cdk-docker-image-deployment 0.0.577 → 0.0.579

package/node_modules/@types/aws-lambda/trigger/cloudformation-custom-resource.d.ts

@@ -1,70 +1,236 @@
 import { Handler } from "../handler";
 
-// Note, responses are *not* lambda results, they are sent to the event ResponseURL.
-export type CloudFormationCustomResourceHandler = Handler<CloudFormationCustomResourceEvent, void>;
+/**
+ * Named service-defined resource properties
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-requests.html#crpg-ref-request-properties
+ */
+export interface CloudFormationCustomResourceResourcePropertiesCommon extends Record<string, any> {
+    /**
+     * The service token, such as an Amazon SNS topic ARN or Lambda function ARN. The service token must be from the same Region as the stack.
+     */
+    ServiceToken: string;
+
+    /**
+     * The maximum time, in seconds, that can elapse before a custom resource operation times out.
+     * The value must be an integer from 1 to 3600. The default value is 3600 seconds (1 hour).
+     */
+    ServiceTimeout?: string;
+}
 
-export type CloudFormationCustomResourceEvent =
-    | CloudFormationCustomResourceCreateEvent
-    | CloudFormationCustomResourceUpdateEvent
-    | CloudFormationCustomResourceDeleteEvent;
+/**
+ * Lambda handler function for a Lambda-backed CloudFormation Custom Resource
+ *
+ * NOTE: responses are *not* returned from the Lambda handler but rather they are sent to the event ResponseURL.
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
+ * @template TOldResourceProperties User-defined input properties passed to the Custom Resource as part of an `Update` invocation
+ */
+export type CloudFormationCustomResourceHandler<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+    TOldResourceProperties = TResourceProperties,
+> = Handler<CloudFormationCustomResourceEvent<TResourceProperties, TOldResourceProperties>, void>;
+
+/**
+ * Request event sent to the Lambda handler for a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-requests.html#crpg-ref-request-fields
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
+ * @template TOldResourceProperties User-defined input properties passed to the Custom Resource as part of an `Update` invocation
+ */
+export type CloudFormationCustomResourceEvent<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+    TOldResourceProperties = TResourceProperties,
+> =
+    | CloudFormationCustomResourceCreateEvent<TResourceProperties>
+    | CloudFormationCustomResourceUpdateEvent<TResourceProperties, TOldResourceProperties>
+    | CloudFormationCustomResourceDeleteEvent<TResourceProperties>;
 
-export type CloudFormationCustomResourceResponse =
-    | CloudFormationCustomResourceSuccessResponse
-    | CloudFormationCustomResourceFailedResponse;
+/**
+ * Response from a Lambda handler for a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-responses.html
+ *
+ * NOTE: responses are *not* returned from the Lambda handler but rather they are sent to the event ResponseURL.
+ * @template TData User-defined output properties that are retuned from any invocation
+ */
+export type CloudFormationCustomResourceResponse<TData extends Record<string, any> = Record<string, any>> =
+    | CloudFormationCustomResourceSuccessResponse<TData>
+    | CloudFormationCustomResourceFailedResponse<TData>;
 
 /**
- * CloudFormation Custom Resource event and response
- * http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref.html
+ * Request properties that are common to all invocations of a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-requests.html#crpg-ref-request-fields
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
  */
-export interface CloudFormationCustomResourceEventCommon {
+export interface CloudFormationCustomResourceEventCommon<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+> {
+    /**
+     * The service token, such as an Amazon SNS topic ARN or Lambda function ARN. The service token must be from the same Region as the stack.
+     */
     ServiceToken: string;
+
+    /**
+     * The response URL identifies a presigned S3 bucket that receives responses from the custom resource provider to AWS CloudFormation.
+     */
     ResponseURL: string;
+
+    /**
+     * The Amazon Resource Name (ARN) that identifies the stack that contains the custom resource.
+     * Combining the `StackId` with the `RequestId` forms a value that you can use to uniquely identify a request on a particular custom resource.
+     */
     StackId: string;
+
+    /**
+     * A unique ID for the request.
+     * Combining the `StackId` with the `RequestId` forms a value that you can use to uniquely identify a request on a particular custom resource.
+     */
     RequestId: string;
+
+    /**
+     * The template developer-chosen name (logical ID) of the custom resource in the AWS CloudFormation template. This is provided to facilitate communication between the custom resource provider and the template developer.
+     */
     LogicalResourceId: string;
+
+    /**
+     * The template developer-chosen resource type of the custom resource in the CloudFormation template. Custom resource type names can be up to 60 characters long and can include alphanumeric and the following characters: `_@-`.
+     */
     ResourceType: string;
-    ResourceProperties: {
-        ServiceToken: string;
-        [Key: string]: any;
-    };
+
+    /**
+     * This field contains the contents of the `Properties` object sent by the template developer. Its contents are defined by the custom resource provider.
+     */
+    ResourceProperties: TResourceProperties & CloudFormationCustomResourceResourcePropertiesCommon;
 }
 
-export interface CloudFormationCustomResourceCreateEvent extends CloudFormationCustomResourceEventCommon {
+/**
+ * Request properties specifically for the `Create` invocation of a Lambda-backed CloudFormation Custom Resource
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
+ */
+export interface CloudFormationCustomResourceCreateEvent<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+> extends CloudFormationCustomResourceEventCommon<TResourceProperties> {
+    /**
+     * The request type is set by the CloudFormation stack operation (create-stack, update-stack, or delete-stack) that was initiated by the template developer for the stack that contains the custom resource.
+     */
     RequestType: "Create";
 }
 
-export interface CloudFormationCustomResourceUpdateEvent extends CloudFormationCustomResourceEventCommon {
+/**
+ * Request properties specifically for the `Update` invocation of a Lambda-backed CloudFormation Custom Resource
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
+ * @template TOldResourceProperties User-defined input properties passed to the Custom Resource as part of an `Update` invocation
+ */
+export interface CloudFormationCustomResourceUpdateEvent<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+    TOldResourceProperties = TResourceProperties,
+> extends CloudFormationCustomResourceEventCommon<TResourceProperties> {
+    /**
+     * The request type is set by the CloudFormation stack operation (create-stack, update-stack, or delete-stack) that was initiated by the template developer for the stack that contains the custom resource.
+     */
     RequestType: "Update";
+
+    /**
+     * A required custom resource provider-defined physical ID that is unique for that provider.
+     * The value returned for a `PhysicalResourceId` can change custom resource update operations. If the value returned is the same, it is considered a normal update. If the value returned is different, AWS CloudFormation recognizes the update as a replacement and sends a delete request to the old resource.
+     */
     PhysicalResourceId: string;
-    OldResourceProperties: {
-        [Key: string]: any;
-    };
+
+    /**
+     * Used only for `Update` requests. Contains the resource properties that were declared previous to the update request.
+     */
+    OldResourceProperties: TOldResourceProperties;
 }
 
-export interface CloudFormationCustomResourceDeleteEvent extends CloudFormationCustomResourceEventCommon {
+/**
+ * Request properties specifically for the `Delete` invocation of a Lambda-backed CloudFormation Custom Resource
+ * @template TResourceProperties User-defined input properties passed to the Custom Resource as part of any invocation
+ */
+export interface CloudFormationCustomResourceDeleteEvent<
+    TResourceProperties = CloudFormationCustomResourceResourcePropertiesCommon,
+> extends CloudFormationCustomResourceEventCommon<TResourceProperties> {
+    /**
+     * The request type is set by the CloudFormation stack operation (create-stack, update-stack, or delete-stack) that was initiated by the template developer for the stack that contains the custom resource.
+     */
     RequestType: "Delete";
+
+    /**
+     * A required custom resource provider-defined physical ID that is unique for that provider.
+     * The value returned for a `PhysicalResourceId` can change custom resource update operations. If the value returned is the same, it is considered a normal update. If the value returned is different, AWS CloudFormation recognizes the update as a replacement and sends a delete request to the old resource.
+     */
     PhysicalResourceId: string;
 }
 
-export interface CloudFormationCustomResourceResponseCommon {
+/**
+ * Response properties that are common to all invocations of a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-responses.html
+ * @template TData User-defined output properties that are retuned from any invocation
+ */
+export interface CloudFormationCustomResourceResponseCommon<TData extends Record<string, any> = Record<string, any>> {
+    /**
+     * This value should be an identifier unique to the custom resource vendor, and can be up to 1 KB in size. The value must be a non-empty string and must be identical for all responses for the same resource.
+     * The value returned for a `PhysicalResourceId` can change custom resource update operations. If the value returned is the same, it is considered a normal update. If the value returned is different, AWS CloudFormation recognizes the update as a replacement and sends a delete request to the old resource.
+     */
     PhysicalResourceId: string;
+
+    /**
+     * The Amazon Resource Name (ARN) that identifies the stack that contains the custom resource. This response value should be copied verbatim from the request.
+     */
     StackId: string;
+
+    /**
+     * A unique ID for the request. This response value should be copied verbatim from the request.
+     */
     RequestId: string;
+
+    /**
+     * The template developer-chosen name (logical ID) of the custom resource in the AWS CloudFormation template. This response value should be copied verbatim from the request.
+     */
     LogicalResourceId: string;
-    Data?:
-        | {
-            [Key: string]: any;
-        }
-        | undefined;
+
+    /**
+     * The custom resource provider-defined name-value pairs to send with the response. You can access the values provided here by name in the template with `Fn::GetAtt`.
+     * NOTE: If the name-value pairs contain sensitive information, you should use the `NoEcho` field to mask the output of the custom resource. Otherwise, the values are visible through APIs that surface property values (such as `DescribeStackEvents`).
+     */
+    Data?: TData | undefined;
+
+    /**
+     * Indicates whether to mask the output of the custom resource when retrieved by using the `Fn::GetAtt` function. If set to `true`, all returned values are masked with asterisks (*****), __except for those stored in the `Metadata` section of the template__. AWS CloudFormation does not transform, modify, or redact any information you include in the `Metadata` section. The default value is `false`.
+     */
     NoEcho?: boolean | undefined;
 }
 
-export interface CloudFormationCustomResourceSuccessResponse extends CloudFormationCustomResourceResponseCommon {
+/**
+ * Response properties that are specifically for a response indicating succesful invocation of a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-responses.html
+ * @template TData User-defined output properties that are retuned from any invocation
+ */
+export interface CloudFormationCustomResourceSuccessResponse<TData extends Record<string, any> = Record<string, any>>
+    extends CloudFormationCustomResourceResponseCommon<TData>
+{
+    /**
+     * The status value sent by the custom resource provider in response to an AWS CloudFormation-generated request.
+     */
     Status: "SUCCESS";
+
+    /**
+     * Describes the reason for a failure response.
+     */
     Reason?: string | undefined;
 }
 
-export interface CloudFormationCustomResourceFailedResponse extends CloudFormationCustomResourceResponseCommon {
+/**
+ * Response properties that are specifically for a response indicating failed invocation of a Lambda-backed CloudFormation Custom Resource
+ * Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-responses.html
+ * @template TData User-defined output properties that are retuned from any invocation
+ */
+export interface CloudFormationCustomResourceFailedResponse<TData extends Record<string, any> = Record<string, any>>
+    extends CloudFormationCustomResourceResponseCommon<TData>
+{
+    /**
+     * The status value sent by the custom resource provider in response to an AWS CloudFormation-generated request.
+     */
     Status: "FAILED";
+
+    /**
+     * Describes the reason for a failure response.
+     */
     Reason: string;
 }

package/node_modules/@types/aws-lambda/trigger/cognito-user-pool-trigger/define-auth-challenge.d.ts

@@ -12,7 +12,7 @@ export interface DefineAuthChallengeTriggerEvent extends BaseTriggerEvent<"Defin
         clientMetadata?: StringMap | undefined;
     };
     response: {
-        challengeName: string;
+        challengeName?: string | undefined;
         failAuthentication: boolean;
         issueTokens: boolean;
     };

package/node_modules/@types/aws-lambda/trigger/transfer-family-authorizer.d.ts

@@ -15,10 +15,11 @@ export type TransferFamilyAuthorizerHandler = Handler<TransferFamilyAuthorizerEv
 /**
  * Transfer Family Authorizer Event. This is the event that will be passed to the Lambda function.
  * Event message structure can be found here: https://docs.aws.amazon.com/transfer/latest/userguide/custom-lambda-idp.html
+ * While the documentation is not explicit, for key based auth, password will be undefined
  */
 export interface TransferFamilyAuthorizerEvent {
     username: string;
-    password: string;
+    password?: string;
     protocol: "SFTP" | "FTP" | "FTPS";
     serverId: string;
     sourceIp: string;

package/node_modules/aws-sdk/README.md

@@ -64,7 +64,7 @@ require('aws-sdk/lib/maintenance_mode_message').suppress = true;
 To use the SDK in the browser, simply add the following script tag to your
 HTML pages:
 
-    <script src="https://sdk.amazonaws.com/js/aws-sdk-2.1608.0.min.js"></script>
+    <script src="https://sdk.amazonaws.com/js/aws-sdk-2.1675.0.min.js"></script>
 
 You can also build a custom browser SDK with your specified set of AWS services.
 This can allow you to reduce the SDK's size, specify different API versions of

package/node_modules/aws-sdk/apis/accessanalyzer-2019-11-01.examples.json

@@ -1,5 +1,201 @@
 {
   "version": "1.0",
   "examples": {
+    "CheckAccessNotGranted": [
+      {
+        "input": {
+          "access": [
+            {
+              "actions": [
+                "s3:PutObject"
+              ]
+            }
+          ],
+          "policyDocument": "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:GetObject\",\"Resource\":\"*\"}]}",
+          "policyType": "RESOURCE_POLICY"
+        },
+        "output": {
+          "message": "The policy document does not grant access to perform the listed actions or resources.",
+          "result": "PASS"
+        },
+        "id": "example-1",
+        "title": "Passing check. Restrictive identity policy."
+      },
+      {
+        "input": {
+          "access": [
+            {
+              "resources": [
+                "arn:aws:s3:::sensitive-bucket/*"
+              ]
+            }
+          ],
+          "policyDocument": "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::non-sensitive-bucket/*\"}]}",
+          "policyType": "RESOURCE_POLICY"
+        },
+        "output": {
+          "message": "The policy document does not grant access to perform the listed actions or resources.",
+          "result": "PASS"
+        },
+        "id": "example-2",
+        "title": "Passing check. Restrictive S3 Bucket resource policy."
+      },
+      {
+        "input": {
+          "access": [
+            {
+              "resources": [
+                "arn:aws:s3:::my-bucket/*"
+              ]
+            }
+          ],
+          "policyDocument": "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::my-bucket/*\"}]}",
+          "policyType": "RESOURCE_POLICY"
+        },
+        "output": {
+          "message": "The policy document grants access to perform one or more of the listed actions or resources.",
+          "reasons": [
+            {
+              "description": "One or more of the listed actions or resources in the statement with sid: AllowJohnDoe.",
+              "statementId": "AllowJohnDoe",
+              "statementIndex": 0
+            }
+          ],
+          "result": "FAIL"
+        },
+        "id": "example-3",
+        "title": "Failing check. Permissive S3 Bucket resource policy."
+      }
+    ],
+    "CheckNoPublicAccess": [
+      {
+        "input": {
+          "policyDocument": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Bob\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::111122223333:user/JohnDoe\"},\"Action\":[\"s3:GetObject\"]}]}",
+          "resourceType": "AWS::S3::Bucket"
+        },
+        "output": {
+          "message": "The resource policy does not grant public access for the given resource type.",
+          "result": "PASS"
+        },
+        "id": "example-1",
+        "title": "Passing check. S3 Bucket policy without public access."
+      },
+      {
+        "input": {
+          "policyDocument": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Bob\",\"Effect\":\"Allow\",\"Principal\":\"*\",\"Action\":[\"s3:GetObject\"]}]}",
+          "resourceType": "AWS::S3::Bucket"
+        },
+        "output": {
+          "message": "The resource policy grants public access for the given resource type.",
+          "reasons": [
+            {
+              "description": "Public access granted in the following statement with sid: Bob.",
+              "statementId": "Bob",
+              "statementIndex": 0
+            }
+          ],
+          "result": "FAIL"
+        },
+        "id": "example-2",
+        "title": "Failing check. S3 Bucket policy with public access."
+      }
+    ],
+    "GenerateFindingRecommendation": [
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "finding-id"
+        },
+        "output": {
+        },
+        "id": "example-1",
+        "title": "Successfully started generating finding recommendation"
+      },
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "!"
+        },
+        "id": "example-2",
+        "title": "Failed field validation for id value"
+      }
+    ],
+    "GetFindingRecommendation": [
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "finding-id",
+          "maxResults": 3,
+          "nextToken": "token"
+        },
+        "output": {
+          "completedAt": "2000-01-01T00:00:01Z",
+          "recommendationType": "UnusedPermissionRecommendation",
+          "recommendedSteps": [
+            {
+              "unusedPermissionsRecommendedStep": {
+                "existingPolicyId": "policy-id",
+                "recommendedAction": "DETACH_POLICY"
+              }
+            },
+            {
+              "unusedPermissionsRecommendedStep": {
+                "existingPolicyId": "policy-id",
+                "recommendedAction": "CREATE_POLICY",
+                "recommendedPolicy": "policy-content"
+              }
+            }
+          ],
+          "resourceArn": "arn:aws:iam::111122223333:role/test",
+          "startedAt": "2000-01-01T00:00:00Z",
+          "status": "SUCCEEDED"
+        },
+        "id": "example-1",
+        "title": "Successfully fetched finding recommendation"
+      },
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "finding-id",
+          "maxResults": 3
+        },
+        "output": {
+          "recommendationType": "UnusedPermissionRecommendation",
+          "resourceArn": "arn:aws:iam::111122223333:role/test",
+          "startedAt": "2000-01-01T00:00:00Z",
+          "status": "IN_PROGRESS"
+        },
+        "id": "example-2",
+        "title": "In progress finding recommendation"
+      },
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "finding-id",
+          "maxResults": 3
+        },
+        "output": {
+          "completedAt": "2000-01-01T00:00:01Z",
+          "error": {
+            "code": "SERVICE_ERROR",
+            "message": "Service error. Please try again."
+          },
+          "recommendationType": "UnusedPermissionRecommendation",
+          "resourceArn": "arn:aws:iam::111122223333:role/test",
+          "startedAt": "2000-01-01T00:00:00Z",
+          "status": "FAILED"
+        },
+        "id": "example-3",
+        "title": "Failed finding recommendation"
+      },
+      {
+        "input": {
+          "analyzerArn": "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
+          "id": "!"
+        },
+        "id": "example-4",
+        "title": "Failed field validation for id value"
+      }
+    ]
   }
 }