@wraps.dev/cli 2.22.4 → 2.22.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/api-lambda.zip
CHANGED
|
Binary file
|
package/dist/cli.js
CHANGED
|
@@ -34309,22 +34309,51 @@ The deployment may have failed partway through. Re-run ${pc48.cyan("wraps selfho
|
|
|
34309
34309
|
"# ============================================================================="
|
|
34310
34310
|
);
|
|
34311
34311
|
console.log("#");
|
|
34312
|
-
console.log("# 1. In
|
|
34312
|
+
console.log("# 1. In AWS IAM \u2192 Identity providers \u2192 Add provider:");
|
|
34313
|
+
console.log("# Provider type: OpenID Connect");
|
|
34314
|
+
console.log("# Provider URL: https://oidc.vercel.com/<team-slug>");
|
|
34315
|
+
console.log("# Audience: https://vercel.com/<team-slug>");
|
|
34316
|
+
console.log("#");
|
|
34313
34317
|
console.log(
|
|
34314
|
-
"#
|
|
34318
|
+
"# 3. Create an IAM role in this account with the following trust policy,"
|
|
34315
34319
|
);
|
|
34320
|
+
console.log("# replacing <team-slug> with your Vercel team slug:");
|
|
34316
34321
|
console.log("#");
|
|
34317
|
-
console.log("#
|
|
34318
|
-
console.log("
|
|
34319
|
-
console.log("
|
|
34320
|
-
console.log("
|
|
34321
|
-
console.log("
|
|
34322
|
+
console.log("# {");
|
|
34323
|
+
console.log(`# "Version": "2012-10-17",`);
|
|
34324
|
+
console.log(`# "Statement": [{`);
|
|
34325
|
+
console.log(`# "Effect": "Allow",`);
|
|
34326
|
+
console.log(`# "Principal": {`);
|
|
34327
|
+
console.log(
|
|
34328
|
+
`# "Federated": "arn:aws:iam::${identity.accountId}:oidc-provider/oidc.vercel.com/<team-slug>"`
|
|
34329
|
+
);
|
|
34330
|
+
console.log("# },");
|
|
34331
|
+
console.log(`# "Action": "sts:AssumeRoleWithWebIdentity",`);
|
|
34332
|
+
console.log(`# "Condition": {`);
|
|
34333
|
+
console.log(`# "StringEquals": {`);
|
|
34334
|
+
console.log(
|
|
34335
|
+
`# "oidc.vercel.com/<team-slug>:aud": "https://vercel.com/<team-slug>",`
|
|
34336
|
+
);
|
|
34322
34337
|
console.log(
|
|
34323
|
-
"
|
|
34338
|
+
`# "oidc.vercel.com/<team-slug>:sub": "owner:<team-slug>:project:<project-name>:environment:production"`
|
|
34324
34339
|
);
|
|
34340
|
+
console.log("# }");
|
|
34341
|
+
console.log("# }");
|
|
34342
|
+
console.log("# }]");
|
|
34343
|
+
console.log("# }");
|
|
34344
|
+
console.log("#");
|
|
34345
|
+
console.log("# Attach this permission policy to the role:");
|
|
34346
|
+
console.log("#");
|
|
34347
|
+
console.log("# {");
|
|
34348
|
+
console.log(`# "Version": "2012-10-17",`);
|
|
34349
|
+
console.log(`# "Statement": [{`);
|
|
34350
|
+
console.log(`# "Effect": "Allow",`);
|
|
34351
|
+
console.log(`# "Action": "sts:AssumeRole",`);
|
|
34325
34352
|
console.log(
|
|
34326
|
-
`#
|
|
34353
|
+
`# "Resource": "arn:aws:iam::*:role/wraps-console-access-role"`
|
|
34327
34354
|
);
|
|
34355
|
+
console.log("# }]");
|
|
34356
|
+
console.log("# }");
|
|
34328
34357
|
console.log("#");
|
|
34329
34358
|
console.log("# 4. Set AWS_ROLE_ARN to that role's ARN in Vercel:");
|
|
34330
34359
|
console.log(
|