@kensio/yulin 0.30.0 → 0.32.0

package/dist/service/iam/error/sim-iam.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam.error.js","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAClC,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/index.d.ts

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/service/iam/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/service/iam/index.js

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.js.map

package/dist/service/iam/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.d.ts

@@ -0,0 +1,31 @@
+import type { SimIamPolicyDocument, SimIamPolicyDocumentCondition, SimIamPolicyDocumentPrincipal, SimIamPolicyDocumentStatement } from "../sim-iam-policy.js";
+export interface SimIamParsedPolicyDocument {
+    readonly statements: readonly SimIamParsedPolicyStatement[];
+}
+export interface SimIamParsedPolicyStatement {
+    readonly source: SimIamPolicyDocumentStatement;
+    readonly sid?: string | undefined;
+    readonly effect: "Allow" | "Deny";
+    readonly actions?: readonly string[] | undefined;
+    readonly notActions?: readonly string[] | undefined;
+    readonly resources?: readonly string[] | undefined;
+    readonly notResources?: readonly string[] | undefined;
+    readonly principal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly notPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly condition?: SimIamPolicyDocumentCondition | undefined;
+}
+/**
+ * Parse raw IAM policy document shapes into a form convenient for evaluation.
+ *
+ * IAM policy JSON commonly allows either a single value or an array. The decision
+ * engine should not need to care which source shape was used.
+ */
+export declare class SimIamPolicyDocumentParser {
+    /**
+     * Parse a sim IAM Policy Document into a form convenient for evaluation.
+     */
+    parse(policy: SimIamPolicyDocument): SimIamParsedPolicyDocument;
+    private parseStatement;
+    private stringList;
+}
+//# sourceMappingURL=sim-iam-doc-parser.d.ts.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC9B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,oBAAoB,GAAG,0BAA0B,CAM9D;IAED,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,UAAU;CAanB"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts

@@ -0,0 +1,7 @@
+import { StaticFactory } from "@kensio/part-factory";
+import type { SimIamParsedPolicyStatement } from "./sim-iam-doc-parser.js";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export declare const simIamParsedPolicyStatementFactory: StaticFactory<SimIamParsedPolicyStatement>;
+//# sourceMappingURL=sim-iam-doc-parser.factory.d.ts.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,kCAAkC,4CAU3C,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.js

@@ -0,0 +1,15 @@
+import { StaticFactory } from "@kensio/part-factory";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export const simIamParsedPolicyStatementFactory = new StaticFactory({
+    source: {
+        Effect: "Allow",
+        Action: "s3:GetObject",
+        Resource: "arn:aws:s3:::test-bucket/test-key",
+    },
+    effect: "Allow",
+    actions: ["s3:GetObject"],
+    resources: ["arn:aws:s3:::test-bucket/test-key"],
+});
+//# sourceMappingURL=sim-iam-doc-parser.factory.js.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,aAAa,CAA8B;IAC7C,MAAM,EAAE;QACN,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,mCAAmC;KAC9C;IACD,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,SAAS,EAAE,CAAC,mCAAmC,CAAC;CACjD,CAAC,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.js

@@ -0,0 +1,41 @@
+import { simIamPolicyDocumentStatements } from "../sim-iam-pol-doc-statements.js";
+/**
+ * Parse raw IAM policy document shapes into a form convenient for evaluation.
+ *
+ * IAM policy JSON commonly allows either a single value or an array. The decision
+ * engine should not need to care which source shape was used.
+ */
+export class SimIamPolicyDocumentParser {
+    /**
+     * Parse a sim IAM Policy Document into a form convenient for evaluation.
+     */
+    parse(policy) {
+        return {
+            statements: simIamPolicyDocumentStatements(policy).map((statement) => this.parseStatement(statement)),
+        };
+    }
+    parseStatement(statement) {
+        return {
+            source: statement,
+            sid: statement.Sid,
+            effect: statement.Effect,
+            actions: this.stringList(statement.Action),
+            notActions: this.stringList(statement.NotAction),
+            resources: this.stringList(statement.Resource),
+            notResources: this.stringList(statement.NotResource),
+            principal: statement.Principal,
+            notPrincipal: statement.NotPrincipal,
+            condition: statement.Condition,
+        };
+    }
+    stringList(value) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value === "string") {
+            return [value];
+        }
+        return [...value];
+    }
+}
+//# sourceMappingURL=sim-iam-doc-parser.js.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAmBlF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAA4B;QAChC,OAAO;YACL,UAAU,EAAE,8BAA8B,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACnE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAC/B;SACF,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,SAAwC;QAExC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;YACpD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,KAA6C;QAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF"}

package/dist/service/iam/policy/sim-iam-pol-doc-statements.d.ts

@@ -0,0 +1,7 @@
+import type { SimIamPolicyDocument, SimIamPolicyDocumentStatement } from "./sim-iam-policy.js";
+/**
+ * Return the policy document statements as an array, regardless of whether the
+ * source document used the single-statement or statement-array shape.
+ */
+export declare function simIamPolicyDocumentStatements(policyDocument: SimIamPolicyDocument): readonly SimIamPolicyDocumentStatement[];
+//# sourceMappingURL=sim-iam-pol-doc-statements.d.ts.map

package/dist/service/iam/policy/sim-iam-pol-doc-statements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-pol-doc-statements.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAI7B;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,oBAAoB,GACnC,SAAS,6BAA6B,EAAE,CAgB1C"}

package/dist/service/iam/policy/sim-iam-pol-doc-statements.js

@@ -0,0 +1,21 @@
+import { SimIamMalformedPolicyDocument } from "../error/sim-iam.error.js";
+/**
+ * Return the policy document statements as an array, regardless of whether the
+ * source document used the single-statement or statement-array shape.
+ */
+export function simIamPolicyDocumentStatements(policyDocument) {
+    const policyStatement = policyDocument.Statement;
+    // JSON parse can still produce null at runtime
+    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+    if (policyStatement === undefined || policyStatement === null) {
+        throw new SimIamMalformedPolicyDocument("IAM policy document must define Statement");
+    }
+    if (isSimIamPolicyStatementArray(policyStatement)) {
+        return policyStatement;
+    }
+    return [policyStatement];
+}
+function isSimIamPolicyStatementArray(policyStatement) {
+    return Array.isArray(policyStatement);
+}
+//# sourceMappingURL=sim-iam-pol-doc-statements.js.map

package/dist/service/iam/policy/sim-iam-pol-doc-statements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-pol-doc-statements.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAQ1E;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,cAAoC;IAEpC,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC;IAEjD,+CAA+C;IAC/C,uEAAuE;IACvE,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,6BAA6B,CACrC,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,4BAA4B,CAAC,eAAe,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CACnC,eAA2C;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-arn.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamPolicyId, SimIamPolicyName } from "./sim-iam-policy.js";
+import type { SimArn } from "../../aws/arn.js";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export declare function makeSimPolicyArn(props: {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly policyName: SimIamPolicyName;
+}): SimArn;
+/**
+ * Make a sim IAM policy ID.
+ */
+export declare function makeSimPolicyId(): SimIamPolicyId;
+//# sourceMappingURL=sim-iam-policy-arn.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC,GAAG,MAAM,CAET;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAKhD"}

package/dist/service/iam/policy/sim-iam-policy-arn.js

@@ -0,0 +1,17 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export function makeSimPolicyArn(props) {
+    return `arn:aws:iam::${props.accountId}:policy${props.path}${props.policyName}`;
+}
+/**
+ * Make a sim IAM policy ID.
+ */
+export function makeSimPolicyId() {
+    return faker.string.alphanumeric({
+        length: 21,
+        casing: "upper",
+    });
+}
+//# sourceMappingURL=sim-iam-policy-arn.js.map

package/dist/service/iam/policy/sim-iam-policy-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,gBAAgB,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,EAAY,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;KAChB,CAAmB,CAAC;AACvB,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-path.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Normalise a sim IAM policy path by adding and removing slashes.
+ */
+export declare function normalisePolicyPath(path: string | undefined): string;
+//# sourceMappingURL=sim-iam-policy-path.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-path.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASpE"}

package/dist/service/iam/policy/sim-iam-policy-path.js

@@ -0,0 +1,13 @@
+/**
+ * Normalise a sim IAM policy path by adding and removing slashes.
+ */
+export function normalisePolicyPath(path) {
+    if (path === undefined || path.length === 0) {
+        return "/";
+    }
+    const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+    return withLeadingSlash.endsWith("/")
+        ? withLeadingSlash
+        : `${withLeadingSlash}/`;
+}
+//# sourceMappingURL=sim-iam-policy-path.js.map

package/dist/service/iam/policy/sim-iam-policy-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-path.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAClE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,GAAG,gBAAgB,GAAG,CAAC;AAC7B,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.d.ts

@@ -0,0 +1,50 @@
+import type { JSONString } from "../../../util/type-guard/json.js";
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimArn } from "../../aws/arn.js";
+export type SimIamPolicyName = Brand<string, "SimIamPolicyName">;
+export type SimIamPolicyId = Brand<string, "SimIamPolicyId">;
+export interface SimIamPolicyDocument {
+    readonly Version?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly Statement?: SimIamPolicyDocumentStatement | readonly SimIamPolicyDocumentStatement[];
+}
+export interface SimIamPolicyDocumentStatement {
+    readonly Sid?: string | undefined;
+    readonly Effect: "Allow" | "Deny";
+    readonly Action?: string | readonly string[] | undefined;
+    readonly NotAction?: string | readonly string[] | undefined;
+    readonly Resource?: string | readonly string[] | undefined;
+    readonly NotResource?: string | readonly string[] | undefined;
+    readonly Principal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly NotPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly Condition?: SimIamPolicyDocumentCondition | undefined;
+}
+export type SimIamPolicyDocumentPrincipal = string | readonly string[] | Readonly<Record<string, string | readonly string[]>>;
+export type SimIamPolicyDocumentCondition = Readonly<Record<string, Readonly<Record<string, string | number | boolean | readonly string[]>>>>;
+/**
+ * IAM managed policy record.
+ *
+ * This represents customer-managed or AWS-managed IAM policy metadata and its
+ * default policy document. Inline policies and resource policies are stored on
+ * their owning identity/resource instead of in this global managed-policy
+ * store.
+ */
+export interface SimIamManagedPolicy {
+    readonly arn: SimArn;
+    readonly policyId: SimIamPolicyId;
+    readonly policyName: SimIamPolicyName;
+    readonly path: string;
+    readonly defaultVersionId: string;
+    readonly attachmentCount: number;
+    readonly permissionsBoundaryUsageCount: number;
+    readonly isAttachable: boolean;
+    readonly description?: string | undefined;
+    readonly createDate: Date;
+    readonly updateDate: Date;
+    readonly policyDocument?: JSONString<SimIamPolicyDocument> | undefined;
+}
+/**
+ * Backwards-compatible alias while the IAM command handlers are migrated.
+ */
+export type SimIamPolicy = SimIamManagedPolicy;
+//# sourceMappingURL=sim-iam-policy.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EACjB,6BAA6B,GAAG,SAAS,6BAA6B,EAAE,CAAC;CAC5E;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,MAAM,6BAA6B,GACrC,MAAM,GACN,SAAS,MAAM,EAAE,GACjB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;AAEzD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAClD,MAAM,CACJ,MAAM,EACN,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CACxE,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -0,0 +1,6 @@
+import { DynamicFactory } from "@kensio/part-factory";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
+//# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.js

@@ -0,0 +1,28 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import { makeSimPolicyArn, makeSimPolicyId } from "./sim-iam-policy-arn.js";
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export const simIamPolicyFactory = new DynamicFactory(() => {
+    const now = new Date();
+    const policyName = "TestPolicy";
+    const path = "/";
+    return {
+        arn: makeSimPolicyArn({
+            accountId: makeSimAwsAccountId(),
+            path,
+            policyName,
+        }),
+        policyId: makeSimPolicyId(),
+        policyName,
+        path,
+        defaultVersionId: "v1",
+        attachmentCount: 0,
+        permissionsBoundaryUsageCount: 0,
+        isAttachable: true,
+        createDate: now,
+        updateDate: now,
+    };
+});
+//# sourceMappingURL=sim-iam-policy.factory.js.map

package/dist/service/iam/policy/sim-iam-policy.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAe,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,YAAgC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC;YACpB,SAAS,EAAE,mBAAmB,EAAE;YAChC,IAAI;YACJ,UAAU;SACX,CAAC;QACF,QAAQ,EAAE,eAAe,EAAE;QAC3B,UAAU;QACV,IAAI;QACJ,gBAAgB,EAAE,IAAI;QACtB,eAAe,EAAE,CAAC;QAClB,6BAA6B,EAAE,CAAC;QAChC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-policy.js.map

package/dist/service/iam/policy/sim-iam-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":""}

package/dist/service/iam/principal/sim-iam-principal.d.ts

@@ -0,0 +1,13 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+export type SimIamPrincipalType = "root" | "user" | "role" | "assumed-role" | "service";
+/**
+ * Internal abstraction for anything that can make AWS requests.
+ */
+export interface SimIamPrincipal {
+    readonly arn: SimArn;
+    readonly accountId: SimAwsAccountId;
+    readonly principalType: SimIamPrincipalType;
+    readonly name: string;
+}
+//# sourceMappingURL=sim-iam-principal.d.ts.map

package/dist/service/iam/principal/sim-iam-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-principal.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/principal/sim-iam-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAC7B,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}

package/dist/service/iam/principal/sim-iam-principal.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-principal.js.map

package/dist/service/iam/principal/sim-iam-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-principal.js","sourceRoot":"","sources":["../../../../src/service/iam/principal/sim-iam-principal.ts"],"names":[],"mappings":""}

package/dist/service/iam/registry/sim-iam-registry.d.ts

@@ -0,0 +1,84 @@
+export interface SimIamDisableEvent {
+    readonly reason: string;
+    readonly detail?: string | undefined;
+    readonly disabledAt: Date;
+}
+/**
+ * Simulated IAM registry for state that is global within one SimAws instance.
+ *
+ * IAM service facades are Account-scoped, but IAM activation is sim AWS-wide so
+ * cross-account behaviour does not depend on which Account first interacted
+ * with sim IAM.
+ */
+export declare class SimIamRegistry {
+    private activated;
+    private disableEventRecord;
+    private readonly activationEventRecords;
+    /**
+     * Whether sim IAM is currently activated for this sim AWS instance.
+     */
+    get isActivated(): boolean;
+    /**
+     * Whether sim IAM has been explicitly and permanently disabled for this sim
+     * AWS instance.
+     */
+    get isDisabled(): boolean;
+    /**
+     * Recorded reasons why sim IAM activation was attempted.
+     *
+     * Events include both successful activations and later activation attempts that
+     * were ignored because sim IAM had been permanently disabled.
+     */
+    get activationEvents(): SimIamActivationEvent[];
+    /**
+     * The permanent disable event, if the user explicitly disabled sim IAM.
+     */
+    get disableEvent(): SimIamDisableEvent | undefined;
+    /**
+     * Human-readable diagnostic summary of why sim IAM is activated or not yet
+     * activated.
+     */
+    get statusReason(): string;
+    /**
+     * Activate sim IAM for this simulated AWS instance.
+     *
+     * If sim IAM has previously been explicitly disabled, the activation attempt is
+     * recorded for diagnostics but does not reactivate IAM semantics.
+     */
+    activate(reason?: string, detail?: string): void;
+    /**
+     * Disable IAM semantics for this simulated AWS instance.
+     *
+     * Disabling is permanent for the lifetime of this sim AWS instance. Automatic
+     * activations from other simulated services are still recorded after disable,
+     * but they are ignored.
+     *
+     * Disabling does not clear activation history because the history is useful
+     * diagnostic information for tests and debugging.
+     */
+    disable(reason?: string, detail?: string): void;
+    private latestSuccessfulActivationEvent;
+    private formatEventReason;
+}
+interface SimIamActivationEvent {
+    readonly reason: string;
+    readonly detail?: string | undefined;
+    readonly activatedAt: Date;
+    /**
+     * Whether this activation attempt actually made sim IAM activated.
+     *
+     * This is false when the registry had previously been permanently disabled.
+     */
+    readonly activated: boolean;
+    /**
+     * Whether sim IAM had already been permanently disabled when this activation
+     * was attempted.
+     */
+    readonly registryDisabled: boolean;
+    /**
+     * Diagnostic explanation when an activation attempt was recorded but ignored.
+     */
+    readonly ignoredReason?: string | undefined;
+}
+export {};
+//# sourceMappingURL=sim-iam-registry.d.ts.map

package/dist/service/iam/registry/sim-iam-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,kBAAkB,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA+B;IAEtE;;OAEG;IACH,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED;;;OAGG;IACH,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,qBAAqB,EAAE,CAE9C;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,kBAAkB,GAAG,SAAS,CAEjD;IAED;;;OAGG;IACH,IAAI,YAAY,IAAI,MAAM,CAkBzB;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,SAAsB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAkB5D;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,SAAmB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAQxD;IAED,OAAO,CAAC,+BAA+B;IAIvC,OAAO,CAAC,iBAAiB;CAG1B;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAE3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C"}

package/dist/service/iam/registry/sim-iam-registry.js

@@ -0,0 +1,102 @@
+/**
+ * Simulated IAM registry for state that is global within one SimAws instance.
+ *
+ * IAM service facades are Account-scoped, but IAM activation is sim AWS-wide so
+ * cross-account behaviour does not depend on which Account first interacted
+ * with sim IAM.
+ */
+export class SimIamRegistry {
+    activated = false;
+    disableEventRecord;
+    activationEventRecords = [];
+    /**
+     * Whether sim IAM is currently activated for this sim AWS instance.
+     */
+    get isActivated() {
+        return this.activated && this.disableEventRecord === undefined;
+    }
+    /**
+     * Whether sim IAM has been explicitly and permanently disabled for this sim
+     * AWS instance.
+     */
+    get isDisabled() {
+        return this.disableEventRecord !== undefined;
+    }
+    /**
+     * Recorded reasons why sim IAM activation was attempted.
+     *
+     * Events include both successful activations and later activation attempts that
+     * were ignored because sim IAM had been permanently disabled.
+     */
+    get activationEvents() {
+        return this.activationEventRecords;
+    }
+    /**
+     * The permanent disable event, if the user explicitly disabled sim IAM.
+     */
+    get disableEvent() {
+        return this.disableEventRecord;
+    }
+    /**
+     * Human-readable diagnostic summary of why sim IAM is activated or not yet
+     * activated.
+     */
+    get statusReason() {
+        if (this.disableEventRecord !== undefined) {
+            return `Sim IAM is permanently disabled: ${this.formatEventReason(this.disableEventRecord.reason, this.disableEventRecord.detail)}`;
+        }
+        const latestActivationEvent = this.latestSuccessfulActivationEvent();
+        if (latestActivationEvent !== undefined) {
+            return `Sim IAM is activated: ${this.formatEventReason(latestActivationEvent.reason, latestActivationEvent.detail)}`;
+        }
+        return "Sim IAM is not activated because it has not been activated.";
+    }
+    /**
+     * Activate sim IAM for this simulated AWS instance.
+     *
+     * If sim IAM has previously been explicitly disabled, the activation attempt is
+     * recorded for diagnostics but does not reactivate IAM semantics.
+     */
+    activate(reason = "Manual activation", detail) {
+        const registryDisabled = this.disableEventRecord !== undefined;
+        const ignoredReason = registryDisabled
+            ? "Sim IAM was permanently disabled by explicit user action."
+            : undefined;
+        this.activationEventRecords.push({
+            reason,
+            detail,
+            activatedAt: new Date(),
+            activated: !registryDisabled,
+            registryDisabled,
+            ignoredReason,
+        });
+        if (!registryDisabled) {
+            this.activated = true;
+        }
+    }
+    /**
+     * Disable IAM semantics for this simulated AWS instance.
+     *
+     * Disabling is permanent for the lifetime of this sim AWS instance. Automatic
+     * activations from other simulated services are still recorded after disable,
+     * but they are ignored.
+     *
+     * Disabling does not clear activation history because the history is useful
+     * diagnostic information for tests and debugging.
+     */
+    disable(reason = "Manual disable", detail) {
+        this.activated = false;
+        this.disableEventRecord ??= {
+            reason,
+            detail,
+            disabledAt: new Date(),
+        };
+    }
+    latestSuccessfulActivationEvent() {
+        return this.activationEventRecords.findLast((event) => event.activated);
+    }
+    formatEventReason(reason, detail) {
+        return detail === undefined ? reason : `${reason} (${detail})`;
+    }
+}
+//# sourceMappingURL=sim-iam-registry.js.map

package/dist/service/iam/registry/sim-iam-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,GAAG,KAAK,CAAC;IAClB,kBAAkB,CAAiC;IAC1C,sBAAsB,GAA4B,EAAE,CAAC;IAEtE;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,sBAAsB,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,IAAI,YAAY;QACd,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,oCAAoC,IAAI,CAAC,iBAAiB,CAC/D,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAC9B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAC/B,EAAE,CAAC;QACN,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAErE,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,yBAAyB,IAAI,CAAC,iBAAiB,CACpD,qBAAqB,CAAC,MAAM,EAC5B,qBAAqB,CAAC,MAAM,CAC7B,EAAE,CAAC;QACN,CAAC;QAED,OAAO,6DAA6D,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,MAAe;QACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;QAC/D,MAAM,aAAa,GAAG,gBAAgB;YACpC,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;YAC/B,MAAM;YACN,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,SAAS,EAAE,CAAC,gBAAgB;YAC5B,gBAAgB;YAChB,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,MAAe;QAChD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAEvB,IAAI,CAAC,kBAAkB,KAAK;YAC1B,MAAM;YACN,MAAM;YACN,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IAEO,+BAA+B;QACrC,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,MAAe;QACvD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,MAAM,GAAG,CAAC;IACjE,CAAC;CACF"}

package/dist/service/iam/role/sim-iam-role-arn.d.ts

@@ -0,0 +1,14 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamRoleName } from "./sim-iam-role.js";
+interface MakeSimRoleArnProps {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly roleName: SimIamRoleName;
+}
+/**
+ * Make an IAM Role ARN.
+ */
+export declare function makeSimRoleArn(props: MakeSimRoleArnProps): SimArn;
+export {};
+//# sourceMappingURL=sim-iam-role-arn.d.ts.map

package/dist/service/iam/role/sim-iam-role-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAKjE"}

package/dist/service/iam/role/sim-iam-role-arn.js

@@ -0,0 +1,9 @@
+/**
+ * Make an IAM Role ARN.
+ */
+export function makeSimRoleArn(props) {
+    const { accountId, path, roleName } = props;
+    const pathPart = path === "/" ? "" : path.slice(1);
+    return `arn:aws:iam::${accountId}:role/${pathPart}${roleName}`;
+}
+//# sourceMappingURL=sim-iam-role-arn.js.map

package/dist/service/iam/role/sim-iam-role-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-arn.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,gBAAgB,SAAS,SAAS,QAAQ,GAAG,QAAQ,EAAY,CAAC;AAC3E,CAAC"}

package/dist/service/iam/role/sim-iam-role-id.d.ts

@@ -0,0 +1,7 @@
+import type { Brand } from "../../../util/brand.type.js";
+export type SimIamRoleId = Brand<string, "SimIamRoleId">;
+/**
+ * Generate a fake IAM Role ID.
+ */
+export declare function makeSimIamRoleId(): SimIamRoleId;
+//# sourceMappingURL=sim-iam-role-id.d.ts.map