@wraps.dev/cli 2.22.4 → 2.22.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Binary file
package/dist/cli.js CHANGED
@@ -34309,22 +34309,51 @@ The deployment may have failed partway through. Re-run ${pc48.cyan("wraps selfho
34309
34309
  "# ============================================================================="
34310
34310
  );
34311
34311
  console.log("#");
34312
- console.log("# 1. In Vercel: Project Settings \u2192 Cloud \u2192 Configure AWS");
34312
+ console.log("# 1. In AWS IAM \u2192 Identity providers \u2192 Add provider:");
34313
+ console.log("# Provider type: OpenID Connect");
34314
+ console.log("# Provider URL: https://oidc.vercel.com/<team-slug>");
34315
+ console.log("# Audience: https://vercel.com/<team-slug>");
34316
+ console.log("#");
34313
34317
  console.log(
34314
- "# Copy the OIDC Provider URL (looks like https://oidc.vercel.com/<team-id>)"
34318
+ "# 3. Create an IAM role in this account with the following trust policy,"
34315
34319
  );
34320
+ console.log("# replacing <team-slug> with your Vercel team slug:");
34316
34321
  console.log("#");
34317
- console.log("# 2. In AWS IAM \u2192 Identity providers \u2192 Add provider:");
34318
- console.log("# Provider type: OpenID Connect");
34319
- console.log("# Provider URL: <your Vercel OIDC URL from step 1>");
34320
- console.log("# Audience: sts.amazonaws.com");
34321
- console.log("#");
34322
+ console.log("# {");
34323
+ console.log(`# "Version": "2012-10-17",`);
34324
+ console.log(`# "Statement": [{`);
34325
+ console.log(`# "Effect": "Allow",`);
34326
+ console.log(`# "Principal": {`);
34327
+ console.log(
34328
+ `# "Federated": "arn:aws:iam::${identity.accountId}:oidc-provider/oidc.vercel.com/<team-slug>"`
34329
+ );
34330
+ console.log("# },");
34331
+ console.log(`# "Action": "sts:AssumeRoleWithWebIdentity",`);
34332
+ console.log(`# "Condition": {`);
34333
+ console.log(`# "StringEquals": {`);
34334
+ console.log(
34335
+ `# "oidc.vercel.com/<team-slug>:aud": "https://vercel.com/<team-slug>",`
34336
+ );
34322
34337
  console.log(
34323
- "# 3. Create an IAM role that trusts that OIDC provider, with this permission:"
34338
+ `# "oidc.vercel.com/<team-slug>:sub": "owner:<team-slug>:project:<project-name>:environment:production"`
34324
34339
  );
34340
+ console.log("# }");
34341
+ console.log("# }");
34342
+ console.log("# }]");
34343
+ console.log("# }");
34344
+ console.log("#");
34345
+ console.log("# Attach this permission policy to the role:");
34346
+ console.log("#");
34347
+ console.log("# {");
34348
+ console.log(`# "Version": "2012-10-17",`);
34349
+ console.log(`# "Statement": [{`);
34350
+ console.log(`# "Effect": "Allow",`);
34351
+ console.log(`# "Action": "sts:AssumeRole",`);
34325
34352
  console.log(
34326
- `# sts:AssumeRole on arn:aws:iam::${identity.accountId}:role/wraps-console-access-role`
34353
+ `# "Resource": "arn:aws:iam::*:role/wraps-console-access-role"`
34327
34354
  );
34355
+ console.log("# }]");
34356
+ console.log("# }");
34328
34357
  console.log("#");
34329
34358
  console.log("# 4. Set AWS_ROLE_ARN to that role's ARN in Vercel:");
34330
34359
  console.log(