alchemy 2.0.0-beta.59 → 2.0.0-beta.60

package/src/AWS/Lambda/RunMicrovm.ts

@@ -0,0 +1,45 @@
+import type * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import type * as Effect from "effect/Effect";
+import * as Binding from "../../Binding.ts";
+import type { MicrovmImage } from "./MicrovmImage.ts";
+
+export interface RunMicrovmRequest extends Omit<
+  microvms.RunMicrovmRequest,
+  "imageIdentifier"
+> {}
+
+/**
+ * Runtime binding for `RunMicrovm`.
+ *
+ * Bind it to a {@link MicrovmImage} inside a Lambda Function to get a callable
+ * that launches a MicroVM from that image (the `imageIdentifier` is injected).
+ * The response carries the MicroVM `endpoint`; connect to it with an
+ * `X-aws-proxy-auth` token from {@link CreateAuthToken}.
+ *
+ * @binding
+ * @section Running MicroVMs
+ * @example Run a MicroVM
+ * ```typescript
+ * const runMicrovm = yield* AWS.Lambda.RunMicrovm(Sandbox);
+ *
+ * const vm = yield* runMicrovm({
+ *   idlePolicy: {
+ *     maxIdleDurationSeconds: 900,
+ *     suspendedDurationSeconds: 300,
+ *     autoResumeEnabled: true,
+ *   },
+ * });
+ * ```
+ */
+export interface RunMicrovm extends Binding.Service<
+  RunMicrovm,
+  "AWS.Lambda.RunMicrovm",
+  (
+    image: MicrovmImage,
+  ) => Effect.Effect<
+    (
+      request: RunMicrovmRequest,
+    ) => Effect.Effect<microvms.RunMicrovmResponse, microvms.RunMicrovmError>
+  >
+> {}
+export const RunMicrovm = Binding.Service<RunMicrovm>("AWS.Lambda.RunMicrovm");

package/src/AWS/Lambda/RunMicrovmHttp.ts

@@ -0,0 +1,13 @@
+import * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import { makeImageBinding } from "./MicrovmBinding.ts";
+import { RunMicrovm } from "./RunMicrovm.ts";
+
+export const RunMicrovmHttp = makeImageBinding({
+  binding: RunMicrovm,
+  name: "RunMicrovm",
+  actions: ["lambda:RunMicrovm"],
+  operation: microvms.runMicrovm,
+  scope: "image",
+  injectImageIdentifier: true,
+  passNetworkConnector: true,
+});

package/src/AWS/Lambda/SuspendMicrovm.ts

@@ -0,0 +1,37 @@
+import type * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import type * as Effect from "effect/Effect";
+import * as Binding from "../../Binding.ts";
+import type { MicrovmImage } from "./MicrovmImage.ts";
+
+export interface SuspendMicrovmRequest extends microvms.SuspendMicrovmRequest {}
+
+/**
+ * Runtime binding for `SuspendMicrovm`.
+ *
+ * Bind it to a {@link MicrovmImage} to get a callable that suspends a running
+ * MicroVM (snapshotting memory + disk) by `microvmIdentifier`.
+ * @binding
+ * @section Lifecycle
+ * @example Suspend a MicroVM
+ * ```typescript
+ * const suspendMicrovm = yield* AWS.Lambda.SuspendMicrovm(Sandbox);
+ * yield* suspendMicrovm({ microvmIdentifier: id });
+ * ```
+ */
+export interface SuspendMicrovm extends Binding.Service<
+  SuspendMicrovm,
+  "AWS.Lambda.SuspendMicrovm",
+  (
+    image: MicrovmImage,
+  ) => Effect.Effect<
+    (
+      request: SuspendMicrovmRequest,
+    ) => Effect.Effect<
+      microvms.SuspendMicrovmResponse,
+      microvms.SuspendMicrovmError
+    >
+  >
+> {}
+export const SuspendMicrovm = Binding.Service<SuspendMicrovm>(
+  "AWS.Lambda.SuspendMicrovm",
+);

package/src/AWS/Lambda/SuspendMicrovmHttp.ts

@@ -0,0 +1,11 @@
+import * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import { makeImageBinding } from "./MicrovmBinding.ts";
+import { SuspendMicrovm } from "./SuspendMicrovm.ts";
+
+export const SuspendMicrovmHttp = makeImageBinding({
+  binding: SuspendMicrovm,
+  name: "SuspendMicrovm",
+  actions: ["lambda:SuspendMicrovm"],
+  operation: microvms.suspendMicrovm,
+  scope: "microvm",
+});

package/src/AWS/Lambda/TerminateMicrovm.ts

@@ -0,0 +1,38 @@
+import type * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import type * as Effect from "effect/Effect";
+import * as Binding from "../../Binding.ts";
+import type { MicrovmImage } from "./MicrovmImage.ts";
+
+export interface TerminateMicrovmRequest
+  extends microvms.TerminateMicrovmRequest {}
+
+/**
+ * Runtime binding for `TerminateMicrovm`.
+ *
+ * Bind it to a {@link MicrovmImage} to get a callable that terminates a running
+ * MicroVM by `microvmIdentifier`. Idempotent.
+ * @binding
+ * @section Lifecycle
+ * @example Terminate a MicroVM
+ * ```typescript
+ * const terminateMicrovm = yield* AWS.Lambda.TerminateMicrovm(Sandbox);
+ * yield* terminateMicrovm({ microvmIdentifier: id });
+ * ```
+ */
+export interface TerminateMicrovm extends Binding.Service<
+  TerminateMicrovm,
+  "AWS.Lambda.TerminateMicrovm",
+  (
+    image: MicrovmImage,
+  ) => Effect.Effect<
+    (
+      request: TerminateMicrovmRequest,
+    ) => Effect.Effect<
+      microvms.TerminateMicrovmResponse,
+      microvms.TerminateMicrovmError
+    >
+  >
+> {}
+export const TerminateMicrovm = Binding.Service<TerminateMicrovm>(
+  "AWS.Lambda.TerminateMicrovm",
+);

package/src/AWS/Lambda/TerminateMicrovmHttp.ts

@@ -0,0 +1,11 @@
+import * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import { makeImageBinding } from "./MicrovmBinding.ts";
+import { TerminateMicrovm } from "./TerminateMicrovm.ts";
+
+export const TerminateMicrovmHttp = makeImageBinding({
+  binding: TerminateMicrovm,
+  name: "TerminateMicrovm",
+  actions: ["lambda:TerminateMicrovm"],
+  operation: microvms.terminateMicrovm,
+  scope: "microvm",
+});

package/src/AWS/Lambda/UpdateMicrovmImageVersion.ts

@@ -0,0 +1,36 @@
+import type * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import type * as Effect from "effect/Effect";
+import * as Binding from "../../Binding.ts";
+import type { MicrovmImage } from "./MicrovmImage.ts";
+
+export interface UpdateMicrovmImageVersionRequest extends Omit<
+  microvms.UpdateMicrovmImageVersionRequest,
+  "imageIdentifier"
+> {}
+
+/**
+ * Runtime binding for `UpdateMicrovmImageVersion`.
+ *
+ * Bind it to a {@link MicrovmImage} to update a version's status (e.g. mark it
+ * `ACTIVE`/`INACTIVE`); the `imageIdentifier` is injected.
+ * @binding
+ * @section Image Versions
+ */
+export interface UpdateMicrovmImageVersion extends Binding.Service<
+  UpdateMicrovmImageVersion,
+  "AWS.Lambda.UpdateMicrovmImageVersion",
+  (
+    image: MicrovmImage,
+  ) => Effect.Effect<
+    (
+      request: UpdateMicrovmImageVersionRequest,
+    ) => Effect.Effect<
+      microvms.UpdateMicrovmImageVersionResponse,
+      microvms.UpdateMicrovmImageVersionError
+    >
+  >
+> {}
+export const UpdateMicrovmImageVersion =
+  Binding.Service<UpdateMicrovmImageVersion>(
+    "AWS.Lambda.UpdateMicrovmImageVersion",
+  );

package/src/AWS/Lambda/UpdateMicrovmImageVersionHttp.ts

@@ -0,0 +1,12 @@
+import * as microvms from "@distilled.cloud/aws/lambda-microvms";
+import { makeImageBinding } from "./MicrovmBinding.ts";
+import { UpdateMicrovmImageVersion } from "./UpdateMicrovmImageVersion.ts";
+
+export const UpdateMicrovmImageVersionHttp = makeImageBinding({
+  binding: UpdateMicrovmImageVersion,
+  name: "UpdateMicrovmImageVersion",
+  actions: ["lambda:UpdateMicrovmImageVersion"],
+  operation: microvms.updateMicrovmImageVersion,
+  scope: "image",
+  injectImageIdentifier: true,
+});

package/src/AWS/Lambda/index.ts

@@ -1,13 +1,51 @@
 export * from "./Alias.ts";
 export * from "./BucketEventSource.ts";
+export * from "./CreateAuthToken.ts";
+export * from "./CreateAuthTokenHttp.ts";
+export * from "./CreateShellAuthToken.ts";
+export * from "./CreateShellAuthTokenHttp.ts";
+export * from "./DeleteMicrovmImageVersion.ts";
+export * from "./DeleteMicrovmImageVersionHttp.ts";
 export * from "./EventBridgeEventSource.ts";
 export * from "./EventSourceMapping.ts";
 export * from "./Function.ts";
+export * from "./GetMicrovm.ts";
+export * from "./GetMicrovmHttp.ts";
+export * from "./GetMicrovmImage.ts";
+export * from "./GetMicrovmImageBuild.ts";
+export * from "./GetMicrovmImageBuildHttp.ts";
+export * from "./GetMicrovmImageHttp.ts";
+export * from "./GetMicrovmImageVersion.ts";
+export * from "./GetMicrovmImageVersionHttp.ts";
 export * from "./HttpServer.ts";
 export * from "./InvokeFunction.ts";
 export * from "./InvokeFunctionHttp.ts";
+export * from "./ListManagedMicrovmImages.ts";
+export * from "./ListManagedMicrovmImagesHttp.ts";
+export * from "./ListManagedMicrovmImageVersions.ts";
+export * from "./ListManagedMicrovmImageVersionsHttp.ts";
+export * from "./ListMicrovmImageBuilds.ts";
+export * from "./ListMicrovmImageBuildsHttp.ts";
+export * from "./ListMicrovmImageVersions.ts";
+export * from "./ListMicrovmImageVersionsHttp.ts";
+export * from "./ListMicrovms.ts";
+export * from "./ListMicrovmsHttp.ts";
+export * from "./MicrovmImage.ts";
+export * from "./MicrovmProvider.ts";
+export * from "./MicrovmRpc.ts";
+export * from "./NetworkConnector.ts";
 export * from "./Permission.ts";
 export * from "./QueueEventSource.ts";
+export * from "./ResumeMicrovm.ts";
+export * from "./ResumeMicrovmHttp.ts";
+export * from "./RunMicrovm.ts";
+export * from "./RunMicrovmHttp.ts";
 export * from "./StreamEventSource.ts";
+export * from "./SuspendMicrovm.ts";
+export * from "./SuspendMicrovmHttp.ts";
 export * from "./TableEventSource.ts";
+export * from "./TerminateMicrovm.ts";
+export * from "./TerminateMicrovmHttp.ts";
 export * from "./TopicEventSource.ts";
+export * from "./UpdateMicrovmImageVersion.ts";
+export * from "./UpdateMicrovmImageVersionHttp.ts";

package/src/AWS/Providers.ts

@@ -1,3 +1,4 @@
+/** @effect-diagnostics layerMergeAllWithDependencies:off */
 import {
   isRetryable,
   isThrottlingError,
@@ -18,6 +19,7 @@ import * as Schedule from "effect/Schedule";
 import * as HttpClientError from "effect/unstable/http/HttpClientError";
 import { CredentialsStoreLive } from "../Auth/Credentials.ts";
 import * as Command from "../Command/index.ts";
+import { DockerLive } from "../Docker/Docker.ts";
 import { KeyPair, KeyPairProvider } from "../KeyPair.ts";
 import * as Provider from "../Provider.ts";
 import { Random, RandomProvider } from "../Random.ts";
@@ -46,7 +48,6 @@ import * as Lambda from "./Lambda/index.ts";
 import * as Logs from "./Logs/index.ts";
 import * as Organizations from "./Organizations/index.ts";
 import * as RDS from "./RDS/index.ts";
-import * as RDSData from "./RDSData/index.ts";
 import * as Region from "./Region.ts";
 import * as Route53 from "./Route53/index.ts";
 import * as S3 from "./S3/index.ts";
@@ -109,6 +110,7 @@ export const providers = () =>
       EC2.EIP,
       EC2.Instance,
       EC2.InternetGateway,
+      EC2.KeyPair,
       EC2.NatGateway,
       EC2.NetworkAcl,
       EC2.NetworkAclAssociation,
@@ -166,6 +168,8 @@ export const providers = () =>
       Lambda.Alias,
       Lambda.EventSourceMapping,
       Lambda.Function,
+      Lambda.MicrovmImage,
+      Lambda.NetworkConnector,
       Lambda.Permission,
       Logs.LogGroup,
       Organizations.Account,
@@ -202,138 +206,147 @@ export const providers = () =>
   ).pipe(
     Layer.provide(
       Layer.mergeAll(
-        ACM.CertificateProvider(),
-        ApiGateway.AccountProvider(),
-        ApiGateway.ApiKeyProvider(),
-        ApiGateway.AuthorizerProvider(),
-        ApiGateway.BasePathMappingProvider(),
-        ApiGateway.DeploymentProvider(),
-        ApiGateway.DomainNameProvider(),
-        ApiGateway.GatewayResponseProvider(),
-        ApiGateway.MethodProvider(),
-        ApiGateway.ResourceProvider(),
-        ApiGateway.RestApiProvider(),
-        ApiGateway.StageProvider(),
-        ApiGateway.UsagePlanProvider(),
-        ApiGateway.UsagePlanKeyProvider(),
-        ApiGateway.VpcLinkProvider(),
-        AutoScaling.AutoScalingGroupProvider(),
-        AutoScaling.LaunchTemplateProvider(),
-        AutoScaling.ScalingPolicyProvider(),
-        CloudFront.CachePolicyProvider(),
-        CloudFront.DistributionProvider(),
-        CloudFront.FunctionProvider(),
-        CloudFront.InvalidationProvider(),
-        CloudFront.KeyGroupProvider(),
-        CloudFront.KeyValueStoreProvider(),
-        CloudFront.KvEntriesProvider(),
-        CloudFront.KvRoutesUpdateProvider(),
-        CloudFront.OriginAccessControlProvider(),
-        CloudFront.OriginRequestPolicyProvider(),
-        CloudFront.PublicKeyProvider(),
-        CloudFront.ResponseHeadersPolicyProvider(),
-        CloudFront.VpcOriginProvider(),
-        CloudWatch.AlarmMuteRuleProvider(),
-        CloudWatch.AlarmProvider(),
-        CloudWatch.AnomalyDetectorProvider(),
-        CloudWatch.CompositeAlarmProvider(),
-        CloudWatch.DashboardProvider(),
-        CloudWatch.InsightRuleProvider(),
-        CloudWatch.MetricStreamProvider(),
-        DynamoDB.TableProvider(),
-        EC2.EgressOnlyInternetGatewayProvider(),
-        EC2.EIPProvider(),
-        EC2.InstanceProvider(),
-        EC2.InternetGatewayProvider(),
-        EC2.NatGatewayProvider(),
-        EC2.NetworkAclAssociationProvider(),
-        EC2.NetworkAclEntryProvider(),
-        EC2.NetworkAclProvider(),
-        EC2.RouteProvider(),
-        EC2.RouteTableAssociationProvider(),
-        EC2.RouteTableProvider(),
-        EC2.SecurityGroupProvider(),
-        EC2.SecurityGroupRuleProvider(),
-        EC2.SubnetProvider(),
-        EC2.VpcEndpointProvider(),
-        EC2.VpcProvider(),
-        ECR.RepositoryProvider(),
-        ECS.CapacityProviderProvider(),
-        ECS.ClusterProvider(),
-        ECS.ServiceProvider(),
-        ECS.TaskProvider(),
-        EKS.AccessEntryProvider(),
-        EKS.AddonProvider(),
-        EKS.ClusterProvider(),
-        EKS.PodIdentityAssociationProvider(),
-        ELBv2.ListenerProvider(),
-        ELBv2.ListenerRuleProvider(),
-        ELBv2.LoadBalancerProvider(),
-        ELBv2.TargetGroupProvider(),
-        ELBv2.TrustStoreProvider(),
-        EventBridge.EventBusProvider(),
-        EventBridge.PermissionProvider(),
-        EventBridge.RuleProvider(),
-        IAM.AccessKeyProvider(),
-        IAM.AccountAliasProvider(),
-        IAM.AccountPasswordPolicyProvider(),
-        IAM.GroupMembershipProvider(),
-        IAM.GroupProvider(),
-        IAM.InstanceProfileProvider(),
-        IAM.LoginProfileProvider(),
-        IAM.OpenIDConnectProviderProvider(),
-        IAM.PolicyProvider(),
-        IAM.RoleProvider(),
-        IAM.SAMLProviderProvider(),
-        IAM.ServerCertificateProvider(),
-        IAM.ServiceSpecificCredentialProvider(),
-        IAM.SigningCertificateProvider(),
-        IAM.SSHPublicKeyProvider(),
-        IAM.UserProvider(),
-        IAM.VirtualMFADeviceProvider(),
-        IdentityCenter.AccountAssignmentProvider(),
-        IdentityCenter.GroupProvider(),
-        IdentityCenter.InstanceProvider(),
-        IdentityCenter.PermissionSetProvider(),
-        KMS.AliasProvider(),
-        KMS.KeyProvider(),
-        Kinesis.StreamConsumerProvider(),
-        Kinesis.StreamProvider(),
-        Lambda.AliasProvider(),
-        Lambda.EventSourceMappingProvider(),
-        Lambda.FunctionProvider(),
-        Lambda.PermissionProvider(),
-        Logs.LogGroupProvider(),
-        Organizations.AccountProvider(),
-        Organizations.DelegatedAdministratorProvider(),
-        Organizations.OrganizationalUnitProvider(),
-        Organizations.OrganizationProvider(),
-        Organizations.OrganizationResourcePolicyProvider(),
-        Organizations.PolicyAttachmentProvider(),
-        Organizations.PolicyProvider(),
-        Organizations.RootPolicyTypeProvider(),
-        Organizations.RootProvider(),
-        Organizations.TrustedServiceAccessProvider(),
-        RDS.DBClusterEndpointProvider(),
-        RDS.DBClusterParameterGroupProvider(),
-        RDS.DBClusterProvider(),
-        RDS.DBInstanceProvider(),
-        RDS.DBParameterGroupProvider(),
-        RDS.DBProxyEndpointProvider(),
-        RDS.DBProxyProvider(),
-        RDS.DBProxyTargetGroupProvider(),
-        RDS.DBSubnetGroupProvider(),
-        Route53.HealthCheckProvider(),
-        Route53.HostedZoneProvider(),
-        Route53.RecordProvider(),
-        S3.BucketProvider(),
-        Scheduler.ScheduleGroupProvider(),
-        Scheduler.ScheduleProvider(),
-        SecretsManager.SecretProvider(),
-        SNS.SubscriptionProvider(),
-        SNS.TopicProvider(),
-        SQS.QueueProvider(),
-        Website.AssetDeploymentProvider(),
+        Layer.mergeAll(
+          ACM.CertificateProvider(),
+          ApiGateway.AccountProvider(),
+          ApiGateway.ApiKeyProvider(),
+          ApiGateway.AuthorizerProvider(),
+          ApiGateway.BasePathMappingProvider(),
+          ApiGateway.DeploymentProvider(),
+          ApiGateway.DomainNameProvider(),
+          ApiGateway.GatewayResponseProvider(),
+          ApiGateway.MethodProvider(),
+          ApiGateway.ResourceProvider(),
+          ApiGateway.RestApiProvider(),
+          ApiGateway.StageProvider(),
+          ApiGateway.UsagePlanProvider(),
+          ApiGateway.UsagePlanKeyProvider(),
+          ApiGateway.VpcLinkProvider(),
+          AutoScaling.AutoScalingGroupProvider(),
+          AutoScaling.LaunchTemplateProvider(),
+          AutoScaling.ScalingPolicyProvider(),
+          CloudFront.CachePolicyProvider(),
+          CloudFront.DistributionProvider(),
+          CloudFront.FunctionProvider(),
+          CloudFront.InvalidationProvider(),
+          CloudFront.KeyGroupProvider(),
+          CloudFront.KeyValueStoreProvider(),
+          CloudFront.KvEntriesProvider(),
+          CloudFront.KvRoutesUpdateProvider(),
+          CloudFront.OriginAccessControlProvider(),
+          CloudFront.OriginRequestPolicyProvider(),
+          CloudFront.PublicKeyProvider(),
+          CloudFront.ResponseHeadersPolicyProvider(),
+          CloudFront.VpcOriginProvider(),
+          CloudWatch.AlarmMuteRuleProvider(),
+          CloudWatch.AlarmProvider(),
+          CloudWatch.AnomalyDetectorProvider(),
+          CloudWatch.CompositeAlarmProvider(),
+          CloudWatch.DashboardProvider(),
+          CloudWatch.InsightRuleProvider(),
+          CloudWatch.MetricStreamProvider(),
+        ),
+        Layer.mergeAll(
+          DynamoDB.TableProvider(),
+          EC2.EgressOnlyInternetGatewayProvider(),
+          EC2.EIPProvider(),
+          EC2.InstanceProvider(),
+          EC2.InternetGatewayProvider(),
+          EC2.KeyPairProvider(),
+          EC2.NatGatewayProvider(),
+          EC2.NetworkAclAssociationProvider(),
+          EC2.NetworkAclEntryProvider(),
+          EC2.NetworkAclProvider(),
+          EC2.RouteProvider(),
+          EC2.RouteTableAssociationProvider(),
+          EC2.RouteTableProvider(),
+          EC2.SecurityGroupProvider(),
+          EC2.SecurityGroupRuleProvider(),
+          EC2.SubnetProvider(),
+          EC2.VpcEndpointProvider(),
+          EC2.VpcProvider(),
+          ECR.RepositoryProvider(),
+          ECS.CapacityProviderProvider(),
+          ECS.ClusterProvider(),
+          ECS.ServiceProvider(),
+          ECS.TaskProvider(),
+          EKS.AccessEntryProvider(),
+          EKS.AddonProvider(),
+          EKS.ClusterProvider(),
+          EKS.PodIdentityAssociationProvider(),
+          ELBv2.ListenerProvider(),
+          ELBv2.ListenerRuleProvider(),
+          ELBv2.LoadBalancerProvider(),
+          ELBv2.TargetGroupProvider(),
+          ELBv2.TrustStoreProvider(),
+          EventBridge.EventBusProvider(),
+          EventBridge.PermissionProvider(),
+          EventBridge.RuleProvider(),
+          IAM.AccessKeyProvider(),
+          IAM.AccountAliasProvider(),
+          IAM.AccountPasswordPolicyProvider(),
+          IAM.GroupMembershipProvider(),
+          IAM.GroupProvider(),
+          IAM.InstanceProfileProvider(),
+          IAM.LoginProfileProvider(),
+          IAM.OpenIDConnectProviderProvider(),
+          IAM.PolicyProvider(),
+          IAM.RoleProvider(),
+          IAM.SAMLProviderProvider(),
+          IAM.ServerCertificateProvider(),
+          IAM.ServiceSpecificCredentialProvider(),
+          IAM.SigningCertificateProvider(),
+          IAM.SSHPublicKeyProvider(),
+          IAM.UserProvider(),
+          IAM.VirtualMFADeviceProvider(),
+        ),
+        Layer.mergeAll(
+          IdentityCenter.AccountAssignmentProvider(),
+          IdentityCenter.GroupProvider(),
+          IdentityCenter.InstanceProvider(),
+          IdentityCenter.PermissionSetProvider(),
+          KMS.AliasProvider(),
+          KMS.KeyProvider(),
+          Kinesis.StreamConsumerProvider(),
+          Kinesis.StreamProvider(),
+          Lambda.AliasProvider(),
+          Lambda.EventSourceMappingProvider(),
+          Lambda.FunctionProvider(),
+          Lambda.MicrovmImageProvider(),
+          Lambda.NetworkConnectorProvider(),
+          Lambda.PermissionProvider(),
+          Logs.LogGroupProvider(),
+          Organizations.AccountProvider(),
+          Organizations.DelegatedAdministratorProvider(),
+          Organizations.OrganizationalUnitProvider(),
+          Organizations.OrganizationProvider(),
+          Organizations.OrganizationResourcePolicyProvider(),
+          Organizations.PolicyAttachmentProvider(),
+          Organizations.PolicyProvider(),
+          Organizations.RootPolicyTypeProvider(),
+          Organizations.RootProvider(),
+          Organizations.TrustedServiceAccessProvider(),
+          RDS.DBClusterEndpointProvider(),
+          RDS.DBClusterParameterGroupProvider(),
+          RDS.DBClusterProvider(),
+          RDS.DBInstanceProvider(),
+          RDS.DBParameterGroupProvider(),
+          RDS.DBProxyEndpointProvider(),
+          RDS.DBProxyProvider(),
+          RDS.DBProxyTargetGroupProvider(),
+          RDS.DBSubnetGroupProvider(),
+          Route53.HealthCheckProvider(),
+          Route53.HostedZoneProvider(),
+          Route53.RecordProvider(),
+          S3.BucketProvider(),
+          Scheduler.ScheduleGroupProvider(),
+          Scheduler.ScheduleProvider(),
+          SecretsManager.SecretProvider(),
+          SNS.SubscriptionProvider(),
+          SNS.TopicProvider(),
+          SQS.QueueProvider(),
+          Website.AssetDeploymentProvider(),
+        ),
       ),
     ),
     Layer.provideMerge(
@@ -342,6 +355,7 @@ export const providers = () =>
         KeyPairProvider(),
         RandomProvider(),
         Assets.AssetsLive,
+        DockerLive,
       ),
     ),
     Layer.provideMerge(Region.fromEnvironment),

package/src/AWS/RDS/DBClusterParameterGroup.ts

@@ -92,7 +92,11 @@ export const DBClusterParameterGroupProvider = () =>
                       g,
                     ): g is rds.DBClusterParameterGroup & {
                       DBClusterParameterGroupName: string;
-                    } => g.DBClusterParameterGroupName != null,
+                    } =>
+                      g.DBClusterParameterGroupName != null &&
+                      // AWS-managed `default.*` groups cannot be deleted
+                      // (InvalidDBParameterGroupStateFault) — don't enumerate.
+                      !g.DBClusterParameterGroupName.startsWith("default."),
                   )
                   .map((g) => ({
                     dbClusterParameterGroupName: g.DBClusterParameterGroupName,

package/src/AWS/RDS/DBParameterGroup.ts

@@ -104,7 +104,11 @@ export const DBParameterGroupProvider = () =>
                       g,
                     ): g is rds.DBParameterGroup & {
                       DBParameterGroupName: string;
-                    } => g.DBParameterGroupName != null,
+                    } =>
+                      g.DBParameterGroupName != null &&
+                      // AWS-managed `default.*` groups cannot be deleted
+                      // (InvalidDBParameterGroupStateFault) — don't enumerate.
+                      !g.DBParameterGroupName.startsWith("default."),
                   )
                   .map((g) => ({
                     dbParameterGroupName: g.DBParameterGroupName,

package/src/AWS/Region.ts

@@ -21,8 +21,15 @@ export const fromEnvOrElse = (region: string) =>
     Effect.succeed(process.env.AWS_REGION ?? region),
   );
 
-export const CurrentRegion = AWSEnvironment.use((env) =>
-  Effect.flatMap(env, ({ region }) => Effect.succeed(region)),
+// Deferred with `Effect.suspend` so it does not dereference `AWSEnvironment`
+// during module evaluation. `Region.ts` and `Environment.ts` are part of an
+// import cycle (AuthProvider → Region → Environment → AuthProvider); touching
+// `AWSEnvironment` eagerly at top level hits a temporal-dead-zone error when
+// this module is evaluated mid-cycle.
+export const CurrentRegion = Effect.suspend(() =>
+  AWSEnvironment.use((env) =>
+    Effect.flatMap(env, ({ region }) => Effect.succeed(region)),
+  ),
 );
 
 /**