@kensio/yulin 0.32.0 → 0.33.0

package/dist/service/acm/sim-acm.js

@@ -4,51 +4,57 @@ import { DescribeCertificateCommandHandler } from "./command/describe-certificat
 import { ListCertificatesCommandHandler } from "./command/list-certificates/list-certificates.handler.js";
 import { SimAcmCfnResourceFactory } from "./cfn/sim-cfn-acm-resource-factory.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
+import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 /**
  * Simulated ACM. Handles SDK commands. Emulates AWS behaviour and state.
  */
 export class SimAcm {
     certificates = new Map();
     accountRegionScope;
+    iam;
     background;
     cfnFactory = new SimAcmCfnResourceFactory({
         acm: this,
     });
     constructor(props = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), } = props;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = props;
         this.accountRegionScope = accountRegionScope;
+        this.iam = iam;
         this.background = background;
     }
     /**
      * Handle a Describe Certificate Command from the SDK.
      */
-    async describeCertificate(cmd) {
+    async describeCertificate(cmd, opts) {
         const handler = new DescribeCertificateCommandHandler({
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(cmd, opts);
     }
     /**
      * Handle a List Certificates Command from the SDK.
      */
-    async listCertificates(cmd) {
+    async listCertificates(cmd, opts) {
         const handler = new ListCertificatesCommandHandler({
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(cmd, opts);
     }
     /**
      * Handle a Request Certificate Command from the SDK.
      */
-    async requestCertificate(cmd) {
+    async requestCertificate(cmd, opts) {
         const handler = new RequestCertificateCommandHandler({
             accountRegionScope: this.accountRegionScope,
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(cmd, opts);
     }
     /**
      * Get this service's CloudFormation Resource factory.

package/dist/service/acm/sim-acm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAOjG;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,UAAU,CAAsB;IAChC,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IAEH,YAAY,KAAK,GAAgB,EAAE;QACjC,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,GAAkC;QAElC,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,GAAiC;QAEjC,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAY1D;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,GAAG,CAA0B;IAC7B,UAAU,CAAsB;IAChC,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IAEH,YAAY,KAAK,GAAgB,EAAE;QACjC,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,GAAkC,EAClC,IAA2B;QAE3B,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA+B,EAC/B,IAA2B;QAE3B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,GAAiC,EACjC,IAA2B;QAE3B,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}

package/dist/service/aws/caller/sim-aws-account-root-principal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-root-principal.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-account-root-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,eAAe,GACzB,eAAe,CAOjB"}
+{"version":3,"file":"sim-aws-account-root-principal.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-account-root-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,eAAe,GACzB,eAAe,CAKjB"}

package/dist/service/aws/caller/sim-aws-account-root-principal.js

@@ -3,10 +3,8 @@
  */
 export function makeSimAwsAccountRootPrincipal(accountId) {
     return {
+        kind: "arn",
         arn: `arn:aws:iam::${accountId}:root`,
-        accountId,
-        principalType: "root",
-        name: "root",
     };
 }
 //# sourceMappingURL=sim-aws-account-root-principal.js.map

package/dist/service/aws/caller/sim-aws-account-root-principal.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-root-principal.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-account-root-principal.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAA0B;IAE1B,OAAO;QACL,GAAG,EAAE,gBAAgB,SAAS,OAAO;QACrC,SAAS;QACT,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-aws-account-root-principal.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-account-root-principal.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAA0B;IAE1B,OAAO;QACL,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,gBAAgB,SAAS,OAAO;KACtC,CAAC;AACJ,CAAC"}

package/dist/service/aws/caller/sim-aws-caller-resolver.d.ts

@@ -0,0 +1,40 @@
+import type { SimAwsCaller, SimAwsPrincipal, SimCredentialCaller } from "./sim-aws-caller.js";
+import type { SimIamCredentialIdentity } from "../../iam/credential/sim-aws-credentials.js";
+export interface SimAwsCredentialIdentityResolver {
+    resolveCredentials(credentials: SimCredentialCaller["credentials"], now?: Date): SimIamCredentialIdentity;
+}
+/**
+ * Caller information normalized for simulated AWS service operations.
+ *
+ * The effective principal is used for request context and diagnostics. The
+ * identity-policy principal identifies the IAM entity whose policies apply.
+ */
+export interface SimAwsResolvedCaller {
+    readonly principal: SimAwsPrincipal;
+    readonly identityPolicyPrincipal: SimAwsPrincipal;
+    readonly arn?: string | undefined;
+    readonly identityPolicyArn?: string | undefined;
+    readonly accountId?: string | undefined;
+    readonly service?: string | undefined;
+}
+/**
+ * Resolves caller input at a simulated AWS operation boundary.
+ *
+ * An omitted caller resolves to the supplied operation default. Explicit
+ * anonymity is preserved. Credential callers are authenticated before a
+ * resolved caller is returned.
+ */
+export declare class SimAwsCallerResolver {
+    private readonly credentialIdentityResolver?;
+    constructor(credentialIdentityResolver?: SimAwsCredentialIdentityResolver);
+    /**
+     * Resolve and normalize a simulated AWS caller.
+     */
+    resolve(caller: SimAwsCaller | undefined, defaultPrincipal: SimAwsPrincipal): SimAwsResolvedCaller;
+    private normalized;
+    /**
+     * Extract the account component of an ARN when it contains one.
+     */
+    private accountId;
+}
+//# sourceMappingURL=sim-aws-caller-resolver.d.ts.map

package/dist/service/aws/caller/sim-aws-caller-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-caller-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAE5F,MAAM,WAAW,gCAAgC;IAC/C,kBAAkB,CAChB,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,EAC/C,GAAG,CAAC,EAAE,IAAI,GACT,wBAAwB,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CACG;IAE/C,YAAY,0BAA0B,CAAC,EAAE,gCAAgC,EAExE;IAED;;OAEG;IACH,OAAO,CACL,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,gBAAgB,EAAE,eAAe,GAChC,oBAAoB,CAoBtB;IAED,OAAO,CAAC,UAAU;IAiClB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}

package/dist/service/aws/caller/sim-aws-caller-resolver.js

@@ -0,0 +1,62 @@
+/**
+ * Resolves caller input at a simulated AWS operation boundary.
+ *
+ * An omitted caller resolves to the supplied operation default. Explicit
+ * anonymity is preserved. Credential callers are authenticated before a
+ * resolved caller is returned.
+ */
+export class SimAwsCallerResolver {
+    credentialIdentityResolver;
+    constructor(credentialIdentityResolver) {
+        this.credentialIdentityResolver = credentialIdentityResolver;
+    }
+    /**
+     * Resolve and normalize a simulated AWS caller.
+     */
+    resolve(caller, defaultPrincipal) {
+        if (caller?.kind === "credentials") {
+            if (this.credentialIdentityResolver === undefined) {
+                throw new Error("Simulated credential callers require an IAM credential resolver");
+            }
+            const identity = this.credentialIdentityResolver.resolveCredentials(caller.credentials);
+            return this.normalized(identity.principal, identity.identityPolicyPrincipal);
+        }
+        const principal = caller ?? defaultPrincipal;
+        return this.normalized(principal, principal);
+    }
+    normalized(principal, identityPolicyPrincipal) {
+        if (principal.kind === "arn") {
+            const identityPolicyArn = identityPolicyPrincipal.kind === "arn"
+                ? identityPolicyPrincipal.arn
+                : undefined;
+            return {
+                principal,
+                identityPolicyPrincipal,
+                arn: principal.arn,
+                identityPolicyArn,
+                accountId: this.accountId(principal.arn),
+            };
+        }
+        if (principal.kind === "service") {
+            return {
+                principal,
+                identityPolicyPrincipal,
+                service: principal.service,
+            };
+        }
+        return {
+            principal,
+            identityPolicyPrincipal,
+        };
+    }
+    /**
+     * Extract the account component of an ARN when it contains one.
+     */
+    accountId(arn) {
+        const accountId = arn.split(":", 6)[4];
+        return accountId === undefined || accountId.length === 0
+            ? undefined
+            : accountId;
+    }
+}
+//# sourceMappingURL=sim-aws-caller-resolver.js.map

package/dist/service/aws/caller/sim-aws-caller-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-caller-resolver.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller-resolver.ts"],"names":[],"mappings":"AA6BA;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,0BAA0B,CACI;IAE/C,YAAY,0BAA6D;QACvE,IAAI,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,OAAO,CACL,MAAgC,EAChC,gBAAiC;QAEjC,IAAI,MAAM,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,CACjE,MAAM,CAAC,WAAW,CACnB,CAAC;YAEF,OAAO,IAAI,CAAC,UAAU,CACpB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,uBAAuB,CACjC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,gBAAgB,CAAC;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU,CAChB,SAA0B,EAC1B,uBAAwC;QAExC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,iBAAiB,GACrB,uBAAuB,CAAC,IAAI,KAAK,KAAK;gBACpC,CAAC,CAAC,uBAAuB,CAAC,GAAG;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,iBAAiB;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,SAAS;gBACT,uBAAuB;gBACvB,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS;YACT,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAW;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF"}

package/dist/service/aws/caller/sim-aws-caller.d.ts

@@ -1,42 +1,40 @@
-import type { SimAwsAccountId } from "../sim-aws-account.js";
-export type SimAwsPrincipalType = "root" | "user" | "role" | "assumed-role" | "service";
+import type { SimAwsCredentials } from "../../iam/credential/sim-aws-credentials.js";
 /**
- * Simulated AWS principal making a request.
- *
- * This is the resolved AWS identity, not SDK command input. Real AWS derives
- * this from credentials/signing; Yulin can resolve it from test options, local
- * HTTP headers, future simulated credentials, or service-to-service context.
+ * Resolved sim principal with an ARN, such as an IAM user or role.
  */
-export interface SimAwsPrincipal {
+export interface SimArnPrincipal {
+    readonly kind: "arn";
     readonly arn: string;
-    readonly accountId?: SimAwsAccountId | undefined;
-    readonly principalType?: SimAwsPrincipalType | undefined;
-    readonly name?: string | undefined;
 }
 /**
- * A request made by an authenticated simulated AWS principal.
+ * Resolved sim principal with a service name, such as lambda.amazonaws.com.
  */
-export interface SimAwsPrincipalCallerContext {
-    readonly kind?: "principal" | undefined;
-    readonly principal: SimAwsPrincipal | string;
+export interface SimServicePrincipal {
+    readonly kind: "service";
+    readonly service: string;
 }
 /**
- * A request made without an authenticated AWS principal.
+ * Resolved sim principal with an anonymous identity.
  */
-export interface SimAwsAnonymousCallerContext {
+export interface SimAnonymousPrincipal {
     readonly kind: "anonymous";
 }
 /**
- * Caller context for a simulated AWS service operation.
+ * Simulated credentials supplied at an AWS operation boundary.
  *
- * Omitting the caller allows the service to apply its default caller. Supplying
- * an anonymous caller explicitly suppresses that fallback.
+ * Credentials are authentication material rather than a resolved principal.
+ * They must be authenticated before authorization.
  */
-export type SimAwsCallerContext = SimAwsPrincipalCallerContext | SimAwsAnonymousCallerContext;
+export interface SimCredentialCaller {
+    readonly kind: "credentials";
+    readonly credentials: SimAwsCredentials;
+}
 /**
- * Reusable caller context for an explicitly anonymous request.
+ * Resolved simulated AWS identity.
  */
-export declare const SIM_AWS_ANONYMOUS_CALLER: {
-    readonly kind: "anonymous";
-};
+export type SimAwsPrincipal = SimArnPrincipal | SimServicePrincipal | SimAnonymousPrincipal;
+/**
+ * Caller accepted by simulated AWS service operations.
+ */
+export type SimAwsCaller = SimAwsPrincipal | SimCredentialCaller;
 //# sourceMappingURL=sim-aws-caller.d.ts.map

package/dist/service/aws/caller/sim-aws-caller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-caller.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,mBAAmB,GAC7B,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC7B,4BAA4B,GAAG,4BAA4B,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,wBAAwB;mBAC7B,WAAW;CAC8B,CAAC"}
+{"version":3,"file":"sim-aws-caller.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACzB,eAAe,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,mBAAmB,CAAC"}

package/dist/service/aws/caller/sim-aws-caller.js

@@ -1,7 +1,2 @@
-/**
- * Reusable caller context for an explicitly anonymous request.
- */
-export const SIM_AWS_ANONYMOUS_CALLER = {
-    kind: "anonymous",
-};
+export {};
 //# sourceMappingURL=sim-aws-caller.js.map

package/dist/service/aws/caller/sim-aws-caller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-caller.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":"AA2CA;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,WAAW;CAC8B,CAAC"}
+{"version":3,"file":"sim-aws-caller.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-caller.ts"],"names":[],"mappings":""}

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAI7E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,KAAK,EAAE,8BAA8B,EAMhD;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAWnE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAUrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAS7D;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAI7E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,KAAK,EAAE,8BAA8B,EAMhD;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAcnE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAcrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAS7D;CACF"}

package/dist/service/aws/factory/sim-aws-account-service-cache.js

@@ -49,10 +49,12 @@ export class SimAwsAccountServiceCache {
      * Create or get simulated CloudFront for an Account scope.
      */
     createCloudFront(scope) {
+        const iam = this.createIam(scope);
         return this.services.getOrCreate(accountServiceCacheKey("cloudFront", scope.accountRegionScope.accountId), () => new SimCloudFront({
             accountRegionScope: scope.accountRegionScope,
             cloudFrontRegistry: this.cloudFrontRegistry,
             s3OriginResolver: makeSimCfS3OriginResolver(this.simAws, scope),
+            iam,
             background: this.background,
         }));
     }
@@ -60,11 +62,14 @@ export class SimAwsAccountServiceCache {
      * Create or get simulated IAM for an Account scope.
      */
     createIam(scope) {
-        return this.services.getOrCreate(accountServiceCacheKey("iam", scope.accountRegionScope.accountId), () => new SimIam({
-            accountRegionScope: scope.accountRegionScope,
-            background: this.background,
-            iamRegistry: this.iamRegistry,
-        }));
+        return this.services.getOrCreate(accountServiceCacheKey("iam", scope.accountRegionScope.accountId), () => {
+            const iam = new SimIam({
+                accountRegionScope: scope.accountRegionScope,
+                background: this.background,
+            });
+            this.iamRegistry.register(scope.accountRegionScope.accountId, iam);
+            return iam;
+        });
     }
     /**
      * Create or get simulated Route53 for an Account scope.

package/dist/service/aws/factory/sim-aws-account-service-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAUxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,KAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE,CACH,IAAI,MAAM,CAAC;YACT,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAUxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,KAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-service-factory.d.ts

@@ -10,6 +10,7 @@ import { SimS3 } from "../../s3/sim-s3.js";
 import { SimAcm } from "../../acm/sim-acm.js";
 import type { SimIam } from "../../iam/index.js";
 import { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimSts } from "../../sts/sim-sts.js";
 interface SimAwsServiceFactoryProps {
     readonly simAws: SimAws;
     readonly background: BackgroundScheduler & BackgroundCompleter;
@@ -29,8 +30,6 @@ interface SimAwsServiceFactoryProps {
  * such as IAM, Route53, and CloudFront.
  */
 export declare class SimAwsServiceFactory {
-    private readonly simAws;
-    private readonly background;
     /**
      * Shared simulated CloudFront registry.
      *
@@ -42,10 +41,12 @@ export declare class SimAwsServiceFactory {
     /**
      * Shared simulated IAM registry.
      *
-     * This owns IAM state that is global within one SimAws instance, including
-     * activation state and activation diagnostics.
+     * This indexes the account-scoped IAM facades created for one SimAws
+     * instance so cross-account services can resolve Account-owned IAM state.
      */
     readonly iamRegistry: SimIamRegistry;
+    private readonly simAws;
+    private readonly background;
     /**
      * Shared simulated Route53 registry.
      *
@@ -91,6 +92,10 @@ export declare class SimAwsServiceFactory {
      * Create simulated S3 for an Account Region scope.
      */
     createS3(scope: SimAwsAccountRegionContainer): SimS3;
+    /**
+     * Create simulated STS for an Account/Region scope.
+     */
+    createSts(scope: SimAwsAccountRegionContainer): SimSts;
 }
 export {};
 //# sourceMappingURL=sim-aws-service-factory.d.ts.map

package/dist/service/aws/factory/sim-aws-service-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAExE,UAAU,yBAAyB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACH,SAAgB,kBAAkB,wBAA+B;IAEjE;;;;;OAKG;IACH,SAAgB,WAAW,iBAAwB;IAEnD;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,KAAK,EAAE,yBAAyB,EAU3C;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAKrD;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAM3E;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAEnE;IAED;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,WAAW,CAK/D;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAE7D;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CAMnD;CACF"}
+{"version":3,"file":"sim-aws-service-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,UAAU,yBAAyB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B;;;;;;OAMG;IACH,SAAgB,kBAAkB,wBAA+B;IAEjE;;;;;OAKG;IACH,SAAgB,WAAW,iBAAwB;IAEnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IAEvE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,KAAK,EAAE,yBAAyB,EAU3C;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAM3E;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAEnE;IAED;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,WAAW,CAK/D;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAE7D;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CASnD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;CACF"}

package/dist/service/aws/factory/sim-aws-service-factory.js

@@ -7,6 +7,7 @@ import { SimAwsAccountServiceCache } from "./sim-aws-account-service-cache.js";
 import { SimAcm } from "../../acm/sim-acm.js";
 import { SimRoute53Registry } from "../../route53/registry/sim-route53-registry.js";
 import { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimSts } from "../../sts/sim-sts.js";
 /**
  * Factory for simulated AWS services used by one SimAws instance.
  *
@@ -22,8 +23,6 @@ import { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
  * such as IAM, Route53, and CloudFront.
  */
 export class SimAwsServiceFactory {
-    simAws;
-    background;
     /**
      * Shared simulated CloudFront registry.
      *
@@ -35,10 +34,12 @@ export class SimAwsServiceFactory {
     /**
      * Shared simulated IAM registry.
      *
-     * This owns IAM state that is global within one SimAws instance, including
-     * activation state and activation diagnostics.
+     * This indexes the account-scoped IAM facades created for one SimAws
+     * instance so cross-account services can resolve Account-owned IAM state.
      */
     iamRegistry = new SimIamRegistry();
+    simAws;
+    background;
     /**
      * Shared simulated Route53 registry.
      *
@@ -70,8 +71,10 @@ export class SimAwsServiceFactory {
      * Create simulated ACM for an Account Region scope.
      */
     createAcm(scope) {
+        const iam = this.createIam(scope);
         return new SimAcm({
             accountRegionScope: scope.accountRegionScope,
+            iam,
             background: this.background,
         });
     }
@@ -116,10 +119,23 @@ export class SimAwsServiceFactory {
      * Create simulated S3 for an Account Region scope.
      */
     createS3(scope) {
+        const iam = this.createIam(scope);
         return new SimS3({
             accountRegionScope: scope.accountRegionScope,
             s3GlobalRegistry: this.s3Registry,
+            iam,
+            background: this.background,
+        });
+    }
+    /**
+     * Create simulated STS for an Account/Region scope.
+     */
+    createSts(scope) {
+        this.createIam(scope);
+        return new SimSts({
+            accountRegionScope: scope.accountRegionScope,
             background: this.background,
+            iamResolver: this.iamRegistry,
         });
     }
 }

package/dist/service/aws/factory/sim-aws-service-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-factory.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAOxE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAS;IACf,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACa,kBAAkB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEjE;;;;;OAKG;IACa,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAEnD;;;;;OAKG;IACc,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE5D;;;;;;OAMG;IACc,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,eAAe,CAA4B;IAE5D,YAAY,KAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACnD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAmC;QAChD,OAAO,IAAI,WAAW,CAAC;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmC;QAC1C,OAAO,IAAI,KAAK,CAAC;YACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-aws-service-factory.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAO9C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;;OAMG;IACa,kBAAkB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEjE;;;;;OAKG;IACa,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAElC,MAAM,CAAS;IACf,UAAU,CAA4C;IAEvE;;;;;OAKG;IACc,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE5D;;;;;;OAMG;IACc,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,eAAe,CAA4B;IAE5D,YAAY,KAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACnD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAmC;QAChD,OAAO,IAAI,WAAW,CAAC;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,KAAK,CAAC;YACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtB,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/aws/sim-aws-account-region-scope.d.ts

@@ -8,6 +8,7 @@ import type { SimCloudFormation } from "../cloudformation/index.js";
 import type { SimRoute53 } from "../route53/index.js";
 import type { SimAcm } from "../acm/sim-acm.js";
 import type { SimIam } from "../iam/index.js";
+import type { SimSts } from "../sts/sim-sts.js";
 export type SimAccountRegionScopeKey = `${SimAwsAccountId}:${AwsRegionName}`;
 interface SimAwsAccountRegionContainerProps {
     readonly simAws?: SimAws;
@@ -19,11 +20,11 @@ interface SimAwsAccountRegionContainerProps {
  * This is the real Account/Region scope container for simulated services.
  */
 export declare class SimAwsAccountRegionContainer {
-    private readonly simAws;
     readonly account: SimAwsAccount;
     readonly region: SimAwsRegion;
-    private readonly memo;
     readonly accountRegionScope: SimAwsAccountRegionScope;
+    private readonly simAws;
+    private readonly memo;
     constructor(props?: SimAwsAccountRegionContainerProps);
     /**
      * Get simulated ACM for this account and region.
@@ -53,6 +54,10 @@ export declare class SimAwsAccountRegionContainer {
      * Get simulated S3 for this account and region.
      */
     s3(): SimS3;
+    /**
+     * Get simulated STS for this account and region.
+     */
+    sts(): SimSts;
 }
 export interface SimAwsAccountRegionScope {
     accountId: SimAwsAccountId;

package/dist/service/aws/sim-aws-account-region-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-region-scope.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account-region-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,MAAM,MAAM,wBAAwB,GAAG,GAAG,eAAe,IAAI,aAAa,EAAE,CAAC;AAE7E,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,SAAgB,OAAO,EAAE,aAAa,CAAC;IACvC,SAAgB,MAAM,EAAE,YAAY,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAE3C,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAE7D,YAAY,KAAK,GAAE,iCAAsC,EAexD;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAIZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAIlC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAI1B;IAED;;OAEG;IACH,QAAQ,IAAI,WAAW,CAItB;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAIZ;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAIpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAIV;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;CAC3B"}
+{"version":3,"file":"sim-aws-account-region-scope.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account-region-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,MAAM,wBAAwB,GAAG,GAAG,eAAe,IAAI,aAAa,EAAE,CAAC;AAE7E,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,4BAA4B;IACvC,SAAgB,OAAO,EAAE,aAAa,CAAC;IACvC,SAAgB,MAAM,EAAE,YAAY,CAAC;IACrC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAE3C,YAAY,KAAK,GAAE,iCAAsC,EAexD;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAIZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAIlC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAI1B;IAED;;OAEG;IACH,QAAQ,IAAI,WAAW,CAItB;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAIZ;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAIpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAIV;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAIZ;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;CAC3B"}

package/dist/service/aws/sim-aws-account-region-scope.js

@@ -5,11 +5,11 @@ import { SimAws } from "./sim-aws.js";
  * This is the real Account/Region scope container for simulated services.
  */
 export class SimAwsAccountRegionContainer {
-    simAws;
     account;
     region;
-    memo = new Memo();
     accountRegionScope;
+    simAws;
+    memo = new Memo();
     constructor(props = {}) {
         const { simAws = new SimAws(), account, region } = props;
         this.simAws = simAws;
@@ -66,5 +66,11 @@ export class SimAwsAccountRegionContainer {
     s3() {
         return this.memo.getOrCreate("s3", () => this.simAws.serviceFactory.createS3(this));
     }
+    /**
+     * Get simulated STS for this account and region.
+     */
+    sts() {
+        return this.memo.getOrCreate("sts", () => this.simAws.serviceFactory.createSts(this));
+    }
 }
 //# sourceMappingURL=sim-aws-account-region-scope.js.map

package/dist/service/aws/sim-aws-account-region-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-region-scope.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account-region-scope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAiBtC;;;GAGG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAS;IAChB,OAAO,CAAgB;IACvB,MAAM,CAAe;IACpB,IAAI,GAAG,IAAI,IAAI,EAAU,CAAC;IAE3B,kBAAkB,CAA2B;IAE7D,YAAY,KAAK,GAAsC,EAAE;QACvD,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO;YACV,OAAO;gBACP,IAAI,CAAC,MAAM,CAAC,OAAO,CAAE,OAAqC,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YACT,MAAM;gBACN,IAAI,CAAC,MAAM,CAAC,MAAM,CAAE,MAAmC,EAAE,UAAU,CAAC,CAAC;QAEvE,IAAI,CAAC,kBAAkB,GAAG;YACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CACtD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,EAAE,CAC5C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,EAAE;QACA,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CACtC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-aws-account-region-scope.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account-region-scope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkBtC;;;GAGG;AACH,MAAM,OAAO,4BAA4B;IACvB,OAAO,CAAgB;IACvB,MAAM,CAAe;IACrB,kBAAkB,CAA2B;IAE5C,MAAM,CAAS;IACf,IAAI,GAAG,IAAI,IAAI,EAAU,CAAC;IAE3C,YAAY,KAAK,GAAsC,EAAE;QACvD,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO;YACV,OAAO;gBACP,IAAI,CAAC,MAAM,CAAC,OAAO,CAAE,OAAqC,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YACT,MAAM;gBACN,IAAI,CAAC,MAAM,CAAC,MAAM,CAAE,MAAmC,EAAE,UAAU,CAAC,CAAC;QAEvE,IAAI,CAAC,kBAAkB,GAAG;YACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CACtD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,EAAE,CAC5C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,EAAE;QACA,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CACtC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CACvC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/aws/sim-aws-account.d.ts

@@ -10,6 +10,7 @@ import type { SimAcm } from "../acm/sim-acm.js";
 import type { SimRoute53 } from "../route53/index.js";
 import type { SimIam } from "../iam/index.js";
 import type { SimAwsPrincipal } from "./caller/sim-aws-caller.js";
+import type { SimSts } from "../sts/sim-sts.js";
 export type SimAwsAccountId = Brand<string, "SimAwsAccountId">;
 export declare const DEFAULT_SIM_AWS_ACCOUNT_ID: SimAwsAccountId;
 interface SimAwsAccountProps {
@@ -23,8 +24,8 @@ interface SimAwsAccountProps {
  * full Account/Region scope.
  */
 export declare class SimAwsAccount {
-    private readonly simAws;
     readonly accountId: SimAwsAccountId;
+    private readonly simAws;
     constructor(props?: SimAwsAccountProps);
     /**
      * Intrinsic root principal for this simulated AWS Account.
@@ -62,6 +63,10 @@ export declare class SimAwsAccount {
      * Get simulated S3 for this Account's default Region.
      */
     s3(): SimS3;
+    /**
+     * Get simulated STS for this Account's default Region.
+     */
+    sts(): SimSts;
 }
 /**
  * Generate a fake AWS Account ID.

package/dist/service/aws/sim-aws-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEtF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGlE,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B,EAAqB,eAAe,CAAC;AAE5E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqC;IAC5D,SAAgB,SAAS,EAAE,eAAe,CAAC;IAE3C,YAAY,KAAK,GAAE,kBAAuB,EAMzC;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,eAAe,CAEnC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,EAAE,aAAa,GAAG,4BAA4B,CAE/D;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAElC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAE1B;IAED;;OAEG;IACH,QAAQ,IAAI,WAAW,CAEtB;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAEpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAEV;CACF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,eAAe,CAErD"}
+{"version":3,"file":"sim-aws-account.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEtF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B,EAAqB,eAAe,CAAC;AAE5E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,SAAgB,SAAS,EAAE,eAAe,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqC;IAE5D,YAAY,KAAK,GAAE,kBAAuB,EAMzC;IAED;;OAEG;IACH,IAAI,aAAa,IAAI,eAAe,CAEnC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,EAAE,aAAa,GAAG,4BAA4B,CAE/D;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAElC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAE1B;IAED;;OAEG;IACH,QAAQ,IAAI,WAAW,CAEtB;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAEpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAEV;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;CACF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,eAAe,CAErD"}