npm - aws-cdk-lib - Versions diffs - 2.51.0 → 2.51.1 - Mend

aws-cdk-lib 2.51.0 → 2.51.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (883) hide show

package/aws-iam/lib/iam.generated.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a,_b,_c,_d,_e,_f,_g,_h,_j,_k,_l,_m,_o;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnVirtualMFADevice=exports.CfnUserToGroupAddition=exports.CfnUser=exports.CfnServiceLinkedRole=exports.CfnServerCertificate=exports.CfnSAMLProvider=exports.CfnRole=exports.CfnPolicy=exports.CfnOIDCProvider=exports.CfnManagedPolicy=exports.CfnInstanceProfile=exports.CfnGroup=exports.CfnAccessKey=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnAccessKeyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("serial",cdk.validateNumber)(properties.serial)),errors.collect(cdk.propertyValidator("status",cdk.validateString)(properties.status)),errors.collect(cdk.propertyValidator("userName",cdk.requiredValidator)(properties.userName)),errors.collect(cdk.propertyValidator("userName",cdk.validateString)(properties.userName)),errors.wrap('supplied properties not correct for "CfnAccessKeyProps"')}function cfnAccessKeyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnAccessKeyPropsValidator(properties).assertSuccess(),{UserName:cdk.stringToCloudFormation(properties.userName),Serial:cdk.numberToCloudFormation(properties.serial),Status:cdk.stringToCloudFormation(properties.status)}):properties}function CfnAccessKeyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("userName","UserName",cfn_parse.FromCloudFormation.getString(properties.UserName)),ret.addPropertyResult("serial","Serial",properties.Serial!=null?cfn_parse.FromCloudFormation.getNumber(properties.Serial):void 0),ret.addPropertyResult("status","Status",properties.Status!=null?cfn_parse.FromCloudFormation.getString(properties.Status):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnAccessKey extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnAccessKey.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnAccessKeyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnAccessKey),error}cdk.requireProperty(props,"userName",this),this.attrSecretAccessKey=cdk.Token.asString(this.getAtt("SecretAccessKey")),this.userName=props.userName,this.serial=props.serial,this.status=props.status}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnAccessKeyPropsFromCloudFormation(resourceProperties),ret=new CfnAccessKey(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnAccessKey.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{userName:this.userName,serial:this.serial,status:this.status}}renderProperties(props){return cfnAccessKeyPropsToCloudFormation(props)}}exports.CfnAccessKey=CfnAccessKey,_a=JSII_RTTI_SYMBOL_1,CfnAccessKey[_a]={fqn:"aws-cdk-lib.aws_iam.CfnAccessKey",version:"2.51.0"},CfnAccessKey.CFN_RESOURCE_TYPE_NAME="AWS::IAM::AccessKey";function CfnGroupPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groupName",cdk.validateString)(properties.groupName)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnGroup_PolicyPropertyValidator))(properties.policies)),errors.wrap('supplied properties not correct for "CfnGroupProps"')}function cfnGroupPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnGroupPropsValidator(properties).assertSuccess(),{GroupName:cdk.stringToCloudFormation(properties.groupName),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),Path:cdk.stringToCloudFormation(properties.path),Policies:cdk.listMapper(cfnGroupPolicyPropertyToCloudFormation)(properties.policies)}):properties}function CfnGroupPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groupName","GroupName",properties.GroupName!=null?cfn_parse.FromCloudFormation.getString(properties.GroupName):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnGroupPolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnGroup extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnGroup.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnGroup),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.groupName=props.groupName,this.managedPolicyArns=props.managedPolicyArns,this.path=props.path,this.policies=props.policies}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnGroupPropsFromCloudFormation(resourceProperties),ret=new CfnGroup(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnGroup.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groupName:this.groupName,managedPolicyArns:this.managedPolicyArns,path:this.path,policies:this.policies}}renderProperties(props){return cfnGroupPropsToCloudFormation(props)}}exports.CfnGroup=CfnGroup,_b=JSII_RTTI_SYMBOL_1,CfnGroup[_b]={fqn:"aws-cdk-lib.aws_iam.CfnGroup",version:"2.51.0"},CfnGroup.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Group";function CfnGroup_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnGroupPolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnGroup_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnGroupPolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnInstanceProfilePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("instanceProfileName",cdk.validateString)(properties.instanceProfileName)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("roles",cdk.requiredValidator)(properties.roles)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.wrap('supplied properties not correct for "CfnInstanceProfileProps"')}function cfnInstanceProfilePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnInstanceProfilePropsValidator(properties).assertSuccess(),{Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),InstanceProfileName:cdk.stringToCloudFormation(properties.instanceProfileName),Path:cdk.stringToCloudFormation(properties.path)}):properties}function CfnInstanceProfilePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("roles","Roles",cfn_parse.FromCloudFormation.getStringArray(properties.Roles)),ret.addPropertyResult("instanceProfileName","InstanceProfileName",properties.InstanceProfileName!=null?cfn_parse.FromCloudFormation.getString(properties.InstanceProfileName):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnInstanceProfile extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnInstanceProfileProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnInstanceProfile),error}cdk.requireProperty(props,"roles",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.roles=props.roles,this.instanceProfileName=props.instanceProfileName,this.path=props.path}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnInstanceProfilePropsFromCloudFormation(resourceProperties),ret=new CfnInstanceProfile(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{roles:this.roles,instanceProfileName:this.instanceProfileName,path:this.path}}renderProperties(props){return cfnInstanceProfilePropsToCloudFormation(props)}}exports.CfnInstanceProfile=CfnInstanceProfile,_c=JSII_RTTI_SYMBOL_1,CfnInstanceProfile[_c]={fqn:"aws-cdk-lib.aws_iam.CfnInstanceProfile",version:"2.51.0"},CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME="AWS::IAM::InstanceProfile";function CfnManagedPolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("managedPolicyName",cdk.validateString)(properties.managedPolicyName)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnManagedPolicyProps"')}function cfnManagedPolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnManagedPolicyPropsValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),Description:cdk.stringToCloudFormation(properties.description),Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),ManagedPolicyName:cdk.stringToCloudFormation(properties.managedPolicyName),Path:cdk.stringToCloudFormation(properties.path),Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnManagedPolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("managedPolicyName","ManagedPolicyName",properties.ManagedPolicyName!=null?cfn_parse.FromCloudFormation.getString(properties.ManagedPolicyName):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("roles","Roles",properties.Roles!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Roles):void 0),ret.addPropertyResult("users","Users",properties.Users!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Users):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnManagedPolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnManagedPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnManagedPolicy),error}cdk.requireProperty(props,"policyDocument",this),this.policyDocument=props.policyDocument,this.description=props.description,this.groups=props.groups,this.managedPolicyName=props.managedPolicyName,this.path=props.path,this.roles=props.roles,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnManagedPolicyPropsFromCloudFormation(resourceProperties),ret=new CfnManagedPolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{policyDocument:this.policyDocument,description:this.description,groups:this.groups,managedPolicyName:this.managedPolicyName,path:this.path,roles:this.roles,users:this.users}}renderProperties(props){return cfnManagedPolicyPropsToCloudFormation(props)}}exports.CfnManagedPolicy=CfnManagedPolicy,_d=JSII_RTTI_SYMBOL_1,CfnManagedPolicy[_d]={fqn:"aws-cdk-lib.aws_iam.CfnManagedPolicy",version:"2.51.0"},CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ManagedPolicy";function CfnOIDCProviderPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("clientIdList",cdk.listValidator(cdk.validateString))(properties.clientIdList)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("thumbprintList",cdk.requiredValidator)(properties.thumbprintList)),errors.collect(cdk.propertyValidator("thumbprintList",cdk.listValidator(cdk.validateString))(properties.thumbprintList)),errors.collect(cdk.propertyValidator("url",cdk.validateString)(properties.url)),errors.wrap('supplied properties not correct for "CfnOIDCProviderProps"')}function cfnOIDCProviderPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnOIDCProviderPropsValidator(properties).assertSuccess(),{ThumbprintList:cdk.listMapper(cdk.stringToCloudFormation)(properties.thumbprintList),ClientIdList:cdk.listMapper(cdk.stringToCloudFormation)(properties.clientIdList),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),Url:cdk.stringToCloudFormation(properties.url)}):properties}function CfnOIDCProviderPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("thumbprintList","ThumbprintList",cfn_parse.FromCloudFormation.getStringArray(properties.ThumbprintList)),ret.addPropertyResult("clientIdList","ClientIdList",properties.ClientIdList!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ClientIdList):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("url","Url",properties.Url!=null?cfn_parse.FromCloudFormation.getString(properties.Url):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnOIDCProvider extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnOIDCProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnOIDCProvider),error}cdk.requireProperty(props,"thumbprintList",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.thumbprintList=props.thumbprintList,this.clientIdList=props.clientIdList,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::OIDCProvider",props.tags,{tagPropertyName:"tags"}),this.url=props.url}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnOIDCProviderPropsFromCloudFormation(resourceProperties),ret=new CfnOIDCProvider(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{thumbprintList:this.thumbprintList,clientIdList:this.clientIdList,tags:this.tags.renderTags(),url:this.url}}renderProperties(props){return cfnOIDCProviderPropsToCloudFormation(props)}}exports.CfnOIDCProvider=CfnOIDCProvider,_e=JSII_RTTI_SYMBOL_1,CfnOIDCProvider[_e]={fqn:"aws-cdk-lib.aws_iam.CfnOIDCProvider",version:"2.51.0"},CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME="AWS::IAM::OIDCProvider";function CfnPolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnPolicyProps"')}function cfnPolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnPolicyPropsValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName),Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnPolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("roles","Roles",properties.Roles!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Roles):void 0),ret.addPropertyResult("users","Users",properties.Users!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Users):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnPolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnPolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnPolicy),error}cdk.requireProperty(props,"policyDocument",this),cdk.requireProperty(props,"policyName",this),this.policyDocument=props.policyDocument,this.policyName=props.policyName,this.groups=props.groups,this.roles=props.roles,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnPolicyPropsFromCloudFormation(resourceProperties),ret=new CfnPolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnPolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{policyDocument:this.policyDocument,policyName:this.policyName,groups:this.groups,roles:this.roles,users:this.users}}renderProperties(props){return cfnPolicyPropsToCloudFormation(props)}}exports.CfnPolicy=CfnPolicy,_f=JSII_RTTI_SYMBOL_1,CfnPolicy[_f]={fqn:"aws-cdk-lib.aws_iam.CfnPolicy",version:"2.51.0"},CfnPolicy.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Policy";function CfnRolePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("assumeRolePolicyDocument",cdk.requiredValidator)(properties.assumeRolePolicyDocument)),errors.collect(cdk.propertyValidator("assumeRolePolicyDocument",cdk.validateObject)(properties.assumeRolePolicyDocument)),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("maxSessionDuration",cdk.validateNumber)(properties.maxSessionDuration)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("permissionsBoundary",cdk.validateString)(properties.permissionsBoundary)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnRole_PolicyPropertyValidator))(properties.policies)),errors.collect(cdk.propertyValidator("roleName",cdk.validateString)(properties.roleName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnRoleProps"')}function cfnRolePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRolePropsValidator(properties).assertSuccess(),{AssumeRolePolicyDocument:cdk.objectToCloudFormation(properties.assumeRolePolicyDocument),Description:cdk.stringToCloudFormation(properties.description),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),MaxSessionDuration:cdk.numberToCloudFormation(properties.maxSessionDuration),Path:cdk.stringToCloudFormation(properties.path),PermissionsBoundary:cdk.stringToCloudFormation(properties.permissionsBoundary),Policies:cdk.listMapper(cfnRolePolicyPropertyToCloudFormation)(properties.policies),RoleName:cdk.stringToCloudFormation(properties.roleName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnRolePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("assumeRolePolicyDocument","AssumeRolePolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.AssumeRolePolicyDocument)),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("maxSessionDuration","MaxSessionDuration",properties.MaxSessionDuration!=null?cfn_parse.FromCloudFormation.getNumber(properties.MaxSessionDuration):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("permissionsBoundary","PermissionsBoundary",properties.PermissionsBoundary!=null?cfn_parse.FromCloudFormation.getString(properties.PermissionsBoundary):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnRolePolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addPropertyResult("roleName","RoleName",properties.RoleName!=null?cfn_parse.FromCloudFormation.getString(properties.RoleName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnRole extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnRole.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnRole),error}cdk.requireProperty(props,"assumeRolePolicyDocument",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.attrRoleId=cdk.Token.asString(this.getAtt("RoleId")),this.assumeRolePolicyDocument=props.assumeRolePolicyDocument,this.description=props.description,this.managedPolicyArns=props.managedPolicyArns,this.maxSessionDuration=props.maxSessionDuration,this.path=props.path,this.permissionsBoundary=props.permissionsBoundary,this.policies=props.policies,this.roleName=props.roleName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::Role",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnRolePropsFromCloudFormation(resourceProperties),ret=new CfnRole(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnRole.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{assumeRolePolicyDocument:this.assumeRolePolicyDocument,description:this.description,managedPolicyArns:this.managedPolicyArns,maxSessionDuration:this.maxSessionDuration,path:this.path,permissionsBoundary:this.permissionsBoundary,policies:this.policies,roleName:this.roleName,tags:this.tags.renderTags()}}renderProperties(props){return cfnRolePropsToCloudFormation(props)}}exports.CfnRole=CfnRole,_g=JSII_RTTI_SYMBOL_1,CfnRole[_g]={fqn:"aws-cdk-lib.aws_iam.CfnRole",version:"2.51.0"},CfnRole.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Role";function CfnRole_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnRolePolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRole_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnRolePolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSAMLProviderPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("samlMetadataDocument",cdk.requiredValidator)(properties.samlMetadataDocument)),errors.collect(cdk.propertyValidator("samlMetadataDocument",cdk.validateString)(properties.samlMetadataDocument)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnSAMLProviderProps"')}function cfnSAMLProviderPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSAMLProviderPropsValidator(properties).assertSuccess(),{SamlMetadataDocument:cdk.stringToCloudFormation(properties.samlMetadataDocument),Name:cdk.stringToCloudFormation(properties.name),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnSAMLProviderPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("samlMetadataDocument","SamlMetadataDocument",cfn_parse.FromCloudFormation.getString(properties.SamlMetadataDocument)),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSAMLProvider extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnSAMLProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSAMLProvider),error}cdk.requireProperty(props,"samlMetadataDocument",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.samlMetadataDocument=props.samlMetadataDocument,this.name=props.name,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::SAMLProvider",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSAMLProviderPropsFromCloudFormation(resourceProperties),ret=new CfnSAMLProvider(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{samlMetadataDocument:this.samlMetadataDocument,name:this.name,tags:this.tags.renderTags()}}renderProperties(props){return cfnSAMLProviderPropsToCloudFormation(props)}}exports.CfnSAMLProvider=CfnSAMLProvider,_h=JSII_RTTI_SYMBOL_1,CfnSAMLProvider[_h]={fqn:"aws-cdk-lib.aws_iam.CfnSAMLProvider",version:"2.51.0"},CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME="AWS::IAM::SAMLProvider";function CfnServerCertificatePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("certificateBody",cdk.validateString)(properties.certificateBody)),errors.collect(cdk.propertyValidator("certificateChain",cdk.validateString)(properties.certificateChain)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("privateKey",cdk.validateString)(properties.privateKey)),errors.collect(cdk.propertyValidator("serverCertificateName",cdk.validateString)(properties.serverCertificateName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnServerCertificateProps"')}function cfnServerCertificatePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnServerCertificatePropsValidator(properties).assertSuccess(),{CertificateBody:cdk.stringToCloudFormation(properties.certificateBody),CertificateChain:cdk.stringToCloudFormation(properties.certificateChain),Path:cdk.stringToCloudFormation(properties.path),PrivateKey:cdk.stringToCloudFormation(properties.privateKey),ServerCertificateName:cdk.stringToCloudFormation(properties.serverCertificateName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnServerCertificatePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("certificateBody","CertificateBody",properties.CertificateBody!=null?cfn_parse.FromCloudFormation.getString(properties.CertificateBody):void 0),ret.addPropertyResult("certificateChain","CertificateChain",properties.CertificateChain!=null?cfn_parse.FromCloudFormation.getString(properties.CertificateChain):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("privateKey","PrivateKey",properties.PrivateKey!=null?cfn_parse.FromCloudFormation.getString(properties.PrivateKey):void 0),ret.addPropertyResult("serverCertificateName","ServerCertificateName",properties.ServerCertificateName!=null?cfn_parse.FromCloudFormation.getString(properties.ServerCertificateName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnServerCertificate extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnServerCertificate.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnServerCertificateProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnServerCertificate),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.certificateBody=props.certificateBody,this.certificateChain=props.certificateChain,this.path=props.path,this.privateKey=props.privateKey,this.serverCertificateName=props.serverCertificateName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::ServerCertificate",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnServerCertificatePropsFromCloudFormation(resourceProperties),ret=new CfnServerCertificate(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnServerCertificate.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{certificateBody:this.certificateBody,certificateChain:this.certificateChain,path:this.path,privateKey:this.privateKey,serverCertificateName:this.serverCertificateName,tags:this.tags.renderTags()}}renderProperties(props){return cfnServerCertificatePropsToCloudFormation(props)}}exports.CfnServerCertificate=CfnServerCertificate,_j=JSII_RTTI_SYMBOL_1,CfnServerCertificate[_j]={fqn:"aws-cdk-lib.aws_iam.CfnServerCertificate",version:"2.51.0"},CfnServerCertificate.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ServerCertificate";function CfnServiceLinkedRolePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("awsServiceName",cdk.requiredValidator)(properties.awsServiceName)),errors.collect(cdk.propertyValidator("awsServiceName",cdk.validateString)(properties.awsServiceName)),errors.collect(cdk.propertyValidator("customSuffix",cdk.validateString)(properties.customSuffix)),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.wrap('supplied properties not correct for "CfnServiceLinkedRoleProps"')}function cfnServiceLinkedRolePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnServiceLinkedRolePropsValidator(properties).assertSuccess(),{AWSServiceName:cdk.stringToCloudFormation(properties.awsServiceName),CustomSuffix:cdk.stringToCloudFormation(properties.customSuffix),Description:cdk.stringToCloudFormation(properties.description)}):properties}function CfnServiceLinkedRolePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("awsServiceName","AWSServiceName",cfn_parse.FromCloudFormation.getString(properties.AWSServiceName)),ret.addPropertyResult("customSuffix","CustomSuffix",properties.CustomSuffix!=null?cfn_parse.FromCloudFormation.getString(properties.CustomSuffix):void 0),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnServiceLinkedRole extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnServiceLinkedRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnServiceLinkedRole),error}cdk.requireProperty(props,"awsServiceName",this),this.awsServiceName=props.awsServiceName,this.customSuffix=props.customSuffix,this.description=props.description}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnServiceLinkedRolePropsFromCloudFormation(resourceProperties),ret=new CfnServiceLinkedRole(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{awsServiceName:this.awsServiceName,customSuffix:this.customSuffix,description:this.description}}renderProperties(props){return cfnServiceLinkedRolePropsToCloudFormation(props)}}exports.CfnServiceLinkedRole=CfnServiceLinkedRole,_k=JSII_RTTI_SYMBOL_1,CfnServiceLinkedRole[_k]={fqn:"aws-cdk-lib.aws_iam.CfnServiceLinkedRole",version:"2.51.0"},CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ServiceLinkedRole";function CfnUserPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("loginProfile",CfnUser_LoginProfilePropertyValidator)(properties.loginProfile)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("permissionsBoundary",cdk.validateString)(properties.permissionsBoundary)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnUser_PolicyPropertyValidator))(properties.policies)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("userName",cdk.validateString)(properties.userName)),errors.wrap('supplied properties not correct for "CfnUserProps"')}function cfnUserPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUserPropsValidator(properties).assertSuccess(),{Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),LoginProfile:cfnUserLoginProfilePropertyToCloudFormation(properties.loginProfile),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),Path:cdk.stringToCloudFormation(properties.path),PermissionsBoundary:cdk.stringToCloudFormation(properties.permissionsBoundary),Policies:cdk.listMapper(cfnUserPolicyPropertyToCloudFormation)(properties.policies),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),UserName:cdk.stringToCloudFormation(properties.userName)}):properties}function CfnUserPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("loginProfile","LoginProfile",properties.LoginProfile!=null?CfnUserLoginProfilePropertyFromCloudFormation(properties.LoginProfile):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("permissionsBoundary","PermissionsBoundary",properties.PermissionsBoundary!=null?cfn_parse.FromCloudFormation.getString(properties.PermissionsBoundary):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnUserPolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("userName","UserName",properties.UserName!=null?cfn_parse.FromCloudFormation.getString(properties.UserName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnUser extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnUser.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnUserProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnUser),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.groups=props.groups,this.loginProfile=props.loginProfile,this.managedPolicyArns=props.managedPolicyArns,this.path=props.path,this.permissionsBoundary=props.permissionsBoundary,this.policies=props.policies,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::User",props.tags,{tagPropertyName:"tags"}),this.userName=props.userName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnUserPropsFromCloudFormation(resourceProperties),ret=new CfnUser(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnUser.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groups:this.groups,loginProfile:this.loginProfile,managedPolicyArns:this.managedPolicyArns,path:this.path,permissionsBoundary:this.permissionsBoundary,policies:this.policies,tags:this.tags.renderTags(),userName:this.userName}}renderProperties(props){return cfnUserPropsToCloudFormation(props)}}exports.CfnUser=CfnUser,_l=JSII_RTTI_SYMBOL_1,CfnUser[_l]={fqn:"aws-cdk-lib.aws_iam.CfnUser",version:"2.51.0"},CfnUser.CFN_RESOURCE_TYPE_NAME="AWS::IAM::User";function CfnUser_LoginProfilePropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("password",cdk.requiredValidator)(properties.password)),errors.collect(cdk.propertyValidator("password",cdk.validateString)(properties.password)),errors.collect(cdk.propertyValidator("passwordResetRequired",cdk.validateBoolean)(properties.passwordResetRequired)),errors.wrap('supplied properties not correct for "LoginProfileProperty"')}function cfnUserLoginProfilePropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUser_LoginProfilePropertyValidator(properties).assertSuccess(),{Password:cdk.stringToCloudFormation(properties.password),PasswordResetRequired:cdk.booleanToCloudFormation(properties.passwordResetRequired)}):properties}function CfnUserLoginProfilePropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("password","Password",cfn_parse.FromCloudFormation.getString(properties.Password)),ret.addPropertyResult("passwordResetRequired","PasswordResetRequired",properties.PasswordResetRequired!=null?cfn_parse.FromCloudFormation.getBoolean(properties.PasswordResetRequired):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnUser_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnUserPolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUser_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnUserPolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnUserToGroupAdditionPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groupName",cdk.requiredValidator)(properties.groupName)),errors.collect(cdk.propertyValidator("groupName",cdk.validateString)(properties.groupName)),errors.collect(cdk.propertyValidator("users",cdk.requiredValidator)(properties.users)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnUserToGroupAdditionProps"')}function cfnUserToGroupAdditionPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUserToGroupAdditionPropsValidator(properties).assertSuccess(),{GroupName:cdk.stringToCloudFormation(properties.groupName),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnUserToGroupAdditionPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groupName","GroupName",cfn_parse.FromCloudFormation.getString(properties.GroupName)),ret.addPropertyResult("users","Users",cfn_parse.FromCloudFormation.getStringArray(properties.Users)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnUserToGroupAddition extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnUserToGroupAdditionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnUserToGroupAddition),error}cdk.requireProperty(props,"groupName",this),cdk.requireProperty(props,"users",this),this.groupName=props.groupName,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnUserToGroupAdditionPropsFromCloudFormation(resourceProperties),ret=new CfnUserToGroupAddition(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groupName:this.groupName,users:this.users}}renderProperties(props){return cfnUserToGroupAdditionPropsToCloudFormation(props)}}exports.CfnUserToGroupAddition=CfnUserToGroupAddition,_m=JSII_RTTI_SYMBOL_1,CfnUserToGroupAddition[_m]={fqn:"aws-cdk-lib.aws_iam.CfnUserToGroupAddition",version:"2.51.0"},CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME="AWS::IAM::UserToGroupAddition";function CfnVirtualMFADevicePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("users",cdk.requiredValidator)(properties.users)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.collect(cdk.propertyValidator("virtualMfaDeviceName",cdk.validateString)(properties.virtualMfaDeviceName)),errors.wrap('supplied properties not correct for "CfnVirtualMFADeviceProps"')}function cfnVirtualMFADevicePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnVirtualMFADevicePropsValidator(properties).assertSuccess(),{Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users),Path:cdk.stringToCloudFormation(properties.path),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),VirtualMfaDeviceName:cdk.stringToCloudFormation(properties.virtualMfaDeviceName)}):properties}function CfnVirtualMFADevicePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("users","Users",cfn_parse.FromCloudFormation.getStringArray(properties.Users)),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("virtualMfaDeviceName","VirtualMfaDeviceName",properties.VirtualMfaDeviceName!=null?cfn_parse.FromCloudFormation.getString(properties.VirtualMfaDeviceName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnVirtualMFADevice extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnVirtualMFADeviceProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnVirtualMFADevice),error}cdk.requireProperty(props,"users",this),this.attrSerialNumber=cdk.Token.asString(this.getAtt("SerialNumber")),this.users=props.users,this.path=props.path,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::VirtualMFADevice",props.tags,{tagPropertyName:"tags"}),this.virtualMfaDeviceName=props.virtualMfaDeviceName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnVirtualMFADevicePropsFromCloudFormation(resourceProperties),ret=new CfnVirtualMFADevice(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{users:this.users,path:this.path,tags:this.tags.renderTags(),virtualMfaDeviceName:this.virtualMfaDeviceName}}renderProperties(props){return cfnVirtualMFADevicePropsToCloudFormation(props)}}exports.CfnVirtualMFADevice=CfnVirtualMFADevice,_o=JSII_RTTI_SYMBOL_1,CfnVirtualMFADevice[_o]={fqn:"aws-cdk-lib.aws_iam.CfnVirtualMFADevice",version:"2.51.0"},CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME="AWS::IAM::VirtualMFADevice";
+"use strict";var _a,_b,_c,_d,_e,_f,_g,_h,_j,_k,_l,_m,_o;Object.defineProperty(exports,"__esModule",{value:!0}),exports.CfnVirtualMFADevice=exports.CfnUserToGroupAddition=exports.CfnUser=exports.CfnServiceLinkedRole=exports.CfnServerCertificate=exports.CfnSAMLProvider=exports.CfnRole=exports.CfnPolicy=exports.CfnOIDCProvider=exports.CfnManagedPolicy=exports.CfnInstanceProfile=exports.CfnGroup=exports.CfnAccessKey=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cfn_parse=require("../../core/lib/helpers-internal");function CfnAccessKeyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("serial",cdk.validateNumber)(properties.serial)),errors.collect(cdk.propertyValidator("status",cdk.validateString)(properties.status)),errors.collect(cdk.propertyValidator("userName",cdk.requiredValidator)(properties.userName)),errors.collect(cdk.propertyValidator("userName",cdk.validateString)(properties.userName)),errors.wrap('supplied properties not correct for "CfnAccessKeyProps"')}function cfnAccessKeyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnAccessKeyPropsValidator(properties).assertSuccess(),{UserName:cdk.stringToCloudFormation(properties.userName),Serial:cdk.numberToCloudFormation(properties.serial),Status:cdk.stringToCloudFormation(properties.status)}):properties}function CfnAccessKeyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("userName","UserName",cfn_parse.FromCloudFormation.getString(properties.UserName)),ret.addPropertyResult("serial","Serial",properties.Serial!=null?cfn_parse.FromCloudFormation.getNumber(properties.Serial):void 0),ret.addPropertyResult("status","Status",properties.Status!=null?cfn_parse.FromCloudFormation.getString(properties.Status):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnAccessKey extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnAccessKey.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnAccessKeyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnAccessKey),error}cdk.requireProperty(props,"userName",this),this.attrSecretAccessKey=cdk.Token.asString(this.getAtt("SecretAccessKey")),this.userName=props.userName,this.serial=props.serial,this.status=props.status}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnAccessKeyPropsFromCloudFormation(resourceProperties),ret=new CfnAccessKey(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnAccessKey.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{userName:this.userName,serial:this.serial,status:this.status}}renderProperties(props){return cfnAccessKeyPropsToCloudFormation(props)}}exports.CfnAccessKey=CfnAccessKey,_a=JSII_RTTI_SYMBOL_1,CfnAccessKey[_a]={fqn:"aws-cdk-lib.aws_iam.CfnAccessKey",version:"2.51.1"},CfnAccessKey.CFN_RESOURCE_TYPE_NAME="AWS::IAM::AccessKey";function CfnGroupPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groupName",cdk.validateString)(properties.groupName)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnGroup_PolicyPropertyValidator))(properties.policies)),errors.wrap('supplied properties not correct for "CfnGroupProps"')}function cfnGroupPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnGroupPropsValidator(properties).assertSuccess(),{GroupName:cdk.stringToCloudFormation(properties.groupName),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),Path:cdk.stringToCloudFormation(properties.path),Policies:cdk.listMapper(cfnGroupPolicyPropertyToCloudFormation)(properties.policies)}):properties}function CfnGroupPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groupName","GroupName",properties.GroupName!=null?cfn_parse.FromCloudFormation.getString(properties.GroupName):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnGroupPolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnGroup extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnGroup.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnGroupProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnGroup),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.groupName=props.groupName,this.managedPolicyArns=props.managedPolicyArns,this.path=props.path,this.policies=props.policies}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnGroupPropsFromCloudFormation(resourceProperties),ret=new CfnGroup(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnGroup.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groupName:this.groupName,managedPolicyArns:this.managedPolicyArns,path:this.path,policies:this.policies}}renderProperties(props){return cfnGroupPropsToCloudFormation(props)}}exports.CfnGroup=CfnGroup,_b=JSII_RTTI_SYMBOL_1,CfnGroup[_b]={fqn:"aws-cdk-lib.aws_iam.CfnGroup",version:"2.51.1"},CfnGroup.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Group";function CfnGroup_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnGroupPolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnGroup_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnGroupPolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnInstanceProfilePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("instanceProfileName",cdk.validateString)(properties.instanceProfileName)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("roles",cdk.requiredValidator)(properties.roles)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.wrap('supplied properties not correct for "CfnInstanceProfileProps"')}function cfnInstanceProfilePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnInstanceProfilePropsValidator(properties).assertSuccess(),{Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),InstanceProfileName:cdk.stringToCloudFormation(properties.instanceProfileName),Path:cdk.stringToCloudFormation(properties.path)}):properties}function CfnInstanceProfilePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("roles","Roles",cfn_parse.FromCloudFormation.getStringArray(properties.Roles)),ret.addPropertyResult("instanceProfileName","InstanceProfileName",properties.InstanceProfileName!=null?cfn_parse.FromCloudFormation.getString(properties.InstanceProfileName):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnInstanceProfile extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnInstanceProfileProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnInstanceProfile),error}cdk.requireProperty(props,"roles",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.roles=props.roles,this.instanceProfileName=props.instanceProfileName,this.path=props.path}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnInstanceProfilePropsFromCloudFormation(resourceProperties),ret=new CfnInstanceProfile(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{roles:this.roles,instanceProfileName:this.instanceProfileName,path:this.path}}renderProperties(props){return cfnInstanceProfilePropsToCloudFormation(props)}}exports.CfnInstanceProfile=CfnInstanceProfile,_c=JSII_RTTI_SYMBOL_1,CfnInstanceProfile[_c]={fqn:"aws-cdk-lib.aws_iam.CfnInstanceProfile",version:"2.51.1"},CfnInstanceProfile.CFN_RESOURCE_TYPE_NAME="AWS::IAM::InstanceProfile";function CfnManagedPolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("managedPolicyName",cdk.validateString)(properties.managedPolicyName)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnManagedPolicyProps"')}function cfnManagedPolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnManagedPolicyPropsValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),Description:cdk.stringToCloudFormation(properties.description),Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),ManagedPolicyName:cdk.stringToCloudFormation(properties.managedPolicyName),Path:cdk.stringToCloudFormation(properties.path),Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnManagedPolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("managedPolicyName","ManagedPolicyName",properties.ManagedPolicyName!=null?cfn_parse.FromCloudFormation.getString(properties.ManagedPolicyName):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("roles","Roles",properties.Roles!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Roles):void 0),ret.addPropertyResult("users","Users",properties.Users!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Users):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnManagedPolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnManagedPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnManagedPolicy),error}cdk.requireProperty(props,"policyDocument",this),this.policyDocument=props.policyDocument,this.description=props.description,this.groups=props.groups,this.managedPolicyName=props.managedPolicyName,this.path=props.path,this.roles=props.roles,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnManagedPolicyPropsFromCloudFormation(resourceProperties),ret=new CfnManagedPolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{policyDocument:this.policyDocument,description:this.description,groups:this.groups,managedPolicyName:this.managedPolicyName,path:this.path,roles:this.roles,users:this.users}}renderProperties(props){return cfnManagedPolicyPropsToCloudFormation(props)}}exports.CfnManagedPolicy=CfnManagedPolicy,_d=JSII_RTTI_SYMBOL_1,CfnManagedPolicy[_d]={fqn:"aws-cdk-lib.aws_iam.CfnManagedPolicy",version:"2.51.1"},CfnManagedPolicy.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ManagedPolicy";function CfnOIDCProviderPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("clientIdList",cdk.listValidator(cdk.validateString))(properties.clientIdList)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("thumbprintList",cdk.requiredValidator)(properties.thumbprintList)),errors.collect(cdk.propertyValidator("thumbprintList",cdk.listValidator(cdk.validateString))(properties.thumbprintList)),errors.collect(cdk.propertyValidator("url",cdk.validateString)(properties.url)),errors.wrap('supplied properties not correct for "CfnOIDCProviderProps"')}function cfnOIDCProviderPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnOIDCProviderPropsValidator(properties).assertSuccess(),{ThumbprintList:cdk.listMapper(cdk.stringToCloudFormation)(properties.thumbprintList),ClientIdList:cdk.listMapper(cdk.stringToCloudFormation)(properties.clientIdList),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),Url:cdk.stringToCloudFormation(properties.url)}):properties}function CfnOIDCProviderPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("thumbprintList","ThumbprintList",cfn_parse.FromCloudFormation.getStringArray(properties.ThumbprintList)),ret.addPropertyResult("clientIdList","ClientIdList",properties.ClientIdList!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ClientIdList):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("url","Url",properties.Url!=null?cfn_parse.FromCloudFormation.getString(properties.Url):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnOIDCProvider extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnOIDCProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnOIDCProvider),error}cdk.requireProperty(props,"thumbprintList",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.thumbprintList=props.thumbprintList,this.clientIdList=props.clientIdList,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::OIDCProvider",props.tags,{tagPropertyName:"tags"}),this.url=props.url}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnOIDCProviderPropsFromCloudFormation(resourceProperties),ret=new CfnOIDCProvider(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{thumbprintList:this.thumbprintList,clientIdList:this.clientIdList,tags:this.tags.renderTags(),url:this.url}}renderProperties(props){return cfnOIDCProviderPropsToCloudFormation(props)}}exports.CfnOIDCProvider=CfnOIDCProvider,_e=JSII_RTTI_SYMBOL_1,CfnOIDCProvider[_e]={fqn:"aws-cdk-lib.aws_iam.CfnOIDCProvider",version:"2.51.1"},CfnOIDCProvider.CFN_RESOURCE_TYPE_NAME="AWS::IAM::OIDCProvider";function CfnPolicyPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.collect(cdk.propertyValidator("roles",cdk.listValidator(cdk.validateString))(properties.roles)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnPolicyProps"')}function cfnPolicyPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnPolicyPropsValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName),Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),Roles:cdk.listMapper(cdk.stringToCloudFormation)(properties.roles),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnPolicyPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("roles","Roles",properties.Roles!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Roles):void 0),ret.addPropertyResult("users","Users",properties.Users!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Users):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnPolicy extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnPolicy.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnPolicy),error}cdk.requireProperty(props,"policyDocument",this),cdk.requireProperty(props,"policyName",this),this.policyDocument=props.policyDocument,this.policyName=props.policyName,this.groups=props.groups,this.roles=props.roles,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnPolicyPropsFromCloudFormation(resourceProperties),ret=new CfnPolicy(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnPolicy.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{policyDocument:this.policyDocument,policyName:this.policyName,groups:this.groups,roles:this.roles,users:this.users}}renderProperties(props){return cfnPolicyPropsToCloudFormation(props)}}exports.CfnPolicy=CfnPolicy,_f=JSII_RTTI_SYMBOL_1,CfnPolicy[_f]={fqn:"aws-cdk-lib.aws_iam.CfnPolicy",version:"2.51.1"},CfnPolicy.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Policy";function CfnRolePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("assumeRolePolicyDocument",cdk.requiredValidator)(properties.assumeRolePolicyDocument)),errors.collect(cdk.propertyValidator("assumeRolePolicyDocument",cdk.validateObject)(properties.assumeRolePolicyDocument)),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("maxSessionDuration",cdk.validateNumber)(properties.maxSessionDuration)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("permissionsBoundary",cdk.validateString)(properties.permissionsBoundary)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnRole_PolicyPropertyValidator))(properties.policies)),errors.collect(cdk.propertyValidator("roleName",cdk.validateString)(properties.roleName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnRoleProps"')}function cfnRolePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRolePropsValidator(properties).assertSuccess(),{AssumeRolePolicyDocument:cdk.objectToCloudFormation(properties.assumeRolePolicyDocument),Description:cdk.stringToCloudFormation(properties.description),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),MaxSessionDuration:cdk.numberToCloudFormation(properties.maxSessionDuration),Path:cdk.stringToCloudFormation(properties.path),PermissionsBoundary:cdk.stringToCloudFormation(properties.permissionsBoundary),Policies:cdk.listMapper(cfnRolePolicyPropertyToCloudFormation)(properties.policies),RoleName:cdk.stringToCloudFormation(properties.roleName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnRolePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("assumeRolePolicyDocument","AssumeRolePolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.AssumeRolePolicyDocument)),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("maxSessionDuration","MaxSessionDuration",properties.MaxSessionDuration!=null?cfn_parse.FromCloudFormation.getNumber(properties.MaxSessionDuration):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("permissionsBoundary","PermissionsBoundary",properties.PermissionsBoundary!=null?cfn_parse.FromCloudFormation.getString(properties.PermissionsBoundary):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnRolePolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addPropertyResult("roleName","RoleName",properties.RoleName!=null?cfn_parse.FromCloudFormation.getString(properties.RoleName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnRole extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnRole.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnRole),error}cdk.requireProperty(props,"assumeRolePolicyDocument",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.attrRoleId=cdk.Token.asString(this.getAtt("RoleId")),this.assumeRolePolicyDocument=props.assumeRolePolicyDocument,this.description=props.description,this.managedPolicyArns=props.managedPolicyArns,this.maxSessionDuration=props.maxSessionDuration,this.path=props.path,this.permissionsBoundary=props.permissionsBoundary,this.policies=props.policies,this.roleName=props.roleName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::Role",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnRolePropsFromCloudFormation(resourceProperties),ret=new CfnRole(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnRole.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{assumeRolePolicyDocument:this.assumeRolePolicyDocument,description:this.description,managedPolicyArns:this.managedPolicyArns,maxSessionDuration:this.maxSessionDuration,path:this.path,permissionsBoundary:this.permissionsBoundary,policies:this.policies,roleName:this.roleName,tags:this.tags.renderTags()}}renderProperties(props){return cfnRolePropsToCloudFormation(props)}}exports.CfnRole=CfnRole,_g=JSII_RTTI_SYMBOL_1,CfnRole[_g]={fqn:"aws-cdk-lib.aws_iam.CfnRole",version:"2.51.1"},CfnRole.CFN_RESOURCE_TYPE_NAME="AWS::IAM::Role";function CfnRole_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnRolePolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnRole_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnRolePolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnSAMLProviderPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("name",cdk.validateString)(properties.name)),errors.collect(cdk.propertyValidator("samlMetadataDocument",cdk.requiredValidator)(properties.samlMetadataDocument)),errors.collect(cdk.propertyValidator("samlMetadataDocument",cdk.validateString)(properties.samlMetadataDocument)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnSAMLProviderProps"')}function cfnSAMLProviderPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnSAMLProviderPropsValidator(properties).assertSuccess(),{SamlMetadataDocument:cdk.stringToCloudFormation(properties.samlMetadataDocument),Name:cdk.stringToCloudFormation(properties.name),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnSAMLProviderPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("samlMetadataDocument","SamlMetadataDocument",cfn_parse.FromCloudFormation.getString(properties.SamlMetadataDocument)),ret.addPropertyResult("name","Name",properties.Name!=null?cfn_parse.FromCloudFormation.getString(properties.Name):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnSAMLProvider extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnSAMLProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnSAMLProvider),error}cdk.requireProperty(props,"samlMetadataDocument",this),this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.samlMetadataDocument=props.samlMetadataDocument,this.name=props.name,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::SAMLProvider",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnSAMLProviderPropsFromCloudFormation(resourceProperties),ret=new CfnSAMLProvider(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{samlMetadataDocument:this.samlMetadataDocument,name:this.name,tags:this.tags.renderTags()}}renderProperties(props){return cfnSAMLProviderPropsToCloudFormation(props)}}exports.CfnSAMLProvider=CfnSAMLProvider,_h=JSII_RTTI_SYMBOL_1,CfnSAMLProvider[_h]={fqn:"aws-cdk-lib.aws_iam.CfnSAMLProvider",version:"2.51.1"},CfnSAMLProvider.CFN_RESOURCE_TYPE_NAME="AWS::IAM::SAMLProvider";function CfnServerCertificatePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("certificateBody",cdk.validateString)(properties.certificateBody)),errors.collect(cdk.propertyValidator("certificateChain",cdk.validateString)(properties.certificateChain)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("privateKey",cdk.validateString)(properties.privateKey)),errors.collect(cdk.propertyValidator("serverCertificateName",cdk.validateString)(properties.serverCertificateName)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.wrap('supplied properties not correct for "CfnServerCertificateProps"')}function cfnServerCertificatePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnServerCertificatePropsValidator(properties).assertSuccess(),{CertificateBody:cdk.stringToCloudFormation(properties.certificateBody),CertificateChain:cdk.stringToCloudFormation(properties.certificateChain),Path:cdk.stringToCloudFormation(properties.path),PrivateKey:cdk.stringToCloudFormation(properties.privateKey),ServerCertificateName:cdk.stringToCloudFormation(properties.serverCertificateName),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags)}):properties}function CfnServerCertificatePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("certificateBody","CertificateBody",properties.CertificateBody!=null?cfn_parse.FromCloudFormation.getString(properties.CertificateBody):void 0),ret.addPropertyResult("certificateChain","CertificateChain",properties.CertificateChain!=null?cfn_parse.FromCloudFormation.getString(properties.CertificateChain):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("privateKey","PrivateKey",properties.PrivateKey!=null?cfn_parse.FromCloudFormation.getString(properties.PrivateKey):void 0),ret.addPropertyResult("serverCertificateName","ServerCertificateName",properties.ServerCertificateName!=null?cfn_parse.FromCloudFormation.getString(properties.ServerCertificateName):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnServerCertificate extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnServerCertificate.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnServerCertificateProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnServerCertificate),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.certificateBody=props.certificateBody,this.certificateChain=props.certificateChain,this.path=props.path,this.privateKey=props.privateKey,this.serverCertificateName=props.serverCertificateName,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::ServerCertificate",props.tags,{tagPropertyName:"tags"})}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnServerCertificatePropsFromCloudFormation(resourceProperties),ret=new CfnServerCertificate(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnServerCertificate.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{certificateBody:this.certificateBody,certificateChain:this.certificateChain,path:this.path,privateKey:this.privateKey,serverCertificateName:this.serverCertificateName,tags:this.tags.renderTags()}}renderProperties(props){return cfnServerCertificatePropsToCloudFormation(props)}}exports.CfnServerCertificate=CfnServerCertificate,_j=JSII_RTTI_SYMBOL_1,CfnServerCertificate[_j]={fqn:"aws-cdk-lib.aws_iam.CfnServerCertificate",version:"2.51.1"},CfnServerCertificate.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ServerCertificate";function CfnServiceLinkedRolePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("awsServiceName",cdk.requiredValidator)(properties.awsServiceName)),errors.collect(cdk.propertyValidator("awsServiceName",cdk.validateString)(properties.awsServiceName)),errors.collect(cdk.propertyValidator("customSuffix",cdk.validateString)(properties.customSuffix)),errors.collect(cdk.propertyValidator("description",cdk.validateString)(properties.description)),errors.wrap('supplied properties not correct for "CfnServiceLinkedRoleProps"')}function cfnServiceLinkedRolePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnServiceLinkedRolePropsValidator(properties).assertSuccess(),{AWSServiceName:cdk.stringToCloudFormation(properties.awsServiceName),CustomSuffix:cdk.stringToCloudFormation(properties.customSuffix),Description:cdk.stringToCloudFormation(properties.description)}):properties}function CfnServiceLinkedRolePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("awsServiceName","AWSServiceName",cfn_parse.FromCloudFormation.getString(properties.AWSServiceName)),ret.addPropertyResult("customSuffix","CustomSuffix",properties.CustomSuffix!=null?cfn_parse.FromCloudFormation.getString(properties.CustomSuffix):void 0),ret.addPropertyResult("description","Description",properties.Description!=null?cfn_parse.FromCloudFormation.getString(properties.Description):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnServiceLinkedRole extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnServiceLinkedRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnServiceLinkedRole),error}cdk.requireProperty(props,"awsServiceName",this),this.awsServiceName=props.awsServiceName,this.customSuffix=props.customSuffix,this.description=props.description}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnServiceLinkedRolePropsFromCloudFormation(resourceProperties),ret=new CfnServiceLinkedRole(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{awsServiceName:this.awsServiceName,customSuffix:this.customSuffix,description:this.description}}renderProperties(props){return cfnServiceLinkedRolePropsToCloudFormation(props)}}exports.CfnServiceLinkedRole=CfnServiceLinkedRole,_k=JSII_RTTI_SYMBOL_1,CfnServiceLinkedRole[_k]={fqn:"aws-cdk-lib.aws_iam.CfnServiceLinkedRole",version:"2.51.1"},CfnServiceLinkedRole.CFN_RESOURCE_TYPE_NAME="AWS::IAM::ServiceLinkedRole";function CfnUserPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groups",cdk.listValidator(cdk.validateString))(properties.groups)),errors.collect(cdk.propertyValidator("loginProfile",CfnUser_LoginProfilePropertyValidator)(properties.loginProfile)),errors.collect(cdk.propertyValidator("managedPolicyArns",cdk.listValidator(cdk.validateString))(properties.managedPolicyArns)),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("permissionsBoundary",cdk.validateString)(properties.permissionsBoundary)),errors.collect(cdk.propertyValidator("policies",cdk.listValidator(CfnUser_PolicyPropertyValidator))(properties.policies)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("userName",cdk.validateString)(properties.userName)),errors.wrap('supplied properties not correct for "CfnUserProps"')}function cfnUserPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUserPropsValidator(properties).assertSuccess(),{Groups:cdk.listMapper(cdk.stringToCloudFormation)(properties.groups),LoginProfile:cfnUserLoginProfilePropertyToCloudFormation(properties.loginProfile),ManagedPolicyArns:cdk.listMapper(cdk.stringToCloudFormation)(properties.managedPolicyArns),Path:cdk.stringToCloudFormation(properties.path),PermissionsBoundary:cdk.stringToCloudFormation(properties.permissionsBoundary),Policies:cdk.listMapper(cfnUserPolicyPropertyToCloudFormation)(properties.policies),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),UserName:cdk.stringToCloudFormation(properties.userName)}):properties}function CfnUserPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groups","Groups",properties.Groups!=null?cfn_parse.FromCloudFormation.getStringArray(properties.Groups):void 0),ret.addPropertyResult("loginProfile","LoginProfile",properties.LoginProfile!=null?CfnUserLoginProfilePropertyFromCloudFormation(properties.LoginProfile):void 0),ret.addPropertyResult("managedPolicyArns","ManagedPolicyArns",properties.ManagedPolicyArns!=null?cfn_parse.FromCloudFormation.getStringArray(properties.ManagedPolicyArns):void 0),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("permissionsBoundary","PermissionsBoundary",properties.PermissionsBoundary!=null?cfn_parse.FromCloudFormation.getString(properties.PermissionsBoundary):void 0),ret.addPropertyResult("policies","Policies",properties.Policies!=null?cfn_parse.FromCloudFormation.getArray(CfnUserPolicyPropertyFromCloudFormation)(properties.Policies):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("userName","UserName",properties.UserName!=null?cfn_parse.FromCloudFormation.getString(properties.UserName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnUser extends cdk.CfnResource{constructor(scope,id,props={}){super(scope,id,{type:CfnUser.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnUserProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnUser),error}this.attrArn=cdk.Token.asString(this.getAtt("Arn")),this.groups=props.groups,this.loginProfile=props.loginProfile,this.managedPolicyArns=props.managedPolicyArns,this.path=props.path,this.permissionsBoundary=props.permissionsBoundary,this.policies=props.policies,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::User",props.tags,{tagPropertyName:"tags"}),this.userName=props.userName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnUserPropsFromCloudFormation(resourceProperties),ret=new CfnUser(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnUser.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groups:this.groups,loginProfile:this.loginProfile,managedPolicyArns:this.managedPolicyArns,path:this.path,permissionsBoundary:this.permissionsBoundary,policies:this.policies,tags:this.tags.renderTags(),userName:this.userName}}renderProperties(props){return cfnUserPropsToCloudFormation(props)}}exports.CfnUser=CfnUser,_l=JSII_RTTI_SYMBOL_1,CfnUser[_l]={fqn:"aws-cdk-lib.aws_iam.CfnUser",version:"2.51.1"},CfnUser.CFN_RESOURCE_TYPE_NAME="AWS::IAM::User";function CfnUser_LoginProfilePropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("password",cdk.requiredValidator)(properties.password)),errors.collect(cdk.propertyValidator("password",cdk.validateString)(properties.password)),errors.collect(cdk.propertyValidator("passwordResetRequired",cdk.validateBoolean)(properties.passwordResetRequired)),errors.wrap('supplied properties not correct for "LoginProfileProperty"')}function cfnUserLoginProfilePropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUser_LoginProfilePropertyValidator(properties).assertSuccess(),{Password:cdk.stringToCloudFormation(properties.password),PasswordResetRequired:cdk.booleanToCloudFormation(properties.passwordResetRequired)}):properties}function CfnUserLoginProfilePropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("password","Password",cfn_parse.FromCloudFormation.getString(properties.Password)),ret.addPropertyResult("passwordResetRequired","PasswordResetRequired",properties.PasswordResetRequired!=null?cfn_parse.FromCloudFormation.getBoolean(properties.PasswordResetRequired):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnUser_PolicyPropertyValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("policyDocument",cdk.requiredValidator)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyDocument",cdk.validateObject)(properties.policyDocument)),errors.collect(cdk.propertyValidator("policyName",cdk.requiredValidator)(properties.policyName)),errors.collect(cdk.propertyValidator("policyName",cdk.validateString)(properties.policyName)),errors.wrap('supplied properties not correct for "PolicyProperty"')}function cfnUserPolicyPropertyToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUser_PolicyPropertyValidator(properties).assertSuccess(),{PolicyDocument:cdk.objectToCloudFormation(properties.policyDocument),PolicyName:cdk.stringToCloudFormation(properties.policyName)}):properties}function CfnUserPolicyPropertyFromCloudFormation(properties){if(cdk.isResolvableObject(properties))return new cfn_parse.FromCloudFormationResult(properties);if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("policyDocument","PolicyDocument",cfn_parse.FromCloudFormation.getAny(properties.PolicyDocument)),ret.addPropertyResult("policyName","PolicyName",cfn_parse.FromCloudFormation.getString(properties.PolicyName)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}function CfnUserToGroupAdditionPropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("groupName",cdk.requiredValidator)(properties.groupName)),errors.collect(cdk.propertyValidator("groupName",cdk.validateString)(properties.groupName)),errors.collect(cdk.propertyValidator("users",cdk.requiredValidator)(properties.users)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.wrap('supplied properties not correct for "CfnUserToGroupAdditionProps"')}function cfnUserToGroupAdditionPropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnUserToGroupAdditionPropsValidator(properties).assertSuccess(),{GroupName:cdk.stringToCloudFormation(properties.groupName),Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users)}):properties}function CfnUserToGroupAdditionPropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("groupName","GroupName",cfn_parse.FromCloudFormation.getString(properties.GroupName)),ret.addPropertyResult("users","Users",cfn_parse.FromCloudFormation.getStringArray(properties.Users)),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnUserToGroupAddition extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnUserToGroupAdditionProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnUserToGroupAddition),error}cdk.requireProperty(props,"groupName",this),cdk.requireProperty(props,"users",this),this.groupName=props.groupName,this.users=props.users}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnUserToGroupAdditionPropsFromCloudFormation(resourceProperties),ret=new CfnUserToGroupAddition(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{groupName:this.groupName,users:this.users}}renderProperties(props){return cfnUserToGroupAdditionPropsToCloudFormation(props)}}exports.CfnUserToGroupAddition=CfnUserToGroupAddition,_m=JSII_RTTI_SYMBOL_1,CfnUserToGroupAddition[_m]={fqn:"aws-cdk-lib.aws_iam.CfnUserToGroupAddition",version:"2.51.1"},CfnUserToGroupAddition.CFN_RESOURCE_TYPE_NAME="AWS::IAM::UserToGroupAddition";function CfnVirtualMFADevicePropsValidator(properties){if(!cdk.canInspect(properties))return cdk.VALIDATION_SUCCESS;const errors=new cdk.ValidationResults;return typeof properties!="object"&&errors.collect(new cdk.ValidationResult("Expected an object, but received: "+JSON.stringify(properties))),errors.collect(cdk.propertyValidator("path",cdk.validateString)(properties.path)),errors.collect(cdk.propertyValidator("tags",cdk.listValidator(cdk.validateCfnTag))(properties.tags)),errors.collect(cdk.propertyValidator("users",cdk.requiredValidator)(properties.users)),errors.collect(cdk.propertyValidator("users",cdk.listValidator(cdk.validateString))(properties.users)),errors.collect(cdk.propertyValidator("virtualMfaDeviceName",cdk.validateString)(properties.virtualMfaDeviceName)),errors.wrap('supplied properties not correct for "CfnVirtualMFADeviceProps"')}function cfnVirtualMFADevicePropsToCloudFormation(properties){return cdk.canInspect(properties)?(CfnVirtualMFADevicePropsValidator(properties).assertSuccess(),{Users:cdk.listMapper(cdk.stringToCloudFormation)(properties.users),Path:cdk.stringToCloudFormation(properties.path),Tags:cdk.listMapper(cdk.cfnTagToCloudFormation)(properties.tags),VirtualMfaDeviceName:cdk.stringToCloudFormation(properties.virtualMfaDeviceName)}):properties}function CfnVirtualMFADevicePropsFromCloudFormation(properties){if(properties=properties??{},typeof properties!="object")return new cfn_parse.FromCloudFormationResult(properties);const ret=new cfn_parse.FromCloudFormationPropertyObject;return ret.addPropertyResult("users","Users",cfn_parse.FromCloudFormation.getStringArray(properties.Users)),ret.addPropertyResult("path","Path",properties.Path!=null?cfn_parse.FromCloudFormation.getString(properties.Path):void 0),ret.addPropertyResult("tags","Tags",properties.Tags!=null?cfn_parse.FromCloudFormation.getArray(cfn_parse.FromCloudFormation.getCfnTag)(properties.Tags):void 0),ret.addPropertyResult("virtualMfaDeviceName","VirtualMfaDeviceName",properties.VirtualMfaDeviceName!=null?cfn_parse.FromCloudFormation.getString(properties.VirtualMfaDeviceName):void 0),ret.addUnrecognizedPropertiesAsExtra(properties),ret}class CfnVirtualMFADevice extends cdk.CfnResource{constructor(scope,id,props){super(scope,id,{type:CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME,properties:props});try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_CfnVirtualMFADeviceProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,CfnVirtualMFADevice),error}cdk.requireProperty(props,"users",this),this.attrSerialNumber=cdk.Token.asString(this.getAtt("SerialNumber")),this.users=props.users,this.path=props.path,this.tags=new cdk.TagManager(cdk.TagType.STANDARD,"AWS::IAM::VirtualMFADevice",props.tags,{tagPropertyName:"tags"}),this.virtualMfaDeviceName=props.virtualMfaDeviceName}static _fromCloudFormation(scope,id,resourceAttributes,options){resourceAttributes=resourceAttributes||{};const resourceProperties=options.parser.parseValue(resourceAttributes.Properties),propsResult=CfnVirtualMFADevicePropsFromCloudFormation(resourceProperties),ret=new CfnVirtualMFADevice(scope,id,propsResult.value);for(const[propKey,propVal]of Object.entries(propsResult.extraProperties))ret.addPropertyOverride(propKey,propVal);return options.parser.handleAttributes(ret,resourceAttributes,id),ret}inspect(inspector){try{jsiiDeprecationWarnings.aws_cdk_lib_TreeInspector(inspector)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.inspect),error}inspector.addAttribute("aws:cdk:cloudformation:type",CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME),inspector.addAttribute("aws:cdk:cloudformation:props",this.cfnProperties)}get cfnProperties(){return{users:this.users,path:this.path,tags:this.tags.renderTags(),virtualMfaDeviceName:this.virtualMfaDeviceName}}renderProperties(props){return cfnVirtualMFADevicePropsToCloudFormation(props)}}exports.CfnVirtualMFADevice=CfnVirtualMFADevice,_o=JSII_RTTI_SYMBOL_1,CfnVirtualMFADevice[_o]={fqn:"aws-cdk-lib.aws_iam.CfnVirtualMFADevice",version:"2.51.1"},CfnVirtualMFADevice.CFN_RESOURCE_TYPE_NAME="AWS::IAM::VirtualMFADevice";
 //# sourceMappingURL=iam.generated.js.map

package/aws-iam/lib/lazy-role.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LazyRole=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),role_1=require("./role");class LazyRole extends cdk.Resource{constructor(scope,id,props){super(scope,id),this.props=props,this.grantPrincipal=this,this.principalAccount=this.env.account,this.assumeRoleAction="sts:AssumeRole",this.statements=new Array,this.policies=new Array,this.managedPolicies=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_LazyRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,LazyRole),error}}addToPrincipalPolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToPrincipalPolicy),error}return this.role?this.role.addToPrincipalPolicy(statement):(this.statements.push(statement),{statementAdded:!0,policyDependable:this})}addToPolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToPolicy),error}return this.addToPrincipalPolicy(statement).statementAdded}attachInlinePolicy(policy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_Policy(policy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachInlinePolicy),error}this.role?this.role.attachInlinePolicy(policy):this.policies.push(policy)}addManagedPolicy(policy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IManagedPolicy(policy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addManagedPolicy),error}this.role?this.role.addManagedPolicy(policy):this.managedPolicies.push(policy)}get roleArn(){return this.instantiate().roleArn}get roleId(){return this.instantiate().roleId}get roleName(){return this.instantiate().roleName}get policyFragment(){return this.instantiate().policyFragment}grant(identity,...actions){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grant),error}return this.instantiate().grant(identity,...actions)}grantPassRole(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantPassRole),error}return this.instantiate().grantPassRole(identity)}grantAssumeRole(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantAssumeRole),error}return this.instantiate().grantAssumeRole(identity)}instantiate(){if(!this.role){const role=new role_1.Role(this,"Default",this.props);this.statements.forEach(role.addToPolicy.bind(role)),this.policies.forEach(role.attachInlinePolicy.bind(role)),this.managedPolicies.forEach(role.addManagedPolicy.bind(role)),this.role=role}return this.role}}exports.LazyRole=LazyRole,_a=JSII_RTTI_SYMBOL_1,LazyRole[_a]={fqn:"aws-cdk-lib.aws_iam.LazyRole",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.LazyRole=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),role_1=require("./role");class LazyRole extends cdk.Resource{constructor(scope,id,props){super(scope,id),this.props=props,this.grantPrincipal=this,this.principalAccount=this.env.account,this.assumeRoleAction="sts:AssumeRole",this.statements=new Array,this.policies=new Array,this.managedPolicies=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_LazyRoleProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,LazyRole),error}}addToPrincipalPolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToPrincipalPolicy),error}return this.role?this.role.addToPrincipalPolicy(statement):(this.statements.push(statement),{statementAdded:!0,policyDependable:this})}addToPolicy(statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addToPolicy),error}return this.addToPrincipalPolicy(statement).statementAdded}attachInlinePolicy(policy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_Policy(policy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachInlinePolicy),error}this.role?this.role.attachInlinePolicy(policy):this.policies.push(policy)}addManagedPolicy(policy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IManagedPolicy(policy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addManagedPolicy),error}this.role?this.role.addManagedPolicy(policy):this.managedPolicies.push(policy)}get roleArn(){return this.instantiate().roleArn}get roleId(){return this.instantiate().roleId}get roleName(){return this.instantiate().roleName}get policyFragment(){return this.instantiate().policyFragment}grant(identity,...actions){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grant),error}return this.instantiate().grant(identity,...actions)}grantPassRole(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantPassRole),error}return this.instantiate().grantPassRole(identity)}grantAssumeRole(identity){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(identity)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.grantAssumeRole),error}return this.instantiate().grantAssumeRole(identity)}instantiate(){if(!this.role){const role=new role_1.Role(this,"Default",this.props);this.statements.forEach(role.addToPolicy.bind(role)),this.policies.forEach(role.attachInlinePolicy.bind(role)),this.managedPolicies.forEach(role.addManagedPolicy.bind(role)),this.role=role}return this.role}}exports.LazyRole=LazyRole,_a=JSII_RTTI_SYMBOL_1,LazyRole[_a]={fqn:"aws-cdk-lib.aws_iam.LazyRole",version:"2.51.1"};
 //# sourceMappingURL=lazy-role.js.map

package/aws-iam/lib/managed-policy.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ManagedPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),helpers_internal_1=require("../../core/lib/helpers-internal"),iam_generated_1=require("./iam.generated"),policy_document_1=require("./policy-document"),util_1=require("./util");class ManagedPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.managedPolicyName}),this.document=new policy_document_1.PolicyDocument,this.roles=new Array,this.users=new Array,this.groups=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_ManagedPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ManagedPolicy),error}this.description=props.description||"",this.path=props.path||"/",props.document&&(this.document=props.document);const config=helpers_internal_1.getCustomizeRolesConfig(this),_precreatedPolicy=ManagedPolicy.fromManagedPolicyName(this,"Imported"+id,id);if(this.managedPolicyName=id,this.managedPolicyArn=_precreatedPolicy.managedPolicyArn,config.enabled&&(this._precreatedPolicy=_precreatedPolicy),!config.preventSynthesis){const resource=new iam_generated_1.CfnManagedPolicy(this,"Resource",{policyDocument:this.document,managedPolicyName:this.physicalName,description:this.description,path:this.path,roles:util_1.undefinedIfEmpty(()=>this.roles.map(r=>r.roleName)),users:util_1.undefinedIfEmpty(()=>this.users.map(u=>u.userName)),groups:util_1.undefinedIfEmpty(()=>this.groups.map(g=>g.groupName))});this.managedPolicyName=this.getResourceNameAttribute(core_1.Stack.of(this).splitArn(resource.ref,core_1.ArnFormat.SLASH_RESOURCE_NAME).resourceName),this.managedPolicyArn=this.getResourceArnAttribute(resource.ref,{region:"",service:"iam",resource:"policy",resourceName:this.physicalName})}props.users&&props.users.forEach(u=>this.attachToUser(u)),props.groups&&props.groups.forEach(g=>this.attachToGroup(g)),props.roles&&props.roles.forEach(r=>this.attachToRole(r)),props.statements&&props.statements.forEach(p=>this.addStatements(p)),this.node.addValidation({validate:()=>this.validateManagedPolicy()})}static fromManagedPolicyName(scope,id,managedPolicyName){class Import extends core_1.Resource{constructor(){super(...arguments),this.managedPolicyArn=core_1.Stack.of(scope).formatArn({service:"iam",region:"",account:core_1.Stack.of(scope).account,resource:"policy",resourceName:managedPolicyName})}}return new Import(scope,id)}static fromManagedPolicyArn(scope,id,managedPolicyArn){class Import extends core_1.Resource{constructor(){super(...arguments),this.managedPolicyArn=managedPolicyArn}}return new Import(scope,id)}static fromAwsManagedPolicyName(managedPolicyName){class AwsManagedPolicy{constructor(){this.managedPolicyArn=core_1.Arn.format({partition:core_1.Aws.PARTITION,service:"iam",region:"",account:"aws",resource:"policy",resourceName:managedPolicyName})}}return new AwsManagedPolicy}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.document.addStatements(...statement)}attachToUser(user){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IUser(user)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToUser),error}this.users.find(u=>u===user)||this.users.push(user)}attachToRole(role){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IRole(role)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToRole),error}this.roles.find(r=>r===role)||this.roles.push(role)}attachToGroup(group){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGroup(group)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToGroup),error}this.groups.find(g=>g===group)||this.groups.push(group)}validateManagedPolicy(){const result=new Array;return this.document.isEmpty&&result.push("Managed Policy is empty. You must add statements to the policy"),result.push(...this.document.validateForIdentityPolicy()),result.length===0&&this._precreatedPolicy&&helpers_internal_1.PolicySynthesizer.getOrCreate(this).addManagedPolicy(this.node.path,{policyStatements:this.document.toJSON()?.Statement,roles:this.roles.map(role=>role.node.path)}),result}}exports.ManagedPolicy=ManagedPolicy,_a=JSII_RTTI_SYMBOL_1,ManagedPolicy[_a]={fqn:"aws-cdk-lib.aws_iam.ManagedPolicy",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.ManagedPolicy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),helpers_internal_1=require("../../core/lib/helpers-internal"),iam_generated_1=require("./iam.generated"),policy_document_1=require("./policy-document"),util_1=require("./util");class ManagedPolicy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.managedPolicyName}),this.document=new policy_document_1.PolicyDocument,this.roles=new Array,this.users=new Array,this.groups=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_ManagedPolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,ManagedPolicy),error}this.description=props.description||"",this.path=props.path||"/",props.document&&(this.document=props.document);const config=helpers_internal_1.getCustomizeRolesConfig(this),_precreatedPolicy=ManagedPolicy.fromManagedPolicyName(this,"Imported"+id,id);if(this.managedPolicyName=id,this.managedPolicyArn=_precreatedPolicy.managedPolicyArn,config.enabled&&(this._precreatedPolicy=_precreatedPolicy),!config.preventSynthesis){const resource=new iam_generated_1.CfnManagedPolicy(this,"Resource",{policyDocument:this.document,managedPolicyName:this.physicalName,description:this.description,path:this.path,roles:util_1.undefinedIfEmpty(()=>this.roles.map(r=>r.roleName)),users:util_1.undefinedIfEmpty(()=>this.users.map(u=>u.userName)),groups:util_1.undefinedIfEmpty(()=>this.groups.map(g=>g.groupName))});this.managedPolicyName=this.getResourceNameAttribute(core_1.Stack.of(this).splitArn(resource.ref,core_1.ArnFormat.SLASH_RESOURCE_NAME).resourceName),this.managedPolicyArn=this.getResourceArnAttribute(resource.ref,{region:"",service:"iam",resource:"policy",resourceName:this.physicalName})}props.users&&props.users.forEach(u=>this.attachToUser(u)),props.groups&&props.groups.forEach(g=>this.attachToGroup(g)),props.roles&&props.roles.forEach(r=>this.attachToRole(r)),props.statements&&props.statements.forEach(p=>this.addStatements(p)),this.node.addValidation({validate:()=>this.validateManagedPolicy()})}static fromManagedPolicyName(scope,id,managedPolicyName){class Import extends core_1.Resource{constructor(){super(...arguments),this.managedPolicyArn=core_1.Stack.of(scope).formatArn({service:"iam",region:"",account:core_1.Stack.of(scope).account,resource:"policy",resourceName:managedPolicyName})}}return new Import(scope,id)}static fromManagedPolicyArn(scope,id,managedPolicyArn){class Import extends core_1.Resource{constructor(){super(...arguments),this.managedPolicyArn=managedPolicyArn}}return new Import(scope,id)}static fromAwsManagedPolicyName(managedPolicyName){class AwsManagedPolicy{constructor(){this.managedPolicyArn=core_1.Arn.format({partition:core_1.Aws.PARTITION,service:"iam",region:"",account:"aws",resource:"policy",resourceName:managedPolicyName})}}return new AwsManagedPolicy}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.document.addStatements(...statement)}attachToUser(user){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IUser(user)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToUser),error}this.users.find(u=>u===user)||this.users.push(user)}attachToRole(role){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IRole(role)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToRole),error}this.roles.find(r=>r===role)||this.roles.push(role)}attachToGroup(group){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGroup(group)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToGroup),error}this.groups.find(g=>g===group)||this.groups.push(group)}validateManagedPolicy(){const result=new Array;return this.document.isEmpty&&result.push("Managed Policy is empty. You must add statements to the policy"),result.push(...this.document.validateForIdentityPolicy()),result.length===0&&this._precreatedPolicy&&helpers_internal_1.PolicySynthesizer.getOrCreate(this).addManagedPolicy(this.node.path,{policyStatements:this.document.toJSON()?.Statement,roles:this.roles.map(role=>role.node.path)}),result}}exports.ManagedPolicy=ManagedPolicy,_a=JSII_RTTI_SYMBOL_1,ManagedPolicy[_a]={fqn:"aws-cdk-lib.aws_iam.ManagedPolicy",version:"2.51.1"};
 //# sourceMappingURL=managed-policy.js.map

package/aws-iam/lib/oidc-provider.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OpenIdConnectProvider=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),path=require("path"),core_1=require("../../core"),RESOURCE_TYPE="Custom::AWSCDKOpenIdConnectProvider";class OpenIdConnectProvider extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_OpenIdConnectProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OpenIdConnectProvider),error}const provider=this.getOrCreateProvider(),resource=new core_1.CustomResource(this,"Resource",{resourceType:RESOURCE_TYPE,serviceToken:provider.serviceToken,properties:{ClientIDList:props.clientIds,ThumbprintList:props.thumbprints,Url:props.url,CodeHash:provider.codeHash}});this.openIdConnectProviderArn=core_1.Token.asString(resource.ref),this.openIdConnectProviderIssuer=core_1.Arn.extractResourceName(this.openIdConnectProviderArn,"oidc-provider"),this.openIdConnectProviderthumbprints=core_1.Token.asString(resource.getAtt("Thumbprints"))}static fromOpenIdConnectProviderArn(scope,id,openIdConnectProviderArn){const resourceName=core_1.Arn.extractResourceName(openIdConnectProviderArn,"oidc-provider");class Import extends core_1.Resource{constructor(){super(...arguments),this.openIdConnectProviderArn=openIdConnectProviderArn,this.openIdConnectProviderIssuer=resourceName}}return new Import(scope,id)}getOrCreateProvider(){return core_1.CustomResourceProvider.getOrCreateProvider(this,RESOURCE_TYPE,{codeDirectory:path.join(__dirname,"oidc-provider"),runtime:core_1.CustomResourceProviderRuntime.NODEJS_16_X,policyStatements:[{Effect:"Allow",Resource:"*",Action:["iam:CreateOpenIDConnectProvider","iam:DeleteOpenIDConnectProvider","iam:UpdateOpenIDConnectProviderThumbprint","iam:AddClientIDToOpenIDConnectProvider","iam:RemoveClientIDFromOpenIDConnectProvider"]}]})}}exports.OpenIdConnectProvider=OpenIdConnectProvider,_a=JSII_RTTI_SYMBOL_1,OpenIdConnectProvider[_a]={fqn:"aws-cdk-lib.aws_iam.OpenIdConnectProvider",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.OpenIdConnectProvider=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),path=require("path"),core_1=require("../../core"),RESOURCE_TYPE="Custom::AWSCDKOpenIdConnectProvider";class OpenIdConnectProvider extends core_1.Resource{constructor(scope,id,props){super(scope,id);try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_OpenIdConnectProviderProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,OpenIdConnectProvider),error}const provider=this.getOrCreateProvider(),resource=new core_1.CustomResource(this,"Resource",{resourceType:RESOURCE_TYPE,serviceToken:provider.serviceToken,properties:{ClientIDList:props.clientIds,ThumbprintList:props.thumbprints,Url:props.url,CodeHash:provider.codeHash}});this.openIdConnectProviderArn=core_1.Token.asString(resource.ref),this.openIdConnectProviderIssuer=core_1.Arn.extractResourceName(this.openIdConnectProviderArn,"oidc-provider"),this.openIdConnectProviderthumbprints=core_1.Token.asString(resource.getAtt("Thumbprints"))}static fromOpenIdConnectProviderArn(scope,id,openIdConnectProviderArn){const resourceName=core_1.Arn.extractResourceName(openIdConnectProviderArn,"oidc-provider");class Import extends core_1.Resource{constructor(){super(...arguments),this.openIdConnectProviderArn=openIdConnectProviderArn,this.openIdConnectProviderIssuer=resourceName}}return new Import(scope,id)}getOrCreateProvider(){return core_1.CustomResourceProvider.getOrCreateProvider(this,RESOURCE_TYPE,{codeDirectory:path.join(__dirname,"oidc-provider"),runtime:core_1.CustomResourceProviderRuntime.NODEJS_16_X,policyStatements:[{Effect:"Allow",Resource:"*",Action:["iam:CreateOpenIDConnectProvider","iam:DeleteOpenIDConnectProvider","iam:UpdateOpenIDConnectProviderThumbprint","iam:AddClientIDToOpenIDConnectProvider","iam:RemoveClientIDFromOpenIDConnectProvider"]}]})}}exports.OpenIdConnectProvider=OpenIdConnectProvider,_a=JSII_RTTI_SYMBOL_1,OpenIdConnectProvider[_a]={fqn:"aws-cdk-lib.aws_iam.OpenIdConnectProvider",version:"2.51.1"};
 //# sourceMappingURL=oidc-provider.js.map

package/aws-iam/lib/permissions-boundary.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PermissionsBoundary=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),iam_generated_1=require("./iam.generated");class PermissionsBoundary{constructor(scope){this.scope=scope}static of(scope){return new PermissionsBoundary(scope)}apply(boundaryPolicy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IManagedPolicy(boundaryPolicy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.apply),error}core_1.Aspects.of(this.scope).add({visit(node){core_1.CfnResource.isCfnResource(node)&&(node.cfnResourceType==iam_generated_1.CfnRole.CFN_RESOURCE_TYPE_NAME||node.cfnResourceType==iam_generated_1.CfnUser.CFN_RESOURCE_TYPE_NAME)&&node.addPropertyOverride("PermissionsBoundary",boundaryPolicy.managedPolicyArn)}})}clear(){core_1.Aspects.of(this.scope).add({visit(node){core_1.CfnResource.isCfnResource(node)&&(node.cfnResourceType==iam_generated_1.CfnRole.CFN_RESOURCE_TYPE_NAME||node.cfnResourceType==iam_generated_1.CfnUser.CFN_RESOURCE_TYPE_NAME)&&node.addPropertyDeletionOverride("PermissionsBoundary")}})}}exports.PermissionsBoundary=PermissionsBoundary,_a=JSII_RTTI_SYMBOL_1,PermissionsBoundary[_a]={fqn:"aws-cdk-lib.aws_iam.PermissionsBoundary",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PermissionsBoundary=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),iam_generated_1=require("./iam.generated");class PermissionsBoundary{constructor(scope){this.scope=scope}static of(scope){return new PermissionsBoundary(scope)}apply(boundaryPolicy){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IManagedPolicy(boundaryPolicy)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.apply),error}core_1.Aspects.of(this.scope).add({visit(node){core_1.CfnResource.isCfnResource(node)&&(node.cfnResourceType==iam_generated_1.CfnRole.CFN_RESOURCE_TYPE_NAME||node.cfnResourceType==iam_generated_1.CfnUser.CFN_RESOURCE_TYPE_NAME)&&node.addPropertyOverride("PermissionsBoundary",boundaryPolicy.managedPolicyArn)}})}clear(){core_1.Aspects.of(this.scope).add({visit(node){core_1.CfnResource.isCfnResource(node)&&(node.cfnResourceType==iam_generated_1.CfnRole.CFN_RESOURCE_TYPE_NAME||node.cfnResourceType==iam_generated_1.CfnUser.CFN_RESOURCE_TYPE_NAME)&&node.addPropertyDeletionOverride("PermissionsBoundary")}})}}exports.PermissionsBoundary=PermissionsBoundary,_a=JSII_RTTI_SYMBOL_1,PermissionsBoundary[_a]={fqn:"aws-cdk-lib.aws_iam.PermissionsBoundary",version:"2.51.1"};
 //# sourceMappingURL=permissions-boundary.js.map

package/aws-iam/lib/policy-document.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PolicyDocument=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cxapi=require("../../cx-api"),policy_statement_1=require("./policy-statement"),merge_statements_1=require("./private/merge-statements"),postprocess_policy_document_1=require("./private/postprocess-policy-document");class PolicyDocument{constructor(props={}){this.statements=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyDocumentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,PolicyDocument),error}this.creationStack=cdk.captureStackTrace(),this.autoAssignSids=!!props.assignSids,this.minimize=props.minimize,this.addStatements(...props.statements||[])}static fromJson(obj){const newPolicyDocument=new PolicyDocument,statement=obj.Statement??[];if(statement&&!Array.isArray(statement))throw new Error("Statement must be an array");return newPolicyDocument.addStatements(...obj.Statement.map(s=>policy_statement_1.PolicyStatement.fromJson(s))),newPolicyDocument}resolve(context){try{jsiiDeprecationWarnings.aws_cdk_lib_IResolveContext(context)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.resolve),error}this.freezeStatements(),this._maybeMergeStatements(context.scope);const sort=this.shouldMerge(context.scope);return context.registerPostProcessor(new postprocess_policy_document_1.PostProcessPolicyDocument(this.autoAssignSids,sort)),this.render()}get isEmpty(){return this.statements.length===0}get statementCount(){return this.statements.length}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.statements.push(...statement)}toString(){return cdk.Token.asString(this,{displayHint:"PolicyDocument"})}toJSON(){return this.render()}validateForAnyPolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForAnyPolicy());return errors}validateForResourcePolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForResourcePolicy());return errors}validateForIdentityPolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForIdentityPolicy());return errors}_maybeMergeStatements(scope){if(this.shouldMerge(scope)){const result=merge_statements_1.mergeStatements(this.statements,{scope});this.statements.splice(0,this.statements.length,...result.mergedStatements)}}_splitDocument(scope,selfMaximumSize,splitMaximumSize){const self=this,newDocs=[];this.freezeStatements();let statementsToOriginals=new Map(this.statements.map(s=>[s,[s]]));const doActualMerging=this.shouldMerge(scope),result=merge_statements_1.mergeStatements(this.statements,{scope,limitSize:!0,mergeIfCombinable:doActualMerging});this.statements.splice(0,this.statements.length,...result.mergedStatements),statementsToOriginals=result.originsMap;const sizeOptions=policy_statement_1.deriveEstimateSizeOptions(scope),statementSizes=new Map(this.statements.map(s=>[s,s._estimateSize(sizeOptions)]));let selfSize=0;const polSizes=new Map,polSize=x=>polSizes.get(x)??0;let i=0;for(;i<this.statements.length;){const statement=this.statements[i],statementSize=statementSizes.get(statement)??0;if(selfSize+statementSize<selfMaximumSize){selfSize+=statementSize,i++;continue}const addToDoc=findDocWithSpace(statementSize);addToDoc.addStatements(statement),polSizes.set(addToDoc,polSize(addToDoc)+statementSize),this.statements.splice(i,1)}const ret=new Map;ret.set(this,this.statements.flatMap(s=>statementsToOriginals.get(s)??[s]));for(const newDoc of newDocs)ret.set(newDoc,newDoc.statements.flatMap(s=>statementsToOriginals.get(s)??[s]));return ret;function findDocWithSpace(size){let j=0;for(;j<newDocs.length&&polSize(newDocs[j])+size>splitMaximumSize;)j++;if(j<newDocs.length)return newDocs[j];const newDoc=new PolicyDocument({assignSids:self.autoAssignSids,minimize:self.minimize});return newDocs.push(newDoc),newDoc}}render(){return this.isEmpty?void 0:{Statement:this.statements.map(s=>s.toStatementJson()),Version:"2012-10-17"}}shouldMerge(scope){return this.minimize??cdk.FeatureFlags.of(scope).isEnabled(cxapi.IAM_MINIMIZE_POLICIES)??!1}freezeStatements(){for(const statement of this.statements)statement.freeze()}}exports.PolicyDocument=PolicyDocument,_a=JSII_RTTI_SYMBOL_1,PolicyDocument[_a]={fqn:"aws-cdk-lib.aws_iam.PolicyDocument",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.PolicyDocument=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),cxapi=require("../../cx-api"),policy_statement_1=require("./policy-statement"),merge_statements_1=require("./private/merge-statements"),postprocess_policy_document_1=require("./private/postprocess-policy-document");class PolicyDocument{constructor(props={}){this.statements=new Array;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyDocumentProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,PolicyDocument),error}this.creationStack=cdk.captureStackTrace(),this.autoAssignSids=!!props.assignSids,this.minimize=props.minimize,this.addStatements(...props.statements||[])}static fromJson(obj){const newPolicyDocument=new PolicyDocument,statement=obj.Statement??[];if(statement&&!Array.isArray(statement))throw new Error("Statement must be an array");return newPolicyDocument.addStatements(...obj.Statement.map(s=>policy_statement_1.PolicyStatement.fromJson(s))),newPolicyDocument}resolve(context){try{jsiiDeprecationWarnings.aws_cdk_lib_IResolveContext(context)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.resolve),error}this.freezeStatements(),this._maybeMergeStatements(context.scope);const sort=this.shouldMerge(context.scope);return context.registerPostProcessor(new postprocess_policy_document_1.PostProcessPolicyDocument(this.autoAssignSids,sort)),this.render()}get isEmpty(){return this.statements.length===0}get statementCount(){return this.statements.length}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.statements.push(...statement)}toString(){return cdk.Token.asString(this,{displayHint:"PolicyDocument"})}toJSON(){return this.render()}validateForAnyPolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForAnyPolicy());return errors}validateForResourcePolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForResourcePolicy());return errors}validateForIdentityPolicy(){const errors=new Array;for(const statement of this.statements)errors.push(...statement.validateForIdentityPolicy());return errors}_maybeMergeStatements(scope){if(this.shouldMerge(scope)){const result=merge_statements_1.mergeStatements(this.statements,{scope});this.statements.splice(0,this.statements.length,...result.mergedStatements)}}_splitDocument(scope,selfMaximumSize,splitMaximumSize){const self=this,newDocs=[];this.freezeStatements();let statementsToOriginals=new Map(this.statements.map(s=>[s,[s]]));const doActualMerging=this.shouldMerge(scope),result=merge_statements_1.mergeStatements(this.statements,{scope,limitSize:!0,mergeIfCombinable:doActualMerging});this.statements.splice(0,this.statements.length,...result.mergedStatements),statementsToOriginals=result.originsMap;const sizeOptions=policy_statement_1.deriveEstimateSizeOptions(scope),statementSizes=new Map(this.statements.map(s=>[s,s._estimateSize(sizeOptions)]));let selfSize=0;const polSizes=new Map,polSize=x=>polSizes.get(x)??0;let i=0;for(;i<this.statements.length;){const statement=this.statements[i],statementSize=statementSizes.get(statement)??0;if(selfSize+statementSize<selfMaximumSize){selfSize+=statementSize,i++;continue}const addToDoc=findDocWithSpace(statementSize);addToDoc.addStatements(statement),polSizes.set(addToDoc,polSize(addToDoc)+statementSize),this.statements.splice(i,1)}const ret=new Map;ret.set(this,this.statements.flatMap(s=>statementsToOriginals.get(s)??[s]));for(const newDoc of newDocs)ret.set(newDoc,newDoc.statements.flatMap(s=>statementsToOriginals.get(s)??[s]));return ret;function findDocWithSpace(size){let j=0;for(;j<newDocs.length&&polSize(newDocs[j])+size>splitMaximumSize;)j++;if(j<newDocs.length)return newDocs[j];const newDoc=new PolicyDocument({assignSids:self.autoAssignSids,minimize:self.minimize});return newDocs.push(newDoc),newDoc}}render(){return this.isEmpty?void 0:{Statement:this.statements.map(s=>s.toStatementJson()),Version:"2012-10-17"}}shouldMerge(scope){return this.minimize??cdk.FeatureFlags.of(scope).isEnabled(cxapi.IAM_MINIMIZE_POLICIES)??!1}freezeStatements(){for(const statement of this.statements)statement.freeze()}}exports.PolicyDocument=PolicyDocument,_a=JSII_RTTI_SYMBOL_1,PolicyDocument[_a]={fqn:"aws-cdk-lib.aws_iam.PolicyDocument",version:"2.51.1"};
 //# sourceMappingURL=policy-document.js.map

package/aws-iam/lib/policy-statement.js CHANGED Viewed

@@ -1,3 +1,3 @@
 "use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.deriveEstimateSizeOptions=exports.Effect=exports.PolicyStatement=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),cdk=require("../../core"),group_1=require("./group"),principals_1=require("./principals"),postprocess_policy_document_1=require("./private/postprocess-policy-document"),util_1=require("./util"),ensureArrayOrUndefined=field=>{if(field!==void 0){if(typeof field!="string"&&!Array.isArray(field))throw new Error("Fields must be either a string or an array of strings");if(Array.isArray(field)&&!!field.find(f=>typeof f!="string"))throw new Error("Fields must be either a string or an array of strings");return Array.isArray(field)?field:[field]}},DEFAULT_ARN_SIZE_ESTIMATE=150,ARN_SIZE_ESTIMATE_CONTEXT_KEY="@aws-cdk/aws-iam.arnSizeEstimate";class PolicyStatement{constructor(props={}){this._action=new OrderedSet,this._notAction=new OrderedSet,this._principal={},this._notPrincipal={},this._resource=new OrderedSet,this._notResource=new OrderedSet,this._condition={},this._principals=new OrderedSet,this._notPrincipals=new OrderedSet,this._frozen=!1;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatementProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,PolicyStatement),error}this._sid=props.sid,this._effect=props.effect||Effect.ALLOW,this.addActions(...props.actions||[]),this.addNotActions(...props.notActions||[]),this.addPrincipals(...props.principals||[]),this.addNotPrincipals(...props.notPrincipals||[]),this.addResources(...props.resources||[]),this.addNotResources(...props.notResources||[]),props.conditions!==void 0&&this.addConditions(props.conditions)}static fromJson(obj){const ret=new PolicyStatement({sid:obj.Sid,actions:ensureArrayOrUndefined(obj.Action),resources:ensureArrayOrUndefined(obj.Resource),conditions:obj.Condition,effect:obj.Effect,notActions:ensureArrayOrUndefined(obj.NotAction),notResources:ensureArrayOrUndefined(obj.NotResource),principals:obj.Principal?[new JsonPrincipal(obj.Principal)]:void 0,notPrincipals:obj.NotPrincipal?[new JsonPrincipal(obj.NotPrincipal)]:void 0}),errors=ret.validateForAnyPolicy();if(errors.length>0)throw new Error("Incorrect Policy Statement: "+errors.join(`
-`));return ret}get sid(){return this._sid}set sid(sid){this.assertNotFrozen("sid"),this._sid=sid}get effect(){return this._effect}set effect(effect){this.assertNotFrozen("effect"),this._effect=effect}addActions(...actions){if(this.assertNotFrozen("addActions"),actions.length>0&&this._notAction.length>0)throw new Error("Cannot add 'Actions' to policy statement if 'NotActions' have been added");this.validatePolicyActions(actions),this._action.push(...actions)}addNotActions(...notActions){if(this.assertNotFrozen("addNotActions"),notActions.length>0&&this._action.length>0)throw new Error("Cannot add 'NotActions' to policy statement if 'Actions' have been added");this.validatePolicyActions(notActions),this._notAction.push(...notActions)}get hasPrincipal(){return this._principals.length+this._notPrincipals.length>0}addPrincipals(...principals){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(principals)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addPrincipals),error}if(this.assertNotFrozen("addPrincipals"),principals.length>0&&this._notPrincipals.length>0)throw new Error("Cannot add 'Principals' to policy statement if 'NotPrincipals' have been added");for(const principal of principals)this.validatePolicyPrincipal(principal);const added=this._principals.push(...principals);for(const principal of added){const fragment=principal.policyFragment;util_1.mergePrincipal(this._principal,fragment.principalJson),this.addPrincipalConditions(fragment.conditions)}}addNotPrincipals(...notPrincipals){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(notPrincipals)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addNotPrincipals),error}if(this.assertNotFrozen("addNotPrincipals"),notPrincipals.length>0&&this._principals.length>0)throw new Error("Cannot add 'NotPrincipals' to policy statement if 'Principals' have been added");for(const notPrincipal of notPrincipals)this.validatePolicyPrincipal(notPrincipal);const added=this._notPrincipals.push(...notPrincipals);for(const notPrincipal of added){const fragment=notPrincipal.policyFragment;util_1.mergePrincipal(this._notPrincipal,fragment.principalJson),this.addPrincipalConditions(fragment.conditions)}}validatePolicyActions(actions){if(!cdk.Token.isUnresolved(actions)){for(const action of actions||[])if(!cdk.Token.isUnresolved(action)&&!/^(\*|[a-zA-Z0-9-]+:[a-zA-Z0-9*]+)$/.test(action))throw new Error(`Action '${action}' is invalid. An action string consists of a service namespace, a colon, and the name of an action. Action names can include wildcards.`)}}validatePolicyPrincipal(principal){if(principal instanceof group_1.Group)throw new Error("Cannot use an IAM Group as the 'Principal' or 'NotPrincipal' in an IAM Policy")}addAwsAccountPrincipal(accountId){this.addPrincipals(new principals_1.AccountPrincipal(accountId))}addArnPrincipal(arn){this.addPrincipals(new principals_1.ArnPrincipal(arn))}addServicePrincipal(service,opts){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_ServicePrincipalOpts(opts)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addServicePrincipal),error}this.addPrincipals(new principals_1.ServicePrincipal(service,opts))}addFederatedPrincipal(federated,conditions){this.addPrincipals(new principals_1.FederatedPrincipal(federated,conditions))}addAccountRootPrincipal(){this.addPrincipals(new principals_1.AccountRootPrincipal)}addCanonicalUserPrincipal(canonicalUserId){this.addPrincipals(new principals_1.CanonicalUserPrincipal(canonicalUserId))}addAnyPrincipal(){this.addPrincipals(new principals_1.AnyPrincipal)}addResources(...arns){if(this.assertNotFrozen("addResources"),arns.length>0&&this._notResource.length>0)throw new Error("Cannot add 'Resources' to policy statement if 'NotResources' have been added");this._resource.push(...arns)}addNotResources(...arns){if(this.assertNotFrozen("addNotResources"),arns.length>0&&this._resource.length>0)throw new Error("Cannot add 'NotResources' to policy statement if 'Resources' have been added");this._notResource.push(...arns)}addAllResources(){this.addResources("*")}get hasResource(){return this._resource&&this._resource.length>0}addCondition(key,value){this.assertNotFrozen("addCondition"),principals_1.validateConditionObject(value);const existingValue=this._condition[key];this._condition[key]=existingValue?{...existingValue,...value}:value}addConditions(conditions){Object.keys(conditions).map(key=>{this.addCondition(key,conditions[key])})}addAccountCondition(accountId){this.addCondition("StringEquals",{"sts:ExternalId":accountId})}copy(overrides={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatementProps(overrides)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.copy),error}return new PolicyStatement({sid:overrides.sid??this.sid,effect:overrides.effect??this.effect,actions:overrides.actions??this.actions,notActions:overrides.notActions??this.notActions,principals:overrides.principals??this.principals,notPrincipals:overrides.notPrincipals??this.notPrincipals,resources:overrides.resources??this.resources,notResources:overrides.notResources??this.notResources,conditions:overrides.conditions??this.conditions})}toStatementJson(){return postprocess_policy_document_1.normalizeStatement({Action:this._action.direct(),NotAction:this._notAction.direct(),Condition:this._condition,Effect:this.effect,Principal:this._principal,NotPrincipal:this._notPrincipal,Resource:this._resource.direct(),NotResource:this._notResource.direct(),Sid:this.sid})}toString(){return cdk.Token.asString(this,{displayHint:"PolicyStatement"})}toJSON(){return this.toStatementJson()}addPrincipalConditions(conditions){const theseConditions=JSON.stringify(conditions);if(this.principalConditionsJson===void 0)this.principalConditionsJson=theseConditions;else if(this.principalConditionsJson!==theseConditions)throw new Error(`All principals in a PolicyStatement must have the same Conditions (got '${this.principalConditionsJson}' and '${theseConditions}'). Use multiple statements instead.`);this.addConditions(conditions)}validateForAnyPolicy(){const errors=new Array;return this._action.length===0&&this._notAction.length===0&&errors.push("A PolicyStatement must specify at least one 'action' or 'notAction'."),errors}validateForResourcePolicy(){const errors=this.validateForAnyPolicy();return this._principals.length===0&&this._notPrincipals.length===0&&errors.push("A PolicyStatement used in a resource-based policy must specify at least one IAM principal."),errors}validateForIdentityPolicy(){const errors=this.validateForAnyPolicy();return(this._principals.length>0||this._notPrincipals.length>0)&&errors.push("A PolicyStatement used in an identity-based policy cannot specify any IAM principals."),this._resource.length===0&&this._notResource.length===0&&errors.push("A PolicyStatement used in an identity-based policy must specify at least one resource."),errors}get actions(){return this._action.copy()}get notActions(){return this._notAction.copy()}get principals(){return this._principals.copy()}get notPrincipals(){return this._notPrincipals.copy()}get resources(){return this._resource.copy()}get notResources(){return this._notResource.copy()}get conditions(){return{...this._condition}}freeze(){return this._frozen=!0,this}get frozen(){return this._frozen}_estimateSize(options){let ret=0;const{actionEstimate,arnEstimate}=options;return ret+=`"Effect": "${this.effect}",`.length,count("Action",this.actions,actionEstimate),count("NotAction",this.notActions,actionEstimate),count("Resource",this.resources,arnEstimate),count("NotResource",this.notResources,arnEstimate),ret+=this.principals.length*arnEstimate,ret+=this.notPrincipals.length*arnEstimate,ret+=JSON.stringify(this.conditions).length,ret;function count(key,values,tokenSize){values.length>0&&(ret+=key.length+5+util_1.sum(values.map(v=>(cdk.Token.isUnresolved(v)?tokenSize:v.length)+3)))}}assertNotFrozen(method){if(this._frozen)throw new Error(`${method}: freeze() has been called on this PolicyStatement previously, so it can no longer be modified`)}}exports.PolicyStatement=PolicyStatement,_a=JSII_RTTI_SYMBOL_1,PolicyStatement[_a]={fqn:"aws-cdk-lib.aws_iam.PolicyStatement",version:"2.51.0"};var Effect;(function(Effect2){Effect2.ALLOW="Allow",Effect2.DENY="Deny"})(Effect=exports.Effect||(exports.Effect={}));class JsonPrincipal extends principals_1.PrincipalBase{constructor(json={}){if(super(),typeof json=="string"&&(json={[util_1.LITERAL_STRING_KEY]:[json]}),typeof json!="object")throw new Error(`JSON IAM principal should be an object, got ${JSON.stringify(json)}`);this.policyFragment={principalJson:json,conditions:{}}}dedupeString(){return JSON.stringify(this.policyFragment)}}function deriveEstimateSizeOptions(scope){const arnEstimate=scope.node.tryGetContext(ARN_SIZE_ESTIMATE_CONTEXT_KEY)??DEFAULT_ARN_SIZE_ESTIMATE;if(typeof arnEstimate!="number")throw new Error(`Context value ${ARN_SIZE_ESTIMATE_CONTEXT_KEY} should be a number, got ${JSON.stringify(arnEstimate)}`);return{actionEstimate:20,arnEstimate}}exports.deriveEstimateSizeOptions=deriveEstimateSizeOptions;class OrderedSet{constructor(){this.set=new Set,this.array=new Array}push(...xs){const ret=new Array;for(const x of xs)this.set.has(x)||(this.set.add(x),this.array.push(x),ret.push(x));return ret}get length(){return this.array.length}copy(){return[...this.array]}direct(){return this.array}}
+`));return ret}get sid(){return this._sid}set sid(sid){this.assertNotFrozen("sid"),this._sid=sid}get effect(){return this._effect}set effect(effect){this.assertNotFrozen("effect"),this._effect=effect}addActions(...actions){if(this.assertNotFrozen("addActions"),actions.length>0&&this._notAction.length>0)throw new Error("Cannot add 'Actions' to policy statement if 'NotActions' have been added");this.validatePolicyActions(actions),this._action.push(...actions)}addNotActions(...notActions){if(this.assertNotFrozen("addNotActions"),notActions.length>0&&this._action.length>0)throw new Error("Cannot add 'NotActions' to policy statement if 'Actions' have been added");this.validatePolicyActions(notActions),this._notAction.push(...notActions)}get hasPrincipal(){return this._principals.length+this._notPrincipals.length>0}addPrincipals(...principals){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(principals)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addPrincipals),error}if(this.assertNotFrozen("addPrincipals"),principals.length>0&&this._notPrincipals.length>0)throw new Error("Cannot add 'Principals' to policy statement if 'NotPrincipals' have been added");for(const principal of principals)this.validatePolicyPrincipal(principal);const added=this._principals.push(...principals);for(const principal of added){const fragment=principal.policyFragment;util_1.mergePrincipal(this._principal,fragment.principalJson),this.addPrincipalConditions(fragment.conditions)}}addNotPrincipals(...notPrincipals){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IPrincipal(notPrincipals)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addNotPrincipals),error}if(this.assertNotFrozen("addNotPrincipals"),notPrincipals.length>0&&this._principals.length>0)throw new Error("Cannot add 'NotPrincipals' to policy statement if 'Principals' have been added");for(const notPrincipal of notPrincipals)this.validatePolicyPrincipal(notPrincipal);const added=this._notPrincipals.push(...notPrincipals);for(const notPrincipal of added){const fragment=notPrincipal.policyFragment;util_1.mergePrincipal(this._notPrincipal,fragment.principalJson),this.addPrincipalConditions(fragment.conditions)}}validatePolicyActions(actions){if(!cdk.Token.isUnresolved(actions)){for(const action of actions||[])if(!cdk.Token.isUnresolved(action)&&!/^(\*|[a-zA-Z0-9-]+:[a-zA-Z0-9*]+)$/.test(action))throw new Error(`Action '${action}' is invalid. An action string consists of a service namespace, a colon, and the name of an action. Action names can include wildcards.`)}}validatePolicyPrincipal(principal){if(principal instanceof group_1.Group)throw new Error("Cannot use an IAM Group as the 'Principal' or 'NotPrincipal' in an IAM Policy")}addAwsAccountPrincipal(accountId){this.addPrincipals(new principals_1.AccountPrincipal(accountId))}addArnPrincipal(arn){this.addPrincipals(new principals_1.ArnPrincipal(arn))}addServicePrincipal(service,opts){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_ServicePrincipalOpts(opts)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addServicePrincipal),error}this.addPrincipals(new principals_1.ServicePrincipal(service,opts))}addFederatedPrincipal(federated,conditions){this.addPrincipals(new principals_1.FederatedPrincipal(federated,conditions))}addAccountRootPrincipal(){this.addPrincipals(new principals_1.AccountRootPrincipal)}addCanonicalUserPrincipal(canonicalUserId){this.addPrincipals(new principals_1.CanonicalUserPrincipal(canonicalUserId))}addAnyPrincipal(){this.addPrincipals(new principals_1.AnyPrincipal)}addResources(...arns){if(this.assertNotFrozen("addResources"),arns.length>0&&this._notResource.length>0)throw new Error("Cannot add 'Resources' to policy statement if 'NotResources' have been added");this._resource.push(...arns)}addNotResources(...arns){if(this.assertNotFrozen("addNotResources"),arns.length>0&&this._resource.length>0)throw new Error("Cannot add 'NotResources' to policy statement if 'Resources' have been added");this._notResource.push(...arns)}addAllResources(){this.addResources("*")}get hasResource(){return this._resource&&this._resource.length>0}addCondition(key,value){this.assertNotFrozen("addCondition"),principals_1.validateConditionObject(value);const existingValue=this._condition[key];this._condition[key]=existingValue?{...existingValue,...value}:value}addConditions(conditions){Object.keys(conditions).map(key=>{this.addCondition(key,conditions[key])})}addAccountCondition(accountId){this.addCondition("StringEquals",{"sts:ExternalId":accountId})}copy(overrides={}){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatementProps(overrides)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.copy),error}return new PolicyStatement({sid:overrides.sid??this.sid,effect:overrides.effect??this.effect,actions:overrides.actions??this.actions,notActions:overrides.notActions??this.notActions,principals:overrides.principals??this.principals,notPrincipals:overrides.notPrincipals??this.notPrincipals,resources:overrides.resources??this.resources,notResources:overrides.notResources??this.notResources,conditions:overrides.conditions??this.conditions})}toStatementJson(){return postprocess_policy_document_1.normalizeStatement({Action:this._action.direct(),NotAction:this._notAction.direct(),Condition:this._condition,Effect:this.effect,Principal:this._principal,NotPrincipal:this._notPrincipal,Resource:this._resource.direct(),NotResource:this._notResource.direct(),Sid:this.sid})}toString(){return cdk.Token.asString(this,{displayHint:"PolicyStatement"})}toJSON(){return this.toStatementJson()}addPrincipalConditions(conditions){const theseConditions=JSON.stringify(conditions);if(this.principalConditionsJson===void 0)this.principalConditionsJson=theseConditions;else if(this.principalConditionsJson!==theseConditions)throw new Error(`All principals in a PolicyStatement must have the same Conditions (got '${this.principalConditionsJson}' and '${theseConditions}'). Use multiple statements instead.`);this.addConditions(conditions)}validateForAnyPolicy(){const errors=new Array;return this._action.length===0&&this._notAction.length===0&&errors.push("A PolicyStatement must specify at least one 'action' or 'notAction'."),errors}validateForResourcePolicy(){const errors=this.validateForAnyPolicy();return this._principals.length===0&&this._notPrincipals.length===0&&errors.push("A PolicyStatement used in a resource-based policy must specify at least one IAM principal."),errors}validateForIdentityPolicy(){const errors=this.validateForAnyPolicy();return(this._principals.length>0||this._notPrincipals.length>0)&&errors.push("A PolicyStatement used in an identity-based policy cannot specify any IAM principals."),this._resource.length===0&&this._notResource.length===0&&errors.push("A PolicyStatement used in an identity-based policy must specify at least one resource."),errors}get actions(){return this._action.copy()}get notActions(){return this._notAction.copy()}get principals(){return this._principals.copy()}get notPrincipals(){return this._notPrincipals.copy()}get resources(){return this._resource.copy()}get notResources(){return this._notResource.copy()}get conditions(){return{...this._condition}}freeze(){return this._frozen=!0,this}get frozen(){return this._frozen}_estimateSize(options){let ret=0;const{actionEstimate,arnEstimate}=options;return ret+=`"Effect": "${this.effect}",`.length,count("Action",this.actions,actionEstimate),count("NotAction",this.notActions,actionEstimate),count("Resource",this.resources,arnEstimate),count("NotResource",this.notResources,arnEstimate),ret+=this.principals.length*arnEstimate,ret+=this.notPrincipals.length*arnEstimate,ret+=JSON.stringify(this.conditions).length,ret;function count(key,values,tokenSize){values.length>0&&(ret+=key.length+5+util_1.sum(values.map(v=>(cdk.Token.isUnresolved(v)?tokenSize:v.length)+3)))}}assertNotFrozen(method){if(this._frozen)throw new Error(`${method}: freeze() has been called on this PolicyStatement previously, so it can no longer be modified`)}}exports.PolicyStatement=PolicyStatement,_a=JSII_RTTI_SYMBOL_1,PolicyStatement[_a]={fqn:"aws-cdk-lib.aws_iam.PolicyStatement",version:"2.51.1"};var Effect;(function(Effect2){Effect2.ALLOW="Allow",Effect2.DENY="Deny"})(Effect=exports.Effect||(exports.Effect={}));class JsonPrincipal extends principals_1.PrincipalBase{constructor(json={}){if(super(),typeof json=="string"&&(json={[util_1.LITERAL_STRING_KEY]:[json]}),typeof json!="object")throw new Error(`JSON IAM principal should be an object, got ${JSON.stringify(json)}`);this.policyFragment={principalJson:json,conditions:{}}}dedupeString(){return JSON.stringify(this.policyFragment)}}function deriveEstimateSizeOptions(scope){const arnEstimate=scope.node.tryGetContext(ARN_SIZE_ESTIMATE_CONTEXT_KEY)??DEFAULT_ARN_SIZE_ESTIMATE;if(typeof arnEstimate!="number")throw new Error(`Context value ${ARN_SIZE_ESTIMATE_CONTEXT_KEY} should be a number, got ${JSON.stringify(arnEstimate)}`);return{actionEstimate:20,arnEstimate}}exports.deriveEstimateSizeOptions=deriveEstimateSizeOptions;class OrderedSet{constructor(){this.set=new Set,this.array=new Array}push(...xs){const ret=new Array;for(const x of xs)this.set.has(x)||(this.set.add(x),this.array.push(x),ret.push(x));return ret}get length(){return this.array.length}copy(){return[...this.array]}direct(){return this.array}}
 //# sourceMappingURL=policy-statement.js.map

package/aws-iam/lib/policy.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.Policy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),iam_generated_1=require("./iam.generated"),policy_document_1=require("./policy-document"),util_1=require("./util");class Policy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.policyName||core_1.Lazy.string({produce:()=>util_1.generatePolicyName(scope,resource.logicalId)})}),this.document=new policy_document_1.PolicyDocument,this.roles=new Array,this.users=new Array,this.groups=new Array,this.referenceTaken=!1;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Policy),error}const self=this;class CfnPolicyConditional extends iam_generated_1.CfnPolicy{shouldSynthesize(){return self.force||self.referenceTaken||!self.document.isEmpty&&self.isAttached}}props.document&&(this.document=props.document);const resource=new CfnPolicyConditional(this,"Resource",{policyDocument:this.document,policyName:this.physicalName,roles:util_1.undefinedIfEmpty(()=>this.roles.map(r=>r.roleName)),users:util_1.undefinedIfEmpty(()=>this.users.map(u=>u.userName)),groups:util_1.undefinedIfEmpty(()=>this.groups.map(g=>g.groupName))});this._policyName=this.physicalName,this.force=props.force??!1,props.users&&props.users.forEach(u=>this.attachToUser(u)),props.groups&&props.groups.forEach(g=>this.attachToGroup(g)),props.roles&&props.roles.forEach(r=>this.attachToRole(r)),props.statements&&props.statements.forEach(p=>this.addStatements(p)),this.node.addValidation({validate:()=>this.validatePolicy()})}static fromPolicyName(scope,id,policyName){class Import extends core_1.Resource{constructor(){super(...arguments),this.policyName=policyName}}return new Import(scope,id)}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.document.addStatements(...statement)}attachToUser(user){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IUser(user)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToUser),error}this.users.find(u=>u===user)||(this.users.push(user),user.attachInlinePolicy(this))}attachToRole(role){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IRole(role)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToRole),error}this.roles.find(r=>r===role)||(this.roles.push(role),role.attachInlinePolicy(this))}attachToGroup(group){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGroup(group)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToGroup),error}this.groups.find(g=>g===group)||(this.groups.push(group),group.attachInlinePolicy(this))}get policyName(){return this.referenceTaken=!0,this._policyName}validatePolicy(){const result=new Array;return this.document.isEmpty&&(this.force&&result.push("Policy created with force=true is empty. You must add statements to the policy"),!this.force&&this.referenceTaken&&result.push("This Policy has been referenced by a resource, so it must contain at least one statement.")),this.isAttached||(this.force&&result.push("Policy created with force=true must be attached to at least one principal: user, group or role"),!this.force&&this.referenceTaken&&result.push("This Policy has been referenced by a resource, so it must be attached to at least one user, group or role.")),result.push(...this.document.validateForIdentityPolicy()),result}get isAttached(){return this.groups.length+this.users.length+this.roles.length>0}}exports.Policy=Policy,_a=JSII_RTTI_SYMBOL_1,Policy[_a]={fqn:"aws-cdk-lib.aws_iam.Policy",version:"2.51.0"};
+"use strict";var _a;Object.defineProperty(exports,"__esModule",{value:!0}),exports.Policy=void 0;const jsiiDeprecationWarnings=require("../../.warnings.jsii.js"),JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti"),core_1=require("../../core"),iam_generated_1=require("./iam.generated"),policy_document_1=require("./policy-document"),util_1=require("./util");class Policy extends core_1.Resource{constructor(scope,id,props={}){super(scope,id,{physicalName:props.policyName||core_1.Lazy.string({produce:()=>util_1.generatePolicyName(scope,resource.logicalId)})}),this.document=new policy_document_1.PolicyDocument,this.roles=new Array,this.users=new Array,this.groups=new Array,this.referenceTaken=!1;try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,Policy),error}const self=this;class CfnPolicyConditional extends iam_generated_1.CfnPolicy{shouldSynthesize(){return self.force||self.referenceTaken||!self.document.isEmpty&&self.isAttached}}props.document&&(this.document=props.document);const resource=new CfnPolicyConditional(this,"Resource",{policyDocument:this.document,policyName:this.physicalName,roles:util_1.undefinedIfEmpty(()=>this.roles.map(r=>r.roleName)),users:util_1.undefinedIfEmpty(()=>this.users.map(u=>u.userName)),groups:util_1.undefinedIfEmpty(()=>this.groups.map(g=>g.groupName))});this._policyName=this.physicalName,this.force=props.force??!1,props.users&&props.users.forEach(u=>this.attachToUser(u)),props.groups&&props.groups.forEach(g=>this.attachToGroup(g)),props.roles&&props.roles.forEach(r=>this.attachToRole(r)),props.statements&&props.statements.forEach(p=>this.addStatements(p)),this.node.addValidation({validate:()=>this.validatePolicy()})}static fromPolicyName(scope,id,policyName){class Import extends core_1.Resource{constructor(){super(...arguments),this.policyName=policyName}}return new Import(scope,id)}addStatements(...statement){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_PolicyStatement(statement)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.addStatements),error}this.document.addStatements(...statement)}attachToUser(user){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IUser(user)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToUser),error}this.users.find(u=>u===user)||(this.users.push(user),user.attachInlinePolicy(this))}attachToRole(role){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IRole(role)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToRole),error}this.roles.find(r=>r===role)||(this.roles.push(role),role.attachInlinePolicy(this))}attachToGroup(group){try{jsiiDeprecationWarnings.aws_cdk_lib_aws_iam_IGroup(group)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.attachToGroup),error}this.groups.find(g=>g===group)||(this.groups.push(group),group.attachInlinePolicy(this))}get policyName(){return this.referenceTaken=!0,this._policyName}validatePolicy(){const result=new Array;return this.document.isEmpty&&(this.force&&result.push("Policy created with force=true is empty. You must add statements to the policy"),!this.force&&this.referenceTaken&&result.push("This Policy has been referenced by a resource, so it must contain at least one statement.")),this.isAttached||(this.force&&result.push("Policy created with force=true must be attached to at least one principal: user, group or role"),!this.force&&this.referenceTaken&&result.push("This Policy has been referenced by a resource, so it must be attached to at least one user, group or role.")),result.push(...this.document.validateForIdentityPolicy()),result}get isAttached(){return this.groups.length+this.users.length+this.roles.length>0}}exports.Policy=Policy,_a=JSII_RTTI_SYMBOL_1,Policy[_a]={fqn:"aws-cdk-lib.aws_iam.Policy",version:"2.51.1"};
 //# sourceMappingURL=policy.js.map