@kensio/yulin 0.32.0 → 0.34.0

package/dist/dist-hidden/service/iam/authorize/sim-iam-decision.js

@@ -0,0 +1,134 @@
+import { SimIamPolicyDocumentParser } from "../policy/parse/sim-iam-doc-parser.js";
+import { SimIamPolicyStatementMatcher } from "./match/sim-iam-policy-statement-matcher.js";
+export const SimIamPolicyDecisionValue = {
+    ExplicitDeny: "ExplicitDeny",
+    Allow: "Allow",
+    ImplicitDeny: "ImplicitDeny",
+};
+/**
+ * Decision for one simulated IAM policy authorization attempt.
+ *
+ * This evaluates already-discovered identity and resource policy documents. It
+ * does not fetch attached policies itself, apply trust policy semantics,
+ * evaluate permissions boundaries, evaluate SCPs, or enforce service command
+ * access.
+ *
+ * The simulator currently models the common IAM authorization union:
+ *
+ * - an explicit Deny in any evaluated policy wins;
+ * - an Allow in an identity policy or resource policy allows the request;
+ * - otherwise the request is implicitly denied.
+ *
+ * Resource policies are expected to be supplied by the service that owns the
+ * target resource.
+ */
+export class SimIamPolicyDecision {
+    request;
+    policyDocumentParser;
+    statementMatcher;
+    explicitDenyStatementRecords = [];
+    allowStatementRecords = [];
+    trustAllowStatementRecords = [];
+    constructor(request, policyDocumentParser = new SimIamPolicyDocumentParser()) {
+        this.request = request;
+        this.policyDocumentParser = policyDocumentParser;
+        this.statementMatcher = new SimIamPolicyStatementMatcher(request);
+        this.evaluate();
+    }
+    /**
+     * Resolved caller against which this authorization decision was evaluated.
+     *
+     * This includes IAM's default account-root caller when the authorization input
+     * omitted a caller.
+     */
+    get caller() {
+        return this.request.caller;
+    }
+    /**
+     * Final IAM decision value.
+     */
+    get value() {
+        if (this.explicitDenyStatementRecords.length > 0) {
+            return SimIamPolicyDecisionValue.ExplicitDeny;
+        }
+        if (this.allowStatementRecords.length > 0) {
+            return SimIamPolicyDecisionValue.Allow;
+        }
+        return SimIamPolicyDecisionValue.ImplicitDeny;
+    }
+    /**
+     * Whether the request is allowed.
+     */
+    get isAllowed() {
+        return this.value === SimIamPolicyDecisionValue.Allow;
+    }
+    /**
+     * Whether the request is denied either explicitly or implicitly.
+     */
+    get isDenied() {
+        return this.value !== SimIamPolicyDecisionValue.Allow;
+    }
+    /**
+     * Whether the request is denied by a matching Deny statement.
+     */
+    get isExplicitDeny() {
+        return this.value === SimIamPolicyDecisionValue.ExplicitDeny;
+    }
+    /**
+     * Whether the request is denied because no Allow statement matched.
+     */
+    get isImplicitDeny() {
+        return this.value === SimIamPolicyDecisionValue.ImplicitDeny;
+    }
+    /**
+     * Whether a matching trust-policy statement explicitly allows the request.
+     *
+     * An identity-policy Allow cannot substitute for the target role's trust.
+     */
+    get isAllowedByTrustPolicy() {
+        return this.trustAllowStatementRecords.length > 0;
+    }
+    /**
+     * Matching explicit Deny statements.
+     */
+    get explicitDenyStatements() {
+        return this.explicitDenyStatementRecords;
+    }
+    /**
+     * Matching Allow statements.
+     */
+    get allowStatements() {
+        return this.allowStatementRecords;
+    }
+    /**
+     * Matching Allow statements originating from trust policies.
+     */
+    get trustAllowStatements() {
+        return this.trustAllowStatementRecords;
+    }
+    evaluate() {
+        for (const policy of [
+            ...this.request.identityPolicies,
+            ...this.request.resourcePolicies,
+        ]) {
+            this.evaluatePolicy(policy);
+        }
+    }
+    evaluatePolicy(policy) {
+        const parsedPolicy = this.policyDocumentParser.parse(policy.document);
+        for (const statement of parsedPolicy.statements) {
+            if (!this.statementMatcher.matches(policy, statement)) {
+                continue;
+            }
+            if (statement.effect === "Deny") {
+                this.explicitDenyStatementRecords.push(statement.source);
+                continue;
+            }
+            this.allowStatementRecords.push(statement.source);
+            if (policy.sourceType === "trust") {
+                this.trustAllowStatementRecords.push(statement.source);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-iam-decision.js.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-decision.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-decision.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAG3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAKX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAqB;IAC5B,oBAAoB,CAA6B;IACjD,gBAAgB,CAA+B;IAC/C,4BAA4B,GAC3C,EAAE,CAAC;IACY,qBAAqB,GAAoC,EAAE,CAAC;IAC5D,0BAA0B,GACzC,EAAE,CAAC;IAEL,YACE,OAA2B,EAC3B,oBAAoB,GAA+B,IAAI,0BAA0B,EAAE;QAEnF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,yBAAyB,CAAC,YAAY,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,OAAO,yBAAyB,CAAC,YAAY,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,IAAI,sBAAsB;QACxB,OAAO,IAAI,CAAC,4BAA4B,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,0BAA0B,CAAC;IACzC,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,MAAM,IAAI;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAChC,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEtE,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/sim-iam-inter-service-auth-z.d.ts

@@ -0,0 +1,53 @@
+import type { SimIamAuthorizationInput } from "./context/sim-iam-auth-z-context-builder.js";
+import type { SimAwsResolvedCaller } from "../../aws/caller/sim-aws-caller-resolver.js";
+/**
+ * The part of an IAM authorization decision needed by service integrations.
+ *
+ * Service command handlers need to know whether authorization succeeded and
+ * which caller should appear in an access-denied error. They do not need the
+ * policy evaluation details exposed by SimIamPolicyDecision.
+ *
+ * SimIamPolicyDecision structurally implements this interface, while simpler
+ * authorization implementations can return a decision without invoking the IAM
+ * policy parser and matcher.
+ */
+export interface SimIamAuthorizationDecision {
+    readonly caller: SimAwsResolvedCaller;
+    readonly isAllowed: boolean;
+    readonly isDenied: boolean;
+}
+/**
+ * IAM authorization capability consumed by other simulated AWS services.
+ *
+ * SimIam structurally implements this interface without requiring consumers to
+ * depend on the complete IAM service facade or its concrete decision type.
+ */
+export interface SimIamInterServiceAuthZ {
+    authorize(input: SimIamAuthorizationInput): SimIamAuthorizationDecision;
+}
+/**
+ * Permissive authorization used when a service is constructed without IAM.
+ *
+ * Top-level SimAws service construction supplies the account-scoped SimIam
+ * implementation, so requests made through SimAws still evaluate simulated IAM
+ * policies. This fallback supports direct construction of service facades and
+ * command handlers without creating isolated IAM state.
+ *
+ * This implementation does not create synthetic policies or use the IAM policy
+ * evaluator. Its result therefore remains allowed if IAM later adds principal-
+ * specific rules, permission boundaries, service control policies, or other
+ * sources of explicit denial.
+ */
+export declare class SimIamAllowAllAuth implements SimIamInterServiceAuthZ {
+    private readonly callerResolver;
+    /**
+     * Return an unconditional allowed decision.
+     *
+     * Caller resolution is retained only for consistent diagnostic metadata. An
+     * omitted caller is represented as anonymous because this adapter has no
+     * Account from which to derive a root ARN. That representation cannot affect
+     * the result because no policies or principal rules are evaluated here.
+     */
+    authorize(input: SimIamAuthorizationInput): SimIamAuthorizationDecision;
+}
+//# sourceMappingURL=sim-iam-inter-service-auth-z.d.ts.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-inter-service-auth-z.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-inter-service-auth-z.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-inter-service-auth-z.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAGxF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,2BAA2B,CAAC;CACzE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,YAAW,uBAAuB;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,2BAA2B,CAgBtE;CACF"}

package/dist/dist-hidden/service/iam/authorize/sim-iam-inter-service-auth-z.js

@@ -0,0 +1,38 @@
+import { SimAwsCallerResolver } from "../../aws/caller/sim-aws-caller-resolver.js";
+/**
+ * Permissive authorization used when a service is constructed without IAM.
+ *
+ * Top-level SimAws service construction supplies the account-scoped SimIam
+ * implementation, so requests made through SimAws still evaluate simulated IAM
+ * policies. This fallback supports direct construction of service facades and
+ * command handlers without creating isolated IAM state.
+ *
+ * This implementation does not create synthetic policies or use the IAM policy
+ * evaluator. Its result therefore remains allowed if IAM later adds principal-
+ * specific rules, permission boundaries, service control policies, or other
+ * sources of explicit denial.
+ */
+export class SimIamAllowAllAuth {
+    callerResolver = new SimAwsCallerResolver();
+    /**
+     * Return an unconditional allowed decision.
+     *
+     * Caller resolution is retained only for consistent diagnostic metadata. An
+     * omitted caller is represented as anonymous because this adapter has no
+     * Account from which to derive a root ARN. That representation cannot affect
+     * the result because no policies or principal rules are evaluated here.
+     */
+    authorize(input) {
+        const caller = input.caller?.kind === "credentials"
+            ? this.callerResolver.resolve({ kind: "anonymous" }, { kind: "anonymous" })
+            : this.callerResolver.resolve(input.caller, {
+                kind: "anonymous",
+            });
+        return {
+            caller,
+            isAllowed: true,
+            isDenied: false,
+        };
+    }
+}
+//# sourceMappingURL=sim-iam-inter-service-auth-z.js.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-inter-service-auth-z.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-inter-service-auth-z.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-inter-service-auth-z.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AA6BnF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACZ,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D;;;;;;;OAOG;IACH,SAAS,CAAC,KAA+B;QACvC,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,aAAa;YAClC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrB,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB;YACH,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;gBACxC,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QAET,OAAO;YACL,MAAM;YACN,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/sim-iam-wildcard.d.ts

@@ -0,0 +1,11 @@
+interface SimIamWildcardMatchOptions {
+    readonly caseSensitive: boolean;
+}
+/**
+ * Match an IAM-style wildcard pattern.
+ *
+ * "*" means zero or more characters and "?" means exactly one character.
+ */
+export declare function simIamWildcardMatch(pattern: string, value: string, options: SimIamWildcardMatchOptions): boolean;
+export {};
+//# sourceMappingURL=sim-iam-wildcard.d.ts.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-wildcard.js

@@ -0,0 +1,23 @@
+/**
+ * Match an IAM-style wildcard pattern.
+ *
+ * "*" means zero or more characters and "?" means exactly one character.
+ */
+export function simIamWildcardMatch(pattern, value, options) {
+    return wildcardMatch(pattern, value, options);
+}
+function wildcardMatch(pattern, value, options) {
+    const regexPattern = pattern
+        .replaceAll(/[\\^$.*+?()[\]{}|]/gu, String.raw `\$&`)
+        .replaceAll(String.raw `\*`, ".*")
+        .replaceAll(String.raw `\?`, ".");
+    /*
+     * IAM wildcard patterns are not accepted as regex syntax. They are converted
+     * from a small wildcard language where "*" and "?" have special meaning. All
+     * other regex characters are escaped above.
+     */
+    // eslint-disable-next-line security/detect-non-literal-regexp
+    const regExp = new RegExp(`^${regexPattern}$`, options.caseSensitive ? "u" : "iu");
+    return regExp.test(value);
+}
+//# sourceMappingURL=sim-iam-wildcard.js.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-wildcard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-wildcard.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-wildcard.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,KAAa,EACb,OAAmC;IAEnC,MAAM,YAAY,GAAG,OAAO;SACzB,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC;SACnD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,IAAI,CAAC;SAChC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnC;;;;OAIG;IACH,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,IAAI,YAAY,GAAG,EACnB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACnC,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy-record-factory.d.ts

@@ -0,0 +1,38 @@
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimIamManagedPolicy, SimIamPolicyName } from "../../../policy/sim-iam-policy.js";
+import type { SimCreatePolicyCommand, SimCreatePolicyCommandOutput } from "./create-policy.cmd.js";
+interface CreatePolicyRecordFactoryProps {
+    readonly arn: SimArn;
+    readonly path: string;
+    readonly policyName: SimIamPolicyName;
+    readonly cmd: SimCreatePolicyCommand;
+}
+/**
+ * Builds IAM Policy records and CreatePolicy responses.
+ *
+ * The handler owns command orchestration: validation, sequencing, duplicate
+ * checks, and persistence. This factory owns the shape of the stored policy and
+ * the shape returned to the SDK caller. Keeping those transformations here
+ * reduces handler complexity and keeps field-mapping decisions in one place.
+ */
+export declare class CreatePolicyRecordFactory {
+    /**
+     * Create the simulator's stored policy model from validated command data.
+     *
+     * The same timestamp is used for CreateDate and UpdateDate because a newly
+     * created IAM policy has not had a later update event. The default version
+     * starts at v1, matching IAM's managed policy version model.
+     */
+    makePolicy(props: CreatePolicyRecordFactoryProps): SimIamManagedPolicy;
+    /**
+     * Convert the simulator's internal policy record into the SDK response shape.
+     *
+     * The policy document is stored locally but is not returned by CreatePolicy.
+     * IAM callers retrieve policy document content through policy-version APIs,
+     * so this method exposes only the metadata fields included in CreatePolicy
+     * output.
+     */
+    makeOutput(policy: SimIamManagedPolicy): SimCreatePolicyCommandOutput;
+}
+export {};
+//# sourceMappingURL=create-policy-record-factory.d.ts.map

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy-record-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy-record-factory.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,mBAAmB,EAEnB,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,8BAA8B;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,8BAA8B,GAAG,mBAAmB,CAmBrE;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,4BAA4B,CAgBpE;CACF"}

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy-record-factory.js

@@ -0,0 +1,62 @@
+import { makeSimPolicyId } from "../../../policy/sim-iam-policy-arn.js";
+/**
+ * Builds IAM Policy records and CreatePolicy responses.
+ *
+ * The handler owns command orchestration: validation, sequencing, duplicate
+ * checks, and persistence. This factory owns the shape of the stored policy and
+ * the shape returned to the SDK caller. Keeping those transformations here
+ * reduces handler complexity and keeps field-mapping decisions in one place.
+ */
+export class CreatePolicyRecordFactory {
+    /**
+     * Create the simulator's stored policy model from validated command data.
+     *
+     * The same timestamp is used for CreateDate and UpdateDate because a newly
+     * created IAM policy has not had a later update event. The default version
+     * starts at v1, matching IAM's managed policy version model.
+     */
+    makePolicy(props) {
+        const { arn, path, policyName, cmd } = props;
+        const now = new Date();
+        return {
+            arn,
+            policyId: makeSimPolicyId(),
+            policyName,
+            path,
+            defaultVersionId: "v1",
+            attachmentCount: 0,
+            permissionsBoundaryUsageCount: 0,
+            isAttachable: true,
+            description: cmd.input.Description,
+            createDate: now,
+            updateDate: now,
+            policyDocument: cmd.input.PolicyDocument,
+        };
+    }
+    /**
+     * Convert the simulator's internal policy record into the SDK response shape.
+     *
+     * The policy document is stored locally but is not returned by CreatePolicy.
+     * IAM callers retrieve policy document content through policy-version APIs,
+     * so this method exposes only the metadata fields included in CreatePolicy
+     * output.
+     */
+    makeOutput(policy) {
+        return {
+            Policy: {
+                PolicyName: policy.policyName,
+                PolicyId: policy.policyId,
+                Arn: policy.arn,
+                Path: policy.path,
+                DefaultVersionId: policy.defaultVersionId,
+                AttachmentCount: policy.attachmentCount,
+                PermissionsBoundaryUsageCount: policy.permissionsBoundaryUsageCount,
+                IsAttachable: policy.isAttachable,
+                Description: policy.description,
+                CreateDate: policy.createDate,
+                UpdateDate: policy.updateDate,
+            },
+        };
+    }
+}
+//# sourceMappingURL=create-policy-record-factory.js.map

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy-record-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy-record-factory.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy-record-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAcxE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;;;;OAMG;IACH,UAAU,CAAC,KAAqC;QAC9C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,eAAe,EAAE;YAC3B,UAAU;YACV,IAAI;YACJ,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,CAAC;YAClB,6BAA6B,EAAE,CAAC;YAChC,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW;YAClC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,cACoB;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,MAA2B;QACpC,OAAO;YACL,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy.handler.d.ts

@@ -0,0 +1,30 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { SimCreatePolicyCommand, SimCreatePolicyCommandOutput } from "./create-policy.cmd.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamManagedPolicy } from "../../../policy/sim-iam-policy.js";
+interface CreatePolicyCommandHandlerProps {
+    readonly accountId: SimAwsAccountId;
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM CreatePolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/CreatePolicyCommand/
+ */
+export declare class CreatePolicyCommandHandler implements CommandHandler<SimCreatePolicyCommand, SimCreatePolicyCommandOutput> {
+    private readonly accountId;
+    private readonly policies;
+    private readonly background;
+    private readonly policyFactory;
+    private readonly policyDocValidator;
+    constructor(props: CreatePolicyCommandHandlerProps);
+    /**
+     * Handle a CreatePolicyCommand from the SDK.
+     */
+    handle(cmd: SimCreatePolicyCommand): Promise<SimCreatePolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=create-policy.handler.d.ts.map

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,mCAAmC,CAAC;AAO3C,UAAU,+BAA+B;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IACjE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgC;IAEnE,YAAY,KAAK,EAAE,+BAA+B,EAMjD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CAmCvC;CACF"}

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy.handler.js

@@ -0,0 +1,55 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { makeSimPolicyArn } from "../../../policy/sim-iam-policy-arn.js";
+import { normalisePolicyPath } from "../../../policy/sim-iam-policy-path.js";
+import { CreatePolicyRecordFactory } from "./create-policy-record-factory.js";
+import { SimIamEntityAlreadyExists } from "../../../error/sim-iam.error.js";
+import { SimIamPolicyDocumentValidator } from "../../../validate/sim-iam-policy-doc-validator.js";
+/**
+ * IAM CreatePolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/CreatePolicyCommand/
+ */
+export class CreatePolicyCommandHandler {
+    accountId;
+    policies;
+    background;
+    policyFactory = new CreatePolicyRecordFactory();
+    policyDocValidator;
+    constructor(props) {
+        const { accountId, policies, background = new BackgroundTasks() } = props;
+        this.accountId = accountId;
+        this.policies = policies;
+        this.background = background;
+        this.policyDocValidator = new SimIamPolicyDocumentValidator();
+    }
+    /**
+     * Handle a CreatePolicyCommand from the SDK.
+     */
+    async handle(cmd) {
+        const policyName = cmd.input.PolicyName;
+        if (policyName === undefined || policyName.length === 0) {
+            throw new Error("PolicyName is required");
+        }
+        this.policyDocValidator.validateOptional(cmd.input.PolicyDocument);
+        const path = normalisePolicyPath(cmd.input.Path);
+        const arn = makeSimPolicyArn({
+            accountId: this.accountId,
+            path,
+            policyName,
+        });
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        if (this.policies.has(arn)) {
+            throw new SimIamEntityAlreadyExists(`Sim IAM Policy already exists: ${arn}`);
+        }
+        const policy = this.policyFactory.makePolicy({
+            arn,
+            path,
+            policyName,
+            cmd,
+        });
+        this.policies.set(arn, policy);
+        return this.policyFactory.makeOutput(policy);
+    }
+}
+//# sourceMappingURL=create-policy.handler.js.map

package/dist/dist-hidden/service/iam/command/policy/create-policy/create-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/create-policy/create-policy.handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAKtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAQlG;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,SAAS,CAAkB;IAC3B,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAChC,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAChD,kBAAkB,CAAgC;IAEnE,YAAY,KAAsC;QAChD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAC1E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA2B;QAE3B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAA0C,CAAC;QAExE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,gBAAgB,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,GAAG,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAC3C,GAAG;YACH,IAAI;YACJ,UAAU;YACV,GAAG;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/dist-hidden/service/iam/command/policy/get-policy/get-policy.handler.d.ts

@@ -0,0 +1,25 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import type { SimArn } from "../../../../aws/arn.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamManagedPolicy } from "../../../policy/sim-iam-policy.js";
+import type { SimGetPolicyCommand, SimGetPolicyCommandOutput } from "./get-policy.cmd.js";
+interface GetPolicyCommandHandlerProps {
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM GetPolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetPolicyCommand/
+ */
+export declare class GetPolicyCommandHandler implements CommandHandler<SimGetPolicyCommand, SimGetPolicyCommandOutput> {
+    private readonly policies;
+    private readonly background;
+    constructor(props: GetPolicyCommandHandlerProps);
+    /**
+     * Handle a GetPolicyCommand from the SDK.
+     */
+    handle(cmd: SimGetPolicyCommand): Promise<SimGetPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=get-policy.handler.d.ts.map

package/dist/dist-hidden/service/iam/command/policy/get-policy/get-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/get-policy/get-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,4BAA4B;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,4BAA4B,EAK9C;IAED;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA+BzE;CACF"}

package/dist/dist-hidden/service/iam/command/policy/get-policy/get-policy.handler.js

@@ -0,0 +1,47 @@
+import { BackgroundTasks, } from "../../../../../util/background/background.js";
+import { SimIamNoSuchEntity } from "../../../error/sim-iam.error.js";
+/**
+ * IAM GetPolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/GetPolicyCommand/
+ */
+export class GetPolicyCommandHandler {
+    policies;
+    background;
+    constructor(props) {
+        const { policies, background = new BackgroundTasks() } = props;
+        this.policies = policies;
+        this.background = background;
+    }
+    /**
+     * Handle a GetPolicyCommand from the SDK.
+     */
+    async handle(cmd) {
+        const policyArn = cmd.input.PolicyArn;
+        if (policyArn === undefined || policyArn.length === 0) {
+            throw new Error("PolicyArn is required");
+        }
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const policy = this.policies.get(policyArn);
+        if (policy === undefined) {
+            throw new SimIamNoSuchEntity(`No IAM Policy with ARN ${policyArn}`);
+        }
+        return {
+            Policy: {
+                PolicyName: policy.policyName,
+                PolicyId: policy.policyId,
+                Arn: policy.arn,
+                Path: policy.path,
+                DefaultVersionId: policy.defaultVersionId,
+                AttachmentCount: policy.attachmentCount,
+                PermissionsBoundaryUsageCount: policy.permissionsBoundaryUsageCount,
+                IsAttachable: policy.isAttachable,
+                Description: policy.description,
+                CreateDate: policy.createDate,
+                UpdateDate: policy.updateDate,
+            },
+        };
+    }
+}
+//# sourceMappingURL=get-policy.handler.js.map

package/dist/dist-hidden/service/iam/command/policy/get-policy/get-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-policy.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/get-policy/get-policy.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAWrE;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,QAAQ,CAAmC;IAC3C,UAAU,CAAsB;IAEjD,YAAY,KAAmC;QAC7C,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC;QAE/D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAwB;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAA+B,CAAC;QAE5D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO;YACL,MAAM,EAAE;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,6BAA6B,EAAE,MAAM,CAAC,6BAA6B;gBACnE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/iam/command/policy/list-policies/list-policies.handler.d.ts

@@ -0,0 +1,28 @@
+import type { CommandHandler } from "../../../../../command/command-handler.js";
+import type { SimArn } from "../../../../aws/arn.js";
+import { type BackgroundScheduler } from "../../../../../util/background/background.js";
+import type { SimIamManagedPolicy } from "../../../policy/sim-iam-policy.js";
+import type { SimListPoliciesCommand, SimListPoliciesCommandOutput } from "./list-policies.cmd.js";
+interface ListPoliciesCommandHandlerProps {
+    readonly policies: Map<SimArn, SimIamManagedPolicy>;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * IAM ListPoliciesCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/iam/command/ListPoliciesCommand/
+ */
+export declare class ListPoliciesCommandHandler implements CommandHandler<SimListPoliciesCommand, SimListPoliciesCommandOutput> {
+    private readonly policies;
+    private readonly background;
+    constructor(props: ListPoliciesCommandHandlerProps);
+    /**
+     * Handle a ListPoliciesCommand from the SDK.
+     */
+    handle(cmd: SimListPoliciesCommand): Promise<SimListPoliciesCommandOutput>;
+    private matchingPolicies;
+    private makeMarker;
+    private parseMarker;
+}
+export {};
+//# sourceMappingURL=list-policies.handler.d.ts.map

package/dist/dist-hidden/service/iam/command/policy/list-policies/list-policies.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-policies.handler.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/command/policy/list-policies/list-policies.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,cAAc,CAC/D,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,+BAA+B,EAKjD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CA4CvC;IAED,OAAO,CAAC,gBAAgB;IA6BxB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;CAGpB"}