aws-cdk-lib 2.34.1 → 2.34.2

package/aws-sdb/lib/sdb.generated.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnDomain=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnDomainPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.wrap('supplied properties not correct for "CfnDomainProps"')}function cfnDomainPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnDomainPropsValidator(properties).assertSuccess(),{Description:cdk.stringToCloudFormation(properties.description)}):properties}function CfnDomainPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnDomain extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnDomain.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_sdb_CfnDomainProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnDomain),error}this.description=props.description,this.node.scope&&cdk.Resource.isResource(this.node.scope)&&this.node.addValidation({validate:()=>this.cfnOptions.deletionPolicy===void 0?["'AWS::SDB::Domain' is a stateful resource type, and you must specify a Removal Policy for it. Call 'resource.applyRemovalPolicy()'."]:[]})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnDomainPropsFromCloudFormation(resourceProperties),ret=new CfnDomain(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnDomain.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{description:this.description}}renderProperties(props){return cfnDomainPropsToCloudFormation(props)}}exports.CfnDomain=CfnDomain,_a=JSII_RTTI_SYMBOL_1,CfnDomain[_a]={fqn:"aws-cdk-lib.aws_sdb.CfnDomain",version:"2.34.1"},CfnDomain.CFN_RESOURCE_TYPE_NAME="AWS::SDB::Domain";
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnDomain=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnDomainPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.wrap('supplied properties not correct for "CfnDomainProps"')}function cfnDomainPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnDomainPropsValidator(properties).assertSuccess(),{Description:cdk.stringToCloudFormation(properties.description)}):properties}function CfnDomainPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnDomain extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnDomain.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_sdb_CfnDomainProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnDomain),error}this.description=props.description,this.node.scope&&cdk.Resource.isResource(this.node.scope)&&this.node.addValidation({validate:()=>this.cfnOptions.deletionPolicy===void 0?["'AWS::SDB::Domain' is a stateful resource type, and you must specify a Removal Policy for it. Call 'resource.applyRemovalPolicy()'."]:[]})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnDomainPropsFromCloudFormation(resourceProperties),ret=new CfnDomain(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnDomain.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{description:this.description}}renderProperties(props){return cfnDomainPropsToCloudFormation(props)}}exports.CfnDomain=CfnDomain,_a=JSII_RTTI_SYMBOL_1,CfnDomain[_a]={fqn:"aws-cdk-lib.aws_sdb.CfnDomain",version:"2.34.2"},CfnDomain.CFN_RESOURCE_TYPE_NAME="AWS::SDB::Domain";
 //# sourceMappingURL=sdb.generated.js.map

package/aws-secretsmanager/lib/policy.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ResourcePolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),core_1=require("../../core"),secretsmanager_generated_1=require("./secretsmanager.generated");class ResourcePolicy extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.document=new iam.PolicyDocument;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_ResourcePolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ResourcePolicy),error}new secretsmanager_generated_1.CfnResourcePolicy(this,"Resource",{resourcePolicy:this.document,secretId:props.secret.secretArn})}}exports.ResourcePolicy=ResourcePolicy,_a=JSII_RTTI_SYMBOL_1,ResourcePolicy[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.ResourcePolicy",version:"2.34.1"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ResourcePolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),core_1=require("../../core"),secretsmanager_generated_1=require("./secretsmanager.generated");class ResourcePolicy extends core_1.Resource{constructor(scope,id,props){super(scope,id),this.document=new iam.PolicyDocument;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_ResourcePolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ResourcePolicy),error}new secretsmanager_generated_1.CfnResourcePolicy(this,"Resource",{resourcePolicy:this.document,secretId:props.secret.secretArn})}}exports.ResourcePolicy=ResourcePolicy,_a=JSII_RTTI_SYMBOL_1,ResourcePolicy[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.ResourcePolicy",version:"2.34.2"};
 //# sourceMappingURL=policy.js.map

package/aws-secretsmanager/lib/rotation-schedule.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HostedRotationType=exports.HostedRotation=exports.RotationSchedule=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),ec2=require("../../aws-ec2"),iam=require("../../aws-iam"),kms=require("../../aws-kms"),core_1=require("../../core"),secret_1=require("./secret"),secretsmanager_generated_1=require("./secretsmanager.generated"),DEFAULT_PASSWORD_EXCLUDE_CHARS=" %+~`#$&*()|[]{}:;<>?!'/@\"\\";class RotationSchedule extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_RotationScheduleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,RotationSchedule),error}if(!props.rotationLambda&&!props.hostedRotation||props.rotationLambda&&props.hostedRotation)throw new Error("One of `rotationLambda` or `hostedRotation` must be specified.");props.rotationLambda?.permissionsNode.defaultChild&&(props.secret.encryptionKey&&props.secret.encryptionKey.grantEncryptDecrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,props.rotationLambda.grantPrincipal)),props.rotationLambda.grantInvoke(new iam.ServicePrincipal("secretsmanager.amazonaws.com")),props.rotationLambda.addToRolePolicy(new iam.PolicyStatement({actions:["secretsmanager:DescribeSecret","secretsmanager:GetSecretValue","secretsmanager:PutSecretValue","secretsmanager:UpdateSecretVersionStage"],resources:[props.secret.secretFullArn?props.secret.secretFullArn:`${props.secret.secretArn}-??????`]})),props.rotationLambda.addToRolePolicy(new iam.PolicyStatement({actions:["secretsmanager:GetRandomPassword"],resources:["*"]})));let automaticallyAfterDays;props.automaticallyAfter?.toMilliseconds()!==0&&(automaticallyAfterDays=props.automaticallyAfter?.toDays()||30);let rotationRules;automaticallyAfterDays!==void 0&&(rotationRules={automaticallyAfterDays}),new secretsmanager_generated_1.CfnRotationSchedule(this,"Resource",{secretId:props.secret.secretArn,rotationLambdaArn:props.rotationLambda?.functionArn,hostedRotationLambda:props.hostedRotation?.bind(props.secret,this),rotationRules}),props.secret.denyAccountRootDelete()}}exports.RotationSchedule=RotationSchedule,_a=JSII_RTTI_SYMBOL_1,RotationSchedule[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.RotationSchedule",version:"2.34.1"};class HostedRotation{constructor(type,props,masterSecret){if(this.type=type,this.props=props,this.masterSecret=masterSecret,type.isMultiUser&&!masterSecret)throw new Error("The `masterSecret` must be specified when using the multi user scheme.")}static mysqlSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mysqlSingleUser),error}return new HostedRotation(HostedRotationType.MYSQL_SINGLE_USER,options)}static mysqlMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mysqlMultiUser),error}return new HostedRotation(HostedRotationType.MYSQL_MULTI_USER,options,options.masterSecret)}static postgreSqlSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.postgreSqlSingleUser),error}return new HostedRotation(HostedRotationType.POSTGRESQL_SINGLE_USER,options)}static postgreSqlMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.postgreSqlMultiUser),error}return new HostedRotation(HostedRotationType.POSTGRESQL_MULTI_USER,options,options.masterSecret)}static oracleSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.oracleSingleUser),error}return new HostedRotation(HostedRotationType.ORACLE_SINGLE_USER,options)}static oracleMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.oracleMultiUser),error}return new HostedRotation(HostedRotationType.ORACLE_MULTI_USER,options,options.masterSecret)}static mariaDbSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mariaDbSingleUser),error}return new HostedRotation(HostedRotationType.MARIADB_SINGLE_USER,options)}static mariaDbMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mariaDbMultiUser),error}return new HostedRotation(HostedRotationType.MARIADB_MULTI_USER,options,options.masterSecret)}static sqlServerSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.sqlServerSingleUser),error}return new HostedRotation(HostedRotationType.SQLSERVER_SINGLE_USER,options)}static sqlServerMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.sqlServerMultiUser),error}return new HostedRotation(HostedRotationType.SQLSERVER_MULTI_USER,options,options.masterSecret)}static redshiftSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.redshiftSingleUser),error}return new HostedRotation(HostedRotationType.REDSHIFT_SINGLE_USER,options)}static redshiftMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.redshiftMultiUser),error}return new HostedRotation(HostedRotationType.REDSHIFT_MULTI_USER,options,options.masterSecret)}static mongoDbSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mongoDbSingleUser),error}return new HostedRotation(HostedRotationType.MONGODB_SINGLE_USER,options)}static mongoDbMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mongoDbMultiUser),error}return new HostedRotation(HostedRotationType.MONGODB_MULTI_USER,options,options.masterSecret)}bind(secret,scope){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_ISecret(secret)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}if(core_1.Stack.of(scope).addTransform("AWS::SecretsManager-2020-07-23"),!this.props.vpc&&this.props.securityGroups)throw new Error("`vpc` must be specified when specifying `securityGroups`.");this.props.vpc&&(this._connections=new ec2.Connections({securityGroups:this.props.securityGroups||[new ec2.SecurityGroup(scope,"SecurityGroup",{vpc:this.props.vpc})]})),this.masterSecret&&this.masterSecret.denyAccountRootDelete();const defaultExcludeCharacters=secret_1.Secret.isSecret(secret)?secret.excludeCharacters??DEFAULT_PASSWORD_EXCLUDE_CHARS:DEFAULT_PASSWORD_EXCLUDE_CHARS;return{rotationType:this.type.name,kmsKeyArn:secret.encryptionKey?.keyArn,masterSecretArn:this.masterSecret?.secretArn,masterSecretKmsKeyArn:this.masterSecret?.encryptionKey?.keyArn,rotationLambdaName:this.props.functionName,vpcSecurityGroupIds:this._connections?.securityGroups?.map(s=>s.securityGroupId).join(","),vpcSubnetIds:this.props.vpc?.selectSubnets(this.props.vpcSubnets).subnetIds.join(","),excludeCharacters:this.props.excludeCharacters??defaultExcludeCharacters}}get connections(){if(!this.props.vpc)throw new Error("Cannot use connections for a hosted rotation that is not deployed in a VPC");if(!this._connections)throw new Error("Cannot use connections for a hosted rotation that has not been bound to a secret");return this._connections}}exports.HostedRotation=HostedRotation,_b=JSII_RTTI_SYMBOL_1,HostedRotation[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.HostedRotation",version:"2.34.1"};class HostedRotationType{constructor(name,isMultiUser){this.name=name,this.isMultiUser=isMultiUser}}exports.HostedRotationType=HostedRotationType,_c=JSII_RTTI_SYMBOL_1,HostedRotationType[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.HostedRotationType",version:"2.34.1"},HostedRotationType.MYSQL_SINGLE_USER=new HostedRotationType("MySQLSingleUser"),HostedRotationType.MYSQL_MULTI_USER=new HostedRotationType("MySQLMultiUser",!0),HostedRotationType.POSTGRESQL_SINGLE_USER=new HostedRotationType("PostgreSQLSingleUser"),HostedRotationType.POSTGRESQL_MULTI_USER=new HostedRotationType("PostgreSQLMultiUser",!0),HostedRotationType.ORACLE_SINGLE_USER=new HostedRotationType("OracleSingleUser"),HostedRotationType.ORACLE_MULTI_USER=new HostedRotationType("OracleMultiUser",!0),HostedRotationType.MARIADB_SINGLE_USER=new HostedRotationType("MariaDBSingleUser"),HostedRotationType.MARIADB_MULTI_USER=new HostedRotationType("MariaDBMultiUser",!0),HostedRotationType.SQLSERVER_SINGLE_USER=new HostedRotationType("SQLServerSingleUser"),HostedRotationType.SQLSERVER_MULTI_USER=new HostedRotationType("SQLServerMultiUser",!0),HostedRotationType.REDSHIFT_SINGLE_USER=new HostedRotationType("RedshiftSingleUser"),HostedRotationType.REDSHIFT_MULTI_USER=new HostedRotationType("RedshiftMultiUser",!0),HostedRotationType.MONGODB_SINGLE_USER=new HostedRotationType("MongoDBSingleUser"),HostedRotationType.MONGODB_MULTI_USER=new HostedRotationType("MongoDBMultiUser",!0);
+"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.HostedRotationType=exports.HostedRotation=exports.RotationSchedule=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),ec2=require("../../aws-ec2"),iam=require("../../aws-iam"),kms=require("../../aws-kms"),core_1=require("../../core"),secret_1=require("./secret"),secretsmanager_generated_1=require("./secretsmanager.generated"),DEFAULT_PASSWORD_EXCLUDE_CHARS=" %+~`#$&*()|[]{}:;<>?!'/@\"\\";class RotationSchedule extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_RotationScheduleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,RotationSchedule),error}if(!props.rotationLambda&&!props.hostedRotation||props.rotationLambda&&props.hostedRotation)throw new Error("One of `rotationLambda` or `hostedRotation` must be specified.");props.rotationLambda?.permissionsNode.defaultChild&&(props.secret.encryptionKey&&props.secret.encryptionKey.grantEncryptDecrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,props.rotationLambda.grantPrincipal)),props.rotationLambda.grantInvoke(new iam.ServicePrincipal("secretsmanager.amazonaws.com")),props.rotationLambda.addToRolePolicy(new iam.PolicyStatement({actions:["secretsmanager:DescribeSecret","secretsmanager:GetSecretValue","secretsmanager:PutSecretValue","secretsmanager:UpdateSecretVersionStage"],resources:[props.secret.secretFullArn?props.secret.secretFullArn:`${props.secret.secretArn}-??????`]})),props.rotationLambda.addToRolePolicy(new iam.PolicyStatement({actions:["secretsmanager:GetRandomPassword"],resources:["*"]})));let automaticallyAfterDays;props.automaticallyAfter?.toMilliseconds()!==0&&(automaticallyAfterDays=props.automaticallyAfter?.toDays()||30);let rotationRules;automaticallyAfterDays!==void 0&&(rotationRules={automaticallyAfterDays}),new secretsmanager_generated_1.CfnRotationSchedule(this,"Resource",{secretId:props.secret.secretArn,rotationLambdaArn:props.rotationLambda?.functionArn,hostedRotationLambda:props.hostedRotation?.bind(props.secret,this),rotationRules}),props.secret.denyAccountRootDelete()}}exports.RotationSchedule=RotationSchedule,_a=JSII_RTTI_SYMBOL_1,RotationSchedule[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.RotationSchedule",version:"2.34.2"};class HostedRotation{constructor(type,props,masterSecret){if(this.type=type,this.props=props,this.masterSecret=masterSecret,type.isMultiUser&&!masterSecret)throw new Error("The `masterSecret` must be specified when using the multi user scheme.")}static mysqlSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mysqlSingleUser),error}return new HostedRotation(HostedRotationType.MYSQL_SINGLE_USER,options)}static mysqlMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mysqlMultiUser),error}return new HostedRotation(HostedRotationType.MYSQL_MULTI_USER,options,options.masterSecret)}static postgreSqlSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.postgreSqlSingleUser),error}return new HostedRotation(HostedRotationType.POSTGRESQL_SINGLE_USER,options)}static postgreSqlMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.postgreSqlMultiUser),error}return new HostedRotation(HostedRotationType.POSTGRESQL_MULTI_USER,options,options.masterSecret)}static oracleSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.oracleSingleUser),error}return new HostedRotation(HostedRotationType.ORACLE_SINGLE_USER,options)}static oracleMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.oracleMultiUser),error}return new HostedRotation(HostedRotationType.ORACLE_MULTI_USER,options,options.masterSecret)}static mariaDbSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mariaDbSingleUser),error}return new HostedRotation(HostedRotationType.MARIADB_SINGLE_USER,options)}static mariaDbMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mariaDbMultiUser),error}return new HostedRotation(HostedRotationType.MARIADB_MULTI_USER,options,options.masterSecret)}static sqlServerSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.sqlServerSingleUser),error}return new HostedRotation(HostedRotationType.SQLSERVER_SINGLE_USER,options)}static sqlServerMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.sqlServerMultiUser),error}return new HostedRotation(HostedRotationType.SQLSERVER_MULTI_USER,options,options.masterSecret)}static redshiftSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.redshiftSingleUser),error}return new HostedRotation(HostedRotationType.REDSHIFT_SINGLE_USER,options)}static redshiftMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.redshiftMultiUser),error}return new HostedRotation(HostedRotationType.REDSHIFT_MULTI_USER,options,options.masterSecret)}static mongoDbSingleUser(options={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SingleUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mongoDbSingleUser),error}return new HostedRotation(HostedRotationType.MONGODB_SINGLE_USER,options)}static mongoDbMultiUser(options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_MultiUserHostedRotationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.mongoDbMultiUser),error}return new HostedRotation(HostedRotationType.MONGODB_MULTI_USER,options,options.masterSecret)}bind(secret,scope){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_ISecret(secret)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.bind),error}if(core_1.Stack.of(scope).addTransform("AWS::SecretsManager-2020-07-23"),!this.props.vpc&&this.props.securityGroups)throw new Error("`vpc` must be specified when specifying `securityGroups`.");this.props.vpc&&(this._connections=new ec2.Connections({securityGroups:this.props.securityGroups||[new ec2.SecurityGroup(scope,"SecurityGroup",{vpc:this.props.vpc})]})),this.masterSecret&&this.masterSecret.denyAccountRootDelete();const defaultExcludeCharacters=secret_1.Secret.isSecret(secret)?secret.excludeCharacters??DEFAULT_PASSWORD_EXCLUDE_CHARS:DEFAULT_PASSWORD_EXCLUDE_CHARS;return{rotationType:this.type.name,kmsKeyArn:secret.encryptionKey?.keyArn,masterSecretArn:this.masterSecret?.secretArn,masterSecretKmsKeyArn:this.masterSecret?.encryptionKey?.keyArn,rotationLambdaName:this.props.functionName,vpcSecurityGroupIds:this._connections?.securityGroups?.map(s=>s.securityGroupId).join(","),vpcSubnetIds:this.props.vpc?.selectSubnets(this.props.vpcSubnets).subnetIds.join(","),excludeCharacters:this.props.excludeCharacters??defaultExcludeCharacters}}get connections(){if(!this.props.vpc)throw new Error("Cannot use connections for a hosted rotation that is not deployed in a VPC");if(!this._connections)throw new Error("Cannot use connections for a hosted rotation that has not been bound to a secret");return this._connections}}exports.HostedRotation=HostedRotation,_b=JSII_RTTI_SYMBOL_1,HostedRotation[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.HostedRotation",version:"2.34.2"};class HostedRotationType{constructor(name,isMultiUser){this.name=name,this.isMultiUser=isMultiUser}}exports.HostedRotationType=HostedRotationType,_c=JSII_RTTI_SYMBOL_1,HostedRotationType[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.HostedRotationType",version:"2.34.2"},HostedRotationType.MYSQL_SINGLE_USER=new HostedRotationType("MySQLSingleUser"),HostedRotationType.MYSQL_MULTI_USER=new HostedRotationType("MySQLMultiUser",!0),HostedRotationType.POSTGRESQL_SINGLE_USER=new HostedRotationType("PostgreSQLSingleUser"),HostedRotationType.POSTGRESQL_MULTI_USER=new HostedRotationType("PostgreSQLMultiUser",!0),HostedRotationType.ORACLE_SINGLE_USER=new HostedRotationType("OracleSingleUser"),HostedRotationType.ORACLE_MULTI_USER=new HostedRotationType("OracleMultiUser",!0),HostedRotationType.MARIADB_SINGLE_USER=new HostedRotationType("MariaDBSingleUser"),HostedRotationType.MARIADB_MULTI_USER=new HostedRotationType("MariaDBMultiUser",!0),HostedRotationType.SQLSERVER_SINGLE_USER=new HostedRotationType("SQLServerSingleUser"),HostedRotationType.SQLSERVER_MULTI_USER=new HostedRotationType("SQLServerMultiUser",!0),HostedRotationType.REDSHIFT_SINGLE_USER=new HostedRotationType("RedshiftSingleUser"),HostedRotationType.REDSHIFT_MULTI_USER=new HostedRotationType("RedshiftMultiUser",!0),HostedRotationType.MONGODB_SINGLE_USER=new HostedRotationType("MongoDBSingleUser"),HostedRotationType.MONGODB_MULTI_USER=new HostedRotationType("MongoDBMultiUser",!0);
 //# sourceMappingURL=rotation-schedule.js.map

package/aws-secretsmanager/lib/secret-rotation.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.SecretRotation=exports.SecretRotationApplication=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),ec2=require("../../aws-ec2"),lambda=require("../../aws-lambda"),serverless=require("../../aws-sam"),core_1=require("../../core"),constructs_1=require("constructs");class SecretRotationApplication{constructor(applicationId,semanticVersion,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretRotationApplicationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretRotationApplication),error}this.applicationId=`arn:aws:serverlessrepo:us-east-1:297356227824:applications/${applicationId}`,this.semanticVersion=semanticVersion,this.applicationName=applicationId,this.isMultiUser=options&&options.isMultiUser}applicationArnForPartition(partition){if(partition==="aws")return this.applicationId;if(partition==="aws-cn")return`arn:aws-cn:serverlessrepo:cn-north-1:193023089310:applications/${this.applicationName}`;if(partition==="aws-us-gov")return`arn:aws-us-gov:serverlessrepo:us-gov-west-1:023102451235:applications/${this.applicationName}`;throw new Error(`unsupported partition: ${partition}`)}semanticVersionForPartition(partition){if(partition==="aws")return this.semanticVersion;if(partition==="aws-cn")return"1.1.37";if(partition==="aws-us-gov")return"1.1.93";throw new Error(`unsupported partition: ${partition}`)}}exports.SecretRotationApplication=SecretRotationApplication,_a=JSII_RTTI_SYMBOL_1,SecretRotationApplication[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretRotationApplication",version:"2.34.1"},SecretRotationApplication.MARIADB_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSMariaDBRotationSingleUser","1.1.225"),SecretRotationApplication.MARIADB_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSMariaDBRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.MYSQL_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSMySQLRotationSingleUser","1.1.225"),SecretRotationApplication.MYSQL_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSMySQLRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.ORACLE_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSOracleRotationSingleUser","1.1.225"),SecretRotationApplication.ORACLE_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSOracleRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.POSTGRES_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSPostgreSQLRotationSingleUser","1.1.225"),SecretRotationApplication.POSTGRES_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSPostgreSQLRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.SQLSERVER_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSSQLServerRotationSingleUser","1.1.225"),SecretRotationApplication.SQLSERVER_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSSQLServerRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.REDSHIFT_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRedshiftRotationSingleUser","1.1.225"),SecretRotationApplication.REDSHIFT_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRedshiftRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.MONGODB_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerMongoDBRotationSingleUser","1.1.225"),SecretRotationApplication.MONGODB_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerMongoDBRotationMultiUser","1.1.225",{isMultiUser:!0});class SecretRotation extends constructs_1.Construct{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretRotationProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretRotation),error}if(!props.target.connections.defaultPort)throw new Error("The `target` connections must have a default port range.");if(props.application.isMultiUser&&!props.masterSecret)throw new Error("The `masterSecret` must be specified for application using the multi user scheme.");const uniqueId=core_1.Names.uniqueId(this),rotationFunctionName=uniqueId.substring(Math.max(uniqueId.length-64,0),uniqueId.length),securityGroup=props.securityGroup||new ec2.SecurityGroup(this,"SecurityGroup",{vpc:props.vpc});props.target.connections.allowDefaultPortFrom(securityGroup);const parameters={endpoint:`https://${props.endpoint?`${props.endpoint.vpcEndpointId}.`:""}secretsmanager.${core_1.Stack.of(this).region}.${core_1.Stack.of(this).urlSuffix}`,functionName:rotationFunctionName,vpcSubnetIds:props.vpc.selectSubnets(props.vpcSubnets).subnetIds.join(","),vpcSecurityGroupIds:securityGroup.securityGroupId};props.excludeCharacters!==void 0&&(parameters.excludeCharacters=props.excludeCharacters),props.secret.encryptionKey&&(parameters.kmsKeyArn=props.secret.encryptionKey.keyArn),props.masterSecret&&(parameters.masterSecretArn=props.masterSecret.secretArn,props.masterSecret.encryptionKey&&(parameters.masterSecretKmsKeyArn=props.masterSecret.encryptionKey.keyArn));const sarMapping=new core_1.CfnMapping(this,"SARMapping",{mapping:{aws:{applicationId:props.application.applicationArnForPartition("aws"),semanticVersion:props.application.semanticVersionForPartition("aws")},"aws-cn":{applicationId:props.application.applicationArnForPartition("aws-cn"),semanticVersion:props.application.semanticVersionForPartition("aws-cn")},"aws-us-gov":{applicationId:props.application.applicationArnForPartition("aws-us-gov"),semanticVersion:props.application.semanticVersionForPartition("aws-us-gov")}}}),application=new serverless.CfnApplication(this,"Resource",{location:{applicationId:sarMapping.findInMap(core_1.Aws.PARTITION,"applicationId"),semanticVersion:sarMapping.findInMap(core_1.Aws.PARTITION,"semanticVersion")},parameters});application.applyRemovalPolicy(core_1.RemovalPolicy.DESTROY);const rotationLambda=lambda.Function.fromFunctionArn(this,"RotationLambda",core_1.Token.asString(application.getAtt("Outputs.RotationLambdaARN")));props.secret.addRotationSchedule("RotationSchedule",{rotationLambda,automaticallyAfter:props.automaticallyAfter}),props.masterSecret&&props.masterSecret.denyAccountRootDelete()}}exports.SecretRotation=SecretRotation,_b=JSII_RTTI_SYMBOL_1,SecretRotation[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretRotation",version:"2.34.1"};
+"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.SecretRotation=exports.SecretRotationApplication=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),ec2=require("../../aws-ec2"),lambda=require("../../aws-lambda"),serverless=require("../../aws-sam"),core_1=require("../../core"),constructs_1=require("constructs");class SecretRotationApplication{constructor(applicationId,semanticVersion,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretRotationApplicationOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretRotationApplication),error}this.applicationId=`arn:aws:serverlessrepo:us-east-1:297356227824:applications/${applicationId}`,this.semanticVersion=semanticVersion,this.applicationName=applicationId,this.isMultiUser=options&&options.isMultiUser}applicationArnForPartition(partition){if(partition==="aws")return this.applicationId;if(partition==="aws-cn")return`arn:aws-cn:serverlessrepo:cn-north-1:193023089310:applications/${this.applicationName}`;if(partition==="aws-us-gov")return`arn:aws-us-gov:serverlessrepo:us-gov-west-1:023102451235:applications/${this.applicationName}`;throw new Error(`unsupported partition: ${partition}`)}semanticVersionForPartition(partition){if(partition==="aws")return this.semanticVersion;if(partition==="aws-cn")return"1.1.37";if(partition==="aws-us-gov")return"1.1.93";throw new Error(`unsupported partition: ${partition}`)}}exports.SecretRotationApplication=SecretRotationApplication,_a=JSII_RTTI_SYMBOL_1,SecretRotationApplication[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretRotationApplication",version:"2.34.2"},SecretRotationApplication.MARIADB_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSMariaDBRotationSingleUser","1.1.225"),SecretRotationApplication.MARIADB_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSMariaDBRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.MYSQL_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSMySQLRotationSingleUser","1.1.225"),SecretRotationApplication.MYSQL_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSMySQLRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.ORACLE_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSOracleRotationSingleUser","1.1.225"),SecretRotationApplication.ORACLE_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSOracleRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.POSTGRES_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSPostgreSQLRotationSingleUser","1.1.225"),SecretRotationApplication.POSTGRES_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSPostgreSQLRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.SQLSERVER_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRDSSQLServerRotationSingleUser","1.1.225"),SecretRotationApplication.SQLSERVER_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRDSSQLServerRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.REDSHIFT_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerRedshiftRotationSingleUser","1.1.225"),SecretRotationApplication.REDSHIFT_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerRedshiftRotationMultiUser","1.1.225",{isMultiUser:!0}),SecretRotationApplication.MONGODB_ROTATION_SINGLE_USER=new SecretRotationApplication("SecretsManagerMongoDBRotationSingleUser","1.1.225"),SecretRotationApplication.MONGODB_ROTATION_MULTI_USER=new SecretRotationApplication("SecretsManagerMongoDBRotationMultiUser","1.1.225",{isMultiUser:!0});class SecretRotation extends constructs_1.Construct{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretRotationProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretRotation),error}if(!props.target.connections.defaultPort)throw new Error("The `target` connections must have a default port range.");if(props.application.isMultiUser&&!props.masterSecret)throw new Error("The `masterSecret` must be specified for application using the multi user scheme.");const uniqueId=core_1.Names.uniqueId(this),rotationFunctionName=uniqueId.substring(Math.max(uniqueId.length-64,0),uniqueId.length),securityGroup=props.securityGroup||new ec2.SecurityGroup(this,"SecurityGroup",{vpc:props.vpc});props.target.connections.allowDefaultPortFrom(securityGroup);const parameters={endpoint:`https://${props.endpoint?`${props.endpoint.vpcEndpointId}.`:""}secretsmanager.${core_1.Stack.of(this).region}.${core_1.Stack.of(this).urlSuffix}`,functionName:rotationFunctionName,vpcSubnetIds:props.vpc.selectSubnets(props.vpcSubnets).subnetIds.join(","),vpcSecurityGroupIds:securityGroup.securityGroupId};props.excludeCharacters!==void 0&&(parameters.excludeCharacters=props.excludeCharacters),props.secret.encryptionKey&&(parameters.kmsKeyArn=props.secret.encryptionKey.keyArn),props.masterSecret&&(parameters.masterSecretArn=props.masterSecret.secretArn,props.masterSecret.encryptionKey&&(parameters.masterSecretKmsKeyArn=props.masterSecret.encryptionKey.keyArn));const sarMapping=new core_1.CfnMapping(this,"SARMapping",{mapping:{aws:{applicationId:props.application.applicationArnForPartition("aws"),semanticVersion:props.application.semanticVersionForPartition("aws")},"aws-cn":{applicationId:props.application.applicationArnForPartition("aws-cn"),semanticVersion:props.application.semanticVersionForPartition("aws-cn")},"aws-us-gov":{applicationId:props.application.applicationArnForPartition("aws-us-gov"),semanticVersion:props.application.semanticVersionForPartition("aws-us-gov")}}}),application=new serverless.CfnApplication(this,"Resource",{location:{applicationId:sarMapping.findInMap(core_1.Aws.PARTITION,"applicationId"),semanticVersion:sarMapping.findInMap(core_1.Aws.PARTITION,"semanticVersion")},parameters});application.applyRemovalPolicy(core_1.RemovalPolicy.DESTROY);const rotationLambda=lambda.Function.fromFunctionArn(this,"RotationLambda",core_1.Token.asString(application.getAtt("Outputs.RotationLambdaARN")));props.secret.addRotationSchedule("RotationSchedule",{rotationLambda,automaticallyAfter:props.automaticallyAfter}),props.masterSecret&&props.masterSecret.denyAccountRootDelete()}}exports.SecretRotation=SecretRotation,_b=JSII_RTTI_SYMBOL_1,SecretRotation[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretRotation",version:"2.34.2"};
 //# sourceMappingURL=secret-rotation.js.map

package/aws-secretsmanager/lib/secret.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.SecretTargetAttachment=exports.AttachmentTargetType=exports.Secret=exports.SecretStringValueBeta1=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),kms=require("../../aws-kms"),core_1=require("../../core"),cxapi=require("../../cx-api"),policy_1=require("./policy"),rotation_schedule_1=require("./rotation-schedule"),secretsmanager=require("./secretsmanager.generated"),SECRET_SYMBOL=Symbol.for("@aws-cdk/secretsmanager.Secret");class SecretStringValueBeta1{constructor(_secretValue){this._secretValue=_secretValue}static fromUnsafePlaintext(secretValue){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#fromUnsafePlaintext","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromUnsafePlaintext),error}return new SecretStringValueBeta1(secretValue)}static fromToken(secretValueFromToken){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#fromToken","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromToken),error}if(!core_1.Token.isUnresolved(secretValueFromToken))throw new Error("SecretStringValueBeta1 appears to be plaintext (unsafe) string (or resolved Token); use fromUnsafePlaintext if this is intentional");return new SecretStringValueBeta1(secretValueFromToken)}secretValue(){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#secretValue","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.secretValue),error}return this._secretValue}}exports.SecretStringValueBeta1=SecretStringValueBeta1,_a=JSII_RTTI_SYMBOL_1,SecretStringValueBeta1[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1",version:"2.34.1"};class SecretBase extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,props),this.node.addValidation({validate:()=>this.policy?.document.validateForResourcePolicy()??[]})}get secretFullArn(){return this.secretArn}grantRead(grantee,versionStages){const result=iam.Grant.addToPrincipalOrResource({grantee,actions:["secretsmanager:GetSecretValue","secretsmanager:DescribeSecret"],resourceArns:[this.arnForPolicies],resource:this}),statement=result.principalStatement||result.resourceStatement;versionStages!=null&&statement&&statement.addCondition("ForAnyValue:StringEquals",{"secretsmanager:VersionStage":versionStages}),this.encryptionKey&&this.encryptionKey.grantDecrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,grantee.grantPrincipal));const crossAccount=core_1.Token.compareStrings(core_1.Stack.of(this).account,grantee.grantPrincipal.principalAccount||"");if(this instanceof Secret&&result.resourceStatement&&!this.encryptionKey&&crossAccount===core_1.TokenComparison.DIFFERENT)throw new Error("KMS Key must be provided for cross account access to Secret");return result}grantWrite(grantee){const result=iam.Grant.addToPrincipalOrResource({grantee,actions:["secretsmanager:PutSecretValue","secretsmanager:UpdateSecret"],resourceArns:[this.arnForPolicies],resource:this});if(this.encryptionKey&&this.encryptionKey.grantEncrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,grantee.grantPrincipal)),this instanceof Secret&&result.resourceStatement&&!this.encryptionKey)throw new Error("KMS Key must be provided for cross account access to Secret");return result}get secretValue(){return this.secretValueFromJson("")}secretValueFromJson(jsonField){return core_1.SecretValue.secretsManager(this.secretArn,{jsonField})}addRotationSchedule(id,options){return new rotation_schedule_1.RotationSchedule(this,id,{secret:this,...options})}addToResourcePolicy(statement){return!this.policy&&this.autoCreatePolicy&&(this.policy=new policy_1.ResourcePolicy(this,"Policy",{secret:this})),this.policy?(this.policy.document.addStatements(statement),{statementAdded:!0,policyDependable:this.policy}):{statementAdded:!1}}denyAccountRootDelete(){this.addToResourcePolicy(new iam.PolicyStatement({actions:["secretsmanager:DeleteSecret"],effect:iam.Effect.DENY,resources:["*"],principals:[new iam.AccountRootPrincipal]}))}get arnForPolicies(){return this.secretFullArn?this.secretFullArn:`${this.secretArn}-??????`}attach(target){const id="Attachment";if(this.node.tryFindChild(id))throw new Error("Secret is already attached to a target.");return new SecretTargetAttachment(this,id,{secret:this,target})}}class Secret extends SecretBase{constructor(scope,id,props={}){super(scope,id,{physicalName:props.secretName}),this.replicaRegions=[],this.autoCreatePolicy=!0;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Secret),error}if(props.generateSecretString&&(props.generateSecretString.secretStringTemplate||props.generateSecretString.generateStringKey)&&!(props.generateSecretString.secretStringTemplate&&props.generateSecretString.generateStringKey))throw new Error("`secretStringTemplate` and `generateStringKey` must be specified together.");if((props.generateSecretString?1:0)+(props.secretStringBeta1?1:0)+(props.secretStringValue?1:0)+(props.secretObjectValue?1:0)>1)throw new Error("Cannot specify more than one of `generateSecretString`, `secretStringValue`, `secretObjectValue`, and `secretStringBeta1`.");const secretString=props.secretObjectValue?this.resolveSecretObjectValue(props.secretObjectValue):props.secretStringValue?.unsafeUnwrap()??props.secretStringBeta1?.secretValue(),resource=new secretsmanager.CfnSecret(this,"Resource",{description:props.description,kmsKeyId:props.encryptionKey&&props.encryptionKey.keyArn,generateSecretString:props.generateSecretString??(secretString?void 0:{}),secretString,name:this.physicalName,replicaRegions:core_1.Lazy.any({produce:()=>this.replicaRegions},{omitEmptyArray:!0})});resource.applyRemovalPolicy(props.removalPolicy,{default:core_1.RemovalPolicy.DESTROY}),this.secretArn=this.getResourceArnAttribute(resource.ref,{service:"secretsmanager",resource:"secret",resourceName:this.physicalName,arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME}),this.encryptionKey=props.encryptionKey;const parseOwnedSecretName=core_1.FeatureFlags.of(this).isEnabled(cxapi.SECRETS_MANAGER_PARSE_OWNED_SECRET_NAME);this.secretName=parseOwnedSecretName?parseSecretNameForOwnedSecret(this,this.secretArn,props.secretName):parseSecretName(this,this.secretArn);const principal=new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,new iam.AccountPrincipal(core_1.Stack.of(this).account));this.encryptionKey?.grantEncryptDecrypt(principal),this.encryptionKey?.grant(principal,"kms:CreateGrant","kms:DescribeKey");for(const replica of props.replicaRegions??[])this.addReplicaRegion(replica.region,replica.encryptionKey);this.excludeCharacters=props.generateSecretString?.excludeCharacters}static isSecret(x){return x!==null&&typeof x=="object"&&SECRET_SYMBOL in x}static fromSecretArn(scope,id,secretArn){const attrs=arnIsComplete(secretArn)?{secretCompleteArn:secretArn}:{secretPartialArn:secretArn};return Secret.fromSecretAttributes(scope,id,attrs)}static fromSecretCompleteArn(scope,id,secretCompleteArn){return Secret.fromSecretAttributes(scope,id,{secretCompleteArn})}static fromSecretPartialArn(scope,id,secretPartialArn){return Secret.fromSecretAttributes(scope,id,{secretPartialArn})}static fromSecretName(scope,id,secretName){return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=void 0,this.secretArn=secretName,this.secretName=secretName,this.autoCreatePolicy=!1}get secretFullArn(){}get arnForPolicies(){return core_1.Stack.of(this).formatArn({service:"secretsmanager",resource:"secret",resourceName:this.secretName+"*",arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME})}}(scope,id)}static fromSecretNameV2(scope,id,secretName){return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=void 0,this.secretName=secretName,this.secretArn=this.partialArn,this.autoCreatePolicy=!1}get secretFullArn(){}get partialArn(){return core_1.Stack.of(this).formatArn({service:"secretsmanager",resource:"secret",resourceName:secretName,arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME})}}(scope,id)}static fromSecretAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromSecretAttributes),error}let secretArn,secretArnIsPartial;if(attrs.secretArn){if(attrs.secretCompleteArn||attrs.secretPartialArn)throw new Error("cannot use `secretArn` with `secretCompleteArn` or `secretPartialArn`");secretArn=attrs.secretArn,secretArnIsPartial=!1}else{if(attrs.secretCompleteArn&&attrs.secretPartialArn||!attrs.secretCompleteArn&&!attrs.secretPartialArn)throw new Error("must use only one of `secretCompleteArn` or `secretPartialArn`");if(attrs.secretCompleteArn&&!arnIsComplete(attrs.secretCompleteArn))throw new Error("`secretCompleteArn` does not appear to be complete; missing 6-character suffix");[secretArn,secretArnIsPartial]=attrs.secretCompleteArn?[attrs.secretCompleteArn,!1]:[attrs.secretPartialArn,!0]}return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=attrs.encryptionKey,this.secretArn=secretArn,this.secretName=parseSecretName(scope,secretArn),this.autoCreatePolicy=!1}get secretFullArn(){return secretArnIsPartial?void 0:secretArn}}(scope,id,{environmentFromArn:secretArn})}resolveSecretObjectValue(secretObject){const resolvedObject={};for(const[key,value]of Object.entries(secretObject))resolvedObject[key]=value.unsafeUnwrap();return JSON.stringify(resolvedObject)}addTargetAttachment(id,options){return new SecretTargetAttachment(this,id,{secret:this,...options})}addReplicaRegion(region,encryptionKey){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_kms_IKey(encryptionKey)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addReplicaRegion),error}const stack=core_1.Stack.of(this);if(!core_1.Token.isUnresolved(stack.region)&&!core_1.Token.isUnresolved(region)&&region===stack.region)throw new Error("Cannot add the region where this stack is deployed as a replica region.");this.replicaRegions.push({region,kmsKeyId:encryptionKey?.keyArn})}}exports.Secret=Secret,_b=JSII_RTTI_SYMBOL_1,Secret[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.Secret",version:"2.34.1"};var AttachmentTargetType;(function(AttachmentTargetType2){AttachmentTargetType2.RDS_DB_INSTANCE="AWS::RDS::DBInstance",AttachmentTargetType2.INSTANCE="deprecated_AWS::RDS::DBInstance",AttachmentTargetType2.RDS_DB_CLUSTER="AWS::RDS::DBCluster",AttachmentTargetType2.CLUSTER="deprecated_AWS::RDS::DBCluster",AttachmentTargetType2.RDS_DB_PROXY="AWS::RDS::DBProxy",AttachmentTargetType2.REDSHIFT_CLUSTER="AWS::Redshift::Cluster",AttachmentTargetType2.DOCDB_DB_INSTANCE="AWS::DocDB::DBInstance",AttachmentTargetType2.DOCDB_DB_CLUSTER="AWS::DocDB::DBCluster"})(AttachmentTargetType=exports.AttachmentTargetType||(exports.AttachmentTargetType={}));class SecretTargetAttachment extends SecretBase{constructor(scope,id,props){super(scope,id),this.autoCreatePolicy=!0;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretTargetAttachmentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretTargetAttachment),error}const attachment=new secretsmanager.CfnSecretTargetAttachment(this,"Resource",{secretId:props.secret.secretArn,targetId:props.target.asSecretAttachmentTarget().targetId,targetType:attachmentTargetTypeToString(props.target.asSecretAttachmentTarget().targetType)});this.encryptionKey=props.secret.encryptionKey,this.secretName=props.secret.secretName,this.secretArn=attachment.ref,this.secretTargetAttachmentSecretArn=attachment.ref}static fromSecretTargetAttachmentSecretArn(scope,id,secretTargetAttachmentSecretArn){class Import extends SecretBase{constructor(){super(...arguments),this.secretArn=secretTargetAttachmentSecretArn,this.secretTargetAttachmentSecretArn=secretTargetAttachmentSecretArn,this.secretName=parseSecretName(scope,secretTargetAttachmentSecretArn),this.autoCreatePolicy=!1}}return new Import(scope,id)}}exports.SecretTargetAttachment=SecretTargetAttachment,_c=JSII_RTTI_SYMBOL_1,SecretTargetAttachment[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretTargetAttachment",version:"2.34.1"};function parseSecretName(construct,secretArn){const resourceName=core_1.Stack.of(construct).splitArn(secretArn,core_1.ArnFormat.COLON_RESOURCE_NAME).resourceName;if(resourceName){if(core_1.Token.isUnresolved(resourceName))return resourceName;const lastHyphenIndex=resourceName.lastIndexOf("-");return lastHyphenIndex!==-1&&resourceName.slice(lastHyphenIndex+1).length===6?resourceName.slice(0,lastHyphenIndex):resourceName}throw new Error("invalid ARN format; no secret name provided")}function parseSecretNameForOwnedSecret(construct,secretArn,secretName){const resourceName=core_1.Stack.of(construct).splitArn(secretArn,core_1.ArnFormat.COLON_RESOURCE_NAME).resourceName;if(!resourceName)throw new Error("invalid ARN format; no secret name provided");if(secretName&&core_1.Token.isUnresolved(secretName))return secretName;const secretNameHyphenatedSegments=secretName?secretName.split("-").length:2,segmentIndexes=[...new Array(secretNameHyphenatedSegments)].map((_,i)=>i);return core_1.Fn.join("-",segmentIndexes.map(i=>core_1.Fn.select(i,core_1.Fn.split("-",resourceName))))}function arnIsComplete(secretArn){return core_1.Token.isUnresolved(secretArn)||/-[a-z0-9]{6}$/i.test(secretArn)}Object.defineProperty(Secret.prototype,SECRET_SYMBOL,{value:!0,enumerable:!1,writable:!1});function attachmentTargetTypeToString(x){switch(x){case AttachmentTargetType.RDS_DB_INSTANCE:case AttachmentTargetType.INSTANCE:return"AWS::RDS::DBInstance";case AttachmentTargetType.RDS_DB_CLUSTER:case AttachmentTargetType.CLUSTER:return"AWS::RDS::DBCluster";case AttachmentTargetType.RDS_DB_PROXY:return"AWS::RDS::DBProxy";case AttachmentTargetType.REDSHIFT_CLUSTER:return"AWS::Redshift::Cluster";case AttachmentTargetType.DOCDB_DB_INSTANCE:return"AWS::DocDB::DBInstance";case AttachmentTargetType.DOCDB_DB_CLUSTER:return"AWS::DocDB::DBCluster"}}
+"use strict";var _a,_b,_c;Object.defineProperty(exports,"__esModule",{value:!0}),exports.SecretTargetAttachment=exports.AttachmentTargetType=exports.Secret=exports.SecretStringValueBeta1=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),kms=require("../../aws-kms"),core_1=require("../../core"),cxapi=require("../../cx-api"),policy_1=require("./policy"),rotation_schedule_1=require("./rotation-schedule"),secretsmanager=require("./secretsmanager.generated"),SECRET_SYMBOL=Symbol.for("@aws-cdk/secretsmanager.Secret");class SecretStringValueBeta1{constructor(_secretValue){this._secretValue=_secretValue}static fromUnsafePlaintext(secretValue){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#fromUnsafePlaintext","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromUnsafePlaintext),error}return new SecretStringValueBeta1(secretValue)}static fromToken(secretValueFromToken){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#fromToken","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromToken),error}if(!core_1.Token.isUnresolved(secretValueFromToken))throw new Error("SecretStringValueBeta1 appears to be plaintext (unsafe) string (or resolved Token); use fromUnsafePlaintext if this is intentional");return new SecretStringValueBeta1(secretValueFromToken)}secretValue(){try{jsiiDeprecationWarnings.print("aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1#secretValue","Use `cdk.SecretValue` instead.")}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.secretValue),error}return this._secretValue}}exports.SecretStringValueBeta1=SecretStringValueBeta1,_a=JSII_RTTI_SYMBOL_1,SecretStringValueBeta1[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretStringValueBeta1",version:"2.34.2"};class SecretBase extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,props),this.node.addValidation({validate:()=>this.policy?.document.validateForResourcePolicy()??[]})}get secretFullArn(){return this.secretArn}grantRead(grantee,versionStages){const result=iam.Grant.addToPrincipalOrResource({grantee,actions:["secretsmanager:GetSecretValue","secretsmanager:DescribeSecret"],resourceArns:[this.arnForPolicies],resource:this}),statement=result.principalStatement||result.resourceStatement;versionStages!=null&&statement&&statement.addCondition("ForAnyValue:StringEquals",{"secretsmanager:VersionStage":versionStages}),this.encryptionKey&&this.encryptionKey.grantDecrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,grantee.grantPrincipal));const crossAccount=core_1.Token.compareStrings(core_1.Stack.of(this).account,grantee.grantPrincipal.principalAccount||"");if(this instanceof Secret&&result.resourceStatement&&!this.encryptionKey&&crossAccount===core_1.TokenComparison.DIFFERENT)throw new Error("KMS Key must be provided for cross account access to Secret");return result}grantWrite(grantee){const result=iam.Grant.addToPrincipalOrResource({grantee,actions:["secretsmanager:PutSecretValue","secretsmanager:UpdateSecret"],resourceArns:[this.arnForPolicies],resource:this});if(this.encryptionKey&&this.encryptionKey.grantEncrypt(new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,grantee.grantPrincipal)),this instanceof Secret&&result.resourceStatement&&!this.encryptionKey)throw new Error("KMS Key must be provided for cross account access to Secret");return result}get secretValue(){return this.secretValueFromJson("")}secretValueFromJson(jsonField){return core_1.SecretValue.secretsManager(this.secretArn,{jsonField})}addRotationSchedule(id,options){return new rotation_schedule_1.RotationSchedule(this,id,{secret:this,...options})}addToResourcePolicy(statement){return!this.policy&&this.autoCreatePolicy&&(this.policy=new policy_1.ResourcePolicy(this,"Policy",{secret:this})),this.policy?(this.policy.document.addStatements(statement),{statementAdded:!0,policyDependable:this.policy}):{statementAdded:!1}}denyAccountRootDelete(){this.addToResourcePolicy(new iam.PolicyStatement({actions:["secretsmanager:DeleteSecret"],effect:iam.Effect.DENY,resources:["*"],principals:[new iam.AccountRootPrincipal]}))}get arnForPolicies(){return this.secretFullArn?this.secretFullArn:`${this.secretArn}-??????`}attach(target){const id="Attachment";if(this.node.tryFindChild(id))throw new Error("Secret is already attached to a target.");return new SecretTargetAttachment(this,id,{secret:this,target})}}class Secret extends SecretBase{constructor(scope,id,props={}){super(scope,id,{physicalName:props.secretName}),this.replicaRegions=[],this.autoCreatePolicy=!0;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Secret),error}if(props.generateSecretString&&(props.generateSecretString.secretStringTemplate||props.generateSecretString.generateStringKey)&&!(props.generateSecretString.secretStringTemplate&&props.generateSecretString.generateStringKey))throw new Error("`secretStringTemplate` and `generateStringKey` must be specified together.");if((props.generateSecretString?1:0)+(props.secretStringBeta1?1:0)+(props.secretStringValue?1:0)+(props.secretObjectValue?1:0)>1)throw new Error("Cannot specify more than one of `generateSecretString`, `secretStringValue`, `secretObjectValue`, and `secretStringBeta1`.");const secretString=props.secretObjectValue?this.resolveSecretObjectValue(props.secretObjectValue):props.secretStringValue?.unsafeUnwrap()??props.secretStringBeta1?.secretValue(),resource=new secretsmanager.CfnSecret(this,"Resource",{description:props.description,kmsKeyId:props.encryptionKey&&props.encryptionKey.keyArn,generateSecretString:props.generateSecretString??(secretString?void 0:{}),secretString,name:this.physicalName,replicaRegions:core_1.Lazy.any({produce:()=>this.replicaRegions},{omitEmptyArray:!0})});resource.applyRemovalPolicy(props.removalPolicy,{default:core_1.RemovalPolicy.DESTROY}),this.secretArn=this.getResourceArnAttribute(resource.ref,{service:"secretsmanager",resource:"secret",resourceName:this.physicalName,arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME}),this.encryptionKey=props.encryptionKey;const parseOwnedSecretName=core_1.FeatureFlags.of(this).isEnabled(cxapi.SECRETS_MANAGER_PARSE_OWNED_SECRET_NAME);this.secretName=parseOwnedSecretName?parseSecretNameForOwnedSecret(this,this.secretArn,props.secretName):parseSecretName(this,this.secretArn);const principal=new kms.ViaServicePrincipal(`secretsmanager.${core_1.Stack.of(this).region}.amazonaws.com`,new iam.AccountPrincipal(core_1.Stack.of(this).account));this.encryptionKey?.grantEncryptDecrypt(principal),this.encryptionKey?.grant(principal,"kms:CreateGrant","kms:DescribeKey");for(const replica of props.replicaRegions??[])this.addReplicaRegion(replica.region,replica.encryptionKey);this.excludeCharacters=props.generateSecretString?.excludeCharacters}static isSecret(x){return x!==null&&typeof x=="object"&&SECRET_SYMBOL in x}static fromSecretArn(scope,id,secretArn){const attrs=arnIsComplete(secretArn)?{secretCompleteArn:secretArn}:{secretPartialArn:secretArn};return Secret.fromSecretAttributes(scope,id,attrs)}static fromSecretCompleteArn(scope,id,secretCompleteArn){return Secret.fromSecretAttributes(scope,id,{secretCompleteArn})}static fromSecretPartialArn(scope,id,secretPartialArn){return Secret.fromSecretAttributes(scope,id,{secretPartialArn})}static fromSecretName(scope,id,secretName){return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=void 0,this.secretArn=secretName,this.secretName=secretName,this.autoCreatePolicy=!1}get secretFullArn(){}get arnForPolicies(){return core_1.Stack.of(this).formatArn({service:"secretsmanager",resource:"secret",resourceName:this.secretName+"*",arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME})}}(scope,id)}static fromSecretNameV2(scope,id,secretName){return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=void 0,this.secretName=secretName,this.secretArn=this.partialArn,this.autoCreatePolicy=!1}get secretFullArn(){}get partialArn(){return core_1.Stack.of(this).formatArn({service:"secretsmanager",resource:"secret",resourceName:secretName,arnFormat:core_1.ArnFormat.COLON_RESOURCE_NAME})}}(scope,id)}static fromSecretAttributes(scope,id,attrs){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromSecretAttributes),error}let secretArn,secretArnIsPartial;if(attrs.secretArn){if(attrs.secretCompleteArn||attrs.secretPartialArn)throw new Error("cannot use `secretArn` with `secretCompleteArn` or `secretPartialArn`");secretArn=attrs.secretArn,secretArnIsPartial=!1}else{if(attrs.secretCompleteArn&&attrs.secretPartialArn||!attrs.secretCompleteArn&&!attrs.secretPartialArn)throw new Error("must use only one of `secretCompleteArn` or `secretPartialArn`");if(attrs.secretCompleteArn&&!arnIsComplete(attrs.secretCompleteArn))throw new Error("`secretCompleteArn` does not appear to be complete; missing 6-character suffix");[secretArn,secretArnIsPartial]=attrs.secretCompleteArn?[attrs.secretCompleteArn,!1]:[attrs.secretPartialArn,!0]}return new class extends SecretBase{constructor(){super(...arguments),this.encryptionKey=attrs.encryptionKey,this.secretArn=secretArn,this.secretName=parseSecretName(scope,secretArn),this.autoCreatePolicy=!1}get secretFullArn(){return secretArnIsPartial?void 0:secretArn}}(scope,id,{environmentFromArn:secretArn})}resolveSecretObjectValue(secretObject){const resolvedObject={};for(const[key,value]of Object.entries(secretObject))resolvedObject[key]=value.unsafeUnwrap();return JSON.stringify(resolvedObject)}addTargetAttachment(id,options){return new SecretTargetAttachment(this,id,{secret:this,...options})}addReplicaRegion(region,encryptionKey){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_kms_IKey(encryptionKey)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addReplicaRegion),error}const stack=core_1.Stack.of(this);if(!core_1.Token.isUnresolved(stack.region)&&!core_1.Token.isUnresolved(region)&&region===stack.region)throw new Error("Cannot add the region where this stack is deployed as a replica region.");this.replicaRegions.push({region,kmsKeyId:encryptionKey?.keyArn})}}exports.Secret=Secret,_b=JSII_RTTI_SYMBOL_1,Secret[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.Secret",version:"2.34.2"};var AttachmentTargetType;(function(AttachmentTargetType2){AttachmentTargetType2.RDS_DB_INSTANCE="AWS::RDS::DBInstance",AttachmentTargetType2.INSTANCE="deprecated_AWS::RDS::DBInstance",AttachmentTargetType2.RDS_DB_CLUSTER="AWS::RDS::DBCluster",AttachmentTargetType2.CLUSTER="deprecated_AWS::RDS::DBCluster",AttachmentTargetType2.RDS_DB_PROXY="AWS::RDS::DBProxy",AttachmentTargetType2.REDSHIFT_CLUSTER="AWS::Redshift::Cluster",AttachmentTargetType2.DOCDB_DB_INSTANCE="AWS::DocDB::DBInstance",AttachmentTargetType2.DOCDB_DB_CLUSTER="AWS::DocDB::DBCluster"})(AttachmentTargetType=exports.AttachmentTargetType||(exports.AttachmentTargetType={}));class SecretTargetAttachment extends SecretBase{constructor(scope,id,props){super(scope,id),this.autoCreatePolicy=!0;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_SecretTargetAttachmentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,SecretTargetAttachment),error}const attachment=new secretsmanager.CfnSecretTargetAttachment(this,"Resource",{secretId:props.secret.secretArn,targetId:props.target.asSecretAttachmentTarget().targetId,targetType:attachmentTargetTypeToString(props.target.asSecretAttachmentTarget().targetType)});this.encryptionKey=props.secret.encryptionKey,this.secretName=props.secret.secretName,this.secretArn=attachment.ref,this.secretTargetAttachmentSecretArn=attachment.ref}static fromSecretTargetAttachmentSecretArn(scope,id,secretTargetAttachmentSecretArn){class Import extends SecretBase{constructor(){super(...arguments),this.secretArn=secretTargetAttachmentSecretArn,this.secretTargetAttachmentSecretArn=secretTargetAttachmentSecretArn,this.secretName=parseSecretName(scope,secretTargetAttachmentSecretArn),this.autoCreatePolicy=!1}}return new Import(scope,id)}}exports.SecretTargetAttachment=SecretTargetAttachment,_c=JSII_RTTI_SYMBOL_1,SecretTargetAttachment[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.SecretTargetAttachment",version:"2.34.2"};function parseSecretName(construct,secretArn){const resourceName=core_1.Stack.of(construct).splitArn(secretArn,core_1.ArnFormat.COLON_RESOURCE_NAME).resourceName;if(resourceName){if(core_1.Token.isUnresolved(resourceName))return resourceName;const lastHyphenIndex=resourceName.lastIndexOf("-");return lastHyphenIndex!==-1&&resourceName.slice(lastHyphenIndex+1).length===6?resourceName.slice(0,lastHyphenIndex):resourceName}throw new Error("invalid ARN format; no secret name provided")}function parseSecretNameForOwnedSecret(construct,secretArn,secretName){const resourceName=core_1.Stack.of(construct).splitArn(secretArn,core_1.ArnFormat.COLON_RESOURCE_NAME).resourceName;if(!resourceName)throw new Error("invalid ARN format; no secret name provided");if(secretName&&core_1.Token.isUnresolved(secretName))return secretName;const secretNameHyphenatedSegments=secretName?secretName.split("-").length:2,segmentIndexes=[...new Array(secretNameHyphenatedSegments)].map((_,i)=>i);return core_1.Fn.join("-",segmentIndexes.map(i=>core_1.Fn.select(i,core_1.Fn.split("-",resourceName))))}function arnIsComplete(secretArn){return core_1.Token.isUnresolved(secretArn)||/-[a-z0-9]{6}$/i.test(secretArn)}Object.defineProperty(Secret.prototype,SECRET_SYMBOL,{value:!0,enumerable:!1,writable:!1});function attachmentTargetTypeToString(x){switch(x){case AttachmentTargetType.RDS_DB_INSTANCE:case AttachmentTargetType.INSTANCE:return"AWS::RDS::DBInstance";case AttachmentTargetType.RDS_DB_CLUSTER:case AttachmentTargetType.CLUSTER:return"AWS::RDS::DBCluster";case AttachmentTargetType.RDS_DB_PROXY:return"AWS::RDS::DBProxy";case AttachmentTargetType.REDSHIFT_CLUSTER:return"AWS::Redshift::Cluster";case AttachmentTargetType.DOCDB_DB_INSTANCE:return"AWS::DocDB::DBInstance";case AttachmentTargetType.DOCDB_DB_CLUSTER:return"AWS::DocDB::DBCluster"}}
 //# sourceMappingURL=secret.js.map

package/aws-secretsmanager/lib/secretsmanager.generated.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c,_d;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnSecretTargetAttachment=exports.CfnSecret=exports.CfnRotationSchedule=exports.CfnResourcePolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnResourcePolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("blockPublicPolicy",cdk.validateBoolean)(properties.blockPublicPolicy)),errors.collect(cdk.propertyValidator("resourcePolicy",cdk.requiredValidator)(properties.resourcePolicy)),errors.collect(cdk.propertyValidator("resourcePolicy",cdk.validateObject)(properties.resourcePolicy)),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.wrap('supplied properties not correct for "CfnResourcePolicyProps"')}function cfnResourcePolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnResourcePolicyPropsValidator(properties).assertSuccess(),{ResourcePolicy:cdk.objectToCloudFormation(properties.resourcePolicy),SecretId:cdk.stringToCloudFormation(properties.secretId),BlockPublicPolicy:cdk.booleanToCloudFormation(properties.blockPublicPolicy)}):properties}function CfnResourcePolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("resourcePolicy","ResourcePolicy",cfn_parse.FromCloudFormation.getAny(properties.ResourcePolicy)),ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("blockPublicPolicy","BlockPublicPolicy",properties.BlockPublicPolicy!=null?cfn_parse.FromCloudFormation.getBoolean(properties.BlockPublicPolicy):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnResourcePolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnResourcePolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnResourcePolicy),error}cdk.requireProperty(props,"resourcePolicy",this),cdk.requireProperty(props,"secretId",this),this.resourcePolicy=props.resourcePolicy,this.secretId=props.secretId,this.blockPublicPolicy=props.blockPublicPolicy}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnResourcePolicyPropsFromCloudFormation(resourceProperties),ret=new CfnResourcePolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{resourcePolicy:this.resourcePolicy,secretId:this.secretId,blockPublicPolicy:this.blockPublicPolicy}}renderProperties(props){return cfnResourcePolicyPropsToCloudFormation(props)}}exports.CfnResourcePolicy=CfnResourcePolicy,_a=JSII_RTTI_SYMBOL_1,CfnResourcePolicy[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",version:"2.34.1"},CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::ResourcePolicy";function CfnRotationSchedulePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("hostedRotationLambda",CfnRotationSchedule_HostedRotationLambdaPropertyValidator)(properties.hostedRotationLambda)),errors.collect(cdk.propertyValidator("rotateImmediatelyOnUpdate",cdk.validateBoolean)(properties.rotateImmediatelyOnUpdate)),errors.collect(cdk.propertyValidator("rotationLambdaArn",cdk.validateString)(properties.rotationLambdaArn)),errors.collect(cdk.propertyValidator("rotationRules",CfnRotationSchedule_RotationRulesPropertyValidator)(properties.rotationRules)),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.wrap('supplied properties not correct for "CfnRotationScheduleProps"')}function cfnRotationSchedulePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedulePropsValidator(properties).assertSuccess(),{SecretId:cdk.stringToCloudFormation(properties.secretId),HostedRotationLambda:cfnRotationScheduleHostedRotationLambdaPropertyToCloudFormation(properties.hostedRotationLambda),RotateImmediatelyOnUpdate:cdk.booleanToCloudFormation(properties.rotateImmediatelyOnUpdate),RotationLambdaARN:cdk.stringToCloudFormation(properties.rotationLambdaArn),RotationRules:cfnRotationScheduleRotationRulesPropertyToCloudFormation(properties.rotationRules)}):properties}function CfnRotationSchedulePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("hostedRotationLambda","HostedRotationLambda",properties.HostedRotationLambda!=null?CfnRotationScheduleHostedRotationLambdaPropertyFromCloudFormation(properties.HostedRotationLambda):void 0),ret.addPropertyResult("rotateImmediatelyOnUpdate","RotateImmediatelyOnUpdate",properties.RotateImmediatelyOnUpdate!=null?cfn_parse.FromCloudFormation.getBoolean(properties.RotateImmediatelyOnUpdate):void 0),ret.addPropertyResult("rotationLambdaArn","RotationLambdaARN",properties.RotationLambdaARN!=null?cfn_parse.FromCloudFormation.getString(properties.RotationLambdaARN):void 0),ret.addPropertyResult("rotationRules","RotationRules",properties.RotationRules!=null?CfnRotationScheduleRotationRulesPropertyFromCloudFormation(properties.RotationRules):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnRotationSchedule extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnRotationScheduleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnRotationSchedule),error}cdk.requireProperty(props,"secretId",this),this.secretId=props.secretId,this.hostedRotationLambda=props.hostedRotationLambda,this.rotateImmediatelyOnUpdate=props.rotateImmediatelyOnUpdate,this.rotationLambdaArn=props.rotationLambdaArn,this.rotationRules=props.rotationRules}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnRotationSchedulePropsFromCloudFormation(resourceProperties),ret=new CfnRotationSchedule(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{secretId:this.secretId,hostedRotationLambda:this.hostedRotationLambda,rotateImmediatelyOnUpdate:this.rotateImmediatelyOnUpdate,rotationLambdaArn:this.rotationLambdaArn,rotationRules:this.rotationRules}}renderProperties(props){return cfnRotationSchedulePropsToCloudFormation(props)}}exports.CfnRotationSchedule=CfnRotationSchedule,_b=JSII_RTTI_SYMBOL_1,CfnRotationSchedule[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",version:"2.34.1"},CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::RotationSchedule";function CfnRotationSchedule_HostedRotationLambdaPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("excludeCharacters",cdk.validateString)(properties.excludeCharacters)),errors.collect(cdk.propertyValidator("kmsKeyArn",cdk.validateString)(properties.kmsKeyArn)),errors.collect(cdk.propertyValidator("masterSecretArn",cdk.validateString)(properties.masterSecretArn)),errors.collect(cdk.propertyValidator("masterSecretKmsKeyArn",cdk.validateString)(properties.masterSecretKmsKeyArn)),errors.collect(cdk.propertyValidator("rotationLambdaName",cdk.validateString)(properties.rotationLambdaName)),errors.collect(cdk.propertyValidator("rotationType",cdk.requiredValidator)(properties.rotationType)),errors.collect(cdk.propertyValidator("rotationType",cdk.validateString)(properties.rotationType)),errors.collect(cdk.propertyValidator("superuserSecretArn",cdk.validateString)(properties.superuserSecretArn)),errors.collect(cdk.propertyValidator("superuserSecretKmsKeyArn",cdk.validateString)(properties.superuserSecretKmsKeyArn)),errors.collect(cdk.propertyValidator("vpcSecurityGroupIds",cdk.validateString)(properties.vpcSecurityGroupIds)),errors.collect(cdk.propertyValidator("vpcSubnetIds",cdk.validateString)(properties.vpcSubnetIds)),errors.wrap('supplied properties not correct for "HostedRotationLambdaProperty"')}function cfnRotationScheduleHostedRotationLambdaPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedule_HostedRotationLambdaPropertyValidator(properties).assertSuccess(),{ExcludeCharacters:cdk.stringToCloudFormation(properties.excludeCharacters),KmsKeyArn:cdk.stringToCloudFormation(properties.kmsKeyArn),MasterSecretArn:cdk.stringToCloudFormation(properties.masterSecretArn),MasterSecretKmsKeyArn:cdk.stringToCloudFormation(properties.masterSecretKmsKeyArn),RotationLambdaName:cdk.stringToCloudFormation(properties.rotationLambdaName),RotationType:cdk.stringToCloudFormation(properties.rotationType),SuperuserSecretArn:cdk.stringToCloudFormation(properties.superuserSecretArn),SuperuserSecretKmsKeyArn:cdk.stringToCloudFormation(properties.superuserSecretKmsKeyArn),VpcSecurityGroupIds:cdk.stringToCloudFormation(properties.vpcSecurityGroupIds),VpcSubnetIds:cdk.stringToCloudFormation(properties.vpcSubnetIds)}):properties}function CfnRotationScheduleHostedRotationLambdaPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("excludeCharacters","ExcludeCharacters",properties.ExcludeCharacters!=null?cfn_parse.FromCloudFormation.getString(properties.ExcludeCharacters):void 0),ret.addPropertyResult("kmsKeyArn","KmsKeyArn",properties.KmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyArn):void 0),ret.addPropertyResult("masterSecretArn","MasterSecretArn",properties.MasterSecretArn!=null?cfn_parse.FromCloudFormation.getString(properties.MasterSecretArn):void 0),ret.addPropertyResult("masterSecretKmsKeyArn","MasterSecretKmsKeyArn",properties.MasterSecretKmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.MasterSecretKmsKeyArn):void 0),ret.addPropertyResult("rotationLambdaName","RotationLambdaName",properties.RotationLambdaName!=null?cfn_parse.FromCloudFormation.getString(properties.RotationLambdaName):void 0),ret.addPropertyResult("rotationType","RotationType",cfn_parse.FromCloudFormation.getString(properties.RotationType)),ret.addPropertyResult("superuserSecretArn","SuperuserSecretArn",properties.SuperuserSecretArn!=null?cfn_parse.FromCloudFormation.getString(properties.SuperuserSecretArn):void 0),ret.addPropertyResult("superuserSecretKmsKeyArn","SuperuserSecretKmsKeyArn",properties.SuperuserSecretKmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.SuperuserSecretKmsKeyArn):void 0),ret.addPropertyResult("vpcSecurityGroupIds","VpcSecurityGroupIds",properties.VpcSecurityGroupIds!=null?cfn_parse.FromCloudFormation.getString(properties.VpcSecurityGroupIds):void 0),ret.addPropertyResult("vpcSubnetIds","VpcSubnetIds",properties.VpcSubnetIds!=null?cfn_parse.FromCloudFormation.getString(properties.VpcSubnetIds):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnRotationSchedule_RotationRulesPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("automaticallyAfterDays",cdk.validateNumber)(properties.automaticallyAfterDays)),errors.collect(cdk.propertyValidator("duration",cdk.validateString)(properties.duration)),errors.collect(cdk.propertyValidator("scheduleExpression",cdk.validateString)(properties.scheduleExpression)),errors.wrap('supplied properties not correct for "RotationRulesProperty"')}function cfnRotationScheduleRotationRulesPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedule_RotationRulesPropertyValidator(properties).assertSuccess(),{AutomaticallyAfterDays:cdk.numberToCloudFormation(properties.automaticallyAfterDays),Duration:cdk.stringToCloudFormation(properties.duration),ScheduleExpression:cdk.stringToCloudFormation(properties.scheduleExpression)}):properties}function CfnRotationScheduleRotationRulesPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("automaticallyAfterDays","AutomaticallyAfterDays",properties.AutomaticallyAfterDays!=null?cfn_parse.FromCloudFormation.getNumber(properties.AutomaticallyAfterDays):void 0),ret.addPropertyResult("duration","Duration",properties.Duration!=null?cfn_parse.FromCloudFormation.getString(properties.Duration):void 0),ret.addPropertyResult("scheduleExpression","ScheduleExpression",properties.ScheduleExpression!=null?cfn_parse.FromCloudFormation.getString(properties.ScheduleExpression):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecretPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("generateSecretString",CfnSecret_GenerateSecretStringPropertyValidator)(properties.generateSecretString)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("replicaRegions",cdk.listValidator(CfnSecret_ReplicaRegionPropertyValidator))(properties.replicaRegions)),errors.collect(cdk.propertyValidator("secretString",cdk.validateString)(properties.secretString)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnSecretProps"')}function cfnSecretPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecretPropsValidator(properties).assertSuccess(),{Description:cdk.stringToCloudFormation(properties.description),GenerateSecretString:cfnSecretGenerateSecretStringPropertyToCloudFormation(properties.generateSecretString),KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),Name:cdk.stringToCloudFormation(properties.name),ReplicaRegions:cdk.listMapper(cfnSecretReplicaRegionPropertyToCloudFormation)(properties.replicaRegions),SecretString:cdk.stringToCloudFormation(properties.secretString),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnSecretPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("generateSecretString","GenerateSecretString",properties.GenerateSecretString!=null?CfnSecretGenerateSecretStringPropertyFromCloudFormation(properties.GenerateSecretString):void 0),ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("replicaRegions","ReplicaRegions",properties.ReplicaRegions!=null?cfn_parse.FromCloudFormation.getArray(CfnSecretReplicaRegionPropertyFromCloudFormation)(properties.ReplicaRegions):void 0),ret.addPropertyResult("secretString","SecretString",properties.SecretString!=null?cfn_parse.FromCloudFormation.getString(properties.SecretString):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSecret extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnSecret.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnSecretProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSecret),error}this.description=props.description,this.generateSecretString=props.generateSecretString,this.kmsKeyId=props.kmsKeyId,this.name=props.name,this.replicaRegions=props.replicaRegions,this.secretString=props.secretString,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::SecretsManager::Secret",props.tags,{tagPropertyName:"tags"}),this.node.scope&&cdk.Resource.isResource(this.node.scope)&&this.node.addValidation({validate:()=>this.cfnOptions.deletionPolicy===void 0?["'AWS::SecretsManager::Secret' is a stateful resource type, and you must specify a Removal Policy for it. Call 'resource.applyRemovalPolicy()'."]:[]})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSecretPropsFromCloudFormation(resourceProperties),ret=new CfnSecret(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSecret.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{description:this.description,generateSecretString:this.generateSecretString,kmsKeyId:this.kmsKeyId,name:this.name,replicaRegions:this.replicaRegions,secretString:this.secretString,tags:this.tags.renderTags()}}renderProperties(props){return cfnSecretPropsToCloudFormation(props)}}exports.CfnSecret=CfnSecret,_c=JSII_RTTI_SYMBOL_1,CfnSecret[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnSecret",version:"2.34.1"},CfnSecret.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::Secret";function CfnSecret_GenerateSecretStringPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("excludeCharacters",cdk.validateString)(properties.excludeCharacters)),errors.collect(cdk.propertyValidator("excludeLowercase",cdk.validateBoolean)(properties.excludeLowercase)),errors.collect(cdk.propertyValidator("excludeNumbers",cdk.validateBoolean)(properties.excludeNumbers)),errors.collect(cdk.propertyValidator("excludePunctuation",cdk.validateBoolean)(properties.excludePunctuation)),errors.collect(cdk.propertyValidator("excludeUppercase",cdk.validateBoolean)(properties.excludeUppercase)),errors.collect(cdk.propertyValidator("generateStringKey",cdk.validateString)(properties.generateStringKey)),errors.collect(cdk.propertyValidator("includeSpace",cdk.validateBoolean)(properties.includeSpace)),errors.collect(cdk.propertyValidator("passwordLength",cdk.validateNumber)(properties.passwordLength)),errors.collect(cdk.propertyValidator("requireEachIncludedType",cdk.validateBoolean)(properties.requireEachIncludedType)),errors.collect(cdk.propertyValidator("secretStringTemplate",cdk.validateString)(properties.secretStringTemplate)),errors.wrap('supplied properties not correct for "GenerateSecretStringProperty"')}function cfnSecretGenerateSecretStringPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecret_GenerateSecretStringPropertyValidator(properties).assertSuccess(),{ExcludeCharacters:cdk.stringToCloudFormation(properties.excludeCharacters),ExcludeLowercase:cdk.booleanToCloudFormation(properties.excludeLowercase),ExcludeNumbers:cdk.booleanToCloudFormation(properties.excludeNumbers),ExcludePunctuation:cdk.booleanToCloudFormation(properties.excludePunctuation),ExcludeUppercase:cdk.booleanToCloudFormation(properties.excludeUppercase),GenerateStringKey:cdk.stringToCloudFormation(properties.generateStringKey),IncludeSpace:cdk.booleanToCloudFormation(properties.includeSpace),PasswordLength:cdk.numberToCloudFormation(properties.passwordLength),RequireEachIncludedType:cdk.booleanToCloudFormation(properties.requireEachIncludedType),SecretStringTemplate:cdk.stringToCloudFormation(properties.secretStringTemplate)}):properties}function CfnSecretGenerateSecretStringPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("excludeCharacters","ExcludeCharacters",properties.ExcludeCharacters!=null?cfn_parse.FromCloudFormation.getString(properties.ExcludeCharacters):void 0),ret.addPropertyResult("excludeLowercase","ExcludeLowercase",properties.ExcludeLowercase!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeLowercase):void 0),ret.addPropertyResult("excludeNumbers","ExcludeNumbers",properties.ExcludeNumbers!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeNumbers):void 0),ret.addPropertyResult("excludePunctuation","ExcludePunctuation",properties.ExcludePunctuation!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludePunctuation):void 0),ret.addPropertyResult("excludeUppercase","ExcludeUppercase",properties.ExcludeUppercase!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeUppercase):void 0),ret.addPropertyResult("generateStringKey","GenerateStringKey",properties.GenerateStringKey!=null?cfn_parse.FromCloudFormation.getString(properties.GenerateStringKey):void 0),ret.addPropertyResult("includeSpace","IncludeSpace",properties.IncludeSpace!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeSpace):void 0),ret.addPropertyResult("passwordLength","PasswordLength",properties.PasswordLength!=null?cfn_parse.FromCloudFormation.getNumber(properties.PasswordLength):void 0),ret.addPropertyResult("requireEachIncludedType","RequireEachIncludedType",properties.RequireEachIncludedType!=null?cfn_parse.FromCloudFormation.getBoolean(properties.RequireEachIncludedType):void 0),ret.addPropertyResult("secretStringTemplate","SecretStringTemplate",properties.SecretStringTemplate!=null?cfn_parse.FromCloudFormation.getString(properties.SecretStringTemplate):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecret_ReplicaRegionPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("region",cdk.requiredValidator)(properties.region)),errors.collect(cdk.propertyValidator("region",cdk.validateString)(properties.region)),errors.wrap('supplied properties not correct for "ReplicaRegionProperty"')}function cfnSecretReplicaRegionPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecret_ReplicaRegionPropertyValidator(properties).assertSuccess(),{KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),Region:cdk.stringToCloudFormation(properties.region)}):properties}function CfnSecretReplicaRegionPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("region","Region",cfn_parse.FromCloudFormation.getString(properties.Region)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecretTargetAttachmentPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.collect(cdk.propertyValidator("targetId",cdk.requiredValidator)(properties.targetId)),errors.collect(cdk.propertyValidator("targetId",cdk.validateString)(properties.targetId)),errors.collect(cdk.propertyValidator("targetType",cdk.requiredValidator)(properties.targetType)),errors.collect(cdk.propertyValidator("targetType",cdk.validateString)(properties.targetType)),errors.wrap('supplied properties not correct for "CfnSecretTargetAttachmentProps"')}function cfnSecretTargetAttachmentPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecretTargetAttachmentPropsValidator(properties).assertSuccess(),{SecretId:cdk.stringToCloudFormation(properties.secretId),TargetId:cdk.stringToCloudFormation(properties.targetId),TargetType:cdk.stringToCloudFormation(properties.targetType)}):properties}function CfnSecretTargetAttachmentPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("targetId","TargetId",cfn_parse.FromCloudFormation.getString(properties.TargetId)),ret.addPropertyResult("targetType","TargetType",cfn_parse.FromCloudFormation.getString(properties.TargetType)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSecretTargetAttachment extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnSecretTargetAttachmentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSecretTargetAttachment),error}cdk.requireProperty(props,"secretId",this),cdk.requireProperty(props,"targetId",this),cdk.requireProperty(props,"targetType",this),this.secretId=props.secretId,this.targetId=props.targetId,this.targetType=props.targetType}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSecretTargetAttachmentPropsFromCloudFormation(resourceProperties),ret=new CfnSecretTargetAttachment(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{secretId:this.secretId,targetId:this.targetId,targetType:this.targetType}}renderProperties(props){return cfnSecretTargetAttachmentPropsToCloudFormation(props)}}exports.CfnSecretTargetAttachment=CfnSecretTargetAttachment,_d=JSII_RTTI_SYMBOL_1,CfnSecretTargetAttachment[_d]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnSecretTargetAttachment",version:"2.34.1"},CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::SecretTargetAttachment";
+"use strict";var _a,_b,_c,_d;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnSecretTargetAttachment=exports.CfnSecret=exports.CfnRotationSchedule=exports.CfnResourcePolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnResourcePolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("blockPublicPolicy",cdk.validateBoolean)(properties.blockPublicPolicy)),errors.collect(cdk.propertyValidator("resourcePolicy",cdk.requiredValidator)(properties.resourcePolicy)),errors.collect(cdk.propertyValidator("resourcePolicy",cdk.validateObject)(properties.resourcePolicy)),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.wrap('supplied properties not correct for "CfnResourcePolicyProps"')}function cfnResourcePolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnResourcePolicyPropsValidator(properties).assertSuccess(),{ResourcePolicy:cdk.objectToCloudFormation(properties.resourcePolicy),SecretId:cdk.stringToCloudFormation(properties.secretId),BlockPublicPolicy:cdk.booleanToCloudFormation(properties.blockPublicPolicy)}):properties}function CfnResourcePolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("resourcePolicy","ResourcePolicy",cfn_parse.FromCloudFormation.getAny(properties.ResourcePolicy)),ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("blockPublicPolicy","BlockPublicPolicy",properties.BlockPublicPolicy!=null?cfn_parse.FromCloudFormation.getBoolean(properties.BlockPublicPolicy):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnResourcePolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnResourcePolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnResourcePolicy),error}cdk.requireProperty(props,"resourcePolicy",this),cdk.requireProperty(props,"secretId",this),this.resourcePolicy=props.resourcePolicy,this.secretId=props.secretId,this.blockPublicPolicy=props.blockPublicPolicy}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnResourcePolicyPropsFromCloudFormation(resourceProperties),ret=new CfnResourcePolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{resourcePolicy:this.resourcePolicy,secretId:this.secretId,blockPublicPolicy:this.blockPublicPolicy}}renderProperties(props){return cfnResourcePolicyPropsToCloudFormation(props)}}exports.CfnResourcePolicy=CfnResourcePolicy,_a=JSII_RTTI_SYMBOL_1,CfnResourcePolicy[_a]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",version:"2.34.2"},CfnResourcePolicy.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::ResourcePolicy";function CfnRotationSchedulePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("hostedRotationLambda",CfnRotationSchedule_HostedRotationLambdaPropertyValidator)(properties.hostedRotationLambda)),errors.collect(cdk.propertyValidator("rotateImmediatelyOnUpdate",cdk.validateBoolean)(properties.rotateImmediatelyOnUpdate)),errors.collect(cdk.propertyValidator("rotationLambdaArn",cdk.validateString)(properties.rotationLambdaArn)),errors.collect(cdk.propertyValidator("rotationRules",CfnRotationSchedule_RotationRulesPropertyValidator)(properties.rotationRules)),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.wrap('supplied properties not correct for "CfnRotationScheduleProps"')}function cfnRotationSchedulePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedulePropsValidator(properties).assertSuccess(),{SecretId:cdk.stringToCloudFormation(properties.secretId),HostedRotationLambda:cfnRotationScheduleHostedRotationLambdaPropertyToCloudFormation(properties.hostedRotationLambda),RotateImmediatelyOnUpdate:cdk.booleanToCloudFormation(properties.rotateImmediatelyOnUpdate),RotationLambdaARN:cdk.stringToCloudFormation(properties.rotationLambdaArn),RotationRules:cfnRotationScheduleRotationRulesPropertyToCloudFormation(properties.rotationRules)}):properties}function CfnRotationSchedulePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("hostedRotationLambda","HostedRotationLambda",properties.HostedRotationLambda!=null?CfnRotationScheduleHostedRotationLambdaPropertyFromCloudFormation(properties.HostedRotationLambda):void 0),ret.addPropertyResult("rotateImmediatelyOnUpdate","RotateImmediatelyOnUpdate",properties.RotateImmediatelyOnUpdate!=null?cfn_parse.FromCloudFormation.getBoolean(properties.RotateImmediatelyOnUpdate):void 0),ret.addPropertyResult("rotationLambdaArn","RotationLambdaARN",properties.RotationLambdaARN!=null?cfn_parse.FromCloudFormation.getString(properties.RotationLambdaARN):void 0),ret.addPropertyResult("rotationRules","RotationRules",properties.RotationRules!=null?CfnRotationScheduleRotationRulesPropertyFromCloudFormation(properties.RotationRules):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnRotationSchedule extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnRotationScheduleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnRotationSchedule),error}cdk.requireProperty(props,"secretId",this),this.secretId=props.secretId,this.hostedRotationLambda=props.hostedRotationLambda,this.rotateImmediatelyOnUpdate=props.rotateImmediatelyOnUpdate,this.rotationLambdaArn=props.rotationLambdaArn,this.rotationRules=props.rotationRules}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnRotationSchedulePropsFromCloudFormation(resourceProperties),ret=new CfnRotationSchedule(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{secretId:this.secretId,hostedRotationLambda:this.hostedRotationLambda,rotateImmediatelyOnUpdate:this.rotateImmediatelyOnUpdate,rotationLambdaArn:this.rotationLambdaArn,rotationRules:this.rotationRules}}renderProperties(props){return cfnRotationSchedulePropsToCloudFormation(props)}}exports.CfnRotationSchedule=CfnRotationSchedule,_b=JSII_RTTI_SYMBOL_1,CfnRotationSchedule[_b]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",version:"2.34.2"},CfnRotationSchedule.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::RotationSchedule";function CfnRotationSchedule_HostedRotationLambdaPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("excludeCharacters",cdk.validateString)(properties.excludeCharacters)),errors.collect(cdk.propertyValidator("kmsKeyArn",cdk.validateString)(properties.kmsKeyArn)),errors.collect(cdk.propertyValidator("masterSecretArn",cdk.validateString)(properties.masterSecretArn)),errors.collect(cdk.propertyValidator("masterSecretKmsKeyArn",cdk.validateString)(properties.masterSecretKmsKeyArn)),errors.collect(cdk.propertyValidator("rotationLambdaName",cdk.validateString)(properties.rotationLambdaName)),errors.collect(cdk.propertyValidator("rotationType",cdk.requiredValidator)(properties.rotationType)),errors.collect(cdk.propertyValidator("rotationType",cdk.validateString)(properties.rotationType)),errors.collect(cdk.propertyValidator("superuserSecretArn",cdk.validateString)(properties.superuserSecretArn)),errors.collect(cdk.propertyValidator("superuserSecretKmsKeyArn",cdk.validateString)(properties.superuserSecretKmsKeyArn)),errors.collect(cdk.propertyValidator("vpcSecurityGroupIds",cdk.validateString)(properties.vpcSecurityGroupIds)),errors.collect(cdk.propertyValidator("vpcSubnetIds",cdk.validateString)(properties.vpcSubnetIds)),errors.wrap('supplied properties not correct for "HostedRotationLambdaProperty"')}function cfnRotationScheduleHostedRotationLambdaPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedule_HostedRotationLambdaPropertyValidator(properties).assertSuccess(),{ExcludeCharacters:cdk.stringToCloudFormation(properties.excludeCharacters),KmsKeyArn:cdk.stringToCloudFormation(properties.kmsKeyArn),MasterSecretArn:cdk.stringToCloudFormation(properties.masterSecretArn),MasterSecretKmsKeyArn:cdk.stringToCloudFormation(properties.masterSecretKmsKeyArn),RotationLambdaName:cdk.stringToCloudFormation(properties.rotationLambdaName),RotationType:cdk.stringToCloudFormation(properties.rotationType),SuperuserSecretArn:cdk.stringToCloudFormation(properties.superuserSecretArn),SuperuserSecretKmsKeyArn:cdk.stringToCloudFormation(properties.superuserSecretKmsKeyArn),VpcSecurityGroupIds:cdk.stringToCloudFormation(properties.vpcSecurityGroupIds),VpcSubnetIds:cdk.stringToCloudFormation(properties.vpcSubnetIds)}):properties}function CfnRotationScheduleHostedRotationLambdaPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("excludeCharacters","ExcludeCharacters",properties.ExcludeCharacters!=null?cfn_parse.FromCloudFormation.getString(properties.ExcludeCharacters):void 0),ret.addPropertyResult("kmsKeyArn","KmsKeyArn",properties.KmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyArn):void 0),ret.addPropertyResult("masterSecretArn","MasterSecretArn",properties.MasterSecretArn!=null?cfn_parse.FromCloudFormation.getString(properties.MasterSecretArn):void 0),ret.addPropertyResult("masterSecretKmsKeyArn","MasterSecretKmsKeyArn",properties.MasterSecretKmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.MasterSecretKmsKeyArn):void 0),ret.addPropertyResult("rotationLambdaName","RotationLambdaName",properties.RotationLambdaName!=null?cfn_parse.FromCloudFormation.getString(properties.RotationLambdaName):void 0),ret.addPropertyResult("rotationType","RotationType",cfn_parse.FromCloudFormation.getString(properties.RotationType)),ret.addPropertyResult("superuserSecretArn","SuperuserSecretArn",properties.SuperuserSecretArn!=null?cfn_parse.FromCloudFormation.getString(properties.SuperuserSecretArn):void 0),ret.addPropertyResult("superuserSecretKmsKeyArn","SuperuserSecretKmsKeyArn",properties.SuperuserSecretKmsKeyArn!=null?cfn_parse.FromCloudFormation.getString(properties.SuperuserSecretKmsKeyArn):void 0),ret.addPropertyResult("vpcSecurityGroupIds","VpcSecurityGroupIds",properties.VpcSecurityGroupIds!=null?cfn_parse.FromCloudFormation.getString(properties.VpcSecurityGroupIds):void 0),ret.addPropertyResult("vpcSubnetIds","VpcSubnetIds",properties.VpcSubnetIds!=null?cfn_parse.FromCloudFormation.getString(properties.VpcSubnetIds):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnRotationSchedule_RotationRulesPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("automaticallyAfterDays",cdk.validateNumber)(properties.automaticallyAfterDays)),errors.collect(cdk.propertyValidator("duration",cdk.validateString)(properties.duration)),errors.collect(cdk.propertyValidator("scheduleExpression",cdk.validateString)(properties.scheduleExpression)),errors.wrap('supplied properties not correct for "RotationRulesProperty"')}function cfnRotationScheduleRotationRulesPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRotationSchedule_RotationRulesPropertyValidator(properties).assertSuccess(),{AutomaticallyAfterDays:cdk.numberToCloudFormation(properties.automaticallyAfterDays),Duration:cdk.stringToCloudFormation(properties.duration),ScheduleExpression:cdk.stringToCloudFormation(properties.scheduleExpression)}):properties}function CfnRotationScheduleRotationRulesPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("automaticallyAfterDays","AutomaticallyAfterDays",properties.AutomaticallyAfterDays!=null?cfn_parse.FromCloudFormation.getNumber(properties.AutomaticallyAfterDays):void 0),ret.addPropertyResult("duration","Duration",properties.Duration!=null?cfn_parse.FromCloudFormation.getString(properties.Duration):void 0),ret.addPropertyResult("scheduleExpression","ScheduleExpression",properties.ScheduleExpression!=null?cfn_parse.FromCloudFormation.getString(properties.ScheduleExpression):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecretPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("generateSecretString",CfnSecret_GenerateSecretStringPropertyValidator)(properties.generateSecretString)),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("replicaRegions",cdk.listValidator(CfnSecret_ReplicaRegionPropertyValidator))(properties.replicaRegions)),errors.collect(cdk.propertyValidator("secretString",cdk.validateString)(properties.secretString)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnSecretProps"')}function cfnSecretPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecretPropsValidator(properties).assertSuccess(),{Description:cdk.stringToCloudFormation(properties.description),GenerateSecretString:cfnSecretGenerateSecretStringPropertyToCloudFormation(properties.generateSecretString),KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),Name:cdk.stringToCloudFormation(properties.name),ReplicaRegions:cdk.listMapper(cfnSecretReplicaRegionPropertyToCloudFormation)(properties.replicaRegions),SecretString:cdk.stringToCloudFormation(properties.secretString),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnSecretPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("generateSecretString","GenerateSecretString",properties.GenerateSecretString!=null?CfnSecretGenerateSecretStringPropertyFromCloudFormation(properties.GenerateSecretString):void 0),ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("replicaRegions","ReplicaRegions",properties.ReplicaRegions!=null?cfn_parse.FromCloudFormation.getArray(CfnSecretReplicaRegionPropertyFromCloudFormation)(properties.ReplicaRegions):void 0),ret.addPropertyResult("secretString","SecretString",properties.SecretString!=null?cfn_parse.FromCloudFormation.getString(properties.SecretString):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSecret extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnSecret.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnSecretProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSecret),error}this.description=props.description,this.generateSecretString=props.generateSecretString,this.kmsKeyId=props.kmsKeyId,this.name=props.name,this.replicaRegions=props.replicaRegions,this.secretString=props.secretString,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::SecretsManager::Secret",props.tags,{tagPropertyName:"tags"}),this.node.scope&&cdk.Resource.isResource(this.node.scope)&&this.node.addValidation({validate:()=>this.cfnOptions.deletionPolicy===void 0?["'AWS::SecretsManager::Secret' is a stateful resource type, and you must specify a Removal Policy for it. Call 'resource.applyRemovalPolicy()'."]:[]})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSecretPropsFromCloudFormation(resourceProperties),ret=new CfnSecret(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSecret.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{description:this.description,generateSecretString:this.generateSecretString,kmsKeyId:this.kmsKeyId,name:this.name,replicaRegions:this.replicaRegions,secretString:this.secretString,tags:this.tags.renderTags()}}renderProperties(props){return cfnSecretPropsToCloudFormation(props)}}exports.CfnSecret=CfnSecret,_c=JSII_RTTI_SYMBOL_1,CfnSecret[_c]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnSecret",version:"2.34.2"},CfnSecret.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::Secret";function CfnSecret_GenerateSecretStringPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("excludeCharacters",cdk.validateString)(properties.excludeCharacters)),errors.collect(cdk.propertyValidator("excludeLowercase",cdk.validateBoolean)(properties.excludeLowercase)),errors.collect(cdk.propertyValidator("excludeNumbers",cdk.validateBoolean)(properties.excludeNumbers)),errors.collect(cdk.propertyValidator("excludePunctuation",cdk.validateBoolean)(properties.excludePunctuation)),errors.collect(cdk.propertyValidator("excludeUppercase",cdk.validateBoolean)(properties.excludeUppercase)),errors.collect(cdk.propertyValidator("generateStringKey",cdk.validateString)(properties.generateStringKey)),errors.collect(cdk.propertyValidator("includeSpace",cdk.validateBoolean)(properties.includeSpace)),errors.collect(cdk.propertyValidator("passwordLength",cdk.validateNumber)(properties.passwordLength)),errors.collect(cdk.propertyValidator("requireEachIncludedType",cdk.validateBoolean)(properties.requireEachIncludedType)),errors.collect(cdk.propertyValidator("secretStringTemplate",cdk.validateString)(properties.secretStringTemplate)),errors.wrap('supplied properties not correct for "GenerateSecretStringProperty"')}function cfnSecretGenerateSecretStringPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecret_GenerateSecretStringPropertyValidator(properties).assertSuccess(),{ExcludeCharacters:cdk.stringToCloudFormation(properties.excludeCharacters),ExcludeLowercase:cdk.booleanToCloudFormation(properties.excludeLowercase),ExcludeNumbers:cdk.booleanToCloudFormation(properties.excludeNumbers),ExcludePunctuation:cdk.booleanToCloudFormation(properties.excludePunctuation),ExcludeUppercase:cdk.booleanToCloudFormation(properties.excludeUppercase),GenerateStringKey:cdk.stringToCloudFormation(properties.generateStringKey),IncludeSpace:cdk.booleanToCloudFormation(properties.includeSpace),PasswordLength:cdk.numberToCloudFormation(properties.passwordLength),RequireEachIncludedType:cdk.booleanToCloudFormation(properties.requireEachIncludedType),SecretStringTemplate:cdk.stringToCloudFormation(properties.secretStringTemplate)}):properties}function CfnSecretGenerateSecretStringPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("excludeCharacters","ExcludeCharacters",properties.ExcludeCharacters!=null?cfn_parse.FromCloudFormation.getString(properties.ExcludeCharacters):void 0),ret.addPropertyResult("excludeLowercase","ExcludeLowercase",properties.ExcludeLowercase!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeLowercase):void 0),ret.addPropertyResult("excludeNumbers","ExcludeNumbers",properties.ExcludeNumbers!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeNumbers):void 0),ret.addPropertyResult("excludePunctuation","ExcludePunctuation",properties.ExcludePunctuation!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludePunctuation):void 0),ret.addPropertyResult("excludeUppercase","ExcludeUppercase",properties.ExcludeUppercase!=null?cfn_parse.FromCloudFormation.getBoolean(properties.ExcludeUppercase):void 0),ret.addPropertyResult("generateStringKey","GenerateStringKey",properties.GenerateStringKey!=null?cfn_parse.FromCloudFormation.getString(properties.GenerateStringKey):void 0),ret.addPropertyResult("includeSpace","IncludeSpace",properties.IncludeSpace!=null?cfn_parse.FromCloudFormation.getBoolean(properties.IncludeSpace):void 0),ret.addPropertyResult("passwordLength","PasswordLength",properties.PasswordLength!=null?cfn_parse.FromCloudFormation.getNumber(properties.PasswordLength):void 0),ret.addPropertyResult("requireEachIncludedType","RequireEachIncludedType",properties.RequireEachIncludedType!=null?cfn_parse.FromCloudFormation.getBoolean(properties.RequireEachIncludedType):void 0),ret.addPropertyResult("secretStringTemplate","SecretStringTemplate",properties.SecretStringTemplate!=null?cfn_parse.FromCloudFormation.getString(properties.SecretStringTemplate):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecret_ReplicaRegionPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("kmsKeyId",cdk.validateString)(properties.kmsKeyId)),errors.collect(cdk.propertyValidator("region",cdk.requiredValidator)(properties.region)),errors.collect(cdk.propertyValidator("region",cdk.validateString)(properties.region)),errors.wrap('supplied properties not correct for "ReplicaRegionProperty"')}function cfnSecretReplicaRegionPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecret_ReplicaRegionPropertyValidator(properties).assertSuccess(),{KmsKeyId:cdk.stringToCloudFormation(properties.kmsKeyId),Region:cdk.stringToCloudFormation(properties.region)}):properties}function CfnSecretReplicaRegionPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("kmsKeyId","KmsKeyId",properties.KmsKeyId!=null?cfn_parse.FromCloudFormation.getString(properties.KmsKeyId):void 0),ret.addPropertyResult("region","Region",cfn_parse.FromCloudFormation.getString(properties.Region)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSecretTargetAttachmentPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("secretId",cdk.requiredValidator)(properties.secretId)),errors.collect(cdk.propertyValidator("secretId",cdk.validateString)(properties.secretId)),errors.collect(cdk.propertyValidator("targetId",cdk.requiredValidator)(properties.targetId)),errors.collect(cdk.propertyValidator("targetId",cdk.validateString)(properties.targetId)),errors.collect(cdk.propertyValidator("targetType",cdk.requiredValidator)(properties.targetType)),errors.collect(cdk.propertyValidator("targetType",cdk.validateString)(properties.targetType)),errors.wrap('supplied properties not correct for "CfnSecretTargetAttachmentProps"')}function cfnSecretTargetAttachmentPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSecretTargetAttachmentPropsValidator(properties).assertSuccess(),{SecretId:cdk.stringToCloudFormation(properties.secretId),TargetId:cdk.stringToCloudFormation(properties.targetId),TargetType:cdk.stringToCloudFormation(properties.targetType)}):properties}function CfnSecretTargetAttachmentPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("secretId","SecretId",cfn_parse.FromCloudFormation.getString(properties.SecretId)),ret.addPropertyResult("targetId","TargetId",cfn_parse.FromCloudFormation.getString(properties.TargetId)),ret.addPropertyResult("targetType","TargetType",cfn_parse.FromCloudFormation.getString(properties.TargetType)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSecretTargetAttachment extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_secretsmanager_CfnSecretTargetAttachmentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSecretTargetAttachment),error}cdk.requireProperty(props,"secretId",this),cdk.requireProperty(props,"targetId",this),cdk.requireProperty(props,"targetType",this),this.secretId=props.secretId,this.targetId=props.targetId,this.targetType=props.targetType}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSecretTargetAttachmentPropsFromCloudFormation(resourceProperties),ret=new CfnSecretTargetAttachment(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{secretId:this.secretId,targetId:this.targetId,targetType:this.targetType}}renderProperties(props){return cfnSecretTargetAttachmentPropsToCloudFormation(props)}}exports.CfnSecretTargetAttachment=CfnSecretTargetAttachment,_d=JSII_RTTI_SYMBOL_1,CfnSecretTargetAttachment[_d]={fqn:"aws-cdk-lib.aws_secretsmanager.CfnSecretTargetAttachment",version:"2.34.2"},CfnSecretTargetAttachment.CFN_RESOURCE_TYPE_NAME="AWS::SecretsManager::SecretTargetAttachment";
 //# sourceMappingURL=secretsmanager.generated.js.map

package/aws-securityhub/lib/securityhub.generated.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnHub=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnHubPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("tags",cdk.validateObject)(properties.tags)),errors.wrap('supplied properties not correct for "CfnHubProps"')}function cfnHubPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnHubPropsValidator(properties).assertSuccess(),{Tags:cdk.objectToCloudFormation(properties.tags)}):properties}function CfnHubPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getAny(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnHub extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnHub.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_securityhub_CfnHubProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnHub),error}this.tags=new cdk.TagManager(cdk.TagType.MAP,"AWS::SecurityHub::Hub",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnHubPropsFromCloudFormation(resourceProperties),ret=new CfnHub(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnHub.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{tags:this.tags.renderTags()}}renderProperties(props){return cfnHubPropsToCloudFormation(props)}}exports.CfnHub=CfnHub,_a=JSII_RTTI_SYMBOL_1,CfnHub[_a]={fqn:"aws-cdk-lib.aws_securityhub.CfnHub",version:"2.34.1"},CfnHub.CFN_RESOURCE_TYPE_NAME="AWS::SecurityHub::Hub";
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnHub=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnHubPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("tags",cdk.validateObject)(properties.tags)),errors.wrap('supplied properties not correct for "CfnHubProps"')}function cfnHubPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnHubPropsValidator(properties).assertSuccess(),{Tags:cdk.objectToCloudFormation(properties.tags)}):properties}function CfnHubPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getAny(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnHub extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnHub.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_securityhub_CfnHubProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnHub),error}this.tags=new cdk.TagManager(cdk.TagType.MAP,"AWS::SecurityHub::Hub",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnHubPropsFromCloudFormation(resourceProperties),ret=new CfnHub(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnHub.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{tags:this.tags.renderTags()}}renderProperties(props){return cfnHubPropsToCloudFormation(props)}}exports.CfnHub=CfnHub,_a=JSII_RTTI_SYMBOL_1,CfnHub[_a]={fqn:"aws-cdk-lib.aws_securityhub.CfnHub",version:"2.34.2"},CfnHub.CFN_RESOURCE_TYPE_NAME="AWS::SecurityHub::Hub";
 //# sourceMappingURL=securityhub.generated.js.map

package/aws-servicecatalog/lib/cloudformation-template.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFormationTemplate=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),s3_assets=require("../../aws-s3-assets"),util_1=require("./private/util");class CloudFormationTemplate{static fromUrl(url){return new CloudFormationUrlTemplate(url)}static fromAsset(path,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_s3_assets_AssetOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromAsset),error}return new CloudFormationAssetTemplate(path,options)}static fromProductStack(productStack){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_ProductStack(productStack)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromProductStack),error}return new CloudFormationProductStackTemplate(productStack)}}exports.CloudFormationTemplate=CloudFormationTemplate,_a=JSII_RTTI_SYMBOL_1,CloudFormationTemplate[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.CloudFormationTemplate",version:"2.34.1"};class CloudFormationUrlTemplate extends CloudFormationTemplate{constructor(url){super(),this.url=url}bind(_scope){return{httpUrl:this.url}}}class CloudFormationAssetTemplate extends CloudFormationTemplate{constructor(path,options={}){super(),this.path=path,this.options=options}bind(scope){return this.asset||(this.asset=new s3_assets.Asset(scope,`Template${util_1.hashValues(this.path)}`,{path:this.path,...this.options})),{httpUrl:this.asset.httpUrl}}}class CloudFormationProductStackTemplate extends CloudFormationTemplate{constructor(productStack){super(),this.productStack=productStack}bind(_scope){return{httpUrl:this.productStack._getTemplateUrl()}}}
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFormationTemplate=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),s3_assets=require("../../aws-s3-assets"),util_1=require("./private/util");class CloudFormationTemplate{static fromUrl(url){return new CloudFormationUrlTemplate(url)}static fromAsset(path,options){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_s3_assets_AssetOptions(options)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromAsset),error}return new CloudFormationAssetTemplate(path,options)}static fromProductStack(productStack){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_ProductStack(productStack)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromProductStack),error}return new CloudFormationProductStackTemplate(productStack)}}exports.CloudFormationTemplate=CloudFormationTemplate,_a=JSII_RTTI_SYMBOL_1,CloudFormationTemplate[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.CloudFormationTemplate",version:"2.34.2"};class CloudFormationUrlTemplate extends CloudFormationTemplate{constructor(url){super(),this.url=url}bind(_scope){return{httpUrl:this.url}}}class CloudFormationAssetTemplate extends CloudFormationTemplate{constructor(path,options={}){super(),this.path=path,this.options=options}bind(scope){return this.asset||(this.asset=new s3_assets.Asset(scope,`Template${util_1.hashValues(this.path)}`,{path:this.path,...this.options})),{httpUrl:this.asset.httpUrl}}}class CloudFormationProductStackTemplate extends CloudFormationTemplate{constructor(productStack){super(),this.productStack=productStack}bind(_scope){return{httpUrl:this.productStack._getTemplateUrl()}}}
 //# sourceMappingURL=cloudformation-template.js.map

package/aws-servicecatalog/lib/portfolio.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.Portfolio=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),cdk=require("../../core"),association_manager_1=require("./private/association-manager"),util_1=require("./private/util"),validation_1=require("./private/validation"),servicecatalog_generated_1=require("./servicecatalog.generated");class PortfolioBase extends cdk.Resource{constructor(){super(...arguments),this.associatedPrincipals=new Set}giveAccessToRole(role){this.associatePrincipal(role.roleArn,role.node.addr)}giveAccessToUser(user){this.associatePrincipal(user.userArn,user.node.addr)}giveAccessToGroup(group){this.associatePrincipal(group.groupArn,group.node.addr)}addProduct(product){association_manager_1.AssociationManager.associateProductWithPortfolio(this,product,void 0)}shareWithAccount(accountId,options={}){const hashId=this.generateUniqueHash(accountId);new servicecatalog_generated_1.CfnPortfolioShare(this,`PortfolioShare${hashId}`,{portfolioId:this.portfolioId,accountId,shareTagOptions:options.shareTagOptions,acceptLanguage:options.messageLanguage})}associateTagOptions(tagOptions){association_manager_1.AssociationManager.associateTagOptions(this,this.portfolioId,tagOptions)}constrainTagUpdates(product,options={}){association_manager_1.AssociationManager.constrainTagUpdates(this,product,options)}notifyOnStackEvents(product,topic,options={}){association_manager_1.AssociationManager.notifyOnStackEvents(this,product,topic,options)}constrainCloudFormationParameters(product,options){association_manager_1.AssociationManager.constrainCloudFormationParameters(this,product,options)}setLaunchRole(product,launchRole,options={}){association_manager_1.AssociationManager.setLaunchRole(this,product,launchRole,options)}setLocalLaunchRoleName(product,launchRoleName,options={}){const launchRole=new iam.Role(this,`LaunchRole${launchRoleName}`,{roleName:launchRoleName,assumedBy:new iam.ServicePrincipal("servicecatalog.amazonaws.com")});return association_manager_1.AssociationManager.setLocalLaunchRoleName(this,product,launchRole.roleName,options),launchRole}setLocalLaunchRole(product,launchRole,options={}){validation_1.InputValidator.validateRoleNameSetForLocalLaunchRole(launchRole),association_manager_1.AssociationManager.setLocalLaunchRoleName(this,product,launchRole.roleName,options)}deployWithStackSets(product,options){association_manager_1.AssociationManager.deployWithStackSets(this,product,options)}associatePrincipal(principalArn,principalId){if(!this.associatedPrincipals.has(principalArn)){const hashId=this.generateUniqueHash(principalId);new servicecatalog_generated_1.CfnPortfolioPrincipalAssociation(this,`PortolioPrincipalAssociation${hashId}`,{portfolioId:this.portfolioId,principalArn,principalType:"IAM"}),this.associatedPrincipals.add(principalArn)}}}class Portfolio extends PortfolioBase{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_PortfolioProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Portfolio),error}this.validatePortfolioProps(props),this.portfolio=new servicecatalog_generated_1.CfnPortfolio(this,"Resource",{displayName:props.displayName,providerName:props.providerName,description:props.description,acceptLanguage:props.messageLanguage}),this.portfolioId=this.portfolio.ref,this.portfolioArn=cdk.Stack.of(this).formatArn({service:"servicecatalog",resource:"portfolio",resourceName:this.portfolioId}),props.tagOptions!==void 0&&this.associateTagOptions(props.tagOptions)}static fromPortfolioArn(scope,id,portfolioArn){const portfolioId=cdk.Stack.of(scope).splitArn(portfolioArn,cdk.ArnFormat.SLASH_RESOURCE_NAME).resourceName;if(!portfolioId)throw new Error("Missing required Portfolio ID from Portfolio ARN: "+portfolioArn);class Import extends PortfolioBase{constructor(){super(...arguments),this.portfolioArn=portfolioArn,this.portfolioId=portfolioId}generateUniqueHash(value){return util_1.hashValues(this.portfolioArn,value)}}return new Import(scope,id,{environmentFromArn:portfolioArn})}generateUniqueHash(value){return util_1.hashValues(cdk.Names.nodeUniqueId(this.portfolio.node),value)}validatePortfolioProps(props){validation_1.InputValidator.validateLength(this.node.path,"portfolio display name",1,100,props.displayName),validation_1.InputValidator.validateLength(this.node.path,"portfolio provider name",1,50,props.providerName),validation_1.InputValidator.validateLength(this.node.path,"portfolio description",0,2e3,props.description)}}exports.Portfolio=Portfolio,_a=JSII_RTTI_SYMBOL_1,Portfolio[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.Portfolio",version:"2.34.1"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.Portfolio=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),iam=require("../../aws-iam"),cdk=require("../../core"),association_manager_1=require("./private/association-manager"),util_1=require("./private/util"),validation_1=require("./private/validation"),servicecatalog_generated_1=require("./servicecatalog.generated");class PortfolioBase extends cdk.Resource{constructor(){super(...arguments),this.associatedPrincipals=new Set}giveAccessToRole(role){this.associatePrincipal(role.roleArn,role.node.addr)}giveAccessToUser(user){this.associatePrincipal(user.userArn,user.node.addr)}giveAccessToGroup(group){this.associatePrincipal(group.groupArn,group.node.addr)}addProduct(product){association_manager_1.AssociationManager.associateProductWithPortfolio(this,product,void 0)}shareWithAccount(accountId,options={}){const hashId=this.generateUniqueHash(accountId);new servicecatalog_generated_1.CfnPortfolioShare(this,`PortfolioShare${hashId}`,{portfolioId:this.portfolioId,accountId,shareTagOptions:options.shareTagOptions,acceptLanguage:options.messageLanguage})}associateTagOptions(tagOptions){association_manager_1.AssociationManager.associateTagOptions(this,this.portfolioId,tagOptions)}constrainTagUpdates(product,options={}){association_manager_1.AssociationManager.constrainTagUpdates(this,product,options)}notifyOnStackEvents(product,topic,options={}){association_manager_1.AssociationManager.notifyOnStackEvents(this,product,topic,options)}constrainCloudFormationParameters(product,options){association_manager_1.AssociationManager.constrainCloudFormationParameters(this,product,options)}setLaunchRole(product,launchRole,options={}){association_manager_1.AssociationManager.setLaunchRole(this,product,launchRole,options)}setLocalLaunchRoleName(product,launchRoleName,options={}){const launchRole=new iam.Role(this,`LaunchRole${launchRoleName}`,{roleName:launchRoleName,assumedBy:new iam.ServicePrincipal("servicecatalog.amazonaws.com")});return association_manager_1.AssociationManager.setLocalLaunchRoleName(this,product,launchRole.roleName,options),launchRole}setLocalLaunchRole(product,launchRole,options={}){validation_1.InputValidator.validateRoleNameSetForLocalLaunchRole(launchRole),association_manager_1.AssociationManager.setLocalLaunchRoleName(this,product,launchRole.roleName,options)}deployWithStackSets(product,options){association_manager_1.AssociationManager.deployWithStackSets(this,product,options)}associatePrincipal(principalArn,principalId){if(!this.associatedPrincipals.has(principalArn)){const hashId=this.generateUniqueHash(principalId);new servicecatalog_generated_1.CfnPortfolioPrincipalAssociation(this,`PortolioPrincipalAssociation${hashId}`,{portfolioId:this.portfolioId,principalArn,principalType:"IAM"}),this.associatedPrincipals.add(principalArn)}}}class Portfolio extends PortfolioBase{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_PortfolioProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Portfolio),error}this.validatePortfolioProps(props),this.portfolio=new servicecatalog_generated_1.CfnPortfolio(this,"Resource",{displayName:props.displayName,providerName:props.providerName,description:props.description,acceptLanguage:props.messageLanguage}),this.portfolioId=this.portfolio.ref,this.portfolioArn=cdk.Stack.of(this).formatArn({service:"servicecatalog",resource:"portfolio",resourceName:this.portfolioId}),props.tagOptions!==void 0&&this.associateTagOptions(props.tagOptions)}static fromPortfolioArn(scope,id,portfolioArn){const portfolioId=cdk.Stack.of(scope).splitArn(portfolioArn,cdk.ArnFormat.SLASH_RESOURCE_NAME).resourceName;if(!portfolioId)throw new Error("Missing required Portfolio ID from Portfolio ARN: "+portfolioArn);class Import extends PortfolioBase{constructor(){super(...arguments),this.portfolioArn=portfolioArn,this.portfolioId=portfolioId}generateUniqueHash(value){return util_1.hashValues(this.portfolioArn,value)}}return new Import(scope,id,{environmentFromArn:portfolioArn})}generateUniqueHash(value){return util_1.hashValues(cdk.Names.nodeUniqueId(this.portfolio.node),value)}validatePortfolioProps(props){validation_1.InputValidator.validateLength(this.node.path,"portfolio display name",1,100,props.displayName),validation_1.InputValidator.validateLength(this.node.path,"portfolio provider name",1,50,props.providerName),validation_1.InputValidator.validateLength(this.node.path,"portfolio description",0,2e3,props.description)}}exports.Portfolio=Portfolio,_a=JSII_RTTI_SYMBOL_1,Portfolio[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.Portfolio",version:"2.34.2"};
 //# sourceMappingURL=portfolio.js.map

package/aws-servicecatalog/lib/product-stack-history.js

@@ -3,5 +3,5 @@
         Since locked has been set to ${this.props.currentVersionLocked},
         Either update the currentVersionName to deploy a new version or deploy the existing ProductStack snapshot.
         If ${this.props.currentVersionName} was unintentionally synthesized and not deployed, 
-        delete the corresponding version from ${productStackSnapshotDirectory} and redeploy.`);fs.writeFileSync(templateFilePath,cfn)}}exports.ProductStackHistory=ProductStackHistory,_a=JSII_RTTI_SYMBOL_1,ProductStackHistory[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.ProductStackHistory",version:"2.34.1"};
+        delete the corresponding version from ${productStackSnapshotDirectory} and redeploy.`);fs.writeFileSync(templateFilePath,cfn)}}exports.ProductStackHistory=ProductStackHistory,_a=JSII_RTTI_SYMBOL_1,ProductStackHistory[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.ProductStackHistory",version:"2.34.2"};
 //# sourceMappingURL=product-stack-history.js.map

package/aws-servicecatalog/lib/product-stack.js

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ProductStack=void 0;const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),crypto=require("crypto"),fs=require("fs"),path=require("path"),cdk=require("../../core"),product_stack_synthesizer_1=require("./private/product-stack-synthesizer");class ProductStack extends cdk.Stack{constructor(scope,id){super(scope,id,{synthesizer:new product_stack_synthesizer_1.ProductStackSynthesizer}),this._parentStack=findParentStack(scope),this.templateFile=`${cdk.Names.uniqueId(this)}.product.template.json`}_setParentProductStackHistory(parentProductStackHistory){return this._parentProductStackHistory=parentProductStackHistory}_getTemplateUrl(){return cdk.Lazy.uncachedString({produce:()=>this._templateUrl})}_synthesizeTemplate(session){const cfn=JSON.stringify(this._toCloudFormation(),void 0,2),templateHash=crypto.createHash("sha256").update(cfn).digest("hex");this._templateUrl=this._parentStack.synthesizer.addFileAsset({packaging:cdk.FileAssetPackaging.FILE,sourceHash:templateHash,fileName:this.templateFile}).httpUrl,this._parentProductStackHistory&&this._parentProductStackHistory._writeTemplateToSnapshot(cfn),fs.writeFileSync(path.join(session.assembly.outdir,this.templateFile),cfn)}}exports.ProductStack=ProductStack,_a=JSII_RTTI_SYMBOL_1,ProductStack[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.ProductStack",version:"2.34.1"};function findParentStack(scope){try{return cdk.Stack.of(scope)}catch{throw new Error("Product stacks must be defined within scope of another non-product stack")}}
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ProductStack=void 0;const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),crypto=require("crypto"),fs=require("fs"),path=require("path"),cdk=require("../../core"),product_stack_synthesizer_1=require("./private/product-stack-synthesizer");class ProductStack extends cdk.Stack{constructor(scope,id){super(scope,id,{synthesizer:new product_stack_synthesizer_1.ProductStackSynthesizer}),this._parentStack=findParentStack(scope),this.templateFile=`${cdk.Names.uniqueId(this)}.product.template.json`}_setParentProductStackHistory(parentProductStackHistory){return this._parentProductStackHistory=parentProductStackHistory}_getTemplateUrl(){return cdk.Lazy.uncachedString({produce:()=>this._templateUrl})}_synthesizeTemplate(session){const cfn=JSON.stringify(this._toCloudFormation(),void 0,2),templateHash=crypto.createHash("sha256").update(cfn).digest("hex");this._templateUrl=this._parentStack.synthesizer.addFileAsset({packaging:cdk.FileAssetPackaging.FILE,sourceHash:templateHash,fileName:this.templateFile}).httpUrl,this._parentProductStackHistory&&this._parentProductStackHistory._writeTemplateToSnapshot(cfn),fs.writeFileSync(path.join(session.assembly.outdir,this.templateFile),cfn)}}exports.ProductStack=ProductStack,_a=JSII_RTTI_SYMBOL_1,ProductStack[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.ProductStack",version:"2.34.2"};function findParentStack(scope){try{return cdk.Stack.of(scope)}catch{throw new Error("Product stacks must be defined within scope of another non-product stack")}}
 //# sourceMappingURL=product-stack.js.map

package/aws-servicecatalog/lib/product.js

@@ -1,2 +1,2 @@
-"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFormationProduct=exports.Product=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),association_manager_1=require("./private/association-manager"),validation_1=require("./private/validation"),servicecatalog_generated_1=require("./servicecatalog.generated");class ProductBase extends core_1.Resource{associateTagOptions(tagOptions){association_manager_1.AssociationManager.associateTagOptions(this,this.productId,tagOptions)}}class Product extends ProductBase{static fromProductArn(scope,id,productArn){const productId=core_1.Stack.of(scope).splitArn(productArn,core_1.ArnFormat.SLASH_RESOURCE_NAME).resourceName;if(!productId)throw new Error("Missing required Portfolio ID from Portfolio ARN: "+productArn);return new class extends ProductBase{constructor(){super(...arguments),this.productId=productId,this.productArn=productArn}}(scope,id)}}exports.Product=Product,_a=JSII_RTTI_SYMBOL_1,Product[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.Product",version:"2.34.1"};class CloudFormationProduct extends Product{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_CloudFormationProductProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CloudFormationProduct),error}this.validateProductProps(props);const product=new servicecatalog_generated_1.CfnCloudFormationProduct(this,"Resource",{acceptLanguage:props.messageLanguage,description:props.description,distributor:props.distributor,name:props.productName,owner:props.owner,provisioningArtifactParameters:this.renderProvisioningArtifacts(props),replaceProvisioningArtifacts:props.replaceProductVersionIds,supportDescription:props.supportDescription,supportEmail:props.supportEmail,supportUrl:props.supportUrl});this.productId=product.ref,this.productArn=core_1.Stack.of(this).formatArn({service:"catalog",resource:"product",resourceName:product.ref}),props.tagOptions!==void 0&&this.associateTagOptions(props.tagOptions)}renderProvisioningArtifacts(props){return props.productVersions.map(productVersion=>{const template=productVersion.cloudFormationTemplate.bind(this);return validation_1.InputValidator.validateUrl(this.node.path,"provisioning template url",template.httpUrl),{name:productVersion.productVersionName,description:productVersion.description,disableTemplateValidation:productVersion.validateTemplate===!1,info:{LoadTemplateFromURL:template.httpUrl}}})}validateProductProps(props){if(validation_1.InputValidator.validateLength(this.node.path,"product product name",1,100,props.productName),validation_1.InputValidator.validateLength(this.node.path,"product owner",1,8191,props.owner),validation_1.InputValidator.validateLength(this.node.path,"product description",0,8191,props.description),validation_1.InputValidator.validateLength(this.node.path,"product distributor",0,8191,props.distributor),validation_1.InputValidator.validateEmail(this.node.path,"support email",props.supportEmail),validation_1.InputValidator.validateUrl(this.node.path,"support url",props.supportUrl),validation_1.InputValidator.validateLength(this.node.path,"support description",0,8191,props.supportDescription),props.productVersions.length==0)throw new Error(`Invalid product versions for resource ${this.node.path}, must contain at least 1 product version`);props.productVersions.forEach(productVersion=>{validation_1.InputValidator.validateLength(this.node.path,"provisioning artifact name",0,100,productVersion.productVersionName),validation_1.InputValidator.validateLength(this.node.path,"provisioning artifact description",0,8191,productVersion.description)})}}exports.CloudFormationProduct=CloudFormationProduct,_b=JSII_RTTI_SYMBOL_1,CloudFormationProduct[_b]={fqn:"aws-cdk-lib.aws_servicecatalog.CloudFormationProduct",version:"2.34.1"};
+"use strict";var _a,_b;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CloudFormationProduct=exports.Product=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),association_manager_1=require("./private/association-manager"),validation_1=require("./private/validation"),servicecatalog_generated_1=require("./servicecatalog.generated");class ProductBase extends core_1.Resource{associateTagOptions(tagOptions){association_manager_1.AssociationManager.associateTagOptions(this,this.productId,tagOptions)}}class Product extends ProductBase{static fromProductArn(scope,id,productArn){const productId=core_1.Stack.of(scope).splitArn(productArn,core_1.ArnFormat.SLASH_RESOURCE_NAME).resourceName;if(!productId)throw new Error("Missing required Portfolio ID from Portfolio ARN: "+productArn);return new class extends ProductBase{constructor(){super(...arguments),this.productId=productId,this.productArn=productArn}}(scope,id)}}exports.Product=Product,_a=JSII_RTTI_SYMBOL_1,Product[_a]={fqn:"aws-cdk-lib.aws_servicecatalog.Product",version:"2.34.2"};class CloudFormationProduct extends Product{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_servicecatalog_CloudFormationProductProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CloudFormationProduct),error}this.validateProductProps(props);const product=new servicecatalog_generated_1.CfnCloudFormationProduct(this,"Resource",{acceptLanguage:props.messageLanguage,description:props.description,distributor:props.distributor,name:props.productName,owner:props.owner,provisioningArtifactParameters:this.renderProvisioningArtifacts(props),replaceProvisioningArtifacts:props.replaceProductVersionIds,supportDescription:props.supportDescription,supportEmail:props.supportEmail,supportUrl:props.supportUrl});this.productId=product.ref,this.productArn=core_1.Stack.of(this).formatArn({service:"catalog",resource:"product",resourceName:product.ref}),props.tagOptions!==void 0&&this.associateTagOptions(props.tagOptions)}renderProvisioningArtifacts(props){return props.productVersions.map(productVersion=>{const template=productVersion.cloudFormationTemplate.bind(this);return validation_1.InputValidator.validateUrl(this.node.path,"provisioning template url",template.httpUrl),{name:productVersion.productVersionName,description:productVersion.description,disableTemplateValidation:productVersion.validateTemplate===!1,info:{LoadTemplateFromURL:template.httpUrl}}})}validateProductProps(props){if(validation_1.InputValidator.validateLength(this.node.path,"product product name",1,100,props.productName),validation_1.InputValidator.validateLength(this.node.path,"product owner",1,8191,props.owner),validation_1.InputValidator.validateLength(this.node.path,"product description",0,8191,props.description),validation_1.InputValidator.validateLength(this.node.path,"product distributor",0,8191,props.distributor),validation_1.InputValidator.validateEmail(this.node.path,"support email",props.supportEmail),validation_1.InputValidator.validateUrl(this.node.path,"support url",props.supportUrl),validation_1.InputValidator.validateLength(this.node.path,"support description",0,8191,props.supportDescription),props.productVersions.length==0)throw new Error(`Invalid product versions for resource ${this.node.path}, must contain at least 1 product version`);props.productVersions.forEach(productVersion=>{validation_1.InputValidator.validateLength(this.node.path,"provisioning artifact name",0,100,productVersion.productVersionName),validation_1.InputValidator.validateLength(this.node.path,"provisioning artifact description",0,8191,productVersion.description)})}}exports.CloudFormationProduct=CloudFormationProduct,_b=JSII_RTTI_SYMBOL_1,CloudFormationProduct[_b]={fqn:"aws-cdk-lib.aws_servicecatalog.CloudFormationProduct",version:"2.34.2"};
 //# sourceMappingURL=product.js.map