@kensio/yulin 0.31.0 → 0.33.0

package/dist/service/iam/policy/sim-iam-policy-arn.js

@@ -0,0 +1,17 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export function makeSimPolicyArn(props) {
+    return `arn:aws:iam::${props.accountId}:policy${props.path}${props.policyName}`;
+}
+/**
+ * Make a sim IAM policy ID.
+ */
+export function makeSimPolicyId() {
+    return faker.string.alphanumeric({
+        length: 21,
+        casing: "upper",
+    });
+}
+//# sourceMappingURL=sim-iam-policy-arn.js.map

package/dist/service/iam/policy/sim-iam-policy-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,gBAAgB,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,EAAY,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;KAChB,CAAmB,CAAC;AACvB,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-path.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Normalise a sim IAM policy path by adding and removing slashes.
+ */
+export declare function normalisePolicyPath(path: string | undefined): string;
+//# sourceMappingURL=sim-iam-policy-path.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-path.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASpE"}

package/dist/service/iam/policy/sim-iam-policy-path.js

@@ -0,0 +1,13 @@
+/**
+ * Normalise a sim IAM policy path by adding and removing slashes.
+ */
+export function normalisePolicyPath(path) {
+    if (path === undefined || path.length === 0) {
+        return "/";
+    }
+    const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+    return withLeadingSlash.endsWith("/")
+        ? withLeadingSlash
+        : `${withLeadingSlash}/`;
+}
+//# sourceMappingURL=sim-iam-policy-path.js.map

package/dist/service/iam/policy/sim-iam-policy-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-path.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAClE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,GAAG,gBAAgB,GAAG,CAAC;AAC7B,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.d.ts

@@ -0,0 +1,52 @@
+import type { JSONString } from "../../../util/type-guard/json.js";
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimArn } from "../../aws/arn.js";
+export type SimIamPolicyName = Brand<string, "SimIamPolicyName">;
+export type SimIamPolicyId = Brand<string, "SimIamPolicyId">;
+export interface SimIamPolicyDocument {
+    readonly Version?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly Statement?: SimIamPolicyDocumentStatement | readonly SimIamPolicyDocumentStatement[];
+}
+export interface SimIamPolicyDocumentStatement {
+    readonly Sid?: string | undefined;
+    readonly Effect: "Allow" | "Deny";
+    readonly Action?: string | readonly string[] | undefined;
+    readonly NotAction?: string | readonly string[] | undefined;
+    readonly Resource?: string | readonly string[] | undefined;
+    readonly NotResource?: string | readonly string[] | undefined;
+    readonly Principal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly NotPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly Condition?: SimIamPolicyDocumentCondition | undefined;
+}
+export type SimIamPolicyDocumentPrincipalObject = Readonly<Record<string, string | readonly string[]>>;
+export type SimIamPolicyDocumentPrincipal = string | readonly string[] | SimIamPolicyDocumentPrincipalObject;
+export type SimIamConditionValue = string | number | boolean | readonly string[];
+export type SimIamPolicyDocumentCondition = Readonly<Record<string, Readonly<Record<string, SimIamConditionValue>>>>;
+/**
+ * IAM managed policy record.
+ *
+ * This represents customer-managed or AWS-managed IAM policy metadata and its
+ * default policy document. Inline policies and resource policies are stored on
+ * their owning identity/resource instead of in this global managed-policy
+ * store.
+ */
+export interface SimIamManagedPolicy {
+    readonly arn: SimArn;
+    readonly policyId: SimIamPolicyId;
+    readonly policyName: SimIamPolicyName;
+    readonly path: string;
+    readonly defaultVersionId: string;
+    readonly attachmentCount: number;
+    readonly permissionsBoundaryUsageCount: number;
+    readonly isAttachable: boolean;
+    readonly description?: string | undefined;
+    readonly createDate: Date;
+    readonly updateDate: Date;
+    readonly policyDocument?: JSONString<SimIamPolicyDocument> | undefined;
+}
+/**
+ * Backwards-compatible alias while the IAM command handlers are migrated.
+ */
+export type SimIamPolicy = SimIamManagedPolicy;
+//# sourceMappingURL=sim-iam-policy.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EACjB,6BAA6B,GAAG,SAAS,6BAA6B,EAAE,CAAC;CAC5E;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CACxD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAC3C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GACvC,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,mCAAmC,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAC9B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;AAEhD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAClD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAC/D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -0,0 +1,6 @@
+import { DynamicFactory } from "@kensio/part-factory";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
+//# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.js

@@ -0,0 +1,28 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import { makeSimPolicyArn, makeSimPolicyId } from "./sim-iam-policy-arn.js";
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export const simIamPolicyFactory = new DynamicFactory(() => {
+    const now = new Date();
+    const policyName = "TestPolicy";
+    const path = "/";
+    return {
+        arn: makeSimPolicyArn({
+            accountId: makeSimAwsAccountId(),
+            path,
+            policyName,
+        }),
+        policyId: makeSimPolicyId(),
+        policyName,
+        path,
+        defaultVersionId: "v1",
+        attachmentCount: 0,
+        permissionsBoundaryUsageCount: 0,
+        isAttachable: true,
+        createDate: now,
+        updateDate: now,
+    };
+});
+//# sourceMappingURL=sim-iam-policy.factory.js.map

package/dist/service/iam/policy/sim-iam-policy.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAe,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,YAAgC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC;YACpB,SAAS,EAAE,mBAAmB,EAAE;YAChC,IAAI;YACJ,UAAU;SACX,CAAC;QACF,QAAQ,EAAE,eAAe,EAAE;QAC3B,UAAU;QACV,IAAI;QACJ,gBAAgB,EAAE,IAAI;QACtB,eAAe,EAAE,CAAC;QAClB,6BAA6B,EAAE,CAAC;QAChC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-policy.js.map

package/dist/service/iam/policy/sim-iam-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":""}

package/dist/service/iam/principal/sim-iam-principal.d.ts

@@ -0,0 +1,13 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+export type SimIamPrincipalType = "root" | "user" | "role" | "assumed-role" | "service";
+/**
+ * Internal abstraction for anything that can make AWS requests.
+ */
+export interface SimIamPrincipal {
+    readonly arn: SimArn;
+    readonly accountId: SimAwsAccountId;
+    readonly principalType: SimIamPrincipalType;
+    readonly name: string;
+}
+//# sourceMappingURL=sim-iam-principal.d.ts.map

package/dist/service/iam/principal/sim-iam-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-principal.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/principal/sim-iam-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAC7B,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}

package/dist/service/iam/principal/sim-iam-principal.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-principal.js.map

package/dist/service/iam/principal/sim-iam-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-principal.js","sourceRoot":"","sources":["../../../../src/service/iam/principal/sim-iam-principal.ts"],"names":[],"mappings":""}

package/dist/service/iam/registry/sim-iam-account-resolver.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIam } from "../sim-iam.js";
+/**
+ * Resolves account-scoped simulated IAM facades within one simulated AWS
+ * environment.
+ */
+export interface SimIamAccountResolver {
+    /**
+     * Resolve simulated IAM for an Account.
+     *
+     * Should throw a diagnostic error when IAM has not been instantiated and
+     * registered for the requested Account.
+     */
+    iamForAccount(accountId: SimAwsAccountId): SimIam;
+}
+//# sourceMappingURL=sim-iam-account-resolver.d.ts.map

package/dist/service/iam/registry/sim-iam-account-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC;CACnD"}

package/dist/service/iam/registry/sim-iam-account-resolver.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-account-resolver.js.map

package/dist/service/iam/registry/sim-iam-account-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-resolver.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":""}

package/dist/service/iam/registry/sim-iam-registry.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIam } from "../sim-iam.js";
+import type { SimIamAccountResolver } from "./sim-iam-account-resolver.js";
+/**
+ * Simulation-wide registry of account-scoped IAM facades.
+ *
+ * One registry belongs to one SimAws environment. It allows cross-account
+ * services to resolve IAM state owned by a particular Account.
+ *
+ * The registry indexes IAM facades but does not create or own them.
+ */
+export declare class SimIamRegistry implements SimIamAccountResolver {
+    private readonly iamByAccountId;
+    /**
+     * Register the IAM facade belonging to an Account.
+     *
+     * Re-registering the same facade is harmless. Registering a different facade
+     * for an Account that already has one fails rather than silently replacing
+     * account-owned IAM state.
+     */
+    register(accountId: SimAwsAccountId, iam: SimIam): void;
+    /**
+     * Resolve the registered IAM facade belonging to an Account.
+     *
+     * Throws a diagnostic error when no IAM facade is registered so callers can
+     * rely on receiving a usable account-scoped service.
+     */
+    iamForAccount(accountId: SimAwsAccountId): SimIam;
+}
+//# sourceMappingURL=sim-iam-registry.d.ts.map

package/dist/service/iam/registry/sim-iam-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,qBAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CActD;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAQhD;CACF"}

package/dist/service/iam/registry/sim-iam-registry.js

@@ -0,0 +1,42 @@
+/**
+ * Simulation-wide registry of account-scoped IAM facades.
+ *
+ * One registry belongs to one SimAws environment. It allows cross-account
+ * services to resolve IAM state owned by a particular Account.
+ *
+ * The registry indexes IAM facades but does not create or own them.
+ */
+export class SimIamRegistry {
+    iamByAccountId = new Map();
+    /**
+     * Register the IAM facade belonging to an Account.
+     *
+     * Re-registering the same facade is harmless. Registering a different facade
+     * for an Account that already has one fails rather than silently replacing
+     * account-owned IAM state.
+     */
+    register(accountId, iam) {
+        const existingIam = this.iamByAccountId.get(accountId);
+        if (existingIam === iam) {
+            return;
+        }
+        if (existingIam !== undefined) {
+            throw new Error(`A different SimIam is already registered for Account ${accountId}`);
+        }
+        this.iamByAccountId.set(accountId, iam);
+    }
+    /**
+     * Resolve the registered IAM facade belonging to an Account.
+     *
+     * Throws a diagnostic error when no IAM facade is registered so callers can
+     * rely on receiving a usable account-scoped service.
+     */
+    iamForAccount(accountId) {
+        const iam = this.iamByAccountId.get(accountId);
+        if (iam === undefined) {
+            throw new Error(`Sim IAM is not registered for Account ${accountId}`);
+        }
+        return iam;
+    }
+}
+//# sourceMappingURL=sim-iam-registry.js.map

package/dist/service/iam/registry/sim-iam-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACR,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAA0B,EAAE,GAAW;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/service/iam/role/arn/sim-iam-role-arn-parser.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+export interface IamRoleArnParts {
+    readonly accountId: SimAwsAccountId;
+    readonly roleName: string;
+}
+/**
+ * Parses IAM role ARNs into the account ID and role name used by STS.
+ */
+export declare class IamRoleArnParser {
+    /**
+     * Parse an IAM role ARN.
+     */
+    parse(roleArn: string): IamRoleArnParts;
+    private isAccountId;
+}
+//# sourceMappingURL=sim-iam-role-arn-parser.d.ts.map

package/dist/service/iam/role/arn/sim-iam-role-arn-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CA8BtC;IAED,OAAO,CAAC,WAAW;CAapB"}

package/dist/service/iam/role/arn/sim-iam-role-arn-parser.js

@@ -0,0 +1,41 @@
+/**
+ * Parses IAM role ARNs into the account ID and role name used by STS.
+ */
+export class IamRoleArnParser {
+    /**
+     * Parse an IAM role ARN.
+     */
+    parse(roleArn) {
+        const prefix = "arn:aws:iam::";
+        if (!roleArn.startsWith(prefix)) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        const roleSeparator = ":role/";
+        const separatorIndex = roleArn.indexOf(roleSeparator, prefix.length);
+        if (separatorIndex === -1) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        const accountId = roleArn.slice(prefix.length, separatorIndex);
+        const rolePathAndName = roleArn.slice(separatorIndex + roleSeparator.length);
+        const roleName = rolePathAndName.slice(rolePathAndName.lastIndexOf("/") + 1);
+        if (!this.isAccountId(accountId) || roleName.length === 0) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        return {
+            accountId: accountId,
+            roleName,
+        };
+    }
+    isAccountId(value) {
+        if (value.length !== 12) {
+            return false;
+        }
+        for (const character of value) {
+            if (character < "0" || character > "9") {
+                return false;
+            }
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=sim-iam-role-arn-parser.js.map

package/dist/service/iam/role/arn/sim-iam-role-arn-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn-parser.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC;QAE/B,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAErE,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CACnC,cAAc,GAAG,aAAa,CAAC,MAAM,CACtC,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CACpC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CACrC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,SAA4B;YACvC,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/service/iam/role/arn/sim-iam-role-arn.d.ts

@@ -0,0 +1,14 @@
+import type { SimArn } from "../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamRoleName } from "../sim-iam-role.js";
+interface MakeSimRoleArnProps {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly roleName: SimIamRoleName;
+}
+/**
+ * Make an IAM Role ARN.
+ */
+export declare function makeSimRoleArn(props: MakeSimRoleArnProps): SimArn;
+export {};
+//# sourceMappingURL=sim-iam-role-arn.d.ts.map

package/dist/service/iam/role/arn/sim-iam-role-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAKjE"}

package/dist/service/iam/role/arn/sim-iam-role-arn.js

@@ -0,0 +1,9 @@
+/**
+ * Make an IAM Role ARN.
+ */
+export function makeSimRoleArn(props) {
+    const { accountId, path, roleName } = props;
+    const pathPart = path === "/" ? "" : path.slice(1);
+    return `arn:aws:iam::${accountId}:role/${pathPart}${roleName}`;
+}
+//# sourceMappingURL=sim-iam-role-arn.js.map

package/dist/service/iam/role/arn/sim-iam-role-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.js","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,gBAAgB,SAAS,SAAS,QAAQ,GAAG,QAAQ,EAAY,CAAC;AAC3E,CAAC"}

package/dist/service/iam/role/sim-iam-role-arn.d.ts

@@ -0,0 +1,14 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamRoleName } from "./sim-iam-role.js";
+interface MakeSimRoleArnProps {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly roleName: SimIamRoleName;
+}
+/**
+ * Make an IAM Role ARN.
+ */
+export declare function makeSimRoleArn(props: MakeSimRoleArnProps): SimArn;
+export {};
+//# sourceMappingURL=sim-iam-role-arn.d.ts.map

package/dist/service/iam/role/sim-iam-role-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAKjE"}

package/dist/service/iam/role/sim-iam-role-arn.js

@@ -0,0 +1,9 @@
+/**
+ * Make an IAM Role ARN.
+ */
+export function makeSimRoleArn(props) {
+    const { accountId, path, roleName } = props;
+    const pathPart = path === "/" ? "" : path.slice(1);
+    return `arn:aws:iam::${accountId}:role/${pathPart}${roleName}`;
+}
+//# sourceMappingURL=sim-iam-role-arn.js.map

package/dist/service/iam/role/sim-iam-role-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-arn.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,gBAAgB,SAAS,SAAS,QAAQ,GAAG,QAAQ,EAAY,CAAC;AAC3E,CAAC"}

package/dist/service/iam/role/sim-iam-role-id.d.ts

@@ -0,0 +1,7 @@
+import type { Brand } from "../../../util/brand.type.js";
+export type SimIamRoleId = Brand<string, "SimIamRoleId">;
+/**
+ * Generate a fake IAM Role ID.
+ */
+export declare function makeSimIamRoleId(): SimIamRoleId;
+//# sourceMappingURL=sim-iam-role-id.d.ts.map

package/dist/service/iam/role/sim-iam-role-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-id.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-id.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAGzD,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAEzD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C"}

package/dist/service/iam/role/sim-iam-role-id.js

@@ -0,0 +1,8 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Generate a fake IAM Role ID.
+ */
+export function makeSimIamRoleId() {
+    return `AROA${faker.string.alphanumeric({ length: 17 })}`;
+}
+//# sourceMappingURL=sim-iam-role-id.js.map

package/dist/service/iam/role/sim-iam-role-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-id.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-id.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAIxC;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAkB,CAAC;AAC5E,CAAC"}

package/dist/service/iam/role/sim-iam-role-path.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Normalise an IAM Role path to the AWS-style slash-delimited form.
+ */
+export declare function normaliseRolePath(path?: string): string;
+//# sourceMappingURL=sim-iam-role-path.d.ts.map

package/dist/service/iam/role/sim-iam-role-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-path.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CASvD"}

package/dist/service/iam/role/sim-iam-role-path.js

@@ -0,0 +1,13 @@
+/**
+ * Normalise an IAM Role path to the AWS-style slash-delimited form.
+ */
+export function normaliseRolePath(path) {
+    if (path === undefined || path.length === 0) {
+        return "/";
+    }
+    const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+    return withLeadingSlash.endsWith("/")
+        ? withLeadingSlash
+        : `${withLeadingSlash}/`;
+}
+//# sourceMappingURL=sim-iam-role-path.js.map

package/dist/service/iam/role/sim-iam-role-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-path.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role-path.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAClE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,GAAG,gBAAgB,GAAG,CAAC;AAC7B,CAAC"}

package/dist/service/iam/role/sim-iam-role.d.ts

@@ -0,0 +1,31 @@
+import type { JSONString } from "../../../util/type-guard/json.js";
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimArn } from "../../aws/arn.js";
+import type { SimIamPolicyDocument } from "../policy/sim-iam-policy.js";
+import type { SimIamPrincipal } from "../principal/sim-iam-principal.js";
+import type { SimIamRoleId } from "./sim-iam-role-id.js";
+export type SimIamRoleName = Brand<string, "SimIamRoleName">;
+export interface SimIamRole extends SimIamPrincipal {
+    readonly principalType: "role";
+    readonly roleId: SimIamRoleId;
+    readonly roleName: SimIamRoleName;
+    readonly path: string;
+    /**
+     * Role trust policy used to authorize sts:AssumeRole-style flows.
+     *
+     * This is resource-policy-like and must not be evaluated as an ordinary
+     * identity permissions policy for service actions.
+     */
+    readonly assumeRolePolicyDocument?: JSONString<SimIamPolicyDocument> | undefined;
+    readonly description?: string | undefined;
+    readonly createDate: Date;
+    /**
+     * Inline identity-based permissions policies stored directly on this role.
+     */
+    readonly inlinePolicies: Map<string, JSONString<SimIamPolicyDocument>>;
+    /**
+     * ARNs of managed identity-based permissions policies attached to this role.
+     */
+    readonly attachedPolicyArns: Set<SimArn>;
+}
+//# sourceMappingURL=sim-iam-role.d.ts.map

package/dist/service/iam/role/sim-iam-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAChC,UAAU,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;IAE/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAEvE;;OAEG;IACH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC1C"}

package/dist/service/iam/role/sim-iam-role.factory.d.ts

@@ -0,0 +1,7 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import type { SimIamRole } from "./sim-iam-role.js";
+/**
+ * Generates fake IAM Role records.
+ */
+export declare const simIamRoleFactory: DynamicFactory<SimIamRole>;
+//# sourceMappingURL=sim-iam-role.factory.d.ts.map

package/dist/service/iam/role/sim-iam-role.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,4BAqB5B,CAAC"}

package/dist/service/iam/role/sim-iam-role.factory.js

@@ -0,0 +1,29 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+import { makeSimRoleArn } from "./arn/sim-iam-role-arn.js";
+import { makeSimIamRoleId } from "./sim-iam-role-id.js";
+/**
+ * Generates fake IAM Role records.
+ */
+export const simIamRoleFactory = new DynamicFactory(() => {
+    const accountId = makeSimAwsAccountId();
+    const roleName = "ApplicationRole";
+    const path = "/";
+    return {
+        arn: makeSimRoleArn({
+            accountId,
+            path,
+            roleName,
+        }),
+        accountId,
+        principalType: "role",
+        name: roleName,
+        roleId: makeSimIamRoleId(),
+        roleName,
+        path,
+        createDate: new Date(),
+        inlinePolicies: new Map(),
+        attachedPolicyArns: new Set(),
+    };
+});
+//# sourceMappingURL=sim-iam-role.factory.js.map

package/dist/service/iam/role/sim-iam-role.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,cAAc,CAAa,GAAG,EAAE;IACnE,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,iBAAmC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,GAAG,EAAE,cAAc,CAAC;YAClB,SAAS;YACT,IAAI;YACJ,QAAQ;SACT,CAAC;QACF,SAAS;QACT,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,gBAAgB,EAAE;QAC1B,QAAQ;QACR,IAAI;QACJ,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;KAC9B,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/service/iam/role/sim-iam-role.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-role.js.map

package/dist/service/iam/role/sim-iam-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.ts"],"names":[],"mappings":""}