Fix expired security token issue (#30)

In order to have a more robust solution for the internal calls to AWS, the following has been improved:
* Fix expired security token issue by always use fresh credentials provided by CloudFormation. We need to take into account  the fact that lambda execution context are being reused, so ensure new values for credentials and settings are refreshed even when the `BaseResource` instance is the same from previous call.
* Use queue to avoid throttling of AWS API calls (specially CloudWatch).
* Optional use of worker threads for performance reasons.

Author: eduardomourar

.eslintignore

@@ -6,3 +6,4 @@ target/
 node_modules/
 coverage/
 python/
+.eslintrc.js

.eslintrc.js

@@ -6,7 +6,7 @@ module.exports = {
     plugins: ['@typescript-eslint', 'prettier', 'import', 'prefer-arrow'],
     parser: '@typescript-eslint/parser',
     parserOptions: {
-        ecmaVersion: '2017',
+        ecmaVersion: 2017,
         sourceType: 'module',
         project: './tsconfig.eslint.json',
     },
@@ -21,21 +21,32 @@ module.exports = {
         },
         'import/resolver': {
             node: {},
-            typescript: {
-                directory: './tsconfig.eslint.json',
-            },
+            typescript: {},
         },
     },
     ignorePatterns: ['*.d.ts', '*.generated.ts'],
     rules: {
         // Require use of the `import { foo } from 'bar';` form instead of `import foo = require('bar');`
         '@typescript-eslint/no-require-imports': ['error'],
 
-        '@typescript-eslint/ban-ts-ignore': ['warn'],
+        '@typescript-eslint/ban-ts-comment': ['warn'],
+        '@typescript-eslint/ban-types': ['warn'],
         '@typescript-eslint/no-empty-function': ['warn'],
+        '@typescript-eslint/no-explicit-any': ['warn'],
 
         // Require all imported dependencies are actually declared in package.json
         'import/no-extraneous-dependencies': ['error'],
         'import/no-unresolved': ['error'],
     },
+    overrides: [
+        {
+            files: ['*.js', '*.jsx'],
+            rules: {
+                '@typescript-eslint/explicit-function-return-type': 'off',
+                '@typescript-eslint/no-unused-vars': 'off',
+                '@typescript-eslint/no-var-requires': 'off',
+                '@typescript-eslint/no-require-imports': 'off',
+            },
+        },
+    ],
 };

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
           pip install --use-feature=2020-resolver .
       - uses: actions/setup-node@v1
         with:
-          node-version: 12
+          node-version: 14
       - name: Install Dependencies Node.js
         id: install_nodejs
         # Touch needed because of https://github.com/aws/aws-cli/issues/2639
@@ -66,9 +66,9 @@ jobs:
           RPDK_PATH=$PWD/$RPDK_PACKAGE
           DIR=$(mktemp -d)
           cd "$DIR"
-          echo ::set-env name=PROJECT_DIR::$DIR
+          echo "PROJECT_DIR=$DIR" >> $GITHUB_ENV
           ls -la
-          printf "AWS::Foo::Bar\n1\nn" | cfn init -vv
+          printf "n" | cfn init -vv -t AWS::Foo::Bar
           ls -la
           mkdir ./dist
           cp "$RPDK_PATH" ./dist

.gitignore

@@ -128,6 +128,10 @@ dmypy.json
 .vscode/
 *.tar.gz
 *.tgz
+src/workers/*.js
+src/workers/*.d.ts
+tests/**/*.js
+tests/**/*.d.ts
 
 # We want to allow the tests/lib folder
 !tests/lib

jest.config.js

@@ -3,10 +3,11 @@ module.exports = {
     testEnvironment: 'node',
     globals: {
         'ts-jest': {
-            diagnostics: false, // Necessary to avoid typeschecking error in decorators
+            ignoreCoverageForAllDecorators: true,
         },
     },
     testRegex: '\\.test.ts$',
+    testRunner: 'jest-circus/runner',
     coverageThreshold: {
         global: {
             branches: 70,
@@ -17,4 +18,8 @@ module.exports = {
     collectCoverage: true,
     coverageReporters: ['json', 'lcov', 'text'],
     coveragePathIgnorePatterns: ['/node_modules/', '/tests/data/'],
+    testTimeout: 60000,
+    moduleNameMapper: {
+        '^~/(.*)$': '<rootDir>/src/$1',
+    },
 };