@kensio/yulin 0.32.0 → 0.34.0

package/dist/service/iam/sim-iam.js

@@ -1,127 +1,165 @@
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
-import { CreatePolicyCommandHandler } from "./command/policy/create-policy/create-policy.handler.js";
-import { GetPolicyCommandHandler } from "./command/policy/get-policy/get-policy.handler.js";
-import { ListPoliciesCommandHandler } from "./command/policy/list-policies/list-policies.handler.js";
 import { BackgroundTasks, } from "../../util/background/background.js";
-import { SimIamRegistry } from "./registry/sim-iam-registry.js";
-import { CreateRoleCommandHandler } from "./command/role/create-role/create-role.handler.js";
-import { GetRoleCommandHandler } from "./command/role/get-role/get-role.handler.js";
-import { ListRolesCommandHandler } from "./command/role/list-roles/list-roles.handler.js";
-import { SimIamAuthorizer } from "./authorize/sim-iam-authorizer.js";
-import { PutRolePolicyCommandHandler } from "./command/policy/put-role-policy/put-role-policy.handler.js";
-import { makeSimAwsAccountRootPrincipal } from "../aws/caller/sim-aws-account-root-principal.js";
+import { SimIamRoleCommandHandlers } from "./command/role/sim-iam-role-command-handlers.js";
+import { SimIamCredentialRegistry } from "./credential/sim-iam-credential-registry.js";
+import { SimIamRandomSessionCredentialGenerator, } from "./credential/session/sim-iam-session-cred-gen.js";
+import { SimIamSessionManager } from "./credential/session/sim-iam-session-manager.js";
+import { SimIamRandomUserCredentialGenerator, } from "./credential/user/sim-iam-user-credential-generator.js";
+import { SimIamUserCommandHandlers } from "./command/user/sim-iam-user-command-handlers.js";
+import { SimIamPolicyCommandHandlers } from "./command/policy/sim-iam-policy-command-handlers.js";
+import { SimIamActionAuthorizer } from "./authorize/sim-iam-action-authorizer.js";
+import { SimIamAccountAuthZ } from "./authorize/sim-iam-account-auth-z.js";
+import { SimIamCloudFormationResourceFactory } from "./cfn/sim-cfn-iam-resource-factory.js";
+import { SimIamSdkCommandRouter } from "./sdk/sim-iam-sdk-command-router.js";
 /**
- * Simulated IAM. Handles SDK commands. Emulates AWS behaviour and state.
+ * Simulated IAM service facade. Handles SDK commands. Emulates AWS behaviour
+ * and state.
  *
  * IAM is account-scoped in AWS. Yulin constructs it from an Account/Region
  * scope for consistency with the other service factories, but memoises one
  * service facade per Account.
  */
 export class SimIam {
+    /**
+     * Manage temporary sessions belonging to this simulated IAM Account.
+     */
+    sessionManager;
+    credentials;
     policies = new Map();
     roles = new Map();
-    accountRegionScope;
+    users = new Map();
     background;
-    iamRegistry;
-    constructor(props = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), iamRegistry = new SimIamRegistry(), } = props;
-        this.accountRegionScope = accountRegionScope;
+    cfnFactory;
+    roleCommands;
+    userCommands;
+    policyCommands;
+    accountAuthZ;
+    sdkRouter = new SimIamSdkCommandRouter(this);
+    constructor(properties = {}) {
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), credentialRegistry = new SimIamCredentialRegistry(), sessionCredentialGenerator = new SimIamRandomSessionCredentialGenerator(), userCredentialGenerator = new SimIamRandomUserCredentialGenerator(), } = properties;
         this.background = background;
-        this.iamRegistry = iamRegistry;
+        this.credentials = credentialRegistry;
+        this.sessionManager = new SimIamSessionManager({
+            accountId: accountRegionScope.accountId,
+            roles: this.roles,
+            credentialRegistry,
+            credentialGenerator: sessionCredentialGenerator,
+        });
+        this.cfnFactory = new SimIamCloudFormationResourceFactory(this);
+        this.accountAuthZ = new SimIamAccountAuthZ({
+            accountId: accountRegionScope.accountId,
+            policies: this.policies,
+            roles: this.roles,
+            users: this.users,
+            credentialIdentityResolver: credentialRegistry,
+        });
+        const authorizer = new SimIamActionAuthorizer({ iam: this });
+        this.roleCommands = new SimIamRoleCommandHandlers({
+            accountId: accountRegionScope.accountId,
+            roles: this.roles,
+            background: this.background,
+            authorizer,
+        });
+        this.userCommands = new SimIamUserCommandHandlers({
+            accountId: accountRegionScope.accountId,
+            users: this.users,
+            credentialRegistry,
+            credentialGenerator: userCredentialGenerator,
+            background: this.background,
+            authorizer,
+        });
+        this.policyCommands = new SimIamPolicyCommandHandlers({
+            accountId: accountRegionScope.accountId,
+            policies: this.policies,
+            users: this.users,
+            background: this.background,
+            authorizer,
+        });
     }
     /**
      * Evaluate an IAM authorization attempt against policies relevant to the
-     * request caller.
-     *
-     * If the caller is omitted, authorization defaults to the root principal of
-     * the sim Account owning this sim IAM instance. An explicit anonymous caller
-     * suppresses that fallback and is evaluated without identity policies.
+     * request caller. An omitted caller defaults to the Account root principal.
      */
     authorize(input) {
-        return new SimIamAuthorizer({
-            policies: this.policies,
-            roles: this.roles,
-            defaultCallerPrincipal: makeSimAwsAccountRootPrincipal(this.accountRegionScope.accountId),
-        }).authorize(input);
+        return this.accountAuthZ.authorize(input);
     }
     /**
      * Handle a Create Policy Command from the SDK.
      */
-    async createPolicy(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "CreatePolicy");
-        const handler = new CreatePolicyCommandHandler({
-            accountId: this.accountRegionScope.accountId,
-            policies: this.policies,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async createPolicy(command, options) {
+        return await this.policyCommands.createPolicy(command, options);
     }
     /**
      * Handle a Get Policy Command from the SDK.
      */
-    async getPolicy(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "GetPolicy");
-        const handler = new GetPolicyCommandHandler({
-            policies: this.policies,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async getPolicy(command, options) {
+        return await this.policyCommands.getPolicy(command, options);
     }
     /**
      * Handle a List Policies Command from the SDK.
      */
-    async listPolicies(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "ListPolicies");
-        const handler = new ListPoliciesCommandHandler({
-            policies: this.policies,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async listPolicies(command, options) {
+        return await this.policyCommands.listPolicies(command, options);
     }
     /**
      * Handle a Put Role Policy Command from the SDK.
      */
-    async putRolePolicy(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "PutRolePolicy");
-        const handler = new PutRolePolicyCommandHandler({
-            roles: this.roles,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async putRolePolicy(command, options) {
+        return await this.roleCommands.putRolePolicy(command, options);
+    }
+    /**
+     * Handle an IAM PutUserPolicy command.
+     */
+    async putUserPolicy(command, options) {
+        return await this.policyCommands.putUserPolicy(command, options);
     }
     /**
      * Handle a Create Role Command from the SDK.
      */
-    async createRole(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "CreateRole");
-        const handler = new CreateRoleCommandHandler({
-            accountId: this.accountRegionScope.accountId,
-            roles: this.roles,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async createRole(command, options) {
+        return await this.roleCommands.createRole(command, options);
+    }
+    /**
+     * Handle an Attach Role Policy Command from the SDK.
+     */
+    async attachRolePolicy(command, options) {
+        return await this.roleCommands.attachRolePolicy(command, options);
     }
     /**
      * Handle a Get Role Command from the SDK.
      */
-    async getRole(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "GetRole");
-        const handler = new GetRoleCommandHandler({
-            roles: this.roles,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async getRole(command, options) {
+        return await this.roleCommands.getRole(command, options);
     }
     /**
      * Handle a List Roles Command from the SDK.
      */
-    async listRoles(cmd) {
-        this.iamRegistry.activate("IAM SDK API", "ListRoles");
-        const handler = new ListRolesCommandHandler({
-            roles: this.roles,
-            background: this.background,
-        });
-        return await handler.handle(cmd);
+    async listRoles(command, options) {
+        return await this.roleCommands.listRoles(command, options);
+    }
+    /**
+     * Handle an IAM CreateUser command.
+     */
+    async createUser(command, options) {
+        return await this.userCommands.createUser(command, options);
+    }
+    /**
+     * Handle an IAM CreateAccessKey command.
+     */
+    async createAccessKey(command, options) {
+        return await this.userCommands.createAccessKey(command, options);
+    }
+    /**
+     * Get this service's CloudFormation Resource factory.
+     */
+    cfnResourceFactory() {
+        return this.cfnFactory;
+    }
+    /**
+     * Get this service's SDK Command router for SDK client interception.
+     */
+    sdkCommandRouter() {
+        return this.sdkRouter;
     }
 }
 //# sourceMappingURL=sim-iam.js.map

package/dist/service/iam/sim-iam.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam.js","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,yDAAyD,CAAC;AAMrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAS5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yDAAyD,CAAC;AACrG,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAKhE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAK7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAMpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAG1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAKrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AAQjG;;;;;;GAMG;AACH,MAAM,OAAO,MAAM;IACA,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAClD,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE9C,kBAAkB,CAA2B;IAC7C,UAAU,CAAsB;IAChC,WAAW,CAAiB;IAE7C,YAAY,KAAK,GAAgB,EAAE;QACjC,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,WAAW,GAAG,IAAI,cAAc,EAAE,GACnC,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,gBAAgB,CAAC;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,sBAAsB,EAAE,8BAA8B,CACpD,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAClC;SACF,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,GAA2B;QAE3B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;YAC7C,SAAS,EAAE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,GAAwB;QAExB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,GAA2B;QAE3B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,IAAI,0BAA0B,CAAC;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,GAA4B;QAE5B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAE1D,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,GAAyB;QAEzB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC3C,SAAS,EAAE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,GAAsB;QAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACxC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,GAAwB;QAExB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;CACF"}
+{"version":3,"file":"sim-iam.js","sourceRoot":"","sources":["../../../src/service/iam/sim-iam.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAcjG,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAc7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAW5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,sCAAsC,GAEvC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EACL,mCAAmC,GAEpC,MAAM,wDAAwD,CAAC;AAUhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAM3E,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAG5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAW7E;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IACjB;;OAEG;IACa,cAAc,CAAuB;IAErC,WAAW,CAA2B;IAEtC,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAClD,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7C,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE9C,UAAU,CAAsB;IAChC,UAAU,CAA+B;IACzC,YAAY,CAA4B;IACxC,YAAY,CAA4B;IACxC,cAAc,CAA8B;IAC5C,YAAY,CAAqB;IACjC,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,kBAAkB,GAAG,IAAI,wBAAwB,EAAE,EACnD,0BAA0B,GAAG,IAAI,sCAAsC,EAAE,EACzE,uBAAuB,GAAG,IAAI,mCAAmC,EAAE,GACpE,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC7C,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB;YAClB,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,mCAAmC,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC;YACzC,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,0BAA0B,EAAE,kBAAkB;SAC/C,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,GAAG,IAAI,yBAAyB,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,yBAAyB,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,kBAAkB;YAClB,mBAAmB,EAAE,uBAAuB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,IAAI,2BAA2B,CAAC;YACpD,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,OAA0B,EAC1B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAA6B,EAC7B,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAkC,EAClC,OAA8B;QAE9B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/iam/user/arn/sim-iam-user-arn.d.ts

@@ -0,0 +1,14 @@
+import type { SimArn } from "../../../aws/arn.js";
+import type { SimAwsAccountId } from "../../../aws/sim-aws-account.js";
+import type { SimIamUsername } from "../sim-iam-user.js";
+interface MakeSimUserArnProperties {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly userName: SimIamUsername;
+}
+/**
+ * Make an IAM user ARN.
+ */
+export declare function makeSimUserArn(properties: MakeSimUserArnProperties): SimArn;
+export {};
+//# sourceMappingURL=sim-iam-user-arn.d.ts.map

package/dist/service/iam/user/arn/sim-iam-user-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-user-arn.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/user/arn/sim-iam-user-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAI3E"}

package/dist/service/iam/user/arn/sim-iam-user-arn.js

@@ -0,0 +1,8 @@
+/**
+ * Make an IAM user ARN.
+ */
+export function makeSimUserArn(properties) {
+    const pathPart = properties.path === "/" ? "" : properties.path.slice(1);
+    return `arn:aws:iam::${properties.accountId}:user/${pathPart}${properties.userName}`;
+}
+//# sourceMappingURL=sim-iam-user-arn.js.map

package/dist/service/iam/user/arn/sim-iam-user-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-user-arn.js","sourceRoot":"","sources":["../../../../../src/service/iam/user/arn/sim-iam-user-arn.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,UAAoC;IACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,gBAAgB,UAAU,CAAC,SAAS,SAAS,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAY,CAAC;AACjG,CAAC"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnLambdaFunctionProperties } from "./sim-cfn-lambda-function-properties-parser.js";
+/**
+ * Skips functions whose code lives in a missing CDK bootstrap assets bucket.
+ *
+ * CDK-synthesized templates include helper functions, such as the CDK
+ * BucketDeployment provider, whose code zip lives in the CDK bootstrap assets
+ * bucket. That bucket does not exist in sim AWS, and sim CloudFormation
+ * simulates the CDK custom resources directly instead of running their
+ * provider functions. The "Unsupported sim ... CloudFormation" wording marks
+ * the Resource as skipped rather than failing the stack.
+ */
+export declare class SimCfnLambdaCdkAssetsSkip {
+    /**
+     * Map a creation failure to a skip error, when the failure was a code
+     * fetch from a CDK bootstrap assets bucket that does not exist in sim S3.
+     */
+    findSkipError(resource: SimCfnResource, functionProperties: SimCfnLambdaFunctionProperties, error: unknown): Error | undefined;
+    private isMissingCdkBootstrapAssetsBucket;
+}
+//# sourceMappingURL=sim-cfn-lambda-cdk-assets-skip.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAE3F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAQrG;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAQ,EAAE,cAAc,EACxB,kBAAkB,EAAE,8BAA8B,EAClD,KAAK,EAAE,OAAO,GACb,KAAK,GAAG,SAAS,CAWnB;IAED,OAAO,CAAC,iCAAiC;CAa1C"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.js

@@ -0,0 +1,37 @@
+import { SimLambdaInvalidParameterValueException } from "../../error/sim-lambda.error.js";
+/**
+ * CDK bootstrap assets buckets are named cdk-{qualifier}-assets-{account}-{region}.
+ */
+const cdkBootstrapAssetsBucketPattern = /^cdk-[a-z0-9]+-assets-\d{12}-[a-z0-9-]+$/u;
+/**
+ * Skips functions whose code lives in a missing CDK bootstrap assets bucket.
+ *
+ * CDK-synthesized templates include helper functions, such as the CDK
+ * BucketDeployment provider, whose code zip lives in the CDK bootstrap assets
+ * bucket. That bucket does not exist in sim AWS, and sim CloudFormation
+ * simulates the CDK custom resources directly instead of running their
+ * provider functions. The "Unsupported sim ... CloudFormation" wording marks
+ * the Resource as skipped rather than failing the stack.
+ */
+export class SimCfnLambdaCdkAssetsSkip {
+    /**
+     * Map a creation failure to a skip error, when the failure was a code
+     * fetch from a CDK bootstrap assets bucket that does not exist in sim S3.
+     */
+    findSkipError(resource, functionProperties, error) {
+        if (!this.isMissingCdkBootstrapAssetsBucket(functionProperties, error)) {
+            return undefined;
+        }
+        const bucketName = functionProperties.code?.S3Bucket ?? "";
+        return new Error(`Unsupported sim Lambda CloudFormation Resource ${resource.logicalId}: ` +
+            `function code from missing CDK bootstrap assets bucket ${bucketName}`);
+    }
+    isMissingCdkBootstrapAssetsBucket(functionProperties, error) {
+        const bucketName = functionProperties.code?.S3Bucket;
+        return (bucketName !== undefined &&
+            cdkBootstrapAssetsBucketPattern.test(bucketName) &&
+            error instanceof SimLambdaInvalidParameterValueException &&
+            error.message.includes("NoSuchBucket"));
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-cdk-assets-skip.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-cdk-assets-skip.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-cdk-assets-skip.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAG1F;;GAEG;AACH,MAAM,+BAA+B,GACnC,2CAA2C,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACpC;;;OAGG;IACH,aAAa,CACX,QAAwB,EACxB,kBAAkD,EAClD,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE3D,OAAO,IAAI,KAAK,CACd,kDAAkD,QAAQ,CAAC,SAAS,IAAI;YACtE,0DAA0D,UAAU,EAAE,CACzE,CAAC;IACJ,CAAC;IAEO,iCAAiC,CACvC,kBAAkD,EAClD,KAAc;QAEd,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAErD,OAAO,CACL,UAAU,KAAK,SAAS;YACxB,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC;YAChD,KAAK,YAAY,uCAAuC;YACxD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CACvC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnExecutableResourceBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.cmd.js";
+import type { SimCfnLambdaFunctionProperties } from "./sim-cfn-lambda-function-properties-parser.js";
+interface SimCfnLambdaCodeInputProperties {
+    readonly resource: SimCfnResource;
+    readonly functionProperties: SimCfnLambdaFunctionProperties;
+    readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
+}
+/**
+ * The CreateFunction code input for an AWS::Lambda::Function Resource: an
+ * executable binding's real handler when one targets the Resource, otherwise
+ * the template code.
+ *
+ * The bound handler rides the same stowaway Code.ZipFile input the SDK path
+ * uses, so execution-role attribution and invocation behave identically. A
+ * bound function may omit template Code and Handler entirely, as the binding
+ * replaces the code wholesale. Bindings can target the logical ID (or CDK
+ * construct ID), the resolved function name, or the function ARN.
+ */
+export declare function simCfnLambdaCodeInput(properties: SimCfnLambdaCodeInputProperties): SimLambdaFunctionCode | undefined;
+export {};
+//# sourceMappingURL=sim-cfn-lambda-code-input.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-code-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AAEjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAIlG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAErG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,+BAA+B,GAC1C,qBAAqB,GAAG,SAAS,CAoBnC"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.js

@@ -0,0 +1,30 @@
+import { SimCfnExecBindingFinder } from "../../../cloudformation/bind/validate/sim-cfn-exec-binding-finder.js";
+import { makeLambdaZipFileInput } from "../../function/code/lambda-zip-file-input.js";
+import { simLambdaFunctionArn } from "../../function/sim-lambda-function.js";
+/**
+ * The CreateFunction code input for an AWS::Lambda::Function Resource: an
+ * executable binding's real handler when one targets the Resource, otherwise
+ * the template code.
+ *
+ * The bound handler rides the same stowaway Code.ZipFile input the SDK path
+ * uses, so execution-role attribution and invocation behave identically. A
+ * bound function may omit template Code and Handler entirely, as the binding
+ * replaces the code wholesale. Bindings can target the logical ID (or CDK
+ * construct ID), the resolved function name, or the function ARN.
+ */
+export function simCfnLambdaCodeInput(properties) {
+    const { resource, functionProperties, bindings } = properties;
+    const bindingFinder = new SimCfnExecBindingFinder({
+        resource,
+        bindings,
+    });
+    const binding = bindingFinder.findBinding({
+        functionName: functionProperties.functionName,
+        arn: simLambdaFunctionArn(resource.accountRegionScope, functionProperties.functionName),
+    });
+    if (binding === undefined) {
+        return functionProperties.code;
+    }
+    return { ZipFile: makeLambdaZipFileInput(binding.handler) };
+}
+//# sourceMappingURL=sim-cfn-lambda-code-input.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-code-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-code-input.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-code-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAG/G,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAU7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA2C;IAE3C,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAE9D,MAAM,aAAa,GAAG,IAAI,uBAAuB,CAAmB;QAClE,QAAQ;QACR,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC;QACxC,YAAY,EAAE,kBAAkB,CAAC,YAAY;QAC7C,GAAG,EAAE,oBAAoB,CACvB,QAAQ,CAAC,kBAAkB,EAC3B,kBAAkB,CAAC,YAAY,CAChC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaFunctionCode } from "../../command/create-function/create-function.cmd.js";
+/**
+ * Parses the AWS::Lambda::Function Code property into sim Lambda
+ * CreateFunction code input.
+ *
+ * Template values are JSON, so an inline Code.ZipFile is a source string,
+ * which real CloudFormation packages as a single-module zip. The existing
+ * makeLambdaCodeZip models exactly that. S3-located code passes through
+ * as-is for the CreateFunction handler to fetch from sim S3.
+ */
+export declare class SimCfnLambdaFunctionCodeParser {
+    private readonly propertyParser;
+    /**
+     * Parse the Code property for an AWS::Lambda::Function.
+     */
+    parse(resource: SimCfnResource, value: SimCfnTemplateValue | undefined): SimLambdaFunctionCode | undefined;
+    private zipFileBytes;
+}
+//# sourceMappingURL=sim-cfn-lambda-function-code-parser.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-function-code-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAIlG;;;;;;;;GAQG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,qBAAqB,GAAG,SAAS,CA+BnC;IAED,OAAO,CAAC,YAAY;CAerB"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.js

@@ -0,0 +1,39 @@
+import { makeLambdaCodeZip } from "../../function/code/make-lambda-code-zip.js";
+import { SimCfnLambdaPropertyParser } from "./sim-cfn-lambda-property-parser.js";
+/**
+ * Parses the AWS::Lambda::Function Code property into sim Lambda
+ * CreateFunction code input.
+ *
+ * Template values are JSON, so an inline Code.ZipFile is a source string,
+ * which real CloudFormation packages as a single-module zip. The existing
+ * makeLambdaCodeZip models exactly that. S3-located code passes through
+ * as-is for the CreateFunction handler to fetch from sim S3.
+ */
+export class SimCfnLambdaFunctionCodeParser {
+    propertyParser = new SimCfnLambdaPropertyParser();
+    /**
+     * Parse the Code property for an AWS::Lambda::Function.
+     */
+    parse(resource, value) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            throw this.propertyParser.invalidPropertyError(resource, "Code", "an object");
+        }
+        return {
+            ZipFile: this.zipFileBytes(resource, value["ZipFile"]),
+            S3Bucket: this.propertyParser.optionalString(resource, value["S3Bucket"], "Code.S3Bucket"),
+            S3Key: this.propertyParser.optionalString(resource, value["S3Key"], "Code.S3Key"),
+            S3ObjectVersion: this.propertyParser.optionalString(resource, value["S3ObjectVersion"], "Code.S3ObjectVersion"),
+        };
+    }
+    zipFileBytes(resource, value) {
+        const zipFileSource = this.propertyParser.optionalString(resource, value, "Code.ZipFile");
+        if (zipFileSource === undefined) {
+            return undefined;
+        }
+        return makeLambdaCodeZip(zipFileSource);
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-function-code-parser.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-function-code-parser.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-code-parser.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEjF;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA8B;IACxB,cAAc,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAEnE;;OAEG;IACH,KAAK,CACH,QAAwB,EACxB,KAAsC;QAEtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,QAAQ,EACR,MAAM,EACN,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACtD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAC1C,QAAQ,EACR,KAAK,CAAC,UAAU,CAAC,EACjB,eAAe,CAChB;YACD,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACvC,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,EACd,YAAY,CACb;YACD,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CACjD,QAAQ,EACR,KAAK,CAAC,iBAAiB,CAAC,EACxB,sBAAsB,CACvB;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,QAAwB,EACxB,KAAsC;QAEtC,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CACtD,QAAQ,EACR,KAAK,EACL,cAAc,CACf,CAAC;QACF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnExecutableResourceBinding } from "../../../cloudformation/bind/sim-cfn-exec-binding.type.js";
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
+import type { SimLambda } from "../../sim-lambda.js";
+interface SimCfnLambdaFunctionCreatorProperties {
+    readonly lambda: SimLambda;
+}
+/**
+ * Creates simulated Lambda functions from CloudFormation Resources.
+ */
+export declare class SimCfnLambdaFunctionCreator {
+    private readonly lambda;
+    private readonly propertiesParser;
+    private readonly cdkAssetsSkip;
+    constructor(properties: SimCfnLambdaFunctionCreatorProperties);
+    /**
+     * Create a simulated Lambda function from an AWS::Lambda::Function Resource.
+     *
+     * When an executable binding targets this Resource, the binding's real
+     * in-process handler backs the function instead of the template code, so
+     * tests can step through their actual handler while still deploying it
+     * through CloudFormation.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord, bindings?: readonly SimCfnExecutableResourceBinding[]): Promise<SimLambdaFunction>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-lambda-function-creator.d.ts.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-function-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AACjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAElH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAQrD,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACY;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;OAOG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,EACrC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GACpD,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;CACF"}

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.js

@@ -0,0 +1,47 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimCfnLambdaCdkAssetsSkip } from "./sim-cfn-lambda-cdk-assets-skip.js";
+import { simCfnLambdaCodeInput } from "./sim-cfn-lambda-code-input.js";
+import { simCfnLambdaCreateFunctionInput, SimCfnLambdaFunctionPropertiesParser, } from "./sim-cfn-lambda-function-properties-parser.js";
+/**
+ * Creates simulated Lambda functions from CloudFormation Resources.
+ */
+export class SimCfnLambdaFunctionCreator {
+    lambda;
+    propertiesParser = new SimCfnLambdaFunctionPropertiesParser();
+    cdkAssetsSkip = new SimCfnLambdaCdkAssetsSkip();
+    constructor(properties) {
+        this.lambda = properties.lambda;
+    }
+    /**
+     * Create a simulated Lambda function from an AWS::Lambda::Function Resource.
+     *
+     * When an executable binding targets this Resource, the binding's real
+     * in-process handler backs the function instead of the template code, so
+     * tests can step through their actual handler while still deploying it
+     * through CloudFormation.
+     */
+    async create(resource, properties, bindings) {
+        const functionProperties = this.propertiesParser.parse(resource, properties);
+        const code = simCfnLambdaCodeInput({
+            resource,
+            functionProperties,
+            bindings,
+        });
+        try {
+            await this.lambda.createFunction({
+                input: simCfnLambdaCreateFunctionInput(functionProperties, code),
+            });
+        }
+        catch (error) {
+            const skipError = this.cdkAssetsSkip.findSkipError(resource, functionProperties, error);
+            if (skipError !== undefined) {
+                throw skipError;
+            }
+            throw error;
+        }
+        const simFunction = this.lambda.getSimFunctionByName(functionProperties.functionName);
+        assertDefined(simFunction, `Sim Lambda function ${functionProperties.functionName} after CloudFormation creation`);
+        return simFunction;
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-function-creator.js.map

package/dist/service/lambda/cfn/function/sim-cfn-lambda-function-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-function-creator.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/function/sim-cfn-lambda-function-creator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,GACrC,MAAM,gDAAgD,CAAC;AAMxD;;GAEG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAY;IAClB,gBAAgB,GAC/B,IAAI,oCAAoC,EAAE,CAAC;IAC5B,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC,EACrC,QAAqD;QAErD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CACpD,QAAQ,EACR,UAAU,CACX,CAAC;QACF,MAAM,IAAI,GAAG,qBAAqB,CAAC;YACjC,QAAQ;YACR,kBAAkB;YAClB,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC/B,KAAK,EAAE,+BAA+B,CAAC,kBAAkB,EAAE,IAAI,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAChD,QAAQ,EACR,kBAAkB,EAClB,KAAK,CACN,CAAC;YACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAClD,kBAAkB,CAAC,YAAY,CAChC,CAAC;QACF,aAAa,CACX,WAAW,EACX,uBAAuB,kBAAkB,CAAC,YAAY,gCAAgC,CACvF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}