alchemy-effect 0.4.0 → 0.6.0

package/lib/aws/ec2/nat-gateway.provider.js

@@ -0,0 +1,222 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { createAlchemyTagFilters, createTagger, createTagsList, diffTags, } from "../../tags.js";
+import { Account } from "../account.js";
+import { Region } from "../region.js";
+import { EC2Client } from "./client.js";
+import { NatGateway, } from "./nat-gateway.js";
+export const natGatewayProvider = () => NatGateway.provider.effect(
+// @ts-expect-error
+Effect.gen(function* () {
+    const ec2 = yield* EC2Client;
+    const region = yield* Region;
+    const accountId = yield* Account;
+    const tagged = yield* createTagger();
+    const createTags = (id, tags) => ({
+        Name: id,
+        ...tagged(id),
+        ...tags,
+    });
+    const describeNatGateway = (natGatewayId) => ec2.describeNatGateways({ NatGatewayIds: [natGatewayId] }).pipe(Effect.map((r) => r.NatGateways?.[0]), Effect.flatMap((gw) => gw
+        ? Effect.succeed(gw)
+        : Effect.fail(new Error(`NAT Gateway ${natGatewayId} not found`))));
+    const toAttrs = (gw) => {
+        const primaryAddress = gw.NatGatewayAddresses?.find((a) => a.IsPrimary) ??
+            gw.NatGatewayAddresses?.[0];
+        return {
+            natGatewayId: gw.NatGatewayId,
+            natGatewayArn: `arn:aws:ec2:${region}:${accountId}:natgateway/${gw.NatGatewayId}`,
+            subnetId: gw.SubnetId,
+            vpcId: gw.VpcId,
+            state: gw.State,
+            connectivityType: gw.ConnectivityType,
+            publicIp: primaryAddress?.PublicIp,
+            privateIp: primaryAddress?.PrivateIp,
+            natGatewayAddresses: gw.NatGatewayAddresses?.map((a) => ({
+                allocationId: a.AllocationId,
+                networkInterfaceId: a.NetworkInterfaceId,
+                privateIp: a.PrivateIp,
+                publicIp: a.PublicIp,
+                associationId: a.AssociationId,
+                isPrimary: a.IsPrimary,
+                failureMessage: a.FailureMessage,
+                status: a.Status,
+            })),
+            failureCode: gw.FailureCode,
+            failureMessage: gw.FailureMessage,
+            createTime: gw.CreateTime instanceof Date
+                ? gw.CreateTime.toISOString()
+                : gw.CreateTime,
+            deleteTime: gw.DeleteTime instanceof Date
+                ? gw.DeleteTime.toISOString()
+                : gw.DeleteTime,
+        };
+    };
+    // Find NAT Gateway by alchemy tags when we don't have the ID
+    const findNatGatewayByTags = Effect.fn(function* (id) {
+        const filters = yield* createAlchemyTagFilters(id);
+        const result = yield* ec2.describeNatGateways({ Filter: filters });
+        // Find a NAT Gateway that's not deleted and has matching tags
+        for (const gw of result.NatGateways ?? []) {
+            return gw;
+        }
+        return undefined;
+    });
+    return {
+        stables: ["natGatewayId", "natGatewayArn", "vpcId"],
+        read: Effect.fn(function* ({ id, output }) {
+            if (output) {
+                // We have the NAT Gateway ID, use it directly
+                return toAttrs(yield* describeNatGateway(output.natGatewayId));
+            }
+            // No output - try to find by tags (recovery from incomplete create)
+            const gw = yield* findNatGatewayByTags(id);
+            if (gw) {
+                return toAttrs(gw);
+            }
+            // Not found
+            return undefined;
+        }),
+        diff: Effect.fn(function* ({ news, olds }) {
+            // NAT Gateway is mostly immutable - any change to core properties requires replacement
+            if (news.subnetId !== olds.subnetId ||
+                news.connectivityType !== olds.connectivityType ||
+                news.allocationId !== olds.allocationId) {
+                return { action: "replace" };
+            }
+            // Tags can be updated in-place
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            yield* session.note("Creating NAT Gateway...");
+            const result = yield* ec2.createNatGateway({
+                SubnetId: news.subnetId,
+                AllocationId: news.allocationId,
+                ConnectivityType: news.connectivityType ?? "public",
+                PrivateIpAddress: news.privateIpAddress,
+                SecondaryAllocationIds: news.secondaryAllocationIds,
+                SecondaryPrivateIpAddresses: news.secondaryPrivateIpAddresses,
+                SecondaryPrivateIpAddressCount: news.secondaryPrivateIpAddressCount,
+                TagSpecifications: [
+                    {
+                        ResourceType: "natgateway",
+                        Tags: createTagsList(createTags(id, news.tags)),
+                    },
+                ],
+                DryRun: false,
+            });
+            const natGatewayId = result.NatGateway.NatGatewayId;
+            yield* session.note(`NAT Gateway created: ${natGatewayId}`);
+            // Wait for NAT Gateway to be available
+            const gw = yield* waitForNatGatewayAvailable(natGatewayId, session);
+            return toAttrs(gw);
+        }),
+        update: Effect.fn(function* ({ id, news, output, session }) {
+            const natGatewayId = output.natGatewayId;
+            // Handle tag updates
+            const newTags = createTags(id, news.tags);
+            const oldTags = (yield* ec2
+                .describeTags({
+                Filters: [
+                    { Name: "resource-id", Values: [natGatewayId] },
+                    { Name: "resource-type", Values: ["natgateway"] },
+                ],
+            })
+                .pipe(Effect.map((r) => Object.fromEntries(r.Tags?.map((t) => [t.Key, t.Value]) ?? [])))) ?? {};
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (removed.length > 0) {
+                yield* ec2.deleteTags({
+                    Resources: [natGatewayId],
+                    Tags: removed.map((key) => ({ Key: key })),
+                    DryRun: false,
+                });
+            }
+            if (upsert.length > 0) {
+                yield* ec2.createTags({
+                    Resources: [natGatewayId],
+                    Tags: upsert,
+                    DryRun: false,
+                });
+                yield* session.note("Updated tags");
+            }
+            // Refresh state
+            const gw = yield* describeNatGateway(natGatewayId);
+            return toAttrs(gw);
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            const natGatewayId = output.natGatewayId;
+            yield* session.note(`Deleting NAT Gateway: ${natGatewayId}`);
+            yield* ec2
+                .deleteNatGateway({
+                NatGatewayId: natGatewayId,
+                DryRun: false,
+            })
+                .pipe(Effect.catchTag("NatGatewayNotFound", () => Effect.void));
+            // Wait for NAT Gateway to be deleted
+            yield* waitForNatGatewayDeleted(natGatewayId, session);
+            yield* session.note(`NAT Gateway ${natGatewayId} deleted`);
+        }),
+    };
+}));
+// Retryable error: NAT Gateway is still pending
+class NatGatewayPending extends Data.TaggedError("NatGatewayPending") {
+}
+// Terminal error: NAT Gateway creation failed
+class NatGatewayFailed extends Data.TaggedError("NatGatewayFailed") {
+}
+// Terminal error: NAT Gateway not found
+class NatGatewayNotFound extends Data.TaggedError("NatGatewayNotFound") {
+}
+/**
+ * Wait for NAT Gateway to be in available state
+ */
+const waitForNatGatewayAvailable = (natGatewayId, session) => Effect.gen(function* () {
+    const ec2 = yield* EC2Client;
+    const result = yield* ec2.describeNatGateways({
+        NatGatewayIds: [natGatewayId],
+    });
+    const gw = result.NatGateways?.[0];
+    if (!gw) {
+        return yield* new NatGatewayNotFound({ natGatewayId });
+    }
+    if (gw.State === "available") {
+        return gw;
+    }
+    if (gw.State === "failed") {
+        return yield* new NatGatewayFailed({
+            natGatewayId,
+            failureCode: gw.FailureCode,
+            failureMessage: gw.FailureMessage,
+        });
+    }
+    // Still pending - this is the only retryable case
+    return yield* new NatGatewayPending({ natGatewayId, state: gw.State });
+}).pipe(Effect.tapError(Effect.logDebug), Effect.retry({
+    while: (e) => e._tag === "NatGatewayPending",
+    schedule: Schedule.fixed(5000).pipe(Schedule.intersect(Schedule.recurs(60)), // Max 5 minutes
+    Schedule.tapOutput(([, attempt]) => session.note(`Waiting for NAT Gateway to be available... (${(attempt + 1) * 5}s)`))),
+}));
+// Retryable error: NAT Gateway is still deleting
+class NatGatewayDeleting extends Data.TaggedError("NatGatewayDeleting") {
+}
+/**
+ * Wait for NAT Gateway to be deleted
+ */
+const waitForNatGatewayDeleted = (natGatewayId, session) => Effect.gen(function* () {
+    const ec2 = yield* EC2Client;
+    const result = yield* ec2
+        .describeNatGateways({ NatGatewayIds: [natGatewayId] })
+        .pipe(Effect.catchTag("NatGatewayNotFound", () => Effect.succeed({ NatGateways: [] })));
+    const gw = result.NatGateways?.[0];
+    if (!gw || gw.State === "deleted") {
+        return; // Successfully deleted
+    }
+    yield* Effect.logDebug(gw);
+    // Still deleting - this is the only retryable case
+    return yield* new NatGatewayDeleting({ natGatewayId, state: gw.State });
+}).pipe(Effect.tapError(Effect.logDebug), Effect.retry({
+    while: (e) => e._tag === "NatGatewayDeleting",
+    schedule: Schedule.fixed(5000).pipe(Schedule.intersect(Schedule.recurs(60)), // Max 5 minutes
+    Schedule.tapOutput(([, attempt]) => session.note(`Waiting for NAT Gateway deletion... (${(attempt + 1) * 5}s)`))),
+}));
+//# sourceMappingURL=nat-gateway.provider.js.map

package/lib/aws/ec2/nat-gateway.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nat-gateway.provider.js","sourceRoot":"","sources":["../../../src/aws/ec2/nat-gateway.provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAI5C,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,cAAc,EACd,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,UAAU,GAIX,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,UAAU,CAAC,QAAQ,CAAC,MAAM;AACxB,mBAAmB;AACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,CACjB,EAAU,EACV,IAA6B,EACL,EAAE,CAAC,CAAC;QAC5B,IAAI,EAAE,EAAE;QACR,GAAG,MAAM,CAAC,EAAE,CAAC;QACb,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,EAAE,CAClD,GAAG,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EACrC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE;QACA,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,YAAY,YAAY,CAAC,CAAC,CACpE,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,CACd,EAAkB,EACgB,EAAE;QACpC,MAAM,cAAc,GAClB,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO;YACL,YAAY,EAAE,EAAE,CAAC,YAA4B;YAC7C,aAAa,EACX,eAAe,MAAM,IAAI,SAAS,eAAe,EAAE,CAAC,YAAY,EAAuD;YACzH,QAAQ,EAAE,EAAE,CAAC,QAAwD;YACrE,KAAK,EAAE,EAAE,CAAC,KAAM;YAChB,KAAK,EAAE,EAAE,CAAC,KAAM;YAChB,gBAAgB,EAAE,EAAE,CAAC,gBAAiB;YACtC,QAAQ,EAAE,cAAc,EAAE,QAAQ;YAClC,SAAS,EAAE,cAAc,EAAE,SAAS;YACpC,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvD,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;gBACxC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;YACH,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,cAAc,EAAE,EAAE,CAAC,cAAc;YACjC,UAAU,EACR,EAAE,CAAC,UAAU,YAAY,IAAI;gBAC3B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE;gBAC7B,CAAC,CAAE,EAAE,CAAC,UAAiC;YAC3C,UAAU,EACR,EAAE,CAAC,UAAU,YAAY,IAAI;gBAC3B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE;gBAC7B,CAAC,CAAE,EAAE,CAAC,UAAiC;SAC5C,CAAC;IACJ,CAAC,CAAC;IAEF,6DAA6D;IAC7D,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnE,8DAA8D;QAC9D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC;QAEnD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,8CAA8C;gBAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,oEAAoE;YACpE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,EAAE,CAAC;gBACP,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YAED,YAAY;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,uFAAuF;YACvF,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAC/B,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;gBAC/C,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EACvC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+BAA+B;QACjC,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAkB;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAkC;gBACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,QAAQ;gBACnD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,sBAAsB,EAAE,IAAI,CAAC,sBAEhB;gBACb,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;gBAC7D,8BAA8B,EAAE,IAAI,CAAC,8BAA8B;gBACnE,iBAAiB,EAAE;oBACjB;wBACE,YAAY,EAAE,YAAY;wBAC1B,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBAChD;iBACF;gBACD,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,CAAC,UAAW,CAAC,YAAa,CAAC;YACtD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,YAAY,EAAE,CAAC,CAAC;YAE5D,uCAAuC;YACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAEpE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACxD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,qBAAqB;YACrB,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,CAAC,GAAG;iBACR,YAAY,CAAC;gBACZ,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;oBAC/C,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;iBAClD;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,WAAW,CAChB,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC,IAAI,EAAE,CACnB,CAC9B,CACF,CAAC,IAAI,EAAE,CAAC;YAEb,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;YAED,gBAAgB;YAChB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACnD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAE7D,KAAK,CAAC,CAAC,GAAG;iBACP,gBAAgB,CAAC;gBAChB,YAAY,EAAE,YAAY;gBAC1B,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAElE,qCAAqC;YACrC,KAAK,CAAC,CAAC,wBAAwB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAEvD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,YAAY,UAAU,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,gDAAgD;AAChD,MAAM,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAGlE;CAAG;AAEL,8CAA8C;AAC9C,MAAM,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAIhE;CAAG;AAEL,wCAAwC;AACxC,MAAM,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAEpE;CAAG;AAEL;;GAEG;AACH,MAAM,0BAA0B,GAAG,CACjC,YAAoB,EACpB,OAAgC,EAChC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5C,aAAa,EAAE,CAAC,YAAY,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC;YACjC,YAAY;YACZ,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,cAAc,EAAE,EAAE,CAAC,cAAc;SAClC,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,KAAM,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAChC,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB;IAC5C,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CACjC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB;IACzD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,+CAA+C,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CACrE,CACF,CACF;CACF,CAAC,CACH,CAAC;AAEJ,iDAAiD;AACjD,MAAM,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAGpE;CAAG;AAEL;;GAEG;AACH,MAAM,wBAAwB,GAAG,CAC/B,YAAoB,EACpB,OAAgC,EAChC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;SACtB,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;SACtD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CACpC,CACF,CAAC;IAEJ,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,uBAAuB;IACjC,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE3B,mDAAmD;IACnD,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,KAAM,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAChC,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB;IAC7C,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CACjC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB;IACzD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,wCAAwC,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAC9D,CACF,CACF;CACF,CAAC,CACH,CAAC"}

package/lib/aws/ec2/network-acl-association.d.ts

@@ -0,0 +1,44 @@
+import type { Input } from "../../input.ts";
+import { Resource } from "../../resource.ts";
+import type { NetworkAclId } from "./network-acl.ts";
+import type { SubnetId } from "./subnet.ts";
+export declare const NetworkAclAssociation: (<const ID extends string, const Props extends NetworkAclAssociationProps>(id: ID, props: Props) => NetworkAclAssociation<ID, Props>) & {
+    new (): NetworkAclAssociation<string, NetworkAclAssociationProps> & {
+        parent: NetworkAclAssociation<string, NetworkAclAssociationProps>;
+    };
+    type: "AWS.EC2.NetworkAclAssociation";
+    parent: NetworkAclAssociation<string, NetworkAclAssociationProps>;
+    provider: import("../../resource.ts").ResourceTags<NetworkAclAssociation<string, NetworkAclAssociationProps>>;
+} & {
+    type: "AWS.EC2.NetworkAclAssociation";
+    provider: import("../../resource.ts").ResourceTags<NetworkAclAssociation<string, NetworkAclAssociationProps>>;
+};
+export interface NetworkAclAssociation<ID extends string = string, Props extends NetworkAclAssociationProps = NetworkAclAssociationProps> extends Resource<"AWS.EC2.NetworkAclAssociation", ID, Props, NetworkAclAssociationAttrs<Input.Resolve<Props>>, NetworkAclAssociation> {
+}
+export type NetworkAclAssociationId<ID extends string = string> = `aclassoc-${ID}`;
+export declare const NetworkAclAssociationId: <ID extends string>(id: ID) => ID & NetworkAclAssociationId<ID>;
+export interface NetworkAclAssociationProps {
+    /**
+     * The ID of the new network ACL to associate with the subnet.
+     */
+    networkAclId: Input<NetworkAclId>;
+    /**
+     * The ID of the subnet to associate with the network ACL.
+     */
+    subnetId: Input<SubnetId>;
+}
+export interface NetworkAclAssociationAttrs<Props extends Input.Resolve<NetworkAclAssociationProps>> {
+    /**
+     * The ID of the association between the network ACL and subnet.
+     */
+    associationId: NetworkAclAssociationId;
+    /**
+     * The ID of the network ACL.
+     */
+    networkAclId: Props["networkAclId"];
+    /**
+     * The ID of the subnet.
+     */
+    subnetId: Props["subnetId"];
+}
+//# sourceMappingURL=network-acl-association.d.ts.map

package/lib/aws/ec2/network-acl-association.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-association.d.ts","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-association.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,eAAO,MAAM,qBAAqB,UACzB,EAAE,SAAS,MAAM,QAAQ,KAAK,SAAS,0BAA0B,MAClE,EAAE,SACC,KAAK,KACX,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC;;;;;;;;;;CACF,CAAC;AAEpC,MAAM,WAAW,qBAAqB,CACpC,EAAE,SAAS,MAAM,GAAG,MAAM,EAC1B,KAAK,SAAS,0BAA0B,GAAG,0BAA0B,CACrE,SAAQ,QAAQ,CAChB,+BAA+B,EAC/B,EAAE,EACF,KAAK,EACL,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAChD,qBAAqB,CACtB;CAAG;AAEJ,MAAM,MAAM,uBAAuB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAC5D,YAAY,EAAE,EAAE,CAAC;AACnB,eAAO,MAAM,uBAAuB,GAAI,EAAE,SAAS,MAAM,EACvD,IAAI,EAAE,KACL,EAAE,GAAG,uBAAuB,CAAC,EAAE,CACoB,CAAC;AAEvD,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAElC;;OAEG;IACH,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B,CACzC,KAAK,SAAS,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAEvD;;OAEG;IACH,aAAa,EAAE,uBAAuB,CAAC;IAEvC;;OAEG;IACH,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAEpC;;OAEG;IACH,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;CAC7B"}

package/lib/aws/ec2/network-acl-association.js

@@ -0,0 +1,4 @@
+import { Resource } from "../../resource.js";
+export const NetworkAclAssociation = Resource("AWS.EC2.NetworkAclAssociation");
+export const NetworkAclAssociationId = (id) => `aclassoc-${id}`;
+//# sourceMappingURL=network-acl-association.js.map

package/lib/aws/ec2/network-acl-association.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-association.js","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-association.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAK1C,+BAA+B,CAAC,CAAC;AAepC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAM,EAC4B,EAAE,CACpC,YAAY,EAAE,EAAsC,CAAC"}

package/lib/aws/ec2/network-acl-association.provider.d.ts

@@ -0,0 +1,4 @@
+import { EC2Client } from "./client.ts";
+import { NetworkAclAssociation } from "./network-acl-association.ts";
+export declare const networkAclAssociationProvider: () => import("effect/Layer").Layer<import("../../provider.ts").Provider<NetworkAclAssociation<string, import("./network-acl-association.ts").NetworkAclAssociationProps>>, never, EC2Client>;
+//# sourceMappingURL=network-acl-association.provider.d.ts.map

package/lib/aws/ec2/network-acl-association.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-association.provider.d.ts","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-association.provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,qBAAqB,EAEtB,MAAM,8BAA8B,CAAC;AAItC,eAAO,MAAM,6BAA6B,8LAyKvC,CAAC"}

package/lib/aws/ec2/network-acl-association.provider.js

@@ -0,0 +1,115 @@
+import * as Effect from "effect/Effect";
+import { EC2Client } from "./client.js";
+import { NetworkAclAssociation, } from "./network-acl-association.js";
+export const networkAclAssociationProvider = () => NetworkAclAssociation.provider.effect(Effect.gen(function* () {
+    const ec2 = yield* EC2Client;
+    const findAssociation = (subnetId) => ec2
+        .describeNetworkAcls({
+        Filters: [{ Name: "association.subnet-id", Values: [subnetId] }],
+    })
+        .pipe(Effect.map((r) => {
+        const acl = r.NetworkAcls?.[0];
+        const assoc = acl?.Associations?.find((a) => a.SubnetId === subnetId);
+        return assoc
+            ? {
+                associationId: assoc.NetworkAclAssociationId,
+                networkAclId: assoc.NetworkAclId,
+                subnetId: assoc.SubnetId,
+            }
+            : undefined;
+    }));
+    return {
+        stables: ["subnetId"],
+        read: Effect.fn(function* ({ olds }) {
+            if (!olds)
+                return undefined;
+            const assoc = yield* findAssociation(olds.subnetId);
+            if (!assoc) {
+                return yield* Effect.fail(new Error(`Network ACL Association not found for subnet ${olds.subnetId}`));
+            }
+            return {
+                associationId: assoc.associationId,
+                networkAclId: assoc.networkAclId,
+                subnetId: assoc.subnetId,
+            };
+        }),
+        diff: Effect.fn(function* ({ news, olds }) {
+            // Subnet change requires replacement
+            if (news.subnetId !== olds.subnetId) {
+                return { action: "replace" };
+            }
+            // Network ACL change can be done via replaceNetworkAclAssociation
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            yield* session.note(`Creating Network ACL Association for subnet ${news.subnetId}...`);
+            // First, find the current association for this subnet (every subnet has one)
+            const currentAssoc = yield* findAssociation(news.subnetId);
+            if (!currentAssoc) {
+                return yield* Effect.fail(new Error(`No existing Network ACL Association found for subnet ${news.subnetId}`));
+            }
+            // Replace the association with the new network ACL
+            const result = yield* ec2.replaceNetworkAclAssociation({
+                AssociationId: currentAssoc.associationId,
+                NetworkAclId: news.networkAclId,
+                DryRun: false,
+            });
+            const newAssociationId = result.NewAssociationId;
+            yield* session.note(`Network ACL Association created: ${newAssociationId}`);
+            return {
+                associationId: newAssociationId,
+                networkAclId: news.networkAclId,
+                subnetId: news.subnetId,
+            };
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            yield* session.note(`Updating Network ACL Association...`);
+            // Replace the association with the new network ACL
+            const result = yield* ec2.replaceNetworkAclAssociation({
+                AssociationId: output.associationId,
+                NetworkAclId: news.networkAclId,
+                DryRun: false,
+            });
+            const newAssociationId = result.NewAssociationId;
+            yield* session.note(`Network ACL Association updated: ${newAssociationId}`);
+            return {
+                associationId: newAssociationId,
+                networkAclId: news.networkAclId,
+                subnetId: news.subnetId,
+            };
+        }),
+        delete: Effect.fn(function* ({ olds, output, session }) {
+            yield* session.note(`Deleting Network ACL Association...`);
+            // When deleting, we need to associate the subnet back to the default NACL
+            // Find the default NACL for the VPC
+            const subnetResult = yield* ec2.describeSubnets({
+                SubnetIds: [olds.subnetId],
+            });
+            const vpcId = subnetResult.Subnets?.[0]?.VpcId;
+            if (vpcId) {
+                const defaultAclResult = yield* ec2.describeNetworkAcls({
+                    Filters: [
+                        { Name: "vpc-id", Values: [vpcId] },
+                        { Name: "default", Values: ["true"] },
+                    ],
+                });
+                const defaultAclId = defaultAclResult.NetworkAcls?.[0]?.NetworkAclId;
+                if (defaultAclId &&
+                    defaultAclId !== olds.networkAclId) {
+                    // Replace with default NACL
+                    yield* ec2
+                        .replaceNetworkAclAssociation({
+                        AssociationId: output.associationId,
+                        NetworkAclId: defaultAclId,
+                        DryRun: false,
+                    })
+                        .pipe(Effect.catchTag("InvalidAssociationID.NotFound", () => Effect.void));
+                    yield* session.note(`Network ACL Association reverted to default`);
+                }
+                else {
+                    yield* session.note(`Already using default Network ACL, nothing to do`);
+                }
+            }
+        }),
+    };
+}));
+//# sourceMappingURL=network-acl-association.provider.js.map

package/lib/aws/ec2/network-acl-association.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-association.provider.js","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-association.provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,qBAAqB,GAEtB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAE7B,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC3C,GAAG;SACA,mBAAmB,CAAC;QACnB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;KACjE,CAAC;SACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;QACF,OAAO,KAAK;YACV,CAAC,CAAC;gBACE,aAAa,EAAE,KAAK,CAAC,uBAAwB;gBAC7C,YAAY,EAAE,KAAK,CAAC,YAAa;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAS;aAC1B;YACH,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;IAEN,OAAO;QACL,OAAO,EAAE,CAAC,UAAU,CAAC;QAErB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gDAAgD,IAAI,CAAC,QAAQ,EAAE,CAChE,CACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,KAAK,CAAC,aAAwC;gBAC7D,YAAY,EAAE,KAAK,CAAC,YAA4B;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAoB;aACrC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,qCAAqC;YACrC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,kEAAkE;QACpE,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,+CAA+C,IAAI,CAAC,QAAQ,KAAK,CAClE,CAAC;YAEF,6EAA6E;YAC7E,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,wDAAwD,IAAI,CAAC,QAAQ,EAAE,CACxE,CACF,CAAC;YACJ,CAAC;YAED,mDAAmD;YACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBACrD,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAiB,CAAC;YAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,gBAAgB,EAAE,CACvD,CAAC;YAEF,OAAO;gBACL,aAAa,EAAE,gBAA2C;gBAC1D,YAAY,EAAE,IAAI,CAAC,YAA4B;gBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;aACpC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAE3D,mDAAmD;YACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBACrD,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAiB,CAAC;YAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,gBAAgB,EAAE,CACvD,CAAC;YAEF,OAAO;gBACL,aAAa,EAAE,gBAA2C;gBAC1D,YAAY,EAAE,IAAI,CAAC,YAA4B;gBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;aACpC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAE3D,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC9C,SAAS,EAAE,CAAC,IAAI,CAAC,QAAkB,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAE/C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBACtD,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE;wBACnC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,YAAY,GAChB,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;gBAElD,IACE,YAAY;oBACZ,YAAY,KAAM,IAAI,CAAC,YAAuB,EAC9C,CAAC;oBACD,4BAA4B;oBAC5B,KAAK,CAAC,CAAC,GAAG;yBACP,4BAA4B,CAAC;wBAC5B,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,YAAY,EAAE,YAAY;wBAC1B,MAAM,EAAE,KAAK;qBACd,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,+BAA+B,EAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;oBAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,6CAA6C,CAC9C,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,kDAAkD,CACnD,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC;KASH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/aws/ec2/network-acl-entry.d.ts

@@ -0,0 +1,118 @@
+import type * as EC2 from "itty-aws/ec2";
+import type { Input } from "../../input.ts";
+import { Resource } from "../../resource.ts";
+import type { NetworkAclId } from "./network-acl.ts";
+export declare const NetworkAclEntry: (<const ID extends string, const Props extends NetworkAclEntryProps>(id: ID, props: Props) => NetworkAclEntry<ID, Props>) & {
+    new (): NetworkAclEntry<string, NetworkAclEntryProps> & {
+        parent: NetworkAclEntry<string, NetworkAclEntryProps>;
+    };
+    type: "AWS.EC2.NetworkAclEntry";
+    parent: NetworkAclEntry<string, NetworkAclEntryProps>;
+    provider: import("../../resource.ts").ResourceTags<NetworkAclEntry<string, NetworkAclEntryProps>>;
+} & {
+    type: "AWS.EC2.NetworkAclEntry";
+    provider: import("../../resource.ts").ResourceTags<NetworkAclEntry<string, NetworkAclEntryProps>>;
+};
+export interface NetworkAclEntry<ID extends string = string, Props extends NetworkAclEntryProps = NetworkAclEntryProps> extends Resource<"AWS.EC2.NetworkAclEntry", ID, Props, NetworkAclEntryAttrs<Input.Resolve<Props>>, NetworkAclEntry> {
+}
+export interface NetworkAclEntryProps {
+    /**
+     * The ID of the network ACL.
+     */
+    networkAclId: Input<NetworkAclId>;
+    /**
+     * The rule number for the entry (1-32766).
+     * Rules are evaluated in order from lowest to highest.
+     */
+    ruleNumber: number;
+    /**
+     * The protocol number.
+     * A value of "-1" means all protocols.
+     * Common values: 6 (TCP), 17 (UDP), 1 (ICMP)
+     */
+    protocol: string;
+    /**
+     * Whether to allow or deny the traffic that matches the rule.
+     */
+    ruleAction: EC2.RuleAction;
+    /**
+     * Whether this is an egress (outbound) rule.
+     * @default false (ingress)
+     */
+    egress?: boolean;
+    /**
+     * The IPv4 CIDR block.
+     * Either cidrBlock or ipv6CidrBlock must be specified.
+     */
+    cidrBlock?: string;
+    /**
+     * The IPv6 CIDR block.
+     * Either cidrBlock or ipv6CidrBlock must be specified.
+     */
+    ipv6CidrBlock?: string;
+    /**
+     * ICMP type and code. Required if protocol is 1 (ICMP) or 58 (ICMPv6).
+     */
+    icmpTypeCode?: {
+        /**
+         * The ICMP code. Use -1 to specify all codes.
+         */
+        code?: number;
+        /**
+         * The ICMP type. Use -1 to specify all types.
+         */
+        type?: number;
+    };
+    /**
+     * The port range for TCP/UDP protocols.
+     */
+    portRange?: {
+        /**
+         * The first port in the range.
+         */
+        from?: number;
+        /**
+         * The last port in the range.
+         */
+        to?: number;
+    };
+}
+export interface NetworkAclEntryAttrs<Props extends NetworkAclEntryProps> {
+    /**
+     * The ID of the network ACL.
+     */
+    networkAclId: Props["networkAclId"];
+    /**
+     * The rule number.
+     */
+    ruleNumber: Props["ruleNumber"];
+    /**
+     * Whether this is an egress rule.
+     */
+    egress: boolean;
+    /**
+     * The protocol.
+     */
+    protocol: Props["protocol"];
+    /**
+     * The rule action (allow or deny).
+     */
+    ruleAction: Props["ruleAction"];
+    /**
+     * The IPv4 CIDR block.
+     */
+    cidrBlock?: Props["cidrBlock"];
+    /**
+     * The IPv6 CIDR block.
+     */
+    ipv6CidrBlock?: Props["ipv6CidrBlock"];
+    /**
+     * The ICMP type and code.
+     */
+    icmpTypeCode?: Props["icmpTypeCode"];
+    /**
+     * The port range.
+     */
+    portRange?: Props["portRange"];
+}
+//# sourceMappingURL=network-acl-entry.d.ts.map

package/lib/aws/ec2/network-acl-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-entry.d.ts","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,eAAO,MAAM,eAAe,UACnB,EAAE,SAAS,MAAM,QAAQ,KAAK,SAAS,oBAAoB,MAC5D,EAAE,SACC,KAAK,KACX,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;;;;;;;;;;CACF,CAAC;AAE9B,MAAM,WAAW,eAAe,CAC9B,EAAE,SAAS,MAAM,GAAG,MAAM,EAC1B,KAAK,SAAS,oBAAoB,GAAG,oBAAoB,CACzD,SAAQ,QAAQ,CAChB,yBAAyB,EACzB,EAAE,EACF,KAAK,EACL,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAC1C,eAAe,CAChB;CAAG;AAEJ,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAElC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;IAE3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IAEF;;OAEG;IACH,SAAS,CAAC,EAAE;QACV;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;WAEG;QACH,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB,CAAC,KAAK,SAAS,oBAAoB;IACtE;;OAEG;IACH,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAEpC;;OAEG;IACH,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAEhC;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAE5B;;OAEG;IACH,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAEhC;;OAEG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/B;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAEvC;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAErC;;OAEG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;CAChC"}

package/lib/aws/ec2/network-acl-entry.js

@@ -0,0 +1,3 @@
+import { Resource } from "../../resource.js";
+export const NetworkAclEntry = Resource("AWS.EC2.NetworkAclEntry");
+//# sourceMappingURL=network-acl-entry.js.map

package/lib/aws/ec2/network-acl-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-entry.js","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-entry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAKpC,yBAAyB,CAAC,CAAC"}

package/lib/aws/ec2/network-acl-entry.provider.d.ts

@@ -0,0 +1,4 @@
+import { EC2Client } from "./client.ts";
+import { NetworkAclEntry, type NetworkAclEntryProps } from "./network-acl-entry.ts";
+export declare const networkAclEntryProvider: () => import("effect/Layer").Layer<import("../../provider.ts").Provider<NetworkAclEntry<string, NetworkAclEntryProps>>, never, EC2Client>;
+//# sourceMappingURL=network-acl-entry.provider.d.ts.map

package/lib/aws/ec2/network-acl-entry.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-acl-entry.provider.d.ts","sourceRoot":"","sources":["../../../src/aws/ec2/network-acl-entry.provider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,eAAe,EAEf,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,uBAAuB,2IAgNjC,CAAC"}