alchemy 2.0.0-beta.test-export-fix-4 → 2.0.0-cli-bundle-fix.1

package/lib/AWS/EventBridge/index.d.ts

@@ -0,0 +1,15 @@
+export * from "./DescribeEventBus.ts";
+export * from "./DescribeRule.ts";
+export * from "./EventBus.ts";
+export * from "./EventSource.ts";
+export * from "./ListEventBuses.ts";
+export * from "./ListRules.ts";
+export * from "./ListTargetsByRule.ts";
+export * from "./Permission.ts";
+export * from "./PutEvents.ts";
+export * from "./Rule.ts";
+export * from "./TestEventPattern.ts";
+export * from "./ToEcsTask.ts";
+export * from "./ToLambda.ts";
+export * from "./ToQueue.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/AWS/EventBridge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/EventBridge/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/lib/AWS/EventBridge/index.js

@@ -0,0 +1,15 @@
+export * from "./DescribeEventBus.js";
+export * from "./DescribeRule.js";
+export * from "./EventBus.js";
+export * from "./EventSource.js";
+export * from "./ListEventBuses.js";
+export * from "./ListRules.js";
+export * from "./ListTargetsByRule.js";
+export * from "./Permission.js";
+export * from "./PutEvents.js";
+export * from "./Rule.js";
+export * from "./TestEventPattern.js";
+export * from "./ToEcsTask.js";
+export * from "./ToLambda.js";
+export * from "./ToQueue.js";
+//# sourceMappingURL=index.js.map

package/lib/AWS/EventBridge/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/EventBridge/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/lib/AWS/IAM/AccessKey.d.ts

@@ -0,0 +1,50 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AccessKeyProps {
+    /**
+     * User that owns the access key.
+     */
+    userName: string;
+    /**
+     * Desired access key status.
+     * @default "Active"
+     */
+    status?: iam.StatusType;
+}
+export interface AccessKey extends Resource<"AWS.IAM.AccessKey", AccessKeyProps, {
+    userName: string;
+    accessKeyId: string;
+    status: iam.StatusType;
+    createDate: Date | undefined;
+    secretAccessKey: Redacted.Redacted<string> | undefined;
+    lastUsedDate: Date | undefined;
+    lastUsedServiceName: string | undefined;
+    lastUsedRegion: string | undefined;
+}, never, Providers> {
+}
+/**
+ * An IAM access key for a user.
+ *
+ * `AccessKey` manages long-lived programmatic credentials for an IAM user. The
+ * secret access key is only returned during creation, so later reads preserve
+ * the originally stored redacted value instead of pretending AWS can return it again.
+ *
+ * @section Managing Programmatic Credentials
+ * @example Create an Access Key
+ * ```typescript
+ * const user = yield* User("DeployUser", {
+ *   userName: "deploy-user",
+ * });
+ *
+ * const key = yield* AccessKey("DeployUserKey", {
+ *   userName: user.userName,
+ *   status: "Active",
+ * });
+ * ```
+ */
+export declare const AccessKey: import("../../Resource.ts").ResourceClass<AccessKey>;
+export declare const AccessKeyProvider: () => import("effect/Layer").Layer<Provider.Provider<AccessKey>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=AccessKey.d.ts.map

package/lib/AWS/IAM/AccessKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessKey.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/AccessKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAEhD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,SAAU,SAAQ,QAAQ,CACzC,mBAAmB,EACnB,cAAc,EACd;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACvD,YAAY,EAAE,IAAI,GAAG,SAAS,CAAC;IAC/B,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,SAAS,sDAA2C,CAAC;AAElE,eAAO,MAAM,iBAAiB,uOAqF1B,CAAC"}

package/lib/AWS/IAM/AccessKey.js

@@ -0,0 +1,111 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { toRedactedString } from "./common.js";
+/**
+ * An IAM access key for a user.
+ *
+ * `AccessKey` manages long-lived programmatic credentials for an IAM user. The
+ * secret access key is only returned during creation, so later reads preserve
+ * the originally stored redacted value instead of pretending AWS can return it again.
+ *
+ * @section Managing Programmatic Credentials
+ * @example Create an Access Key
+ * ```typescript
+ * const user = yield* User("DeployUser", {
+ *   userName: "deploy-user",
+ * });
+ *
+ * const key = yield* AccessKey("DeployUserKey", {
+ *   userName: user.userName,
+ *   status: "Active",
+ * });
+ * ```
+ */
+export const AccessKey = Resource("AWS.IAM.AccessKey");
+export const AccessKeyProvider = () => Provider.succeed(AccessKey, {
+    stables: ["accessKeyId"],
+    diff: Effect.fn(function* ({ olds, news }) {
+        if (!isResolved(news))
+            return;
+        if (olds.userName !== news.userName) {
+            return { action: "replace" };
+        }
+    }),
+    read: Effect.fn(function* ({ output }) {
+        if (!output) {
+            return undefined;
+        }
+        const listed = yield* iam.listAccessKeys({
+            UserName: output.userName,
+        });
+        const metadata = listed.AccessKeyMetadata.find((entry) => entry.AccessKeyId === output.accessKeyId);
+        if (!metadata?.AccessKeyId) {
+            return undefined;
+        }
+        const lastUsed = yield* iam.getAccessKeyLastUsed({
+            AccessKeyId: output.accessKeyId,
+        });
+        return {
+            userName: metadata.UserName ?? output.userName,
+            accessKeyId: metadata.AccessKeyId,
+            status: metadata.Status ?? output.status,
+            createDate: metadata.CreateDate,
+            secretAccessKey: output.secretAccessKey,
+            lastUsedDate: lastUsed?.AccessKeyLastUsed?.LastUsedDate,
+            lastUsedServiceName: lastUsed?.AccessKeyLastUsed?.ServiceName,
+            lastUsedRegion: lastUsed?.AccessKeyLastUsed?.Region,
+        };
+    }),
+    create: Effect.fn(function* ({ news, session }) {
+        const created = yield* iam.createAccessKey({
+            UserName: news.userName,
+        });
+        if (news.status !== undefined &&
+            created.AccessKey.Status !== news.status) {
+            yield* iam.updateAccessKey({
+                UserName: news.userName,
+                AccessKeyId: created.AccessKey.AccessKeyId,
+                Status: news.status,
+            });
+        }
+        yield* session.note(created.AccessKey.AccessKeyId);
+        return {
+            userName: created.AccessKey.UserName,
+            accessKeyId: created.AccessKey.AccessKeyId,
+            status: news.status ?? created.AccessKey.Status,
+            createDate: created.AccessKey.CreateDate,
+            secretAccessKey: toRedactedString(created.AccessKey.SecretAccessKey),
+            lastUsedDate: undefined,
+            lastUsedServiceName: undefined,
+            lastUsedRegion: undefined,
+        };
+    }),
+    update: Effect.fn(function* ({ news, output, session }) {
+        const status = news.status ?? output.status;
+        if (status !== output.status) {
+            yield* iam.updateAccessKey({
+                UserName: output.userName,
+                AccessKeyId: output.accessKeyId,
+                Status: status,
+            });
+        }
+        yield* session.note(output.accessKeyId);
+        return {
+            ...output,
+            status,
+        };
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* iam
+            .deleteAccessKey({
+            UserName: output.userName,
+            AccessKeyId: output.accessKeyId,
+        })
+            .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+    }),
+});
+//# sourceMappingURL=AccessKey.js.map

package/lib/AWS/IAM/AccessKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessKey.js","sourceRoot":"","sources":["../../../src/AWS/IAM/AccessKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA+B/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAY,mBAAmB,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE;IAC1B,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC5C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CACpD,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC/C,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;YAC9C,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;YACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,YAAY;YACvD,mBAAmB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW;YAC7D,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM;SACpD,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EACxC,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW;gBAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;YACpC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM;YAC/C,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;YACxC,eAAe,EAAE,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;YACpE,YAAY,EAAE,SAAS;YACvB,mBAAmB,EAAE,SAAS;YAC9B,cAAc,EAAE,SAAS;SAC1B,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5C,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,OAAO;YACL,GAAG,MAAM;YACT,MAAM;SACP,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,eAAe,CAAC;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/AWS/IAM/AccountAlias.d.ts

@@ -0,0 +1,30 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AccountAliasProps {
+    /**
+     * The AWS account alias to manage.
+     */
+    accountAlias: string;
+}
+export interface AccountAlias extends Resource<"AWS.IAM.AccountAlias", AccountAliasProps, {
+    accountAlias: string;
+}, never, Providers> {
+}
+/**
+ * The singleton IAM account alias for an AWS account.
+ *
+ * `AccountAlias` manages the one account-level alias that customizes the AWS
+ * sign-in URL for the current account.
+ *
+ * @section Managing Account Identity
+ * @example Set the Account Alias
+ * ```typescript
+ * const alias = yield* AccountAlias("AccountAlias", {
+ *   accountAlias: "my-company-prod",
+ * });
+ * ```
+ */
+export declare const AccountAlias: import("../../Resource.ts").ResourceClass<AccountAlias>;
+export declare const AccountAliasProvider: () => import("effect/Layer").Layer<Provider.Provider<AccountAlias>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=AccountAlias.d.ts.map

package/lib/AWS/IAM/AccountAlias.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountAlias.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/AccountAlias.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,sBAAsB,EACtB,iBAAiB,EACjB;IACE,YAAY,EAAE,MAAM,CAAC;CACtB,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,yDAAiD,CAAC;AAO3E,eAAO,MAAM,oBAAoB,0OAsD7B,CAAC"}

package/lib/AWS/IAM/AccountAlias.js

@@ -0,0 +1,76 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * The singleton IAM account alias for an AWS account.
+ *
+ * `AccountAlias` manages the one account-level alias that customizes the AWS
+ * sign-in URL for the current account.
+ *
+ * @section Managing Account Identity
+ * @example Set the Account Alias
+ * ```typescript
+ * const alias = yield* AccountAlias("AccountAlias", {
+ *   accountAlias: "my-company-prod",
+ * });
+ * ```
+ */
+export const AccountAlias = Resource("AWS.IAM.AccountAlias");
+const readAccountAlias = Effect.gen(function* () {
+    const response = yield* iam.listAccountAliases({});
+    return response.AccountAliases?.[0];
+});
+export const AccountAliasProvider = () => Provider.succeed(AccountAlias, {
+    stables: ["accountAlias"],
+    diff: Effect.fn(function* ({ olds, news }) {
+        if (!isResolved(news))
+            return;
+        if (olds.accountAlias !== news.accountAlias) {
+            return { action: "replace" };
+        }
+    }),
+    read: Effect.fn(function* () {
+        const accountAlias = yield* readAccountAlias;
+        if (!accountAlias) {
+            return undefined;
+        }
+        return { accountAlias };
+    }),
+    create: Effect.fn(function* ({ news, session }) {
+        const existing = yield* readAccountAlias;
+        if (existing && existing !== news.accountAlias) {
+            return yield* Effect.fail(new Error(`Account alias '${existing}' already exists and must be removed before '${news.accountAlias}' can be created`));
+        }
+        if (!existing) {
+            yield* iam.createAccountAlias({
+                AccountAlias: news.accountAlias,
+            });
+        }
+        yield* session.note(news.accountAlias);
+        return { accountAlias: news.accountAlias };
+    }),
+    update: Effect.fn(function* ({ news, olds, session }) {
+        if (olds.accountAlias !== news.accountAlias) {
+            yield* iam.createAccountAlias({
+                AccountAlias: news.accountAlias,
+            });
+            yield* iam
+                .deleteAccountAlias({
+                AccountAlias: olds.accountAlias,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+        }
+        yield* session.note(news.accountAlias);
+        return { accountAlias: news.accountAlias };
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* iam
+            .deleteAccountAlias({
+            AccountAlias: output.accountAlias,
+        })
+            .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+    }),
+});
+//# sourceMappingURL=AccountAlias.js.map

package/lib/AWS/IAM/AccountAlias.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountAlias.js","sourceRoot":"","sources":["../../../src/AWS/IAM/AccountAlias.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAoB7C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAe,sBAAsB,CAAC,CAAC;AAE3E,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CACvC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE;IAC7B,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;QACzC,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,kBAAkB,QAAQ,gDAAgD,IAAI,CAAC,YAAY,kBAAkB,CAC9G,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAClD,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,GAAG;iBACP,kBAAkB,CAAC;gBAClB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,kBAAkB,CAAC;YAClB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/AWS/IAM/AccountPasswordPolicy.d.ts

@@ -0,0 +1,30 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AccountPasswordPolicyProps extends iam.UpdateAccountPasswordPolicyRequest {
+}
+export interface AccountPasswordPolicy extends Resource<"AWS.IAM.AccountPasswordPolicy", AccountPasswordPolicyProps, iam.PasswordPolicy, never, Providers> {
+}
+/**
+ * The singleton IAM account password policy.
+ *
+ * `AccountPasswordPolicy` manages the account-wide password requirements that
+ * apply to IAM users with console passwords.
+ *
+ * @section Managing Password Rules
+ * @example Require Strong Passwords
+ * ```typescript
+ * const policy = yield* AccountPasswordPolicy("PasswordPolicy", {
+ *   MinimumPasswordLength: 16,
+ *   RequireSymbols: true,
+ *   RequireNumbers: true,
+ *   RequireUppercaseCharacters: true,
+ *   RequireLowercaseCharacters: true,
+ *   AllowUsersToChangePassword: true,
+ * });
+ * ```
+ */
+export declare const AccountPasswordPolicy: import("../../Resource.ts").ResourceClass<AccountPasswordPolicy>;
+export declare const AccountPasswordPolicyProvider: () => import("effect/Layer").Layer<Provider.Provider<AccountPasswordPolicy>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=AccountPasswordPolicy.d.ts.map

package/lib/AWS/IAM/AccountPasswordPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountPasswordPolicy.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/AccountPasswordPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAEhD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,0BACf,SAAQ,GAAG,CAAC,kCAAkC;CAAG;AAEnD,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,+BAA+B,EAC/B,0BAA0B,EAC1B,GAAG,CAAC,cAAc,EAClB,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,mPA2BtC,CAAC"}

package/lib/AWS/IAM/AccountPasswordPolicy.js

@@ -0,0 +1,48 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Effect from "effect/Effect";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * The singleton IAM account password policy.
+ *
+ * `AccountPasswordPolicy` manages the account-wide password requirements that
+ * apply to IAM users with console passwords.
+ *
+ * @section Managing Password Rules
+ * @example Require Strong Passwords
+ * ```typescript
+ * const policy = yield* AccountPasswordPolicy("PasswordPolicy", {
+ *   MinimumPasswordLength: 16,
+ *   RequireSymbols: true,
+ *   RequireNumbers: true,
+ *   RequireUppercaseCharacters: true,
+ *   RequireLowercaseCharacters: true,
+ *   AllowUsersToChangePassword: true,
+ * });
+ * ```
+ */
+export const AccountPasswordPolicy = Resource("AWS.IAM.AccountPasswordPolicy");
+export const AccountPasswordPolicyProvider = () => Provider.succeed(AccountPasswordPolicy, {
+    read: Effect.fn(function* () {
+        const response = yield* iam
+            .getAccountPasswordPolicy({})
+            .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+        return response?.PasswordPolicy;
+    }),
+    create: Effect.fn(function* ({ news, session }) {
+        yield* iam.updateAccountPasswordPolicy(news);
+        yield* session.note("account-password-policy");
+        return news;
+    }),
+    update: Effect.fn(function* ({ news, session }) {
+        yield* iam.updateAccountPasswordPolicy(news);
+        yield* session.note("account-password-policy");
+        return news;
+    }),
+    delete: Effect.fn(function* () {
+        yield* iam
+            .deleteAccountPasswordPolicy({})
+            .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+    }),
+});
+//# sourceMappingURL=AccountPasswordPolicy.js.map

package/lib/AWS/IAM/AccountPasswordPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountPasswordPolicy.js","sourceRoot":"","sources":["../../../src/AWS/IAM/AccountPasswordPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAc7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,+BAA+B,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;aACxB,wBAAwB,CAAC,EAAE,CAAC;aAC5B,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACJ,OAAO,QAAQ,EAAE,cAAc,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACzB,KAAK,CAAC,CAAC,GAAG;aACP,2BAA2B,CAAC,EAAE,CAAC;aAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/AWS/IAM/Group.d.ts

@@ -0,0 +1,59 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { PolicyDocument } from "./Policy.ts";
+export interface GroupProps {
+    /**
+     * Group name. If omitted, a deterministic name is generated.
+     */
+    groupName?: string;
+    /**
+     * Optional IAM path prefix.
+     * @default "/"
+     */
+    path?: string;
+    /**
+     * Managed policy ARNs attached to the group.
+     */
+    managedPolicyArns?: string[];
+    /**
+     * Inline policies embedded in the group.
+     */
+    inlinePolicies?: Record<string, PolicyDocument>;
+}
+export interface Group extends Resource<"AWS.IAM.Group", GroupProps, {
+    groupArn: string;
+    groupName: string;
+    groupId: string | undefined;
+    path: string | undefined;
+    managedPolicyArns: string[];
+    inlinePolicies: Record<string, PolicyDocument>;
+}, never, Providers> {
+}
+/**
+ * An IAM group that can own managed and inline policies.
+ *
+ * `Group` manages a shared authorization container for IAM users, including
+ * attached managed policies and embedded inline policies.
+ *
+ * @section Creating IAM Groups
+ * @example Group with an Inline Policy
+ * ```typescript
+ * const group = yield* Group("SupportGroup", {
+ *   groupName: "support",
+ *   inlinePolicies: {
+ *     SupportReadOnly: {
+ *       Version: "2012-10-17",
+ *       Statement: [{
+ *         Effect: "Allow",
+ *         Action: ["cloudwatch:Get*", "cloudwatch:List*"],
+ *         Resource: ["*"],
+ *       }],
+ *     },
+ *   },
+ * });
+ * ```
+ */
+export declare const Group: import("../../Resource.ts").ResourceClass<Group>;
+export declare const GroupProvider: () => import("effect/Layer").Layer<Provider.Provider<Group>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Group.d.ts.map

package/lib/AWS/IAM/Group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Group.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/Group.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,KAAM,SAAQ,QAAQ,CACrC,eAAe,EACf,UAAU,EACV;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAChD,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,KAAK,kDAAmC,CAAC;AAEtD,eAAO,MAAM,aAAa,qSAkSvB,CAAC"}