@kensio/yulin 0.32.0 → 0.34.0

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.d.ts

@@ -1,7 +1,7 @@
 import type { SimCloudFrontDistributionConfig } from "../../command/create-distribution/create-distribution.cmd.js";
 import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
 type DistributionConfigInput = string | number | boolean | SimCfnTemplateValueRecord | SimCfnTemplateValue[];
-interface SimCfnCloudFrontDistributionConfigValidatorProps {
+interface SimCfnCloudFrontDistributionConfigValidatorProperties {
     readonly logicalId: string;
     readonly distributionConfig: DistributionConfigInput;
 }
@@ -15,7 +15,7 @@ interface SimCfnCloudFrontDistributionConfigValidatorProps {
 export declare class SimCfnCfDistroConfigValidator {
     private readonly logicalId;
     private readonly distributionConfig;
-    constructor(props: SimCfnCloudFrontDistributionConfigValidatorProps);
+    constructor(properties: SimCfnCloudFrontDistributionConfigValidatorProperties);
     /**
      * Validate and return the DistributionConfig as the sim CloudFront config type.
      */

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-config-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,8DAA8D,CAAC;AAEpH,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAE1E,KAAK,uBAAuB,GAC1B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,yBAAyB,GAAG,mBAAmB,EAAE,CAAC;AAEhF,UAAU,gDAAgD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0B;IAE7D,YAAY,KAAK,EAAE,gDAAgD,EAGlE;IAED;;OAEG;IACH,QAAQ,IAAI,+BAA+B,CAQ1C;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-config-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,8DAA8D,CAAC;AAEpH,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAE1E,KAAK,uBAAuB,GAC1B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,yBAAyB,GAAG,mBAAmB,EAAE,CAAC;AAEhF,UAAU,qDAAqD;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CACtD;AAED;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA0B;IAE7D,YACE,UAAU,EAAE,qDAAqD,EAIlE;IAED;;OAEG;IACH,QAAQ,IAAI,+BAA+B,CAQ1C;CACF"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.js

@@ -9,9 +9,9 @@ import { isRecord } from "../../../../util/type-guard/record.js";
 export class SimCfnCfDistroConfigValidator {
     logicalId;
     distributionConfig;
-    constructor(props) {
-        this.logicalId = props.logicalId;
-        this.distributionConfig = props.distributionConfig;
+    constructor(properties) {
+        this.logicalId = properties.logicalId;
+        this.distributionConfig = properties.distributionConfig;
     }
     /**
      * Validate and return the DistributionConfig as the sim CloudFront config type.

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-config-validator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAcjE;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,SAAS,CAAS;IAClB,kBAAkB,CAA0B;IAE7D,YAAY,KAAuD;QACjE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,wCAAwC,CAChG,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-config-validator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-config-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAcjE;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,SAAS,CAAS;IAClB,kBAAkB,CAA0B;IAE7D,YACE,UAAiE;QAEjE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,wCAAwC,CAChG,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts

@@ -2,7 +2,7 @@ import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-re
 import type { SimCloudFront } from "../../sim-cloudfront.js";
 import type { SimCloudFrontDistribution } from "../../distribution/sim-cloudfront-distribution.js";
 import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
-interface SimCfnCfDistroCreatorProps {
+interface SimCfnCfDistroCreatorProperties {
     readonly cloudFront: SimCloudFront;
 }
 /**
@@ -10,7 +10,7 @@ interface SimCfnCfDistroCreatorProps {
  */
 export declare class SimCfnCfDistroCreator {
     private readonly cloudFront;
-    constructor(props: SimCfnCfDistroCreatorProps);
+    constructor(properties: SimCfnCfDistroCreatorProperties);
     /**
      * Create a simulated CloudFront Distribution from an
      * AWS::CloudFront::Distribution Resource.

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AACnG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,UAAU,0BAA0B;IAClC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C,YAAY,KAAK,EAAE,0BAA0B,EAE5C;IAED;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAqCpC;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AACnG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAGlH,UAAU,+BAA+B;IACvC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAsCpC;CACF"}

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js

@@ -5,8 +5,8 @@ import { SimCfnCfDistroConfigValidator } from "./sim-cfn-cf-distro-config-valida
  */
 export class SimCfnCfDistroCreator {
     cloudFront;
-    constructor(props) {
-        this.cloudFront = props.cloudFront;
+    constructor(properties) {
+        this.cloudFront = properties.cloudFront;
     }
     /**
      * Create a simulated CloudFront Distribution from an
@@ -16,10 +16,11 @@ export class SimCfnCfDistroCreator {
         const distributionConfigValue = properties["DistributionConfig"];
         assertDefined(distributionConfigValue, `AWS::CloudFront::Distribution ${resource.logicalId} DistributionConfig`);
         assertNotNull(distributionConfigValue, `AWS::CloudFront::Distribution ${resource.logicalId} DistributionConfig`);
-        const distributionConfig = new SimCfnCfDistroConfigValidator({
+        const validator = new SimCfnCfDistroConfigValidator({
             logicalId: resource.logicalId,
             distributionConfig: distributionConfigValue,
-        }).validate();
+        });
+        const distributionConfig = validator.validate();
         const output = await this.cloudFront.createDistribution({
             input: {
                 DistributionConfig: distributionConfig,

package/dist/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-cf-distro-creator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAMxF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAgB;IAE3C,YAAY,KAAiC;QAC3C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,uBAAuB,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAEjE,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QACF,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QAEF,MAAM,kBAAkB,GAAG,IAAI,6BAA6B,CAAC;YAC3D,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,kBAAkB,EAAE,uBAAuB;SAC5C,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACtD,KAAK,EAAE;gBACL,kBAAkB,EAAE,kBAAkB;aACvC;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,aAAa,CACX,cAAc,EACd,iCAAiC,QAAQ,CAAC,SAAS,0BAA0B,CAC9E,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAE5E,aAAa,CACX,YAAY,EACZ,wCAAwC,cAAc,yCAAyC,CAChG,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-cf-distro-creator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/cfn/distro/sim-cfn-cf-distro-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,GACd,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAMxF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,UAAU,CAAgB;IAE3C,YAAY,UAA2C;QACrD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,uBAAuB,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAEjE,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QACF,aAAa,CACX,uBAAuB,EACvB,iCAAiC,QAAQ,CAAC,SAAS,qBAAqB,CACzE,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,kBAAkB,EAAE,uBAAuB;SAC5C,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACtD,KAAK,EAAE;gBACL,kBAAkB,EAAE,kBAAkB;aACvC;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,aAAa,CACX,cAAc,EACd,iCAAiC,QAAQ,CAAC,SAAS,0BAA0B,CAC9E,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAE5E,aAAa,CACX,YAAY,EACZ,wCAAwC,cAAc,yCAAyC,CAChG,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution-authorizer.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface CreateDistributionAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a CloudFront CreateDistribution request.
+ *
+ * CloudFront does not support resource-level permissions for this action, and
+ * a Distribution ARN cannot exist until the request succeeds. Consequently,
+ * authorization is evaluated against the IAM wildcard resource.
+ */
+export declare class CreateDistributionAuthorizer {
+    private static readonly action;
+    private static readonly resource;
+    private readonly iam;
+    constructor(properties: CreateDistributionAuthorizerProperties);
+    /**
+     * Ensure the caller may create a CloudFront Distribution.
+     *
+     * Pass the caller through unchanged so IAM retains ownership of Account-root
+     * fallback for an omitted caller and anonymous-caller handling.
+     */
+    authorize(caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=create-distribution-authorizer.d.ts.map

package/dist/service/cloudfront/command/create-distribution/create-distribution-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-distribution-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAmC;IACjE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAO;IAEvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;;;;OAKG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAcrC;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution-authorizer.js

@@ -0,0 +1,37 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront CreateDistribution request.
+ *
+ * CloudFront does not support resource-level permissions for this action, and
+ * a Distribution ARN cannot exist until the request succeeds. Consequently,
+ * authorization is evaluated against the IAM wildcard resource.
+ */
+export class CreateDistributionAuthorizer {
+    static action = "cloudfront:CreateDistribution";
+    static resource = "*";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may create a CloudFront Distribution.
+     *
+     * Pass the caller through unchanged so IAM retains ownership of Account-root
+     * fallback for an omitted caller and anonymous-caller handling.
+     */
+    authorize(caller) {
+        const decision = this.iam.authorize({
+            action: CreateDistributionAuthorizer.action,
+            resource: CreateDistributionAuthorizer.resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: CreateDistributionAuthorizer.action,
+                resource: CreateDistributionAuthorizer.resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=create-distribution-authorizer.js.map

package/dist/service/cloudfront/command/create-distribution/create-distribution-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-distribution-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,+BAA+B,CAAC;IACzD,MAAM,CAAU,QAAQ,GAAG,GAAG,CAAC;IAEtB,GAAG,CAA0B;IAE9C,YAAY,UAAkD;QAC5D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ,EAAE,4BAA4B,CAAC,QAAQ;YAC/C,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ,EAAE,4BAA4B,CAAC,QAAQ;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.d.ts

@@ -5,13 +5,19 @@ import { SimCloudFrontDistribution, type SimCloudFrontDistributionId } from "../
 import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { BackgroundScheduler } from "../../../../util/background/background.js";
-interface CreateDistributionCommandHandlerProps {
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+interface CreateDistributionCommandHandlerProperties {
     readonly accountId: SimAwsAccountId;
     readonly distributions: Map<SimCloudFrontDistributionId, SimCloudFrontDistribution>;
     readonly cloudFrontRegistry: SimCloudFrontRegistry;
     readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
+    readonly iam?: SimIamInterServiceAuthZ;
     readonly background: BackgroundScheduler;
 }
+interface CreateDistributionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
 /**
  * CloudFront CreateDistributionCommand handler.
  *
@@ -22,12 +28,13 @@ export declare class CreateDistributionCommandHandler implements CommandHandler<
     private readonly distributions;
     private readonly cloudFrontRegistry;
     private readonly distributionConfigurator;
+    private readonly authorizer;
     private readonly background;
-    constructor(props: CreateDistributionCommandHandlerProps);
+    constructor(properties: CreateDistributionCommandHandlerProperties);
     /**
      * Handle creation of a new CloudFront Distribution.
      */
-    handle(cmd: SimCreateDistributionCommand): Promise<SimCreateDistributionCommandOutput>;
+    handle(command: SimCreateDistributionCommand, options?: CreateDistributionCommandHandlerOptions): Promise<SimCreateDistributionCommandOutput>;
 }
 export {};
 //# sourceMappingURL=create-distribution.handler.d.ts.map

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EACjC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAMrF,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAwC;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,qCAAqC,EASvD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,kCAAkC,CAAC,CAqD7C;CACF"}
+{"version":3,"file":"create-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EACjC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAKrF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,0CAA0C;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAwC;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,0CAA0C,EAYjE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAwD7C;CACF"}

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.js

@@ -4,6 +4,8 @@ import { SimCloudFrontOriginConfigurator } from "../../distribution/configurator
 import { SimCloudFrontBehaviorConfigurator } from "../../distribution/configurator/sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "../../distribution/configurator/sim-cloud-front-distribution-configurator.js";
 import { SimCloudFrontDistributionConfigNormalizer } from "./sim-cf-distro-config-normalizer.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { CreateDistributionAuthorizer } from "./create-distribution-authorizer.js";
 /**
  * CloudFront CreateDistributionCommand handler.
  *
@@ -14,23 +16,29 @@ export class CreateDistributionCommandHandler {
     distributions;
     cloudFrontRegistry;
     distributionConfigurator;
+    authorizer;
     background;
-    constructor(props) {
-        this.accountId = props.accountId;
-        this.distributions = props.distributions;
-        this.cloudFrontRegistry = props.cloudFrontRegistry;
-        this.distributionConfigurator = new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(props.s3OriginResolver), new SimCloudFrontBehaviorConfigurator());
-        this.background = props.background;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.distributions = properties.distributions;
+        this.cloudFrontRegistry = properties.cloudFrontRegistry;
+        this.distributionConfigurator = new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver), new SimCloudFrontBehaviorConfigurator());
+        this.authorizer = new CreateDistributionAuthorizer({
+            iam: properties.iam ?? new SimIamAllowAllAuth(),
+        });
+        this.background = properties.background;
     }
     /**
      * Handle creation of a new CloudFront Distribution.
      */
-    async handle(cmd) {
-        const distributionConfigInput = cmd.input.DistributionConfig;
+    async handle(command, options) {
+        const distributionConfigInput = command.input.DistributionConfig;
         assertDefined(distributionConfigInput, "CreateDistributionCommand.DistributionConfig");
-        const distributionConfig = new SimCloudFrontDistributionConfigNormalizer(distributionConfigInput).normalize();
+        const normalizer = new SimCloudFrontDistributionConfigNormalizer(distributionConfigInput);
+        const distributionConfig = normalizer.normalize();
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
+        this.authorizer.authorize(options?.caller);
         const distributionId = this.cloudFrontRegistry.allocateDistributionId();
         const distribution = new SimCloudFrontDistribution({
             distributionId,

package/dist/service/cloudfront/command/create-distribution/create-distribution.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,wEAAwE,CAAC;AACzH,OAAO,EAAE,iCAAiC,EAAE,MAAM,0EAA0E,CAAC;AAC7H,OAAO,EAAE,qCAAqC,EAAE,MAAM,8EAA8E,CAAC;AACrI,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AAajG;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,SAAS,CAAkB;IAC3B,aAAa,CAG5B;IACe,kBAAkB,CAAwB;IAC1C,wBAAwB,CAAwC;IAChE,UAAU,CAAsB;IAEjD,YAAY,KAA4C;QACtD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,IAAI,qCAAqC,CACvE,IAAI,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAC3D,IAAI,iCAAiC,EAAE,CACxC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAAiC;QAEjC,MAAM,uBAAuB,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC7D,aAAa,CACX,uBAAuB,EACvB,8CAA8C,CAC/C,CAAC;QAEF,MAAM,kBAAkB,GAAG,IAAI,yCAAyC,CACtE,uBAAuB,CACxB,CAAC,SAAS,EAAE,CAAC;QAEd,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC;YACjD,cAAc;YACd,kBAAkB;YAClB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC1C,YAAY,CAAC,cAAc,EAC3B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,YAAY,CAAC,cAAc,CAC5B,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE;gBACZ,EAAE,EAAE,YAAY,CAAC,cAAc;gBAC/B,GAAG,EAAE,uBAAuB,IAAI,CAAC,SAAS,iBAAiB,YAAY,CAAC,cAAc,EAAE;gBACxF,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;gBAC/C,6BAA6B,EAAE,CAAC;gBAChC,UAAU,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,iBAAiB;gBACzE,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;aACpD;YACD,QAAQ,EAAE,4DAA4D,YAAY,CAAC,cAAc,EAAE;YACnG,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-distribution.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.handler.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,yBAAyB,GAE1B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,wEAAwE,CAAC;AACzH,OAAO,EAAE,iCAAiC,EAAE,MAAM,0EAA0E,CAAC;AAC7H,OAAO,EAAE,qCAAqC,EAAE,MAAM,8EAA8E,CAAC;AACrI,OAAO,EAAE,yCAAyC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAkBnF;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,SAAS,CAAkB;IAC3B,aAAa,CAG5B;IACe,kBAAkB,CAAwB;IAC1C,wBAAwB,CAAwC;IAChE,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAEjD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,wBAAwB,GAAG,IAAI,qCAAqC,CACvE,IAAI,+BAA+B,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAChE,IAAI,iCAAiC,EAAE,CACxC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,IAAI,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,MAAM,uBAAuB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACjE,aAAa,CACX,uBAAuB,EACvB,8CAA8C,CAC/C,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,yCAAyC,CAC9D,uBAAuB,CACxB,CAAC;QACF,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QAElD,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,IAAI,yBAAyB,CAAC;YACjD,cAAc;YACd,kBAAkB;YAClB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAC1C,YAAY,CAAC,cAAc,EAC3B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,YAAY,CAAC,cAAc,CAC5B,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,YAAY,EAAE;gBACZ,EAAE,EAAE,YAAY,CAAC,cAAc;gBAC/B,GAAG,EAAE,uBAAuB,IAAI,CAAC,SAAS,iBAAiB,YAAY,CAAC,cAAc,EAAE;gBACxF,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;gBAC/C,6BAA6B,EAAE,CAAC;gBAChC,UAAU,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,iBAAiB;gBACzE,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;aACpD;YACD,QAAQ,EAAE,4DAA4D,YAAY,CAAC,cAAc,EAAE;YACnG,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/command/create-function/create-function-authorizer.d.ts

@@ -0,0 +1,26 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontFunctionName } from "../../cff/sim-cloudfront-function.js";
+interface CreateFunctionAuthorizerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a CloudFront CreateFunction request.
+ *
+ * The requested Function name is known before creation, so authorization uses
+ * the Function ARN that CloudFront will assign if creation succeeds.
+ */
+export declare class CreateFunctionAuthorizer {
+    private static readonly action;
+    private readonly accountId;
+    private readonly iam;
+    constructor(properties: CreateFunctionAuthorizerProperties);
+    /**
+     * Ensure the caller may create the named CloudFront Function.
+     */
+    authorize(functionName: SimCloudFrontFunctionName | string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=create-function-authorizer.d.ts.map

package/dist/service/cloudfront/command/create-function/create-function-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-function-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEtF,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAE7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,GAAG,MAAM,EAChD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAeN;CACF"}

package/dist/service/cloudfront/command/create-function/create-function-authorizer.js

@@ -0,0 +1,35 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront CreateFunction request.
+ *
+ * The requested Function name is known before creation, so authorization uses
+ * the Function ARN that CloudFront will assign if creation succeeds.
+ */
+export class CreateFunctionAuthorizer {
+    static action = "cloudfront:CreateFunction";
+    accountId;
+    iam;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may create the named CloudFront Function.
+     */
+    authorize(functionName, caller) {
+        const resource = `arn:aws:cloudfront::${this.accountId}:function/${functionName}`;
+        const decision = this.iam.authorize({
+            action: CreateFunctionAuthorizer.action,
+            resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: CreateFunctionAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=create-function-authorizer.js.map

package/dist/service/cloudfront/command/create-function/create-function-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-function-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQzE;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAC3B,MAAM,CAAU,MAAM,GAAG,2BAA2B,CAAC;IAE5C,SAAS,CAAkB;IAC3B,GAAG,CAA0B;IAE9C,YAAY,UAA8C;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAgD,EAChD,MAAqB;QAErB,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,SAAS,aAAa,YAAY,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,wBAAwB,CAAC,MAAM;YACvC,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,wBAAwB,CAAC,MAAM;gBACvC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/create-function/create-function.handler.d.ts

@@ -3,12 +3,18 @@ import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from ".
 import { SimCloudFrontFunction, type SimCloudFrontFunctionName } from "../../cff/sim-cloudfront-function.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 export type SimCloudFrontFunctionMap = Map<SimCloudFrontFunctionName, SimCloudFrontFunction>;
-interface CreateFunctionCommandHandlerProps {
+interface CreateFunctionCommandHandlerProperties {
     accountId: SimAwsAccountId;
     cloudFrontFunctions?: SimCloudFrontFunctionMap;
+    iam?: SimIamInterServiceAuthZ;
     background?: BackgroundScheduler;
 }
+interface CreateFunctionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
 /**
  * Simulated CloudFront CreateFunctionCommand handler.
  *
@@ -17,12 +23,13 @@ interface CreateFunctionCommandHandlerProps {
 export declare class CreateFunctionCommandHandler implements CommandHandler<SimCreateFunctionCommand, SimCreateFunctionCommandOutput> {
     private readonly accountId;
     private readonly cloudFrontFunctions;
+    private readonly authorizer;
     private readonly background;
-    constructor(props: CreateFunctionCommandHandlerProps);
+    constructor(properties: CreateFunctionCommandHandlerProperties);
     /**
      * Create a sim CloudFront Function.
      */
-    handle(cmd: SimCreateFunctionCommand): Promise<SimCreateFunctionCommandOutput>;
+    handle(command: SimCreateFunctionCommand, options?: CreateFunctionCommandHandlerOptions): Promise<SimCreateFunctionCommandOutput>;
 }
 export {};
 //# sourceMappingURL=create-function.handler.d.ts.map

package/dist/service/cloudfront/command/create-function/create-function.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-function.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,qBAAqB,EACrB,KAAK,yBAAyB,EAC/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,MAAM,wBAAwB,GAAG,GAAG,CACxC,yBAAyB,EACzB,qBAAqB,CACtB,CAAC;AAEF,UAAU,iCAAiC;IACzC,SAAS,EAAE,eAAe,CAAC;IAC3B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,cAAc,CACjE,wBAAwB,EACxB,8BAA8B,CAC/B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,iCAAiC,EASnD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,8BAA8B,CAAC,CAkCzC;CACF"}
+{"version":3,"file":"create-function.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,qBAAqB,EACrB,KAAK,yBAAyB,EAC/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,MAAM,MAAM,wBAAwB,GAAG,GAAG,CACxC,yBAAyB,EACzB,qBAAqB,CACtB,CAAC;AAEF,UAAU,sCAAsC;IAC9C,SAAS,EAAE,eAAe,CAAC;IAC3B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,cAAc,CACjE,wBAAwB,EACxB,8BAA8B,CAC/B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2B;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,sCAAsC,EAc7D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,mCAAmC,GAC5C,OAAO,CAAC,8BAA8B,CAAC,CAqCzC;CACF"}

package/dist/service/cloudfront/command/create-function/create-function.handler.js

@@ -2,6 +2,8 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCloudFrontFunction, } from "../../cff/sim-cloudfront-function.js";
 import { CffUint8ArrayFunctionCodeExtractor } from "../../cff/function-code-input/cff-function-code-input.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { CreateFunctionAuthorizer } from "./create-function-authorizer.js";
 /**
  * Simulated CloudFront CreateFunctionCommand handler.
  *
@@ -10,24 +12,31 @@ import { BackgroundTasks, } from "../../../../util/background/background.js";
 export class CreateFunctionCommandHandler {
     accountId;
     cloudFrontFunctions;
+    authorizer;
     background;
-    constructor(props) {
-        const { accountId, cloudFrontFunctions = new Map(), background = new BackgroundTasks(), } = props;
+    constructor(properties) {
+        const { accountId, cloudFrontFunctions = new Map(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
         this.accountId = accountId;
         this.cloudFrontFunctions = cloudFrontFunctions;
+        this.authorizer = new CreateFunctionAuthorizer({
+            accountId,
+            iam,
+        });
         this.background = background;
     }
     /**
      * Create a sim CloudFront Function.
      */
-    async handle(cmd) {
-        assertDefined(cmd.input.Name, "CreateFunctionCommand.input.Name");
-        assertDefined(cmd.input.FunctionCode, "CreateFunctionCommand.input.FunctionCode");
+    async handle(command, options) {
+        assertDefined(command.input.Name, "CreateFunctionCommand.input.Name");
+        assertDefined(command.input.FunctionCode, "CreateFunctionCommand.input.FunctionCode");
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
-        const handlerFunction = new CffUint8ArrayFunctionCodeExtractor(cmd.input.FunctionCode).extractHandlerFunction();
+        this.authorizer.authorize(command.input.Name, options?.caller);
+        const extractor = new CffUint8ArrayFunctionCodeExtractor(command.input.FunctionCode);
+        const handlerFunction = extractor.extractHandlerFunction();
         const simCff = new SimCloudFrontFunction({
-            name: cmd.input.Name,
+            name: command.input.Name,
             accountId: this.accountId,
             handlerFunction,
         });

package/dist/service/cloudfront/command/create-function/create-function.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-function.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function.handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,qBAAqB,GAEtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,kCAAkC,EAAE,MAAM,0DAA0D,CAAC;AAC9G,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAcnD;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IAItB,SAAS,CAAkB;IAC3B,mBAAmB,CAA2B;IAC9C,UAAU,CAAsB;IAEjD,YAAY,KAAwC;QAClD,MAAM,EACJ,SAAS,EACT,mBAAmB,GAAG,IAAI,GAAG,EAA8B,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA6B;QAE7B,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAClE,aAAa,CACX,GAAG,CAAC,KAAK,CAAC,YAAY,EACtB,0CAA0C,CAC3C,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,eAAe,GAAG,IAAI,kCAAkC,CAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,CACvB,CAAC,sBAAsB,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;YACvC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAElD,iDAAiD;QACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAEjD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;YACD,gBAAgB,EAAE;gBAChB,WAAW,EAAE,MAAM,CAAC,GAAG;aACxB;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"create-function.handler.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function.handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EACL,qBAAqB,GAEtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,kCAAkC,EAAE,MAAM,0DAA0D,CAAC;AAC9G,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAkB3E;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IAItB,SAAS,CAAkB;IAC3B,mBAAmB,CAA2B;IAC9C,UAAU,CAA2B;IACrC,UAAU,CAAsB;IAEjD,YAAY,UAAkD;QAC5D,MAAM,EACJ,SAAS,EACT,mBAAmB,GAAG,IAAI,GAAG,EAA8B,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,wBAAwB,CAAC;YAC7C,SAAS;YACT,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAiC,EACjC,OAA6C;QAE7C,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACtE,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,0CAA0C,CAC3C,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE/D,MAAM,SAAS,GAAG,IAAI,kCAAkC,CACtD,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QACF,MAAM,eAAe,GAAG,SAAS,CAAC,sBAAsB,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;YACvC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAElD,iDAAiD;QACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAEjD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;YACD,gBAAgB,EAAE;gBAChB,WAAW,EAAE,MAAM,CAAC,GAAG;aACxB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/command/get-distribution/get-distribution-authorizer.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimCloudFrontDistributionId } from "../../distribution/sim-cloudfront-distribution.js";
+interface GetDistributionAuthorizerProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to a CloudFront GetDistribution request.
+ *
+ * Authorization is performed against the requested Distribution ARN before the
+ * Distribution map is inspected, preventing unauthorized callers from learning
+ * whether a Distribution ID exists.
+ */
+export declare class GetDistributionAuthorizer {
+    private static readonly action;
+    private readonly accountId;
+    private readonly iam;
+    constructor(properties: GetDistributionAuthorizerProperties);
+    /**
+     * Ensure the caller may retrieve the named CloudFront Distribution.
+     */
+    authorize(distributionId: SimCloudFrontDistributionId | string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=get-distribution-authorizer.d.ts.map

package/dist/service/cloudfront/command/get-distribution/get-distribution-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-distribution-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAErG,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAgC;IAE9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,SAAS,CACP,cAAc,EAAE,2BAA2B,GAAG,MAAM,EACpD,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAeN;CACF"}

package/dist/service/cloudfront/command/get-distribution/get-distribution-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * Applies IAM authorization to a CloudFront GetDistribution request.
+ *
+ * Authorization is performed against the requested Distribution ARN before the
+ * Distribution map is inspected, preventing unauthorized callers from learning
+ * whether a Distribution ID exists.
+ */
+export class GetDistributionAuthorizer {
+    static action = "cloudfront:GetDistribution";
+    accountId;
+    iam;
+    constructor(properties) {
+        this.accountId = properties.accountId;
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may retrieve the named CloudFront Distribution.
+     */
+    authorize(distributionId, caller) {
+        const resource = `arn:aws:cloudfront::${this.accountId}:distribution/${distributionId}`;
+        const decision = this.iam.authorize({
+            action: GetDistributionAuthorizer.action,
+            resource,
+            caller,
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action: GetDistributionAuthorizer.action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=get-distribution-authorizer.js.map

package/dist/service/cloudfront/command/get-distribution/get-distribution-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-distribution-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAQzE;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IAC5B,MAAM,CAAU,MAAM,GAAG,4BAA4B,CAAC;IAE7C,SAAS,CAAkB;IAC3B,GAAG,CAA0B;IAE9C,YAAY,UAA+C;QACzD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CACP,cAAoD,EACpD,MAAqB;QAErB,MAAM,QAAQ,GAAG,uBAAuB,IAAI,CAAC,SAAS,iBAAiB,cAAc,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,yBAAyB,CAAC,MAAM;YACxC,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,yBAAyB,CAAC,MAAM;gBACxC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/command/get-distribution/get-distribution.handler.d.ts

@@ -2,10 +2,18 @@ import type { SimGetDistributionCommand, SimGetDistributionCommandOutput } from
 import type { CommandHandler } from "../../../../command/command-handler.js";
 import type { SimCloudFrontDistribution, SimCloudFrontDistributionId } from "../../distribution/sim-cloudfront-distribution.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
-interface GetDistributionCommandHandlerProps {
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+interface GetDistributionCommandHandlerProperties {
+    readonly accountId: SimAwsAccountId;
     readonly distributions: Map<SimCloudFrontDistributionId, SimCloudFrontDistribution>;
+    readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
+interface GetDistributionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
 /**
  * CloudFront GetDistributionCommand handler.
  *
@@ -13,12 +21,13 @@ interface GetDistributionCommandHandlerProps {
  */
 export declare class GetDistributionCommandHandler implements CommandHandler<SimGetDistributionCommand, SimGetDistributionCommandOutput> {
     private readonly distributions;
+    private readonly authorizer;
     private readonly background;
-    constructor(props: GetDistributionCommandHandlerProps);
+    constructor(properties: GetDistributionCommandHandlerProperties);
     /**
      * Handle getting a CloudFront Distribution.
      */
-    handle(cmd: SimGetDistributionCommand): Promise<SimGetDistributionCommandOutput>;
+    handle(command: SimGetDistributionCommand, options?: GetDistributionCommandHandlerOptions): Promise<SimGetDistributionCommandOutput>;
 }
 export {};
 //# sourceMappingURL=get-distribution.handler.d.ts.map

package/dist/service/cloudfront/command/get-distribution/get-distribution.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAGnD,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,kCAAkC,EAIpD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,+BAA+B,CAAC,CA0B1C;CACF"}
+{"version":3,"file":"get-distribution.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,mDAAmD,CAAC;AAE3D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,GAAG,CACzB,2BAA2B,EAC3B,yBAAyB,CAC1B,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,6BAA8B,YAAW,cAAc,CAClE,yBAAyB,EACzB,+BAA+B,CAChC;IACC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,uCAAuC,EAa9D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE,oCAAoC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CA4B1C;CACF"}