alchemy 2.0.0-beta.55 → 2.0.0-beta.57

package/lib/AWS/EC2/NetworkAcl.js

@@ -1,12 +1,67 @@
 import * as ec2 from "@distilled.cloud/aws/ec2";
 import * as Effect from "effect/Effect";
 import * as Schedule from "effect/Schedule";
+import * as Stream from "effect/Stream";
 import { isResolved } from "../../Diff.js";
 import * as Provider from "../../Provider.js";
 import { Resource } from "../../Resource.js";
 import { createInternalTags, createTagsList, diffTags } from "../../Tags.js";
 import { AWSEnvironment } from "../Environment.js";
 export const NetworkAclId = (id) => `acl-${id}`;
+/**
+ * A network ACL — a stateless firewall that controls inbound and outbound
+ * traffic at the *subnet* level, evaluated as an ordered list of numbered
+ * allow/deny rules.
+ *
+ * Unlike security groups (which are stateful and attach to interfaces), a
+ * network ACL is associated with subnets and evaluates return traffic
+ * independently, so you typically pair each inbound rule with a matching
+ * ephemeral-port outbound rule. The ACL itself only takes `vpcId` and `tags`;
+ * the actual rules live in `NetworkAclEntry` resources and subnet attachments
+ * in `NetworkAclAssociation` resources. Changing `vpcId` replaces the ACL.
+ *
+ * @resource
+ * @section Creating Network ACLs
+ * @example Basic Network ACL
+ * ```typescript
+ * const acl = yield* AWS.EC2.NetworkAcl("PrivateNetworkAcl", {
+ *   vpcId: vpc.vpcId,
+ *   tags: { Name: "private-nacl" },
+ * });
+ * ```
+ * This creates an empty custom ACL in the VPC — it starts with only the implicit
+ * default-deny rules, so until you add entries it blocks all traffic on any
+ * subnet you associate with it.
+ *
+ * @section Composing Rules and Associations
+ * A network ACL is only useful once you attach rules and point subnets at it.
+ * The typical pattern is one `NetworkAcl`, several `NetworkAclEntry` rules, and
+ * one `NetworkAclAssociation` per subnet.
+ * @example Network ACL with an Inbound Rule and Subnet Association
+ * ```typescript
+ * const acl = yield* AWS.EC2.NetworkAcl("PrivateNetworkAcl", {
+ *   vpcId: vpc.vpcId,
+ * });
+ *
+ * const allowVpc = yield* AWS.EC2.NetworkAclEntry("AllowVpc", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 100,
+ *   protocol: "-1",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "10.0.0.0/16",
+ * });
+ *
+ * const association = yield* AWS.EC2.NetworkAclAssociation("SubnetAssoc", {
+ *   networkAclId: acl.networkAclId,
+ *   subnetId: privateSubnet.subnetId,
+ * });
+ * ```
+ * The entry allows all traffic from within the VPC CIDR and the association
+ * makes the subnet use this ACL instead of the VPC default. Build up the full
+ * rule set by adding more `NetworkAclEntry` resources with increasing
+ * `ruleNumber`s.
+ */
 export const NetworkAcl = Resource("AWS.EC2.NetworkAcl");
 export const NetworkAclProvider = () => Provider.effect(NetworkAcl, Effect.gen(function* () {
     const createTags = Effect.fn(function* (id, tags) {
@@ -62,6 +117,10 @@ export const NetworkAclProvider = () => Provider.effect(NetworkAcl, Effect.gen(f
             const acl = yield* describeNetworkAcl(output.networkAclId);
             return yield* toAttrs(acl);
         }),
+        list: () => Effect.gen(function* () {
+            const acls = yield* ec2.describeNetworkAcls.pages({}).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.NetworkAcls ?? []).filter((acl) => acl.NetworkAclId != null))));
+            return yield* Effect.forEach(acls, (acl) => toAttrs(acl));
+        }),
         diff: Effect.fn(function* ({ news, olds }) {
             if (!isResolved(news))
                 return;

package/lib/AWS/EC2/NetworkAcl.js.map

@@ -1 +1 @@
-{"version":3,"file":"NetworkAcl.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAcl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMnD,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAM,EACiB,EAAE,CAAC,OAAO,EAAE,EAA2B,CAAC;AAmDjE,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,oBAAoB,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,EAAU,EACV,IAA6B;QAE7B,OAAO;YACL,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,EAAE,CAClD,GAAG,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EACrC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,GAAG;QACD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,YAAY,YAAY,CAAC,CAAC,CACpE,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,GAAmB;QAC9D,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC;QAC5D,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAA4B;YAC9C,aAAa,EACX,eAAe,MAAM,IAAI,SAAS,gBAAgB,GAAG,CAAC,YAAY,EAAmB;YACvF,KAAK,EAAE,GAAG,CAAC,KAAc;YACzB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,KAAK;YACjC,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAW;gBACzB,QAAQ,EAAE,CAAC,CAAC,QAAS;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAW;gBACzB,MAAM,EAAE,CAAC,CAAC,MAAO;gBACjB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC1B,CAAC,CAAC;wBACE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;wBACzB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;qBAC1B;oBACH,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,CAAC,CAAC,SAAS;oBACpB,CAAC,CAAC;wBACE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI;wBACtB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE;qBACnB;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,uBAAuB,EAAE,CAAC,CAAC,uBAAwB;gBACnD,YAAY,EAAE,CAAC,CAAC,YAAa;gBAC7B,QAAQ,EAAE,CAAC,CAAC,QAAS;aACtB,CAAC,CAAC;SAC+B,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,CAAC;QAElE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kCAAkC;YAClC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+BAA+B;QACjC,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAErD,sEAAsE;YACtE,IAAI,GAA+B,CAAC;YACpC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;qBACtB,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;qBAC7D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CACpC,CACF,CAAC;gBACJ,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAED,yCAAyC;YACzC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACzC,KAAK,EAAE,IAAI,CAAC,KAAe;oBAC3B,iBAAiB,EAAE;wBACjB;4BACE,YAAY,EAAE,aAAa;4BAC3B,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC;yBAClC;qBACF;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAW,CAAC,YAAa,CAAC;gBAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;gBACxD,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAa,CAAC;YAEvC,8CAA8C;YAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC,CACtB,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YAED,uBAAuB;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAE7D,KAAK,CAAC,CAAC,GAAG;iBACP,gBAAgB,CAAC;gBAChB,YAAY,EAAE,YAAY;gBAC1B,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,8BAA8B,EAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB;YACD,0EAA0E;YAC1E,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;oBACX,OAAO,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAC1C,CAAC;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,iDAAiD,OAAO,GAAG,CAAC,GAAG,CAChE,CACF,CACF;aACF,CAAC,CACH,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,YAAY,UAAU,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"NetworkAcl.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAcl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMnD,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAM,EACiB,EAAE,CAAC,OAAO,EAAE,EAA2B,CAAC;AAmFjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,oBAAoB,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,EAAU,EACV,IAA6B;QAE7B,OAAO;YACL,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,EAAE,CAClD,GAAG,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EACrC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,GAAG;QACD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,YAAY,YAAY,CAAC,CAAC,CACpE,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,GAAmB;QAC9D,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC;QAC5D,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAA4B;YAC9C,aAAa,EACX,eAAe,MAAM,IAAI,SAAS,gBAAgB,GAAG,CAAC,YAAY,EAAmB;YACvF,KAAK,EAAE,GAAG,CAAC,KAAc;YACzB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,KAAK;YACjC,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAW;gBACzB,QAAQ,EAAE,CAAC,CAAC,QAAS;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAW;gBACzB,MAAM,EAAE,CAAC,CAAC,MAAO;gBACjB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC1B,CAAC,CAAC;wBACE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;wBACzB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;qBAC1B;oBACH,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,CAAC,CAAC,SAAS;oBACpB,CAAC,CAAC;wBACE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI;wBACtB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE;qBACnB;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,uBAAuB,EAAE,CAAC,CAAC,uBAAwB;gBACnD,YAAY,EAAE,CAAC,CAAC,YAAa;gBAC7B,QAAQ,EAAE,CAAC,CAAC,QAAS;aACtB,CAAC,CAAC;SAC+B,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,CAAC;QAElE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,IAAI,EAAE,GAAG,EAAE,CACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAoD,EAAE,CACxD,GAAG,CAAC,YAAY,IAAI,IAAI,CAC3B,CACF,CACF,CACF,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;QAEJ,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kCAAkC;YAClC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+BAA+B;QACjC,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAErD,sEAAsE;YACtE,IAAI,GAA+B,CAAC;YACpC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;qBACtB,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;qBAC7D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CACpC,CACF,CAAC;gBACJ,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAED,yCAAyC;YACzC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACzC,KAAK,EAAE,IAAI,CAAC,KAAe;oBAC3B,iBAAiB,EAAE;wBACjB;4BACE,YAAY,EAAE,aAAa;4BAC3B,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC;yBAClC;qBACF;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAW,CAAC,YAAa,CAAC;gBAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;gBACxD,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAa,CAAC;YAEvC,8CAA8C;YAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC,CACtB,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YAED,uBAAuB;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAE7D,KAAK,CAAC,CAAC,GAAG;iBACP,gBAAgB,CAAC;gBAChB,YAAY,EAAE,YAAY;gBAC1B,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,8BAA8B,EAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB;YACD,0EAA0E;YAC1E,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;oBACX,OAAO,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAC1C,CAAC;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,iDAAiD,OAAO,GAAG,CAAC,GAAG,CAChE,CACF,CACF;aACF,CAAC,CACH,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,YAAY,UAAU,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/EC2/NetworkAclAssociation.d.ts

@@ -16,11 +16,46 @@ export interface NetworkAclAssociationProps {
     subnetId: SubnetId;
 }
 export interface NetworkAclAssociation extends Resource<"AWS.EC2.NetworkAclAssociation", NetworkAclAssociationProps, {
+    /**
+     * The ID of the association between the network ACL and the subnet.
+     */
     associationId: NetworkAclAssociationId;
+    /**
+     * The ID of the network ACL the subnet is associated with.
+     */
     networkAclId: NetworkAclId;
+    /**
+     * The ID of the associated subnet.
+     */
     subnetId: SubnetId;
 }, never, Providers> {
 }
+/**
+ * Associates a subnet with a `NetworkAcl`, replacing whichever ACL the subnet
+ * currently uses (every subnet is always associated with exactly one network
+ * ACL — the VPC's default until you point it at a custom one).
+ *
+ * Changing `subnetId` replaces the association, while changing only
+ * `networkAclId` re-points the same subnet at a different ACL in place. On
+ * delete, the subnet is reverted to the VPC's default network ACL so it is never
+ * left without one.
+ *
+ * @resource
+ * @section Associating Subnets
+ * A subnet starts out attached to the VPC's default ACL; this resource moves it
+ * onto a custom ACL so the rules you defined with `NetworkAclEntry` take effect
+ * for that subnet.
+ * @example Move a Subnet onto a Custom Network ACL
+ * ```typescript
+ * const association = yield* AWS.EC2.NetworkAclAssociation("PrivateSubnetNaclAssoc", {
+ *   networkAclId: privateNetworkAcl.networkAclId,
+ *   subnetId: privateSubnet.subnetId,
+ * });
+ * ```
+ * This detaches the subnet from the default ACL and attaches it to your custom
+ * ACL; destroying the association automatically reverts the subnet to the
+ * default ACL, which is the safe way to "remove" a custom ACL from a subnet.
+ */
 export declare const NetworkAclAssociation: import("../../Resource.ts").ResourceClass<NetworkAclAssociation>;
-export declare const NetworkAclAssociationProvider: () => import("effect/Layer").Layer<Provider.Provider<NetworkAclAssociation>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Credentials").Credentials | import("@distilled.cloud/aws/Region").Region>;
+export declare const NetworkAclAssociationProvider: () => import("effect/Layer").Layer<Provider.Provider<NetworkAclAssociation>, never, import("@distilled.cloud/aws/Credentials").Credentials | import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region>;
 //# sourceMappingURL=NetworkAclAssociation.d.ts.map

package/lib/AWS/EC2/NetworkAclAssociation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NetworkAclAssociation.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclAssociation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,uBAAuB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAC5D,YAAY,EAAE,EAAE,CAAC;AACnB,eAAO,MAAM,uBAAuB,GAAI,EAAE,SAAS,MAAM,EACvD,IAAI,EAAE,KACL,EAAE,GAAG,uBAAuB,CAAC,EAAE,CACoB,CAAC;AAEvD,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,+BAA+B,EAC/B,0BAA0B,EAC1B;IACE,aAAa,EAAE,uBAAuB,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,QAAQ,CAAC;CACpB,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,mPAwJvC,CAAC"}
+{"version":3,"file":"NetworkAclAssociation.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclAssociation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,MAAM,uBAAuB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAC5D,YAAY,EAAE,EAAE,CAAC;AACnB,eAAO,MAAM,uBAAuB,GAAI,EAAE,SAAS,MAAM,MACnD,EAAE,KACL,EAAE,GAAG,uBAAuB,CAAC,EAAE,CACoB,CAAC;AAEvD,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,+BAA+B,EAC/B,0BAA0B,EAC1B;IACE;;OAEG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAC;CACpB,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,mPAyLvC,CAAC"}

package/lib/AWS/EC2/NetworkAclAssociation.js

@@ -1,9 +1,36 @@
 import * as ec2 from "@distilled.cloud/aws/ec2";
 import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
 import { isResolved } from "../../Diff.js";
 import * as Provider from "../../Provider.js";
 import { Resource } from "../../Resource.js";
 export const NetworkAclAssociationId = (id) => `aclassoc-${id}`;
+/**
+ * Associates a subnet with a `NetworkAcl`, replacing whichever ACL the subnet
+ * currently uses (every subnet is always associated with exactly one network
+ * ACL — the VPC's default until you point it at a custom one).
+ *
+ * Changing `subnetId` replaces the association, while changing only
+ * `networkAclId` re-points the same subnet at a different ACL in place. On
+ * delete, the subnet is reverted to the VPC's default network ACL so it is never
+ * left without one.
+ *
+ * @resource
+ * @section Associating Subnets
+ * A subnet starts out attached to the VPC's default ACL; this resource moves it
+ * onto a custom ACL so the rules you defined with `NetworkAclEntry` take effect
+ * for that subnet.
+ * @example Move a Subnet onto a Custom Network ACL
+ * ```typescript
+ * const association = yield* AWS.EC2.NetworkAclAssociation("PrivateSubnetNaclAssoc", {
+ *   networkAclId: privateNetworkAcl.networkAclId,
+ *   subnetId: privateSubnet.subnetId,
+ * });
+ * ```
+ * This detaches the subnet from the default ACL and attaches it to your custom
+ * ACL; destroying the association automatically reverts the subnet to the
+ * default ACL, which is the safe way to "remove" a custom ACL from a subnet.
+ */
 export const NetworkAclAssociation = Resource("AWS.EC2.NetworkAclAssociation");
 export const NetworkAclAssociationProvider = () => Provider.effect(NetworkAclAssociation, Effect.gen(function* () {
     const findAssociation = (subnetId) => ec2
@@ -23,6 +50,18 @@ export const NetworkAclAssociationProvider = () => Provider.effect(NetworkAclAss
     }));
     return NetworkAclAssociation.Provider.of({
         stables: ["subnetId"],
+        // NACL associations are embedded in describeNetworkAcls. Each NetworkAcl
+        // carries an Associations[] of {subnet, acl, associationId}; flatten
+        // every page's associations to enumerate them all in the region.
+        list: () => ec2.describeNetworkAcls.pages({}).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.NetworkAcls ?? []).flatMap((acl) => (acl.Associations ?? [])
+            .filter((a) => a.NetworkAclAssociationId != null &&
+            a.NetworkAclId != null &&
+            a.SubnetId != null)
+            .map((a) => ({
+            associationId: a.NetworkAclAssociationId,
+            networkAclId: a.NetworkAclId,
+            subnetId: a.SubnetId,
+        })))))),
         read: Effect.fn(function* ({ olds }) {
             if (!olds)
                 return undefined;

package/lib/AWS/EC2/NetworkAclAssociation.js.map

@@ -1 +1 @@
-{"version":3,"file":"NetworkAclAssociation.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclAssociation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAM,EAC4B,EAAE,CACpC,YAAY,EAAE,EAAsC,CAAC;AAyBvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,+BAA+B,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,MAAM,CACb,qBAAqB,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC3C,GAAG;SACA,mBAAmB,CAAC;QACnB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;KACjE,CAAC;SACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;QACF,OAAO,KAAK;YACV,CAAC,CAAC;gBACE,aAAa,EAAE,KAAK,CAAC,uBAAwB;gBAC7C,YAAY,EAAE,KAAK,CAAC,YAAa;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAS;aAC1B;YACH,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;IAEN,OAAO,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC,UAAU,CAAC;QAErB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gDAAgD,IAAI,CAAC,QAAQ,EAAE,CAChE,CACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,KAAK,CAAC,aAAwC;gBAC7D,YAAY,EAAE,KAAK,CAAC,YAA4B;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAoB;aACrC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,qCAAqC;YACrC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,kEAAkE;QACpE,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,kEAAkE;YAClE,+DAA+D;YAC/D,qDAAqD;YACrD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,wDAAwD,IAAI,CAAC,QAAQ,EAAE,CACxE,CACF,CAAC;YACJ,CAAC;YAED,+DAA+D;YAC/D,kEAAkE;YAClE,oDAAoD;YACpD,IAAI,YAAY,CAAC,YAAY,KAAM,IAAI,CAAC,YAAuB,EAAE,CAAC;gBAChE,OAAO;oBACL,aAAa,EACX,YAAY,CAAC,aAAwC;oBACvD,YAAY,EAAE,IAAI,CAAC,YAA4B;oBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;iBACpC,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,sBAAsB,IAAI,CAAC,QAAQ,cAAc,IAAI,CAAC,YAAY,KAAK,CACxE,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBACrD,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAiB,CAAC;YAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,gBAAgB,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,aAAa,EAAE,gBAA2C;gBAC1D,YAAY,EAAE,IAAI,CAAC,YAA4B;gBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;aACpC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAE3D,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG;iBAC5B,eAAe,CAAC;gBACf,SAAS,EAAE,CAAC,IAAI,CAAC,QAAkB,CAAC;aACrC,CAAC;iBACD,IAAI;YACH,wDAAwD;YACxD,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAChC,CACF,CAAC;YACJ,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,wDAAwD;gBACxD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBACtD,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE;oBACnC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;iBACtC;aACF,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;YAErE,IAAI,YAAY,IAAI,YAAY,KAAM,IAAI,CAAC,YAAuB,EAAE,CAAC;gBACnE,4BAA4B;gBAC5B,KAAK,CAAC,CAAC,GAAG;qBACP,4BAA4B,CAAC;oBAC5B,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,YAAY;oBAC1B,MAAM,EAAE,KAAK;iBACd,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,+BAA+B,EAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;gBAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,kDAAkD,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"NetworkAclAssociation.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclAssociation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAM,EAC4B,EAAE,CACpC,YAAY,EAAE,EAAsC,CAAC;AAkCvD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,+BAA+B,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,MAAM,CACb,qBAAqB,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC3C,GAAG;SACA,mBAAmB,CAAC;QACnB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;KACjE,CAAC;SACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,EAAE,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;QACF,OAAO,KAAK;YACV,CAAC,CAAC;gBACE,aAAa,EAAE,KAAK,CAAC,uBAAwB;gBAC7C,YAAY,EAAE,KAAK,CAAC,YAAa;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAS;aAC1B;YACH,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;IAEN,OAAO,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC,UAAU,CAAC;QAErB,yEAAyE;QACzE,qEAAqE;QACrE,iEAAiE;QACjE,IAAI,EAAE,GAAG,EAAE,CACT,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACvC,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;aACrB,MAAM,CACL,CACE,CAAC,EAKD,EAAE,CACF,CAAC,CAAC,uBAAuB,IAAI,IAAI;YACjC,CAAC,CAAC,YAAY,IAAI,IAAI;YACtB,CAAC,CAAC,QAAQ,IAAI,IAAI,CACrB;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,aAAa,EACX,CAAC,CAAC,uBAAkD;YACtD,YAAY,EAAE,CAAC,CAAC,YAA4B;YAC5C,QAAQ,EAAE,CAAC,CAAC,QAAoB;SACjC,CAAC,CAAC,CACN,CACF,CACF,CACF;QAEH,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gDAAgD,IAAI,CAAC,QAAQ,EAAE,CAChE,CACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,KAAK,CAAC,aAAwC;gBAC7D,YAAY,EAAE,KAAK,CAAC,YAA4B;gBAChD,QAAQ,EAAE,KAAK,CAAC,QAAoB;aACrC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,qCAAqC;YACrC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,kEAAkE;QACpE,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,kEAAkE;YAClE,+DAA+D;YAC/D,qDAAqD;YACrD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,wDAAwD,IAAI,CAAC,QAAQ,EAAE,CACxE,CACF,CAAC;YACJ,CAAC;YAED,+DAA+D;YAC/D,kEAAkE;YAClE,oDAAoD;YACpD,IAAI,YAAY,CAAC,YAAY,KAAM,IAAI,CAAC,YAAuB,EAAE,CAAC;gBAChE,OAAO;oBACL,aAAa,EACX,YAAY,CAAC,aAAwC;oBACvD,YAAY,EAAE,IAAI,CAAC,YAA4B;oBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;iBACpC,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,sBAAsB,IAAI,CAAC,QAAQ,cAAc,IAAI,CAAC,YAAY,KAAK,CACxE,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBACrD,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAiB,CAAC;YAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,gBAAgB,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,aAAa,EAAE,gBAA2C;gBAC1D,YAAY,EAAE,IAAI,CAAC,YAA4B;gBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAoB;aACpC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAE3D,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG;iBAC5B,eAAe,CAAC;gBACf,SAAS,EAAE,CAAC,IAAI,CAAC,QAAkB,CAAC;aACrC,CAAC;iBACD,IAAI;YACH,wDAAwD;YACxD,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAChC,CACF,CAAC;YACJ,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,wDAAwD;gBACxD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBACtD,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE;oBACnC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;iBACtC;aACF,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;YAErE,IAAI,YAAY,IAAI,YAAY,KAAM,IAAI,CAAC,YAAuB,EAAE,CAAC;gBACnE,4BAA4B;gBAC5B,KAAK,CAAC,CAAC,GAAG;qBACP,4BAA4B,CAAC;oBAC5B,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,YAAY;oBAC1B,MAAM,EAAE,KAAK;iBACd,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,+BAA+B,EAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;gBAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,kDAAkD,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/EC2/NetworkAclEntry.d.ts

@@ -84,6 +84,101 @@ export interface NetworkAclEntry extends Resource<"AWS.EC2.NetworkAclEntry", Net
     };
 }, never, Providers> {
 }
+/**
+ * A single rule in a `NetworkAcl` — a numbered, stateless allow/deny entry that
+ * matches traffic by protocol, CIDR (IPv4 or IPv6), and, for TCP/UDP, a port
+ * range.
+ *
+ * Each entry is identified by its `(networkAclId, ruleNumber, egress)` triple,
+ * and changing any of those three replaces the entry. Rules are evaluated from
+ * the lowest `ruleNumber` upward and the first match wins, so leave gaps between
+ * numbers to make room for future rules. Because NACLs are stateless, always add
+ * a matching ephemeral-port rule for return traffic.
+ *
+ * @resource
+ * @section Inbound Rules
+ * Inbound rules (`egress: false`) match traffic entering the subnet. A common
+ * pattern is to allow trusted source ranges plus the ephemeral ports needed for
+ * return traffic.
+ * @example Allow Inbound Traffic from the VPC CIDR
+ * ```typescript
+ * const allowVpc = yield* AWS.EC2.NetworkAclEntry("AllowVpc", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 100,
+ *   protocol: "-1",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "10.0.0.0/16",
+ * });
+ * ```
+ * `protocol: "-1"` matches all protocols and `cidrBlock` scopes the rule to the
+ * VPC's IPv4 range; the low `ruleNumber` (100) makes it take precedence over
+ * higher-numbered rules.
+ *
+ * @example Allow Inbound Ephemeral Ports (NAT Return Traffic)
+ * ```typescript
+ * const allowEphemeral = yield* AWS.EC2.NetworkAclEntry("AllowEphemeral", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 200,
+ *   protocol: "6",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "0.0.0.0/0",
+ *   portRange: { from: 1024, to: 65535 },
+ * });
+ * ```
+ * Because the ACL is stateless, responses to outbound requests arrive on
+ * ephemeral ports and need their own inbound rule; `protocol: "6"` is TCP and
+ * `portRange` restricts the match to the ephemeral port range.
+ *
+ * @example Deny a Specific IPv6 Range
+ * ```typescript
+ * const denyRange = yield* AWS.EC2.NetworkAclEntry("DenyBadActor", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 50,
+ *   protocol: "-1",
+ *   ruleAction: "deny",
+ *   egress: false,
+ *   ipv6CidrBlock: "2001:db8:1234::/48",
+ * });
+ * ```
+ * `ruleAction: "deny"` with a very low `ruleNumber` blocks an IPv6 range before
+ * any allow rule can match it; use `ipv6CidrBlock` instead of `cidrBlock` to
+ * target IPv6 traffic.
+ *
+ * @section Outbound Rules
+ * Outbound rules (`egress: true`) match traffic leaving the subnet and are
+ * numbered in their own sequence, independent of the inbound rules.
+ * @example Allow All Outbound Traffic
+ * ```typescript
+ * const allowEgress = yield* AWS.EC2.NetworkAclEntry("AllowEgress", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 100,
+ *   protocol: "-1",
+ *   ruleAction: "allow",
+ *   egress: true,
+ *   cidrBlock: "0.0.0.0/0",
+ * });
+ * ```
+ * Setting `egress: true` makes this an outbound rule; allowing all protocols to
+ * `0.0.0.0/0` is typical when you want the subnet to initiate connections freely.
+ *
+ * @section ICMP Rules
+ * @example Allow Inbound ICMP Echo (Ping)
+ * ```typescript
+ * const allowPing = yield* AWS.EC2.NetworkAclEntry("AllowPing", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 300,
+ *   protocol: "1",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "10.0.0.0/16",
+ *   icmpTypeCode: { type: 8, code: -1 },
+ * });
+ * ```
+ * ICMP (`protocol: "1"`) has no ports, so `icmpTypeCode` selects the message
+ * type instead — type 8 is echo request and `code: -1` matches all codes.
+ */
 export declare const NetworkAclEntry: import("../../Resource.ts").ResourceClass<NetworkAclEntry>;
-export declare const NetworkAclEntryProvider: () => import("effect/Layer").Layer<Provider.Provider<NetworkAclEntry>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Credentials").Credentials | import("@distilled.cloud/aws/Region").Region>;
+export declare const NetworkAclEntryProvider: () => import("effect/Layer").Layer<Provider.Provider<NetworkAclEntry>, never, import("@distilled.cloud/aws/Credentials").Credentials | import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region>;
 //# sourceMappingURL=NetworkAclEntry.d.ts.map

package/lib/AWS/EC2/NetworkAclEntry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NetworkAclEntry.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclEntry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAKrD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,YAAY,CAAC,EAAE;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,kDAAkD;QAClD,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF;;OAEG;IACH,SAAS,CAAC,EAAE;QACV,mCAAmC;QACnC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,kCAAkC;QAClC,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ,CAC/C,yBAAyB,EACzB,oBAAoB,EACpB;IACE,iCAAiC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;IAC3B,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,YAAY,CAAC,EAAE;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,sBAAsB;IACtB,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACH,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ,eAAO,MAAM,eAAe,4DAE3B,CAAC;AAEF,eAAO,MAAM,uBAAuB,6OAmLjC,CAAC"}
+{"version":3,"file":"NetworkAclEntry.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclEntry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAOrD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,YAAY,CAAC,EAAE;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,kDAAkD;QAClD,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF;;OAEG;IACH,SAAS,CAAC,EAAE;QACV,mCAAmC;QACnC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,kCAAkC;QAClC,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ,CAC/C,yBAAyB,EACzB,oBAAoB,EACpB;IACE,iCAAiC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;IAC3B,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,YAAY,CAAC,EAAE;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,sBAAsB;IACtB,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACH,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AACH,eAAO,MAAM,eAAe,4DAE3B,CAAC;AAEF,eAAO,MAAM,uBAAuB,6OAuOjC,CAAC"}

package/lib/AWS/EC2/NetworkAclEntry.js

@@ -1,8 +1,105 @@
 import * as ec2 from "@distilled.cloud/aws/ec2";
 import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import * as Stream from "effect/Stream";
 import { isResolved } from "../../Diff.js";
 import * as Provider from "../../Provider.js";
 import { Resource } from "../../Resource.js";
+/**
+ * A single rule in a `NetworkAcl` — a numbered, stateless allow/deny entry that
+ * matches traffic by protocol, CIDR (IPv4 or IPv6), and, for TCP/UDP, a port
+ * range.
+ *
+ * Each entry is identified by its `(networkAclId, ruleNumber, egress)` triple,
+ * and changing any of those three replaces the entry. Rules are evaluated from
+ * the lowest `ruleNumber` upward and the first match wins, so leave gaps between
+ * numbers to make room for future rules. Because NACLs are stateless, always add
+ * a matching ephemeral-port rule for return traffic.
+ *
+ * @resource
+ * @section Inbound Rules
+ * Inbound rules (`egress: false`) match traffic entering the subnet. A common
+ * pattern is to allow trusted source ranges plus the ephemeral ports needed for
+ * return traffic.
+ * @example Allow Inbound Traffic from the VPC CIDR
+ * ```typescript
+ * const allowVpc = yield* AWS.EC2.NetworkAclEntry("AllowVpc", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 100,
+ *   protocol: "-1",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "10.0.0.0/16",
+ * });
+ * ```
+ * `protocol: "-1"` matches all protocols and `cidrBlock` scopes the rule to the
+ * VPC's IPv4 range; the low `ruleNumber` (100) makes it take precedence over
+ * higher-numbered rules.
+ *
+ * @example Allow Inbound Ephemeral Ports (NAT Return Traffic)
+ * ```typescript
+ * const allowEphemeral = yield* AWS.EC2.NetworkAclEntry("AllowEphemeral", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 200,
+ *   protocol: "6",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "0.0.0.0/0",
+ *   portRange: { from: 1024, to: 65535 },
+ * });
+ * ```
+ * Because the ACL is stateless, responses to outbound requests arrive on
+ * ephemeral ports and need their own inbound rule; `protocol: "6"` is TCP and
+ * `portRange` restricts the match to the ephemeral port range.
+ *
+ * @example Deny a Specific IPv6 Range
+ * ```typescript
+ * const denyRange = yield* AWS.EC2.NetworkAclEntry("DenyBadActor", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 50,
+ *   protocol: "-1",
+ *   ruleAction: "deny",
+ *   egress: false,
+ *   ipv6CidrBlock: "2001:db8:1234::/48",
+ * });
+ * ```
+ * `ruleAction: "deny"` with a very low `ruleNumber` blocks an IPv6 range before
+ * any allow rule can match it; use `ipv6CidrBlock` instead of `cidrBlock` to
+ * target IPv6 traffic.
+ *
+ * @section Outbound Rules
+ * Outbound rules (`egress: true`) match traffic leaving the subnet and are
+ * numbered in their own sequence, independent of the inbound rules.
+ * @example Allow All Outbound Traffic
+ * ```typescript
+ * const allowEgress = yield* AWS.EC2.NetworkAclEntry("AllowEgress", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 100,
+ *   protocol: "-1",
+ *   ruleAction: "allow",
+ *   egress: true,
+ *   cidrBlock: "0.0.0.0/0",
+ * });
+ * ```
+ * Setting `egress: true` makes this an outbound rule; allowing all protocols to
+ * `0.0.0.0/0` is typical when you want the subnet to initiate connections freely.
+ *
+ * @section ICMP Rules
+ * @example Allow Inbound ICMP Echo (Ping)
+ * ```typescript
+ * const allowPing = yield* AWS.EC2.NetworkAclEntry("AllowPing", {
+ *   networkAclId: acl.networkAclId,
+ *   ruleNumber: 300,
+ *   protocol: "1",
+ *   ruleAction: "allow",
+ *   egress: false,
+ *   cidrBlock: "10.0.0.0/16",
+ *   icmpTypeCode: { type: 8, code: -1 },
+ * });
+ * ```
+ * ICMP (`protocol: "1"`) has no ports, so `icmpTypeCode` selects the message
+ * type instead — type 8 is echo request and `code: -1` matches all codes.
+ */
 export const NetworkAclEntry = Resource("AWS.EC2.NetworkAclEntry");
 export const NetworkAclEntryProvider = () => Provider.effect(NetworkAclEntry, Effect.gen(function* () {
     const findEntry = (networkAclId, ruleNumber, egress) => ec2
@@ -31,6 +128,33 @@ export const NetworkAclEntryProvider = () => Provider.effect(NetworkAclEntry, Ef
     });
     return {
         stables: [],
+        // Entries are embedded in describeNetworkAcls (each NetworkAcl owns an
+        // Entries[]). Flatten every ACL's entries into the full Attributes
+        // shape. Skip the AWS-managed default-deny rule (32767) since it is not
+        // a user-manageable entry.
+        list: () => ec2.describeNetworkAcls.pages({}).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.NetworkAcls ?? []).flatMap((acl) => (acl.Entries ?? [])
+            .filter((e) => e.RuleNumber !== 32767)
+            .map((entry) => ({
+            networkAclId: acl.NetworkAclId,
+            ruleNumber: entry.RuleNumber,
+            egress: entry.Egress,
+            protocol: entry.Protocol,
+            ruleAction: entry.RuleAction,
+            cidrBlock: entry.CidrBlock,
+            ipv6CidrBlock: entry.Ipv6CidrBlock,
+            icmpTypeCode: entry.IcmpTypeCode
+                ? {
+                    code: entry.IcmpTypeCode.Code,
+                    type: entry.IcmpTypeCode.Type,
+                }
+                : undefined,
+            portRange: entry.PortRange
+                ? {
+                    from: entry.PortRange.From,
+                    to: entry.PortRange.To,
+                }
+                : undefined,
+        })))))),
         read: Effect.fn(function* ({ olds, output }) {
             if (!output)
                 return undefined;
@@ -90,11 +214,15 @@ export const NetworkAclEntryProvider = () => Provider.effect(NetworkAclEntry, Ef
                 yield* ec2.replaceNetworkAclEntry(entryParams);
                 yield* session.note(`Network ACL Entry updated: rule ${news.ruleNumber}`);
             }
-            // Re-read final state.
-            const entry = yield* findEntry(news.networkAclId, news.ruleNumber, news.egress ?? false);
-            if (!entry) {
-                return yield* Effect.fail(new Error("Network ACL Entry not found after reconcile"));
-            }
+            // Re-read final state. A freshly created/replaced entry can lag
+            // `describeNetworkAcls` by a moment (EC2 eventual consistency), so
+            // poll until it appears, bounded.
+            const entry = yield* findEntry(news.networkAclId, news.ruleNumber, news.egress ?? false).pipe(Effect.flatMap((e) => e
+                ? Effect.succeed(e)
+                : Effect.fail({ _tag: "EntryNotYetVisible" })), Effect.retry({
+                while: (e) => e._tag === "EntryNotYetVisible",
+                schedule: Schedule.exponential("500 millis").pipe(Schedule.both(Schedule.recurs(8))),
+            }), Effect.catchTag("EntryNotYetVisible", () => Effect.fail(new Error("Network ACL Entry not found after reconcile"))));
             return toAttrs(news, entry);
         }),
         delete: Effect.fn(function* ({ olds, output, session }) {

package/lib/AWS/EC2/NetworkAclEntry.js.map

@@ -1 +1 @@
-{"version":3,"file":"NetworkAclEntry.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclEntry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA2F7C,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,yBAAyB,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,EAAE,CAC1C,QAAQ,CAAC,MAAM,CACb,eAAe,EACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,CAChB,YAAoB,EACpB,UAAkB,EAClB,MAAe,EACf,EAAE,CACF,GAAG;SACA,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;SACtD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAC1D,CACF,CACF,CAAC;IAEN,MAAM,OAAO,GAAG,CACd,KAA2B,EAC3B,KAUC,EACD,EAAE,CAAC,CAAC;QACJ,YAAY,EAAE,KAAK,CAAC,YAA4B;QAChD,UAAU,EAAE,KAAK,CAAC,UAAW;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAO;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAS;QACzB,UAAU,EAAE,KAAK,CAAC,UAAW;QAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;YAC9B,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;gBAC7B,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;aAC9B;YACH,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,CAAC,SAAS;YACxB,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;gBAC1B,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;aACvB;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,EAAE;QAEX,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAC5B,IAAI,CAAC,YAAsB,EAC3B,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,MAAM,CACd,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gCAAgC,MAAM,CAAC,YAAY,SAAS,MAAM,CAAC,UAAU,WAAW,MAAM,CAAC,MAAM,EAAE,CACxG,CACF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kEAAkE;YAClE,IACE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;gBACvC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBACnC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC3B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,yDAAyD;QAC3D,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,MAAM,WAAW,GAAG;gBAClB,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC7B,CAAC,CAAC;wBACE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;wBAC5B,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;qBAC7B;oBACH,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;oBACvB,CAAC,CAAC;wBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;wBACzB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;qBACtB;oBACH,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,KAAK;aACd,CAAC;YAEF,iEAAiE;YACjE,+DAA+D;YAC/D,WAAW;YACX,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAC/B,IAAI,CAAC,YAAsB,EAC3B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,MAAM,IAAI,KAAK,CACrB,CAAC;YAEF,mEAAmE;YACnE,qEAAqE;YACrE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,IAAI,CAAC,UAAU,MAAM,CAC1D,CAAC;gBACF,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBAC9C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,IAAI,CAAC,UAAU,EAAE,CACrD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,IAAI,CAAC,UAAU,MAAM,CAC1D,CAAC;gBACF,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;gBAC/C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,IAAI,CAAC,UAAU,EAAE,CACrD,CAAC;YACJ,CAAC;YAED,uBAAuB;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAC5B,IAAI,CAAC,YAAsB,EAC3B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,MAAM,IAAI,KAAK,CACrB,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,MAAM,CAAC,UAAU,MAAM,CAC5D,CAAC;YAEF,KAAK,CAAC,CAAC,GAAG;iBACP,qBAAqB,CAAC;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,iCAAiC,EACjC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,MAAM,CAAC,UAAU,EAAE,CACvD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"NetworkAclEntry.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAclEntry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA2F7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,yBAAyB,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,EAAE,CAC1C,QAAQ,CAAC,MAAM,CACb,eAAe,EACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,CAChB,YAAoB,EACpB,UAAkB,EAClB,MAAe,EACf,EAAE,CACF,GAAG;SACA,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;SACtD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAC1D,CACF,CACF,CAAC;IAEN,MAAM,OAAO,GAAG,CACd,KAA2B,EAC3B,KAUC,EACD,EAAE,CAAC,CAAC;QACJ,YAAY,EAAE,KAAK,CAAC,YAA4B;QAChD,UAAU,EAAE,KAAK,CAAC,UAAW;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAO;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAS;QACzB,UAAU,EAAE,KAAK,CAAC,UAAW;QAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;YAC9B,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;gBAC7B,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;aAC9B;YACH,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,CAAC,SAAS;YACxB,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;gBAC1B,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;aACvB;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,EAAE;QAEX,uEAAuE;QACvE,mEAAmE;QACnE,wEAAwE;QACxE,2BAA2B;QAC3B,IAAI,EAAE,GAAG,EAAE,CACT,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACvC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;aACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,YAAY,EAAE,GAAG,CAAC,YAA4B;YAC9C,UAAU,EAAE,KAAK,CAAC,UAAW;YAC7B,MAAM,EAAE,KAAK,CAAC,MAAO;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAS;YACzB,UAAU,EAAE,KAAK,CAAC,UAAW;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC9B,CAAC,CAAC;oBACE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;oBAC7B,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;iBAC9B;gBACH,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,KAAK,CAAC,SAAS;gBACxB,CAAC,CAAC;oBACE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;oBAC1B,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE;iBACvB;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC,CACN,CACF,CACF,CACF;QAEH,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAC5B,IAAI,CAAC,YAAsB,EAC3B,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,MAAM,CACd,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gCAAgC,MAAM,CAAC,YAAY,SAAS,MAAM,CAAC,UAAU,WAAW,MAAM,CAAC,MAAM,EAAE,CACxG,CACF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kEAAkE;YAClE,IACE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;gBACvC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBACnC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC3B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,yDAAyD;QAC3D,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/C,MAAM,WAAW,GAAG;gBAClB,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC7B,CAAC,CAAC;wBACE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;wBAC5B,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;qBAC7B;oBACH,CAAC,CAAC,SAAS;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;oBACvB,CAAC,CAAC;wBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;wBACzB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;qBACtB;oBACH,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,KAAK;aACd,CAAC;YAEF,iEAAiE;YACjE,+DAA+D;YAC/D,WAAW;YACX,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAC/B,IAAI,CAAC,YAAsB,EAC3B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,MAAM,IAAI,KAAK,CACrB,CAAC;YAEF,mEAAmE;YACnE,qEAAqE;YACrE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,IAAI,CAAC,UAAU,MAAM,CAC1D,CAAC;gBACF,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBAC9C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,IAAI,CAAC,UAAU,EAAE,CACrD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,IAAI,CAAC,UAAU,MAAM,CAC1D,CAAC;gBACF,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;gBAC/C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,IAAI,CAAC,UAAU,EAAE,CACrD,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,mEAAmE;YACnE,kCAAkC;YAClC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAC5B,IAAI,CAAC,YAAsB,EAC3B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,MAAM,IAAI,KAAK,CACrB,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC;gBACC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAW,CAAC,CACzD,EACD,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAC7C,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAClC;aACF,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD,CACF,CACF,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,MAAM,CAAC,UAAU,MAAM,CAC5D,CAAC;YAEF,KAAK,CAAC,CAAC,GAAG;iBACP,qBAAqB,CAAC;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,iCAAiC,EACjC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,mCAAmC,MAAM,CAAC,UAAU,EAAE,CACvD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}