aws-cdk-lib/aws-bedrockagentcore/lib/identity/workload-identity.js

Version 2 of the AWS Cloud Development Kit library

"use strict";var __esDecorate=exports&&exports.__esDecorate||function(ctor,descriptorIn,decorators,contextIn,initializers,extraInitializers){function accept(f){if(f!==void 0&&typeof f!="function")throw new TypeError("Function expected");return f}for(var kind=contextIn.kind,key=kind==="getter"?"get":kind==="setter"?"set":"value",target=!descriptorIn&&ctor?contextIn.static?ctor:ctor.prototype:null,descriptor=descriptorIn||(target?Object.getOwnPropertyDescriptor(target,contextIn.name):{}),_,done=!1,i=decorators.length-1;i>=0;i--){var context={};for(var p in contextIn)context[p]=p==="access"?{}:contextIn[p];for(var p in contextIn.access)context.access[p]=contextIn.access[p];context.addInitializer=function(f){if(done)throw new TypeError("Cannot add initializers after decoration has completed");extraInitializers.push(accept(f||null))};var result=(0,decorators[i])(kind==="accessor"?{get:descriptor.get,set:descriptor.set}:descriptor[key],context);if(kind==="accessor"){if(result===void 0)continue;if(result===null||typeof result!="object")throw new TypeError("Object expected");(_=accept(result.get))&&(descriptor.get=_),(_=accept(result.set))&&(descriptor.set=_),(_=accept(result.init))&&initializers.unshift(_)}else(_=accept(result))&&(kind==="field"?initializers.unshift(_):descriptor[key]=_)}target&&Object.defineProperty(target,contextIn.name,descriptor),done=!0},__runInitializers=exports&&exports.__runInitializers||function(thisArg,initializers,value){for(var useValue=arguments.length>2,i=0;i<initializers.length;i++)value=useValue?initializers[i].call(thisArg,value):initializers[i].call(thisArg);return useValue?value:void 0};Object.defineProperty(exports,"__esModule",{value:!0}),exports.WorkloadIdentity=void 0;var jsiiDeprecationWarnings=()=>{var tmp=require("../../../.warnings.jsii.js");return jsiiDeprecationWarnings=()=>tmp,tmp};const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");var grant_helpers_1=()=>{var tmp=require("./grant-helpers");return grant_helpers_1=()=>tmp,tmp},perms_1=()=>{var tmp=require("./perms");return perms_1=()=>tmp,tmp},validation_helpers_1=()=>{var tmp=require("./validation-helpers");return validation_helpers_1=()=>tmp,tmp},aws_bedrockagentcore_1=()=>{var tmp=require("../../../aws-bedrockagentcore");return aws_bedrockagentcore_1=()=>tmp,tmp},iam=()=>{var tmp=require("../../../aws-iam");return iam=()=>tmp,tmp},core_1=()=>{var tmp=require("../../../core");return core_1=()=>tmp,tmp},metadata_resource_1=()=>{var tmp=require("../../../core/lib/metadata-resource");return metadata_resource_1=()=>tmp,tmp},prop_injectable_1=()=>{var tmp=require("../../../core/lib/prop-injectable");return prop_injectable_1=()=>tmp,tmp};class WorkloadIdentityBase extends core_1().Resource{grantPrincipal=new(iam()).UnknownPrincipal({resource:this});get workloadIdentityRef(){return{workloadIdentityName:this.workloadIdentityName,workloadIdentityArn:this.workloadIdentityArn}}constructor(scope,id,props){super(scope,id,props)}grant(grantee,...actions){return iam().Grant.addToPrincipal({grantee,actions,resourceArns:(0,grant_helpers_1().buildIdentityResourceArns)(this,this.workloadIdentityArn,grant_helpers_1().WORKLOAD_IDENTITY_PARENT_RESOURCES)})}grantRead(grantee){return(0,grant_helpers_1().grantReadWithList)(this,grantee,this.workloadIdentityArn,[...perms_1().WorkloadIdentityPerms.READ_PERMS],[...perms_1().WorkloadIdentityPerms.LIST_PERMS],grant_helpers_1().WORKLOAD_IDENTITY_PARENT_RESOURCES)}grantAdmin(grantee){return this.grant(grantee,...perms_1().WorkloadIdentityPerms.ADMIN_PERMS)}grantUse(grantee){return this.grant(grantee,...perms_1().WorkloadIdentityPerms.USE_PERMS)}grantFullAccess(grantee){return iam().Grant.addToPrincipal({grantee,actions:[...perms_1().WorkloadIdentityPerms.FULL_ACCESS_PERMS],resourceArns:(0,grant_helpers_1().buildIdentityResourceArns)(this,this.workloadIdentityArn,grant_helpers_1().WORKLOAD_IDENTITY_PARENT_RESOURCES)})}}let WorkloadIdentity=(()=>{let _classDecorators=[prop_injectable_1().propertyInjectable],_classDescriptor,_classExtraInitializers=[],_classThis,_classSuper=WorkloadIdentityBase;var WorkloadIdentity2=class extends _classSuper{static{_classThis=this}static{const _metadata=typeof Symbol=="function"&&Symbol.metadata?Object.create(_classSuper[Symbol.metadata]??null):void 0;__esDecorate(null,_classDescriptor={value:_classThis},_classDecorators,{kind:"class",name:_classThis.name,metadata:_metadata},null,_classExtraInitializers),WorkloadIdentity2=_classThis=_classDescriptor.value,_metadata&&Object.defineProperty(_classThis,Symbol.metadata,{enumerable:!0,configurable:!0,writable:!0,value:_metadata})}static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentity",version:"2.257.0"};static PROPERTY_INJECTION_ID="aws-cdk-lib.aws-bedrockagentcore.WorkloadIdentity";static fromWorkloadIdentityAttributes(scope,id,attrs){try{jsiiDeprecationWarnings().aws_cdk_lib_aws_bedrockagentcore_WorkloadIdentityAttributes(attrs)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,this.fromWorkloadIdentityAttributes),error}class Import extends WorkloadIdentityBase{workloadIdentityArn=attrs.workloadIdentityArn;workloadIdentityName=attrs.workloadIdentityName;createdTime=attrs.createdTime;lastUpdatedTime=attrs.lastUpdatedTime;constructor(s,i){super(s,i)}}return new Import(scope,id)}workloadIdentityArn;workloadIdentityName;_createdTime;_lastUpdatedTime;_resource;get createdTime(){return this._createdTime===void 0&&(this._createdTime=core_1().Token.asString(this._resource.attrCreatedTime)),this._createdTime}get lastUpdatedTime(){return this._lastUpdatedTime===void 0&&(this._lastUpdatedTime=core_1().Token.asString(this._resource.attrLastUpdatedTime)),this._lastUpdatedTime}constructor(scope,id,props={}){super(scope,id,{physicalName:props.workloadIdentityName??core_1().Lazy.string({produce:()=>core_1().Names.uniqueResourceName(this,{maxLength:255})})});try{jsiiDeprecationWarnings().aws_cdk_lib_aws_bedrockagentcore_WorkloadIdentityProps(props)}catch(error){throw process.env.JSII_DEBUG!=="1"&&error.name==="DeprecationError"&&Error.captureStackTrace(error,WorkloadIdentity2),error}(0,metadata_resource_1().addConstructMetadata)(this,props),this.workloadIdentityName=this.physicalName,(0,validation_helpers_1().throwIfInvalid)(validation_helpers_1().validateWorkloadIdentityName,this.workloadIdentityName,this),(0,validation_helpers_1().throwIfInvalid)(validation_helpers_1().validateAllowedResourceOauth2ReturnUrls,props.allowedResourceOauth2ReturnUrls,this),(0,validation_helpers_1().throwIfInvalid)(validation_helpers_1().validateCredentialProviderTags,props.tags,this);const cfnProps={name:this.workloadIdentityName,allowedResourceOauth2ReturnUrls:props.allowedResourceOauth2ReturnUrls,tags:props.tags&&Object.keys(props.tags).length>0?Object.entries(props.tags).map(([key,value])=>({key,value})):void 0};this._resource=new(aws_bedrockagentcore_1()).CfnWorkloadIdentity(this,"Resource",cfnProps),this.workloadIdentityArn=this._resource.attrWorkloadIdentityArn}static{__runInitializers(_classThis,_classExtraInitializers)}};return WorkloadIdentity2=_classThis})();exports.WorkloadIdentity=WorkloadIdentity;