alchemy 2.0.0-beta.cli-platform-split-2 → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/EC2/Network.d.ts

@@ -0,0 +1,127 @@
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Effect from "effect/Effect";
+import type { EIP as EIPResource } from "./EIP.ts";
+import type { InternetGateway as InternetGatewayResource } from "./InternetGateway.ts";
+import type { NatGateway as NatGatewayResource } from "./NatGateway.ts";
+import type { Route as RouteResource } from "./Route.ts";
+import type { RouteTable as RouteTableResource } from "./RouteTable.ts";
+import type { RouteTableAssociation as RouteTableAssociationResource } from "./RouteTableAssociation.ts";
+import type { Subnet as SubnetResource } from "./Subnet.ts";
+import type { Vpc as VpcResource } from "./Vpc.ts";
+import type { VpcEndpoint as VpcEndpointResource } from "./VpcEndpoint.ts";
+export type NetworkNat = "none" | "single" | "per-az";
+export type NetworkGatewayEndpoint = "s3" | "dynamodb";
+export interface NetworkProps {
+    /**
+     * IPv4 CIDR block for the VPC.
+     * @example "10.42.0.0/16"
+     */
+    cidrBlock: string;
+    /**
+     * Number of Availability Zones to span or an explicit ordered list of zone names.
+     * Defaults to 2 available zones.
+     */
+    availabilityZones?: number | string[];
+    /**
+     * NAT strategy for private subnets.
+     * - `"none"` keeps private subnets isolated
+     * - `"single"` creates one shared NAT gateway
+     * - `"per-az"` creates one NAT gateway per Availability Zone
+     * @default "none"
+     */
+    nat?: NetworkNat;
+    /**
+     * Gateway endpoints to attach to the private route tables.
+     * Supported in v1: S3 and DynamoDB.
+     */
+    gatewayEndpoints?: NetworkGatewayEndpoint[];
+    /**
+     * Whether DNS resolution is supported for the VPC.
+     * @default true
+     */
+    enableDnsSupport?: boolean;
+    /**
+     * Whether instances launched in the VPC receive DNS hostnames.
+     * @default true
+     */
+    enableDnsHostnames?: boolean;
+    /**
+     * Tags to apply to all created resources.
+     */
+    tags?: Record<string, string>;
+}
+export interface NetworkResources {
+    availabilityZones: string[];
+    vpc: VpcResource;
+    internetGateway?: InternetGatewayResource;
+    elasticIps: EIPResource[];
+    natGateways: NatGatewayResource[];
+    publicSubnets: SubnetResource[];
+    privateSubnets: SubnetResource[];
+    publicRouteTables: RouteTableResource[];
+    privateRouteTables: RouteTableResource[];
+    publicRoutes: RouteResource[];
+    privateRoutes: RouteResource[];
+    publicRouteAssociations: RouteTableAssociationResource[];
+    privateRouteAssociations: RouteTableAssociationResource[];
+    gatewayEndpoints: VpcEndpointResource[];
+    vpcId: VpcResource["vpcId"];
+    publicSubnetIds: Array<SubnetResource["subnetId"]>;
+    privateSubnetIds: Array<SubnetResource["subnetId"]>;
+}
+export type Network = Effect.Success<ReturnType<typeof Network>>;
+/**
+ * Creates a production-shaped VPC network from the low-level EC2 primitives.
+ *
+ * `Network` is the ergonomic entry point for users who want a ready-to-use VPC
+ * layout without manually creating route tables, internet gateways, NAT
+ * gateways, and subnet associations by hand.
+ *
+ * The helper still returns the underlying canonical resources so callers can
+ * keep composing with raw `AWS.EC2.*` APIs when they need more control.
+ *
+ * @example Minimal network
+ * ```typescript
+ * const network = yield* AWS.EC2.Network("AppNetwork", {
+ *   cidrBlock: "10.42.0.0/16",
+ * });
+ * ```
+ *
+ * @example ECS-ready network with shared NAT
+ * ```typescript
+ * const network = yield* AWS.EC2.Network("AppNetwork", {
+ *   cidrBlock: "10.42.0.0/16",
+ *   availabilityZones: 2,
+ *   nat: "single",
+ *   gatewayEndpoints: ["s3"],
+ * });
+ *
+ * yield* AWS.ECS.Service("ApiService", {
+ *   cluster,
+ *   task: apiTask,
+ *   vpcId: network.vpcId,
+ *   subnets: network.publicSubnetIds,
+ *   assignPublicIp: true,
+ * });
+ * ```
+ */
+export declare const Network: (id: string, props: NetworkProps) => Effect.Effect<{
+    availabilityZones: string[];
+    vpc: VpcResource;
+    internetGateway: InternetGatewayResource;
+    elasticIps: EIPResource[];
+    natGateways: NatGatewayResource[];
+    publicSubnets: SubnetResource[];
+    privateSubnets: SubnetResource[];
+    publicRouteTables: RouteTableResource[];
+    privateRouteTables: RouteTableResource[];
+    publicRoutes: RouteResource[];
+    privateRoutes: RouteResource[];
+    publicRouteAssociations: RouteTableAssociationResource[];
+    privateRouteAssociations: RouteTableAssociationResource[];
+    gatewayEndpoints: VpcEndpointResource[];
+    vpcId: import("../../Output.ts").Output<`vpc-${string}`, never>;
+    publicSubnetIds: import("../../Output.ts").Output<`subnet-${string}`, never>[];
+    privateSubnetIds: import("../../Output.ts").Output<`subnet-${string}`, never>[];
+}, never, import("effect/unstable/http/HttpClient").HttpClient | Region | import("@distilled.cloud/aws/Credentials").Credentials | import("../Providers.ts").Providers>;
+//# sourceMappingURL=Network.d.ts.map

package/lib/AWS/EC2/Network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Network.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/Network.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,KAAK,EAAE,eAAe,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,KAAK,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,KAAK,EAAE,KAAK,IAAI,aAAa,EAAE,MAAM,YAAY,CAAC;AAEzD,OAAO,KAAK,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,KAAK,EAAE,qBAAqB,IAAI,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAEzG,OAAO,KAAK,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,IAAI,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG3E,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEtD,MAAM,MAAM,sBAAsB,GAAG,IAAI,GAAG,UAAU,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEtC;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;IAEjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAE5C;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,GAAG,EAAE,WAAW,CAAC;IACjB,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,aAAa,EAAE,cAAc,EAAE,CAAC;IAChC,cAAc,EAAE,cAAc,EAAE,CAAC;IACjC,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IACxC,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;IACzC,YAAY,EAAE,aAAa,EAAE,CAAC;IAC9B,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,uBAAuB,EAAE,6BAA6B,EAAE,CAAC;IACzD,wBAAwB,EAAE,6BAA6B,EAAE,CAAC;IAC1D,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;IACxC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5B,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,OAAO,GAAI,IAAI,MAAM,EAAE,OAAO,YAAY;;;;;;;;;;;;;;;;;;uKAsNpD,CAAC"}

package/lib/AWS/EC2/Network.js

@@ -0,0 +1,279 @@
+import * as ec2 from "@distilled.cloud/aws/ec2";
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Effect from "effect/Effect";
+import * as Namespace from "../../Namespace.js";
+import { EIP } from "./EIP.js";
+import { InternetGateway } from "./InternetGateway.js";
+import { NatGateway } from "./NatGateway.js";
+import { Route } from "./Route.js";
+import { RouteTable } from "./RouteTable.js";
+import { RouteTableAssociation } from "./RouteTableAssociation.js";
+import { Subnet } from "./Subnet.js";
+import { Vpc } from "./Vpc.js";
+import { VpcEndpoint } from "./VpcEndpoint.js";
+/**
+ * Creates a production-shaped VPC network from the low-level EC2 primitives.
+ *
+ * `Network` is the ergonomic entry point for users who want a ready-to-use VPC
+ * layout without manually creating route tables, internet gateways, NAT
+ * gateways, and subnet associations by hand.
+ *
+ * The helper still returns the underlying canonical resources so callers can
+ * keep composing with raw `AWS.EC2.*` APIs when they need more control.
+ *
+ * @example Minimal network
+ * ```typescript
+ * const network = yield* AWS.EC2.Network("AppNetwork", {
+ *   cidrBlock: "10.42.0.0/16",
+ * });
+ * ```
+ *
+ * @example ECS-ready network with shared NAT
+ * ```typescript
+ * const network = yield* AWS.EC2.Network("AppNetwork", {
+ *   cidrBlock: "10.42.0.0/16",
+ *   availabilityZones: 2,
+ *   nat: "single",
+ *   gatewayEndpoints: ["s3"],
+ * });
+ *
+ * yield* AWS.ECS.Service("ApiService", {
+ *   cluster,
+ *   task: apiTask,
+ *   vpcId: network.vpcId,
+ *   subnets: network.publicSubnetIds,
+ *   assignPublicIp: true,
+ * });
+ * ```
+ */
+export const Network = (id, props) => Namespace.push(id, Effect.gen(function* () {
+    const availabilityZones = yield* resolveAvailabilityZones(props.availabilityZones);
+    const subnetCidrs = deriveSubnetCidrs(props.cidrBlock, availabilityZones.length);
+    const tags = props.tags;
+    const vpc = yield* Vpc("Vpc", {
+        cidrBlock: props.cidrBlock,
+        enableDnsSupport: props.enableDnsSupport ?? true,
+        enableDnsHostnames: props.enableDnsHostnames ?? true,
+        tags,
+    });
+    const internetGateway = yield* InternetGateway("InternetGateway", {
+        vpcId: vpc.vpcId,
+        tags,
+    });
+    const publicSubnets = [];
+    const privateSubnets = [];
+    for (const [index, availabilityZone] of availabilityZones.entries()) {
+        const publicSubnet = yield* Subnet(`PublicSubnet${index + 1}`, {
+            vpcId: vpc.vpcId,
+            cidrBlock: subnetCidrs.public[index],
+            availabilityZone,
+            mapPublicIpOnLaunch: true,
+            tags: {
+                ...tags,
+                Tier: "public",
+            },
+        });
+        publicSubnets.push(publicSubnet);
+        const privateSubnet = yield* Subnet(`PrivateSubnet${index + 1}`, {
+            vpcId: vpc.vpcId,
+            cidrBlock: subnetCidrs.private[index],
+            availabilityZone,
+            tags: {
+                ...tags,
+                Tier: "private",
+            },
+        });
+        privateSubnets.push(privateSubnet);
+    }
+    const publicRouteTable = yield* RouteTable("PublicRouteTable", {
+        vpcId: vpc.vpcId,
+        tags: {
+            ...tags,
+            Tier: "public",
+        },
+    });
+    const publicInternetRoute = yield* Route("PublicInternetRoute", {
+        routeTableId: publicRouteTable.routeTableId,
+        destinationCidrBlock: "0.0.0.0/0",
+        gatewayId: internetGateway.internetGatewayId,
+    });
+    const publicRouteAssociations = [];
+    for (const [index, subnet] of publicSubnets.entries()) {
+        publicRouteAssociations.push(yield* RouteTableAssociation(`PublicSubnetAssociation${index + 1}`, {
+            routeTableId: publicRouteTable.routeTableId,
+            subnetId: subnet.subnetId,
+        }));
+    }
+    const nat = props.nat ?? "none";
+    const elasticIps = [];
+    const natGateways = [];
+    const privateRouteTables = [];
+    const privateRoutes = [];
+    const privateRouteAssociations = [];
+    if (nat === "per-az") {
+        for (const [index, subnet] of publicSubnets.entries()) {
+            const eip = yield* EIP(`NatEip${index + 1}`, {
+                domain: "vpc",
+                tags,
+            });
+            elasticIps.push(eip);
+            const natGateway = yield* NatGateway(`NatGateway${index + 1}`, {
+                subnetId: subnet.subnetId,
+                allocationId: eip.allocationId,
+                connectivityType: "public",
+                tags,
+            });
+            natGateways.push(natGateway);
+            const privateRouteTable = yield* RouteTable(`PrivateRouteTable${index + 1}`, {
+                vpcId: vpc.vpcId,
+                tags: {
+                    ...tags,
+                    Tier: "private",
+                },
+            });
+            privateRouteTables.push(privateRouteTable);
+            privateRoutes.push(yield* Route(`PrivateInternetRoute${index + 1}`, {
+                routeTableId: privateRouteTable.routeTableId,
+                destinationCidrBlock: "0.0.0.0/0",
+                natGatewayId: natGateway.natGatewayId,
+            }));
+            privateRouteAssociations.push(yield* RouteTableAssociation(`PrivateSubnetAssociation${index + 1}`, {
+                routeTableId: privateRouteTable.routeTableId,
+                subnetId: privateSubnets[index].subnetId,
+            }));
+        }
+    }
+    else {
+        const privateRouteTable = yield* RouteTable("PrivateRouteTable", {
+            vpcId: vpc.vpcId,
+            tags: {
+                ...tags,
+                Tier: "private",
+            },
+        });
+        privateRouteTables.push(privateRouteTable);
+        if (nat === "single") {
+            const eip = yield* EIP("NatEip", {
+                domain: "vpc",
+                tags,
+            });
+            elasticIps.push(eip);
+            const natGateway = yield* NatGateway("NatGateway", {
+                subnetId: publicSubnets[0].subnetId,
+                allocationId: eip.allocationId,
+                connectivityType: "public",
+                tags,
+            });
+            natGateways.push(natGateway);
+            privateRoutes.push(yield* Route("PrivateInternetRoute", {
+                routeTableId: privateRouteTable.routeTableId,
+                destinationCidrBlock: "0.0.0.0/0",
+                natGatewayId: natGateway.natGatewayId,
+            }));
+        }
+        for (const [index, subnet] of privateSubnets.entries()) {
+            privateRouteAssociations.push(yield* RouteTableAssociation(`PrivateSubnetAssociation${index + 1}`, {
+                routeTableId: privateRouteTable.routeTableId,
+                subnetId: subnet.subnetId,
+            }));
+        }
+    }
+    const region = yield* Region;
+    const gatewayEndpoints = [];
+    for (const service of uniqueGatewayEndpoints(props.gatewayEndpoints)) {
+        gatewayEndpoints.push(yield* VpcEndpoint(`${toEndpointId(service)}Endpoint`, {
+            vpcId: vpc.vpcId,
+            serviceName: `com.amazonaws.${region}.${service}`,
+            vpcEndpointType: "Gateway",
+            routeTableIds: privateRouteTables.map((table) => table.routeTableId),
+            tags,
+        }));
+    }
+    return {
+        availabilityZones,
+        vpc,
+        internetGateway,
+        elasticIps,
+        natGateways,
+        publicSubnets,
+        privateSubnets,
+        publicRouteTables: [publicRouteTable],
+        privateRouteTables,
+        publicRoutes: [publicInternetRoute],
+        privateRoutes,
+        publicRouteAssociations,
+        privateRouteAssociations,
+        gatewayEndpoints,
+        vpcId: vpc.vpcId,
+        publicSubnetIds: publicSubnets.map((subnet) => subnet.subnetId),
+        privateSubnetIds: privateSubnets.map((subnet) => subnet.subnetId),
+    };
+}).pipe(Effect.orDie));
+const resolveAvailabilityZones = (input) => Effect.gen(function* () {
+    if (Array.isArray(input)) {
+        if (input.length === 0) {
+            return yield* Effect.fail(new Error("EC2.Network requires at least one availability zone"));
+        }
+        if (new Set(input).size !== input.length) {
+            return yield* Effect.fail(new Error("EC2.Network availabilityZones must not contain duplicates"));
+        }
+        return input;
+    }
+    const desiredCount = input ?? 2;
+    if (!Number.isInteger(desiredCount) || desiredCount <= 0) {
+        return yield* Effect.fail(new Error("EC2.Network availabilityZones count must be a positive integer"));
+    }
+    const result = yield* ec2.describeAvailabilityZones({});
+    const zones = (result.AvailabilityZones ?? [])
+        .filter((zone) => zone.State === "available" && zone.ZoneName)
+        .map((zone) => zone.ZoneName)
+        .sort((a, b) => a.localeCompare(b));
+    if (zones.length < desiredCount) {
+        return yield* Effect.fail(new Error(`EC2.Network requested ${desiredCount} availability zones, but only ${zones.length} are available`));
+    }
+    return zones.slice(0, desiredCount);
+});
+const deriveSubnetCidrs = (cidrBlock, azCount) => {
+    const [baseAddress, prefixText] = cidrBlock.split("/");
+    const prefix = Number(prefixText);
+    if (!baseAddress || !Number.isInteger(prefix) || prefix < 0 || prefix > 28) {
+        throw new Error(`EC2.Network requires a valid IPv4 CIDR block, got '${cidrBlock}'`);
+    }
+    const totalSubnets = azCount * 2;
+    const additionalBits = Math.ceil(Math.log2(totalSubnets));
+    const subnetPrefix = Math.max(prefix + additionalBits, 24);
+    if (subnetPrefix > 28) {
+        throw new Error(`EC2.Network CIDR block '${cidrBlock}' is too small for ${totalSubnets} subnets`);
+    }
+    const subnetSize = 2 ** (32 - subnetPrefix);
+    const base = toNetworkAddress(baseAddress, prefix);
+    return {
+        public: Array.from({ length: azCount }, (_, index) => toCidr(base + subnetSize * index, subnetPrefix)),
+        private: Array.from({ length: azCount }, (_, index) => toCidr(base + subnetSize * (index + azCount), subnetPrefix)),
+    };
+};
+const toNetworkAddress = (ip, prefix) => {
+    const value = ipv4ToNumber(ip);
+    const blockSize = 2 ** (32 - prefix);
+    return Math.floor(value / blockSize) * blockSize;
+};
+const ipv4ToNumber = (ip) => {
+    const octets = ip.split(".").map((part) => Number(part));
+    if (octets.length !== 4 ||
+        octets.some((octet) => !Number.isInteger(octet) || octet < 0 || octet > 255)) {
+        throw new Error(`Invalid IPv4 address '${ip}'`);
+    }
+    return (octets[0] * 256 ** 3 + octets[1] * 256 ** 2 + octets[2] * 256 + octets[3]);
+};
+const numberToIpv4 = (value) => [
+    Math.floor(value / 256 ** 3) % 256,
+    Math.floor(value / 256 ** 2) % 256,
+    Math.floor(value / 256) % 256,
+    value % 256,
+].join(".");
+const toCidr = (value, prefix) => `${numberToIpv4(value)}/${prefix}`;
+const uniqueGatewayEndpoints = (services = []) => [
+    ...new Set(services),
+];
+const toEndpointId = (service) => service === "s3" ? "S3" : "DynamoDb";
+//# sourceMappingURL=Network.js.map

package/lib/AWS/EC2/Network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Network.js","sourceRoot":"","sources":["../../../src/AWS/EC2/Network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA0E/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,KAAmB,EAAE,EAAE,CACzD,SAAS,CAAC,IAAI,CACZ,EAAE,EACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,wBAAwB,CACvD,KAAK,CAAC,iBAAiB,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,iBAAiB,CACnC,KAAK,CAAC,SAAS,EACf,iBAAiB,CAAC,MAAM,CACzB,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAExB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;QAChD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,iBAAiB,EAAE;QAChE,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,aAAa,GAAqB,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAqB,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,KAAK,GAAG,CAAC,EAAE,EAAE;YAC7D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YACpC,gBAAgB;YAChB,mBAAmB,EAAE,IAAI;YACzB,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,IAAI,EAAE,QAAQ;aACf;SACF,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,gBAAgB,KAAK,GAAG,CAAC,EAAE,EAAE;YAC/D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;YACrC,gBAAgB;YAChB,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,IAAI,EAAE,SAAS;aAChB;SACF,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,kBAAkB,EAAE;QAC7D,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE;YACJ,GAAG,IAAI;YACP,IAAI,EAAE,QAAQ;SACf;KACF,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAC9D,YAAY,EAAE,gBAAgB,CAAC,YAAY;QAC3C,oBAAoB,EAAE,WAAW;QACjC,SAAS,EAAE,eAAe,CAAC,iBAAiB;KAC7C,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAoC,EAAE,CAAC;IAEpE,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,uBAAuB,CAAC,IAAI,CAC1B,KAAK,CAAC,CAAC,qBAAqB,CAAC,0BAA0B,KAAK,GAAG,CAAC,EAAE,EAAE;YAClE,YAAY,EAAE,gBAAgB,CAAC,YAAY;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;IAChC,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAyB,EAAE,CAAC;IACpD,MAAM,aAAa,GAAoB,EAAE,CAAC;IAC1C,MAAM,wBAAwB,GAAoC,EAAE,CAAC;IAErE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI;aACL,CAAC,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAErB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,KAAK,GAAG,CAAC,EAAE,EAAE;gBAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,gBAAgB,EAAE,QAAQ;gBAC1B,IAAI;aACL,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAE7B,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,UAAU,CACzC,oBAAoB,KAAK,GAAG,CAAC,EAAE,EAC/B;gBACE,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE;oBACJ,GAAG,IAAI;oBACP,IAAI,EAAE,SAAS;iBAChB;aACF,CACF,CAAC;YACF,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE3C,aAAa,CAAC,IAAI,CAChB,KAAK,CAAC,CAAC,KAAK,CAAC,uBAAuB,KAAK,GAAG,CAAC,EAAE,EAAE;gBAC/C,YAAY,EAAE,iBAAiB,CAAC,YAAY;gBAC5C,oBAAoB,EAAE,WAAW;gBACjC,YAAY,EAAE,UAAU,CAAC,YAAY;aACtC,CAAC,CACH,CAAC;YAEF,wBAAwB,CAAC,IAAI,CAC3B,KAAK,CAAC,CAAC,qBAAqB,CAC1B,2BAA2B,KAAK,GAAG,CAAC,EAAE,EACtC;gBACE,YAAY,EAAE,iBAAiB,CAAC,YAAY;gBAC5C,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,QAAQ;aACzC,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,mBAAmB,EAAE;YAC/D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,IAAI,EAAE,SAAS;aAChB;SACF,CAAC,CAAC;QACH,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE3C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,KAAK;gBACb,IAAI;aACL,CAAC,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAErB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE;gBACjD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACnC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,gBAAgB,EAAE,QAAQ;gBAC1B,IAAI;aACL,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAE7B,aAAa,CAAC,IAAI,CAChB,KAAK,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,YAAY,EAAE,iBAAiB,CAAC,YAAY;gBAC5C,oBAAoB,EAAE,WAAW;gBACjC,YAAY,EAAE,UAAU,CAAC,YAAY;aACtC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,wBAAwB,CAAC,IAAI,CAC3B,KAAK,CAAC,CAAC,qBAAqB,CAC1B,2BAA2B,KAAK,GAAG,CAAC,EAAE,EACtC;gBACE,YAAY,EAAE,iBAAiB,CAAC,YAAY;gBAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,gBAAgB,GAA0B,EAAE,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,gBAAgB,CAAC,IAAI,CACnB,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE;YACrD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,iBAAiB,MAAM,IAAI,OAAO,EAAE;YACjD,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,kBAAkB,CAAC,GAAG,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAC9B;YACD,IAAI;SACL,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,iBAAiB;QACjB,GAAG;QACH,eAAe;QACf,UAAU;QACV,WAAW;QACX,aAAa;QACb,cAAc;QACd,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;QACrC,kBAAkB;QAClB,YAAY,EAAE,CAAC,mBAAmB,CAAC;QACnC,aAAa;QACb,uBAAuB;QACvB,wBAAwB;QACxB,gBAAgB;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC/D,gBAAgB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;KACvC,CAAC;AAC/B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CACtB,CAAC;AAEJ,MAAM,wBAAwB,GAAG,CAAC,KAAyB,EAAE,EAAE,CAC7D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,qDAAqD,CAAC,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gEAAgE,CACjE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;SAC3C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAS,CAAC;SAC7B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,yBAAyB,YAAY,iCAAiC,KAAK,CAAC,MAAM,gBAAgB,CACnG,CACF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAE;IAC/D,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,sDAAsD,SAAS,GAAG,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,EAAE,CAAC,CAAC;IAE3D,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,sBAAsB,YAAY,UAAU,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAEnD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,GAAG,UAAU,GAAG,KAAK,EAAE,YAAY,CAAC,CAChD;QACD,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACpD,MAAM,CAAC,IAAI,GAAG,UAAU,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,EAAE,YAAY,CAAC,CAC5D;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CACL,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CACrC;IACE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG;IAClC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG;IAClC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG;IAC7B,KAAK,GAAG,GAAG;CACZ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEd,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CAC/C,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;AAErC,MAAM,sBAAsB,GAAG,CAAC,WAAqC,EAAE,EAAE,EAAE,CAAC;IAC1E,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAA+B,EAAE,EAAE,CACvD,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC"}

package/lib/AWS/EC2/NetworkAcl.d.ts

@@ -0,0 +1,54 @@
+import * as ec2 from "@distilled.cloud/aws/ec2";
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { AccountID } from "../Account.ts";
+import { Account } from "../Account.ts";
+import type { RegionID } from "../Region.ts";
+import type { VpcId } from "./Vpc.ts";
+export type NetworkAclId<ID extends string = string> = `acl-${ID}`;
+export declare const NetworkAclId: <ID extends string>(id: ID) => ID & NetworkAclId<ID>;
+export type NetworkAclArn<ID extends NetworkAclId = NetworkAclId> = `arn:aws:ec2:${RegionID}:${AccountID}:network-acl/${ID}`;
+export interface NetworkAclProps {
+    /**
+     * The VPC to create the network ACL in.
+     */
+    vpcId: VpcId;
+    /**
+     * Tags to assign to the network ACL.
+     */
+    tags?: Record<string, string>;
+}
+export interface NetworkAcl extends Resource<"AWS.EC2.NetworkAcl", NetworkAclProps, {
+    networkAclId: NetworkAclId;
+    networkAclArn: NetworkAclArn;
+    vpcId: VpcId;
+    isDefault: boolean;
+    ownerId: string;
+    entries?: Array<{
+        ruleNumber: number;
+        protocol: string;
+        ruleAction: ec2.RuleAction;
+        egress: boolean;
+        cidrBlock?: string;
+        ipv6CidrBlock?: string;
+        icmpTypeCode?: {
+            code?: number;
+            type?: number;
+        };
+        portRange?: {
+            from?: number;
+            to?: number;
+        };
+    }>;
+    associations?: Array<{
+        networkAclAssociationId: string;
+        networkAclId: string;
+        subnetId: string;
+    }>;
+}, never, Providers> {
+}
+export declare const NetworkAcl: import("../../Resource.ts").ResourceClass<NetworkAcl>;
+export declare const NetworkAclProvider: () => import("effect/Layer").Layer<Provider.Provider<NetworkAcl>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Region | Account | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=NetworkAcl.d.ts.map

package/lib/AWS/EC2/NetworkAcl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkAcl.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAcl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAKrD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,EAAE,EAAE,CAAC;AACnE,eAAO,MAAM,YAAY,GAAI,EAAE,SAAS,MAAM,EAC5C,IAAI,EAAE,KACL,EAAE,GAAG,YAAY,CAAC,EAAE,CAAyC,CAAC;AAEjE,MAAM,MAAM,aAAa,CAAC,EAAE,SAAS,YAAY,GAAG,YAAY,IAC9D,eAAe,QAAQ,IAAI,SAAS,gBAAgB,EAAE,EAAE,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,EAAE,KAAK,CAAC;IAEb;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,UAAW,SAAQ,QAAQ,CAC1C,oBAAoB,EACpB,eAAe,EACf;IACE,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;QAC3B,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE;YACb,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;QACF,SAAS,CAAC,EAAE;YACV,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,EAAE,CAAC,EAAE,MAAM,CAAC;SACb,CAAC;KACH,CAAC,CAAC;IACH,YAAY,CAAC,EAAE,KAAK,CAAC;QACnB,uBAAuB,EAAE,MAAM,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;CACJ,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ,eAAO,MAAM,UAAU,uDAA6C,CAAC;AAErE,eAAO,MAAM,kBAAkB,8QAoL5B,CAAC"}

package/lib/AWS/EC2/NetworkAcl.js

@@ -0,0 +1,142 @@
+import * as ec2 from "@distilled.cloud/aws/ec2";
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, createTagsList, diffTags } from "../../Tags.js";
+import { Account } from "../Account.js";
+export const NetworkAclId = (id) => `acl-${id}`;
+export const NetworkAcl = Resource("AWS.EC2.NetworkAcl");
+export const NetworkAclProvider = () => Provider.effect(NetworkAcl, Effect.gen(function* () {
+    const region = yield* Region;
+    const accountId = yield* Account;
+    const createTags = Effect.fn(function* (id, tags) {
+        return {
+            Name: id,
+            ...(yield* createInternalTags(id)),
+            ...tags,
+        };
+    });
+    const describeNetworkAcl = (networkAclId) => ec2.describeNetworkAcls({ NetworkAclIds: [networkAclId] }).pipe(Effect.map((r) => r.NetworkAcls?.[0]), Effect.flatMap((acl) => acl
+        ? Effect.succeed(acl)
+        : Effect.fail(new Error(`Network ACL ${networkAclId} not found`))));
+    const toAttrs = (acl) => ({
+        networkAclId: acl.NetworkAclId,
+        networkAclArn: `arn:aws:ec2:${region}:${accountId}:network-acl/${acl.NetworkAclId}`,
+        vpcId: acl.VpcId,
+        isDefault: acl.IsDefault ?? false,
+        ownerId: acl.OwnerId,
+        entries: acl.Entries?.map((e) => ({
+            ruleNumber: e.RuleNumber,
+            protocol: e.Protocol,
+            ruleAction: e.RuleAction,
+            egress: e.Egress,
+            cidrBlock: e.CidrBlock,
+            ipv6CidrBlock: e.Ipv6CidrBlock,
+            icmpTypeCode: e.IcmpTypeCode
+                ? {
+                    code: e.IcmpTypeCode.Code,
+                    type: e.IcmpTypeCode.Type,
+                }
+                : undefined,
+            portRange: e.PortRange
+                ? {
+                    from: e.PortRange.From,
+                    to: e.PortRange.To,
+                }
+                : undefined,
+        })),
+        associations: acl.Associations?.map((a) => ({
+            networkAclAssociationId: a.NetworkAclAssociationId,
+            networkAclId: a.NetworkAclId,
+            subnetId: a.SubnetId,
+        })),
+    });
+    return {
+        stables: ["networkAclId", "networkAclArn", "ownerId", "isDefault"],
+        read: Effect.fn(function* ({ output }) {
+            if (!output)
+                return undefined;
+            const acl = yield* describeNetworkAcl(output.networkAclId);
+            return toAttrs(acl);
+        }),
+        diff: Effect.fn(function* ({ news, olds }) {
+            if (!isResolved(news))
+                return;
+            // VPC change requires replacement
+            if (news.vpcId !== olds.vpcId) {
+                return { action: "replace" };
+            }
+            // Tags can be updated in-place
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            yield* session.note("Creating Network ACL...");
+            const result = yield* ec2.createNetworkAcl({
+                VpcId: news.vpcId,
+                TagSpecifications: [
+                    {
+                        ResourceType: "network-acl",
+                        Tags: createTagsList(yield* createTags(id, news.tags)),
+                    },
+                ],
+                DryRun: false,
+            });
+            const networkAclId = result.NetworkAcl.NetworkAclId;
+            yield* session.note(`Network ACL created: ${networkAclId}`);
+            const acl = yield* describeNetworkAcl(networkAclId);
+            return toAttrs(acl);
+        }),
+        update: Effect.fn(function* ({ id, news, output, session }) {
+            const networkAclId = output.networkAclId;
+            // Handle tag updates
+            const newTags = yield* createTags(id, news.tags);
+            const oldTags = (yield* ec2
+                .describeTags({
+                Filters: [
+                    { Name: "resource-id", Values: [networkAclId] },
+                    { Name: "resource-type", Values: ["network-acl"] },
+                ],
+            })
+                .pipe(Effect.map((r) => Object.fromEntries(r.Tags?.map((t) => [t.Key, t.Value]) ?? [])))) ?? {};
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (removed.length > 0) {
+                yield* ec2.deleteTags({
+                    Resources: [networkAclId],
+                    Tags: removed.map((key) => ({ Key: key })),
+                    DryRun: false,
+                });
+            }
+            if (upsert.length > 0) {
+                yield* ec2.createTags({
+                    Resources: [networkAclId],
+                    Tags: upsert,
+                    DryRun: false,
+                });
+                yield* session.note("Updated tags");
+            }
+            const acl = yield* describeNetworkAcl(networkAclId);
+            return toAttrs(acl);
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            const networkAclId = output.networkAclId;
+            yield* session.note(`Deleting Network ACL: ${networkAclId}`);
+            yield* ec2
+                .deleteNetworkAcl({
+                NetworkAclId: networkAclId,
+                DryRun: false,
+            })
+                .pipe(Effect.catchTag("InvalidNetworkAclID.NotFound", () => Effect.void), 
+            // Retry on dependency violations (e.g., associations still being removed)
+            Effect.retry({
+                while: (e) => {
+                    return e._tag === "DependencyViolation";
+                },
+                schedule: Schedule.exponential(1000, 1.5).pipe(Schedule.both(Schedule.recurs(15)), Schedule.tapOutput(([, attempt]) => session.note(`Waiting for dependencies to clear... (attempt ${attempt + 1})`))),
+            }));
+            yield* session.note(`Network ACL ${networkAclId} deleted`);
+        }),
+    };
+}));
+//# sourceMappingURL=NetworkAcl.js.map

package/lib/AWS/EC2/NetworkAcl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkAcl.js","sourceRoot":"","sources":["../../../src/AWS/EC2/NetworkAcl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAM,EACiB,EAAE,CAAC,OAAO,EAAE,EAA2B,CAAC;AAmDjE,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAa,oBAAoB,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CACrC,QAAQ,CAAC,MAAM,CACb,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAEjC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,EAAU,EACV,IAA6B;QAE7B,OAAO;YACL,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,EAAE,CAClD,GAAG,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EACrC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,GAAG;QACD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,YAAY,YAAY,CAAC,CAAC,CACpE,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAE,EAAE,CAAC,CAAC;QACxC,YAAY,EAAE,GAAG,CAAC,YAA4B;QAC9C,aAAa,EACX,eAAe,MAAM,IAAI,SAAS,gBAAgB,GAAG,CAAC,YAAY,EAAmB;QACvF,KAAK,EAAE,GAAG,CAAC,KAAc;QACzB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,KAAK;QACjC,OAAO,EAAE,GAAG,CAAC,OAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,UAAU,EAAE,CAAC,CAAC,UAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAS;YACrB,UAAU,EAAE,CAAC,CAAC,UAAW;YACzB,MAAM,EAAE,CAAC,CAAC,MAAO;YACjB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC1B,CAAC,CAAC;oBACE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;oBACzB,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;iBAC1B;gBACH,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,CAAC,CAAC,SAAS;gBACpB,CAAC,CAAC;oBACE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI;oBACtB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE;iBACnB;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QACH,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,uBAAuB,EAAE,CAAC,CAAC,uBAAwB;YACnD,YAAY,EAAE,CAAC,CAAC,YAAa;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAS;SACtB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,CAAC;QAElE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kCAAkC;YAClC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,+BAA+B;QACjC,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAe;gBAC3B,iBAAiB,EAAE;oBACjB;wBACE,YAAY,EAAE,aAAa;wBAC3B,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBACvD;iBACF;gBACD,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,CAAC,UAAW,CAAC,YAAa,CAAC;YACtD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,YAAY,EAAE,CAAC,CAAC;YAE5D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACxD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,qBAAqB;YACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,CAAC,GAAG;iBACR,YAAY,CAAC;gBACZ,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;oBAC/C,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE;iBACnD;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,WAAW,CAChB,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC,IAAI,EAAE,CACnB,CAC9B,CACF,CAAC,IAAI,EAAE,CAAC;YAEb,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEzC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAE7D,KAAK,CAAC,CAAC,GAAG;iBACP,gBAAgB,CAAC;gBAChB,YAAY,EAAE,YAAY;gBAC1B,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,8BAA8B,EAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB;YACD,0EAA0E;YAC1E,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;oBACX,OAAO,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAC1C,CAAC;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,iDAAiD,OAAO,GAAG,CAAC,GAAG,CAChE,CACF,CACF;aACF,CAAC,CACH,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,YAAY,UAAU,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}