alchemy 0.1.16 → 0.1.17

package/lib/aws/function.js

@@ -0,0 +1,195 @@
+import { Architecture, CreateFunctionCommand, DeleteFunctionCommand, GetFunctionCommand, GetFunctionConfigurationCommand, LambdaClient, ResourceNotFoundException, Runtime, UpdateFunctionCodeCommand, UpdateFunctionConfigurationCommand, } from "@aws-sdk/client-lambda";
+import fs from "node:fs";
+import path from "node:path";
+import { ignore } from "../error";
+import { Resource } from "../resource";
+async function resolveRegion(client) {
+    const region = client.config.region;
+    if (typeof region === "string")
+        return region;
+    if (typeof region === "function")
+        return region();
+    throw new Error("Could not resolve AWS region");
+}
+export class Function extends Resource("lambda::Function", async (ctx, props) => {
+    const client = new LambdaClient({});
+    const region = await resolveRegion(client);
+    const code = await zipCode(props.zipPath);
+    if (ctx.event === "delete") {
+        await ignore(ResourceNotFoundException.name, () => client.send(new DeleteFunctionCommand({
+            FunctionName: props.functionName,
+        })));
+        // Return a minimal FunctionOutput for deleted state
+        return {
+            ...props,
+            id: props.functionName,
+            arn: `arn:aws:lambda:${region}:${process.env.AWS_ACCOUNT_ID}:function:${props.functionName}`,
+            lastModified: new Date().toISOString(),
+            version: "$LATEST",
+            qualifiedArn: `arn:aws:lambda:${region}:${process.env.AWS_ACCOUNT_ID}:function:${props.functionName}:$LATEST`,
+            invokeArn: `arn:aws:apigateway:${region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${region}:${process.env.AWS_ACCOUNT_ID}:function:${props.functionName}/invocations`,
+            sourceCodeHash: "",
+            sourceCodeSize: 0,
+            architectures: props.architecture
+                ? [props.architecture]
+                : [Architecture.x86_64],
+            revisionId: "",
+            state: "Inactive",
+            packageType: "Zip",
+        };
+    }
+    else {
+        try {
+            // Check if function exists
+            const func = await client.send(new GetFunctionCommand({
+                FunctionName: props.functionName,
+            }));
+            if (ctx.event === "update") {
+                // Wait for function to stabilize
+                await waitForFunctionStabilization(client, props.functionName);
+                // Update function code
+                await client.send(new UpdateFunctionCodeCommand({
+                    FunctionName: props.functionName,
+                    ZipFile: code,
+                }));
+                // Wait for code update to stabilize
+                await waitForFunctionStabilization(client, props.functionName);
+                // Update function configuration
+                await client.send(new UpdateFunctionConfigurationCommand({
+                    FunctionName: props.functionName,
+                    Handler: props.handler,
+                    Runtime: props.runtime,
+                    Role: props.roleArn,
+                    Description: props.description,
+                    Timeout: props.timeout,
+                    MemorySize: props.memorySize,
+                    Environment: props.environment
+                        ? { Variables: props.environment }
+                        : undefined,
+                }));
+                // Wait for configuration update to stabilize
+                await waitForFunctionStabilization(client, props.functionName);
+            }
+        }
+        catch (error) {
+            if (error.name === "ResourceNotFoundException") {
+                // Create function if it doesn't exist
+                const startTime = Date.now();
+                let delay = 100; // Start with 100ms delay
+                while (true) {
+                    try {
+                        await client.send(new CreateFunctionCommand({
+                            FunctionName: props.functionName,
+                            Code: { ZipFile: code },
+                            Handler: props.handler || "index.handler",
+                            Runtime: props.runtime || Runtime.nodejs20x,
+                            Role: props.roleArn,
+                            Description: props.description,
+                            Timeout: props.timeout || 3,
+                            MemorySize: props.memorySize || 128,
+                            Environment: props.environment
+                                ? { Variables: props.environment }
+                                : undefined,
+                            Architectures: props.architecture
+                                ? [props.architecture]
+                                : [Architecture.x86_64],
+                            Tags: props.tags,
+                        }));
+                        break; // Success - exit retry loop
+                    }
+                    catch (createError) {
+                        if (createError.name !== "InvalidParameterValueException" ||
+                            !createError.message?.includes("cannot be assumed by Lambda")) {
+                            throw createError; // Different error - rethrow
+                        }
+                        if (Date.now() - startTime > 10000) {
+                            throw new Error("Timeout waiting for IAM role to be assumable by Lambda after 10s");
+                        }
+                        await new Promise((resolve) => setTimeout(resolve, delay));
+                        delay = Math.min(delay * 2, 1000); // Exponential backoff capped at 1s
+                    }
+                }
+                // Wait for function to be active
+                let isCreating = true;
+                while (isCreating) {
+                    const config = await client.send(new GetFunctionConfigurationCommand({
+                        FunctionName: props.functionName,
+                    }));
+                    isCreating = config.State === "Pending";
+                    if (isCreating) {
+                        await new Promise((resolve) => setTimeout(resolve, 1000));
+                    }
+                }
+            }
+            else {
+                throw error;
+            }
+        }
+        // Get complete function details
+        const [func, config] = await Promise.all([
+            client.send(new GetFunctionCommand({
+                FunctionName: props.functionName,
+            })),
+            client.send(new GetFunctionConfigurationCommand({
+                FunctionName: props.functionName,
+            })),
+        ]);
+        const output = {
+            ...props,
+            id: props.functionName,
+            arn: config.FunctionArn,
+            lastModified: config.LastModified,
+            version: config.Version,
+            qualifiedArn: `${config.FunctionArn}:${config.Version}`,
+            invokeArn: `arn:aws:apigateway:${region}:lambda:path/2015-03-31/functions/${config.FunctionArn}/invocations`,
+            sourceCodeHash: config.CodeSha256,
+            sourceCodeSize: config.CodeSize,
+            ephemeralStorageSize: config.EphemeralStorage?.Size,
+            architectures: config.Architectures || [],
+            masterArn: config.MasterArn,
+            revisionId: config.RevisionId,
+            state: config.State,
+            stateReason: config.StateReason,
+            stateReasonCode: config.StateReasonCode,
+            lastUpdateStatus: config.LastUpdateStatus,
+            lastUpdateStatusReason: config.LastUpdateStatusReason,
+            lastUpdateStatusReasonCode: config.LastUpdateStatusReasonCode,
+            packageType: config.PackageType,
+            signingProfileVersionArn: config.SigningProfileVersionArn,
+            signingJobArn: config.SigningJobArn,
+        };
+        return output;
+    }
+}) {
+}
+// Helper to wait for function to stabilize
+async function waitForFunctionStabilization(client, functionName) {
+    while (true) {
+        const config = await client.send(new GetFunctionConfigurationCommand({
+            FunctionName: functionName,
+        }));
+        // Check if function is in a stable state
+        if (config.State === "Active" && config.LastUpdateStatus === "Successful") {
+            break;
+        }
+        // If there's a failure, throw an error
+        if (config.State === "Failed" || config.LastUpdateStatus === "Failed") {
+            throw new Error(`Function failed to stabilize: ${config.StateReason || config.LastUpdateStatusReason}`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, 1000));
+    }
+}
+// Helper to zip the code
+async function zipCode(filePath) {
+    const fileContent = await fs.promises.readFile(filePath);
+    const fileName = path.basename(filePath);
+    // Create a zip buffer in memory
+    const zip = new (await import("jszip")).default();
+    zip.file(fileName, fileContent);
+    return zip.generateAsync({
+        type: "nodebuffer",
+        compression: "DEFLATE",
+        platform: "UNIX",
+    });
+}
+//# sourceMappingURL=function.js.map

package/lib/aws/function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.js","sourceRoot":"","sources":["../../src/aws/function.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,+BAA+B,EAC/B,YAAY,EACZ,yBAAyB,EACzB,OAAO,EACP,yBAAyB,EACzB,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAgB,QAAQ,EAAE,MAAM,aAAa,CAAC;AAErD,KAAK,UAAU,aAAa,CAAC,MAAoB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,EAAE,CAAC;IAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AAmDD,MAAM,OAAO,QAAS,SAAQ,QAAQ,CACpC,kBAAkB,EAClB,KAAK,EAAE,GAA4B,EAAE,KAAoB,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CACT,IAAI,qBAAqB,CAAC;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CACH,CACF,CAAC;QAEF,oDAAoD;QACpD,OAAO;YACL,GAAG,KAAK;YACR,EAAE,EAAE,KAAK,CAAC,YAAY;YACtB,GAAG,EAAE,kBAAkB,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,KAAK,CAAC,YAAY,EAAE;YAC5F,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,kBAAkB,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,KAAK,CAAC,YAAY,UAAU;YAC7G,SAAS,EAAE,sBAAsB,MAAM,oDAAoD,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,KAAK,CAAC,YAAY,cAAc;YAC5K,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,KAAK,CAAC,YAAY;gBAC/B,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;gBACtB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,kBAAkB,CAAC;gBACrB,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CACH,CAAC;YAEF,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3B,iCAAiC;gBACjC,MAAM,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBAE/D,uBAAuB;gBACvB,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,yBAAyB,CAAC;oBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,OAAO,EAAE,IAAI;iBACd,CAAC,CACH,CAAC;gBAEF,oCAAoC;gBACpC,MAAM,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBAE/D,gCAAgC;gBAChC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,kCAAkC,CAAC;oBACrC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,KAAK,CAAC,OAAO;oBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC5B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE;wBAClC,CAAC,CAAC,SAAS;iBACd,CAAC,CACH,CAAC;gBAEF,6CAA6C;gBAC7C,MAAM,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBAC/C,sCAAsC;gBACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,yBAAyB;gBAE1C,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,qBAAqB,CAAC;4BACxB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;4BACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe;4BACzC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;4BAC3C,IAAI,EAAE,KAAK,CAAC,OAAO;4BACnB,WAAW,EAAE,KAAK,CAAC,WAAW;4BAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;4BAC3B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG;4BACnC,WAAW,EAAE,KAAK,CAAC,WAAW;gCAC5B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE;gCAClC,CAAC,CAAC,SAAS;4BACb,aAAa,EAAE,KAAK,CAAC,YAAY;gCAC/B,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;gCACtB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;4BACzB,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CACH,CAAC;wBACF,MAAM,CAAC,4BAA4B;oBACrC,CAAC;oBAAC,OAAO,WAAgB,EAAE,CAAC;wBAC1B,IACE,WAAW,CAAC,IAAI,KAAK,gCAAgC;4BACrD,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,6BAA6B,CAAC,EAC7D,CAAC;4BACD,MAAM,WAAW,CAAC,CAAC,4BAA4B;wBACjD,CAAC;wBAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;4BACnC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;wBAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;wBAC3D,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,mCAAmC;oBACxE,CAAC;gBACH,CAAC;gBAED,iCAAiC;gBACjC,IAAI,UAAU,GAAG,IAAI,CAAC;gBACtB,OAAO,UAAU,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,+BAA+B,CAAC;wBAClC,YAAY,EAAE,KAAK,CAAC,YAAY;qBACjC,CAAC,CACH,CAAC;oBACF,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;oBACxC,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,MAAM,CAAC,IAAI,CACT,IAAI,kBAAkB,CAAC;gBACrB,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CACH;YACD,MAAM,CAAC,IAAI,CACT,IAAI,+BAA+B,CAAC;gBAClC,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC,CACH;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAmB;YAC7B,GAAG,KAAK;YACR,EAAE,EAAE,KAAK,CAAC,YAAY;YACtB,GAAG,EAAE,MAAM,CAAC,WAAY;YACxB,YAAY,EAAE,MAAM,CAAC,YAAa;YAClC,OAAO,EAAE,MAAM,CAAC,OAAQ;YACxB,YAAY,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE;YACvD,SAAS,EAAE,sBAAsB,MAAM,qCAAqC,MAAM,CAAC,WAAW,cAAc;YAC5G,cAAc,EAAE,MAAM,CAAC,UAAW;YAClC,cAAc,EAAE,MAAM,CAAC,QAAS;YAChC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI;YACnD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAW;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,WAAW,EAAE,MAAM,CAAC,WAAY;YAChC,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC,CACF;CAAG;AAEJ,2CAA2C;AAC3C,KAAK,UAAU,4BAA4B,CACzC,MAAoB,EACpB,YAAoB;IAEpB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,+BAA+B,CAAC;YAClC,YAAY,EAAE,YAAY;SAC3B,CAAC,CACH,CAAC;QAEF,yCAAyC;QACzC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;YAC1E,MAAM;QACR,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,sBAAsB,EAAE,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEzC,gCAAgC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,aAAa,CAAC;QACvB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;AACL,CAAC"}

package/lib/aws/index.d.ts

@@ -0,0 +1,9 @@
+export * from "./account-id";
+export * from "./bucket";
+export * from "./function";
+export * from "./policy";
+export * from "./queue";
+export * from "./role";
+export * from "./ses";
+export * from "./table";
+//# sourceMappingURL=index.d.ts.map

package/lib/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC"}

package/lib/aws/index.js

@@ -0,0 +1,9 @@
+export * from "./account-id";
+export * from "./bucket";
+export * from "./function";
+export * from "./policy";
+export * from "./queue";
+export * from "./role";
+export * from "./ses";
+export * from "./table";
+//# sourceMappingURL=index.js.map

package/lib/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC"}

package/lib/aws/oidc/github-oidc-provider.d.ts

@@ -0,0 +1,11 @@
+import type { Input } from "../../input";
+import { OIDCProvider, type OIDCProviderProps } from "./oidc-provider";
+export interface GitHubOIDCProviderProps extends Omit<OIDCProviderProps, "thumbprint"> {
+    owner: string;
+    repository: string;
+    thumbprint?: string;
+}
+export declare class GitHubOIDCProvider extends OIDCProvider {
+    constructor(id: string, props: Input<GitHubOIDCProviderProps>);
+}
+//# sourceMappingURL=github-oidc-provider.d.ts.map

package/lib/aws/oidc/github-oidc-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-oidc-provider.d.ts","sourceRoot":"","sources":["../../../src/aws/oidc/github-oidc-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AASvE,MAAM,WAAW,uBACf,SAAQ,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAmB,SAAQ,YAAY;gBACtC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,uBAAuB,CAAC;CAc9D"}

package/lib/aws/oidc/github-oidc-provider.js

@@ -0,0 +1,22 @@
+import { isOutput } from "../../output";
+import { OIDCProvider } from "./oidc-provider";
+/**
+ * Default thumbprint for GitHub's OIDC provider
+ * This is the certificate thumbprint that GitHub uses to sign OIDC tokens
+ * @see https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#adding-the-identity-provider-to-aws
+ */
+const DEFAULT_GITHUB_THUMBPRINT = "6938fd4d98bab03faadb97b34396831e3780aea1";
+export class GitHubOIDCProvider extends OIDCProvider {
+    constructor(id, props) {
+        super(id, isOutput(props)
+            ? props.apply((props) => ({
+                ...props,
+                thumbprint: props.thumbprint ?? DEFAULT_GITHUB_THUMBPRINT,
+            }))
+            : {
+                ...props,
+                thumbprint: props.thumbprint ?? DEFAULT_GITHUB_THUMBPRINT,
+            });
+    }
+}
+//# sourceMappingURL=github-oidc-provider.js.map

package/lib/aws/oidc/github-oidc-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-oidc-provider.js","sourceRoot":"","sources":["../../../src/aws/oidc/github-oidc-provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,YAAY,EAA0B,MAAM,iBAAiB,CAAC;AAEvE;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,0CAA0C,CAAC;AAS7E,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YAAY,EAAU,EAAE,KAAqC;QAC3D,KAAK,CACH,EAAE,EACF,QAAQ,CAA0B,KAAK,CAAC;YACtC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACtB,GAAG,KAAK;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,yBAAyB;aAC1D,CAAC,CAAC;YACL,CAAC,CAAE;gBACC,GAAG,KAAK;gBACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,yBAAyB;aAC7B,CACnC,CAAC;IACJ,CAAC;CACF"}

package/lib/aws/oidc/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./github-oidc-provider";
+export * from "./oidc-provider";
+//# sourceMappingURL=index.d.ts.map

package/lib/aws/oidc/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/aws/oidc/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC"}

package/lib/aws/oidc/index.js

@@ -0,0 +1,3 @@
+export * from "./github-oidc-provider";
+export * from "./oidc-provider";
+//# sourceMappingURL=index.js.map

package/lib/aws/oidc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/aws/oidc/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC"}

package/lib/aws/oidc/oidc-provider.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Properties for configuring an AWS OIDC provider for GitHub Actions
+ */
+export interface OIDCProviderProps {
+    /**
+     * The GitHub organization or user that owns the repository
+     */
+    owner: string;
+    /**
+     * The name of the GitHub repository
+     */
+    repository: string;
+    /**
+     * Optional list of branches to restrict access to
+     * If not provided, all branches will be allowed
+     */
+    branches?: string[];
+    /**
+     * Optional list of environments to restrict access to
+     * If not provided, all environments will be allowed
+     */
+    environments?: string[];
+    /**
+     * The ARN of the IAM role to be assumed
+     */
+    roleArn: string;
+    /**
+     * Optional maximum session duration in seconds (default: 3600)
+     */
+    maxSessionDuration?: number;
+    /**
+     * Thumbprint for the OIDC provider
+     */
+    thumbprint: string;
+    /**
+     * Optional AWS region (defaults to AWS_REGION environment variable)
+     */
+    region?: string;
+}
+/**
+ * Output returned after OIDC provider configuration
+ */
+export interface OIDCProviderOutput extends OIDCProviderProps {
+    /**
+     * The ARN of the OIDC provider
+     */
+    providerArn: string;
+    /**
+     * Time at which the provider was created
+     */
+    createdAt: number;
+}
+declare const OIDCProvider_base: import("../../resource").Provider<"aws::OIDCProvider", [props: OIDCProviderProps], OIDCProviderOutput>;
+/**
+ * Resource for configuring AWS OIDC provider for GitHub Actions
+ */
+export declare class OIDCProvider extends OIDCProvider_base {
+}
+export {};
+//# sourceMappingURL=oidc-provider.d.ts.map

package/lib/aws/oidc/oidc-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-provider.d.ts","sourceRoot":"","sources":["../../../src/aws/oidc/oidc-provider.ts"],"names":[],"mappings":"AAYA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;;AAQD;;GAEG;AACH,qBAAa,YAAa,SAAQ,iBAyKjC;CAAG"}

package/lib/aws/oidc/oidc-provider.js

@@ -0,0 +1,140 @@
+import { CreateOpenIDConnectProviderCommand, DeleteOpenIDConnectProviderCommand, GetOpenIDConnectProviderCommand, GetRoleCommand, IAMClient, UpdateAssumeRolePolicyCommand, } from "@aws-sdk/client-iam";
+import { Resource } from "../../resource";
+import { getAccountId } from "../account-id";
+/**
+ * Unique identifier for our trust policy statement
+ * Used to track and remove our specific statement without affecting others
+ */
+const TRUST_POLICY_SID = "GitHubOIDCTrust";
+/**
+ * Resource for configuring AWS OIDC provider for GitHub Actions
+ */
+export class OIDCProvider extends Resource("aws::OIDCProvider", async (ctx, props) => {
+    // Initialize AWS SDK client
+    const client = new IAMClient({
+        region: props.region,
+    });
+    if (ctx.event === "delete") {
+        if (ctx.output?.providerArn) {
+            try {
+                // First, remove our trust policy statement from the role
+                const getRole = await client.send(new GetRoleCommand({
+                    RoleName: props.roleArn.split("/").pop(),
+                }));
+                if (getRole.Role?.AssumeRolePolicyDocument) {
+                    const policy = JSON.parse(decodeURIComponent(getRole.Role.AssumeRolePolicyDocument));
+                    // Remove our specific statement while preserving others
+                    policy.Statement = policy.Statement.filter((stmt) => stmt.Sid !== TRUST_POLICY_SID);
+                    await client.send(new UpdateAssumeRolePolicyCommand({
+                        RoleName: props.roleArn.split("/").pop(),
+                        PolicyDocument: JSON.stringify(policy),
+                    }));
+                }
+                // Then delete the OIDC provider if we're the last user
+                const provider = await client.send(new GetOpenIDConnectProviderCommand({
+                    OpenIDConnectProviderArn: ctx.output.providerArn,
+                }));
+                // Only delete the provider if it exists and has no other tags
+                if (provider && (!provider.Tags || provider.Tags.length === 0)) {
+                    await client.send(new DeleteOpenIDConnectProviderCommand({
+                        OpenIDConnectProviderArn: ctx.output.providerArn,
+                    }));
+                }
+            }
+            catch (error) {
+                // Log but don't throw on cleanup errors
+                console.error("Error during cleanup:", error);
+            }
+        }
+        return;
+    }
+    try {
+        const url = "https://token.actions.githubusercontent.com";
+        const thumbprint = props.thumbprint;
+        // Create or get existing OIDC provider
+        let providerArn;
+        try {
+            const createProvider = await client.send(new CreateOpenIDConnectProviderCommand({
+                Url: url,
+                ClientIDList: ["sts.amazonaws.com"],
+                ThumbprintList: [thumbprint],
+                Tags: [
+                    {
+                        Key: "ManagedBy",
+                        Value: "alchemy",
+                    },
+                ],
+            }));
+            providerArn = createProvider.OpenIDConnectProviderArn;
+        }
+        catch (error) {
+            if (error.name === "EntityAlreadyExistsException") {
+                // Provider exists, use its ARN
+                providerArn = `arn:aws:iam::${await getAccountId()}:oidc-provider/${url}`;
+            }
+            else {
+                throw error;
+            }
+        }
+        // Get current role policy
+        const getRole = await client.send(new GetRoleCommand({
+            RoleName: props.roleArn.split("/").pop(),
+        }));
+        let policy;
+        if (getRole.Role?.AssumeRolePolicyDocument) {
+            policy = JSON.parse(decodeURIComponent(getRole.Role.AssumeRolePolicyDocument));
+        }
+        else {
+            policy = {
+                Version: "2012-10-17",
+                Statement: [],
+            };
+        }
+        // Construct the trust policy conditions
+        const conditions = {
+            StringEquals: {
+                "token.actions.githubusercontent.com:aud": "sts.amazonaws.com",
+                "token.actions.githubusercontent.com:sub": `repo:${props.owner}/${props.repository}:`,
+            },
+        };
+        if (props.branches?.length) {
+            conditions.StringEquals["token.actions.githubusercontent.com:sub"] =
+                props.branches.map((branch) => `repo:${props.owner}/${props.repository}:ref:refs/heads/${branch}`);
+        }
+        if (props.environments?.length) {
+            conditions.StringEquals["token.actions.githubusercontent.com:sub"] =
+                props.environments.map((env) => `repo:${props.owner}/${props.repository}:environment:${env}`);
+        }
+        // Create our policy statement
+        const ourStatement = {
+            Sid: TRUST_POLICY_SID,
+            Effect: "Allow",
+            Principal: {
+                Federated: providerArn,
+            },
+            Action: "sts:AssumeRoleWithWebIdentity",
+            Condition: conditions,
+        };
+        // Remove any existing statement with our SID and add the new one
+        policy.Statement = [
+            ...policy.Statement.filter((stmt) => stmt.Sid !== TRUST_POLICY_SID),
+            ourStatement,
+        ];
+        // Update the role's trust policy
+        await client.send(new UpdateAssumeRolePolicyCommand({
+            RoleName: props.roleArn.split("/").pop(),
+            PolicyDocument: JSON.stringify(policy),
+        }));
+        return {
+            ...props,
+            providerArn,
+            createdAt: Date.now(),
+        };
+    }
+    catch (error) {
+        console.error("Error configuring OIDC provider:", error);
+        throw error;
+    }
+}) {
+}
+//# sourceMappingURL=oidc-provider.js.map

package/lib/aws/oidc/oidc-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-provider.js","sourceRoot":"","sources":["../../../src/aws/oidc/oidc-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,+BAA+B,EAC/B,cAAc,EACd,SAAS,EAET,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAgB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAgE7C;;;GAGG;AACH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,QAAQ,CACxC,mBAAmB,EACnB,KAAK,EAAE,GAAgC,EAAE,KAAwB,EAAE,EAAE;IACnE,4BAA4B;IAC5B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,yDAAyD;gBACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,IAAI,cAAc,CAAC;oBACjB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;iBACzC,CAAC,CACH,CAAC;gBAEF,IAAI,OAAO,CAAC,IAAI,EAAE,wBAAwB,EAAE,CAAC;oBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC1D,CAAC;oBAEF,wDAAwD;oBACxD,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CACxC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,gBAAgB,CAC7C,CAAC;oBAEF,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,6BAA6B,CAAC;wBAChC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;wBACxC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBACvC,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,uDAAuD;gBACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,+BAA+B,CAAC;oBAClC,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;iBACjD,CAAC,CACH,CAAC;gBAEF,8DAA8D;gBAC9D,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC/D,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,kCAAkC,CAAC;wBACrC,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;qBACjD,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wCAAwC;gBACxC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,6CAA6C,CAAC;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAEpC,uCAAuC;QACvC,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,CACtC,IAAI,kCAAkC,CAAC;gBACrC,GAAG,EAAE,GAAG;gBACR,YAAY,EAAE,CAAC,mBAAmB,CAAC;gBACnC,cAAc,EAAE,CAAC,UAAU,CAAC;gBAC5B,IAAI,EAAE;oBACJ;wBACE,GAAG,EAAE,WAAW;wBAChB,KAAK,EAAE,SAAS;qBACjB;iBACO;aACX,CAAC,CACH,CAAC;YACF,WAAW,GAAG,cAAc,CAAC,wBAAyB,CAAC;QACzD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,8BAA8B,EAAE,CAAC;gBAClD,+BAA+B;gBAC/B,WAAW,GAAG,gBAAgB,MAAM,YAAY,EAAE,kBAAkB,GAAG,EAAE,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,IAAI,cAAc,CAAC;YACjB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;SACzC,CAAC,CACH,CAAC;QAEF,IAAI,MAAW,CAAC;QAChB,IAAI,OAAO,CAAC,IAAI,EAAE,wBAAwB,EAAE,CAAC;YAC3C,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC1D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG;gBACP,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,EAAE;aACd,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAwB;YACtC,YAAY,EAAE;gBACZ,yCAAyC,EAAE,mBAAmB;gBAC9D,yCAAyC,EAAE,QAAQ,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG;aACtF;SACF,CAAC;QAEF,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,YAAY,CAAC,yCAAyC,CAAC;gBAChE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAChB,CAAC,MAAM,EAAE,EAAE,CACT,QAAQ,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,mBAAmB,MAAM,EAAE,CACrE,CAAC;QACN,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YAC/B,UAAU,CAAC,YAAY,CAAC,yCAAyC,CAAC;gBAChE,KAAK,CAAC,YAAY,CAAC,GAAG,CACpB,CAAC,GAAG,EAAE,EAAE,CACN,QAAQ,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,gBAAgB,GAAG,EAAE,CAC/D,CAAC;QACN,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG;YACnB,GAAG,EAAE,gBAAgB;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE;gBACT,SAAS,EAAE,WAAW;aACvB;YACD,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,UAAU;SACtB,CAAC;QAEF,iEAAiE;QACjE,MAAM,CAAC,SAAS,GAAG;YACjB,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CACxB,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,gBAAgB,CAC7C;YACD,YAAY;SACb,CAAC;QAEF,iCAAiC;QACjC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,6BAA6B,CAAC;YAChC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;YACxC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACvC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,GAAG,KAAK;YACR,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CACF;CAAG"}

package/lib/aws/policy.d.ts

@@ -0,0 +1,46 @@
+export type Effect = "Allow" | "Deny";
+export interface PolicyStatement {
+    Sid?: string;
+    Effect: Effect;
+    Action: string | string[];
+    Resource?: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+    Principal?: Record<string, string | string[]>;
+    NotPrincipal?: Record<string, string | string[]>;
+    NotAction?: string | string[];
+    NotResource?: string | string[];
+}
+export interface PolicyDocument {
+    Version: "2012-10-17";
+    Statement: PolicyStatement[];
+}
+export interface PolicyProps {
+    policyName: string;
+    document: PolicyDocument;
+    description?: string;
+    path?: string;
+    tags?: Record<string, string>;
+}
+export interface PolicyOutput extends PolicyProps {
+    id: string;
+    arn: string;
+    defaultVersionId: string;
+    attachmentCount: number;
+    createDate: Date;
+    updateDate: Date;
+    isAttachable: boolean;
+}
+declare const Policy_base: import("../resource").Provider<"iam::Policy", [props: PolicyProps], PolicyOutput>;
+export declare class Policy extends Policy_base {
+}
+export interface PolicyAttachmentProps {
+    policyArn: string;
+    roleName: string;
+}
+export interface PolicyAttachmentOutput extends PolicyAttachmentProps {
+}
+declare const PolicyAttachment_base: import("../resource").Provider<"iam::PolicyAttachment", [props: PolicyAttachmentProps], PolicyAttachmentProps>;
+export declare class PolicyAttachment extends PolicyAttachment_base {
+}
+export {};
+//# sourceMappingURL=policy.d.ts.map

package/lib/aws/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/aws/policy.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEtC,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B;AAGD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACvB;;AAED,qBAAa,MAAO,SAAQ,WA0J3B;CAAG;AAGJ,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;CAAG;;AAExE,qBAAa,gBAAiB,SAAQ,qBAyBrC;CAAG"}