +1,55 @@
+"use strict";
+
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SyncSystemDynamoDb = void 0;
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+var _pulumi = require("@webiny/pulumi");
+var _createSyncResourceName = require("./createSyncResourceName.js");
+const SyncSystemDynamoDb = exports.SyncSystemDynamoDb = (0, _pulumi.createAppModule)({
+  name: "SyncSystemDynamoDb",
+  config(app) {
+    return app.addResource(aws.dynamodb.Table, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("table"),
+      config: {
+        attributes: [{
+          name: "PK",
+          type: "S"
+        }, {
+          name: "SK",
+          type: "S"
+        }, {
+          name: "GSI1_PK",
+          type: "S"
+        }, {
+          name: "GSI1_SK",
+          type: "S"
+        }, {
+          name: "GSI2_PK",
+          type: "S"
+        }, {
+          name: "GSI2_SK",
+          type: "S"
+        }],
+        billingMode: "PAY_PER_REQUEST",
+        hashKey: "PK",
+        rangeKey: "SK",
+        globalSecondaryIndexes: [{
+          name: "GSI1",
+          hashKey: "GSI1_PK",
+          rangeKey: "GSI1_SK",
+          projectionType: "ALL"
+        }, {
+          name: "GSI2",
+          hashKey: "GSI2_PK",
+          rangeKey: "GSI2_SK",
+          projectionType: "ALL"
+        }]
+      }
+    });
+  }
+});
+
+//# sourceMappingURL=SyncSystemDynamoDb.js.map

package/apps/syncSystem/SyncSystemDynamoDb.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","_interopRequireWildcard","require","_pulumi","_createSyncResourceName","SyncSystemDynamoDb","exports","createAppModule","name","config","app","addResource","dynamodb","Table","createSyncResourceName","attributes","type","billingMode","hashKey","rangeKey","globalSecondaryIndexes","projectionType"],"sources":["SyncSystemDynamoDb.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createSyncResourceName } from \"~/apps/syncSystem/createSyncResourceName.js\";\n\nexport type SyncSystemDynamoDb = PulumiAppModule<typeof SyncSystemDynamoDb>;\n\nexport const SyncSystemDynamoDb = createAppModule({\n    name: \"SyncSystemDynamoDb\",\n    config(app: PulumiApp) {\n        return app.addResource(aws.dynamodb.Table, {\n            name: createSyncResourceName(\"table\"),\n            config: {\n                attributes: [\n                    { name: \"PK\", type: \"S\" },\n                    { name: \"SK\", type: \"S\" },\n                    { name: \"GSI1_PK\", type: \"S\" },\n                    { name: \"GSI1_SK\", type: \"S\" },\n                    { name: \"GSI2_PK\", type: \"S\" },\n                    { name: \"GSI2_SK\", type: \"S\" }\n                ],\n                billingMode: \"PAY_PER_REQUEST\",\n                hashKey: \"PK\",\n                rangeKey: \"SK\",\n                globalSecondaryIndexes: [\n                    {\n                        name: \"GSI1\",\n                        hashKey: \"GSI1_PK\",\n                        rangeKey: \"GSI1_SK\",\n                        projectionType: \"ALL\"\n                    },\n                    {\n                        name: \"GSI2\",\n                        hashKey: \"GSI2_PK\",\n                        rangeKey: \"GSI2_SK\",\n                        projectionType: \"ALL\"\n                    }\n                ]\n            }\n        });\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,uBAAA,GAAAF,OAAA;AAIO,MAAMG,kBAAkB,GAAAC,OAAA,CAAAD,kBAAA,GAAG,IAAAE,uBAAe,EAAC;EAC9CC,IAAI,EAAE,oBAAoB;EAC1BC,MAAMA,CAACC,GAAc,EAAE;IACnB,OAAOA,GAAG,CAACC,WAAW,CAACX,GAAG,CAACY,QAAQ,CAACC,KAAK,EAAE;MACvCL,IAAI,EAAE,IAAAM,8CAAsB,EAAC,OAAO,CAAC;MACrCL,MAAM,EAAE;QACJM,UAAU,EAAE,CACR;UAAEP,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,IAAI;UAAEQ,IAAI,EAAE;QAAI,CAAC,EACzB;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,EAC9B;UAAER,IAAI,EAAE,SAAS;UAAEQ,IAAI,EAAE;QAAI,CAAC,CACjC;QACDC,WAAW,EAAE,iBAAiB;QAC9BC,OAAO,EAAE,IAAI;QACbC,QAAQ,EAAE,IAAI;QACdC,sBAAsB,EAAE,CACpB;UACIZ,IAAI,EAAE,MAAM;UACZU,OAAO,EAAE,SAAS;UAClBC,QAAQ,EAAE,SAAS;UACnBE,cAAc,EAAE;QACpB,CAAC,EACD;UACIb,IAAI,EAAE,MAAM;UACZU,OAAO,EAAE,SAAS;UAClBC,QAAQ,EAAE,SAAS;UACnBE,cAAc,EAAE;QACpB,CAAC;MAET;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/SyncSystemEventBus.d.ts

@@ -0,0 +1,6 @@
+export declare const SyncSystemEventBus: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    eventBus: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventBus.js").EventBus>;
+    eventBusRule: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventRule.js").EventRule>;
+    eventBusTarget: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudwatch/eventTarget.js").EventTarget>;
+    eventBusPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sqs/queuePolicy.js").QueuePolicy>;
+}, void>;

package/apps/syncSystem/SyncSystemEventBus.js

@@ -0,0 +1,84 @@
+"use strict";
+
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SyncSystemEventBus = void 0;
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+var pulumi = _interopRequireWildcard(require("@pulumi/pulumi"));
+var _pulumi2 = require("@webiny/pulumi");
+var _createSyncResourceName = require("./createSyncResourceName.js");
+var _SyncSystemSQS = require("./SyncSystemSQS.js");
+const SyncSystemEventBus = exports.SyncSystemEventBus = (0, _pulumi2.createAppModule)({
+  name: "SyncSystemEventBus",
+  config: app => {
+    const {
+      sqsQueue
+    } = app.getModule(_SyncSystemSQS.SyncSystemSQS);
+    const eventBusName = (0, _createSyncResourceName.createSyncResourceName)("eventBus");
+    const config = {
+      name: eventBusName,
+      description: "Connect deployed systems to Sync SQS"
+    };
+    const eventBus = app.addResource(aws.cloudwatch.EventBus, {
+      name: eventBusName,
+      config
+    });
+    const eventBusRuleConfig = {
+      eventBusName: eventBus.output.name,
+      eventPattern: JSON.stringify({
+        "detail-type": ["synchronization-input"]
+      })
+    };
+    const eventBusRule = app.addResource(aws.cloudwatch.EventRule, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("eventBusRule"),
+      config: eventBusRuleConfig
+    });
+    const eventBusTargetConfig = {
+      rule: eventBusRule.output.name,
+      eventBusName: eventBus.output.name,
+      arn: sqsQueue.output.arn,
+      sqsTarget: {
+        messageGroupId: "default"
+      }
+    };
+    const eventBusTarget = app.addResource(aws.cloudwatch.EventTarget, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("eventBusEventTarget"),
+      config: eventBusTargetConfig
+    });
+    const eventBusPolicy = app.addResource(aws.sqs.QueuePolicy, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("queuePolicy"),
+      config: {
+        queueUrl: sqsQueue.output.url,
+        policy: pulumi.all([sqsQueue.output.arn, eventBusRule.output.arn]).apply(([sqsArn, eventBusRuleArn]) => {
+          return JSON.stringify({
+            Version: "2012-10-17",
+            Statement: [{
+              Effect: "Allow",
+              Principal: aws.iam.Principals.EventsPrincipal,
+              Action: ["sqs:SendMessage"],
+              Resource: [sqsArn, `${sqsArn}/*`],
+              Condition: {
+                ArnEquals: {
+                  /**
+                   * Not a mistake, source is the rule, not the bus.
+                   */
+                  "aws:SourceArn": eventBusRuleArn
+                }
+              }
+            }]
+          });
+        })
+      }
+    });
+    return {
+      eventBus,
+      eventBusRule,
+      eventBusTarget,
+      eventBusPolicy
+    };
+  }
+});
+
+//# sourceMappingURL=SyncSystemEventBus.js.map

package/apps/syncSystem/SyncSystemEventBus.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["aws","_interopRequireWildcard","require","pulumi","_pulumi2","_createSyncResourceName","_SyncSystemSQS","SyncSystemEventBus","exports","createAppModule","name","config","app","sqsQueue","getModule","SyncSystemSQS","eventBusName","createSyncResourceName","description","eventBus","addResource","cloudwatch","EventBus","eventBusRuleConfig","output","eventPattern","JSON","stringify","eventBusRule","EventRule","eventBusTargetConfig","rule","arn","sqsTarget","messageGroupId","eventBusTarget","EventTarget","eventBusPolicy","sqs","QueuePolicy","queueUrl","url","policy","all","apply","sqsArn","eventBusRuleArn","Version","Statement","Effect","Principal","iam","Principals","EventsPrincipal","Action","Resource","Condition","ArnEquals"],"sources":["SyncSystemEventBus.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\nimport type { EventBusArgs } from \"@pulumi/aws/cloudwatch/eventBus.js\";\nimport { SyncSystemSQS } from \"~/apps/syncSystem/SyncSystemSQS.js\";\nimport type { EventRuleArgs } from \"@pulumi/aws/cloudwatch/eventRule.js\";\nimport type { EventTargetArgs } from \"@pulumi/aws/cloudwatch/eventTarget.js\";\n\nexport const SyncSystemEventBus = createAppModule({\n    name: \"SyncSystemEventBus\",\n    config: (app: PulumiApp) => {\n        const { sqsQueue } = app.getModule(SyncSystemSQS);\n\n        const eventBusName = createSyncResourceName(\"eventBus\");\n\n        const config: EventBusArgs = {\n            name: eventBusName,\n            description: \"Connect deployed systems to Sync SQS\"\n        };\n        const eventBus = app.addResource(aws.cloudwatch.EventBus, {\n            name: eventBusName,\n            config\n        });\n\n        const eventBusRuleConfig: EventRuleArgs = {\n            eventBusName: eventBus.output.name,\n            eventPattern: JSON.stringify({\n                \"detail-type\": [\"synchronization-input\"]\n            })\n        };\n\n        const eventBusRule = app.addResource(aws.cloudwatch.EventRule, {\n            name: createSyncResourceName(\"eventBusRule\"),\n            config: eventBusRuleConfig\n        });\n\n        const eventBusTargetConfig: EventTargetArgs = {\n            rule: eventBusRule.output.name,\n            eventBusName: eventBus.output.name,\n            arn: sqsQueue.output.arn,\n            sqsTarget: {\n                messageGroupId: \"default\"\n            }\n        };\n\n        const eventBusTarget = app.addResource(aws.cloudwatch.EventTarget, {\n            name: createSyncResourceName(\"eventBusEventTarget\"),\n            config: eventBusTargetConfig\n        });\n\n        const eventBusPolicy = app.addResource(aws.sqs.QueuePolicy, {\n            name: createSyncResourceName(\"queuePolicy\"),\n            config: {\n                queueUrl: sqsQueue.output.url,\n                policy: pulumi\n                    .all([sqsQueue.output.arn, eventBusRule.output.arn])\n                    .apply(([sqsArn, eventBusRuleArn]) => {\n                        return JSON.stringify({\n                            Version: \"2012-10-17\",\n                            Statement: [\n                                {\n                                    Effect: \"Allow\",\n                                    Principal: aws.iam.Principals.EventsPrincipal,\n                                    Action: [\"sqs:SendMessage\"],\n                                    Resource: [sqsArn, `${sqsArn}/*`],\n                                    Condition: {\n                                        ArnEquals: {\n                                            /**\n                                             * Not a mistake, source is the rule, not the bus.\n                                             */\n                                            \"aws:SourceArn\": eventBusRuleArn\n                                        }\n                                    }\n                                }\n                            ]\n                        });\n                    })\n            }\n        });\n\n        return {\n            eventBus,\n            eventBusRule,\n            eventBusTarget,\n            eventBusPolicy\n        };\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,uBAAA,CAAAC,OAAA;AAEA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,uBAAA,GAAAH,OAAA;AAEA,IAAAI,cAAA,GAAAJ,OAAA;AAIO,MAAMK,kBAAkB,GAAAC,OAAA,CAAAD,kBAAA,GAAG,IAAAE,wBAAe,EAAC;EAC9CC,IAAI,EAAE,oBAAoB;EAC1BC,MAAM,EAAGC,GAAc,IAAK;IACxB,MAAM;MAAEC;IAAS,CAAC,GAAGD,GAAG,CAACE,SAAS,CAACC,4BAAa,CAAC;IAEjD,MAAMC,YAAY,GAAG,IAAAC,8CAAsB,EAAC,UAAU,CAAC;IAEvD,MAAMN,MAAoB,GAAG;MACzBD,IAAI,EAAEM,YAAY;MAClBE,WAAW,EAAE;IACjB,CAAC;IACD,MAAMC,QAAQ,GAAGP,GAAG,CAACQ,WAAW,CAACpB,GAAG,CAACqB,UAAU,CAACC,QAAQ,EAAE;MACtDZ,IAAI,EAAEM,YAAY;MAClBL;IACJ,CAAC,CAAC;IAEF,MAAMY,kBAAiC,GAAG;MACtCP,YAAY,EAAEG,QAAQ,CAACK,MAAM,CAACd,IAAI;MAClCe,YAAY,EAAEC,IAAI,CAACC,SAAS,CAAC;QACzB,aAAa,EAAE,CAAC,uBAAuB;MAC3C,CAAC;IACL,CAAC;IAED,MAAMC,YAAY,GAAGhB,GAAG,CAACQ,WAAW,CAACpB,GAAG,CAACqB,UAAU,CAACQ,SAAS,EAAE;MAC3DnB,IAAI,EAAE,IAAAO,8CAAsB,EAAC,cAAc,CAAC;MAC5CN,MAAM,EAAEY;IACZ,CAAC,CAAC;IAEF,MAAMO,oBAAqC,GAAG;MAC1CC,IAAI,EAAEH,YAAY,CAACJ,MAAM,CAACd,IAAI;MAC9BM,YAAY,EAAEG,QAAQ,CAACK,MAAM,CAACd,IAAI;MAClCsB,GAAG,EAAEnB,QAAQ,CAACW,MAAM,CAACQ,GAAG;MACxBC,SAAS,EAAE;QACPC,cAAc,EAAE;MACpB;IACJ,CAAC;IAED,MAAMC,cAAc,GAAGvB,GAAG,CAACQ,WAAW,CAACpB,GAAG,CAACqB,UAAU,CAACe,WAAW,EAAE;MAC/D1B,IAAI,EAAE,IAAAO,8CAAsB,EAAC,qBAAqB,CAAC;MACnDN,MAAM,EAAEmB;IACZ,CAAC,CAAC;IAEF,MAAMO,cAAc,GAAGzB,GAAG,CAACQ,WAAW,CAACpB,GAAG,CAACsC,GAAG,CAACC,WAAW,EAAE;MACxD7B,IAAI,EAAE,IAAAO,8CAAsB,EAAC,aAAa,CAAC;MAC3CN,MAAM,EAAE;QACJ6B,QAAQ,EAAE3B,QAAQ,CAACW,MAAM,CAACiB,GAAG;QAC7BC,MAAM,EAAEvC,MAAM,CACTwC,GAAG,CAAC,CAAC9B,QAAQ,CAACW,MAAM,CAACQ,GAAG,EAAEJ,YAAY,CAACJ,MAAM,CAACQ,GAAG,CAAC,CAAC,CACnDY,KAAK,CAAC,CAAC,CAACC,MAAM,EAAEC,eAAe,CAAC,KAAK;UAClC,OAAOpB,IAAI,CAACC,SAAS,CAAC;YAClBoB,OAAO,EAAE,YAAY;YACrBC,SAAS,EAAE,CACP;cACIC,MAAM,EAAE,OAAO;cACfC,SAAS,EAAElD,GAAG,CAACmD,GAAG,CAACC,UAAU,CAACC,eAAe;cAC7CC,MAAM,EAAE,CAAC,iBAAiB,CAAC;cAC3BC,QAAQ,EAAE,CAACV,MAAM,EAAE,GAAGA,MAAM,IAAI,CAAC;cACjCW,SAAS,EAAE;gBACPC,SAAS,EAAE;kBACP;AAC5C;AACA;kBAC4C,eAAe,EAAEX;gBACrB;cACJ;YACJ,CAAC;UAET,CAAC,CAAC;QACN,CAAC;MACT;IACJ,CAAC,CAAC;IAEF,OAAO;MACH3B,QAAQ;MACRS,YAAY;MACZO,cAAc;MACdE;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/SyncSystemLambda.d.ts

@@ -1,4 +1,4 @@
-import { PulumiAppModule } from "@webiny/pulumi";
+import type { PulumiAppModule } from "@webiny/pulumi";
 export interface SyncSystemLambdaParams {
     protect: boolean;
     config: Record<string, string>;

package/apps/syncSystem/SyncSystemLambda.js.map

@@ -1 +1 @@
-{"version":3,"names":["_path","_interopRequireDefault","require","pulumi","_interopRequireWildcard","aws","_pulumi2","_lambdaUtils","_2","_awsUtils","_constants","_SyncSystemDynamo","SyncSystemLambda","exports","createAppModule","name","config","app","_","policy","createSyncSystemLambdaPolicy","primary","fileManagerBucketId","dynamoDbTableArn","secondary","role","createLambdaRole","output","syncSystemLambda","addResource","lambda","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","path","join","paths","workspace","environment","variables","getCommonLambdaEnvVariables","apply","value","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","getModule","VpcConfig","functionVpcConfig","functions","syncSystem","params","dynamoDbTable","SyncSystemDynamo","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","Version","Statement","Sid","Effect","Action","Resource","interpolate","iam","Policy","description"],"sources":["SyncSystemLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport { createAppModule, PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils\";\nimport { VpcConfig } from \"~/apps\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\nimport { SyncSystemDynamo } from \"./SyncSystemDynamo\";\n\nexport interface SyncSystemLambdaParams {\n    protect: boolean;\n    config: Record<string, string>;\n}\n\nexport type SyncSystemLambda = PulumiAppModule<typeof SyncSystemLambda>;\n\nexport const SyncSystemLambda = createAppModule({\n    name: \"SyncSystemLambda\",\n    // eslint-disable-next-line\n    config(app: PulumiApp, _: SyncSystemLambdaParams) {\n        const policy = createSyncSystemLambdaPolicy({\n            app,\n            // TODO - get bucket ids and dynamodb tables from the FileManager app\n            primary: {\n                fileManagerBucketId: \"primaryFileManagerBucketId\",\n                dynamoDbTableArn: \"\"\n            },\n            secondary: {\n                fileManagerBucketId: \"secondaryFileManagerBucketId\",\n                dynamoDbTableArn: \"\"\n            }\n        });\n        const role = createLambdaRole(app, {\n            name: \"sync-system-lambda-role\",\n            policy: policy.output\n        });\n\n        const syncSystemLambda = app.addResource(aws.lambda.Function, {\n            name: \"sync-system-lambda\",\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"transfer/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                syncSystem: syncSystemLambda\n            }\n        };\n    }\n});\n\ninterface ICreateSyncSystemLambdaPolicyParamsType {\n    fileManagerBucketId: string;\n    dynamoDbTableArn: string;\n}\n\ninterface ICreateSyncSystemLambdaPolicyParams {\n    app: PulumiApp;\n    primary: ICreateSyncSystemLambdaPolicyParamsType;\n    secondary: ICreateSyncSystemLambdaPolicyParamsType;\n}\n\nfunction createSyncSystemLambdaPolicy(params: ICreateSyncSystemLambdaPolicyParams) {\n    const { app, primary, secondary } = params;\n    const dynamoDbTable = app.getModule(SyncSystemDynamo);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    const policy: aws.iam.PolicyDocument = {\n        Version: \"2012-10-17\",\n        Statement: [\n            {\n                Sid: \"PermissionForDynamodb\",\n                Effect: \"Allow\",\n                Action: [\n                    \"dynamodb:BatchGetItem\",\n                    \"dynamodb:BatchWriteItem\",\n                    \"dynamodb:ConditionCheckItem\",\n                    \"dynamodb:CreateBackup\",\n                    \"dynamodb:CreateTable\",\n                    \"dynamodb:CreateTableReplica\",\n                    \"dynamodb:DeleteBackup\",\n                    \"dynamodb:DeleteItem\",\n                    \"dynamodb:DeleteTable\",\n                    \"dynamodb:DeleteTableReplica\",\n                    \"dynamodb:DescribeBackup\",\n                    \"dynamodb:DescribeContinuousBackups\",\n                    \"dynamodb:DescribeContributorInsights\",\n                    \"dynamodb:DescribeExport\",\n                    \"dynamodb:DescribeKinesisStreamingDestination\",\n                    \"dynamodb:DescribeLimits\",\n                    \"dynamodb:DescribeReservedCapacity\",\n                    \"dynamodb:DescribeReservedCapacityOfferings\",\n                    \"dynamodb:DescribeStream\",\n                    \"dynamodb:DescribeTable\",\n                    \"dynamodb:DescribeTableReplicaAutoScaling\",\n                    \"dynamodb:DescribeTimeToLive\",\n                    \"dynamodb:DisableKinesisStreamingDestination\",\n                    \"dynamodb:EnableKinesisStreamingDestination\",\n                    \"dynamodb:ExportTableToPointInTime\",\n                    \"dynamodb:GetItem\",\n                    \"dynamodb:GetRecords\",\n                    \"dynamodb:GetShardIterator\",\n                    \"dynamodb:ListBackups\",\n                    \"dynamodb:ListContributorInsights\",\n                    \"dynamodb:ListExports\",\n                    \"dynamodb:ListStreams\",\n                    \"dynamodb:ListTables\",\n                    \"dynamodb:ListTagsOfResource\",\n                    \"dynamodb:PartiQLDelete\",\n                    \"dynamodb:PartiQLInsert\",\n                    \"dynamodb:PartiQLSelect\",\n                    \"dynamodb:PartiQLUpdate\",\n                    \"dynamodb:PurchaseReservedCapacityOfferings\",\n                    \"dynamodb:PutItem\",\n                    \"dynamodb:Query\",\n                    \"dynamodb:RestoreTableFromBackup\",\n                    \"dynamodb:RestoreTableToPointInTime\",\n                    \"dynamodb:Scan\",\n                    \"dynamodb:UpdateContinuousBackups\",\n                    \"dynamodb:UpdateContributorInsights\",\n                    \"dynamodb:UpdateItem\",\n                    \"dynamodb:UpdateTable\",\n                    \"dynamodb:UpdateTableReplicaAutoScaling\",\n                    \"dynamodb:UpdateTimeToLive\"\n                ],\n                Resource: [`${dynamoDbTable.output.arn}`, `${dynamoDbTable.output.arn}/*`]\n            },\n            {\n                Sid: \"PermissionForS3\",\n                Effect: \"Allow\",\n                Action: [\n                    \"s3:ListBucket\",\n                    \"s3:GetObjectAcl\",\n                    \"s3:DeleteObject\",\n                    \"s3:PutObjectAcl\",\n                    \"s3:PutObject\",\n                    \"s3:GetObject\"\n                ],\n                Resource: [\n                    pulumi.interpolate`arn:aws:s3:::${primary.fileManagerBucketId}`,\n                    pulumi.interpolate`arn:aws:s3:::${primary.fileManagerBucketId}/*`,\n                    pulumi.interpolate`arn:aws:s3:::${secondary.fileManagerBucketId}`,\n                    pulumi.interpolate`arn:aws:s3:::${secondary.fileManagerBucketId}/*`\n                ]\n            },\n            {\n                Sid: \"PermissionForLambda\",\n                Effect: \"Allow\",\n                Action: [\"lambda:InvokeFunction\"],\n                Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n            }\n        ]\n    };\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"SyncSystemLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3 and Lambda.\",\n            policy\n        }\n    });\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,YAAA,GAAAL,OAAA;AACA,IAAAM,EAAA,GAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AACA,IAAAQ,UAAA,GAAAR,OAAA;AACA,IAAAS,iBAAA,GAAAT,OAAA;AASO,MAAMU,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,IAAAE,wBAAe,EAAC;EAC5CC,IAAI,EAAE,kBAAkB;EACxB;EACAC,MAAMA,CAACC,GAAc,EAAEC,CAAyB,EAAE;IAC9C,MAAMC,MAAM,GAAGC,4BAA4B,CAAC;MACxCH,GAAG;MACH;MACAI,OAAO,EAAE;QACLC,mBAAmB,EAAE,4BAA4B;QACjDC,gBAAgB,EAAE;MACtB,CAAC;MACDC,SAAS,EAAE;QACPF,mBAAmB,EAAE,8BAA8B;QACnDC,gBAAgB,EAAE;MACtB;IACJ,CAAC,CAAC;IACF,MAAME,IAAI,GAAG,IAAAC,6BAAgB,EAACT,GAAG,EAAE;MAC/BF,IAAI,EAAE,yBAAyB;MAC/BI,MAAM,EAAEA,MAAM,CAACQ;IACnB,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAGX,GAAG,CAACY,WAAW,CAACxB,GAAG,CAACyB,MAAM,CAACC,QAAQ,EAAE;MAC1DhB,IAAI,EAAE,oBAAoB;MAC1BC,MAAM,EAAE;QACJgB,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1BT,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAInC,MAAM,CAACoC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAIrC,MAAM,CAACoC,KAAK,CAACE,WAAW,CAC7BC,aAAI,CAACC,IAAI,CAAC1B,GAAG,CAAC2B,KAAK,CAACC,SAAS,EAAE,gBAAgB,CACnD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAE,IAAAC,wCAA2B,EAAC,CAAC,CAACC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACRC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAEnC,GAAG,CAACoC,SAAS,CAACC,YAAS,CAAC,CAACC;MACxC;IACJ,CAAC,CAAC;IAEF,OAAO;MACH9B,IAAI;MACJN,MAAM;MACNqC,SAAS,EAAE;QACPC,UAAU,EAAE7B;MAChB;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAaF,SAASR,4BAA4BA,CAACsC,MAA2C,EAAE;EAC/E,MAAM;IAAEzC,GAAG;IAAEI,OAAO;IAAEG;EAAU,CAAC,GAAGkC,MAAM;EAC1C,MAAMC,aAAa,GAAG1C,GAAG,CAACoC,SAAS,CAACO,kCAAgB,CAAC;EACrD,MAAMC,YAAY,GAAG,IAAAC,yBAAe,EAAC7C,GAAG,CAAC;EACzC,MAAM8C,SAAS,GAAG,IAAAC,sBAAY,EAAC/C,GAAG,CAAC;EAEnC,MAAME,MAA8B,GAAG;IACnC8C,OAAO,EAAE,YAAY;IACrBC,SAAS,EAAE,CACP;MACIC,GAAG,EAAE,uBAAuB;MAC5BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;MACDC,QAAQ,EAAE,CAAC,GAAGX,aAAa,CAAChC,MAAM,CAACQ,GAAG,EAAE,EAAE,GAAGwB,aAAa,CAAChC,MAAM,CAACQ,GAAG,IAAI;IAC7E,CAAC,EACD;MACIgC,GAAG,EAAE,iBAAiB;MACtBC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;MACDC,QAAQ,EAAE,CACNnE,MAAM,CAACoE,WAAW,gBAAgBlD,OAAO,CAACC,mBAAmB,EAAE,EAC/DnB,MAAM,CAACoE,WAAW,gBAAgBlD,OAAO,CAACC,mBAAmB,IAAI,EACjEnB,MAAM,CAACoE,WAAW,gBAAgB/C,SAAS,CAACF,mBAAmB,EAAE,EACjEnB,MAAM,CAACoE,WAAW,gBAAgB/C,SAAS,CAACF,mBAAmB,IAAI;IAE3E,CAAC,EACD;MACI6C,GAAG,EAAE,qBAAqB;MAC1BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;MACjCC,QAAQ,EAAEnE,MAAM,CAACoE,WAAW,kBAAkBR,SAAS,IAAIF,YAAY;IAC3E,CAAC;EAET,CAAC;EAED,OAAO5C,GAAG,CAACY,WAAW,CAACxB,GAAG,CAACmE,GAAG,CAACC,MAAM,EAAE;IACnC1D,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJ0D,WAAW,EAAE,wDAAwD;MACrEvD;IACJ;EACJ,CAAC,CAAC;AACN","ignoreList":[]}
+{"version":3,"names":["_path","_interopRequireDefault","require","pulumi","_interopRequireWildcard","aws","_pulumi2","_lambdaUtils","_2","_awsUtils","_constants","_SyncSystemDynamo","SyncSystemLambda","exports","createAppModule","name","config","app","_","policy","createSyncSystemLambdaPolicy","primary","fileManagerBucketId","dynamoDbTableArn","secondary","role","createLambdaRole","output","syncSystemLambda","addResource","lambda","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","asset","AssetArchive","FileArchive","path","join","paths","workspace","environment","variables","getCommonLambdaEnvVariables","apply","value","AWS_NODEJS_CONNECTION_REUSE_ENABLED","vpcConfig","getModule","VpcConfig","functionVpcConfig","functions","syncSystem","params","dynamoDbTable","SyncSystemDynamo","awsAccountId","getAwsAccountId","awsRegion","getAwsRegion","Version","Statement","Sid","Effect","Action","Resource","interpolate","iam","Policy","description"],"sources":["SyncSystemLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRole, getCommonLambdaEnvVariables } from \"../lambdaUtils\";\nimport { VpcConfig } from \"~/apps\";\nimport { getAwsAccountId, getAwsRegion } from \"../awsUtils\";\nimport { LAMBDA_RUNTIME } from \"~/constants\";\nimport { SyncSystemDynamo } from \"./SyncSystemDynamo\";\n\nexport interface SyncSystemLambdaParams {\n    protect: boolean;\n    config: Record<string, string>;\n}\n\nexport type SyncSystemLambda = PulumiAppModule<typeof SyncSystemLambda>;\n\nexport const SyncSystemLambda = createAppModule({\n    name: \"SyncSystemLambda\",\n    // eslint-disable-next-line\n    config(app: PulumiApp, _: SyncSystemLambdaParams) {\n        const policy = createSyncSystemLambdaPolicy({\n            app,\n            // TODO - get bucket ids and dynamodb tables from the FileManager app\n            primary: {\n                fileManagerBucketId: \"primaryFileManagerBucketId\",\n                dynamoDbTableArn: \"\"\n            },\n            secondary: {\n                fileManagerBucketId: \"secondaryFileManagerBucketId\",\n                dynamoDbTableArn: \"\"\n            }\n        });\n        const role = createLambdaRole(app, {\n            name: \"sync-system-lambda-role\",\n            policy: policy.output\n        });\n\n        const syncSystemLambda = app.addResource(aws.lambda.Function, {\n            name: \"sync-system-lambda\",\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 1024,\n                code: new pulumi.asset.AssetArchive({\n                    \".\": new pulumi.asset.FileArchive(\n                        path.join(app.paths.workspace, \"transfer/build\")\n                    )\n                }),\n                environment: {\n                    variables: getCommonLambdaEnvVariables().apply(value => ({\n                        ...value,\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }))\n                },\n                vpcConfig: app.getModule(VpcConfig).functionVpcConfig\n            }\n        });\n\n        return {\n            role,\n            policy,\n            functions: {\n                syncSystem: syncSystemLambda\n            }\n        };\n    }\n});\n\ninterface ICreateSyncSystemLambdaPolicyParamsType {\n    fileManagerBucketId: string;\n    dynamoDbTableArn: string;\n}\n\ninterface ICreateSyncSystemLambdaPolicyParams {\n    app: PulumiApp;\n    primary: ICreateSyncSystemLambdaPolicyParamsType;\n    secondary: ICreateSyncSystemLambdaPolicyParamsType;\n}\n\nfunction createSyncSystemLambdaPolicy(params: ICreateSyncSystemLambdaPolicyParams) {\n    const { app, primary, secondary } = params;\n    const dynamoDbTable = app.getModule(SyncSystemDynamo);\n    const awsAccountId = getAwsAccountId(app);\n    const awsRegion = getAwsRegion(app);\n\n    const policy: aws.iam.PolicyDocument = {\n        Version: \"2012-10-17\",\n        Statement: [\n            {\n                Sid: \"PermissionForDynamodb\",\n                Effect: \"Allow\",\n                Action: [\n                    \"dynamodb:BatchGetItem\",\n                    \"dynamodb:BatchWriteItem\",\n                    \"dynamodb:ConditionCheckItem\",\n                    \"dynamodb:CreateBackup\",\n                    \"dynamodb:CreateTable\",\n                    \"dynamodb:CreateTableReplica\",\n                    \"dynamodb:DeleteBackup\",\n                    \"dynamodb:DeleteItem\",\n                    \"dynamodb:DeleteTable\",\n                    \"dynamodb:DeleteTableReplica\",\n                    \"dynamodb:DescribeBackup\",\n                    \"dynamodb:DescribeContinuousBackups\",\n                    \"dynamodb:DescribeContributorInsights\",\n                    \"dynamodb:DescribeExport\",\n                    \"dynamodb:DescribeKinesisStreamingDestination\",\n                    \"dynamodb:DescribeLimits\",\n                    \"dynamodb:DescribeReservedCapacity\",\n                    \"dynamodb:DescribeReservedCapacityOfferings\",\n                    \"dynamodb:DescribeStream\",\n                    \"dynamodb:DescribeTable\",\n                    \"dynamodb:DescribeTableReplicaAutoScaling\",\n                    \"dynamodb:DescribeTimeToLive\",\n                    \"dynamodb:DisableKinesisStreamingDestination\",\n                    \"dynamodb:EnableKinesisStreamingDestination\",\n                    \"dynamodb:ExportTableToPointInTime\",\n                    \"dynamodb:GetItem\",\n                    \"dynamodb:GetRecords\",\n                    \"dynamodb:GetShardIterator\",\n                    \"dynamodb:ListBackups\",\n                    \"dynamodb:ListContributorInsights\",\n                    \"dynamodb:ListExports\",\n                    \"dynamodb:ListStreams\",\n                    \"dynamodb:ListTables\",\n                    \"dynamodb:ListTagsOfResource\",\n                    \"dynamodb:PartiQLDelete\",\n                    \"dynamodb:PartiQLInsert\",\n                    \"dynamodb:PartiQLSelect\",\n                    \"dynamodb:PartiQLUpdate\",\n                    \"dynamodb:PurchaseReservedCapacityOfferings\",\n                    \"dynamodb:PutItem\",\n                    \"dynamodb:Query\",\n                    \"dynamodb:RestoreTableFromBackup\",\n                    \"dynamodb:RestoreTableToPointInTime\",\n                    \"dynamodb:Scan\",\n                    \"dynamodb:UpdateContinuousBackups\",\n                    \"dynamodb:UpdateContributorInsights\",\n                    \"dynamodb:UpdateItem\",\n                    \"dynamodb:UpdateTable\",\n                    \"dynamodb:UpdateTableReplicaAutoScaling\",\n                    \"dynamodb:UpdateTimeToLive\"\n                ],\n                Resource: [`${dynamoDbTable.output.arn}`, `${dynamoDbTable.output.arn}/*`]\n            },\n            {\n                Sid: \"PermissionForS3\",\n                Effect: \"Allow\",\n                Action: [\n                    \"s3:ListBucket\",\n                    \"s3:GetObjectAcl\",\n                    \"s3:DeleteObject\",\n                    \"s3:PutObjectAcl\",\n                    \"s3:PutObject\",\n                    \"s3:GetObject\"\n                ],\n                Resource: [\n                    pulumi.interpolate`arn:aws:s3:::${primary.fileManagerBucketId}`,\n                    pulumi.interpolate`arn:aws:s3:::${primary.fileManagerBucketId}/*`,\n                    pulumi.interpolate`arn:aws:s3:::${secondary.fileManagerBucketId}`,\n                    pulumi.interpolate`arn:aws:s3:::${secondary.fileManagerBucketId}/*`\n                ]\n            },\n            {\n                Sid: \"PermissionForLambda\",\n                Effect: \"Allow\",\n                Action: [\"lambda:InvokeFunction\"],\n                Resource: pulumi.interpolate`arn:aws:lambda:${awsRegion}:${awsAccountId}:function:*`\n            }\n        ]\n    };\n\n    return app.addResource(aws.iam.Policy, {\n        name: \"SyncSystemLambdaPolicy\",\n        config: {\n            description: \"This policy enables access to Dynamodb, S3 and Lambda.\",\n            policy\n        }\n    });\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAC,uBAAA,CAAAF,OAAA;AACA,IAAAG,GAAA,GAAAD,uBAAA,CAAAF,OAAA;AAEA,IAAAI,QAAA,GAAAJ,OAAA;AACA,IAAAK,YAAA,GAAAL,OAAA;AACA,IAAAM,EAAA,GAAAN,OAAA;AACA,IAAAO,SAAA,GAAAP,OAAA;AACA,IAAAQ,UAAA,GAAAR,OAAA;AACA,IAAAS,iBAAA,GAAAT,OAAA;AASO,MAAMU,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,IAAAE,wBAAe,EAAC;EAC5CC,IAAI,EAAE,kBAAkB;EACxB;EACAC,MAAMA,CAACC,GAAc,EAAEC,CAAyB,EAAE;IAC9C,MAAMC,MAAM,GAAGC,4BAA4B,CAAC;MACxCH,GAAG;MACH;MACAI,OAAO,EAAE;QACLC,mBAAmB,EAAE,4BAA4B;QACjDC,gBAAgB,EAAE;MACtB,CAAC;MACDC,SAAS,EAAE;QACPF,mBAAmB,EAAE,8BAA8B;QACnDC,gBAAgB,EAAE;MACtB;IACJ,CAAC,CAAC;IACF,MAAME,IAAI,GAAG,IAAAC,6BAAgB,EAACT,GAAG,EAAE;MAC/BF,IAAI,EAAE,yBAAyB;MAC/BI,MAAM,EAAEA,MAAM,CAACQ;IACnB,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAGX,GAAG,CAACY,WAAW,CAACxB,GAAG,CAACyB,MAAM,CAACC,QAAQ,EAAE;MAC1DhB,IAAI,EAAE,oBAAoB;MAC1BC,MAAM,EAAE;QACJgB,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1BT,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACQ,GAAG;QACrBC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,IAAI;QAChBC,IAAI,EAAE,IAAInC,MAAM,CAACoC,KAAK,CAACC,YAAY,CAAC;UAChC,GAAG,EAAE,IAAIrC,MAAM,CAACoC,KAAK,CAACE,WAAW,CAC7BC,aAAI,CAACC,IAAI,CAAC1B,GAAG,CAAC2B,KAAK,CAACC,SAAS,EAAE,gBAAgB,CACnD;QACJ,CAAC,CAAC;QACFC,WAAW,EAAE;UACTC,SAAS,EAAE,IAAAC,wCAA2B,EAAC,CAAC,CAACC,KAAK,CAACC,KAAK,KAAK;YACrD,GAAGA,KAAK;YACRC,mCAAmC,EAAE;UACzC,CAAC,CAAC;QACN,CAAC;QACDC,SAAS,EAAEnC,GAAG,CAACoC,SAAS,CAACC,YAAS,CAAC,CAACC;MACxC;IACJ,CAAC,CAAC;IAEF,OAAO;MACH9B,IAAI;MACJN,MAAM;MACNqC,SAAS,EAAE;QACPC,UAAU,EAAE7B;MAChB;IACJ,CAAC;EACL;AACJ,CAAC,CAAC;AAaF,SAASR,4BAA4BA,CAACsC,MAA2C,EAAE;EAC/E,MAAM;IAAEzC,GAAG;IAAEI,OAAO;IAAEG;EAAU,CAAC,GAAGkC,MAAM;EAC1C,MAAMC,aAAa,GAAG1C,GAAG,CAACoC,SAAS,CAACO,kCAAgB,CAAC;EACrD,MAAMC,YAAY,GAAG,IAAAC,yBAAe,EAAC7C,GAAG,CAAC;EACzC,MAAM8C,SAAS,GAAG,IAAAC,sBAAY,EAAC/C,GAAG,CAAC;EAEnC,MAAME,MAA8B,GAAG;IACnC8C,OAAO,EAAE,YAAY;IACrBC,SAAS,EAAE,CACP;MACIC,GAAG,EAAE,uBAAuB;MAC5BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,oCAAoC,EACpC,sCAAsC,EACtC,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EACzB,mCAAmC,EACnC,4CAA4C,EAC5C,yBAAyB,EACzB,wBAAwB,EACxB,0CAA0C,EAC1C,6BAA6B,EAC7B,6CAA6C,EAC7C,4CAA4C,EAC5C,mCAAmC,EACnC,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,4CAA4C,EAC5C,kBAAkB,EAClB,gBAAgB,EAChB,iCAAiC,EACjC,oCAAoC,EACpC,eAAe,EACf,kCAAkC,EAClC,oCAAoC,EACpC,qBAAqB,EACrB,sBAAsB,EACtB,wCAAwC,EACxC,2BAA2B,CAC9B;MACDC,QAAQ,EAAE,CAAC,GAAGX,aAAa,CAAChC,MAAM,CAACQ,GAAG,EAAE,EAAE,GAAGwB,aAAa,CAAChC,MAAM,CAACQ,GAAG,IAAI;IAC7E,CAAC,EACD;MACIgC,GAAG,EAAE,iBAAiB;MACtBC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CACJ,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,cAAc,CACjB;MACDC,QAAQ,EAAE,CACNnE,MAAM,CAACoE,WAAW,gBAAgBlD,OAAO,CAACC,mBAAmB,EAAE,EAC/DnB,MAAM,CAACoE,WAAW,gBAAgBlD,OAAO,CAACC,mBAAmB,IAAI,EACjEnB,MAAM,CAACoE,WAAW,gBAAgB/C,SAAS,CAACF,mBAAmB,EAAE,EACjEnB,MAAM,CAACoE,WAAW,gBAAgB/C,SAAS,CAACF,mBAAmB,IAAI;IAE3E,CAAC,EACD;MACI6C,GAAG,EAAE,qBAAqB;MAC1BC,MAAM,EAAE,OAAO;MACfC,MAAM,EAAE,CAAC,uBAAuB,CAAC;MACjCC,QAAQ,EAAEnE,MAAM,CAACoE,WAAW,kBAAkBR,SAAS,IAAIF,YAAY;IAC3E,CAAC;EAET,CAAC;EAED,OAAO5C,GAAG,CAACY,WAAW,CAACxB,GAAG,CAACmE,GAAG,CAACC,MAAM,EAAE;IACnC1D,IAAI,EAAE,wBAAwB;IAC9BC,MAAM,EAAE;MACJ0D,WAAW,EAAE,wDAAwD;MACrEvD;IACJ;EACJ,CAAC,CAAC;AACN","ignoreList":[]}

package/apps/syncSystem/SyncSystemOutput.d.ts

@@ -0,0 +1,3 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type SyncSystemOutput = PulumiAppModule<typeof SyncSystemOutput>;
+export declare const SyncSystemOutput: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<import("./types").IGetSyncSystemOutputResult> | null>, void>;

package/apps/syncSystem/SyncSystemOutput.js

@@ -0,0 +1,26 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SyncSystemOutput = void 0;
+var _pulumi = require("@webiny/pulumi");
+var _getSyncSystemOutput = require("./getSyncSystemOutput.js");
+const SyncSystemOutput = exports.SyncSystemOutput = (0, _pulumi.createAppModule)({
+  name: "SyncSystemOutput",
+  config(app) {
+    return app.addHandler(async () => {
+      const output = (0, _getSyncSystemOutput.getSyncSystemOutput)({
+        env: app.params.run.env
+      });
+      const keys = Object.keys(output || {});
+      if (keys.length === 0) {
+        console.log("Sync System application is not deployed.");
+        return null;
+      }
+      return output;
+    });
+  }
+});
+
+//# sourceMappingURL=SyncSystemOutput.js.map

package/apps/syncSystem/SyncSystemOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_pulumi","require","_getSyncSystemOutput","SyncSystemOutput","exports","createAppModule","name","config","app","addHandler","output","getSyncSystemOutput","env","params","run","keys","Object","length","console","log"],"sources":["SyncSystemOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getSyncSystemOutput } from \"~/apps/syncSystem/getSyncSystemOutput.js\";\n\nexport type SyncSystemOutput = PulumiAppModule<typeof SyncSystemOutput>;\n\nexport const SyncSystemOutput = createAppModule({\n    name: \"SyncSystemOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = getSyncSystemOutput({\n                env: app.params.run.env\n            });\n\n            const keys = Object.keys(output || {});\n\n            if (keys.length === 0) {\n                console.log(\"Sync System application is not deployed.\");\n                return null;\n            }\n            return output;\n        });\n    }\n});\n"],"mappings":";;;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,oBAAA,GAAAD,OAAA;AAIO,MAAME,gBAAgB,GAAAC,OAAA,CAAAD,gBAAA,GAAG,IAAAE,uBAAe,EAAC;EAC5CC,IAAI,EAAE,kBAAkB;EACxBC,MAAMA,CAACC,GAAG,EAAE;IACR,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY;MAC9B,MAAMC,MAAM,GAAG,IAAAC,wCAAmB,EAAC;QAC/BC,GAAG,EAAEJ,GAAG,CAACK,MAAM,CAACC,GAAG,CAACF;MACxB,CAAC,CAAC;MAEF,MAAMG,IAAI,GAAGC,MAAM,CAACD,IAAI,CAACL,MAAM,IAAI,CAAC,CAAC,CAAC;MAEtC,IAAIK,IAAI,CAACE,MAAM,KAAK,CAAC,EAAE;QACnBC,OAAO,CAACC,GAAG,CAAC,0CAA0C,CAAC;QACvD,OAAO,IAAI;MACf;MACA,OAAOT,MAAM;IACjB,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/SyncSystemResolverLambda.d.ts

@@ -0,0 +1,8 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type SyncSystemResolverLambda = PulumiAppModule<typeof SyncSystemResolverLambda>;
+export declare const SyncSystemResolverLambda: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+    policy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy.js").Policy>;
+    lambda: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+    eventSourceMapping: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/eventSourceMapping.js").EventSourceMapping>;
+}, void>;

package/apps/syncSystem/SyncSystemResolverLambda.js

@@ -0,0 +1,78 @@
+"use strict";
+
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SyncSystemResolverLambda = void 0;
+var _path = _interopRequireDefault(require("path"));
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+var _pulumi = require("@webiny/pulumi");
+var _lambdaUtils = require("../lambdaUtils.js");
+var _constants = require("../../constants.js");
+var _createSyncSystemResolverLambdaPolicy = require("./lambda/createSyncSystemResolverLambdaPolicy.js");
+var _createSyncResourceName = require("./createSyncResourceName.js");
+var _createAssetArchive = require("../../utils/createAssetArchive.js");
+var _SyncSystemSQS = require("./SyncSystemSQS.js");
+var _SyncSystemDynamoDb = require("./SyncSystemDynamoDb.js");
+var _SyncSystemWorkerLambda = require("./SyncSystemWorkerLambda.js");
+const SyncSystemResolverLambda = exports.SyncSystemResolverLambda = (0, _pulumi.createAppModule)({
+  name: "SyncSystemResolverLambda",
+  config(app) {
+    const {
+      sqsQueue
+    } = app.getModule(_SyncSystemSQS.SyncSystemSQS);
+    const dynamoDb = app.getModule(_SyncSystemDynamoDb.SyncSystemDynamoDb);
+    const {
+      lambda: workerLambda
+    } = app.getModule(_SyncSystemWorkerLambda.SyncSystemWorkerLambda);
+    const roleName = (0, _createSyncResourceName.createSyncResourceName)("resolver-lambda-role");
+    const policy = (0, _createSyncSystemResolverLambdaPolicy.createSyncSystemResolverLambdaPolicy)({
+      name: `${roleName}-policy`,
+      app
+    });
+    const role = (0, _lambdaUtils.createLambdaRoleWithoutVpc)(app, {
+      name: roleName,
+      policy: policy.output
+    });
+    const lambda = app.addResource(aws.lambda.Function, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("resolver-lambda"),
+      config: {
+        runtime: _constants.LAMBDA_RUNTIME,
+        handler: "handler.handler",
+        role: role.output.arn,
+        timeout: 900,
+        memorySize: 512,
+        code: (0, _createAssetArchive.createAssetArchive)(_path.default.join(app.paths.workspace, "resolver/build")),
+        environment: {
+          variables: {
+            DB_TABLE: dynamoDb.output.name,
+            AWS_SYNC_WORKER_LAMBDA_ARN: workerLambda.output.arn,
+            DEBUG: String(process.env.DEBUG),
+            PULUMI_APPS: "true",
+            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
+          }
+        }
+      }
+    });
+    const eventSourceMapping = app.addResource(aws.lambda.EventSourceMapping, {
+      name: (0, _createSyncResourceName.createSyncResourceName)("sqs-to-resolver-lambda"),
+      config: {
+        enabled: true,
+        eventSourceArn: sqsQueue.output.arn,
+        functionName: lambda.output.arn,
+        batchSize: 1
+        // maximumBatchingWindowInSeconds: 2
+      }
+    });
+    return {
+      role,
+      policy,
+      lambda,
+      eventSourceMapping
+    };
+  }
+});
+
+//# sourceMappingURL=SyncSystemResolverLambda.js.map

package/apps/syncSystem/SyncSystemResolverLambda.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_path","_interopRequireDefault","require","aws","_interopRequireWildcard","_pulumi","_lambdaUtils","_constants","_createSyncSystemResolverLambdaPolicy","_createSyncResourceName","_createAssetArchive","_SyncSystemSQS","_SyncSystemDynamoDb","_SyncSystemWorkerLambda","SyncSystemResolverLambda","exports","createAppModule","name","config","app","sqsQueue","getModule","SyncSystemSQS","dynamoDb","SyncSystemDynamoDb","lambda","workerLambda","SyncSystemWorkerLambda","roleName","createSyncResourceName","policy","createSyncSystemResolverLambdaPolicy","role","createLambdaRoleWithoutVpc","output","addResource","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","createAssetArchive","path","join","paths","workspace","environment","variables","DB_TABLE","AWS_SYNC_WORKER_LAMBDA_ARN","DEBUG","String","process","env","PULUMI_APPS","AWS_NODEJS_CONNECTION_REUSE_ENABLED","eventSourceMapping","EventSourceMapping","enabled","eventSourceArn","functionName","batchSize"],"sources":["SyncSystemResolverLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createLambdaRoleWithoutVpc } from \"../lambdaUtils.js\";\nimport { LAMBDA_RUNTIME } from \"~/constants.js\";\nimport { createSyncSystemResolverLambdaPolicy } from \"./lambda/createSyncSystemResolverLambdaPolicy.js\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\nimport { createAssetArchive } from \"~/utils/createAssetArchive.js\";\nimport { SyncSystemSQS } from \"./SyncSystemSQS.js\";\nimport { SyncSystemDynamoDb } from \"~/apps/syncSystem/SyncSystemDynamoDb.js\";\nimport { SyncSystemWorkerLambda } from \"~/apps/syncSystem/SyncSystemWorkerLambda.js\";\n\nexport type SyncSystemResolverLambda = PulumiAppModule<typeof SyncSystemResolverLambda>;\n\nexport const SyncSystemResolverLambda = createAppModule({\n    name: \"SyncSystemResolverLambda\",\n    config(app: PulumiApp) {\n        const { sqsQueue } = app.getModule(SyncSystemSQS);\n        const dynamoDb = app.getModule(SyncSystemDynamoDb);\n\n        const { lambda: workerLambda } = app.getModule(SyncSystemWorkerLambda);\n\n        const roleName = createSyncResourceName(\"resolver-lambda-role\");\n        const policy = createSyncSystemResolverLambdaPolicy({\n            name: `${roleName}-policy`,\n            app\n        });\n        const role = createLambdaRoleWithoutVpc(app, {\n            name: roleName,\n            policy: policy.output\n        });\n\n        const lambda = app.addResource(aws.lambda.Function, {\n            name: createSyncResourceName(\"resolver-lambda\"),\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 512,\n                code: createAssetArchive(path.join(app.paths.workspace, \"resolver/build\")),\n                environment: {\n                    variables: {\n                        DB_TABLE: dynamoDb.output.name,\n                        AWS_SYNC_WORKER_LAMBDA_ARN: workerLambda.output.arn,\n                        DEBUG: String(process.env.DEBUG),\n                        PULUMI_APPS: \"true\",\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }\n                }\n            }\n        });\n\n        const eventSourceMapping = app.addResource(aws.lambda.EventSourceMapping, {\n            name: createSyncResourceName(\"sqs-to-resolver-lambda\"),\n            config: {\n                enabled: true,\n                eventSourceArn: sqsQueue.output.arn,\n                functionName: lambda.output.arn,\n                batchSize: 1\n                // maximumBatchingWindowInSeconds: 2\n            }\n        });\n\n        return {\n            role,\n            policy,\n            lambda,\n            eventSourceMapping\n        };\n    }\n});\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAC,uBAAA,CAAAF,OAAA;AAEA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AACA,IAAAM,qCAAA,GAAAN,OAAA;AACA,IAAAO,uBAAA,GAAAP,OAAA;AACA,IAAAQ,mBAAA,GAAAR,OAAA;AACA,IAAAS,cAAA,GAAAT,OAAA;AACA,IAAAU,mBAAA,GAAAV,OAAA;AACA,IAAAW,uBAAA,GAAAX,OAAA;AAIO,MAAMY,wBAAwB,GAAAC,OAAA,CAAAD,wBAAA,GAAG,IAAAE,uBAAe,EAAC;EACpDC,IAAI,EAAE,0BAA0B;EAChCC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAM;MAAEC;IAAS,CAAC,GAAGD,GAAG,CAACE,SAAS,CAACC,4BAAa,CAAC;IACjD,MAAMC,QAAQ,GAAGJ,GAAG,CAACE,SAAS,CAACG,sCAAkB,CAAC;IAElD,MAAM;MAAEC,MAAM,EAAEC;IAAa,CAAC,GAAGP,GAAG,CAACE,SAAS,CAACM,8CAAsB,CAAC;IAEtE,MAAMC,QAAQ,GAAG,IAAAC,8CAAsB,EAAC,sBAAsB,CAAC;IAC/D,MAAMC,MAAM,GAAG,IAAAC,0EAAoC,EAAC;MAChDd,IAAI,EAAE,GAAGW,QAAQ,SAAS;MAC1BT;IACJ,CAAC,CAAC;IACF,MAAMa,IAAI,GAAG,IAAAC,uCAA0B,EAACd,GAAG,EAAE;MACzCF,IAAI,EAAEW,QAAQ;MACdE,MAAM,EAAEA,MAAM,CAACI;IACnB,CAAC,CAAC;IAEF,MAAMT,MAAM,GAAGN,GAAG,CAACgB,WAAW,CAAChC,GAAG,CAACsB,MAAM,CAACW,QAAQ,EAAE;MAChDnB,IAAI,EAAE,IAAAY,8CAAsB,EAAC,iBAAiB,CAAC;MAC/CX,MAAM,EAAE;QACJmB,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1BP,IAAI,EAAEA,IAAI,CAACE,MAAM,CAACM,GAAG;QACrBC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,GAAG;QACfC,IAAI,EAAE,IAAAC,sCAAkB,EAACC,aAAI,CAACC,IAAI,CAAC3B,GAAG,CAAC4B,KAAK,CAACC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC1EC,WAAW,EAAE;UACTC,SAAS,EAAE;YACPC,QAAQ,EAAE5B,QAAQ,CAACW,MAAM,CAACjB,IAAI;YAC9BmC,0BAA0B,EAAE1B,YAAY,CAACQ,MAAM,CAACM,GAAG;YACnDa,KAAK,EAAEC,MAAM,CAACC,OAAO,CAACC,GAAG,CAACH,KAAK,CAAC;YAChCI,WAAW,EAAE,MAAM;YACnBC,mCAAmC,EAAE;UACzC;QACJ;MACJ;IACJ,CAAC,CAAC;IAEF,MAAMC,kBAAkB,GAAGxC,GAAG,CAACgB,WAAW,CAAChC,GAAG,CAACsB,MAAM,CAACmC,kBAAkB,EAAE;MACtE3C,IAAI,EAAE,IAAAY,8CAAsB,EAAC,wBAAwB,CAAC;MACtDX,MAAM,EAAE;QACJ2C,OAAO,EAAE,IAAI;QACbC,cAAc,EAAE1C,QAAQ,CAACc,MAAM,CAACM,GAAG;QACnCuB,YAAY,EAAEtC,MAAM,CAACS,MAAM,CAACM,GAAG;QAC/BwB,SAAS,EAAE;QACX;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACHhC,IAAI;MACJF,MAAM;MACNL,MAAM;MACNkC;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/SyncSystemSQS.d.ts

@@ -1,4 +1,3 @@
-export interface ISyncSystemSQSParams {
-    protect: boolean;
-}
-export declare const SyncSystemSQS: import("@webiny/pulumi").PulumiAppModuleDefinition<import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sqs/queue").Queue>, ISyncSystemSQSParams>;
+export declare const SyncSystemSQS: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    sqsQueue: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sqs/queue.js").Queue>;
+}, void>;

package/apps/syncSystem/SyncSystemSQS.js

@@ -7,33 +7,54 @@ Object.defineProperty(exports, "__esModule", {
 exports.SyncSystemSQS = void 0;
 var aws = _interopRequireWildcard(require("@pulumi/aws"));
 var _pulumi = require("@webiny/pulumi");
+var _createSyncResourceName = require("./createSyncResourceName.js");
 const SyncSystemSQS = exports.SyncSystemSQS = (0, _pulumi.createAppModule)({
   name: "SyncSystemSQS",
-  config: (app, params) => {
+  config: app => {
     const config = {
+      /**
+       * We must name the SQS queue with a ".fifo" suffix to enable FIFO functionality.
+       * If we add .fifo to a resource name, it will fail because pulumi adds some random generated id + .fifo to the end of the name.
+       * ... and there cannot be two .fifo in the name.
+       */
+      name: `${(0, _createSyncResourceName.createSyncResourceName)("sqs")}.fifo`,
       delaySeconds: 0,
+      /**
+       * 5 minutes should be enough for the message to be processed.
+       */
       visibilityTimeoutSeconds: 900,
       fifoQueue: true,
       receiveWaitTimeSeconds: 0,
+      deduplicationScope: "queue",
       /**
        * The maximum message size is 256 KB.
-       * Is it enough? If not, we can use S3 to store the message and only store the reference in the queue.
+       * Chunks are billed in 64KB increments, so let's keep the message size below that.
        */
-      maxMessageSize: 262144,
-      // max
+      maxMessageSize: 60 * 1024,
+      // KB
       /**
        * How log do we keep the message in the queue?
-       * Something is very wrong if the message is not processed within 4 days... :/
        */
-      messageRetentionSeconds: 345600 // default - 4 days
+      messageRetentionSeconds: 4 /* days */ * 24 * 60 * 60,
+      /**
+       * No need to encrypt the message as nothing outside the system can actually read it.
+       */
+      sqsManagedSseEnabled: false,
+      /**
+       * We want to make sure that no message is sent more than once.
+       *
+       * TODO: determine if the criteria by which will we create a hash for the ID.
+       * TODO: must set "MessageDeduplicationId" property when creating the message.
+       */
+      contentBasedDeduplication: true
     };
-    return app.addResource(aws.sqs.Queue, {
-      name: "sync-sqs",
-      config,
-      opts: {
-        protect: params.protect
-      }
+    const sqsQueue = app.addResource(aws.sqs.Queue, {
+      name: `${(0, _createSyncResourceName.createSyncResourceName)("sqs")}`,
+      config
     });
+    return {
+      sqsQueue
+    };
   }
 });
 

package/apps/syncSystem/SyncSystemSQS.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","_interopRequireWildcard","require","_pulumi","SyncSystemSQS","exports","createAppModule","name","config","app","params","delaySeconds","visibilityTimeoutSeconds","fifoQueue","receiveWaitTimeSeconds","maxMessageSize","messageRetentionSeconds","addResource","sqs","Queue","opts","protect"],"sources":["SyncSystemSQS.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { QueueArgs } from \"@pulumi/aws/sqs\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\n\nexport interface ISyncSystemSQSParams {\n    protect: boolean;\n}\n\nexport const SyncSystemSQS = createAppModule({\n    name: \"SyncSystemSQS\",\n    config: (app: PulumiApp, params: ISyncSystemSQSParams) => {\n        const config: QueueArgs = {\n            delaySeconds: 0,\n            visibilityTimeoutSeconds: 900,\n            fifoQueue: true,\n            receiveWaitTimeSeconds: 0,\n            /**\n             * The maximum message size is 256 KB.\n             * Is it enough? If not, we can use S3 to store the message and only store the reference in the queue.\n             */\n            maxMessageSize: 262144, // max\n            /**\n             * How log do we keep the message in the queue?\n             * Something is very wrong if the message is not processed within 4 days... :/\n             */\n            messageRetentionSeconds: 345600 // default - 4 days\n        };\n        return app.addResource(aws.sqs.Queue, {\n            name: \"sync-sqs\",\n            config,\n            opts: {\n                protect: params.protect\n            }\n        });\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AAGA,IAAAC,OAAA,GAAAD,OAAA;AAMO,MAAME,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,IAAAE,uBAAe,EAAC;EACzCC,IAAI,EAAE,eAAe;EACrBC,MAAM,EAAEA,CAACC,GAAc,EAAEC,MAA4B,KAAK;IACtD,MAAMF,MAAiB,GAAG;MACtBG,YAAY,EAAE,CAAC;MACfC,wBAAwB,EAAE,GAAG;MAC7BC,SAAS,EAAE,IAAI;MACfC,sBAAsB,EAAE,CAAC;MACzB;AACZ;AACA;AACA;MACYC,cAAc,EAAE,MAAM;MAAE;MACxB;AACZ;AACA;AACA;MACYC,uBAAuB,EAAE,MAAM,CAAC;IACpC,CAAC;IACD,OAAOP,GAAG,CAACQ,WAAW,CAACjB,GAAG,CAACkB,GAAG,CAACC,KAAK,EAAE;MAClCZ,IAAI,EAAE,UAAU;MAChBC,MAAM;MACNY,IAAI,EAAE;QACFC,OAAO,EAAEX,MAAM,CAACW;MACpB;IACJ,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["aws","_interopRequireWildcard","require","_pulumi","_createSyncResourceName","SyncSystemSQS","exports","createAppModule","name","config","app","createSyncResourceName","delaySeconds","visibilityTimeoutSeconds","fifoQueue","receiveWaitTimeSeconds","deduplicationScope","maxMessageSize","messageRetentionSeconds","sqsManagedSseEnabled","contentBasedDeduplication","sqsQueue","addResource","sqs","Queue"],"sources":["SyncSystemSQS.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport type { QueueArgs } from \"@pulumi/aws/sqs\";\nimport type { PulumiApp } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\n\nexport const SyncSystemSQS = createAppModule({\n    name: \"SyncSystemSQS\",\n    config: (app: PulumiApp) => {\n        const config: QueueArgs = {\n            /**\n             * We must name the SQS queue with a \".fifo\" suffix to enable FIFO functionality.\n             * If we add .fifo to a resource name, it will fail because pulumi adds some random generated id + .fifo to the end of the name.\n             * ... and there cannot be two .fifo in the name.\n             */\n            name: `${createSyncResourceName(\"sqs\")}.fifo`,\n            delaySeconds: 0,\n            /**\n             * 5 minutes should be enough for the message to be processed.\n             */\n            visibilityTimeoutSeconds: 900,\n            fifoQueue: true,\n            receiveWaitTimeSeconds: 0,\n            deduplicationScope: \"queue\",\n            /**\n             * The maximum message size is 256 KB.\n             * Chunks are billed in 64KB increments, so let's keep the message size below that.\n             */\n            maxMessageSize: 60 * 1024, // KB\n            /**\n             * How log do we keep the message in the queue?\n             */\n            messageRetentionSeconds: 4 /* days */ * 24 * 60 * 60,\n            /**\n             * No need to encrypt the message as nothing outside the system can actually read it.\n             */\n            sqsManagedSseEnabled: false,\n            /**\n             * We want to make sure that no message is sent more than once.\n             *\n             * TODO: determine if the criteria by which will we create a hash for the ID.\n             * TODO: must set \"MessageDeduplicationId\" property when creating the message.\n             */\n            contentBasedDeduplication: true\n        };\n\n        const sqsQueue = app.addResource(aws.sqs.Queue, {\n            name: `${createSyncResourceName(\"sqs\")}`,\n            config\n        });\n\n        return {\n            sqsQueue\n        };\n    }\n});\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,uBAAA,CAAAC,OAAA;AAGA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,uBAAA,GAAAF,OAAA;AAEO,MAAMG,aAAa,GAAAC,OAAA,CAAAD,aAAA,GAAG,IAAAE,uBAAe,EAAC;EACzCC,IAAI,EAAE,eAAe;EACrBC,MAAM,EAAGC,GAAc,IAAK;IACxB,MAAMD,MAAiB,GAAG;MACtB;AACZ;AACA;AACA;AACA;MACYD,IAAI,EAAE,GAAG,IAAAG,8CAAsB,EAAC,KAAK,CAAC,OAAO;MAC7CC,YAAY,EAAE,CAAC;MACf;AACZ;AACA;MACYC,wBAAwB,EAAE,GAAG;MAC7BC,SAAS,EAAE,IAAI;MACfC,sBAAsB,EAAE,CAAC;MACzBC,kBAAkB,EAAE,OAAO;MAC3B;AACZ;AACA;AACA;MACYC,cAAc,EAAE,EAAE,GAAG,IAAI;MAAE;MAC3B;AACZ;AACA;MACYC,uBAAuB,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE;MACpD;AACZ;AACA;MACYC,oBAAoB,EAAE,KAAK;MAC3B;AACZ;AACA;AACA;AACA;AACA;MACYC,yBAAyB,EAAE;IAC/B,CAAC;IAED,MAAMC,QAAQ,GAAGX,GAAG,CAACY,WAAW,CAACtB,GAAG,CAACuB,GAAG,CAACC,KAAK,EAAE;MAC5ChB,IAAI,EAAE,GAAG,IAAAG,8CAAsB,EAAC,KAAK,CAAC,EAAE;MACxCF;IACJ,CAAC,CAAC;IAEF,OAAO;MACHY;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/SyncSystemWorkerLambda.d.ts

@@ -0,0 +1,7 @@
+import type { PulumiAppModule } from "@webiny/pulumi";
+export type SyncSystemWorkerLambda = PulumiAppModule<typeof SyncSystemWorkerLambda>;
+export declare const SyncSystemWorkerLambda: import("@webiny/pulumi").PulumiAppModuleDefinition<{
+    role: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/role.js").Role>;
+    policy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment.js").RolePolicyAttachment>;
+    lambda: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
+}, void>;

package/apps/syncSystem/SyncSystemWorkerLambda.js

@@ -0,0 +1,57 @@
+"use strict";
+
+var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard").default;
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SyncSystemWorkerLambda = void 0;
+var _path = _interopRequireDefault(require("path"));
+var aws = _interopRequireWildcard(require("@pulumi/aws"));
+var _pulumi = require("@webiny/pulumi");
+var _constants = require("../../constants.js");
+var _createSyncResourceName = require("./createSyncResourceName.js");
+var _createAssetArchive = require("../../utils/createAssetArchive.js");
+var _lambdaUtils = require("../lambdaUtils.js");
+const SyncSystemWorkerLambda = exports.SyncSystemWorkerLambda = (0, _pulumi.createAppModule)({
+  name: "SyncSystemWorkerLambda",
+  config(app) {
+    const lambdaName = (0, _createSyncResourceName.createSyncResourceName)("worker-lambda");
+    const roleName = `${lambdaName}-role`;
+    const role = (0, _lambdaUtils.createLambdaRoleWithoutVpc)(app, {
+      name: roleName
+    });
+    const policy = app.addResource(aws.iam.RolePolicyAttachment, {
+      name: `${roleName}-policy-attachment`,
+      config: {
+        role: role.output.name,
+        policyArn: aws.iam.ManagedPolicies.AWSLambdaBasicExecutionRole
+      }
+    });
+    const lambda = app.addResource(aws.lambda.Function, {
+      name: lambdaName,
+      config: {
+        runtime: _constants.LAMBDA_RUNTIME,
+        handler: "handler.handler",
+        role: role.output.arn,
+        timeout: 900,
+        memorySize: 512,
+        code: (0, _createAssetArchive.createAssetArchive)(_path.default.join(app.paths.workspace, "worker/build")),
+        environment: {
+          variables: {
+            DEBUG: String(process.env.DEBUG),
+            PULUMI_APPS: "true",
+            AWS_NODEJS_CONNECTION_REUSE_ENABLED: "1"
+          }
+        }
+      }
+    });
+    return {
+      role,
+      policy,
+      lambda
+    };
+  }
+});
+
+//# sourceMappingURL=SyncSystemWorkerLambda.js.map

package/apps/syncSystem/SyncSystemWorkerLambda.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_path","_interopRequireDefault","require","aws","_interopRequireWildcard","_pulumi","_constants","_createSyncResourceName","_createAssetArchive","_lambdaUtils","SyncSystemWorkerLambda","exports","createAppModule","name","config","app","lambdaName","createSyncResourceName","roleName","role","createLambdaRoleWithoutVpc","policy","addResource","iam","RolePolicyAttachment","output","policyArn","ManagedPolicies","AWSLambdaBasicExecutionRole","lambda","Function","runtime","LAMBDA_RUNTIME","handler","arn","timeout","memorySize","code","createAssetArchive","path","join","paths","workspace","environment","variables","DEBUG","String","process","env","PULUMI_APPS","AWS_NODEJS_CONNECTION_REUSE_ENABLED"],"sources":["SyncSystemWorkerLambda.ts"],"sourcesContent":["import path from \"path\";\nimport * as aws from \"@pulumi/aws\";\nimport type { PulumiApp, PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { LAMBDA_RUNTIME } from \"~/constants.js\";\nimport { createSyncResourceName } from \"./createSyncResourceName.js\";\nimport { createAssetArchive } from \"~/utils/createAssetArchive.js\";\nimport { createLambdaRoleWithoutVpc } from \"~/apps/lambdaUtils.js\";\n\nexport type SyncSystemWorkerLambda = PulumiAppModule<typeof SyncSystemWorkerLambda>;\n\nexport const SyncSystemWorkerLambda = createAppModule({\n    name: \"SyncSystemWorkerLambda\",\n    config(app: PulumiApp) {\n        const lambdaName = createSyncResourceName(\"worker-lambda\");\n        const roleName = `${lambdaName}-role`;\n\n        const role = createLambdaRoleWithoutVpc(app, {\n            name: roleName\n        });\n\n        const policy = app.addResource(aws.iam.RolePolicyAttachment, {\n            name: `${roleName}-policy-attachment`,\n            config: {\n                role: role.output.name,\n                policyArn: aws.iam.ManagedPolicies.AWSLambdaBasicExecutionRole\n            }\n        });\n\n        const lambda = app.addResource(aws.lambda.Function, {\n            name: lambdaName,\n            config: {\n                runtime: LAMBDA_RUNTIME,\n                handler: \"handler.handler\",\n                role: role.output.arn,\n                timeout: 900,\n                memorySize: 512,\n                code: createAssetArchive(path.join(app.paths.workspace, \"worker/build\")),\n                environment: {\n                    variables: {\n                        DEBUG: String(process.env.DEBUG),\n                        PULUMI_APPS: \"true\",\n                        AWS_NODEJS_CONNECTION_REUSE_ENABLED: \"1\"\n                    }\n                }\n            }\n        });\n\n        return {\n            role,\n            policy,\n            lambda\n        };\n    }\n});\n"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,GAAA,GAAAC,uBAAA,CAAAF,OAAA;AAEA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AACA,IAAAK,uBAAA,GAAAL,OAAA;AACA,IAAAM,mBAAA,GAAAN,OAAA;AACA,IAAAO,YAAA,GAAAP,OAAA;AAIO,MAAMQ,sBAAsB,GAAAC,OAAA,CAAAD,sBAAA,GAAG,IAAAE,uBAAe,EAAC;EAClDC,IAAI,EAAE,wBAAwB;EAC9BC,MAAMA,CAACC,GAAc,EAAE;IACnB,MAAMC,UAAU,GAAG,IAAAC,8CAAsB,EAAC,eAAe,CAAC;IAC1D,MAAMC,QAAQ,GAAG,GAAGF,UAAU,OAAO;IAErC,MAAMG,IAAI,GAAG,IAAAC,uCAA0B,EAACL,GAAG,EAAE;MACzCF,IAAI,EAAEK;IACV,CAAC,CAAC;IAEF,MAAMG,MAAM,GAAGN,GAAG,CAACO,WAAW,CAACnB,GAAG,CAACoB,GAAG,CAACC,oBAAoB,EAAE;MACzDX,IAAI,EAAE,GAAGK,QAAQ,oBAAoB;MACrCJ,MAAM,EAAE;QACJK,IAAI,EAAEA,IAAI,CAACM,MAAM,CAACZ,IAAI;QACtBa,SAAS,EAAEvB,GAAG,CAACoB,GAAG,CAACI,eAAe,CAACC;MACvC;IACJ,CAAC,CAAC;IAEF,MAAMC,MAAM,GAAGd,GAAG,CAACO,WAAW,CAACnB,GAAG,CAAC0B,MAAM,CAACC,QAAQ,EAAE;MAChDjB,IAAI,EAAEG,UAAU;MAChBF,MAAM,EAAE;QACJiB,OAAO,EAAEC,yBAAc;QACvBC,OAAO,EAAE,iBAAiB;QAC1Bd,IAAI,EAAEA,IAAI,CAACM,MAAM,CAACS,GAAG;QACrBC,OAAO,EAAE,GAAG;QACZC,UAAU,EAAE,GAAG;QACfC,IAAI,EAAE,IAAAC,sCAAkB,EAACC,aAAI,CAACC,IAAI,CAACzB,GAAG,CAAC0B,KAAK,CAACC,SAAS,EAAE,cAAc,CAAC,CAAC;QACxEC,WAAW,EAAE;UACTC,SAAS,EAAE;YACPC,KAAK,EAAEC,MAAM,CAACC,OAAO,CAACC,GAAG,CAACH,KAAK,CAAC;YAChCI,WAAW,EAAE,MAAM;YACnBC,mCAAmC,EAAE;UACzC;QACJ;MACJ;IACJ,CAAC,CAAC;IAEF,OAAO;MACH/B,IAAI;MACJE,MAAM;MACNQ;IACJ,CAAC;EACL;AACJ,CAAC,CAAC","ignoreList":[]}

package/apps/syncSystem/api/addServiceManifest.d.ts

@@ -0,0 +1,8 @@
+import type { PulumiApp } from "@webiny/pulumi";
+import type { IGetSyncSystemOutputResult } from "../types.js";
+import type { WithServiceManifest } from "../../../utils/withServiceManifest.js";
+export interface IAddServiceManifestParams {
+    app: PulumiApp & WithServiceManifest;
+    syncSystem: IGetSyncSystemOutputResult;
+}
+export declare const addServiceManifest: (params: IAddServiceManifestParams) => void;

package/apps/syncSystem/api/addServiceManifest.js

@@ -0,0 +1,25 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.addServiceManifest = void 0;
+const addServiceManifest = params => {
+  const {
+    app,
+    syncSystem
+  } = params;
+  app.addHandler(() => {
+    app.addServiceManifest({
+      name: "sync",
+      manifest: {
+        eventBusArn: syncSystem.eventBusArn,
+        eventBusName: syncSystem.eventBusName,
+        region: syncSystem.region
+      }
+    });
+  });
+};
+exports.addServiceManifest = addServiceManifest;
+
+//# sourceMappingURL=addServiceManifest.js.map

package/apps/syncSystem/api/addServiceManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["addServiceManifest","params","app","syncSystem","addHandler","name","manifest","eventBusArn","eventBusName","region","exports"],"sources":["addServiceManifest.ts"],"sourcesContent":["import type { PulumiApp } from \"@webiny/pulumi\";\nimport type { IGetSyncSystemOutputResult } from \"~/apps/syncSystem/types.js\";\nimport type { WithServiceManifest } from \"~/utils/withServiceManifest.js\";\n\nexport interface IAddServiceManifestParams {\n    app: PulumiApp & WithServiceManifest;\n    syncSystem: IGetSyncSystemOutputResult;\n}\n\nexport const addServiceManifest = (params: IAddServiceManifestParams) => {\n    const { app, syncSystem } = params;\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"sync\",\n            manifest: {\n                eventBusArn: syncSystem.eventBusArn,\n                eventBusName: syncSystem.eventBusName,\n                region: syncSystem.region\n            }\n        });\n    });\n};\n"],"mappings":";;;;;;AASO,MAAMA,kBAAkB,GAAIC,MAAiC,IAAK;EACrE,MAAM;IAAEC,GAAG;IAAEC;EAAW,CAAC,GAAGF,MAAM;EAElCC,GAAG,CAACE,UAAU,CAAC,MAAM;IACjBF,GAAG,CAACF,kBAAkB,CAAC;MACnBK,IAAI,EAAE,MAAM;MACZC,QAAQ,EAAE;QACNC,WAAW,EAAEJ,UAAU,CAACI,WAAW;QACnCC,YAAY,EAAEL,UAAU,CAACK,YAAY;QACrCC,MAAM,EAAEN,UAAU,CAACM;MACvB;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC;AAACC,OAAA,CAAAV,kBAAA,GAAAA,kBAAA","ignoreList":[]}

package/apps/syncSystem/api/attachCognitoPermissions.d.ts

@@ -0,0 +1,14 @@
+import type { PulumiApp } from "@webiny/pulumi";
+import type { WithServiceManifest } from "../../../utils/withServiceManifest.js";
+import type { IGetSyncSystemOutputResult } from "../types.js";
+import type { CoreOutput } from "../../index.js";
+export interface IAttachCognitoPermissionsParams {
+    app: PulumiApp & WithServiceManifest;
+    syncSystem: IGetSyncSystemOutputResult;
+    core: CoreOutput;
+}
+export declare const attachCognitoPermissions: (params: IAttachCognitoPermissionsParams) => {
+    cognitoPolicy: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/policy").Policy>;
+    workerLambdaS3PolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
+    resolverLambdaS3PolicyAttachment: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/iam/rolePolicyAttachment").RolePolicyAttachment>;
+} | null;