serverless-kms-alias 2.1.0 → 2.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/README.md +2 -4
- package/dist/index.js +11 -9
- package/dist/types/index.js +1 -2
- package/package.json +1 -1
- package/src/index.ts +11 -9
- package/src/types/KmsAliasSettings.ts +1 -1
- package/src/types/ServerlessInstance.ts +0 -6
- package/src/types/index.ts +0 -1
- package/dist/types/ServerlessOptions.js +0 -3
- package/src/types/ServerlessOptions.ts +0 -3
package/CHANGELOG.md
CHANGED
package/README.md
CHANGED
|
@@ -45,7 +45,7 @@ functions:
|
|
|
45
45
|
kmsKeyArn: '${kms:arn:aws:kms:${aws:region}:${aws:accountId}:alias/aws/lambda}'
|
|
46
46
|
```
|
|
47
47
|
|
|
48
|
-
### Example -
|
|
48
|
+
### Example - Disable the plugin
|
|
49
49
|
|
|
50
50
|
```yaml
|
|
51
51
|
service: foo
|
|
@@ -58,9 +58,7 @@ plugins:
|
|
|
58
58
|
|
|
59
59
|
custom:
|
|
60
60
|
kmsAlias:
|
|
61
|
-
|
|
62
|
-
# list of stages for which the plugin should be enabled
|
|
63
|
-
- production
|
|
61
|
+
enabled: false
|
|
64
62
|
|
|
65
63
|
functions:
|
|
66
64
|
foo:
|
package/dist/index.js
CHANGED
|
@@ -1,25 +1,27 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
const client_kms_1 = require("@aws-sdk/client-kms");
|
|
3
3
|
class KmsAliasPlugin {
|
|
4
|
-
constructor(serverless
|
|
4
|
+
constructor(serverless) {
|
|
5
5
|
this.configurationVariablesSources = {
|
|
6
6
|
kms: {
|
|
7
7
|
async resolve({ address }) {
|
|
8
8
|
if (!/^(alias\/[a-zA-Z]|arn:aws:kms:[\w-]*:[\d]*:alias)/i.test(address)) {
|
|
9
9
|
throw new Error(`Expected variable in the form of 'kms:alias/foo'`);
|
|
10
10
|
}
|
|
11
|
-
if (serverless.service?.custom?.kmsAlias?.
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
if (!
|
|
15
|
-
serverless.cli.log(`Info: KMS Alias plugin not enabled
|
|
11
|
+
if (serverless.service?.custom?.kmsAlias?.enabled != null) {
|
|
12
|
+
try {
|
|
13
|
+
const isEnabled = serverless.service.custom.kmsAlias.enabled ? Boolean(JSON.parse(`${serverless.service.custom.kmsAlias.enabled}`.toLowerCase())) : false;
|
|
14
|
+
if (!isEnabled) {
|
|
15
|
+
serverless.cli.log(`Info: KMS Alias plugin not enabled`);
|
|
16
16
|
return {
|
|
17
17
|
value: address,
|
|
18
18
|
};
|
|
19
19
|
}
|
|
20
20
|
}
|
|
21
|
-
|
|
22
|
-
|
|
21
|
+
catch (ex) {
|
|
22
|
+
throw new Error(`Unable to get enabled configuration for kms alias.`, {
|
|
23
|
+
cause: ex,
|
|
24
|
+
});
|
|
23
25
|
}
|
|
24
26
|
}
|
|
25
27
|
serverless.cli.log(`Info: Fetching KMS key for alias: ${address}`);
|
|
@@ -48,4 +50,4 @@ class KmsAliasPlugin {
|
|
|
48
50
|
}
|
|
49
51
|
}
|
|
50
52
|
module.exports = KmsAliasPlugin;
|
|
51
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
53
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBLG9EQUFvRTtBQWtCcEUsTUFBTSxjQUFjO0lBR2xCLFlBQW1CLFVBQThCO1FBQy9DLElBQUksQ0FBQyw2QkFBNkIsR0FBRztZQUNuQyxHQUFHLEVBQUU7Z0JBQ0gsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFLE9BQU8sRUFBaUI7b0JBQ3RDLElBQUksQ0FBQyxvREFBb0QsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLEVBQUU7d0JBQ3ZFLE1BQU0sSUFBSSxLQUFLLENBQUMsa0RBQWtELENBQUMsQ0FBQztxQkFDckU7b0JBRUQsSUFBSSxVQUFVLENBQUMsT0FBTyxFQUFFLE1BQU0sRUFBRSxRQUFRLEVBQUUsT0FBTyxJQUFJLElBQUksRUFBRTt3QkFDekQsSUFBSTs0QkFDRixNQUFNLFNBQVMsR0FBRyxVQUFVLENBQUMsT0FBTyxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLFVBQVUsQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxXQUFXLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQzs0QkFDMUosSUFBSSxDQUFDLFNBQVMsRUFBRTtnQ0FDZCxVQUFVLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxvQ0FBb0MsQ0FBQyxDQUFDO2dDQUN6RCxPQUFPO29DQUNMLEtBQUssRUFBRSxPQUFPO2lDQUNmLENBQUM7NkJBQ0g7eUJBQ0Y7d0JBQUMsT0FBTyxFQUFFLEVBQUU7NEJBQ1gsTUFBTSxJQUFJLEtBQUssQ0FBQyxvREFBb0QsRUFBRTtnQ0FDcEUsS0FBSyxFQUFFLEVBQUU7NkJBQ1YsQ0FBQyxDQUFDO3lCQUNKO3FCQUNGO29CQUVELFVBQVUsQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLHFDQUFxQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO29CQUVuRSxNQUFNLE1BQU0sR0FBRyxJQUFJLHNCQUFTLENBQUM7d0JBQzNCLEdBQUcsVUFBVSxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsY0FBYyxFQUFFO3dCQUM1QyxNQUFNLEVBQUUsVUFBVSxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsU0FBUyxFQUFFO3FCQUM3QyxDQUFDLENBQUM7b0JBQ0gsTUFBTSxPQUFPLEdBQUcsSUFBSSwrQkFBa0IsQ0FBQzt3QkFDckMsS0FBSyxFQUFFLE9BQU87cUJBQ2YsQ0FBQyxDQUFDO29CQUNILE1BQU0sUUFBUSxHQUFHLE1BQU0sTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQztvQkFFNUMsTUFBTSxXQUFXLEdBQUcsUUFBUSxDQUFDLFdBQVcsQ0FBQztvQkFFekMsSUFBSSxDQUFDLFdBQVcsRUFBRTt3QkFDaEIsTUFBTSxJQUFJLEtBQUssQ0FBQyw2Q0FBNkMsT0FBTyxFQUFFLENBQUMsQ0FBQztxQkFDekU7b0JBRUQsSUFBSSxDQUFDLFdBQVcsQ0FBQyxHQUFHLEVBQUU7d0JBQ3BCLE1BQU0sSUFBSSxLQUFLLENBQUMsMENBQTBDLE9BQU8sRUFBRSxDQUFDLENBQUM7cUJBQ3RFO29CQUVELFVBQVUsQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLGtDQUFrQyxPQUFPLE1BQU0sV0FBVyxDQUFDLEdBQUcsRUFBRSxDQUFDLENBQUM7b0JBRXJGLE9BQU87d0JBQ0wsS0FBSyxFQUFFLFdBQVcsQ0FBQyxHQUFHO3FCQUN2QixDQUFDO2dCQUNKLENBQUM7YUFDRjtTQUNGLENBQUM7SUFDSixDQUFDO0NBQ0Y7QUFFRCxpQkFBUyxjQUFjLENBQUMifQ==
|
package/dist/types/index.js
CHANGED
|
@@ -16,5 +16,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
16
16
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
17
|
__exportStar(require("./KmsAliasSettings"), exports);
|
|
18
18
|
__exportStar(require("./ServerlessInstance"), exports);
|
|
19
|
-
|
|
20
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdHlwZXMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHFEQUFtQztBQUNuQyx1REFBcUM7QUFDckMsc0RBQW9DIn0=
|
|
19
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdHlwZXMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHFEQUFtQztBQUNuQyx1REFBcUMifQ==
|
package/package.json
CHANGED
package/src/index.ts
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { DescribeKeyCommand, KMSClient } from '@aws-sdk/client-kms';
|
|
2
2
|
|
|
3
|
-
import type { ServerlessInstance
|
|
3
|
+
import type { ServerlessInstance } from './types';
|
|
4
4
|
|
|
5
5
|
interface ResolveParams {
|
|
6
6
|
address: string;
|
|
@@ -19,7 +19,7 @@ interface ServerlessVariableSource {
|
|
|
19
19
|
class KmsAliasPlugin {
|
|
20
20
|
public configurationVariablesSources: Record<string, ServerlessVariableSource>;
|
|
21
21
|
|
|
22
|
-
public constructor(serverless: ServerlessInstance
|
|
22
|
+
public constructor(serverless: ServerlessInstance) {
|
|
23
23
|
this.configurationVariablesSources = {
|
|
24
24
|
kms: {
|
|
25
25
|
async resolve({ address }: ResolveParams): Promise<ResolveResult> {
|
|
@@ -27,17 +27,19 @@ class KmsAliasPlugin {
|
|
|
27
27
|
throw new Error(`Expected variable in the form of 'kms:alias/foo'`);
|
|
28
28
|
}
|
|
29
29
|
|
|
30
|
-
if (serverless.service?.custom?.kmsAlias?.
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
if (!
|
|
34
|
-
serverless.cli.log(`Info: KMS Alias plugin not enabled
|
|
30
|
+
if (serverless.service?.custom?.kmsAlias?.enabled != null) {
|
|
31
|
+
try {
|
|
32
|
+
const isEnabled = serverless.service.custom.kmsAlias.enabled ? Boolean(JSON.parse(`${serverless.service.custom.kmsAlias.enabled}`.toLowerCase())) : false;
|
|
33
|
+
if (!isEnabled) {
|
|
34
|
+
serverless.cli.log(`Info: KMS Alias plugin not enabled`);
|
|
35
35
|
return {
|
|
36
36
|
value: address,
|
|
37
37
|
};
|
|
38
38
|
}
|
|
39
|
-
}
|
|
40
|
-
|
|
39
|
+
} catch (ex) {
|
|
40
|
+
throw new Error(`Unable to get enabled configuration for kms alias.`, {
|
|
41
|
+
cause: ex,
|
|
42
|
+
});
|
|
41
43
|
}
|
|
42
44
|
}
|
|
43
45
|
|
|
@@ -3,9 +3,6 @@ import type { AwsAuthInputConfig } from '@aws-sdk/middleware-signing/dist-types/
|
|
|
3
3
|
import type { KmsAliasSettings } from './KmsAliasSettings';
|
|
4
4
|
|
|
5
5
|
export interface ServerlessInstance {
|
|
6
|
-
config?: {
|
|
7
|
-
stage?: string;
|
|
8
|
-
};
|
|
9
6
|
providers: {
|
|
10
7
|
aws: {
|
|
11
8
|
getCredentials(): AwsAuthInputConfig['credentials'];
|
|
@@ -13,9 +10,6 @@ export interface ServerlessInstance {
|
|
|
13
10
|
};
|
|
14
11
|
};
|
|
15
12
|
service: {
|
|
16
|
-
provider: {
|
|
17
|
-
stage?: string;
|
|
18
|
-
};
|
|
19
13
|
custom: {
|
|
20
14
|
kmsAlias?: KmsAliasSettings;
|
|
21
15
|
};
|
package/src/types/index.ts
CHANGED
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiU2VydmVybGVzc09wdGlvbnMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdHlwZXMvU2VydmVybGVzc09wdGlvbnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9
|