terradart_aws

Curated factory wrappers for AWS resources (the hashicorp/aws Terraform provider) for Dart-first Terraform stacks.

The catalog is the full hashicorp/aws provider at its exact pin: every resource and data source. Start from a Dart backend on AWS Lambda: an execution role, a managed-policy attachment, the function, a function URL, and a log group, plus the aws_iam_policy_document and aws_caller_identity data sources.

Security & Credentials

Credentials never appear in synth output by design. The AWS provider schema does not mark its credential arguments sensitive, so AwsProvider leaves them out by name: there is no access_key, secret_key, token, or assume_role_with_web_identity parameter. Authenticate at apply time through the AWS SDK credential chain: AWS_PROFILE with your shared config, AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN, or an instance or task role. assumeRole, defaultTags, ignoreTags and endpoints are typed settings on AwsProvider.

Installation

dependencies:
  terradart_core: ^0.31.x
  terradart_aws: ^0.31.x

Usage example

import 'package:terradart_aws/data.dart';
import 'package:terradart_aws/iam.dart';
import 'package:terradart_aws/lambda.dart';
import 'package:terradart_aws/provider.dart';
import 'package:terradart_core/terradart_core.dart';

final class HelloStack extends Stack {
  HelloStack()
      : super(providers: [
          const AwsProvider(
            region: 'us-east-1',
            defaultTags: {'app': 'hello-dart'},
          ),
        ]) {
    final trust = DataAwsIamPolicyDocument(
      localName: 'lambda_trust',
      statement: [
        DataIamPolicyDocumentStatement(
          actions: .literal(['sts:AssumeRole']),
          principals: [
            DataIamPolicyDocumentPrincipals(
              type: .literal('Service'),
              identifiers: .literal(['lambda.amazonaws.com']),
            ),
          ],
        ),
      ],
    );
    addData(trust);
    final role = AwsIamRole(
      localName: 'hello',
      assumeRolePolicy: .ref(trust.json),
    );
    add(role);
    add(AwsLambdaFunction(
      localName: 'hello',
      functionName: .literal('hello-dart'),
      role: role.ref,
      runtime: .literal('provided.al2023'),
      handler: .literal('bootstrap'),
      filename: .literal('build/bootstrap.zip'),
    ));
  }
}

dart pub get
dart run bin/infra.dart
cd tf-out && terraform init && AWS_PROFILE=... terraform apply

Curated surface

Every resource and data source of the pinned provider, across per-service barrels (ec2, iam, lambda, s3, rds, …) plus data. The provider is pinned exactly (kAwsProviderVersionConstraint, the release the wrappers were generated from). Start with examples/aws_lambda_quickstart, which builds the bootstrap zip from a Dart handler. examples/aws_static_site_quickstart hosts a Flutter Web build on S3 + CloudFront with a custom domain, and examples/aws_ecs_express_quickstart runs a Dart server on ECS Express Mode; both need real AWS setup to apply (their READMEs' "Before you apply"). The rest of the catalog is exercised by examples/aws_leftover_quickstart (synth + terraform validate only).

The six most deeply nested resources (AwsWafv2WebAcl, AwsWafv2WebAclRule, AwsWafv2RuleGroup, AwsQuicksightAnalysis, AwsQuicksightDashboard, AwsQuicksightTemplate) take typed nested helpers, but a block shape that repeats inside one resource gets one helper, named after its shallowest occurrence. AwsWafv2WebAclRule(challengeConfig: ...) therefore takes Wafv2WebAclRuleCaptchaConfig, and an asnMatchStatement nested inside andStatement levels takes the same Wafv2WebAclRuleAsnMatchStatement as a top-level one. The inline rule blocks on AwsWafv2WebAcl stay a TfArg<Map<String, dynamic>> map; manage rules through AwsWafv2WebAclRule for the typed form.

Generated by the maintainer pipeline (terradart wrap against the pin fixture); do not hand-edit files under lib/src/.

Libraries

accessanalyzer: AWS IAM Access Analyzer.
account: AWS Account Management (contacts and opt-in Regions).
accountaccess: accountaccess applications and entitlements.
acm: AWS Certificate Manager (ACM).
acmpca: AWS Private Certificate Authority.
agentregistry: agentregistry registries.
amplify: AWS Amplify.
api_gateway: AWS API Gateway (REST APIs).
apigatewayv2: AWS API Gateway V2 (HTTP and WebSocket APIs).
appautoscaling: AWS Application Auto Scaling.
appconfig: AWS AppConfig.
appfabric: AWS AppFabric.
appflow: AWS AppFlow.
appintegrations: AWS AppIntegrations.
applicationinsights: AWS CloudWatch Application Insights.
appmesh: AWS App Mesh.
apprunner: AWS App Runner.
appstream: AWS AppStream 2.0.
appsync: AWS AppSync.
arcregionswitch: AWS ARC Region switch plans.
arczonalshift: AWS ARC zonal shift.
athena: AWS Athena.
auditmanager: AWS Audit Manager.
autoscaling: AWS EC2 Auto Scaling and launch configurations.
autoscalingplans: AWS Auto Scaling plans.
backup: AWS Backup.
batch: AWS Batch.
bcmdataexports: AWS Billing and Cost Management Data Exports.
bedrock: AWS Bedrock.
bedrockagent: AWS Bedrock Agents and knowledge bases.
bedrockagentcore: AWS Bedrock AgentCore.
billing: AWS Billing views.
budgets: AWS Budgets.
catalog: Static catalog of all curated terradart_aws factories.
ce: AWS Cost Explorer (anomaly detection and cost categories).
chatbot: AWS Chatbot.
chime: AWS Chime.
chimesdkmediapipelines: AWS Chime SDK media pipelines.
chimesdkvoice: AWS Chime SDK Voice.
cleanrooms: AWS Clean Rooms.
cloud9: AWS Cloud9.
cloudcontrolapi: AWS Cloud Control API.
cloudformation: AWS CloudFormation.
cloudfront: AWS CloudFront.
cloudfrontkeyvaluestore: AWS CloudFront KeyValueStore.
cloudhsm: AWS CloudHSM.
cloudsearch: AWS CloudSearch.
cloudtrail: AWS CloudTrail.
cloudwatch: AWS CloudWatch (alarms, dashboards, logs, and events).
codeartifact: AWS CodeArtifact.
codebuild: AWS CodeBuild.
codecatalyst: AWS CodeCatalyst.
codecommit: AWS CodeCommit.
codeconnections: AWS CodeConnections.
codedeploy: AWS CodeDeploy.
codeguruprofiler: AWS CodeGuru Profiler.
codegurureviewer: AWS CodeGuru Reviewer.
codepipeline: AWS CodePipeline.
codestarconnections: AWS CodeStar Connections.
codestarnotifications: AWS CodeStar Notifications.
cognito: AWS Cognito.
comprehend: AWS Comprehend.
computeoptimizer: AWS Compute Optimizer.
config: AWS Config.
connect: AWS Connect.
controltower: AWS Control Tower.
costoptimizationhub: AWS Cost Optimization Hub.
cur: AWS Cost and Usage Reports.
customerprofiles: AWS Customer Profiles.
data: AWS data sources (read-only lookups).
dataexchange: AWS Data Exchange.
datapipeline: AWS Data Pipeline.
datasync: AWS DataSync.
datazone: AWS DataZone.
dax: AWS DynamoDB Accelerator (DAX).
db: AWS RDS DB instances, snapshots, and option and parameter groups.
detective: AWS Detective.
devicefarm: AWS Device Farm.
devopsguru: AWS DevOps Guru.
directory_service: AWS Directory Service.
dlm: AWS Data Lifecycle Manager.
dms: AWS Database Migration Service.
docdb: AWS DocumentDB.
docdbelastic: AWS DocumentDB elastic clusters.
drs: AWS Elastic Disaster Recovery.
dsql: AWS Aurora DSQL.
dx: AWS Direct Connect.
dynamodb: AWS DynamoDB.
ec2: AWS EC2 and VPC (instances, networking, EBS, and transit gateways).
ecr: AWS Elastic Container Registry (ECR).
ecrpublic: AWS ECR Public.
ecs: AWS Elastic Container Service (ECS).
efs: AWS Elastic File System (EFS).
eks: AWS Elastic Kubernetes Service (EKS).
elastic_beanstalk: AWS Elastic Beanstalk.
elasticache: AWS ElastiCache.
elasticsearch: AWS Elasticsearch Service (legacy).
elastictranscoder: AWS Elastic Transcoder.
elb: AWS Elastic Load Balancing (ALB, NLB, and Classic).
emr: AWS EMR.
emrcontainers: AWS EMR on EKS.
emrserverless: AWS EMR Serverless.
evidently: AWS CloudWatch Evidently.
finspace: AWS FinSpace.
fis: AWS Fault Injection Service.
fms: AWS Firewall Manager.
fsx: AWS FSx.
gamelift: AWS GameLift.
glacier: AWS S3 Glacier vaults.
globalaccelerator: AWS Global Accelerator.
glue: AWS Glue.
grafana: AWS Managed Grafana.
guardduty: AWS GuardDuty.
iam: AWS IAM.
identitystore: AWS IAM Identity Center identity store.
imagebuilder: AWS EC2 Image Builder.
inspector: AWS Inspector Classic.
inspector2: AWS Inspector.
internetmonitor: AWS CloudWatch Internet Monitor.
invoicing: AWS Invoicing invoice units.
iot: AWS IoT Core.
ivs: AWS Interactive Video Service (IVS).
ivschat: AWS IVS Chat.
kendra: AWS Kendra.
keyspaces: AWS Keyspaces (for Apache Cassandra).
kinesis: AWS Kinesis (Data Streams, Firehose, and Video Streams).
kinesisanalyticsv2: AWS Managed Service for Apache Flink.
kms: AWS Key Management Service (KMS).
lakeformation: AWS Lake Formation.
lambda: AWS Lambda.
lambdacore: lambdacore network connectors.
lambdamicrovms: lambdamicrovms images and microVMs.
lex: AWS Lex (V1).
lexv2models: AWS Lex V2.
licensemanager: AWS License Manager.
lightsail: AWS Lightsail.
location: AWS Location Service.
m2: AWS Mainframe Modernization.
macie2: AWS Macie.
mailmanager: AWS SES Mail Manager.
media: AWS Elemental MediaConvert, MediaPackage, and MediaStore.
medialive: AWS Elemental MediaLive.
memorydb: AWS MemoryDB.
mq: AWS MQ.
msk: AWS Managed Streaming for Apache Kafka (MSK).
mskconnect: AWS MSK Connect.
mwaa: AWS Managed Workflows for Apache Airflow.
neptune: AWS Neptune.
neptunegraph: AWS Neptune Analytics.
networkfirewall: AWS Network Firewall.
networkflowmonitor: AWS CloudWatch Network Flow Monitor.
networkmanager: AWS Network Manager (Cloud WAN).
networkmonitor: AWS CloudWatch Network Monitor.
notifications: AWS User Notifications.
notificationscontacts: AWS User Notifications contacts.
oam: AWS CloudWatch Observability Access Manager.
observabilityadmin: AWS CloudWatch Observability Admin.
odb: AWS Oracle Database@AWS.
opensearch: AWS OpenSearch Service.
opensearchserverless: AWS OpenSearch Serverless.
organizations: AWS Organizations.
osis: AWS OpenSearch Ingestion.
outposts: AWS Outposts.
paymentcryptography: AWS Payment Cryptography.
pinpoint: AWS Pinpoint.
pinpointsmsvoicev2: AWS End User Messaging SMS.
pipes: AWS EventBridge Pipes.
prometheus: AWS Managed Service for Prometheus.
provider: Provider block factory and version constants for hashicorp/aws.
qbusiness: AWS Q Business.
qldb: AWS QLDB.
quicksight: AWS QuickSight.
ram: AWS Resource Access Manager (RAM).
rbin: AWS Recycle Bin.
rds: AWS RDS clusters, proxies, and Aurora.
redshift: AWS Redshift.
redshiftdata: AWS Redshift Data API.
redshiftserverless: AWS Redshift Serverless.
rekognition: AWS Rekognition.
resiliencehub: AWS Resilience Hub.
resiliencehubv2: AWS Resilience Hub (resiliencehubv2 systems and policies).
resourceexplorer2: AWS Resource Explorer.
resourcegroups: AWS Resource Groups.
rolesanywhere: AWS IAM Roles Anywhere.
route53: AWS Route 53.
route53domains: AWS Route 53 Domains.
route53profiles: AWS Route 53 Profiles.
route53recoverycontrolconfig: AWS Route 53 ARC recovery control.
route53recoveryreadiness: AWS Route 53 ARC readiness.
rum: AWS CloudWatch RUM.
s3: AWS S3.
s3control: AWS S3 Control (account-level S3).
s3files: s3files file systems, access points, and mount targets.
s3outposts: AWS S3 on Outposts.
s3tables: AWS S3 Tables.
s3vectors: AWS S3 Vectors.
sagemaker: AWS SageMaker.
savingsplans: AWS Savings Plans.
scheduler: AWS EventBridge Scheduler.
schemas: AWS EventBridge Schemas.
secretsmanager: AWS Secrets Manager.
securityhub: AWS Security Hub.
securitylake: AWS Security Lake.
serverlessapplicationrepository: AWS Serverless Application Repository.
service_discovery: AWS Cloud Map (service discovery).
servicecatalog: AWS Service Catalog.
servicecatalogappregistry: AWS Service Catalog AppRegistry.
servicequotas: AWS Service Quotas.
ses: AWS SES (V1).
sesv2: AWS SES.
sfn: AWS Step Functions.
shield: AWS Shield.
signer: AWS Signer.
sns: AWS SNS.
sqs: AWS SQS.
ssm: AWS Systems Manager.
ssmcontacts: AWS Systems Manager Incident Manager contacts.
ssmincidents: AWS Systems Manager Incident Manager.
ssmquicksetup: AWS Systems Manager Quick Setup.
ssoadmin: AWS IAM Identity Center administration.
storagegateway: AWS Storage Gateway.
swf: AWS Simple Workflow Service.
synthetics: AWS CloudWatch Synthetics.
terradart_aws: Curated AWS surface for TerraDart (hashicorp/aws Terraform provider, pinned exactly at kAwsProviderVersionConstraint).
timestreaminfluxdb: AWS Timestream for InfluxDB.
timestreamquery: AWS Timestream scheduled queries.
timestreamwrite: AWS Timestream for LiveAnalytics.
transcribe: AWS Transcribe.
transfer: AWS Transfer Family.
uxc: uxc account customizations.
verifiedaccess: AWS Verified Access.
verifiedpermissions: AWS Verified Permissions.
vpclattice: AWS VPC Lattice.
waf: AWS WAF Classic.
wafregional: AWS WAF Classic Regional.
wafv2: AWS WAF.
workmail: AWS WorkMail.
workspaces: AWS WorkSpaces.
workspacesweb: AWS WorkSpaces Secure Browser.
xray: AWS X-Ray.