alchemy 2.0.0-beta.17 → 2.0.0-beta.19

package/lib/AWS/CloudFront/PublicKey.js

@@ -0,0 +1,137 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { extractValue } from "./common.js";
+/**
+ * A CloudFront public key.
+ *
+ * Public keys are uploaded ahead of being grouped into a {@link KeyGroup} and
+ * used by Distributions for signed URL or signed cookie verification.
+ *
+ * The key body is immutable after creation — changing `encodedKey` triggers
+ * a replacement (CloudFront returns no API to rotate a key in place).
+ *
+ * @section Creating Public Keys
+ * @example PEM-encoded RSA public key
+ * ```typescript
+ * const key = yield* PublicKey("SignedUrlKey", {
+ *   encodedKey: Redacted.make(yield* fs.readFileString("./public_key.pem")),
+ *   comment: "RSA-2048 signed URL key for /private",
+ * });
+ * ```
+ */
+export const PublicKey = Resource("AWS.CloudFront.PublicKey");
+export const PublicKeyProvider = () => Provider.effect(PublicKey, Effect.gen(function* () {
+    const getById = Effect.fn(function* (id) {
+        const config = yield* cloudfront
+            .getPublicKeyConfig({ Id: id })
+            .pipe(Effect.catchTag("NoSuchPublicKey", () => Effect.succeed(undefined)));
+        if (!config?.PublicKeyConfig)
+            return undefined;
+        return { config: config.PublicKeyConfig, etag: config.ETag };
+    });
+    const getByName = Effect.fn(function* (name) {
+        const listed = yield* cloudfront.listPublicKeys({});
+        const summary = listed.PublicKeyList?.Items?.find((item) => item.Name === name);
+        if (!summary?.Id)
+            return undefined;
+        return yield* getById(summary.Id).pipe(Effect.map((found) => found ? { id: summary.Id, ...found } : undefined));
+    });
+    const buildConfig = (name, callerReference, props) => ({
+        Name: name,
+        CallerReference: callerReference,
+        EncodedKey: extractValue(props.encodedKey),
+        Comment: props.comment,
+    });
+    const toAttrs = (id, config, etag) => ({
+        publicKeyId: id,
+        name: config.Name,
+        encodedKey: config.EncodedKey,
+        callerReference: config.CallerReference,
+        etag,
+        comment: config.Comment,
+    });
+    return {
+        stables: ["publicKeyId", "callerReference"],
+        diff: Effect.fn(function* ({ id, news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if ((yield* createName(id, olds ?? {})) !==
+                (yield* createName(id, news))) {
+                return { action: "replace" };
+            }
+            if (isResolved(olds.encodedKey) &&
+                extractValue(olds.encodedKey) !== extractValue(news.encodedKey)) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.publicKeyId) {
+                const found = yield* getById(output.publicKeyId);
+                if (found)
+                    return toAttrs(output.publicKeyId, found.config, found.etag);
+            }
+            const name = yield* createName(id, olds ?? {});
+            const found = yield* getByName(name);
+            if (!found)
+                return undefined;
+            return toAttrs(found.id, found.config, found.etag);
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* createName(id, news);
+            const callerReference = name;
+            const created = yield* cloudfront
+                .createPublicKey({
+                PublicKeyConfig: buildConfig(name, callerReference, news),
+            })
+                .pipe(Effect.catchTag("PublicKeyAlreadyExists", () => getByName(name).pipe(Effect.flatMap((existing) => existing
+                ? Effect.succeed({
+                    PublicKey: {
+                        Id: existing.id,
+                        CreatedTime: new Date(),
+                        PublicKeyConfig: existing.config,
+                    },
+                    ETag: existing.etag,
+                    Location: undefined,
+                })
+                : Effect.fail(new Error(`Public key '${name}' already exists but could not be recovered`))))));
+            if (!created.PublicKey?.Id) {
+                return yield* Effect.fail(new Error("createPublicKey returned no identifier"));
+            }
+            yield* session.note(created.PublicKey.Id);
+            return toAttrs(created.PublicKey.Id, created.PublicKey.PublicKeyConfig, created.ETag);
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            const current = yield* getById(output.publicKeyId);
+            const updated = yield* cloudfront.updatePublicKey({
+                Id: output.publicKeyId,
+                IfMatch: current?.etag ?? output.etag,
+                PublicKeyConfig: buildConfig(output.name, output.callerReference, news),
+            });
+            if (!updated.PublicKey?.Id) {
+                return yield* Effect.fail(new Error("updatePublicKey returned no identifier"));
+            }
+            yield* session.note(output.publicKeyId);
+            return toAttrs(updated.PublicKey.Id, updated.PublicKey.PublicKeyConfig, updated.ETag);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const current = yield* getById(output.publicKeyId);
+            if (!current)
+                return;
+            yield* cloudfront
+                .deletePublicKey({
+                Id: output.publicKeyId,
+                IfMatch: current.etag,
+            })
+                .pipe(Effect.catchTag("NoSuchPublicKey", () => Effect.void));
+        }),
+    };
+}));
+const createName = (id, props) => props.name
+    ? Effect.succeed(props.name)
+    : createPhysicalName({ id, maxLength: 128, lowercase: true });
+//# sourceMappingURL=PublicKey.js.map

package/lib/AWS/CloudFront/PublicKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicKey.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/PublicKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwD3C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAY,0BAA0B,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,QAAQ,CAAC,MAAM,CACb,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU;aAC7B,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;aAC9B,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACpE,CAAC;QACJ,IAAI,CAAC,MAAM,EAAE,eAAe;YAAE,OAAO,SAAS,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAC7B,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,EAAE;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACjD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,eAAuB,EACvB,KAAqB,EACO,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI;QACV,eAAe,EAAE,eAAe;QAChC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CACd,EAAU,EACV,MAAkC,EAClC,IAAwB,EACxB,EAAE,CAAC,CAAC;QACJ,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAC/D,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,KAAK;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,eAAe,GAAG,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU;iBAC9B,eAAe,CAAC;gBACf,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC;aAC1D,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ;gBACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACb,SAAS,EAAE;wBACT,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,WAAW,EAAE,IAAI,IAAI,EAAE;wBACvB,eAAe,EAAE,QAAQ,CAAC,MAAM;qBACjC;oBACD,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,SAAS;iBACpB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,eAAe,IAAI,6CAA6C,CACjE,CACF,CACN,CACF,CACF,CACF,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS,CAAC,EAAE,EACpB,OAAO,CAAC,SAAS,CAAC,eAAe,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;gBAChD,EAAE,EAAE,MAAM,CAAC,WAAW;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACrC,eAAe,EAAE,WAAW,CAC1B,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,eAAe,EACtB,IAAI,CACL;aACF,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS,CAAC,EAAE,EACpB,OAAO,CAAC,SAAS,CAAC,eAAe,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,CAAC,UAAU;iBACd,eAAe,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,WAAW;gBACtB,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAqB,EAAE,EAAE,CACvD,KAAK,CAAC,IAAI;IACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/lib/AWS/CloudFront/ResponseHeadersPolicy.d.ts

@@ -0,0 +1,114 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface ResponseHeadersPolicyProps {
+    /**
+     * Name of the response headers policy. If omitted, a deterministic name is
+     * generated. Names must be unique per AWS account. Changing the name
+     * triggers a replacement.
+     */
+    name?: string;
+    /**
+     * Optional comment describing the policy.
+     */
+    comment?: string;
+    /**
+     * CORS configuration applied to viewer responses.
+     */
+    corsConfig?: cloudfront.ResponseHeadersPolicyCorsConfig;
+    /**
+     * Standard security headers (HSTS, X-Frame-Options, etc.) added to
+     * viewer responses.
+     */
+    securityHeadersConfig?: cloudfront.ResponseHeadersPolicySecurityHeadersConfig;
+    /**
+     * Server-Timing header configuration for measuring CloudFront performance.
+     */
+    serverTimingHeadersConfig?: cloudfront.ResponseHeadersPolicyServerTimingHeadersConfig;
+    /**
+     * Custom headers to add to viewer responses.
+     */
+    customHeadersConfig?: cloudfront.ResponseHeadersPolicyCustomHeadersConfig;
+    /**
+     * Headers to remove from viewer responses.
+     */
+    removeHeadersConfig?: cloudfront.ResponseHeadersPolicyRemoveHeadersConfig;
+}
+export interface ResponseHeadersPolicy extends Resource<"AWS.CloudFront.ResponseHeadersPolicy", ResponseHeadersPolicyProps, {
+    /**
+     * CloudFront-assigned response headers policy identifier.
+     */
+    responseHeadersPolicyId: string;
+    /**
+     * Name of the response headers policy.
+     */
+    name: string;
+    /**
+     * Most recent entity tag for update/delete operations.
+     */
+    etag: string | undefined;
+    /**
+     * Current comment on the policy.
+     */
+    comment: string | undefined;
+    /**
+     * Current CORS configuration.
+     */
+    corsConfig: cloudfront.ResponseHeadersPolicyCorsConfig | undefined;
+    /**
+     * Current security headers configuration.
+     */
+    securityHeadersConfig: cloudfront.ResponseHeadersPolicySecurityHeadersConfig | undefined;
+    /**
+     * Current Server-Timing configuration.
+     */
+    serverTimingHeadersConfig: cloudfront.ResponseHeadersPolicyServerTimingHeadersConfig | undefined;
+    /**
+     * Current custom headers configuration.
+     */
+    customHeadersConfig: cloudfront.ResponseHeadersPolicyCustomHeadersConfig | undefined;
+    /**
+     * Current remove-headers configuration.
+     */
+    removeHeadersConfig: cloudfront.ResponseHeadersPolicyRemoveHeadersConfig | undefined;
+}, never, Providers> {
+}
+/**
+ * A CloudFront response headers policy.
+ *
+ * Response headers policies add or remove headers in viewer responses,
+ * including CORS, standard security headers (HSTS, X-Frame-Options,
+ * X-Content-Type-Options, Referrer-Policy, etc.), Server-Timing, custom
+ * headers and explicit header removal. They are referenced by ID on a
+ * Distribution's default behavior or per-path cache behaviors.
+ *
+ * @section Creating Response Headers Policies
+ * @example Standard security + CORS
+ * ```typescript
+ * const responseHeadersPolicy = yield* ResponseHeadersPolicy("AppResponseHeaders", {
+ *   comment: "Default app security + CORS",
+ *   corsConfig: {
+ *     AccessControlAllowOrigins: { Quantity: 1, Items: ["https://app.example.com"] },
+ *     AccessControlAllowMethods: { Quantity: 2, Items: ["GET", "OPTIONS"] },
+ *     AccessControlAllowHeaders: { Quantity: 1, Items: ["Authorization"] },
+ *     AccessControlAllowCredentials: false,
+ *     OriginOverride: true,
+ *   },
+ *   securityHeadersConfig: {
+ *     StrictTransportSecurity: {
+ *       AccessControlMaxAgeSec: 31536000,
+ *       IncludeSubdomains: true,
+ *       Preload: true,
+ *       Override: true,
+ *     },
+ *     ContentTypeOptions: { Override: true },
+ *     FrameOptions: { FrameOption: "DENY", Override: true },
+ *     ReferrerPolicy: { ReferrerPolicy: "no-referrer", Override: true },
+ *   },
+ * });
+ * ```
+ */
+export declare const ResponseHeadersPolicy: import("../../Resource.ts").ResourceClass<ResponseHeadersPolicy>;
+export declare const ResponseHeadersPolicyProvider: () => import("effect/Layer").Layer<Provider.Provider<ResponseHeadersPolicy>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=ResponseHeadersPolicy.d.ts.map

package/lib/AWS/CloudFront/ResponseHeadersPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseHeadersPolicy.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/ResponseHeadersPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAI9D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC,+BAA+B,CAAC;IACxD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC,0CAA0C,CAAC;IAC9E;;OAEG;IACH,yBAAyB,CAAC,EAAE,UAAU,CAAC,8CAA8C,CAAC;IACtF;;OAEG;IACH,mBAAmB,CAAC,EAAE,UAAU,CAAC,wCAAwC,CAAC;IAC1E;;OAEG;IACH,mBAAmB,CAAC,EAAE,UAAU,CAAC,wCAAwC,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,sCAAsC,EACtC,0BAA0B,EAC1B;IACE;;OAEG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,UAAU,EAAE,UAAU,CAAC,+BAA+B,GAAG,SAAS,CAAC;IACnE;;OAEG;IACH,qBAAqB,EACjB,UAAU,CAAC,0CAA0C,GACrD,SAAS,CAAC;IACd;;OAEG;IACH,yBAAyB,EACrB,UAAU,CAAC,8CAA8C,GACzD,SAAS,CAAC;IACd;;OAEG;IACH,mBAAmB,EACf,UAAU,CAAC,wCAAwC,GACnD,SAAS,CAAC;IACd;;OAEG;IACH,mBAAmB,EACf,UAAU,CAAC,wCAAwC,GACnD,SAAS,CAAC;CACf,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,qTAwKvC,CAAC"}

package/lib/AWS/CloudFront/ResponseHeadersPolicy.js

@@ -0,0 +1,162 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * A CloudFront response headers policy.
+ *
+ * Response headers policies add or remove headers in viewer responses,
+ * including CORS, standard security headers (HSTS, X-Frame-Options,
+ * X-Content-Type-Options, Referrer-Policy, etc.), Server-Timing, custom
+ * headers and explicit header removal. They are referenced by ID on a
+ * Distribution's default behavior or per-path cache behaviors.
+ *
+ * @section Creating Response Headers Policies
+ * @example Standard security + CORS
+ * ```typescript
+ * const responseHeadersPolicy = yield* ResponseHeadersPolicy("AppResponseHeaders", {
+ *   comment: "Default app security + CORS",
+ *   corsConfig: {
+ *     AccessControlAllowOrigins: { Quantity: 1, Items: ["https://app.example.com"] },
+ *     AccessControlAllowMethods: { Quantity: 2, Items: ["GET", "OPTIONS"] },
+ *     AccessControlAllowHeaders: { Quantity: 1, Items: ["Authorization"] },
+ *     AccessControlAllowCredentials: false,
+ *     OriginOverride: true,
+ *   },
+ *   securityHeadersConfig: {
+ *     StrictTransportSecurity: {
+ *       AccessControlMaxAgeSec: 31536000,
+ *       IncludeSubdomains: true,
+ *       Preload: true,
+ *       Override: true,
+ *     },
+ *     ContentTypeOptions: { Override: true },
+ *     FrameOptions: { FrameOption: "DENY", Override: true },
+ *     ReferrerPolicy: { ReferrerPolicy: "no-referrer", Override: true },
+ *   },
+ * });
+ * ```
+ */
+export const ResponseHeadersPolicy = Resource("AWS.CloudFront.ResponseHeadersPolicy");
+export const ResponseHeadersPolicyProvider = () => Provider.effect(ResponseHeadersPolicy, Effect.gen(function* () {
+    const getById = Effect.fn(function* (id) {
+        const config = yield* cloudfront
+            .getResponseHeadersPolicyConfig({ Id: id })
+            .pipe(Effect.catchTag("NoSuchResponseHeadersPolicy", () => Effect.succeed(undefined)));
+        if (!config?.ResponseHeadersPolicyConfig)
+            return undefined;
+        return {
+            config: config.ResponseHeadersPolicyConfig,
+            etag: config.ETag,
+        };
+    });
+    const getByName = Effect.fn(function* (name) {
+        const listed = yield* cloudfront.listResponseHeadersPolicies({
+            Type: "custom",
+        });
+        const summary = listed.ResponseHeadersPolicyList?.Items?.find((item) => item.ResponseHeadersPolicy?.ResponseHeadersPolicyConfig?.Name ===
+            name);
+        if (!summary?.ResponseHeadersPolicy?.Id)
+            return undefined;
+        return yield* getById(summary.ResponseHeadersPolicy.Id).pipe(Effect.map((found) => found
+            ? { id: summary.ResponseHeadersPolicy.Id, ...found }
+            : undefined));
+    });
+    const buildConfig = (name, props) => ({
+        Name: name,
+        Comment: props.comment,
+        CorsConfig: props.corsConfig,
+        SecurityHeadersConfig: props.securityHeadersConfig,
+        ServerTimingHeadersConfig: props.serverTimingHeadersConfig,
+        CustomHeadersConfig: props.customHeadersConfig,
+        RemoveHeadersConfig: props.removeHeadersConfig,
+    });
+    const toAttrs = (id, config, etag) => ({
+        responseHeadersPolicyId: id,
+        name: config.Name,
+        etag,
+        comment: config.Comment,
+        corsConfig: config.CorsConfig,
+        securityHeadersConfig: config.SecurityHeadersConfig,
+        serverTimingHeadersConfig: config.ServerTimingHeadersConfig,
+        customHeadersConfig: config.CustomHeadersConfig,
+        removeHeadersConfig: config.RemoveHeadersConfig,
+    });
+    return {
+        stables: ["responseHeadersPolicyId"],
+        diff: Effect.fn(function* ({ id, news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if ((yield* createName(id, olds ?? {})) !==
+                (yield* createName(id, news))) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.responseHeadersPolicyId) {
+                const found = yield* getById(output.responseHeadersPolicyId);
+                if (found) {
+                    return toAttrs(output.responseHeadersPolicyId, found.config, found.etag);
+                }
+            }
+            const name = yield* createName(id, olds ?? {});
+            const found = yield* getByName(name);
+            if (!found)
+                return undefined;
+            return toAttrs(found.id, found.config, found.etag);
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* createName(id, news);
+            const created = yield* cloudfront
+                .createResponseHeadersPolicy({
+                ResponseHeadersPolicyConfig: buildConfig(name, news),
+            })
+                .pipe(Effect.catchTag("ResponseHeadersPolicyAlreadyExists", () => getByName(name).pipe(Effect.flatMap((existing) => existing
+                ? Effect.succeed({
+                    ResponseHeadersPolicy: {
+                        Id: existing.id,
+                        LastModifiedTime: new Date(),
+                        ResponseHeadersPolicyConfig: existing.config,
+                    },
+                    ETag: existing.etag,
+                    Location: undefined,
+                })
+                : Effect.fail(new Error(`Response headers policy '${name}' already exists but could not be recovered`))))));
+            if (!created.ResponseHeadersPolicy?.Id) {
+                return yield* Effect.fail(new Error("createResponseHeadersPolicy returned no identifier"));
+            }
+            yield* session.note(created.ResponseHeadersPolicy.Id);
+            return toAttrs(created.ResponseHeadersPolicy.Id, created.ResponseHeadersPolicy.ResponseHeadersPolicyConfig, created.ETag);
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            const current = yield* getById(output.responseHeadersPolicyId);
+            const updated = yield* cloudfront.updateResponseHeadersPolicy({
+                Id: output.responseHeadersPolicyId,
+                IfMatch: current?.etag ?? output.etag,
+                ResponseHeadersPolicyConfig: buildConfig(output.name, news),
+            });
+            if (!updated.ResponseHeadersPolicy?.Id) {
+                return yield* Effect.fail(new Error("updateResponseHeadersPolicy returned no identifier"));
+            }
+            yield* session.note(output.responseHeadersPolicyId);
+            return toAttrs(updated.ResponseHeadersPolicy.Id, updated.ResponseHeadersPolicy.ResponseHeadersPolicyConfig, updated.ETag);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const current = yield* getById(output.responseHeadersPolicyId);
+            if (!current)
+                return;
+            yield* cloudfront
+                .deleteResponseHeadersPolicy({
+                Id: output.responseHeadersPolicyId,
+                IfMatch: current.etag,
+            })
+                .pipe(Effect.catchTag("NoSuchResponseHeadersPolicy", () => Effect.void));
+        }),
+    };
+}));
+const createName = (id, props) => props.name
+    ? Effect.succeed(props.name)
+    : createPhysicalName({ id, maxLength: 128, lowercase: true });
+//# sourceMappingURL=ResponseHeadersPolicy.js.map

package/lib/AWS/CloudFront/ResponseHeadersPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseHeadersPolicy.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/ResponseHeadersPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA0F7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,sCAAsC,CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,MAAM,CACb,qBAAqB,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU;aAC7B,8BAA8B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;aAC1C,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACJ,IAAI,CAAC,MAAM,EAAE,2BAA2B;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,2BAA2B;YAC1C,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAC3D,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,yBAAyB,EAAE,KAAK,EAAE,IAAI,CAC3D,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,IAAI;YAC7D,IAAI,CACP,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK;YACH,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE;YACpD,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,KAAiC,EACO,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CACd,EAAU,EACV,MAA8C,EAC9C,IAAwB,EACxB,EAAE,CAAC,CAAC;QACJ,uBAAuB,EAAE,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC7D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,OAAO,CACZ,MAAM,CAAC,uBAAuB,EAC9B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,IAAI,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU;iBAC9B,2BAA2B,CAAC;gBAC3B,2BAA2B,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;aACrD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE,CACzD,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ;gBACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACb,qBAAqB,EAAE;wBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,gBAAgB,EAAE,IAAI,IAAI,EAAE;wBAC5B,2BAA2B,EAAE,QAAQ,CAAC,MAAM;qBAC7C;oBACD,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,SAAS;iBACpB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,4BAA4B,IAAI,6CAA6C,CAC9E,CACF,CACN,CACF,CACF,CACF,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAChE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,OAAO,CACZ,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAChC,OAAO,CAAC,qBAAqB,CAAC,2BAA2B,EACzD,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,2BAA2B,CAAC;gBAC5D,EAAE,EAAE,MAAM,CAAC,uBAAuB;gBAClC,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACrC,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;aAC5D,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAChE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACpD,OAAO,OAAO,CACZ,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAChC,OAAO,CAAC,qBAAqB,CAAC,2BAA2B,EACzD,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,CAAC,UAAU;iBACd,2BAA2B,CAAC;gBAC3B,EAAE,EAAE,MAAM,CAAC,uBAAuB;gBAClC,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAClE,CAAC;QACN,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAiC,EAAE,EAAE,CACnE,KAAK,CAAC,IAAI;IACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/lib/AWS/CloudFront/index.d.ts

@@ -1,9 +1,14 @@
+export { CachePolicy, CachePolicyProvider } from "./CachePolicy.ts";
 export { Distribution, DistributionProvider } from "./Distribution.ts";
 export { Function, FunctionProvider } from "./Function.ts";
 export { Invalidation, InvalidationProvider } from "./Invalidation.ts";
+export { KeyGroup, KeyGroupProvider } from "./KeyGroup.ts";
 export { KeyValueStore, KeyValueStoreProvider } from "./KeyValueStore.ts";
 export { KvEntries, KvEntriesProvider } from "./KvEntries.ts";
 export { KvRoutesUpdate, KvRoutesUpdateProvider } from "./KvRoutesUpdate.ts";
 export { MANAGED_ALL_VIEWER_EXCEPT_HOST_HEADER_POLICY_ID, MANAGED_CACHING_DISABLED_POLICY_ID, MANAGED_CACHING_OPTIMIZED_POLICY_ID, } from "./ManagedPolicies.ts";
 export { OriginAccessControl, OriginAccessControlProvider, } from "./OriginAccessControl.ts";
+export { OriginRequestPolicy, OriginRequestPolicyProvider, } from "./OriginRequestPolicy.ts";
+export { PublicKey, PublicKeyProvider } from "./PublicKey.ts";
+export { ResponseHeadersPolicy, ResponseHeadersPolicyProvider, } from "./ResponseHeadersPolicy.ts";
 //# sourceMappingURL=index.d.ts.map

package/lib/AWS/CloudFront/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/lib/AWS/CloudFront/index.js

@@ -1,9 +1,14 @@
+export { CachePolicy, CachePolicyProvider } from "./CachePolicy.js";
 export { Distribution, DistributionProvider } from "./Distribution.js";
 export { Function, FunctionProvider } from "./Function.js";
 export { Invalidation, InvalidationProvider } from "./Invalidation.js";
+export { KeyGroup, KeyGroupProvider } from "./KeyGroup.js";
 export { KeyValueStore, KeyValueStoreProvider } from "./KeyValueStore.js";
 export { KvEntries, KvEntriesProvider } from "./KvEntries.js";
 export { KvRoutesUpdate, KvRoutesUpdateProvider } from "./KvRoutesUpdate.js";
 export { MANAGED_ALL_VIEWER_EXCEPT_HOST_HEADER_POLICY_ID, MANAGED_CACHING_DISABLED_POLICY_ID, MANAGED_CACHING_OPTIMIZED_POLICY_ID, } from "./ManagedPolicies.js";
 export { OriginAccessControl, OriginAccessControlProvider, } from "./OriginAccessControl.js";
+export { OriginRequestPolicy, OriginRequestPolicyProvider, } from "./OriginRequestPolicy.js";
+export { PublicKey, PublicKeyProvider } from "./PublicKey.js";
+export { ResponseHeadersPolicy, ResponseHeadersPolicyProvider, } from "./ResponseHeadersPolicy.js";
 //# sourceMappingURL=index.js.map

package/lib/AWS/CloudFront/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/lib/AWS/ECS/CapacityProvider.d.ts

@@ -0,0 +1,102 @@
+import * as ecs from "@distilled.cloud/aws/ecs";
+import { Region } from "@distilled.cloud/aws/Region";
+import type { Input } from "../../Input.ts";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { AWSEnvironment, type AccountID } from "../Environment.ts";
+import type { Providers } from "../Providers.ts";
+import type { RegionID } from "../Region.ts";
+export type CapacityProviderName = string;
+export type CapacityProviderArn = `arn:aws:ecs:${RegionID}:${AccountID}:capacity-provider/${CapacityProviderName}`;
+export interface CapacityProviderProps {
+    /**
+     * Capacity provider name. If omitted, a deterministic name is generated.
+     *
+     * Names beginning with `aws`, `ecs`, or `fargate` are reserved by AWS.
+     * Changing this triggers a replacement.
+     */
+    name?: string;
+    /**
+     * ARN of the EC2 Auto Scaling Group that backs this capacity provider.
+     *
+     * Cannot be changed after creation; changing this triggers a replacement.
+     */
+    autoScalingGroupArn: Input<string>;
+    /**
+     * Managed scaling configuration applied by ECS to the underlying ASG.
+     */
+    managedScaling?: ecs.ManagedScaling;
+    /**
+     * Whether ECS protects in-use container instances from ASG scale-in.
+     * @default "DISABLED"
+     */
+    managedTerminationProtection?: ecs.ManagedTerminationProtection;
+    /**
+     * Whether ECS sets container instances to DRAINING when terminated by ASG.
+     * @default "DISABLED"
+     */
+    managedDraining?: ecs.ManagedDraining;
+    /**
+     * User-defined tags to apply to the capacity provider.
+     */
+    tags?: Record<string, string>;
+}
+export interface CapacityProvider extends Resource<"AWS.ECS.CapacityProvider", CapacityProviderProps, {
+    capacityProviderArn: CapacityProviderArn;
+    name: CapacityProviderName;
+    status: ecs.CapacityProviderStatus;
+    updateStatus: ecs.CapacityProviderUpdateStatus | undefined;
+    autoScalingGroupArn: string;
+    managedScaling: ecs.ManagedScaling | undefined;
+    managedTerminationProtection: ecs.ManagedTerminationProtection | undefined;
+    managedDraining: ecs.ManagedDraining | undefined;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An Amazon ECS capacity provider backed by an EC2 Auto Scaling Group.
+ *
+ * Capacity providers are associated with one or more ECS clusters via
+ * {@link Cluster#capacityProviders} and are referenced by a service or task's
+ * capacity provider strategy.
+ *
+ * Only EC2 Auto Scaling Group-backed capacity providers are currently
+ * supported. The reserved AWS providers `FARGATE` and `FARGATE_SPOT` do not
+ * need to be created and can be referenced by name on a `Cluster` directly.
+ *
+ * @section Creating Capacity Providers
+ * @example ASG-Backed Capacity Provider
+ * ```typescript
+ * const provider = yield* CapacityProvider("AppCapacityProvider", {
+ *   autoScalingGroupArn: asg.autoScalingGroupArn,
+ *   managedScaling: {
+ *     status: "ENABLED",
+ *     targetCapacity: 80,
+ *     minimumScalingStepSize: 1,
+ *     maximumScalingStepSize: 10,
+ *   },
+ *   managedTerminationProtection: "ENABLED",
+ * });
+ *
+ * yield* Cluster("AppCluster", {
+ *   capacityProviders: [provider.name],
+ *   defaultCapacityProviderStrategy: [
+ *     { capacityProvider: provider.name, weight: 1 },
+ *   ],
+ * });
+ * ```
+ *
+ * @section Adopting Existing Capacity Providers
+ * @example Adopt an existing provider
+ * ```typescript
+ * import { adopt } from "alchemy/AdoptPolicy";
+ *
+ * yield* CapacityProvider("AppCapacityProvider", {
+ *   name: "existing-provider",
+ *   autoScalingGroupArn: asg.autoScalingGroupArn,
+ * }).pipe(adopt());
+ * ```
+ */
+export declare const CapacityProvider: import("../../Resource.ts").ResourceClass<CapacityProvider>;
+export declare const CapacityProviderProvider: () => import("effect/Layer").Layer<Provider.Provider<CapacityProvider>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Region | import("@distilled.cloud/aws/Credentials").Credentials | AWSEnvironment>;
+//# sourceMappingURL=CapacityProvider.d.ts.map

package/lib/AWS/ECS/CapacityProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapacityProvider.d.ts","sourceRoot":"","sources":["../../../src/AWS/ECS/CapacityProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAKrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC1C,MAAM,MAAM,mBAAmB,GAC7B,eAAe,QAAQ,IAAI,SAAS,sBAAsB,oBAAoB,EAAE,CAAC;AAEnF,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC;IACpC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,GAAG,CAAC,4BAA4B,CAAC;IAChE;;;OAGG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;IACtC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,0BAA0B,EAC1B,qBAAqB,EACrB;IACE,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,sBAAsB,CAAC;IACnC,YAAY,EAAE,GAAG,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,GAAG,SAAS,CAAC;IAC/C,4BAA4B,EAAE,GAAG,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAC3E,eAAe,EAAE,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,2RAwNlC,CAAC"}