Skip to content

Commit

Permalink
Merge pull request #212 from stackql/dev
Browse files Browse the repository at this point in the history
updated `awscc` provider
  • Loading branch information
jeffreyaven authored Mar 14, 2024
2 parents bc1a5ea + 89e9c85 commit 14eb83c
Show file tree
Hide file tree
Showing 214 changed files with 1,803 additions and 23 deletions.
17 changes: 17 additions & 0 deletions docs/signing-and-verification.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,4 +52,21 @@ Some more context and sample code can be drawn from:
2. We will use the indicated `Ed25519` signing algorithm.
3. We will couple (2) with a code signing pattern inclusive of chain of trust, similar in nature to [this](https://www.digicert.com/signing/code-signing-certificates#Code-Signing).

### Practicalities

It is possible retrospectively regenerate certificates manually (requires `faketime`):

```bash

signing/Ed25519/setup/re-generate-faketime.sh

```

Easiest thing is edit this script to reflect desired window start datetime. Of course, you will need to possess key material and ensure it is in expected location per script.

Then, simply copy the output from `signing/Ed25519/setup/out/stackql-cert.pem` to both:

- `signing/Ed25519/app/edcrypto/embeddedcerts/signingcerts/stackql-signing-bundle.pem`.
- `signing/Ed25519/app/edcrypto/embeddedcerts/stackql-root-cert-bundle.pem`.

Following this, need to propogate a new version of this module through the toolchain.
2 changes: 2 additions & 0 deletions providers/src/awscc/v00.00.00000/services/accessanalyzer.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -186,6 +186,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AnalyzerName') as analyzer_name,
JSON_EXTRACT(Properties, '$.ArchiveRules') as archive_rules,
JSON_EXTRACT(Properties, '$.Arn') as arn,
Expand All @@ -200,6 +201,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AnalyzerName') as analyzer_name,
json_extract_path_text(Properties, 'ArchiveRules') as archive_rules,
json_extract_path_text(Properties, 'Arn') as arn,
Expand Down
8 changes: 8 additions & 0 deletions providers/src/awscc/v00.00.00000/services/acmpca.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -646,6 +646,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.ApiPassthrough') as api_passthrough,
JSON_EXTRACT(Properties, '$.CertificateAuthorityArn') as certificate_authority_arn,
JSON_EXTRACT(Properties, '$.CertificateSigningRequest') as certificate_signing_request,
Expand All @@ -663,6 +664,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'ApiPassthrough') as api_passthrough,
json_extract_path_text(Properties, 'CertificateAuthorityArn') as certificate_authority_arn,
json_extract_path_text(Properties, 'CertificateSigningRequest') as certificate_signing_request,
Expand Down Expand Up @@ -714,6 +716,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.Arn') as arn,
JSON_EXTRACT(Properties, '$.Type') as type,
JSON_EXTRACT(Properties, '$.KeyAlgorithm') as key_algorithm,
Expand All @@ -733,6 +736,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'Arn') as arn,
json_extract_path_text(Properties, 'Type') as type,
json_extract_path_text(Properties, 'KeyAlgorithm') as key_algorithm,
Expand Down Expand Up @@ -786,6 +790,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.CertificateAuthorityArn') as certificate_authority_arn,
JSON_EXTRACT(Properties, '$.Certificate') as certificate,
JSON_EXTRACT(Properties, '$.CertificateChain') as certificate_chain,
Expand All @@ -799,6 +804,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'CertificateAuthorityArn') as certificate_authority_arn,
json_extract_path_text(Properties, 'Certificate') as certificate,
json_extract_path_text(Properties, 'CertificateChain') as certificate_chain,
Expand Down Expand Up @@ -850,6 +856,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.Actions') as actions,
JSON_EXTRACT(Properties, '$.CertificateAuthorityArn') as certificate_authority_arn,
JSON_EXTRACT(Properties, '$.Principal') as principal,
Expand All @@ -862,6 +869,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'Actions') as actions,
json_extract_path_text(Properties, 'CertificateAuthorityArn') as certificate_authority_arn,
json_extract_path_text(Properties, 'Principal') as principal,
Expand Down
6 changes: 6 additions & 0 deletions providers/src/awscc/v00.00.00000/services/amplify.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -573,6 +573,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AccessToken') as access_token,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.AppName') as app_name,
Expand Down Expand Up @@ -600,6 +601,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AccessToken') as access_token,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'AppName') as app_name,
Expand Down Expand Up @@ -661,6 +663,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.Arn') as arn,
JSON_EXTRACT(Properties, '$.BasicAuthConfig') as basic_auth_config,
Expand All @@ -684,6 +687,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'Arn') as arn,
json_extract_path_text(Properties, 'BasicAuthConfig') as basic_auth_config,
Expand Down Expand Up @@ -741,6 +745,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.Arn') as arn,
JSON_EXTRACT(Properties, '$.AutoSubDomainCreationPatterns') as auto_sub_domain_creation_patterns,
Expand All @@ -762,6 +767,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'Arn') as arn,
json_extract_path_text(Properties, 'AutoSubDomainCreationPatterns') as auto_sub_domain_creation_patterns,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -882,6 +882,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.BindingProperties') as binding_properties,
JSON_EXTRACT(Properties, '$.Children') as children,
Expand All @@ -907,6 +908,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'BindingProperties') as binding_properties,
json_extract_path_text(Properties, 'Children') as children,
Expand Down Expand Up @@ -974,6 +976,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.Cta') as cta,
JSON_EXTRACT(Properties, '$.DataType') as data_type,
Expand All @@ -995,6 +998,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'Cta') as cta,
json_extract_path_text(Properties, 'DataType') as data_type,
Expand Down Expand Up @@ -1058,6 +1062,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
JSON_EXTRACT(Properties, '$.AppId') as app_id,
JSON_EXTRACT(Properties, '$.CreatedAt') as created_at,
JSON_EXTRACT(Properties, '$.EnvironmentName') as environment_name,
Expand All @@ -1075,6 +1080,7 @@ components:
ddl: |-
SELECT
region,
data__Identifier,
json_extract_path_text(Properties, 'AppId') as app_id,
json_extract_path_text(Properties, 'CreatedAt') as created_at,
json_extract_path_text(Properties, 'EnvironmentName') as environment_name,
Expand Down
Loading

0 comments on commit 14eb83c

Please sign in to comment.