@aws/cloudformation-validate 1.1.0-beta → 1.3.0-beta

package/README.md

@@ -1,4 +1,4 @@
-# bindings-wasm
+# CloudFormation Validate WASM Bindings
 
 WASM bindings for [`cloudformation-validate`](https://github.com/aws-cloudformation/cloudformation-validate). Compiles
 the full validation pipeline —
@@ -6,13 +6,16 @@ template parser, schema validator, Rego engine, and CEL engine — into a single
 
 All WASM objects must be explicitly freed via `.free()` to release memory.
 
+For a complete, runnable example, see
+[examples](https://github.com/aws-cloudformation/cloudformation-validate/tree/main/src/bindings-wasm/examples).
+
 ## Engine
 
 `RegoEngine` and `CelEngine` both implement the `Engine` interface. They are interchangeable — both produce identical
 diagnostics for the same template and config.
 
 ```typescript
-import {RegoEngine, CelEngine, TemplateFile} from "@aws/cloudformation-validate";
+import { RegoEngine, CelEngine, TemplateFile } from "@aws/cloudformation-validate";
 
 const engine = new RegoEngine();
 const report = engine.validateStandard(new TemplateFile("template.yaml"));
@@ -62,7 +65,7 @@ interface ValidateConfig {
     parameterOverrides?: Record<string, string>;
     pseudoParameterOverrides?: PseudoParameterOverrides;
     strict?: boolean;
-    includeEngineRules?: boolean;
+    disableBuiltinRules?: boolean;
 }
 ```
 
@@ -74,7 +77,7 @@ interface ValidateConfig {
 | `parameterOverrides`       | `{}`                    | Override template parameter values during resolution. Keys are parameter logical IDs.                                    |
 | `pseudoParameterOverrides` | all `undefined`         | Override CloudFormation pseudo-parameters (`AWS::AccountId`, `AWS::Region`, etc.).                                       |
 | `strict`                   | `false`                 | When `true`, `WARN`-severity diagnostics are upgraded to `ERROR`.                                                        |
-| `includeEngineRules`       | `true`                  | When `false`, diagnostics with `source: "ENGINE"` are suppressed.                                                        |
+| `disableBuiltinRules`      | `false`                 | When `true`, all built-in rules (schema validation, Step Functions, engine rules) are skipped; only custom and Guard rules are evaluated. |
 
 ### RuleFilterConfig
 
@@ -86,11 +89,21 @@ interface RuleFilterConfig {
     categories?: string[];             // category names, e.g. ["security", "best_practices"]
     idRanges?: IdRange[];              // numeric ranges, e.g. { prefix: "E", start: 3000, end: 3099 }
     idPatterns?: string[];             // regex patterns matched against rule IDs
-    resourceIds?: ResourceIdFilter[];  // suppress rule for specific logical resource ID
-    resourceTypes?: ResourceTypeFilter[]; // suppress rule for specific resource type
+    resourceIds?: ResourceIdFilter[];  // a rule (or every rule) on a logical resource ID
+    resourceTypes?: ResourceTypeFilter[]; // a rule (or every rule) on a resource type
+    services?: ServiceFilter[];        // a rule (or every rule) on a service, e.g. "AWS::AutoScaling"
 }
+
+// resourceIds / resourceTypes / services each carry an optional ruleId:
+// set it to scope the filter to one rule, or omit it for every rule on the target.
+interface ResourceIdFilter   { ruleId?: string; resourceId: string; }
+interface ResourceTypeFilter { ruleId?: string; resourceType: string; }
+interface ServiceFilter      { ruleId?: string; service: string; }
 ```
 
+The `service` is matched verbatim against the `service-provider::service-name` prefix of the resource type — its first
+two `::`-delimited segments (e.g. `AWS::AutoScaling` in `AWS::AutoScaling::LaunchConfiguration`).
+
 ### PseudoParameterOverrides
 
 Override CloudFormation pseudo-parameters used during intrinsic function resolution. All fields optional — when
@@ -196,23 +209,3 @@ interface StandardDiagnostic {
     conditionScenario?: Record<string, boolean>;  // condition truth assignment that triggers this diagnostic
 }
 ```
-
-### Severity levels
-
-| Level   | Prefix | Meaning                                                               |
-|---------|--------|-----------------------------------------------------------------------|
-| `FATAL` | F      | Structural schema violation — CloudFormation will reject the template |
-| `ERROR` | E      | Semantic error — likely deployment failure or incorrect behavior      |
-| `WARN`  | W      | Security risk, deprecation, or risky pattern                          |
-| `INFO`  | I      | Best practice suggestion                                              |
-| `DEBUG` | D      | Internal diagnostic detail                                            |
-
-## `version()`
-
-Returns the engine version string.
-
-```typescript
-import {version} from "@aws/cloudformation-validate";
-
-console.log(version()); // e.g. "1.0.0"
-```

package/THIRD-PARTY-LICENSES.txt

@@ -84,7 +84,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ******************************
 
 anyhow
-1.0.102 <https://github.com/dtolnay/anyhow>
+1.0.103 <https://github.com/dtolnay/anyhow>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -3391,6 +3391,33 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 
 
+******************************
+
+fancy-regex
+0.18.0 <https://github.com/fancy-regex/fancy-regex>
+The MIT License
+
+Copyright 2015 The Fancy Regex Authors.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
 ******************************
 
 foldhash
@@ -4249,7 +4276,7 @@ limitations under the License.
 ******************************
 
 gloo-utils
-0.1.7 <https://github.com/rustwasm/gloo/tree/master/crates/utils>
+0.2.0 <https://github.com/rustwasm/gloo/tree/master/crates/utils>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -5852,213 +5879,6 @@ ipnetwork
    limitations under the License.
 
 
-******************************
-
-itertools
-0.4.19 <https://github.com/bluss/rust-itertools>
-                              Apache License
-                        Version 2.0, January 2004
-                     http://www.apache.org/licenses/
-
-TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-1. Definitions.
-
-   "License" shall mean the terms and conditions for use, reproduction,
-   and distribution as defined by Sections 1 through 9 of this document.
-
-   "Licensor" shall mean the copyright owner or entity authorized by
-   the copyright owner that is granting the License.
-
-   "Legal Entity" shall mean the union of the acting entity and all
-   other entities that control, are controlled by, or are under common
-   control with that entity. For the purposes of this definition,
-   "control" means (i) the power, direct or indirect, to cause the
-   direction or management of such entity, whether by contract or
-   otherwise, or (ii) ownership of fifty percent (50%) or more of the
-   outstanding shares, or (iii) beneficial ownership of such entity.
-
-   "You" (or "Your") shall mean an individual or Legal Entity
-   exercising permissions granted by this License.
-
-   "Source" form shall mean the preferred form for making modifications,
-   including but not limited to software source code, documentation
-   source, and configuration files.
-
-   "Object" form shall mean any form resulting from mechanical
-   transformation or translation of a Source form, including but
-   not limited to compiled object code, generated documentation,
-   and conversions to other media types.
-
-   "Work" shall mean the work of authorship, whether in Source or
-   Object form, made available under the License, as indicated by a
-   copyright notice that is included in or attached to the work
-   (an example is provided in the Appendix below).
-
-   "Derivative Works" shall mean any work, whether in Source or Object
-   form, that is based on (or derived from) the Work and for which the
-   editorial revisions, annotations, elaborations, or other modifications
-   represent, as a whole, an original work of authorship. For the purposes
-   of this License, Derivative Works shall not include works that remain
-   separable from, or merely link (or bind by name) to the interfaces of,
-   the Work and Derivative Works thereof.
-
-   "Contribution" shall mean any work of authorship, including
-   the original version of the Work and any modifications or additions
-   to that Work or Derivative Works thereof, that is intentionally
-   submitted to Licensor for inclusion in the Work by the copyright owner
-   or by an individual or Legal Entity authorized to submit on behalf of
-   the copyright owner. For the purposes of this definition, "submitted"
-   means any form of electronic, verbal, or written communication sent
-   to the Licensor or its representatives, including but not limited to
-   communication on electronic mailing lists, source code control systems,
-   and issue tracking systems that are managed by, or on behalf of, the
-   Licensor for the purpose of discussing and improving the Work, but
-   excluding communication that is conspicuously marked or otherwise
-   designated in writing by the copyright owner as "Not a Contribution."
-
-   "Contributor" shall mean Licensor and any individual or Legal Entity
-   on behalf of whom a Contribution has been received by Licensor and
-   subsequently incorporated within the Work.
-
-2. Grant of Copyright License. Subject to the terms and conditions of
-   this License, each Contributor hereby grants to You a perpetual,
-   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-   copyright license to reproduce, prepare Derivative Works of,
-   publicly display, publicly perform, sublicense, and distribute the
-   Work and such Derivative Works in Source or Object form.
-
-3. Grant of Patent License. Subject to the terms and conditions of
-   this License, each Contributor hereby grants to You a perpetual,
-   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-   (except as stated in this section) patent license to make, have made,
-   use, offer to sell, sell, import, and otherwise transfer the Work,
-   where such license applies only to those patent claims licensable
-   by such Contributor that are necessarily infringed by their
-   Contribution(s) alone or by combination of their Contribution(s)
-   with the Work to which such Contribution(s) was submitted. If You
-   institute patent litigation against any entity (including a
-   cross-claim or counterclaim in a lawsuit) alleging that the Work
-   or a Contribution incorporated within the Work constitutes direct
-   or contributory patent infringement, then any patent licenses
-   granted to You under this License for that Work shall terminate
-   as of the date such litigation is filed.
-
-4. Redistribution. You may reproduce and distribute copies of the
-   Work or Derivative Works thereof in any medium, with or without
-   modifications, and in Source or Object form, provided that You
-   meet the following conditions:
-
-   (a) You must give any other recipients of the Work or
-       Derivative Works a copy of this License; and
-
-   (b) You must cause any modified files to carry prominent notices
-       stating that You changed the files; and
-
-   (c) You must retain, in the Source form of any Derivative Works
-       that You distribute, all copyright, patent, trademark, and
-       attribution notices from the Source form of the Work,
-       excluding those notices that do not pertain to any part of
-       the Derivative Works; and
-
-   (d) If the Work includes a "NOTICE" text file as part of its
-       distribution, then any Derivative Works that You distribute must
-       include a readable copy of the attribution notices contained
-       within such NOTICE file, excluding those notices that do not
-       pertain to any part of the Derivative Works, in at least one
-       of the following places: within a NOTICE text file distributed
-       as part of the Derivative Works; within the Source form or
-       documentation, if provided along with the Derivative Works; or,
-       within a display generated by the Derivative Works, if and
-       wherever such third-party notices normally appear. The contents
-       of the NOTICE file are for informational purposes only and
-       do not modify the License. You may add Your own attribution
-       notices within Derivative Works that You distribute, alongside
-       or as an addendum to the NOTICE text from the Work, provided
-       that such additional attribution notices cannot be construed
-       as modifying the License.
-
-   You may add Your own copyright statement to Your modifications and
-   may provide additional or different license terms and conditions
-   for use, reproduction, or distribution of Your modifications, or
-   for any such Derivative Works as a whole, provided Your use,
-   reproduction, and distribution of the Work otherwise complies with
-   the conditions stated in this License.
-
-5. Submission of Contributions. Unless You explicitly state otherwise,
-   any Contribution intentionally submitted for inclusion in the Work
-   by You to the Licensor shall be under the terms and conditions of
-   this License, without any additional terms or conditions.
-   Notwithstanding the above, nothing herein shall supersede or modify
-   the terms of any separate license agreement you may have executed
-   with Licensor regarding such Contributions.
-
-6. Trademarks. This License does not grant permission to use the trade
-   names, trademarks, service marks, or product names of the Licensor,
-   except as required for reasonable and customary use in describing the
-   origin of the Work and reproducing the content of the NOTICE file.
-
-7. Disclaimer of Warranty. Unless required by applicable law or
-   agreed to in writing, Licensor provides the Work (and each
-   Contributor provides its Contributions) on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-   implied, including, without limitation, any warranties or conditions
-   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-   PARTICULAR PURPOSE. You are solely responsible for determining the
-   appropriateness of using or redistributing the Work and assume any
-   risks associated with Your exercise of permissions under this License.
-
-8. Limitation of Liability. In no event and under no legal theory,
-   whether in tort (including negligence), contract, or otherwise,
-   unless required by applicable law (such as deliberate and grossly
-   negligent acts) or agreed to in writing, shall any Contributor be
-   liable to You for damages, including any direct, indirect, special,
-   incidental, or consequential damages of any character arising as a
-   result of this License or out of the use or inability to use the
-   Work (including but not limited to damages for loss of goodwill,
-   work stoppage, computer failure or malfunction, or any and all
-   other commercial damages or losses), even if such Contributor
-   has been advised of the possibility of such damages.
-
-9. Accepting Warranty or Additional Liability. While redistributing
-   the Work or Derivative Works thereof, You may choose to offer,
-   and charge a fee for, acceptance of support, warranty, indemnity,
-   or other liability obligations and/or rights consistent with this
-   License. However, in accepting such obligations, You may act only
-   on Your own behalf and on Your sole responsibility, not on behalf
-   of any other Contributor, and only if You agree to indemnify,
-   defend, and hold each Contributor harmless for any liability
-   incurred by, or claims asserted against, such Contributor by reason
-   of your accepting any such warranty or additional liability.
-
-END OF TERMS AND CONDITIONS
-
-APPENDIX: How to apply the Apache License to your work.
-
-   To apply the Apache License to your work, attach the following
-   boilerplate notice, with the fields enclosed by brackets "[]"
-   replaced with your own identifying information. (Don't include
-   the brackets!)  The text should be enclosed in the appropriate
-   comment syntax for the file format. We also recommend that a
-   file or class name and description of purpose be included on the
-   same "printed page" as the copyright notice for easier
-   identification within third-party archives.
-
-Copyright [yyyy] [name of copyright owner]
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-
 ******************************
 
 itoa
@@ -6141,7 +5961,7 @@ limitations under the License.
 ******************************
 
 js-sys
-0.3.102 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/js-sys>
+0.3.103 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/js-sys>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -6762,7 +6582,7 @@ limitations under the License.
 ******************************
 
 log
-0.4.32 <https://github.com/rust-lang/log>
+0.4.33 <https://github.com/rust-lang/log>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -7541,7 +7361,7 @@ SOFTWARE.
 ******************************
 
 num-bigint
-0.4.6 <https://github.com/rust-num/num-bigint>
+0.4.7 <https://github.com/rust-num/num-bigint>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -9224,39 +9044,10 @@ See the License for the specific language governing permissions and
 limitations under the License.
 
 
-******************************
-
-quick-xml
-0.30.0 <https://github.com/tafia/quick-xml>
-The MIT License (MIT)
-
-Copyright (c) 2016 Johann Tuffe
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-
 ******************************
 
 quote
-1.0.45 <https://github.com/dtolnay/quote>
+1.0.46 <https://github.com/dtolnay/quote>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -10569,7 +10360,7 @@ Some files are licensed Apache-2.0 (LICENSE-2.0.txt).
 ******************************
 
 ruzstd
-0.7.3 <https://github.com/KillingSpark/zstd-rs>
+0.8.3 <https://github.com/KillingSpark/zstd-rs>
 MIT License
 
 Copyright (c) 2019 Moritz Borcherding
@@ -11037,33 +10828,6 @@ See the License for the specific language governing permissions and
 limitations under the License.
 
 
-******************************
-
-serde-wasm-bindgen
-0.5.0 <https://github.com/cloudflare/serde-wasm-bindgen>
-MIT License
-
-Copyright (c) 2019 Cloudflare, Inc.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-
 ******************************
 
 serde-wasm-bindgen
@@ -11252,7 +11016,7 @@ limitations under the License.
 ******************************
 
 serde_derive_internals
-0.28.0 <https://github.com/serde-rs/serde>
+0.29.1 <https://github.com/serde-rs/serde>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -12148,7 +11912,7 @@ limitations under the License.
 ******************************
 
 tsify
-0.4.5 <https://github.com/madonoharu/tsify>
+0.5.6 <https://github.com/madonoharu/tsify>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -12227,7 +11991,7 @@ limitations under the License.
 ******************************
 
 tsify-macros
-0.4.5 <https://github.com/madonoharu/tsify>
+0.5.6 <https://github.com/madonoharu/tsify>
 Apache License
 Version 2.0, January 2004
 http://www.apache.org/licenses/
@@ -12512,7 +12276,7 @@ THE SOFTWARE.
 ******************************
 
 uuid
-1.23.3 <https://github.com/uuid-rs/uuid>
+1.23.4 <https://github.com/uuid-rs/uuid>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -12719,7 +12483,7 @@ limitations under the License.
 ******************************
 
 wasm-bindgen
-0.2.125 <https://github.com/wasm-bindgen/wasm-bindgen>
+0.2.126 <https://github.com/wasm-bindgen/wasm-bindgen>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -12926,7 +12690,7 @@ limitations under the License.
 ******************************
 
 wasm-bindgen-macro
-0.2.125 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/macro>
+0.2.126 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/macro>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -13133,7 +12897,7 @@ limitations under the License.
 ******************************
 
 wasm-bindgen-macro-support
-0.2.125 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/macro-support>
+0.2.126 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/macro-support>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -13340,7 +13104,7 @@ limitations under the License.
 ******************************
 
 wasm-bindgen-shared
-0.2.125 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/shared>
+0.2.126 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/shared>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/
@@ -13547,7 +13311,7 @@ limitations under the License.
 ******************************
 
 web-sys
-0.3.102 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/web-sys>
+0.3.103 <https://github.com/wasm-bindgen/wasm-bindgen/tree/master/crates/web-sys>
                               Apache License
                         Version 2.0, January 2004
                      http://www.apache.org/licenses/