@kensio/yulin 0.32.0 → 0.33.0

package/dist/service/iam/command/role/list-roles/list-roles.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAO/E;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,KAAmC;QAC7C,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAwB;QACnC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GACjB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAE5D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW;YACxB,MAAM,EACJ,WAAW,IAAI,QAAQ,KAAK,SAAS;gBACnC,CAAC,CAAC,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvD,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,GAAwB;QAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvD,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,IACE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAC3C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,GAAwB;QAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,UAAU,CAClB,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,aAAa,CACnB,KAA4B,EAC5B,aAAyC;QAEzC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,aAAa,CAC1C,CAAC;QAEF,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,QAAwB;QAChD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,MAAc;QACvC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAmB,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAO/E;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAEjD,YAAY,KAAmC;QAC7C,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAwB;QACnC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GACjB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAE5D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW;YACxB,MAAM,EACJ,WAAW,IAAI,QAAQ,KAAK,SAAS;gBACnC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,GAAwB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,OAAO,CAAC,CACN,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,GAAwB;QAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC;YACvE,MAAM,IAAI,UAAU,CAClB,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,aAAa,CACnB,KAA4B,EAC5B,aAAyC;QAEzC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,aAAa,CAC1C,CAAC;QAEF,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,UAAU,CAAC,QAAwB;QACzC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAmB,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/iam/command/user/create-access-key/create-access-key.cmd.d.ts

@@ -0,0 +1,17 @@
+import type { SimIamAccessKeyStatus } from "../../../credential/sim-iam-access-key.js";
+export interface SimCreateAccessKeyCommandInput {
+    readonly UserName?: string | undefined;
+}
+export interface SimCreateAccessKeyCommand {
+    readonly input: SimCreateAccessKeyCommandInput;
+}
+export interface SimCreateAccessKeyCommandOutput {
+    readonly AccessKey: {
+        readonly UserName: string;
+        readonly AccessKeyId: string;
+        readonly Status: SimIamAccessKeyStatus;
+        readonly SecretAccessKey: string;
+        readonly CreateDate: Date;
+    };
+}
+//# sourceMappingURL=create-access-key.cmd.d.ts.map

package/dist/service/iam/command/user/create-access-key/create-access-key.cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-key.cmd.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;QACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;KAC3B,CAAC;CACH"}

package/dist/service/iam/command/user/create-access-key/create-access-key.cmd.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=create-access-key.cmd.js.map

package/dist/service/iam/command/user/create-access-key/create-access-key.cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-key.cmd.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.cmd.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.d.ts

@@ -0,0 +1,28 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import type { BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamCredentialRegistry } from "../../../credential/sim-iam-credential-registry.js";
+import type { SimIamUserCredentialGenerator } from "../../../credential/user/sim-iam-user-credential-generator.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimCreateAccessKeyCommand, SimCreateAccessKeyCommandOutput } from "./create-access-key.cmd.js";
+interface CreateAccessKeyCommandHandlerProps {
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly credentialRegistry: SimIamCredentialRegistry;
+    readonly credentialGenerator: SimIamUserCredentialGenerator;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM CreateAccessKey command handler for simulated IAM users.
+ */
+export declare class CreateAccessKeyCommandHandler implements CommandHandler<SimCreateAccessKeyCommand, SimCreateAccessKeyCommandOutput> {
+    private readonly users;
+    private readonly credentialRegistry;
+    private readonly credentialGenerator;
+    private readonly background;
+    constructor(props: CreateAccessKeyCommandHandlerProps);
+    /**
+     * Handle a Create Access Key command from the SDK.
+     */
+    handle(cmd: SimCreateAccessKeyCommand): Promise<SimCreateAccessKeyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=create-access-key.handler.d.ts.map

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-key.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAEnH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,4BAA4B,CAAC;AAEpC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,kCAAkC,EAKpD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,+BAA+B,CAAC,CA4C1C;CACF"}

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.js

@@ -0,0 +1,59 @@
+import { BackgroundTasks } from "../../../../../util/background/background.js";
+import { SimIamAccessKey } from "../../../credential/sim-iam-access-key.js";
+import { SimIamNoSuchEntity } from "../../../error/sim-iam.error.js";
+/**
+ * IAM CreateAccessKey command handler for simulated IAM users.
+ */
+export class CreateAccessKeyCommandHandler {
+    users;
+    credentialRegistry;
+    credentialGenerator;
+    background;
+    constructor(props) {
+        this.users = props.users;
+        this.credentialRegistry = props.credentialRegistry;
+        this.credentialGenerator = props.credentialGenerator;
+        this.background = props.background ?? new BackgroundTasks();
+    }
+    /**
+     * Handle a Create Access Key command from the SDK.
+     */
+    async handle(cmd) {
+        const username = cmd.input.UserName;
+        if (username === undefined || username.length === 0) {
+            throw new Error("UserName is required");
+        }
+        await this.background.sequence();
+        const user = this.users.get(username);
+        if (user === undefined) {
+            throw new SimIamNoSuchEntity(`Sim IAM User does not exist: ${username}`);
+        }
+        const credentials = this.credentialGenerator.generate();
+        const principal = {
+            kind: "arn",
+            arn: user.arn,
+        };
+        const accessKey = new SimIamAccessKey({
+            accessKeyId: credentials.accessKeyId,
+            secretAccessKey: credentials.secretAccessKey,
+            principal,
+            identityPolicyPrincipal: principal,
+        });
+        /*
+         * Register first. If a generated ID collides, neither the user nor the
+         * registry is left with a partially created key.
+         */
+        this.credentialRegistry.registerAccessKey(accessKey);
+        user.accessKeys.set(accessKey.accessKeyId, accessKey);
+        return {
+            AccessKey: {
+                UserName: user.userName,
+                AccessKeyId: accessKey.accessKeyId,
+                Status: accessKey.status,
+                SecretAccessKey: accessKey.secretAccessKey,
+                CreateDate: accessKey.createDate,
+            },
+        };
+    }
+}
+//# sourceMappingURL=create-access-key.handler.js.map

package/dist/service/iam/command/user/create-access-key/create-access-key.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-key.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-access-key/create-access-key.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAcrE;;GAEG;AACH,MAAM,OAAO,6BAA6B;IAIvB,KAAK,CAAkC;IACvC,kBAAkB,CAA2B;IAC7C,mBAAmB,CAAgC;IACnD,UAAU,CAAsB;IAEjD,YAAY,KAAyC;QACnD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA8B;QAE9B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,KAAc;YACpB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,SAAS;YACT,uBAAuB,EAAE,SAAS;SACnC,CAAC,CAAC;QAEH;;;WAGG;QACH,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,UAAU,EAAE,SAAS,CAAC,UAAU;aACjC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.d.ts

@@ -0,0 +1,25 @@
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimCreateUserCommandOutput } from "./create-user.cmd.js";
+interface MakeUserProps {
+    readonly accountId: SimAwsAccountId;
+    readonly arn: SimArn;
+    readonly path: string;
+    readonly userName: SimIamUsername;
+}
+/**
+ * Creates simulated IAM user records and command outputs.
+ */
+export declare class CreateUserRecordFactory {
+    /**
+     * Make a sim IAM User from input props.
+     */
+    makeUser(props: MakeUserProps): SimIamUser;
+    /**
+     * Make a sim Create User command output from a sim IAM User.
+     */
+    makeOutput(user: SimIamUser): SimCreateUserCommandOutput;
+}
+export {};
+//# sourceMappingURL=create-user-record-factory.d.ts.map

package/dist/service/iam/command/user/create-user/create-user-record-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,UAAU,CAczC;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,0BAA0B,CAUvD;CACF"}

package/dist/service/iam/command/user/create-user/create-user-record-factory.js

@@ -0,0 +1,39 @@
+import { makeSimIamUserId } from "../../../user/sim-iam-user-id.js";
+/**
+ * Creates simulated IAM user records and command outputs.
+ */
+export class CreateUserRecordFactory {
+    /**
+     * Make a sim IAM User from input props.
+     */
+    makeUser(props) {
+        return {
+            arn: props.arn,
+            accountId: props.accountId,
+            principalType: "user",
+            name: props.userName,
+            userId: makeSimIamUserId(),
+            userName: props.userName,
+            path: props.path,
+            createDate: new Date(),
+            accessKeys: new Map(),
+            inlinePolicies: new Map(),
+            attachedPolicyArns: new Set(),
+        };
+    }
+    /**
+     * Make a sim Create User command output from a sim IAM User.
+     */
+    makeOutput(user) {
+        return {
+            User: {
+                Path: user.path,
+                UserName: user.userName,
+                UserId: user.userId,
+                Arn: user.arn,
+                CreateDate: user.createDate,
+            },
+        };
+    }
+}
+//# sourceMappingURL=create-user-record-factory.js.map

package/dist/service/iam/command/user/create-user/create-user-record-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user-record-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAUpE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,QAAQ,CAAC,KAAoB;QAC3B,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,MAAM,EAAE,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,UAAU,EAAE,IAAI,GAAG,EAAE;YACrB,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAgB;QACzB,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/command/user/create-user/create-user.cmd.d.ts

@@ -0,0 +1,18 @@
+import type { SimArn } from "../../../../aws/arn.js";
+export interface SimCreateUserCommandInput {
+    readonly UserName?: string | undefined;
+    readonly Path?: string | undefined;
+}
+export interface SimCreateUserCommand {
+    readonly input: SimCreateUserCommandInput;
+}
+export interface SimCreateUserCommandOutput {
+    readonly User: {
+        readonly Path: string;
+        readonly UserName: string;
+        readonly UserId: string;
+        readonly Arn: SimArn;
+        readonly CreateDate: Date;
+    };
+}
+//# sourceMappingURL=create-user.cmd.d.ts.map

package/dist/service/iam/command/user/create-user/create-user.cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.cmd.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;KAC3B,CAAC;CACH"}

package/dist/service/iam/command/user/create-user/create-user.cmd.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=create-user.cmd.js.map

package/dist/service/iam/command/user/create-user/create-user.cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.cmd.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.cmd.ts"],"names":[],"mappings":""}

package/dist/service/iam/command/user/create-user/create-user.handler.d.ts

@@ -0,0 +1,26 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import type { BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimCreateUserCommand, SimCreateUserCommandOutput } from "./create-user.cmd.js";
+interface CreateUserCommandHandlerProps {
+    readonly accountId: SimAwsAccountId;
+    readonly users: Map<SimIamUsername, SimIamUser>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM CreateUser command handler.
+ */
+export declare class CreateUserCommandHandler implements CommandHandler<SimCreateUserCommand, SimCreateUserCommandOutput> {
+    private readonly accountId;
+    private readonly users;
+    private readonly background;
+    private readonly userFactory;
+    constructor(props: CreateUserCommandHandlerProps);
+    /**
+     * Handle a Create User Command from the SDK.
+     */
+    handle(cmd: SimCreateUserCommand): Promise<SimCreateUserCommandOutput>;
+}
+export {};
+//# sourceMappingURL=create-user.handler.d.ts.map

package/dist/service/iam/command/user/create-user/create-user.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAC;AAG9B,UAAU,6BAA6B;IACrC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,cAAc,CAC7D,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAE7D,YAAY,KAAK,EAAE,6BAA6B,EAI/C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAgC3E;CACF"}

package/dist/service/iam/command/user/create-user/create-user.handler.js

@@ -0,0 +1,47 @@
+import { BackgroundTasks } from "../../../../../util/background/background.js";
+import { SimIamEntityAlreadyExists } from "../../../error/sim-iam.error.js";
+import { makeSimUserArn } from "../../../user/arn/sim-iam-user-arn.js";
+import { normaliseUserPath } from "../../../user/sim-iam-user-path.js";
+import { CreateUserRecordFactory } from "./create-user-record-factory.js";
+/**
+ * IAM CreateUser command handler.
+ */
+export class CreateUserCommandHandler {
+    accountId;
+    users;
+    background;
+    userFactory = new CreateUserRecordFactory();
+    constructor(props) {
+        this.accountId = props.accountId;
+        this.users = props.users;
+        this.background = props.background ?? new BackgroundTasks();
+    }
+    /**
+     * Handle a Create User Command from the SDK.
+     */
+    async handle(cmd) {
+        const username = cmd.input.UserName;
+        if (username === undefined || username.length === 0) {
+            throw new Error("UserName is required");
+        }
+        const path = normaliseUserPath(cmd.input.Path);
+        const arn = makeSimUserArn({
+            accountId: this.accountId,
+            path,
+            userName: username,
+        });
+        await this.background.sequence();
+        if (this.users.has(username)) {
+            throw new SimIamEntityAlreadyExists(`Sim IAM User already exists: ${username}`);
+        }
+        const user = this.userFactory.makeUser({
+            accountId: this.accountId,
+            arn,
+            path,
+            userName: username,
+        });
+        this.users.set(username, user);
+        return this.userFactory.makeOutput(user);
+    }
+}
+//# sourceMappingURL=create-user.handler.js.map

package/dist/service/iam/command/user/create-user/create-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/user/create-user/create-user.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAE/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAKvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAQ1E;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAIlB,SAAS,CAAkB;IAC3B,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE7D,YAAY,KAAoC;QAC9C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,eAAe,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAyB;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAsC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG;YACH,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/credential/error/sim-iam-credential.error.d.ts

@@ -0,0 +1,36 @@
+import type { SimIamAccessKeyStatus } from "../sim-iam-access-key.js";
+/**
+ * Base error for simulated IAM credential operations.
+ */
+export declare class SimIamCredentialError extends Error {
+    constructor(message: string);
+}
+export type SimIamInvalidCredentialsReason = "unknown-access-key" | "inactive-access-key" | "secret-access-key-mismatch" | "session-token-missing" | "session-token-unexpected" | "session-token-mismatch" | "expired-session";
+interface SimIamInvalidCredentialsProps {
+    readonly accessKeyId: string;
+    readonly reason: SimIamInvalidCredentialsReason;
+    readonly accessKeyStatus?: SimIamAccessKeyStatus | undefined;
+    readonly expiration?: Date | undefined;
+}
+/**
+ * Raised when supplied simulated credentials cannot be authenticated.
+ *
+ * Diagnostic details identify the failed credential component without exposing
+ * secret access keys or session tokens.
+ */
+export declare class SimIamInvalidCredentials extends SimIamCredentialError {
+    readonly accessKeyId: string;
+    readonly reason: SimIamInvalidCredentialsReason;
+    readonly accessKeyStatus?: SimIamAccessKeyStatus | undefined;
+    readonly expiration?: Date | undefined;
+    constructor(props: SimIamInvalidCredentialsProps);
+    private static message;
+}
+/**
+ * Raised when an access key ID is already registered.
+ */
+export declare class SimIamDuplicateAccessKey extends SimIamCredentialError {
+    constructor(accessKeyId: string);
+}
+export {};
+//# sourceMappingURL=sim-iam-credential.error.d.ts.map

package/dist/service/iam/credential/error/sim-iam-credential.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-credential.error.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/credential/error/sim-iam-credential.error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,MAAM,MAAM,8BAA8B,GACtC,oBAAoB,GACpB,qBAAqB,GACrB,4BAA4B,GAC5B,uBAAuB,GACvB,0BAA0B,GAC1B,wBAAwB,GACxB,iBAAiB,CAAC;AAEtB,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,qBAAqB;IACjE,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,8BAA8B,CAAC;IACvD,SAAgB,eAAe,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACpE,SAAgB,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAE9C,YAAY,KAAK,EAAE,6BAA6B,EAQ/C;IAED,OAAO,CAAC,MAAM,CAAC,OAAO;CAuCvB;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,qBAAqB;IACjE,YAAY,WAAW,EAAE,MAAM,EAE9B;CACF"}

package/dist/service/iam/credential/error/sim-iam-credential.error.js

@@ -0,0 +1,66 @@
+/**
+ * Base error for simulated IAM credential operations.
+ */
+export class SimIamCredentialError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = new.target.name;
+    }
+}
+/**
+ * Raised when supplied simulated credentials cannot be authenticated.
+ *
+ * Diagnostic details identify the failed credential component without exposing
+ * secret access keys or session tokens.
+ */
+export class SimIamInvalidCredentials extends SimIamCredentialError {
+    accessKeyId;
+    reason;
+    accessKeyStatus;
+    expiration;
+    constructor(props) {
+        super(SimIamInvalidCredentials.message(props));
+        this.accessKeyId = props.accessKeyId;
+        this.reason = props.reason;
+        this.accessKeyStatus = props.accessKeyStatus;
+        this.expiration =
+            props.expiration === undefined ? undefined : new Date(props.expiration);
+    }
+    static message(props) {
+        const prefix = `Sim IAM could not authenticate access key ${props.accessKeyId}`;
+        switch (props.reason) {
+            case "unknown-access-key": {
+                return `${prefix}: the access key is not registered`;
+            }
+            case "inactive-access-key": {
+                return `${prefix}: the access key is ${props.accessKeyStatus ?? "inactive"}`;
+            }
+            case "secret-access-key-mismatch": {
+                return `${prefix}: the secret access key does not match`;
+            }
+            case "session-token-missing": {
+                return `${prefix}: a session token is required`;
+            }
+            case "session-token-unexpected": {
+                return `${prefix}: a session token was supplied for a long-lived access key`;
+            }
+            case "session-token-mismatch": {
+                return `${prefix}: the session token does not match`;
+            }
+            case "expired-session": {
+                return `${prefix}: the session expired${props.expiration === undefined
+                    ? ""
+                    : ` at ${props.expiration.toISOString()}`}`;
+            }
+        }
+    }
+}
+/**
+ * Raised when an access key ID is already registered.
+ */
+export class SimIamDuplicateAccessKey extends SimIamCredentialError {
+    constructor(accessKeyId) {
+        super(`Sim IAM access key ${accessKeyId} is already registered`);
+    }
+}
+//# sourceMappingURL=sim-iam-credential.error.js.map

package/dist/service/iam/credential/error/sim-iam-credential.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-credential.error.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/error/sim-iam-credential.error.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAkBD;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,qBAAqB;IACjD,WAAW,CAAS;IACpB,MAAM,CAAiC;IACvC,eAAe,CAAqC;IACpD,UAAU,CAAoB;IAE9C,YAAY,KAAoC;QAC9C,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/C,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,UAAU;YACb,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAEO,MAAM,CAAC,OAAO,CAAC,KAAoC;QACzD,MAAM,MAAM,GAAG,6CAA6C,KAAK,CAAC,WAAW,EAAE,CAAC;QAEhF,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,GAAG,MAAM,oCAAoC,CAAC;YACvD,CAAC;YAED,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,GAAG,MAAM,uBACd,KAAK,CAAC,eAAe,IAAI,UAC3B,EAAE,CAAC;YACL,CAAC;YAED,KAAK,4BAA4B,EAAE,CAAC;gBAClC,OAAO,GAAG,MAAM,wCAAwC,CAAC;YAC3D,CAAC;YAED,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,GAAG,MAAM,+BAA+B,CAAC;YAClD,CAAC;YAED,KAAK,0BAA0B,EAAE,CAAC;gBAChC,OAAO,GAAG,MAAM,4DAA4D,CAAC;YAC/E,CAAC;YAED,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,OAAO,GAAG,MAAM,oCAAoC,CAAC;YACvD,CAAC;YAED,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,GAAG,MAAM,wBACd,KAAK,CAAC,UAAU,KAAK,SAAS;oBAC5B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,EAC3C,EAAE,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,qBAAqB;IACjE,YAAY,WAAmB;QAC7B,KAAK,CAAC,sBAAsB,WAAW,wBAAwB,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/service/iam/credential/session/sim-iam-assumed-role-principal-factory.d.ts

@@ -0,0 +1,35 @@
+import type { SimArnPrincipal } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamRole } from "../../role/sim-iam-role.js";
+/**
+ * Creates the STS principal associated with an assumed IAM Role session.
+ *
+ * Assumed-role ARNs include the caller-supplied RoleSessionName as a path
+ * component. Validating that value before interpolation prevents separators,
+ * whitespace, and other unsupported characters from changing the ARN structure.
+ *
+ * AWS RoleSessionName values contain 2 through 64 characters. Supported
+ * characters are ASCII letters, digits, underscores, and `+=,.@-`.
+ */
+export declare class SimIamAssumedRolePrincipalFactory {
+    private readonly accountId;
+    private static readonly validSessionName;
+    constructor(accountId: SimAwsAccountId);
+    /**
+     * Validate the session name and construct its assumed-role principal.
+     *
+     * Keeping validation beside ARN construction ensures every principal produced
+     * by this factory satisfies the constraints required for its final path
+     * component.
+     */
+    make(role: SimIamRole, sessionName: string): SimArnPrincipal;
+    /**
+     * Reject values that cannot be represented as an AWS RoleSessionName.
+     *
+     * Anchoring the expression requires the complete value to match. The length
+     * quantifier also rejects empty, one-character, and overlong names without
+     * maintaining separate validation branches.
+     */
+    private validateSessionName;
+}
+//# sourceMappingURL=sim-iam-assumed-role-principal-factory.d.ts.map

package/dist/service/iam/credential/session/sim-iam-assumed-role-principal-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-assumed-role-principal-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-assumed-role-principal-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;;;;;;;GASG;AACH,qBAAa,iCAAiC;IAGhC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IAExE,YAA6B,SAAS,EAAE,eAAe,EAAI;IAE3D;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe,CAS3D;IAED;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAQ5B"}

package/dist/service/iam/credential/session/sim-iam-assumed-role-principal-factory.js

@@ -0,0 +1,46 @@
+/**
+ * Creates the STS principal associated with an assumed IAM Role session.
+ *
+ * Assumed-role ARNs include the caller-supplied RoleSessionName as a path
+ * component. Validating that value before interpolation prevents separators,
+ * whitespace, and other unsupported characters from changing the ARN structure.
+ *
+ * AWS RoleSessionName values contain 2 through 64 characters. Supported
+ * characters are ASCII letters, digits, underscores, and `+=,.@-`.
+ */
+export class SimIamAssumedRolePrincipalFactory {
+    accountId;
+    static validSessionName = /^[A-Za-z0-9_+=,.@-]{2,64}$/;
+    constructor(accountId) {
+        this.accountId = accountId;
+    }
+    /**
+     * Validate the session name and construct its assumed-role principal.
+     *
+     * Keeping validation beside ARN construction ensures every principal produced
+     * by this factory satisfies the constraints required for its final path
+     * component.
+     */
+    make(role, sessionName) {
+        this.validateSessionName(sessionName);
+        return {
+            kind: "arn",
+            arn: `arn:aws:sts::${this.accountId}:assumed-role/` +
+                `${role.roleName}/${sessionName}`,
+        };
+    }
+    /**
+     * Reject values that cannot be represented as an AWS RoleSessionName.
+     *
+     * Anchoring the expression requires the complete value to match. The length
+     * quantifier also rejects empty, one-character, and overlong names without
+     * maintaining separate validation branches.
+     */
+    validateSessionName(sessionName) {
+        if (!SimIamAssumedRolePrincipalFactory.validSessionName.test(sessionName)) {
+            /* v8 ignore next -- covered by regex validation in session manager */
+            throw new Error("Sim IAM Role session name must be 2-64 characters and contain only alphanumeric characters, underscores, or +=,.@-");
+        }
+    }
+}
+//# sourceMappingURL=sim-iam-assumed-role-principal-factory.js.map

package/dist/service/iam/credential/session/sim-iam-assumed-role-principal-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-assumed-role-principal-factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-assumed-role-principal-factory.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,MAAM,OAAO,iCAAiC;IAGf,SAAS;IAF9B,MAAM,CAAU,gBAAgB,GAAG,4BAA4B,CAAC;IAExE,YAA6B,SAA0B;yBAA1B,SAAS;IAAoB,CAAC;IAE3D;;;;;;OAMG;IACH,IAAI,CAAC,IAAgB,EAAE,WAAmB;QACxC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEtC,OAAO;YACL,IAAI,EAAE,KAAK;YACX,GAAG,EACD,gBAAgB,IAAI,CAAC,SAAS,gBAAgB;gBAC9C,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,WAAmB;QAC7C,IAAI,CAAC,iCAAiC,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,sEAAsE;YACtE,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/iam/credential/session/sim-iam-session-cred-gen.d.ts

@@ -0,0 +1,21 @@
+export interface SimIamTemporaryCredentials {
+    readonly accessKeyId: string;
+    readonly secretAccessKey: string;
+    readonly sessionToken: string;
+}
+/**
+ * Generates credential values for a temporary simulated IAM session.
+ */
+export interface SimIamSessionCredentialGenerator {
+    generate(): SimIamTemporaryCredentials;
+}
+/**
+ * Default random credential generator for simulated IAM sessions.
+ */
+export declare class SimIamRandomSessionCredentialGenerator implements SimIamSessionCredentialGenerator {
+    /**
+     * Generate random temporary credentials.
+     */
+    generate(): SimIamTemporaryCredentials;
+}
+//# sourceMappingURL=sim-iam-session-cred-gen.d.ts.map

package/dist/service/iam/credential/session/sim-iam-session-cred-gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-session-cred-gen.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-session-cred-gen.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,IAAI,0BAA0B,CAAC;CACxC;AAED;;GAEG;AACH,qBAAa,sCAAuC,YAAW,gCAAgC;IAC7F;;OAEG;IACH,QAAQ,IAAI,0BAA0B,CAOrC;CACF"}

package/dist/service/iam/credential/session/sim-iam-session-cred-gen.js

@@ -0,0 +1,17 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Default random credential generator for simulated IAM sessions.
+ */
+export class SimIamRandomSessionCredentialGenerator {
+    /**
+     * Generate random temporary credentials.
+     */
+    generate() {
+        return {
+            accessKeyId: `ASIA${faker.string.alphanumeric({ length: 16 })}`.toUpperCase(),
+            secretAccessKey: faker.string.alphanumeric({ length: 40 }),
+            sessionToken: faker.string.alphanumeric({ length: 356 }),
+        };
+    }
+}
+//# sourceMappingURL=sim-iam-session-cred-gen.js.map

package/dist/service/iam/credential/session/sim-iam-session-cred-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-session-cred-gen.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-session-cred-gen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAexC;;GAEG;AACH,MAAM,OAAO,sCAAsC;IACjD;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,WAAW,EACT,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE;YAClE,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC1D,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF"}