@kensio/yulin 0.32.0 → 0.34.0

package/dist/dist-hidden/service/iam/error/sim-iam.error.d.ts

@@ -0,0 +1,68 @@
+import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * Minimal metadata shape for simulated IAM errors.
+ */
+export interface SimIamErrorMetadata {
+    readonly httpStatusCode?: number;
+}
+/**
+ * Base class for simulated IAM errors.
+ */
+export declare class SimIamError extends Error {
+    readonly $metadata: SimIamErrorMetadata;
+    constructor(message: string, $metadata?: SimIamErrorMetadata);
+}
+/**
+ * Details of an IAM authorization failure.
+ */
+export interface SimIamAccessDeniedInput {
+    readonly principal: SimAwsPrincipal;
+    readonly action: string;
+    readonly resource: string;
+}
+/**
+ * Simulated IAM AccessDenied error.
+ */
+export declare class SimIamAccessDenied extends SimIamError {
+    readonly name = "AccessDenied";
+    readonly caller: SimAwsPrincipal;
+    readonly action: string;
+    readonly resource: string;
+    /**
+     * Build an AWS-style authorization failure.
+     *
+     * Caller formatting is delegated because principal variants store their
+     * identifiers differently. This class remains responsible for the IAM error
+     * contract: message structure, HTTP metadata, and diagnostic properties.
+     */
+    constructor(input: SimIamAccessDeniedInput);
+}
+/**
+ * Simulated IAM NoSuchEntity error.
+ */
+export declare class SimIamNoSuchEntity extends SimIamError {
+    readonly name = "NoSuchEntity";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM EntityAlreadyExists error.
+ */
+export declare class SimIamEntityAlreadyExists extends SimIamError {
+    readonly name = "EntityAlreadyExists";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM InvalidMarker error.
+ */
+export declare class SimIamInvalidMarkerException extends SimIamError {
+    readonly name = "InvalidMarkerException";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM MalformedPolicyDocument error.
+ */
+export declare class SimIamMalformedPolicyDocument extends SimIamError {
+    readonly name = "MalformedPolicyDocument";
+    constructor(message: string);
+}
+//# sourceMappingURL=sim-iam.error.d.ts.map

package/dist/dist-hidden/service/iam/error/sim-iam.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam.error.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam.error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,SAAyB,IAAI,kBAAkB;IAE/C,SAAgB,MAAM,EAAE,eAAe,CAAC;IACxC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC;;;;;;OAMG;IACH,YAAY,KAAK,EAAE,uBAAuB,EAYzC;CACF;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,WAAW;IAC3D,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/dist-hidden/service/iam/error/sim-iam.error.js

@@ -0,0 +1,72 @@
+import { SimIamCallerIdentifier } from "./sim-iam-caller-identifier.js";
+/**
+ * Base class for simulated IAM errors.
+ */
+export class SimIamError extends Error {
+    $metadata;
+    constructor(message, $metadata = {}) {
+        super(message);
+        this.$metadata = $metadata;
+    }
+}
+/**
+ * Simulated IAM AccessDenied error.
+ */
+export class SimIamAccessDenied extends SimIamError {
+    name = "AccessDenied";
+    caller;
+    action;
+    resource;
+    /**
+     * Build an AWS-style authorization failure.
+     *
+     * Caller formatting is delegated because principal variants store their
+     * identifiers differently. This class remains responsible for the IAM error
+     * contract: message structure, HTTP metadata, and diagnostic properties.
+     */
+    constructor(input) {
+        const iamCallerIdentifier = new SimIamCallerIdentifier();
+        const callerIdentifier = iamCallerIdentifier.format(input.principal);
+        super(`User: ${callerIdentifier} is not authorized to perform: ${input.action} on resource: ${input.resource}`, { httpStatusCode: 403 });
+        this.caller = input.principal;
+        this.action = input.action;
+        this.resource = input.resource;
+    }
+}
+/**
+ * Simulated IAM NoSuchEntity error.
+ */
+export class SimIamNoSuchEntity extends SimIamError {
+    name = "NoSuchEntity";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated IAM EntityAlreadyExists error.
+ */
+export class SimIamEntityAlreadyExists extends SimIamError {
+    name = "EntityAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}
+/**
+ * Simulated IAM InvalidMarker error.
+ */
+export class SimIamInvalidMarkerException extends SimIamError {
+    name = "InvalidMarkerException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated IAM MalformedPolicyDocument error.
+ */
+export class SimIamMalformedPolicyDocument extends SimIamError {
+    name = "MalformedPolicyDocument";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+//# sourceMappingURL=sim-iam.error.js.map

package/dist/dist-hidden/service/iam/error/sim-iam.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam.error.js","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam.error.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AASxE;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAWD;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxB,IAAI,GAAG,cAAc,CAAC;IAE/B,MAAM,CAAkB;IACxB,MAAM,CAAS;IACf,QAAQ,CAAS;IAEjC;;;;;;OAMG;IACH,YAAY,KAA8B;QACxC,MAAM,mBAAmB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAErE,KAAK,CACH,SAAS,gBAAgB,kCAAkC,KAAK,CAAC,MAAM,iBAAiB,KAAK,CAAC,QAAQ,EAAE,EACxG,EAAE,cAAc,EAAE,GAAG,EAAE,CACxB,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAClC,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/dist-hidden/service/iam/index.d.ts

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/dist-hidden/service/iam/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/dist-hidden/service/iam/index.js

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.js.map

package/dist/dist-hidden/service/iam/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts

@@ -0,0 +1,7 @@
+import { StaticFactory } from "@kensio/part-factory";
+import type { SimIamParsedPolicyStatement } from "./sim-iam-doc-parser.js";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export declare const simIamParsedPolicyStatementFactory: StaticFactory<SimIamParsedPolicyStatement>;
+//# sourceMappingURL=sim-iam-doc-parser.factory.d.ts.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,kCAAkC,4CAU3C,CAAC"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.js

@@ -0,0 +1,15 @@
+import { StaticFactory } from "@kensio/part-factory";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export const simIamParsedPolicyStatementFactory = new StaticFactory({
+    source: {
+        Effect: "Allow",
+        Action: "s3:GetObject",
+        Resource: "arn:aws:s3:::test-bucket/test-key",
+    },
+    effect: "Allow",
+    actions: ["s3:GetObject"],
+    resources: ["arn:aws:s3:::test-bucket/test-key"],
+});
+//# sourceMappingURL=sim-iam-doc-parser.factory.js.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,aAAa,CAA8B;IAC7C,MAAM,EAAE;QACN,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,mCAAmC;KAC9C;IACD,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,SAAS,EAAE,CAAC,mCAAmC,CAAC;CACjD,CAAC,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamPolicyId, SimIamPolicyName } from "./sim-iam-policy.js";
+import type { SimArn } from "../../aws/arn.js";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export declare function makeSimPolicyArn(props: {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly policyName: SimIamPolicyName;
+}): SimArn;
+/**
+ * Make a sim IAM policy ID.
+ */
+export declare function makeSimPolicyId(): SimIamPolicyId;
+//# sourceMappingURL=sim-iam-policy-arn.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC,GAAG,MAAM,CAET;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAKhD"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.js

@@ -0,0 +1,17 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export function makeSimPolicyArn(props) {
+    return `arn:aws:iam::${props.accountId}:policy${props.path}${props.policyName}`;
+}
+/**
+ * Make a sim IAM policy ID.
+ */
+export function makeSimPolicyId() {
+    return faker.string.alphanumeric({
+        length: 21,
+        casing: "upper",
+    });
+}
+//# sourceMappingURL=sim-iam-policy-arn.js.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,gBAAgB,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,EAAY,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;KAChB,CAAmB,CAAC;AACvB,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.d.ts

@@ -0,0 +1,52 @@
+import type { JSONString } from "../../../util/type-guard/json.js";
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimArn } from "../../aws/arn.js";
+export type SimIamPolicyName = Brand<string, "SimIamPolicyName">;
+export type SimIamPolicyId = Brand<string, "SimIamPolicyId">;
+export interface SimIamPolicyDocument {
+    readonly Version?: string | undefined;
+    readonly Id?: string | undefined;
+    readonly Statement?: SimIamPolicyDocumentStatement | readonly SimIamPolicyDocumentStatement[];
+}
+export interface SimIamPolicyDocumentStatement {
+    readonly Sid?: string | undefined;
+    readonly Effect: "Allow" | "Deny";
+    readonly Action?: string | readonly string[] | undefined;
+    readonly NotAction?: string | readonly string[] | undefined;
+    readonly Resource?: string | readonly string[] | undefined;
+    readonly NotResource?: string | readonly string[] | undefined;
+    readonly Principal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly NotPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly Condition?: SimIamPolicyDocumentCondition | undefined;
+}
+export type SimIamPolicyDocumentPrincipalObject = Readonly<Record<string, string | readonly string[]>>;
+export type SimIamPolicyDocumentPrincipal = string | readonly string[] | SimIamPolicyDocumentPrincipalObject;
+export type SimIamConditionValue = string | number | boolean | readonly string[];
+export type SimIamPolicyDocumentCondition = Readonly<Record<string, Readonly<Record<string, SimIamConditionValue>>>>;
+/**
+ * IAM managed policy record.
+ *
+ * This represents customer-managed or AWS-managed IAM policy metadata and its
+ * default policy document. Inline policies and resource policies are stored on
+ * their owning identity/resource instead of in this global managed-policy
+ * store.
+ */
+export interface SimIamManagedPolicy {
+    readonly arn: SimArn;
+    readonly policyId: SimIamPolicyId;
+    readonly policyName: SimIamPolicyName;
+    readonly path: string;
+    readonly defaultVersionId: string;
+    readonly attachmentCount: number;
+    readonly permissionsBoundaryUsageCount: number;
+    readonly isAttachable: boolean;
+    readonly description?: string | undefined;
+    readonly createDate: Date;
+    readonly updateDate: Date;
+    readonly policyDocument?: JSONString<SimIamPolicyDocument> | undefined;
+}
+/**
+ * Backwards-compatible alias while the IAM command handlers are migrated.
+ */
+export type SimIamPolicy = SimIamManagedPolicy;
+//# sourceMappingURL=sim-iam-policy.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EACjB,6BAA6B,GAAG,SAAS,6BAA6B,EAAE,CAAC;CAC5E;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CACxD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAC3C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GACvC,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,mCAAmC,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAC9B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;AAEhD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAClD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAC/D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -0,0 +1,6 @@
+import { DynamicFactory } from "@kensio/part-factory";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
+//# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.js

@@ -0,0 +1,28 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import { makeSimPolicyArn, makeSimPolicyId } from "./sim-iam-policy-arn.js";
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+/**
+ * Generates fake IAM managed policy records.
+ */
+export const simIamPolicyFactory = new DynamicFactory(() => {
+    const now = new Date();
+    const policyName = "TestPolicy";
+    const path = "/";
+    return {
+        arn: makeSimPolicyArn({
+            accountId: makeSimAwsAccountId(),
+            path,
+            policyName,
+        }),
+        policyId: makeSimPolicyId(),
+        policyName,
+        path,
+        defaultVersionId: "v1",
+        attachmentCount: 0,
+        permissionsBoundaryUsageCount: 0,
+        isAttachable: true,
+        createDate: now,
+        updateDate: now,
+    };
+});
+//# sourceMappingURL=sim-iam-policy.factory.js.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAe,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,YAAgC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC;YACpB,SAAS,EAAE,mBAAmB,EAAE;YAChC,IAAI;YACJ,UAAU;SACX,CAAC;QACF,QAAQ,EAAE,eAAe,EAAE;QAC3B,UAAU;QACV,IAAI;QACJ,gBAAgB,EAAE,IAAI;QACtB,eAAe,EAAE,CAAC;QAClB,6BAA6B,EAAE,CAAC;QAChC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/dist-hidden/service/iam/registry/sim-iam-account-resolver.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIam } from "../sim-iam.js";
+/**
+ * Resolves account-scoped simulated IAM facades within one simulated AWS
+ * environment.
+ */
+export interface SimIamAccountResolver {
+    /**
+     * Resolve simulated IAM for an Account.
+     *
+     * Should throw a diagnostic error when IAM has not been instantiated and
+     * registered for the requested Account.
+     */
+    iamForAccount(accountId: SimAwsAccountId): SimIam;
+}
+//# sourceMappingURL=sim-iam-account-resolver.d.ts.map

package/dist/dist-hidden/service/iam/registry/sim-iam-account-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC;CACnD"}

package/dist/dist-hidden/service/iam/registry/sim-iam-account-resolver.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-iam-account-resolver.js.map

package/dist/dist-hidden/service/iam/registry/sim-iam-account-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-account-resolver.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-account-resolver.ts"],"names":[],"mappings":""}

package/dist/dist-hidden/service/iam/registry/sim-iam-registry.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIam } from "../sim-iam.js";
+import type { SimIamAccountResolver } from "./sim-iam-account-resolver.js";
+/**
+ * Simulation-wide registry of account-scoped IAM facades.
+ *
+ * One registry belongs to one SimAws environment. It allows cross-account
+ * services to resolve IAM state owned by a particular Account.
+ *
+ * The registry indexes IAM facades but does not create or own them.
+ */
+export declare class SimIamRegistry implements SimIamAccountResolver {
+    private readonly iamByAccountId;
+    /**
+     * Register the IAM facade belonging to an Account.
+     *
+     * Re-registering the same facade is harmless. Registering a different facade
+     * for an Account that already has one fails rather than silently replacing
+     * account-owned IAM state.
+     */
+    register(accountId: SimAwsAccountId, iam: SimIam): void;
+    /**
+     * Resolve the registered IAM facade belonging to an Account.
+     *
+     * Throws a diagnostic error when no IAM facade is registered so callers can
+     * rely on receiving a usable account-scoped service.
+     */
+    iamForAccount(accountId: SimAwsAccountId): SimIam;
+}
+//# sourceMappingURL=sim-iam-registry.d.ts.map

package/dist/dist-hidden/service/iam/registry/sim-iam-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,qBAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CActD;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAQhD;CACF"}

package/dist/dist-hidden/service/iam/registry/sim-iam-registry.js

@@ -0,0 +1,42 @@
+/**
+ * Simulation-wide registry of account-scoped IAM facades.
+ *
+ * One registry belongs to one SimAws environment. It allows cross-account
+ * services to resolve IAM state owned by a particular Account.
+ *
+ * The registry indexes IAM facades but does not create or own them.
+ */
+export class SimIamRegistry {
+    iamByAccountId = new Map();
+    /**
+     * Register the IAM facade belonging to an Account.
+     *
+     * Re-registering the same facade is harmless. Registering a different facade
+     * for an Account that already has one fails rather than silently replacing
+     * account-owned IAM state.
+     */
+    register(accountId, iam) {
+        const existingIam = this.iamByAccountId.get(accountId);
+        if (existingIam === iam) {
+            return;
+        }
+        if (existingIam !== undefined) {
+            throw new Error(`A different SimIam is already registered for Account ${accountId}`);
+        }
+        this.iamByAccountId.set(accountId, iam);
+    }
+    /**
+     * Resolve the registered IAM facade belonging to an Account.
+     *
+     * Throws a diagnostic error when no IAM facade is registered so callers can
+     * rely on receiving a usable account-scoped service.
+     */
+    iamForAccount(accountId) {
+        const iam = this.iamByAccountId.get(accountId);
+        if (iam === undefined) {
+            throw new Error(`Sim IAM is not registered for Account ${accountId}`);
+        }
+        return iam;
+    }
+}
+//# sourceMappingURL=sim-iam-registry.js.map

package/dist/dist-hidden/service/iam/registry/sim-iam-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/registry/sim-iam-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACR,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErE;;;;;;OAMG;IACH,QAAQ,CAAC,SAA0B,EAAE,GAAW;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,SAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn-parser.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+export interface IamRoleArnParts {
+    readonly accountId: SimAwsAccountId;
+    readonly roleName: string;
+}
+/**
+ * Parses IAM role ARNs into the account ID and role name used by STS.
+ */
+export declare class IamRoleArnParser {
+    /**
+     * Parse an IAM role ARN.
+     */
+    parse(roleArn: string): IamRoleArnParts;
+    private isAccountId;
+}
+//# sourceMappingURL=sim-iam-role-arn-parser.d.ts.map

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CA8BtC;IAED,OAAO,CAAC,WAAW;CAapB"}

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn-parser.js

@@ -0,0 +1,41 @@
+/**
+ * Parses IAM role ARNs into the account ID and role name used by STS.
+ */
+export class IamRoleArnParser {
+    /**
+     * Parse an IAM role ARN.
+     */
+    parse(roleArn) {
+        const prefix = "arn:aws:iam::";
+        if (!roleArn.startsWith(prefix)) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        const roleSeparator = ":role/";
+        const separatorIndex = roleArn.indexOf(roleSeparator, prefix.length);
+        if (separatorIndex === -1) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        const accountId = roleArn.slice(prefix.length, separatorIndex);
+        const rolePathAndName = roleArn.slice(separatorIndex + roleSeparator.length);
+        const roleName = rolePathAndName.slice(rolePathAndName.lastIndexOf("/") + 1);
+        if (!this.isAccountId(accountId) || roleName.length === 0) {
+            throw new Error(`Invalid IAM Role ARN: ${roleArn}`);
+        }
+        return {
+            accountId: accountId,
+            roleName,
+        };
+    }
+    isAccountId(value) {
+        if (value.length !== 12) {
+            return false;
+        }
+        for (const character of value) {
+            if (character < "0" || character > "9") {
+                return false;
+            }
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=sim-iam-role-arn-parser.js.map

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn-parser.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC;QAE/B,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAErE,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CACnC,cAAc,GAAG,aAAa,CAAC,MAAM,CACtC,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CACpC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CACrC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,SAA4B;YACvC,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn.d.ts

@@ -0,0 +1,14 @@
+import type { SimArn } from "../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamRoleName } from "../sim-iam-role.js";
+interface MakeSimRoleArnProps {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly roleName: SimIamRoleName;
+}
+/**
+ * Make an IAM Role ARN.
+ */
+export declare function makeSimRoleArn(props: MakeSimRoleArnProps): SimArn;
+export {};
+//# sourceMappingURL=sim-iam-role-arn.d.ts.map

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAKjE"}

package/dist/dist-hidden/service/iam/role/arn/sim-iam-role-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role-arn.js","sourceRoot":"","sources":["../../../../../src/service/iam/role/arn/sim-iam-role-arn.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnD,OAAO,gBAAgB,SAAS,SAAS,QAAQ,GAAG,QAAQ,EAAY,CAAC;AAC3E,CAAC"}

package/dist/dist-hidden/service/iam/role/sim-iam-role-arn.js

@@ -0,0 +1,9 @@
+/**
+ * Make an IAM Role ARN.
+ */
+export function makeSimRoleArn(props) {
+    const { accountId, path, roleName } = props;
+    const pathPart = path === "/" ? "" : path.slice(1);
+    return `arn:aws:iam::${accountId}:role/${pathPart}${roleName}`;
+}
+//# sourceMappingURL=sim-iam-role-arn.js.map

package/dist/dist-hidden/service/iam/role/sim-iam-role.factory.d.ts

@@ -0,0 +1,7 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import type { SimIamRole } from "./sim-iam-role.js";
+/**
+ * Generates fake IAM Role records.
+ */
+export declare const simIamRoleFactory: DynamicFactory<SimIamRole>;
+//# sourceMappingURL=sim-iam-role.factory.d.ts.map

package/dist/dist-hidden/service/iam/role/sim-iam-role.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,4BAqB5B,CAAC"}

package/dist/dist-hidden/service/iam/role/sim-iam-role.factory.js

@@ -0,0 +1,29 @@
+import { DynamicFactory } from "@kensio/part-factory";
+import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
+import { makeSimRoleArn } from "./arn/sim-iam-role-arn.js";
+import { makeSimIamRoleId } from "./sim-iam-role-id.js";
+/**
+ * Generates fake IAM Role records.
+ */
+export const simIamRoleFactory = new DynamicFactory(() => {
+    const accountId = makeSimAwsAccountId();
+    const roleName = "ApplicationRole";
+    const path = "/";
+    return {
+        arn: makeSimRoleArn({
+            accountId,
+            path,
+            roleName,
+        }),
+        accountId,
+        principalType: "role",
+        name: roleName,
+        roleId: makeSimIamRoleId(),
+        roleName,
+        path,
+        createDate: new Date(),
+        inlinePolicies: new Map(),
+        attachedPolicyArns: new Set(),
+    };
+});
+//# sourceMappingURL=sim-iam-role.factory.js.map

package/dist/dist-hidden/service/iam/role/sim-iam-role.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-role.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,cAAc,CAAa,GAAG,EAAE;IACnE,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,iBAAmC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,OAAO;QACL,GAAG,EAAE,cAAc,CAAC;YAClB,SAAS;YACT,IAAI;YACJ,QAAQ;SACT,CAAC;QACF,SAAS;QACT,aAAa,EAAE,MAAM;QACrB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,gBAAgB,EAAE;QAC1B,QAAQ;QACR,IAAI;QACJ,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,kBAAkB,EAAE,IAAI,GAAG,EAAE;KAC9B,CAAC;AACJ,CAAC,CAAC,CAAC"}