@kensio/yulin 0.32.0 → 0.33.0

package/dist/service/iam/authorize/sim-iam-decision.js

@@ -28,12 +28,22 @@ export class SimIamPolicyDecision {
     statementMatcher;
     explicitDenyStatementRecords = [];
     allowStatementRecords = [];
+    trustAllowStatementRecords = [];
     constructor(request, policyDocumentParser = new SimIamPolicyDocumentParser()) {
         this.request = request;
         this.policyDocumentParser = policyDocumentParser;
         this.statementMatcher = new SimIamPolicyStatementMatcher(request);
         this.evaluate();
     }
+    /**
+     * Resolved caller against which this authorization decision was evaluated.
+     *
+     * This includes IAM's default account-root caller when the authorization input
+     * omitted a caller.
+     */
+    get caller() {
+        return this.request.caller;
+    }
     /**
      * Final IAM decision value.
      */
@@ -70,6 +80,14 @@ export class SimIamPolicyDecision {
     get isImplicitDeny() {
         return this.value === SimIamPolicyDecisionValue.ImplicitDeny;
     }
+    /**
+     * Whether a matching trust-policy statement explicitly allows the request.
+     *
+     * An identity-policy Allow cannot substitute for the target role's trust.
+     */
+    get isAllowedByTrustPolicy() {
+        return this.trustAllowStatementRecords.length > 0;
+    }
     /**
      * Matching explicit Deny statements.
      */
@@ -82,6 +100,12 @@ export class SimIamPolicyDecision {
     get allowStatements() {
         return this.allowStatementRecords;
     }
+    /**
+     * Matching Allow statements originating from trust policies.
+     */
+    get trustAllowStatements() {
+        return this.trustAllowStatementRecords;
+    }
     evaluate() {
         for (const policy of [
             ...this.request.identityPolicies,
@@ -101,6 +125,9 @@ export class SimIamPolicyDecision {
                 continue;
             }
             this.allowStatementRecords.push(statement.source);
+            if (policy.sourceType === "trust") {
+                this.trustAllowStatementRecords.push(statement.source);
+            }
         }
     }
 }

package/dist/service/iam/authorize/sim-iam-decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-decision.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-decision.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAqB;IAC5B,oBAAoB,CAA6B;IACjD,gBAAgB,CAA+B;IAC/C,4BAA4B,GAC3C,EAAE,CAAC;IACY,qBAAqB,GAAoC,EAAE,CAAC;IAE7E,YACE,OAA2B,EAC3B,oBAAoB,GAA+B,IAAI,0BAA0B,EAAE;QAEnF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,yBAAyB,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,OAAO,yBAAyB,CAAC,YAAY,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,4BAA4B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,MAAM,IAAI;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAChC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtE,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-iam-decision.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-decision.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAG3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAqB;IAC5B,oBAAoB,CAA6B;IACjD,gBAAgB,CAA+B;IAC/C,4BAA4B,GAC3C,EAAE,CAAC;IACY,qBAAqB,GAAoC,EAAE,CAAC;IAC5D,0BAA0B,GACzC,EAAE,CAAC;IAEL,YACE,OAA2B,EAC3B,oBAAoB,GAA+B,IAAI,0BAA0B,EAAE;QAEnF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,yBAAyB,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,OAAO,yBAAyB,CAAC,YAAY,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,4BAA4B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,0BAA0B,CAAC;IACzC,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,MAAM,IAAI;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAChC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtE,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-inter-service-auth-z.d.ts

@@ -0,0 +1,53 @@
+import type { SimIamAuthorizationInput } from "./context/sim-iam-auth-z-context-builder.js";
+import type { SimAwsResolvedCaller } from "../../aws/caller/sim-aws-caller-resolver.js";
+/**
+ * The part of an IAM authorization decision needed by service integrations.
+ *
+ * Service command handlers need to know whether authorization succeeded and
+ * which caller should appear in an access-denied error. They do not need the
+ * policy evaluation details exposed by SimIamPolicyDecision.
+ *
+ * SimIamPolicyDecision structurally implements this interface, while simpler
+ * authorization implementations can return a decision without invoking the IAM
+ * policy parser and matcher.
+ */
+export interface SimIamAuthorizationDecision {
+    readonly caller: SimAwsResolvedCaller;
+    readonly isAllowed: boolean;
+    readonly isDenied: boolean;
+}
+/**
+ * IAM authorization capability consumed by other simulated AWS services.
+ *
+ * SimIam structurally implements this interface without requiring consumers to
+ * depend on the complete IAM service facade or its concrete decision type.
+ */
+export interface SimIamInterServiceAuthZ {
+    authorize(input: SimIamAuthorizationInput): SimIamAuthorizationDecision;
+}
+/**
+ * Permissive authorization used when a service is constructed without IAM.
+ *
+ * Top-level SimAws service construction supplies the account-scoped SimIam
+ * implementation, so requests made through SimAws still evaluate simulated IAM
+ * policies. This fallback supports direct construction of service facades and
+ * command handlers without creating isolated IAM state.
+ *
+ * This implementation does not create synthetic policies or use the IAM policy
+ * evaluator. Its result therefore remains allowed if IAM later adds principal-
+ * specific rules, permission boundaries, service control policies, or other
+ * sources of explicit denial.
+ */
+export declare class SimIamAllowAllAuth implements SimIamInterServiceAuthZ {
+    private readonly callerResolver;
+    /**
+     * Return an unconditional allowed decision.
+     *
+     * Caller resolution is retained only for consistent diagnostic metadata. An
+     * omitted caller is represented as anonymous because this adapter has no
+     * Account from which to derive a root ARN. That representation cannot affect
+     * the result because no policies or principal rules are evaluated here.
+     */
+    authorize(input: SimIamAuthorizationInput): SimIamAuthorizationDecision;
+}
+//# sourceMappingURL=sim-iam-inter-service-auth-z.d.ts.map

package/dist/service/iam/authorize/sim-iam-inter-service-auth-z.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-inter-service-auth-z.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-inter-service-auth-z.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAGxF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,2BAA2B,CAAC;CACzE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,YAAW,uBAAuB;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,2BAA2B,CAgBtE;CACF"}

package/dist/service/iam/authorize/sim-iam-inter-service-auth-z.js

@@ -0,0 +1,38 @@
+import { SimAwsCallerResolver } from "../../aws/caller/sim-aws-caller-resolver.js";
+/**
+ * Permissive authorization used when a service is constructed without IAM.
+ *
+ * Top-level SimAws service construction supplies the account-scoped SimIam
+ * implementation, so requests made through SimAws still evaluate simulated IAM
+ * policies. This fallback supports direct construction of service facades and
+ * command handlers without creating isolated IAM state.
+ *
+ * This implementation does not create synthetic policies or use the IAM policy
+ * evaluator. Its result therefore remains allowed if IAM later adds principal-
+ * specific rules, permission boundaries, service control policies, or other
+ * sources of explicit denial.
+ */
+export class SimIamAllowAllAuth {
+    callerResolver = new SimAwsCallerResolver();
+    /**
+     * Return an unconditional allowed decision.
+     *
+     * Caller resolution is retained only for consistent diagnostic metadata. An
+     * omitted caller is represented as anonymous because this adapter has no
+     * Account from which to derive a root ARN. That representation cannot affect
+     * the result because no policies or principal rules are evaluated here.
+     */
+    authorize(input) {
+        const caller = input.caller?.kind === "credentials"
+            ? this.callerResolver.resolve({ kind: "anonymous" }, { kind: "anonymous" })
+            : this.callerResolver.resolve(input.caller, {
+                kind: "anonymous",
+            });
+        return {
+            caller,
+            isAllowed: true,
+            isDenied: false,
+        };
+    }
+}
+//# sourceMappingURL=sim-iam-inter-service-auth-z.js.map

package/dist/service/iam/authorize/sim-iam-inter-service-auth-z.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-inter-service-auth-z.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-inter-service-auth-z.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AA6BnF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACZ,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D;;;;;;;OAOG;IACH,SAAS,CAAC,KAA+B;QACvC,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,aAAa;YAClC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrB,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB;YACH,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;gBACxC,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QAET,OAAO;YACL,MAAM;YACN,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-wildcard.d.ts

@@ -4,7 +4,7 @@ interface SimIamWildcardMatchOptions {
 /**
  * Match an IAM-style wildcard pattern.
  *
- * Initial support is small: "*" means zero or more characters.
+ * "*" means zero or more characters and "?" means exactly one character.
  */
 export declare function simIamWildcardMatch(pattern: string, value: string, options: SimIamWildcardMatchOptions): boolean;
 export {};

package/dist/service/iam/authorize/sim-iam-wildcard.js

@@ -1,7 +1,7 @@
 /**
  * Match an IAM-style wildcard pattern.
  *
- * Initial support is small: "*" means zero or more characters.
+ * "*" means zero or more characters and "?" means exactly one character.
  */
 export function simIamWildcardMatch(pattern, value, options) {
     return wildcardMatch(pattern, value, options);
@@ -9,13 +9,15 @@ export function simIamWildcardMatch(pattern, value, options) {
 function wildcardMatch(pattern, value, options) {
     const regexPattern = pattern
         .replaceAll(/[\\^$.*+?()[\]{}|]/gu, String.raw `\$&`)
-        .replaceAll(String.raw `\*`, ".*");
+        .replaceAll(String.raw `\*`, ".*")
+        .replaceAll(String.raw `\?`, ".");
     /*
      * IAM wildcard patterns are not accepted as regex syntax. They are converted
-     * from a small wildcard language where only "*" has special meaning. All other
-     * characters are escaped above.
+     * from a small wildcard language where "*" and "?" have special meaning. All
+     * other regex characters are escaped above.
      */
     // eslint-disable-next-line security/detect-non-literal-regexp
-    return new RegExp(`^${regexPattern}$`, options.caseSensitive ? "u" : "iu").test(value);
+    const regExp = new RegExp(`^${regexPattern}$`, options.caseSensitive ? "u" : "iu");
+    return regExp.test(value);
 }
 //# sourceMappingURL=sim-iam-wildcard.js.map

package/dist/service/iam/authorize/sim-iam-wildcard.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-wildcard.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-wildcard.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,MAAM,YAAY,GAAG,OAAO;SACzB,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC;SACnD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,IAAI,CAAC,CAAC;IAEpC;;;;OAIG;IACH,8DAA8D;IAC9D,OAAO,IAAI,MAAM,CACf,IAAI,YAAY,GAAG,EACnB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"sim-iam-wildcard.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-wildcard.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,MAAM,YAAY,GAAG,OAAO;SACzB,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC;SACnD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,IAAI,CAAC;SAChC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnC;;;;OAIG;IACH,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,IAAI,YAAY,GAAG,EACnB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACnC,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/service/iam/command/policy/list-policies/list-policies.handler.d.ts

@@ -21,8 +21,8 @@ export declare class ListPoliciesCommandHandler implements CommandHandler<SimLis
      */
     handle(cmd: SimListPoliciesCommand): Promise<SimListPoliciesCommandOutput>;
     private matchingPolicies;
-    private static makeMarker;
-    private static parseMarker;
+    private makeMarker;
+    private parseMarker;
 }
 export {};
 //# sourceMappingURL=list-policies.handler.d.ts.map

package/dist/service/iam/command/policy/list-policies/list-policies.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-policies.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/list-policies/list-policies.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,+BAA+B,EAKjD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CA4CvC;IAED,OAAO,CAAC,gBAAgB;IAgCxB,OAAO,CAAC,MAAM,CAAC,UAAU;IAIzB,OAAO,CAAC,MAAM,CAAC,WAAW;CAG3B"}
+{"version":3,"file":"list-policies.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/list-policies/list-policies.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,+BAA+B,EAKjD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CA4CvC;IAED,OAAO,CAAC,gBAAgB;IA6BxB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;CAGpB"}

package/dist/service/iam/command/policy/list-policies/list-policies.handler.js

@@ -22,7 +22,7 @@ export class ListPoliciesCommandHandler {
         const policies = this.matchingPolicies(cmd);
         const startArn = cmd.input.Marker === undefined
             ? undefined
-            : ListPoliciesCommandHandler.parseMarker(cmd.input.Marker);
+            : this.parseMarker(cmd.input.Marker);
         const startIndex = startArn === undefined
             ? 0
             : Math.max(0, policies.findIndex((policy) => policy.arn === startArn) + 1);
@@ -45,12 +45,15 @@ export class ListPoliciesCommandHandler {
             })),
             IsTruncated: isTruncated,
             Marker: isTruncated && lastPolicy !== undefined
-                ? ListPoliciesCommandHandler.makeMarker(lastPolicy.arn)
+                ? this.makeMarker(lastPolicy.arn)
                 : undefined,
         };
     }
     matchingPolicies(cmd) {
-        const policies = [...this.policies.values()].toSorted((a, b) => a.arn.localeCompare(b.arn));
+        const policies = this.policies
+            .values()
+            .toArray()
+            .toSorted((a, b) => a.arn.localeCompare(b.arn));
         return policies.filter((policy) => {
             if (cmd.input.Scope === "AWS") {
                 return false;
@@ -62,17 +65,14 @@ export class ListPoliciesCommandHandler {
                 !policy.path.startsWith(cmd.input.PathPrefix)) {
                 return false;
             }
-            if (cmd.input.PolicyUsageFilter === "PermissionsBoundary" &&
-                policy.permissionsBoundaryUsageCount === 0) {
-                return false;
-            }
-            return true;
+            return !(cmd.input.PolicyUsageFilter === "PermissionsBoundary" &&
+                policy.permissionsBoundaryUsageCount === 0);
         });
     }
-    static makeMarker(policyArn) {
+    makeMarker(policyArn) {
         return Buffer.from(policyArn, "utf8").toString("base64url");
     }
-    static parseMarker(marker) {
+    parseMarker(marker) {
         return Buffer.from(marker, "base64url").toString("utf8");
     }
 }

package/dist/service/iam/command/policy/list-policies/list-policies.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-policies.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/list-policies/list-policies.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAYtD;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAEjD,YAAY,KAAsC;QAChD,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE/D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA2B;QAE3B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,QAAQ,GACZ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE/D,MAAM,UAAU,GACd,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,CAAC,EACD,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,CAC5D,CAAC;QAER,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE/D,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW;YACxB,MAAM,EACJ,WAAW,IAAI,UAAU,KAAK,SAAS;gBACrC,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvD,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,GAA2B;QAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7D,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAC3B,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IACE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAC7C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IACE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,qBAAqB;gBACrD,MAAM,CAAC,6BAA6B,KAAK,CAAC,EAC1C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,SAAiB;QACzC,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,MAAc;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAW,CAAC;IACrE,CAAC;CACF"}
+{"version":3,"file":"list-policies.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/list-policies/list-policies.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAYtD;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAEjD,YAAY,KAAsC;QAChD,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE/D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA2B;QAE3B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,QAAQ,GACZ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,UAAU,GACd,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,CAAC,EACD,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,CAC5D,CAAC;QAER,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE/D,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW;YACxB,MAAM,EACJ,WAAW,IAAI,UAAU,KAAK,SAAS;gBACrC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;gBACjC,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,GAA2B;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;aAC3B,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAChC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IACE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAC7C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CAAC,CACN,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,qBAAqB;gBACrD,MAAM,CAAC,6BAA6B,KAAK,CAAC,CAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAW,CAAC;IACrE,CAAC;CACF"}

package/dist/service/iam/command/policy/put-role-policy/put-role-policy.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-role-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-role-policy/put-role-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAGlC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgC;IAEnE,YAAY,KAAK,EAAE,gCAAgC,EAMlD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,6BAA6B,CAAC,CA2BxC;CACF"}
+{"version":3,"file":"put-role-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-role-policy/put-role-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAGlC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgC;IAEnE,YAAY,KAAK,EAAE,gCAAgC,EAMlD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,6BAA6B,CAAC,CA0BxC;CACF"}

package/dist/service/iam/command/policy/put-role-policy/put-role-policy.handler.js

@@ -25,14 +25,14 @@ export class PutRolePolicyCommandHandler {
      */
     async handle(cmd) {
         const roleName = cmd.input.RoleName;
-        const policyName = cmd.input.PolicyName;
-        const policyDocument = cmd.input.PolicyDocument;
         if (roleName === undefined || roleName.length === 0) {
             throw new Error("RoleName is required");
         }
+        const policyName = cmd.input.PolicyName;
         if (policyName === undefined || policyName.length === 0) {
             throw new Error("PolicyName is required");
         }
+        const policyDocument = cmd.input.PolicyDocument;
         this.policyDocValidator.validateRequired(policyDocument);
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();

package/dist/service/iam/command/policy/put-role-policy/put-role-policy.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-role-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-role-policy/put-role-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAMrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAOlG;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IAIrB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,kBAAkB,CAAgC;IAEnE,YAAY,KAAuC;QACjD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA4B;QAE5B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAClE,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;QAEhD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAEzD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAEpD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}
+{"version":3,"file":"put-role-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-role-policy/put-role-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAMrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAOlG;;;;;;;;GAQG;AACH,MAAM,OAAO,2BAA2B;IAIrB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,kBAAkB,CAAgC;IAEnE,YAAY,KAAuC;QACjD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA4B;QAE5B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAClE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAEzD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAEpD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.cmd.d.ts

@@ -0,0 +1,12 @@
+import type { JSONString } from "../../../../../util/type-guard/json.js";
+import type { SimIamPolicyDocument } from "../../../policy/sim-iam-policy.js";
+export interface SimPutUserPolicyCommandInput {
+    readonly UserName?: string | undefined;
+    readonly PolicyName?: string | undefined;
+    readonly PolicyDocument?: JSONString<SimIamPolicyDocument> | string | undefined;
+}
+export interface SimPutUserPolicyCommand {
+    readonly input: SimPutUserPolicyCommandInput;
+}
+export type SimPutUserPolicyCommandOutput = Record<string, never>;
+//# sourceMappingURL=put-user-policy.cmd.d.ts.map

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-user-policy.cmd.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-user-policy/put-user-policy.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EACtB,UAAU,CAAC,oBAAoB,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC"}

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.cmd.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=put-user-policy.cmd.js.map

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-user-policy.cmd.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-user-policy/put-user-policy.cmd.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.handler.d.ts

@@ -0,0 +1,28 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimPutUserPolicyCommand, SimPutUserPolicyCommandOutput } from "./put-user-policy.cmd.js";
+interface PutUserPolicyCommandHandlerProps {
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM PutUserPolicyCommand handler.
+ *
+ * PutUserPolicy creates or replaces an inline identity-based permissions policy
+ * stored directly on a user. It does not create a managed IAM policy.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/PutUserPolicyCommand/
+ */
+export declare class PutUserPolicyCommandHandler implements CommandHandler<SimPutUserPolicyCommand, SimPutUserPolicyCommandOutput> {
+    private readonly users;
+    private readonly background;
+    private readonly policyDocValidator;
+    constructor(props: PutUserPolicyCommandHandlerProps);
+    /**
+     * Handle a PutUserPolicyCommand from the SDK.
+     */
+    handle(cmd: SimPutUserPolicyCommand): Promise<SimPutUserPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=put-user-policy.handler.d.ts.map

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-user-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-user-policy/put-user-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAGlC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA4B,YAAW,cAAc,CAChE,uBAAuB,EACvB,6BAA6B,CAC9B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgC;IAEnE,YAAY,KAAK,EAAE,gCAAgC,EAMlD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,6BAA6B,CAAC,CAqBxC;CACF"}

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.handler.js

@@ -0,0 +1,43 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamNoSuchEntity } from "../../../error/sim-iam.error.js";
+import { SimIamPolicyDocumentValidator } from "../../../validate/sim-iam-policy-doc-validator.js";
+import { assertDefined } from "../../../../../util/type-guard/defined.js";
+/**
+ * IAM PutUserPolicyCommand handler.
+ *
+ * PutUserPolicy creates or replaces an inline identity-based permissions policy
+ * stored directly on a user. It does not create a managed IAM policy.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/PutUserPolicyCommand/
+ */
+export class PutUserPolicyCommandHandler {
+    users;
+    background;
+    policyDocValidator;
+    constructor(props) {
+        const { users, background = new BackgroundTasks() } = props;
+        this.users = users;
+        this.background = background;
+        this.policyDocValidator = new SimIamPolicyDocumentValidator();
+    }
+    /**
+     * Handle a PutUserPolicyCommand from the SDK.
+     */
+    async handle(cmd) {
+        const username = cmd.input.UserName;
+        assertDefined(username, "PutUserPolicyCommand.input.UserName");
+        const policyName = cmd.input.PolicyName;
+        assertDefined(policyName, "PutUserPolicyCommand.input.PolicyName");
+        const policyDocument = cmd.input.PolicyDocument;
+        this.policyDocValidator.validateRequired(policyDocument);
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const user = this.users.get(username);
+        if (user === undefined) {
+            throw new SimIamNoSuchEntity(`No IAM User with name ${username}`);
+        }
+        user.inlinePolicies.set(policyName, policyDocument);
+        return {};
+    }
+}
+//# sourceMappingURL=put-user-policy.handler.js.map

package/dist/service/iam/command/policy/put-user-policy/put-user-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-user-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/put-user-policy/put-user-policy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAKlG,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAO1E;;;;;;;GAOG;AACH,MAAM,OAAO,2BAA2B;IAIrB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,kBAAkB,CAAgC;IAEnE,YAAY,KAAuC;QACjD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA4B;QAE5B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAClE,aAAa,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,aAAa,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;QAEhD,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAEzD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAEpD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}

package/dist/service/iam/command/role/create-role/create-role.handler.d.ts

@@ -20,8 +20,9 @@ interface CreateRoleCommandHandlerProps {
 export declare class CreateRoleCommandHandler implements CommandHandler<SimCreateRoleCommand, SimCreateRoleCommandOutput> {
     private readonly accountId;
     private readonly roles;
-    private readonly background;
     private readonly roleFactory;
+    private readonly trustPolicyValidator;
+    private readonly background;
     constructor(props: CreateRoleCommandHandlerProps);
     /**
      * Handle a CreateRoleCommand from the SDK.

package/dist/service/iam/command/role/create-role/create-role.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-role.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAGtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAIhF,UAAU,6BAA6B;IACrC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAID;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,KAAK,EAAE,6BAA6B,EAM/C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkC3E;CACF"}
+{"version":3,"file":"create-role.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AAGtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAKhF,UAAU,6BAA6B;IACrC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqC;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,6BAA6B,EAO/C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAsC3E;CACF"}

package/dist/service/iam/command/role/create-role/create-role.handler.js

@@ -2,8 +2,8 @@ import { BackgroundTasks, } from "../../../../../util/background/background.js";
 import { CreateRoleRecordFactory } from "./create-role-record-factory.js";
 import { SimIamEntityAlreadyExists } from "../../../error/sim-iam.error.js";
 import { normaliseRolePath } from "../../../role/sim-iam-role-path.js";
-import { makeSimRoleArn } from "../../../role/sim-iam-role-arn.js";
-// TODO: trust policies
+import { makeSimRoleArn } from "../../../role/arn/sim-iam-role-arn.js";
+import { SimIamTrustPolicyDocumentValidator } from "../../../validate/trust/sim-iam-trust-policy-doc-validator.js";
 /**
  * IAM CreateRoleCommand handler.
  *
@@ -16,12 +16,14 @@ import { makeSimRoleArn } from "../../../role/sim-iam-role-arn.js";
 export class CreateRoleCommandHandler {
     accountId;
     roles;
-    background;
     roleFactory = new CreateRoleRecordFactory();
+    trustPolicyValidator;
+    background;
     constructor(props) {
         const { accountId, roles, background = new BackgroundTasks() } = props;
         this.accountId = accountId;
         this.roles = roles;
+        this.trustPolicyValidator = new SimIamTrustPolicyDocumentValidator();
         this.background = background;
     }
     /**
@@ -32,6 +34,7 @@ export class CreateRoleCommandHandler {
         if (roleName === undefined || roleName.length === 0) {
             throw new Error("RoleName is required");
         }
+        this.trustPolicyValidator.validateRequired(cmd.input.AssumeRolePolicyDocument);
         const path = normaliseRolePath(cmd.input.Path);
         const arn = makeSimRoleArn({
             accountId: this.accountId,

package/dist/service/iam/command/role/create-role/create-role.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-role.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAQnE,uBAAuB;AAEvB;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE7D,YAAY,KAAoC;QAC9C,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAEvE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAyB;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ;YACR,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"create-role.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/create-role/create-role.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,+DAA+D,CAAC;AAQnH;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC5C,oBAAoB,CAAqC;IACzD,UAAU,CAAsB;IAEjD,YAAY,KAAoC;QAC9C,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAEvE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,oBAAoB,GAAG,IAAI,kCAAkC,EAAE,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAyB;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CACxC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CACnC,CAAC;QAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ;YACR,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/command/role/get-role/get-role.cmd.d.ts

@@ -1,4 +1,5 @@
 import type { SimArn } from "../../../../aws/arn.js";
+import type { SimIamRoleName } from "../../../role/sim-iam-role.js";
 export interface SimGetRoleCommandInput {
     readonly RoleName?: string | undefined;
 }
@@ -8,7 +9,7 @@ export interface SimGetRoleCommand {
 export interface SimGetRoleCommandOutput {
     readonly Role: {
         readonly Path: string;
-        readonly RoleName: string;
+        readonly RoleName: SimIamRoleName;
         readonly RoleId: string;
         readonly Arn: SimArn;
         readonly CreateDate: Date;

package/dist/service/iam/command/role/get-role/get-role.cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-role.cmd.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/get-role/get-role.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC3C,CAAC;CACH"}
+{"version":3,"file":"get-role.cmd.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/get-role/get-role.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC3C,CAAC;CACH"}

package/dist/service/iam/command/role/list-roles/list-roles.handler.d.ts

@@ -22,8 +22,8 @@ export declare class ListRolesCommandHandler implements CommandHandler<SimListRo
     private matchingRoles;
     private getMaxItems;
     private getStartIndex;
-    private static makeMarker;
-    private static parseMarker;
+    private makeMarker;
+    private parseMarker;
 }
 export {};
 //# sourceMappingURL=list-roles.handler.d.ts.map

package/dist/service/iam/command/role/list-roles/list-roles.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-roles.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGhF,UAAU,4BAA4B;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,4BAA4B,EAK9C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAkCzE;IAED,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,MAAM,CAAC,UAAU;IAIzB,OAAO,CAAC,MAAM,CAAC,WAAW;CAG3B"}
+{"version":3,"file":"list-roles.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAGhF,UAAU,4BAA4B;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,4BAA4B,EAK9C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAkCzE;IAED,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;CAGpB"}

package/dist/service/iam/command/role/list-roles/list-roles.handler.js

@@ -23,7 +23,7 @@ export class ListRolesCommandHandler {
         const roles = this.matchingRoles(cmd);
         const startRoleName = cmd.input.Marker === undefined
             ? undefined
-            : ListRolesCommandHandler.parseMarker(cmd.input.Marker);
+            : this.parseMarker(cmd.input.Marker);
         const startIndex = this.getStartIndex(roles, startRoleName);
         const page = roles.slice(startIndex, startIndex + maxItems);
         const lastRole = page.at(-1);
@@ -40,23 +40,23 @@ export class ListRolesCommandHandler {
             })),
             IsTruncated: isTruncated,
             Marker: isTruncated && lastRole !== undefined
-                ? ListRolesCommandHandler.makeMarker(lastRole.roleName)
+                ? this.makeMarker(lastRole.roleName)
                 : undefined,
         };
     }
     matchingRoles(cmd) {
-        const roles = [...this.roles.values()].toSorted((a, b) => a.arn.localeCompare(b.arn));
+        const roles = this.roles
+            .values()
+            .toArray()
+            .toSorted((a, b) => a.arn.localeCompare(b.arn));
         return roles.filter((role) => {
-            if (cmd.input.PathPrefix !== undefined &&
-                !role.path.startsWith(cmd.input.PathPrefix)) {
-                return false;
-            }
-            return true;
+            return !(cmd.input.PathPrefix !== undefined &&
+                !role.path.startsWith(cmd.input.PathPrefix));
         });
     }
     getMaxItems(cmd) {
         const maxItems = cmd.input.MaxItems ?? 100;
-        if (!Number.isInteger(maxItems) || maxItems < 1 || maxItems > 1000) {
+        if (!Number.isSafeInteger(maxItems) || maxItems < 1 || maxItems > 1000) {
             throw new RangeError("ListRolesCommand.input.MaxItems must be an integer between 1 and 1000");
         }
         return maxItems;
@@ -71,10 +71,10 @@ export class ListRolesCommandHandler {
         }
         return markerIndex + 1;
     }
-    static makeMarker(roleName) {
+    makeMarker(roleName) {
         return Buffer.from(roleName, "utf8").toString("base64url");
     }
-    static parseMarker(marker) {
+    parseMarker(marker) {
         return Buffer.from(marker, "base64url").toString("utf8");
     }
 }