Optionalopts: ComponentResourceOptionsReadonlyauroraReadonlyroleReadonlyroleReadonlyroleReadonlyurnThe stable logical URN used to distinctly address a resource, both before and after deployments.
ProtectedgetRetrieves the data produces by initialize. The data is
immediately available in a derived class's constructor after the
super(...) call to ComponentResource.
Returns the provider for the given module member, if one exists.
ProtectedinitializeCan be overridden by a subclass to asynchronously initialize data for this component automatically when constructed. The data will be available immediately for subclass constructors to use. To access the data use getData.
Optionalopts: ComponentResourceOptionsOptionalname: stringOptionaltype: stringProtectedregisterRegisters synthetic outputs that a component has initialized, usually by allocating other child sub-resources and propagating their resulting property values.
Component resources can call this at the end of their constructor to indicate that they are done creating child resources. This is not strictly necessary as this will automatically be called after the initialize method completes.
Optionaloutputs: Inputs | Promise<Inputs> | Output<Inputs>StaticisReturns true if the given object is a CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
AWS-side identity for domain-repo CI. Creates an IAM role that
CFXLabsInc/<githubRepo>Actions workflows can assume via OIDC, with a single inline policy grantingrds-db:connectas the named Postgres user (the<db>_cilogin role created bycfx-db).CI uses this role to:
pulumi upon the domain DB stack — the stack's adminpostgresql.Providerauthenticates as<db>_civia IAM.<db>_ci.The Postgres role itself is intentionally NOT created here — it lives in
packages/db/pulumi/database.tsso it can be provisioned by the master-authed bootstrap provider. This component only owns the AWS side.